@wrongstack/core 0.296.4 → 0.298.0

package/dist/storage/provider-config-watcher.d.ts

@@ -22,6 +22,7 @@ export interface ProviderConfigSnapshot {
     /** Live routing fields — surfaced so a cross-process WebUI /setmodel or
      *  profile-reorder propagates to running workers without restart. */
     fallbackModels?: string[];
+    fallbackBridge?: string;
     fallbackProfiles?: Record<string, string[]>;
     favoriteModels?: string[];
     favoriteModelsOnly?: boolean;

package/dist/storage/session-helpers.d.ts

@@ -1,4 +1,5 @@
 import type { ContentBlock } from '../types/blocks.js';
+export { captureCheckpoint, materializeCheckpoint } from './session-workspace-checkpoints.js';
 /**
  * Derive a short title from a user_input event's content. Used by both
  * `DefaultSessionStore.summarize()` (offline summary rebuild) and

package/dist/storage/session-reader.d.ts

@@ -8,15 +8,8 @@ import type { DefaultSessionReaderOptions, SessionExportOptions, SessionQuery, S
 export declare class DefaultSessionReader implements SessionReader {
     private readonly store;
     private readonly secretScrubber;
-    private readonly eventCache;
-    private readonly eventCacheMtimes;
-    private readonly eventCacheSizes;
-    private eventCacheBytes;
-    private static readonly EVENT_CACHE_MAX_ENTRIES;
-    private static readonly EVENT_CACHE_MAX_BYTES;
     constructor(opts: DefaultSessionReaderOptions);
     private loadCachedSessionData;
-    private deleteEventCacheEntry;
     query(q?: SessionQuery): Promise<SessionSummaryLite[]>;
     replay(sessionId: string): AsyncIterable<SessionEvent>;
     search(q: SessionSearchQuery, sessionId?: string | undefined, sessionQuery?: SessionQuery): Promise<SessionSearchHit[]>;

package/dist/storage/session-store/types.d.ts

@@ -1,7 +1,7 @@
 import type { EventBus } from '../../kernel/events.js';
 import type { Logger } from '../../types/logger.js';
 import type { SecretScrubber } from '../../types/secret-scrubber.js';
-import type { SessionData, SessionSummary } from '../../types/session.js';
+import type { SessionData, SessionEvent, SessionSummary } from '../../types/session.js';
 export interface SessionStoreOptions {
     dir: string;
     /**
@@ -28,6 +28,17 @@ export interface SessionStoreOptions {
     isSessionInUse?: ((sessionId: string) => Promise<string | null>) | undefined;
     /** Logger for structured warnings. Falls back to console.warn when omitted. */
     logger?: Logger | undefined;
+    /**
+     * Optional callback invoked synchronously after each event is scrubbed,
+     * observed, and before it enters the write buffer. The event has been
+     * scrubbed (PII removed) and observed (counters updated) but NOT yet
+     * persisted to disk. Used by the HQ telemetry bridge to stream events
+     * without reading them back from the JSONL file.
+     */
+    onAppend?: ((event: SessionEvent) => void) | undefined;
+    /** Batch variant of {@link onAppend}. Called once per batch with
+     * all scrubbed events after all have been observed. */
+    onAppendBatch?: ((events: SessionEvent[]) => void) | undefined;
 }
 /**
  * Cache entry for load() — stores the parsed SessionData along with the

package/dist/storage/session-store.d.ts

@@ -1,4 +1,4 @@
-import type { ForkedSession, ResumedSession, SessionData, SessionEvent, SessionForkOptions, SessionMetadata, SessionStore, SessionSummary, SessionWriter, WorkspaceCheckpointRef, WorkspaceMaterializationResult } from '../types/session.js';
+import type { ForkedSession, ResumedSession, SessionData, SessionEvent, SessionForkOptions, SessionMetadata, SessionStore, SessionSummary, SessionWriter, WorkspaceCheckpointRef } from '../types/session.js';
 import type { SessionStoreOptions } from './session-store/types.js';
 export type { SessionStoreOptions } from './session-store/types.js';
 export declare class DefaultSessionStore implements SessionStore {
@@ -9,6 +9,8 @@ export declare class DefaultSessionStore implements SessionStore {
     private readonly checkpointCas?;
     private readonly isSessionInUse?;
     private readonly logger;
+    private readonly onAppend?;
+    private readonly onAppendBatch?;
     /**
      * In-memory cache for load() results, keyed by session ID. The cache is
      * invalidated when the file's mtimeMs or size changes (indicating the
@@ -51,7 +53,14 @@ export declare class DefaultSessionStore implements SessionStore {
     private ensureShardDir;
     create(meta: Omit<SessionMetadata, 'startedAt'>): Promise<SessionWriter>;
     fork(id: string, opts?: SessionForkOptions): Promise<ForkedSession>;
-    materializeWorkspaceCheckpoint(checkpoint: WorkspaceCheckpointRef, targetRoot: string): Promise<WorkspaceMaterializationResult>;
+    /**
+     * Capture the deterministic post-tool workspace identity through the store-owned CAS.
+     */
+    captureWorkspaceCheckpoint(sessionId: string, promptIndex: number): Promise<WorkspaceCheckpointRef | undefined>;
+    /**
+     * Materialize a store-owned checkpoint into an already isolated workspace.
+     */
+    materializeWorkspaceCheckpoint(checkpoint: WorkspaceCheckpointRef, targetRoot: string): Promise<import("../types/session.js").WorkspaceMaterializationResult>;
     resolveId(query: string): Promise<string>;
     resume(id: string): Promise<ResumedSession>;
     load(id: string): Promise<SessionData>;

package/dist/storage/session-workspace-checkpoints.d.ts

@@ -0,0 +1,5 @@
+import type { WorkspaceCheckpointRef, WorkspaceMaterializationResult } from '../types/session.js';
+import type { SessionCheckpointCas } from './session-checkpoint-cas.js';
+export declare function captureCheckpoint(checkpointCas: SessionCheckpointCas | undefined, sessionId: string, promptIndex: number): Promise<WorkspaceCheckpointRef | undefined>;
+export declare function materializeCheckpoint(checkpointCas: SessionCheckpointCas | undefined, checkpoint: WorkspaceCheckpointRef, targetRoot: string): Promise<WorkspaceMaterializationResult>;
+//# sourceMappingURL=session-workspace-checkpoints.d.ts.map

package/dist/tools/fallback-manage-tools.d.ts

@@ -44,6 +44,12 @@ export { FAVORITE_MANAGE_TOOL_NAME } from './fallback-favorite-manage-tool.js';
 export * from './fallback-system-config-view-tool.js';
 export type { FallbackManageToolOptions } from './fallback-manage-tool-options.js';
 export declare const PROVIDER_MANAGE_TOOL_NAME = "provider_manage";
+/**
+ * Reject provider base URLs that are malformed, non-HTTP, or carry embedded
+ * credentials (WS-013). Private and loopback hosts stay allowed on purpose —
+ * Ollama, LM Studio and omniroute are first-class local providers.
+ */
+export declare function validateProviderBaseUrl(raw: string): string | null;
 export declare const PROVIDER_KEY_SET_TOOL_NAME = "provider_key_set";
 export declare const LEADER_MODEL_SET_TOOL_NAME = "leader_model_set";
 /**