@wrongstack/core 0.285.0 → 0.286.0

package/dist/storage/index.js

@@ -2137,6 +2137,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
   projectRoot;
   checkpointCas;
   isSessionInUse;
+  logger;
   /**
    * In-memory cache for load() results, keyed by session ID. The cache is
    * invalidated when the file's mtimeMs or size changes (indicating the
@@ -2162,6 +2163,18 @@ var DefaultSessionStore = class _DefaultSessionStore {
     this.events = opts.events;
     this.secretScrubber = opts.secretScrubber;
     this.isSessionInUse = opts.isSessionInUse;
+    this.logger = opts.logger;
+  }
+  /**
+   * Emit a structured warning. Uses the configured Logger when available;
+   * falls back to console.warn(JSON) so warnings are never silently dropped.
+   */
+  logWarn(msg, ctx) {
+    if (this.logger) {
+      this.logger.warn(msg, ctx);
+    } else {
+      console.warn(JSON.stringify({ ...ctx, message: msg, timestamp: (/* @__PURE__ */ new Date()).toISOString() }));
+    }
   }
   /**
    * Clear the load() cache. Useful for testing or when the caller knows
@@ -2263,12 +2276,10 @@ var DefaultSessionStore = class _DefaultSessionStore {
       this.emitWrite(id, file, "create", "success", Date.now() - t0);
       return writer;
     } catch (err) {
-      await handle.close().catch((e) => console.warn(JSON.stringify({
-        level: "warn",
-        event: "session_store.handle_close_failed",
-        message: e instanceof Error ? e.message : String(e),
-        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      })));
+      await handle.close().catch((e) => this.logWarn(
+        "Session handle close failed",
+        { event: "session_store.handle_close_failed", message: e instanceof Error ? e.message : String(e) }
+      ));
       this.emitError(id, file, "create", toErrorMessage(err), true);
       throw err;
     }
@@ -2399,12 +2410,10 @@ var DefaultSessionStore = class _DefaultSessionStore {
       this.emitWrite(id, file, "resume", "success", Date.now() - t0);
       return { writer, data: resumedData };
     } catch (err) {
-      await handle.close().catch((e) => console.warn(JSON.stringify({
-        level: "warn",
-        event: "session_store.handle_close_failed",
-        message: e instanceof Error ? e.message : String(e),
-        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      })));
+      await handle.close().catch((e) => this.logWarn(
+        "Session handle close failed",
+        { event: "session_store.handle_close_failed", message: e instanceof Error ? e.message : String(e) }
+      ));
       this.emitError(id, file, "resume", toErrorMessage(err), true);
       throw err;
     }
@@ -3025,13 +3034,10 @@ var DefaultSessionStore = class _DefaultSessionStore {
       await atomicWrite(manifest, JSON.stringify(summary), { mode: 384 }).catch((err) => {
         const msg = toErrorMessage(err);
         this.emitError(id, manifest, "summary_fallback", msg, true);
-        console.warn(JSON.stringify({
-          level: "warn",
-          event: "session_store.manifest_write_failed",
-          sessionId: id,
-          message: msg,
-          timestamp: (/* @__PURE__ */ new Date()).toISOString()
-        }));
+        this.logWarn(
+          "Session manifest write failed",
+          { event: "session_store.manifest_write_failed", sessionId: id, message: msg }
+        );
       });
       outcome = "failure";
       errorMsg = "summary fallback \xE2\u20AC\u201D manifest rebuilt";
@@ -3393,10 +3399,19 @@ var QueueStore = class {
   // reject assigning an optional constructor parameter to these fields.
   events;
   traceId;
+  logger;
   constructor(opts) {
     this.file = path8.join(opts.dir, "queue.json");
     this.events = opts.events;
     this.traceId = opts.traceId;
+    this.logger = opts.logger;
+  }
+  logWarn(msg, ctx) {
+    if (this.logger) {
+      this.logger.warn(msg, ctx);
+    } else {
+      console.warn(JSON.stringify({ ...ctx, message: msg, timestamp: (/* @__PURE__ */ new Date()).toISOString() }));
+    }
   }
   async write(items) {
     const t0 = Date.now();
@@ -3426,13 +3441,7 @@ var QueueStore = class {
         recoverable: false,
         ...this.traceId !== void 0 && { traceId: this.traceId }
       });
-      console.warn(JSON.stringify({
-        level: "warn",
-        event: "queue_store.write_failed",
-        path: this.file,
-        message: toErrorMessage(err),
-        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      }));
+      this.logWarn("Queue store write failed", { event: "queue_store.write_failed", path: this.file, message: toErrorMessage(err) });
     }
   }
   async read() {
@@ -3464,13 +3473,7 @@ var QueueStore = class {
         recoverable: true,
         ...this.traceId !== void 0 && { traceId: this.traceId }
       });
-      console.warn(JSON.stringify({
-        level: "warn",
-        event: "queue_store.read_failed",
-        path: this.file,
-        message: toErrorMessage(err),
-        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      }));
+      this.logWarn("Queue store read failed", { event: "queue_store.read_failed", path: this.file, message: toErrorMessage(err) });
       return [];
     }
     let parsed;
@@ -3543,13 +3546,7 @@ var QueueStore = class {
         recoverable: true,
         ...this.traceId !== void 0 && { traceId: this.traceId }
       });
-      console.warn(JSON.stringify({
-        level: "warn",
-        event: "queue_store.clear_failed",
-        path: this.file,
-        message: err.message,
-        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      }));
+      this.logWarn("Queue store clear failed", { event: "queue_store.clear_failed", path: this.file, message: err.message });
     }
   }
 };
@@ -5696,6 +5693,10 @@ var KNOWN_DENIED_IN_PROJECT = [
     key: "fleet",
     reason: "Fleet supervision knobs: a repo-committed config could enable autonomous subagent spawning/steering/termination and mailbox traffic on the victim machine."
   },
+  {
+    key: "brain",
+    reason: "Brain decision-layer knobs: a repo-committed config could raise the autonomy risk ceiling, switch the Brain to headless (removing the human tier), or reroute Brain decisions to an attacker-chosen provider/model."
+  },
   {
     key: "git",
     reason: "Carries git.identity (GIT_AUTHOR_*/GIT_COMMITTER_* injection): a repo-committed config could spoof the author identity written into the victim's commit history (impersonation)."
@@ -5744,6 +5745,7 @@ var KNOWN_CONFIG_TOP_LEVEL_KEYS = /* @__PURE__ */ new Set([
   "extensions",
   "acp",
   "fleet",
+  "brain",
   "git"
 ]);
 function assertInProjectAllowListComplete() {
@@ -5895,6 +5897,7 @@ var DefaultConfigLoader = class {
   extraSources;
   events;
   traceId;
+  logger;
   jsonCache = /* @__PURE__ */ new Map();
   constructor(opts) {
     this.paths = opts.paths;
@@ -5903,6 +5906,19 @@ var DefaultConfigLoader = class {
     this.extraSources = opts.sources ?? [];
     this.events = opts.events;
     this.traceId = opts.traceId;
+    this.logger = opts.logger;
+  }
+  /**
+   * Emit a structured warning. Uses the configured Logger when available;
+   * falls back to console.warn(JSON) so warnings are never silently dropped
+   * during early boot (before a Logger is constructed).
+   */
+  logWarn(msg, ctx) {
+    if (this.logger) {
+      this.logger.warn(msg, ctx);
+    } else {
+      console.warn(JSON.stringify({ ...ctx, message: msg, timestamp: (/* @__PURE__ */ new Date()).toISOString() }));
+    }
   }
   async load(opts = {}) {
     let cfg = { ...BEHAVIOR_DEFAULTS };
@@ -5915,7 +5931,14 @@ var DefaultConfigLoader = class {
     ]);
     cfg = deepMerge2(cfg, global);
     cfg = deepMerge2(cfg, local);
-    cfg = deepMerge2(cfg, stripUnsafeInProjectFields(inProject, this.paths.inProjectConfig));
+    cfg = deepMerge2(
+      cfg,
+      stripUnsafeInProjectFields(
+        inProject,
+        this.paths.inProjectConfig,
+        this.logger ? (msg) => this.logger.warn(msg) : void 0
+      )
+    );
     for (const [key, fn] of Object.entries(ENV_MAP)) {
       const v = process.env[key];
       if (v) fn(cfg, v);
@@ -5932,14 +5955,9 @@ var DefaultConfigLoader = class {
           cfg = deepMerge2(cfg, patch);
         }
       } catch (err) {
-        console.warn(
-          JSON.stringify({
-            level: "warn",
-            event: "config.source_load_failed",
-            source: src.name,
-            message: toErrorMessage(err),
-            timestamp: (/* @__PURE__ */ new Date()).toISOString()
-          })
+        this.logWarn(
+          "Config source load failed",
+          { event: "config.source_load_failed", source: src.name, message: toErrorMessage(err) }
         );
       }
     }
@@ -5999,14 +6017,9 @@ var DefaultConfigLoader = class {
               durationMs: Date.now() - t0,
               ...this.traceId !== void 0 ? { traceId: this.traceId } : {}
             });
-            console.warn(
-              JSON.stringify({
-                level: "warn",
-                event: "config.defaults_read_failed",
-                path: fp,
-                message: toErrorMessage(err),
-                timestamp: (/* @__PURE__ */ new Date()).toISOString()
-              })
+            this.logWarn(
+              "Config defaults read failed",
+              { event: "config.defaults_read_failed", path: fp, message: toErrorMessage(err) }
             );
             return;
           }
@@ -6040,14 +6053,9 @@ var DefaultConfigLoader = class {
         durationMs: Date.now() - t0,
         ...this.traceId !== void 0 ? { traceId: this.traceId } : {}
       });
-      console.warn(
-        JSON.stringify({
-          level: "warn",
-          event: "config.defaults_write_failed",
-          path: fp,
-          message: toErrorMessage(err),
-          timestamp: (/* @__PURE__ */ new Date()).toISOString()
-        })
+      this.logWarn(
+        "Config defaults write failed",
+        { event: "config.defaults_write_failed", path: fp, message: toErrorMessage(err) }
       );
     }
   }
@@ -6150,13 +6158,9 @@ var DefaultConfigLoader = class {
         error: storageErrorString(err),
         ...this.traceId !== void 0 ? { traceId: this.traceId } : {}
       });
-      console.warn(
-        JSON.stringify({
-          level: "warn",
-          event: "config.sync_load_failed",
-          message: toErrorMessage(err),
-          timestamp: (/* @__PURE__ */ new Date()).toISOString()
-        })
+      this.logWarn(
+        "Config sync load failed",
+        { event: "config.sync_load_failed", message: toErrorMessage(err) }
       );
       return null;
     }
@@ -6186,14 +6190,9 @@ var DefaultConfigLoader = class {
         error: storageErrorString(err),
         ...this.traceId !== void 0 ? { traceId: this.traceId } : {}
       });
-      console.warn(
-        JSON.stringify({
-          level: "warn",
-          event: "config.read_failed",
-          path: file,
-          message: toErrorMessage(err),
-          timestamp: (/* @__PURE__ */ new Date()).toISOString()
-        })
+      this.logWarn(
+        "Config read failed (stat)",
+        { event: "config.read_failed", path: file, message: toErrorMessage(err) }
       );
       return {};
     }
@@ -6212,14 +6211,9 @@ var DefaultConfigLoader = class {
           error: storageErrorString(err),
           ...this.traceId !== void 0 ? { traceId: this.traceId } : {}
         });
-        console.warn(
-          JSON.stringify({
-            level: "warn",
-            event: "config.read_failed",
-            path: file,
-            message: toErrorMessage(err),
-            timestamp: (/* @__PURE__ */ new Date()).toISOString()
-          })
+        this.logWarn(
+          "Config read failed (read)",
+          { event: "config.read_failed", path: file, message: toErrorMessage(err) }
         );
       }
       this.jsonCache.set(file, { mtimeMs: null, value: {} });
@@ -6237,14 +6231,9 @@ var DefaultConfigLoader = class {
         error: "parse error or empty file",
         ...this.traceId !== void 0 ? { traceId: this.traceId } : {}
       });
-      console.warn(
-        JSON.stringify({
-          level: "warn",
-          event: "config.parse_failed",
-          path: file,
-          message: "invalid JSON \u2014 falling back to defaults for this layer",
-          timestamp: (/* @__PURE__ */ new Date()).toISOString()
-        })
+      this.logWarn(
+        "Config parse failed \u2014 falling back to defaults",
+        { event: "config.parse_failed", path: file }
       );
       return {};
     }
@@ -6291,8 +6280,9 @@ var DefaultConfigLoader = class {
     }
     if (c.mode !== void 0 && !isContextWindowModeId(c.mode)) {
       const known = listContextWindowModes().map((m) => m.id).join(", ");
-      console.warn(
-        `[config] Ignoring unknown context.mode "${c.mode}" (expected one of: ${known}); falling back to "${DEFAULT_CONTEXT_WINDOW_MODE_ID}".`
+      this.logWarn(
+        `Ignoring unknown context.mode "${c.mode}" \u2014 falling back to "${DEFAULT_CONTEXT_WINDOW_MODE_ID}"`,
+        { event: "config.unknown_context_mode", mode: c.mode, known }
       );
       c.mode = DEFAULT_CONTEXT_WINDOW_MODE_ID;
     }
@@ -8212,7 +8202,8 @@ var REGISTRY_FILE = "session-registry.json";
 var HEARTBEAT_INTERVAL_MS = 5e3;
 var STALE_TIMEOUT_MS = 3e4;
 var CLOSING_GRACE_MS = 15e3;
-var LOST_GRACE_MS = 3e5;
+var LOST_GRACE_MS = 3e4;
+var AGENT_STALE_MS = 5 * 6e4;
 var STALE_LOCK_MS = 1e4;
 var STALE_TMP_MS = 6e4;
 var MAX_STALE_TMP_FILES = 20;
@@ -8406,31 +8397,38 @@ var SessionRegistry = class {
       const now = Date.now();
       let pruned = false;
       for (const [id, entry] of Object.entries(registry)) {
-        const heartbeatAge = now - new Date(entry.lastHeartbeatAt).getTime();
+        const heartbeatAt = Date.parse(entry.lastHeartbeatAt);
+        if (!Number.isFinite(heartbeatAt)) {
+          delete registry[id];
+          pruned = true;
+          continue;
+        }
+        const heartbeatAge = now - heartbeatAt;
+        const agents = Array.isArray(entry.agents) ? entry.agents : [];
+        const liveAgents = agents.filter((agent) => {
+          if (agent.id === "leader") return true;
+          const lastActivityAt = Date.parse(agent.lastActivityAt);
+          return Number.isFinite(lastActivityAt) && now - lastActivityAt <= AGENT_STALE_MS;
+        });
+        if (liveAgents.length !== agents.length || entry.agentCount !== liveAgents.length) {
+          entry.agents = liveAgents;
+          entry.agentCount = liveAgents.length;
+          pruned = true;
+        }
         if (entry.status === "closing" && heartbeatAge > CLOSING_GRACE_MS) {
           delete registry[id];
           pruned = true;
           continue;
         }
-        if (heartbeatAge > STALE_TIMEOUT_MS) {
-          const alive = pidAlive(entry.pid);
-          if (alive) {
-            if (entry.status !== "lost" && entry.status !== "closing" && entry.status !== "stale") {
-              entry.status = "lost";
-              pruned = true;
-            }
-            if (entry.status === "lost" && heartbeatAge > STALE_TIMEOUT_MS + LOST_GRACE_MS) {
-              delete registry[id];
-              pruned = true;
-            }
-          } else {
-            entry.status = "stale";
-            const startedAge = now - new Date(entry.startedAt).getTime();
-            if (startedAge > 5 * 6e4) {
-              delete registry[id];
-              pruned = true;
-            }
-          }
+        if (heartbeatAge <= STALE_TIMEOUT_MS) continue;
+        if (!pidAlive(entry.pid) || heartbeatAge > STALE_TIMEOUT_MS + LOST_GRACE_MS) {
+          delete registry[id];
+          pruned = true;
+          continue;
+        }
+        if (entry.status !== "lost") {
+          entry.status = "lost";
+          pruned = true;
         }
       }
       if (pruned) {
@@ -9275,7 +9273,7 @@ async function loadTodosCheckpoint(filePath, events, traceId) {
     return null;
   }
 }
-async function saveTodosCheckpoint(filePath, sessionId, todos, events, traceId) {
+async function saveTodosCheckpoint(filePath, sessionId, todos, events, traceId, warn) {
   const t0 = Date.now();
   const payload = {
     version: 1,
@@ -9304,28 +9302,17 @@ async function saveTodosCheckpoint(filePath, sessionId, todos, events, traceId)
       error: toErrorMessage(err),
       recoverable: false
     });
-    console.warn(JSON.stringify({
-      level: "warn",
-      event: "todos_checkpoint.save_failed",
-      message: toErrorMessage(err),
-      timestamp: (/* @__PURE__ */ new Date()).toISOString()
-    }));
+    (warn ?? ((m) => console.warn(JSON.stringify({ level: "warn", event: "todos_checkpoint.save_failed", message: m, timestamp: (/* @__PURE__ */ new Date()).toISOString() }))))(toErrorMessage(err));
   }
 }
-function attachTodosCheckpoint(state, filePath, sessionId, events, traceId) {
+function attachTodosCheckpoint(state, filePath, sessionId, events, traceId, warn) {
   let timer = null;
   let pending = null;
   let writeChain = Promise.resolve();
   const enqueueWrite = (todos) => {
     writeChain = writeChain.then(() => saveTodosCheckpoint(filePath, sessionId, todos, events, traceId)).catch((err) => {
       const msg = toErrorMessage(err);
-      console.error(JSON.stringify({
-        level: "error",
-        event: "todos_checkpoint.write_chain_failed",
-        sessionId,
-        message: msg,
-        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      }));
+      (warn ?? ((m) => console.error(JSON.stringify({ level: "error", event: "todos_checkpoint.write_chain_failed", sessionId, message: m, timestamp: (/* @__PURE__ */ new Date()).toISOString() }))))(msg);
     });
     return writeChain;
   };
@@ -9513,7 +9500,7 @@ async function loadPlan(filePath, events) {
     return null;
   }
 }
-async function savePlan(filePath, plan, events) {
+async function savePlan(filePath, plan, events, warn) {
   const t0 = Date.now();
   try {
     await atomicWrite(filePath, JSON.stringify(plan, null, 2), { mode: 384 });
@@ -9535,10 +9522,14 @@ async function savePlan(filePath, plan, events) {
       error: toErrorMessage(err),
       recoverable: false
     });
-    console.warn(
-      "[plan-store] save failed:",
-      toErrorMessage(err)
-    );
+    (warn ?? ((m) => console.warn(
+      JSON.stringify({
+        level: "warn",
+        event: "plan_store.save_failed",
+        message: m,
+        timestamp: (/* @__PURE__ */ new Date()).toISOString()
+      })
+    )))(toErrorMessage(err));
     return false;
   }
 }
@@ -9579,9 +9570,7 @@ function setPlanItemStatus(plan, idOrIndex, status) {
   const idx = matchIndex(plan, idOrIndex);
   if (idx === -1) return plan;
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  const items = plan.items.map(
-    (it, i) => i === idx ? { ...it, status, updatedAt: now } : it
-  );
+  const items = plan.items.map((it, i) => i === idx ? { ...it, status, updatedAt: now } : it);
   return { ...plan, items, updatedAt: now };
 }
 function clearPlan(plan) {
@@ -9836,7 +9825,7 @@ async function loadTasks(filePath, events, traceId) {
     return null;
   }
 }
-async function saveTasks(filePath, tasks, events, traceId) {
+async function saveTasks(filePath, tasks, events, traceId, warn) {
   const t0 = Date.now();
   try {
     tasks.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
@@ -9862,10 +9851,14 @@ async function saveTasks(filePath, tasks, events, traceId) {
       recoverable: false,
       ...traceId !== void 0 && { traceId }
     });
-    console.warn(
-      "[task-store] save failed:",
-      toErrorMessage(err)
-    );
+    (warn ?? ((m) => console.warn(
+      JSON.stringify({
+        level: "warn",
+        event: "task_store.save_failed",
+        message: m,
+        timestamp: (/* @__PURE__ */ new Date()).toISOString()
+      })
+    )))(toErrorMessage(err));
     return false;
   }
 }
@@ -10093,7 +10086,7 @@ var MAX_JOURNAL_ENTRIES = 500;
 function goalFilePath(projectRoot) {
   return resolveWstackPaths({ projectRoot }).projectGoal;
 }
-async function loadGoal(filePath, events) {
+async function loadGoal(filePath, events, warn) {
   const t0 = Date.now();
   let raw;
   try {
@@ -10124,13 +10117,9 @@ async function loadGoal(filePath, events) {
   try {
     const parsed = JSON.parse(raw);
     if (parsed?.version !== 1 || typeof parsed.goal !== "string" || !Array.isArray(parsed.journal)) {
-      console.warn(JSON.stringify({
-        level: "warn",
-        event: "goal_store.invalid_schema",
-        path: filePath,
-        message: "invalid schema \u2014 consider deleting and re-creating",
-        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      }));
+      (warn ?? ((msg) => console.warn(JSON.stringify({ level: "warn", event: "goal_store.invalid_schema", path: filePath, message: msg, timestamp: (/* @__PURE__ */ new Date()).toISOString() }))))(
+        "invalid schema \u2014 consider deleting and re-creating"
+      );
       events?.emit("storage.read", {
         sessionId: "~boot~",
         store: "goal",
@@ -10152,13 +10141,9 @@ async function loadGoal(filePath, events) {
     });
     return parsed;
   } catch {
-    console.warn(JSON.stringify({
-      level: "warn",
-      event: "goal_store.parse_failed",
-      path: filePath,
-      message: "JSON parse failed \u2014 consider deleting and re-creating",
-      timestamp: (/* @__PURE__ */ new Date()).toISOString()
-    }));
+    (warn ?? ((msg) => console.warn(JSON.stringify({ level: "warn", event: "goal_store.parse_failed", path: filePath, message: msg, timestamp: (/* @__PURE__ */ new Date()).toISOString() }))))(
+      "JSON parse failed \u2014 consider deleting and re-creating"
+    );
     events?.emit("storage.read", {
       sessionId: "~boot~",
       store: "goal",