@wrongstack/core 0.297.0 → 0.298.1

package/dist/types/config/autonomy.d.ts

@@ -1,7 +1,16 @@
 import type { FleetChatVerbosity } from './fleet-chat.js';
 export interface AutonomyConfig {
-    /** Default autonomy mode at startup. Default: "auto". */
-    defaultMode?: 'off' | 'suggest' | 'auto' | undefined;
+    /** Default autonomy mode at startup. Default: "auto".
+     *
+     * The 'eternal' / 'eternal-parallel' modes drive the long-running
+     * autonomy engines (see `EternalAutonomyEngine` /
+     * `ParallelEternalEngine`) once the session transitions through a
+     * `/autonomy eternal` (or equivalent) command or `prefs.update`
+     * with `autonomy: 'eternal'`. They are accepted here so the value
+     * round-trips through the persist layer without reverting on
+     * restart, and so the standalone server matches the embedded
+     * server's autocomplete parity (TUI settings picker). */
+    defaultMode?: 'off' | 'suggest' | 'auto' | 'eternal' | 'eternal-parallel' | undefined;
     /** ms to wait before auto-proceeding in 'auto' mode. Default: 45000. */
     autoProceedDelayMs?: number | undefined;
     /** Maximum consecutive auto-proceed turns before pausing. 0 = unlimited. Default: 50. */
@@ -69,7 +78,7 @@ export interface AutonomyConfig {
      * `max(baseTimeout * 2, 180000)`. Default: unset.
      */
     enhanceRetryTimeoutMs?: number | undefined;
-    /** TUI statusline density. Default: "detailed". */
+    /** TUI statusline density. Default: "minimum". */
     statuslineMode?: 'minimum' | 'detailed' | 'no-color' | undefined;
     /** Single short word shown in the TUI rainbow working-state chip. Default: "thinking". */
     thinkingWord?: string | undefined;
@@ -81,11 +90,10 @@ export interface AutonomyConfig {
      */
     showModelReasoning?: boolean | undefined;
     /**
-     * Show the always-visible AGENT SWARM and todo mission queue panel below
-     * the TUI statusline. The detailed F2 Fleet, F3 Agents, and F6 Todos
-     * monitor overlays remain available independently. Default: true.
+     * Agent swarm panel placement: 'bottom' (lower region), 'sidebar' (right sidebar), or 'off' (hidden).
+     * Backward-compat: legacy boolean values are coerced — true→'bottom', false→'off'. Default: 'bottom'.
      */
-    showAgentSwarmPanel?: boolean | undefined;
+    showAgentSwarmPanel?: 'bottom' | 'sidebar' | 'off' | boolean | undefined;
     /**
      * Persist the TUI prompt input history to disk per project so Up/Down
      * navigation recalls prompts across sessions. Secrets are scrubbed before

package/dist/types/config/mcp-features.d.ts

@@ -227,7 +227,15 @@ export interface SageConfig {
          * repeats.
          */
         repeatCooldownMs?: number | undefined;
-        triggers?: Partial<Record<'read' | 'tree' | 'grep' | 'glob' | 'codebase_search' | 'bash' | 'write' | 'edit' | 'patch', boolean>> | undefined;
+        /**
+         * Which tools trigger SAGE memory injection on their results.
+         * Supported triggers: read, tree, grep, glob, codebase_search,
+         * write, edit, patch. Bash/exec are intentionally excluded —
+         * command-execution tools do not produce file-path-anchored
+         * results that are useful for memory injection.
+         * Default: all supported triggers enabled.
+         */
+        triggers?: Partial<Record<'read' | 'tree' | 'grep' | 'glob' | 'codebase_search' | 'write' | 'edit' | 'patch', boolean>> | undefined;
     } | undefined;
     retrieval?: {
         /**

package/dist/types/config/root.d.ts

@@ -1,11 +1,11 @@
 import type { ConfiguredHook, HookEvent } from '../hooks.js';
+import type { AutonomyConfig, ChronicleConfig, IndexingConfig, LaunchConfig, SessionLoggingConfig, SyncConfig } from './autonomy.js';
 import type { AdaptiveConcurrencyConfig, CircuitBreakerRuntimeConfig, ContextConfig } from './context.js';
+import type { FeaturesConfig, LogConfig, MCPServerConfig, PluginConfig, PluginManagerConfig, SageConfig } from './mcp-features.js';
+import type { CustomModelDefinition, ModelMatrixEntry, ProviderConfig } from './providers.js';
 import type { HqClientConfig, ModelRuntimeConfig, SystemPromptConfig } from './runtime.js';
+import type { BrainConfig, FleetConfig, SkillsConfig } from './skills-fleet-brain.js';
 import type { ToolsConfig } from './tools.js';
-import type { ProviderConfig, CustomModelDefinition, ModelMatrixEntry } from './providers.js';
-import type { MCPServerConfig, LogConfig, FeaturesConfig, SageConfig, PluginConfig, PluginManagerConfig } from './mcp-features.js';
-import type { AutonomyConfig, ChronicleConfig, IndexingConfig, LaunchConfig, SessionLoggingConfig, SyncConfig } from './autonomy.js';
-import type { SkillsConfig, FleetConfig, BrainConfig } from './skills-fleet-brain.js';
 export interface GitBehaviorConfig {
     /**
      * Commit identity injected as `GIT_AUTHOR_NAME/EMAIL` +
@@ -94,6 +94,12 @@ export interface Config {
      * `createFallbackModelExtension`.
      */
     fallbackModels?: string[] | undefined;
+    /**
+     * A single emergency continuity route tried before the normal fallback
+     * chain. Must be a full `provider/model` reference so it can escape the
+     * active provider's failure domain.
+     */
+    fallbackBridge?: string | undefined;
     /**
      * Named fallback chains. A profile's first entry can be used as a primary
      * model by `/setmodel`, while the whole ordered list is used for failover.

package/dist/types/context-window.d.ts

@@ -2,6 +2,21 @@ export type ContextWindowModeId = 'balanced' | 'frugal' | 'deep';
 export type DeprecatedContextWindowModeId = 'archival';
 export type ContextWindowModeSelectionId = ContextWindowModeId | DeprecatedContextWindowModeId;
 export type ContextWindowAggressiveOn = 'hard' | 'soft' | 'warn';
+/**
+ * Context-window usage snapshot returned by the host's `onResumeSession`
+ * callback when a session is resumed. The TUI reducer seeds
+ * `state.leader.ctxTokens` / `state.leader.ctxMaxTokens` from this snapshot
+ * so the statusline chip and `/context` panel reflect the rebuilt context
+ * immediately, instead of staying at zero until the next ctx.pct event.
+ * Single source of truth — do not redeclare as an inline structural type at
+ * call sites; import this named type instead so the contract cannot drift.
+ */
+export interface ContextSnapshot {
+    /** Estimated total tokens currently in the context window. */
+    tokens: number;
+    /** Provider max context in tokens for the active model. */
+    maxContext: number;
+}
 export interface ContextWindowThresholds {
     warn: number;
     soft: number;

package/dist/types/index.d.ts

@@ -47,7 +47,7 @@ export type { ModelsDevModel, ModelsDevPayload, ModelsDevProvider, ModelsDevReas
 export { DEFAULT_MODES } from './mode.js';
 export type { Mode, ModeConfig, ModeManifest, ModeStore } from './mode.js';
 export { CONTEXT_WINDOW_MODES, DEFAULT_CONTEXT_WINDOW_MODE_ID, DEPRECATED_CONTEXT_WINDOW_MODE_ALIASES, formatContextWindowModeList, getContextWindowMode, isContextWindowModeId, isContextWindowModeSelectionId, isDeprecatedContextWindowModeId, listContextWindowModes, normalizeContextWindowModeId, resolveContextWindowPolicy } from './context-window.js';
-export type { ContextWindowAggressiveOn, ContextWindowConfigLike, ContextWindowMode, ContextWindowModeId, ContextWindowModeSelectionId, ContextWindowPolicy, ContextWindowThresholds, DeprecatedContextWindowModeId } from './context-window.js';
+export type { ContextSnapshot, ContextWindowAggressiveOn, ContextWindowConfigLike, ContextWindowMode, ContextWindowModeId, ContextWindowModeSelectionId, ContextWindowPolicy, ContextWindowThresholds, DeprecatedContextWindowModeId } from './context-window.js';
 export type { CompletedWorkEvidence, CompletedWorkSource, ContextEvidenceState, ContextFileEvidence, ContextIntentEvidence, ContextRepeatedReadEvidence, ToolEvidenceStatus, ToolOutputMetadata } from './context-evidence.js';
 export type { CouncilDistinctness, CouncilLLMCaller, CouncilModelTarget, CouncilOption, CouncilPersona, CouncilProfileConfig, CouncilQuestion, CouncilResolutionMethod, CouncilResult, CouncilSeatConfig, CouncilUsage, CouncilVoteResult, CouncilVoteStatus, ResolvedCouncilProfile, ResolvedCouncilSeat } from './council.js';
 export type { AwaitAnyResult, CoordinatorEvents, CoordinatorStatus, DoneCondition, MultiAgentConfig, MultiAgentCoordinator, SpawnResult, SubagentConfig, SubagentContext, SubagentError, SubagentErrorKind, SubagentPartialResult, SubagentRunContext, SubagentRunOutcome, SubagentRunner, SubagentSpawnLineage, SubagentStructuredReport, TaskDelegation, TaskResult, TaskSpec } from './multi-agent.js';

package/dist/types/secret-vault.d.ts

@@ -22,6 +22,14 @@ export interface SecretVault {
     isEncrypted(value: string): boolean;
     /** Current key version. Starts at 1; incremented by `rotateKey()`. */
     readonly keyVersion: number;
+    /**
+     * Flush any pending asynchronous key-file hardening (e.g. Windows ACL
+     * restrictions via icacls). Callers in async contexts should await this
+     * before returning so a short-lived process does not exit before the
+     * hardening promise resolves. Sync-only callers may skip it — the
+     * hardening remains best-effort in that case.
+     */
+    flushHardening?(): Promise<void>;
 }
 /**
  * RotatableSecretVault extends SecretVault with key rotation support.

package/dist/types/session.d.ts

@@ -547,6 +547,8 @@ export interface SessionStore {
      * filesystem isolation is the caller's worktree/CAS responsibility.
      */
     fork?(id: string, opts?: SessionForkOptions): Promise<ForkedSession>;
+    /** Capture a content-addressed identity for the current project workspace. */
+    captureWorkspaceCheckpoint?(sessionId: string, promptIndex: number): Promise<WorkspaceCheckpointRef | undefined>;
     /** Apply a captured workspace manifest to an already-isolated checkout. */
     materializeWorkspaceCheckpoint?(checkpoint: WorkspaceCheckpointRef, targetRoot: string): Promise<WorkspaceMaterializationResult>;
     list(limit?: number): Promise<SessionSummary[]>;

package/dist/types/skill.d.ts

@@ -1,11 +1,23 @@
 export interface SkillManifest {
     name: string;
     description: string;
+    /**
+     * Optional explicit "Use when…" trigger from frontmatter. When present it is
+     * used verbatim as the SkillEntry trigger; otherwise the trigger falls back
+     * to the first sentence of `description` (see parseDescriptionFromText).
+     */
+    trigger?: string | undefined;
     version?: string | undefined;
     /** agentskills.io optional frontmatter fields. */
     license?: string | undefined;
     compatibility?: string | undefined;
     metadata?: Record<string, string> | undefined;
+    /**
+     * agentskills.io `allowed-tools`. INFORMATIONAL ONLY — parsed from frontmatter
+     * and surfaced for display, but never enforced: the `skill` tool has fixed
+     * permissions/capabilities and does not consult this field, so it neither
+     * grants nor restricts any tool.
+     */
     allowedTools?: string[] | undefined;
     path: string;
     /**
@@ -29,6 +41,43 @@ export interface SkillEntry {
     originTool?: string | undefined;
     path: string;
 }
+/**
+ * A skill directory that was discovered but rejected during `list()`. Surfaced
+ * via {@link SkillLoader.diagnostics} so a skill that silently fails to load
+ * (missing name/description, malformed name) is diagnosable instead of simply
+ * vanishing from the available-skills list.
+ */
+export interface SkippedSkill {
+    /** Absolute directory that contained the rejected `SKILL.md`. */
+    dir: string;
+    /** Directory entry name (the folder name under a skills root). */
+    entry: string;
+    /** Why the skill was rejected. */
+    reason: 'missing-name' | 'missing-description' | 'invalid-name-format';
+    /** The parsed `name` when one was present (absent for `missing-name`). */
+    name?: string | undefined;
+}
+/**
+ * A skill that was excluded because a higher-priority discovery layer already
+ * claimed the same name. The canonical case is a project-local skill shadowing
+ * a maintained bundled skill. Surfaced via {@link SkillLoader.diagnostics}.
+ */
+export interface ShadowedSkill {
+    name: string;
+    /** Discovery layer of the shadowed (hidden) skill. */
+    source: SkillManifest['source'];
+    /** Path to the shadowed skill's `SKILL.md`. */
+    path: string;
+    /** Discovery layer that claimed the name first (won the shadow). */
+    shadowedBy: SkillManifest['source'] | 'unknown';
+    /** Path to the winning skill's `SKILL.md`, when known. */
+    shadowedByPath?: string | undefined;
+}
+/** Load-time diagnostics collected during {@link SkillLoader.list}. */
+export interface SkillLoaderDiagnostics {
+    skipped: SkippedSkill[];
+    shadowed: ShadowedSkill[];
+}
 export interface SkillLoader {
     list(): Promise<SkillManifest[]>;
     /** Structured entries with trigger/scope for system prompt rendering. */
@@ -44,5 +93,12 @@ export interface SkillLoader {
     readSaveBody(name: string): Promise<string>;
     /** Clear the internal cache so the next list/find re-reads from disk. */
     invalidateCache(): void;
+    /**
+     * Load-time diagnostics from the most recent full `list()` scan: skills that
+     * were skipped as malformed and skills shadowed by a higher-priority layer.
+     * Optional so lightweight/mock loaders need not implement it; callers must
+     * feature-detect (`loader.diagnostics?.()`).
+     */
+    diagnostics?(): SkillLoaderDiagnostics;
 }
 //# sourceMappingURL=skill.d.ts.map

package/dist/types/tool-executor.d.ts

@@ -68,6 +68,8 @@ export interface ToolExecutorOptions {
     iterationTimeoutMs?: number | undefined;
     /** Hard upper bound for a single tool call timeout. Defaults to 5 minutes. */
     maxToolTimeoutMs?: number | undefined;
+    /** Maximum tools started concurrently by parallel/smart batches. Defaults to 4. */
+    maxParallelTools?: number | undefined;
     perIterationOutputCapBytes?: number | undefined;
     /**
      * Optional lifecycle hook runner. When present, `PreToolUse` hooks run

package/dist/utils/env-typed.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Typed environment-variable parsing helpers.
+ *
+ * Every `process.env[...]` read in the codebase should go through these
+ * helpers so that:
+ *
+ * 1. Invalid values get a typed fallback instead of `NaN` or an empty string.
+ * 2. The fallback is visible at the call site, not buried in a downstream check.
+ * 3. Range constraints are expressed at the read site, not scattered.
+ *
+ * Usage:
+ *   ```ts
+ *   const idleMs = envInt('WRONGSTACK_IDLE_MS', { default: 30_000, min: 100 });
+ *   const enabled = envBool('WRONGSTACK_FEATURE_ENABLED');
+ *   const url = envString('WRONGSTACK_BASE_URL');
+ *   ```
+ */
+/**
+ * Parse an environment variable as a boolean.
+ * Returns `false` for unset, empty, `0`, `false`, `no`, `off` (case-insensitive).
+ * Returns `true` for any other non-empty value.
+ */
+export declare function envBool(key: string, env?: NodeJS.ProcessEnv): boolean;
+/**
+ * Parse an environment variable as a boolean, returning `undefined` when unset.
+ * Unlike {@link envBool}, this distinguishes "not set" from "set to false".
+ */
+export declare function envBoolOptional(key: string, env?: NodeJS.ProcessEnv): boolean | undefined;
+/**
+ * Parse an environment variable as an integer with optional range constraints.
+ * Returns `options.default` when unset or unparseable.
+ *
+ * When `min` or `max` are provided and the parsed value falls outside the
+ * range, the default is returned instead of the clamped value — this makes
+ * misconfiguration visible (the feature silently runs at the default rather
+ * than at an unintended boundary).
+ */
+export declare function envInt(key: string, options?: {
+    default: number;
+    min?: number;
+    max?: number;
+}, env?: NodeJS.ProcessEnv): number;
+/**
+ * Parse an environment variable as a float with optional range constraints.
+ * Same semantics as {@link envInt} but for fractional values.
+ */
+export declare function envFloat(key: string, options?: {
+    default: number;
+    min?: number;
+    max?: number;
+}, env?: NodeJS.ProcessEnv): number;
+/**
+ * Read an environment variable as a trimmed string.
+ * Returns `undefined` when unset or empty after trimming.
+ */
+export declare function envString(key: string, env?: NodeJS.ProcessEnv): string | undefined;
+/**
+ * Read an environment variable and validate it against a set of allowed values.
+ * Returns `options.default` when unset or when the value is not in the allow-list.
+ */
+export declare function envEnum<T extends string>(key: string, allowed: readonly T[], options: {
+    default: T;
+}, env?: NodeJS.ProcessEnv): T;
+//# sourceMappingURL=env-typed.d.ts.map

package/dist/utils/glob-match.d.ts

@@ -1,4 +1,24 @@
-export declare function compileGlob(pattern: string): RegExp;
+/**
+ * @param commandSubject - When true, compile for matching a shell command line
+ *   rather than a path: a single `*` additionally stops at the shell
+ *   separators in {@link COMMAND_WILDCARD_STOP}, and `**` is NOT a
+ *   match-everything escape hatch (see below). Defaults to false, so every
+ *   existing caller — file search, grep, replace, gitignore, the indexer —
+ *   keeps its current semantics exactly.
+ */
+export declare function compileGlob(pattern: string, commandSubject?: boolean): RegExp;
 export declare function matchGlob(pattern: string, input: string): boolean;
 export declare function matchAny(patterns: string[], input: string): boolean;
+/**
+ * Match a shell command line against a trust pattern, with `*` and `**`
+ * stopping at shell separators (WS-047).
+ *
+ * A separate entry point rather than a flag on {@link matchGlob} because the
+ * two must never be confused at a call site: this is strictly NARROWER, so it
+ * is correct for deciding what a pattern ALLOWS and wrong for deciding what a
+ * pattern DENIES — narrowing a deny pattern un-blocks things. The caller has to
+ * pick deliberately.
+ */
+export declare function matchCommandGlob(pattern: string, input: string): boolean;
+export declare function matchAnyCommand(patterns: string[], input: string): boolean;
 //# sourceMappingURL=glob-match.d.ts.map

package/dist/utils/heap-watchdog.js

@@ -518,7 +518,7 @@ function startHeapWatchdog(opts = {}) {
       dirReady = true;
     }
     await fsp2.appendFile(targetPath, `${line}
-`, "utf8");
+`, { encoding: "utf8", mode: 384 });
   });
   const drainWrites = async (firstLine) => {
     let line = firstLine;

package/dist/utils/incoming-images.d.ts

@@ -18,6 +18,25 @@ export declare const MAX_INCOMING_IMAGES = 8;
  * surrounding JSON envelope are added.
  */
 export declare const MAX_INCOMING_IMAGE_BYTES: number;
+/** Media types every supported vision wire accepts (Anthropic passthrough,
+ *  OpenAI data-URLs, Gemini inlineData).
+ *
+ * Exported because this is the ONE allowlist for image ingest. Any surface
+ * that accepts a client-supplied image block must check against this set —
+ * see {@link isAllowedImageMediaType}. WS-032: the WebUI context editor was a
+ * second ingest path that validated only the *types* of `source.media_type` /
+ * `source.data`, never their values, so it bypassed every control below. */
+export declare const ALLOWED_IMAGE_MEDIA_TYPES: ReadonlySet<string>;
+/** Case-insensitive membership test against {@link ALLOWED_IMAGE_MEDIA_TYPES}. */
+export declare function isAllowedImageMediaType(mediaType: string): boolean;
+/**
+ * Cheap linear alphabet check that rejects raw binary or JSON smuggled into a
+ * base64 image field before it reaches a provider wire.
+ */
+export declare function isValidImageBase64(base64: string): boolean;
+/** Decoded byte count for a base64 payload, for comparison against
+ *  {@link MAX_INCOMING_IMAGE_BYTES}. */
+export declare function base64DecodedBytes(base64: string): number;
 /** Validation failure on user-supplied image payloads. The message is safe to
  *  echo back to the client verbatim. */
 export declare class IncomingImageError extends Error {

package/dist/utils/index.d.ts

@@ -1,54 +1,58 @@
 export * from './assert-never.js';
 export * from './atomic-write.js';
+export { deriveCachePrefixKey } from './cache-key.js';
 export * from './child-env.js';
 export * from './color.js';
 export * from './config-backup.js';
-export { checkConnectivity, resetConnectivityCache } from './connectivity.js';
-export { deriveCachePrefixKey } from './cache-key.js';
 export * from './config-json.js';
+export { checkConnectivity, resetConnectivityCache } from './connectivity.js';
 export { type ContextBreakdown, getContextBreakdown } from './context-breakdown.js';
+export { type CrashShieldOptions, installCrashShield } from './crash-shield.js';
 export { buildCompletedWorkLedgerBlock, buildContextEvidenceDigest, COMPLETED_WORK_LEDGER_MARKER, createContextEvidenceState, formatCompletedWorkLedger, markAssistantReferencedEvidence, type RecordCompletedWorkInput, type RecordToolOutputEvidenceInput, recordCompletedWorkEvidence, recordToolOutputEvidence, recordUserIntentEvidence, repeatedReadPressure, syncCompletedWorkLedgerBlock, } from './context-evidence.js';
 export { type DeepMergeOptions, deepMerge, FORBIDDEN_PROTO_KEYS, isPrimitiveArray, } from './deep-merge.js';
 export * from './diff.js';
 export type { HttpDispatcher, HttpsAgentAsDispatcher } from './dispatcher-types.js';
+export * from './env-typed.js';
 export { toErrorMessage } from './error.js';
 export * from './expect-defined.js';
 export { expandGlob } from './glob-expand.js';
 export * from './glob-match.js';
-export { buildUserContentBlocks, IncomingImageError, type IncomingImagePayload, MAX_INCOMING_IMAGE_BYTES, MAX_INCOMING_IMAGES, parseIncomingImages, } from './incoming-images.js';
-export { assertNotPrivateHost, expandIPv6, isPrivateIPv4, isPrivateIPv6 } from './ip-guard.js';
+export { defaultHeapLogPath, type HeapDiagnosticFields, type HeapDiagnosticValue, type HeapSample, type HeapWatchdogOptions, startHeapWatchdog, startSharedHeapWatchdog, takeHeapSample, } from './heap-watchdog.js';
+export { ALLOWED_IMAGE_MEDIA_TYPES, base64DecodedBytes, buildUserContentBlocks, IncomingImageError, type IncomingImagePayload, isAllowedImageMediaType, isValidImageBase64, MAX_INCOMING_IMAGE_BYTES, MAX_INCOMING_IMAGES, parseIncomingImages, } from './incoming-images.js';
 export { readBundledInstructionText, renderInstructionTemplate } from './instruction-file.js';
+export { assertNotPrivateHost, expandIPv6, isPrivateIPv4, isPrivateIPv6 } from './ip-guard.js';
 export { completePartialObject } from './json-repair.js';
 export { type CoercionResult, coerceAgainstSchema, type ValidationError, type ValidationResult, validateAgainstSchema, } from './json-schema-validate.js';
 export { mergeCustomModelDefs } from './merge-custom-models.js';
 export { mergeModelsPayload } from './merge-models-payload.js';
 export { hasMeaningfulContent, type MessageRepairReport, type MessageRepairResult, repairToolUseAdjacency, } from './message-invariants.js';
 export * from './newline-normalize.js';
-export { getPerfProfile, indexParallelBatchSize, isFrugalPerf, type PerfProfile, sqliteCachePragmas, SageCachePragmas, tuiStreamFlushMs, useDaemonPerfDefaults, } from './perf-profile.js';
+export { isSafePathSegment, MAX_PATH_SEGMENT_LENGTH, resolveContainedPath, } from './path-segment.js';
+export { getPerfProfile, indexParallelBatchSize, isFrugalPerf, type PerfProfile, SageCachePragmas, sqliteCachePragmas, tuiStreamFlushMs, useDaemonPerfDefaults, } from './perf-profile.js';
 export { isPidAlive } from './pid.js';
 export * from './project-identity.js';
+export { type ProjectWatchEvent, type ProjectWatchSubscription, watchProjectTree, } from './project-watch.js';
 export { type CompileFail, type CompileResult, compileUserRegex } from './regex-guard.js';
 export * from './safe-json.js';
 export { sessionScopedPath } from './session-scoped-path.js';
-export * from './socket-path.js';
-export { withSqliteExperimentalWarningSuppressed } from './sqlite-warning.js';
 export * from './sleep.js';
 export { slugify } from './slug.js';
+export * from './socket-path.js';
+export { withSqliteExperimentalWarningSuppressed } from './sqlite-warning.js';
 export * from './string.js';
-export { writeErr, writeOut } from './term.js';
 export * from './task-format.js';
-export { buildSgrSequence, buildTitleSequence, type ColorDepth, detectTerminal, ESCAPE_TERMINATOR, type EscapeEmitResult, type EscapeSequence, type MouseProtocol, safeEmit, setTitle, type TerminalCapability, TerminalLifecycle, isStdinTTY, onResize, setOutputLineGuard, setRawMode, } from './term.js';
+export { buildSgrSequence, buildTitleSequence, type ColorDepth, detectTerminal, ESCAPE_TERMINATOR, type EscapeEmitResult, type EscapeSequence, isStdinTTY, type MouseProtocol, onResize, safeEmit, setOutputLineGuard, setRawMode, setTitle, type TerminalCapability, TerminalLifecycle, writeErr, writeOut, } from './term.js';
 export * from './todos-format.js';
 export { computeMessageTokens, estimateMessageTokens, estimateRequestTokens, estimateRequestTokensCalibrated, estimateTextTokens, estimateToolDefTokens, estimateToolInputTokens, estimateToolResultTokens, getCalibrationState, type RequestTokenBreakdown, recordActualUsage, resetCalibration, } from './token-estimate.js';
 export { applyToolDescriptionModes, applyToolDescriptionModeToTool, DEFAULT_TOOL_DESCRIPTION_MODE, getToolDescriptionMode, normalizeToolDescriptionMode, resolveToolDescriptionMode, setToolDescriptionMode, simplifyToolDescription, type ToolDescriptionRegistryLike, } from './tool-description-mode.js';
+export { mcpQualifiedToolName, mcpServerToolPrefix, sanitizeWireToolName, WIRE_TOOL_NAME_MAX_LENGTH, WIRE_TOOL_NAME_PATTERN, } from './tool-name.js';
 export { createToolOutputSerializer, type ToolOutputSerializerOptions, } from './tool-output-serializer.js';
 export { applyToolResultRenderModes, DEFAULT_TOOL_RESULT_RENDER_MODE, getToolResultRenderMode, normalizeToolResultRenderMode, resolveToolResultRenderMode, setToolResultRenderMode, type ToolResultRenderModeRegistryLike, } from './tool-result-render-mode.js';
 export * from './tool-subject.js';
-export { mcpQualifiedToolName, mcpServerToolPrefix, sanitizeWireToolName, WIRE_TOOL_NAME_MAX_LENGTH, WIRE_TOOL_NAME_PATTERN, } from './tool-name.js';
 export { type CompactToolDefinitionForWireOptions, type CompactWireToolDefinition, compactSchemaDescriptions, compactToolDefinitionForWire, normalizeTopLevelToolSchema, type ToolWireDefinitionLike, } from './tool-wire-compact.js';
 export { isUlid, ulid } from './ulid.js';
-export { type ProjectWatchEvent, type ProjectWatchSubscription, watchProjectTree, } from './project-watch.js';
 export { DEFAULT_WALK_IGNORE_DIRS, DEFAULT_WALK_IGNORE_SET } from './walk-ignore.js';
+export { buildWin32CmdShimInvocation, type Win32CmdShimInvocation } from './win32-cmd.js';
 export * from './wstack-paths.js';
-export { type HeapDiagnosticFields, type HeapDiagnosticValue, type HeapSample, type HeapWatchdogOptions, startSharedHeapWatchdog, startHeapWatchdog, takeHeapSample, defaultHeapLogPath, } from './heap-watchdog.js';
+export { capSageLines, SAGE_INJECTOR_HEADINGS, splitSageOutputBlock, type SageOutputSplit, } from './sage-output-block.js';
 //# sourceMappingURL=index.d.ts.map