@wrongstack/core 0.291.0 → 0.291.2

package/dist/execution/index.js

@@ -359,16 +359,6 @@ function deepEqual(a, b) {
 }
 
 // src/utils/message-invariants.ts
-function hasMeaningfulContent(content) {
-  if (typeof content === "string") return content.trim().length > 0;
-  return content.some((block) => {
-    if (block.type === "text") return block.text.trim().length > 0;
-    if (block.type === "thinking") {
-      return block.thinking.trim().length > 0 || Boolean(block.signature);
-    }
-    return true;
-  });
-}
 function repairToolUseAdjacency(messages) {
   const removedToolUses = [];
   const removedToolResults = [];
@@ -455,6 +445,21 @@ function mapContent(msg, fn) {
   }
   return { ...msg, content: next };
 }
+function hasMeaningfulContent(content) {
+  if (typeof content === "string") return content.trim().length > 0;
+  for (const block of content) {
+    if (block.type === "text") {
+      if (block.text.trim().length > 0) return true;
+      continue;
+    }
+    if (block.type === "thinking") {
+      if (block.thinking.trim().length > 0 || block.signature) return true;
+      continue;
+    }
+    return true;
+  }
+  return false;
+}
 function isEmptyMessage(msg) {
   return !hasMeaningfulContent(msg.content);
 }
@@ -1605,6 +1610,22 @@ function resolveWstackPaths(opts) {
       const safe = name.replace(/[/\\:]/g, "_").replace(/\.\./g, "_");
       return path2.join(globalRoot, "profiles", safe || "default", "config.json");
     },
+    profileStatuslineConfig: (name) => {
+      const safe = name.replace(/[/\\:]/g, "_").replace(/\.\./g, "_");
+      return path2.join(globalRoot, "profiles", safe || "default", "statusline.json");
+    },
+    profileModeConfig: (name) => {
+      const safe = name.replace(/[/\\:]/g, "_").replace(/\.\./g, "_");
+      return path2.join(globalRoot, "profiles", safe || "default", "mode.json");
+    },
+    profileProviderStatus: (name) => {
+      const safe = name.replace(/[/\\:]/g, "_").replace(/\.\./g, "_");
+      return path2.join(globalRoot, "profiles", safe || "default", "provider-status.json");
+    },
+    profileUpdateCache: (name) => {
+      const safe = name.replace(/[/\\:]/g, "_").replace(/\.\./g, "_");
+      return path2.join(globalRoot, "profiles", safe || "default", "update-cache.json");
+    },
     secretsKey: path2.join(globalRoot, ".key"),
     globalMemory: path2.join(globalRoot, "memory.md"),
     globalSkills: path2.join(globalRoot, "skills"),
@@ -1644,6 +1665,7 @@ function resolveWstackPaths(opts) {
     projectAutophase: path2.join(projectDir, "autophase"),
     projectSddBoards: path2.join(projectDir, "sdd-boards"),
     syncConfig: path2.join(globalRoot, "sync.json"),
+    configHistoryDir: path2.join(globalRoot, "config-history"),
     projectStatus: (projectHash2) => path2.join(globalRoot, "projects", projectHash2, "status.json")
   };
 }
@@ -13293,7 +13315,7 @@ function readPolicy(ctx) {
 }
 
 // src/execution/tool-executor.ts
-import { randomUUID as randomUUID3 } from "node:crypto";
+import { createHash as createHash2, randomUUID as randomUUID3 } from "node:crypto";
 
 // src/observability/process-telemetry.ts
 import { AsyncLocalStorage } from "node:async_hooks";
@@ -13708,12 +13730,30 @@ ${errorDetails}`,
       const policy = this.opts.permissionPolicy;
       const yolo = policy.getYolo?.() === true;
       const authoritativeAuto = decision.source === "yolo";
-      if (toolDangerousCaps.length > 0 && effectivePermission === "auto" && !yolo && !authoritativeAuto) {
+      const capabilityDowngraded = toolDangerousCaps.length > 0 && effectivePermission === "auto" && !yolo && !authoritativeAuto;
+      if (capabilityDowngraded) {
         effectivePermission = "confirm";
       }
       if (boundary.decision === "confirm" && effectivePermission !== "deny") {
         effectivePermission = "confirm";
       }
+      this.opts.events?.emit("permission.evaluated", {
+        sessionId: ctx.session.id,
+        ...ctx.traceId ? { traceId: ctx.traceId } : {},
+        ...ctx.agentId ? { agentId: ctx.agentId } : {},
+        name: tool.name,
+        id: use.id,
+        inputHash: hashPermissionInput(use.input, this.opts.secretScrubber),
+        policyDecision: decision.permission,
+        effectiveDecision: effectivePermission,
+        decisionSource: decision.source,
+        ...decision.reason ? { reason: decision.reason } : {},
+        ...decision.riskTier ?? tool.riskTier ? { riskTier: decision.riskTier ?? tool.riskTier } : {},
+        yoloEnabled: yolo,
+        boundaryDecision: boundary.decision,
+        ...boundary.reason ? { boundaryReason: boundary.reason } : {},
+        capabilityDowngraded
+      });
       if (effectivePermission === "deny") {
         const result = this.deniedResult(use, decision.reason);
         budget = this.budgetForString(result.content, budget);
@@ -14395,6 +14435,15 @@ ${head}${TOOL_OUTPUT_ARTIFACT_OMISSION}${tail}`;
     return content;
   }
 }
+function hashPermissionInput(input, scrubber) {
+  let serialized;
+  try {
+    serialized = JSON.stringify(input) ?? "";
+  } catch {
+    serialized = String(input);
+  }
+  return createHash2("sha256").update(scrubber.scrub(serialized), "utf8").digest("hex");
+}
 function sliceUtf8Prefix(text, maxBytes) {
   if (maxBytes <= 0) return "";
   if (Buffer.byteLength(text, "utf8") <= maxBytes) return text;