@wrongstack/core 0.298.2 → 0.299.0

package/dist/chronicle/index.js

@@ -582,7 +582,9 @@ function safeProfileName(name) {
 function activeProfileName(globalRoot) {
   try {
     const parsed = JSON.parse(fs2.readFileSync(path4.join(globalRoot, "config.json"), "utf8"));
-    return safeProfileName(typeof parsed.activeProfile === "string" ? parsed.activeProfile : void 0);
+    return safeProfileName(
+      typeof parsed.activeProfile === "string" ? parsed.activeProfile : void 0
+    );
   } catch {
     return "default";
   }
@@ -662,6 +664,7 @@ function resolveWstackPaths(opts) {
     projectPlan: path4.join(projectDir, "plan.json"),
     projectAutophase: path4.join(projectDir, "autophase"),
     projectSddBoards: path4.join(projectDir, "sdd-boards"),
+    projectRequirementIntakes: path4.join(projectDir, "requirement-intakes"),
     syncConfig: path4.join(profileDir, "sync.json"),
     configHistoryDir: path4.join(globalRoot, "config-history"),
     projectStatus: (projectHash2) => path4.join(globalRoot, "projects", projectHash2, "status.json")

package/dist/coordination/agents/index.js

@@ -98,7 +98,9 @@ function safeProfileName(name) {
 function activeProfileName(globalRoot) {
   try {
     const parsed = JSON.parse(fs.readFileSync(path.join(globalRoot, "config.json"), "utf8"));
-    return safeProfileName(typeof parsed.activeProfile === "string" ? parsed.activeProfile : void 0);
+    return safeProfileName(
+      typeof parsed.activeProfile === "string" ? parsed.activeProfile : void 0
+    );
   } catch {
     return "default";
   }
@@ -178,6 +180,7 @@ function resolveWstackPaths(opts) {
     projectPlan: path.join(projectDir, "plan.json"),
     projectAutophase: path.join(projectDir, "autophase"),
     projectSddBoards: path.join(projectDir, "sdd-boards"),
+    projectRequirementIntakes: path.join(projectDir, "requirement-intakes"),
     syncConfig: path.join(profileDir, "sync.json"),
     configHistoryDir: path.join(globalRoot, "config-history"),
     projectStatus: (projectHash2) => path.join(globalRoot, "projects", projectHash2, "status.json")

package/dist/coordination/index.js

@@ -1361,7 +1361,9 @@ function safeProfileName(name) {
 function activeProfileName(globalRoot) {
   try {
     const parsed = JSON.parse(fs.readFileSync(path.join(globalRoot, "config.json"), "utf8"));
-    return safeProfileName(typeof parsed.activeProfile === "string" ? parsed.activeProfile : void 0);
+    return safeProfileName(
+      typeof parsed.activeProfile === "string" ? parsed.activeProfile : void 0
+    );
   } catch {
     return "default";
   }
@@ -1441,6 +1443,7 @@ function resolveWstackPaths(opts) {
     projectPlan: path.join(projectDir, "plan.json"),
     projectAutophase: path.join(projectDir, "autophase"),
     projectSddBoards: path.join(projectDir, "sdd-boards"),
+    projectRequirementIntakes: path.join(projectDir, "requirement-intakes"),
     syncConfig: path.join(profileDir, "sync.json"),
     configHistoryDir: path.join(globalRoot, "config-history"),
     projectStatus: (projectHash2) => path.join(globalRoot, "projects", projectHash2, "status.json")
@@ -12609,7 +12612,7 @@ var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not eno
 var ROUTE_SCOPED_QUOTA_RE = /\b(?:for|on)\s+(?:(?:this|the)\s+)?(?:route|model)\b|\b(?:route|model)(?:[-_\s]+[\w.-]+)?[-_\s]*(?:quota|limit)\b|\b(?:quota|limit).{0,24}\b(?:for|on)\s+(?:(?:this|the)\s+)?(?:route|model)\b/i;
 
 // src/types/provider.ts
-var CONTEXT_OVERFLOW_RE = /context.length|context.window|maximum context|max.*tokens?.*exceeded|prompt is too long|too long|exceeds the context|\btokens\b.*exceed|too many tokens|reduce the length|resulted in \d+ tokens|input.{0,12}too (?:large|long)|context_length_exceeded/i;
+var CONTEXT_OVERFLOW_RE = /context.length|context.window|maximum context|max.*tokens?.*exceeded|(?:prompt|request|input|messages?).{0,12}too (?:large|long)|exceeds the context|\btokens\b.*exceed|too many tokens|reduce the length|resulted in \d+ tokens|context_length_exceeded/i;
 var CONTENT_FILTER_RE = /content.(filter|policy|moderation)|safety (system|filter)/i;
 var RATE_LIMIT_EXCEEDED_RE = /rate[-_\s]*limit[-_\s]*exceeded/i;
 function classifyProviderError(status, body, message) {
@@ -12619,7 +12622,7 @@ function classifyProviderError(status, body, message) {
   if (status === 408) return "timeout";
   if (status === 599) return "stream_hang";
   if (status === 402 || QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
-  if (status === 429 && body?.message && RATE_LIMIT_EXCEEDED_RE.test(body.message)) {
+  if (status === 429 && body?.message && body.type !== "rate_limit_exceeded" && RATE_LIMIT_EXCEEDED_RE.test(body.message)) {
     return "quota_exhausted";
   }
   if (type === "rate_limit_error" || status === 429) return "rate_limit";
@@ -12721,7 +12724,7 @@ var ProviderError = class extends WrongStackError {
     const e = err;
     const name = e.name;
     if (typeof name !== "string" || !name.endsWith("Error")) return false;
-    return typeof e.status === "number" && typeof e.retryable === "boolean" && typeof e.kind === "string";
+    return typeof e.status === "number" && typeof e.retryable === "boolean" && typeof e.kind === "string" && typeof e.describe === "function";
   }
   constructor(message, status, retryable, providerId, opts = {}) {
     const kind = opts.kind ?? classifyProviderError(status, opts.body, message);

package/dist/core/index.js

@@ -3804,7 +3804,7 @@ var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not eno
 function effectiveInputTokens(usage) {
   return usage.input + (usage.cacheRead ?? 0) + (usage.cacheWrite ?? 0);
 }
-var CONTEXT_OVERFLOW_RE = /context.length|context.window|maximum context|max.*tokens?.*exceeded|prompt is too long|too long|exceeds the context|\btokens\b.*exceed|too many tokens|reduce the length|resulted in \d+ tokens|input.{0,12}too (?:large|long)|context_length_exceeded/i;
+var CONTEXT_OVERFLOW_RE = /context.length|context.window|maximum context|max.*tokens?.*exceeded|(?:prompt|request|input|messages?).{0,12}too (?:large|long)|exceeds the context|\btokens\b.*exceed|too many tokens|reduce the length|resulted in \d+ tokens|context_length_exceeded/i;
 var CONTENT_FILTER_RE = /content.(filter|policy|moderation)|safety (system|filter)/i;
 var RATE_LIMIT_EXCEEDED_RE = /rate[-_\s]*limit[-_\s]*exceeded/i;
 function classifyProviderError(status, body, message) {
@@ -3814,7 +3814,7 @@ function classifyProviderError(status, body, message) {
   if (status === 408) return "timeout";
   if (status === 599) return "stream_hang";
   if (status === 402 || QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
-  if (status === 429 && body?.message && RATE_LIMIT_EXCEEDED_RE.test(body.message)) {
+  if (status === 429 && body?.message && body.type !== "rate_limit_exceeded" && RATE_LIMIT_EXCEEDED_RE.test(body.message)) {
     return "quota_exhausted";
   }
   if (type === "rate_limit_error" || status === 429) return "rate_limit";
@@ -3874,7 +3874,7 @@ var ProviderError = class extends WrongStackError {
     const e = err;
     const name = e.name;
     if (typeof name !== "string" || !name.endsWith("Error")) return false;
-    return typeof e.status === "number" && typeof e.retryable === "boolean" && typeof e.kind === "string";
+    return typeof e.status === "number" && typeof e.retryable === "boolean" && typeof e.kind === "string" && typeof e.describe === "function";
   }
   constructor(message, status, retryable, providerId, opts = {}) {
     const kind = opts.kind ?? classifyProviderError(status, opts.body, message);
@@ -5971,8 +5971,54 @@ function runWithNetworkTelemetry(context, run) {
   return storage.run(context, run);
 }
 
+// src/security/error-sanitize.ts
+import { homedir as homedir2 } from "node:os";
+var scrubber = new DefaultSecretScrubber();
+function scrubErrorText(text) {
+  if (!text) return text;
+  let out = scrubber.scrub(text);
+  const home = safeHomedir();
+  if (home && home.length > 2) {
+    out = replaceAllCaseInsensitive(out, home, "~");
+    const alt = home.includes("\\") ? home.replace(/\\/g, "/") : home.replace(/\//g, "\\");
+    if (alt !== home) out = replaceAllCaseInsensitive(out, alt, "~");
+  }
+  return out;
+}
+function safeHomedir() {
+  try {
+    return homedir2();
+  } catch {
+    return "";
+  }
+}
+function replaceAllCaseInsensitive(haystack, needle, replacement) {
+  const lowerHay = haystack.toLowerCase();
+  const lowerNeedle = needle.toLowerCase();
+  let idx = lowerHay.indexOf(lowerNeedle);
+  if (idx === -1) return haystack;
+  let out = "";
+  let from = 0;
+  while (idx !== -1) {
+    out += haystack.slice(from, idx) + replacement;
+    from = idx + needle.length;
+    idx = lowerHay.indexOf(lowerNeedle, from);
+  }
+  return out + haystack.slice(from);
+}
+
 // src/core/provider-runner.ts
 import { randomUUID as randomUUID5 } from "node:crypto";
+function scrubProviderBody(body) {
+  if (!body) return void 0;
+  return {
+    ...body,
+    ...body.type !== void 0 ? { type: scrubErrorText(body.type) } : {},
+    ...body.message !== void 0 ? { message: scrubErrorText(body.message) } : {},
+    ...body.raw !== void 0 ? { raw: scrubErrorText(body.raw) } : {},
+    ...body.requestId !== void 0 ? { requestId: scrubErrorText(body.requestId) } : {}
+  };
+}
 function providerLogCtx(p, r) {
   return {
     providerId: p.id,
@@ -6057,7 +6103,10 @@ async function runProviderWithRetry(opts) {
       const isProviderErr = err instanceof ProviderError || ProviderError.isProviderError(err);
       const errAsErr = err instanceof Error ? err : new Error(String(err));
       const canRetry = retry.shouldRetry(isProviderErr ? err : errAsErr, attempt);
-      const description = isProviderErr ? err.describe() : errAsErr.message;
+      const providerErrorBody = isProviderErr ? scrubProviderBody(err.body) : void 0;
+      const description = scrubErrorText(
+        isProviderErr ? err.describe() : errAsErr.message
+      );
       const delay2 = canRetry ? Math.round(retry.delayMs(attempt, isProviderErr ? err : errAsErr)) : void 0;
       events.emit("provider.attempt.failed", {
         ...correlation,
@@ -6070,7 +6119,8 @@ async function runProviderWithRetry(opts) {
         retryable: canRetry,
         retryScheduled: canRetry,
         ...delay2 !== void 0 ? { retryDelayMs: delay2 } : {},
-        ...isProviderErr && err.body?.requestId ? { providerRequestId: err.body.requestId } : {}
+        ...providerErrorBody?.requestId ? { providerRequestId: providerErrorBody.requestId } : {},
+        ...providerErrorBody ? { errorBody: providerErrorBody } : {}
       });
       if (!canRetry) {
         events.emit("provider.error", {
@@ -6078,13 +6128,15 @@ async function runProviderWithRetry(opts) {
           providerId: isProviderErr ? err.providerId : provider.id,
           status: isProviderErr ? err.status : 0,
           description,
-          retryable: false
+          retryable: false,
+          ...providerErrorBody ? { errorBody: providerErrorBody } : {}
         });
         logger.error(`Provider call failed after ${attempt + 1} attempt(s) \u2014 ${description}`, {
           ...providerLogCtx(provider, request),
           attempts: attempt + 1,
           errorDescription: description,
           status: isProviderErr ? err.status : void 0,
+          errorBody: providerErrorBody,
           errorName: err instanceof Error ? err.name : void 0,
           errorStack: err instanceof Error ? err.stack?.split("\n").slice(0, 3).join("\n") : void 0
         });
@@ -6098,7 +6150,8 @@ async function runProviderWithRetry(opts) {
         maxAttempts,
         delayMs: delay2,
         errorDescription: description,
-        status: isProviderErr ? err.status : void 0
+        status: isProviderErr ? err.status : void 0,
+        errorBody: providerErrorBody
       });
       events.emit("provider.retry", {
         sessionId: resolveEventSessionId(ctx),
@@ -6106,7 +6159,8 @@ async function runProviderWithRetry(opts) {
         attempt: attemptNum,
         delayMs: delay2,
         status: isProviderErr ? err.status : 0,
-        description
+        description,
+        ...providerErrorBody ? { errorBody: providerErrorBody } : {}
       });
       await new Promise((resolve10, reject) => {
         let settled = false;

package/dist/defaults/index.js

@@ -1374,7 +1374,9 @@ function safeProfileName(name) {
 function activeProfileName(globalRoot) {
   try {
     const parsed = JSON.parse(fs.readFileSync(path.join(globalRoot, "config.json"), "utf8"));
-    return safeProfileName(typeof parsed.activeProfile === "string" ? parsed.activeProfile : void 0);
+    return safeProfileName(
+      typeof parsed.activeProfile === "string" ? parsed.activeProfile : void 0
+    );
   } catch {
     return "default";
   }
@@ -1454,6 +1456,7 @@ function resolveWstackPaths(opts) {
     projectPlan: path.join(projectDir, "plan.json"),
     projectAutophase: path.join(projectDir, "autophase"),
     projectSddBoards: path.join(projectDir, "sdd-boards"),
+    projectRequirementIntakes: path.join(projectDir, "requirement-intakes"),
     syncConfig: path.join(profileDir, "sync.json"),
     configHistoryDir: path.join(globalRoot, "config-history"),
     projectStatus: (projectHash2) => path.join(globalRoot, "projects", projectHash2, "status.json")
@@ -9397,7 +9400,7 @@ function truncate(s, max) {
 var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|usage[-_\s]*limit[-_\s]*(?:reached|exceeded)/i;
 
 // src/types/provider.ts
-var CONTEXT_OVERFLOW_RE = /context.length|context.window|maximum context|max.*tokens?.*exceeded|prompt is too long|too long|exceeds the context|\btokens\b.*exceed|too many tokens|reduce the length|resulted in \d+ tokens|input.{0,12}too (?:large|long)|context_length_exceeded/i;
+var CONTEXT_OVERFLOW_RE = /context.length|context.window|maximum context|max.*tokens?.*exceeded|(?:prompt|request|input|messages?).{0,12}too (?:large|long)|exceeds the context|\btokens\b.*exceed|too many tokens|reduce the length|resulted in \d+ tokens|context_length_exceeded/i;
 var CONTENT_FILTER_RE = /content.(filter|policy|moderation)|safety (system|filter)/i;
 var RATE_LIMIT_EXCEEDED_RE = /rate[-_\s]*limit[-_\s]*exceeded/i;
 function classifyProviderError(status, body, message) {
@@ -9407,7 +9410,7 @@ function classifyProviderError(status, body, message) {
   if (status === 408) return "timeout";
   if (status === 599) return "stream_hang";
   if (status === 402 || QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
-  if (status === 429 && body?.message && RATE_LIMIT_EXCEEDED_RE.test(body.message)) {
+  if (status === 429 && body?.message && body.type !== "rate_limit_exceeded" && RATE_LIMIT_EXCEEDED_RE.test(body.message)) {
     return "quota_exhausted";
   }
   if (type === "rate_limit_error" || status === 429) return "rate_limit";
@@ -9467,7 +9470,7 @@ var ProviderError = class extends WrongStackError {
     const e = err;
     const name = e.name;
     if (typeof name !== "string" || !name.endsWith("Error")) return false;
-    return typeof e.status === "number" && typeof e.retryable === "boolean" && typeof e.kind === "string";
+    return typeof e.status === "number" && typeof e.retryable === "boolean" && typeof e.kind === "string" && typeof e.describe === "function";
   }
   constructor(message, status, retryable, providerId, opts = {}) {
     const kind = opts.kind ?? classifyProviderError(status, opts.body, message);
@@ -16311,14 +16314,14 @@ function sessionIdResolutionError(resolution) {
 }
 
 // src/storage/session-read-scrubber.ts
-function scrubPersistedSessionEvent(event, scrubber) {
-  return scrubber.scrubObject(event);
+function scrubPersistedSessionEvent(event, scrubber2) {
+  return scrubber2.scrubObject(event);
 }
-function scrubPersistedSessionData(data, scrubber) {
-  return scrubber.scrubObject(data);
+function scrubPersistedSessionData(data, scrubber2) {
+  return scrubber2.scrubObject(data);
 }
-function scrubPersistedSessionSummary(summary, scrubber) {
-  const scrubbed = scrubber.scrubObject(summary);
+function scrubPersistedSessionSummary(summary, scrubber2) {
+  const scrubbed = scrubber2.scrubObject(summary);
   const { name: _name, lastUserMessage: _lastUserMessage, ...rest } = scrubbed;
   const title = sessionContentText(scrubbed.title) || "(empty session)";
   const name = scrubbed.name === void 0 ? "" : sessionContentText(scrubbed.name);
@@ -24675,8 +24678,54 @@ function runWithNetworkTelemetry(context, run) {
   return storage.run(context, run);
 }
 
+// src/security/error-sanitize.ts
+import { homedir as homedir2 } from "node:os";
+var scrubber = new DefaultSecretScrubber();
+function scrubErrorText(text) {
+  if (!text) return text;
+  let out = scrubber.scrub(text);
+  const home = safeHomedir();
+  if (home && home.length > 2) {
+    out = replaceAllCaseInsensitive(out, home, "~");
+    const alt = home.includes("\\") ? home.replace(/\\/g, "/") : home.replace(/\//g, "\\");
+    if (alt !== home) out = replaceAllCaseInsensitive(out, alt, "~");
+  }
+  return out;
+}
+function safeHomedir() {
+  try {
+    return homedir2();
+  } catch {
+    return "";
+  }
+}
+function replaceAllCaseInsensitive(haystack, needle, replacement) {
+  const lowerHay = haystack.toLowerCase();
+  const lowerNeedle = needle.toLowerCase();
+  let idx = lowerHay.indexOf(lowerNeedle);
+  if (idx === -1) return haystack;
+  let out = "";
+  let from = 0;
+  while (idx !== -1) {
+    out += haystack.slice(from, idx) + replacement;
+    from = idx + needle.length;
+    idx = lowerHay.indexOf(lowerNeedle, from);
+  }
+  return out + haystack.slice(from);
+}
+
 // src/core/provider-runner.ts
 import { randomUUID as randomUUID14 } from "node:crypto";
+function scrubProviderBody(body) {
+  if (!body) return void 0;
+  return {
+    ...body,
+    ...body.type !== void 0 ? { type: scrubErrorText(body.type) } : {},
+    ...body.message !== void 0 ? { message: scrubErrorText(body.message) } : {},
+    ...body.raw !== void 0 ? { raw: scrubErrorText(body.raw) } : {},
+    ...body.requestId !== void 0 ? { requestId: scrubErrorText(body.requestId) } : {}
+  };
+}
 function providerLogCtx(p, r) {
   return {
     providerId: p.id,
@@ -24761,7 +24810,10 @@ async function runProviderWithRetry(opts) {
       const isProviderErr = err instanceof ProviderError || ProviderError.isProviderError(err);
       const errAsErr = err instanceof Error ? err : new Error(String(err));
       const canRetry = retry.shouldRetry(isProviderErr ? err : errAsErr, attempt);
-      const description = isProviderErr ? err.describe() : errAsErr.message;
+      const providerErrorBody = isProviderErr ? scrubProviderBody(err.body) : void 0;
+      const description = scrubErrorText(
+        isProviderErr ? err.describe() : errAsErr.message
+      );
       const delay = canRetry ? Math.round(retry.delayMs(attempt, isProviderErr ? err : errAsErr)) : void 0;
       events.emit("provider.attempt.failed", {
         ...correlation,
@@ -24774,7 +24826,8 @@ async function runProviderWithRetry(opts) {
         retryable: canRetry,
         retryScheduled: canRetry,
         ...delay !== void 0 ? { retryDelayMs: delay } : {},
-        ...isProviderErr && err.body?.requestId ? { providerRequestId: err.body.requestId } : {}
+        ...providerErrorBody?.requestId ? { providerRequestId: providerErrorBody.requestId } : {},
+        ...providerErrorBody ? { errorBody: providerErrorBody } : {}
       });
       if (!canRetry) {
         events.emit("provider.error", {
@@ -24782,13 +24835,15 @@ async function runProviderWithRetry(opts) {
           providerId: isProviderErr ? err.providerId : provider.id,
           status: isProviderErr ? err.status : 0,
           description,
-          retryable: false
+          retryable: false,
+          ...providerErrorBody ? { errorBody: providerErrorBody } : {}
         });
         logger.error(`Provider call failed after ${attempt + 1} attempt(s) \u2014 ${description}`, {
           ...providerLogCtx(provider, request),
           attempts: attempt + 1,
           errorDescription: description,
           status: isProviderErr ? err.status : void 0,
+          errorBody: providerErrorBody,
           errorName: err instanceof Error ? err.name : void 0,
           errorStack: err instanceof Error ? err.stack?.split("\n").slice(0, 3).join("\n") : void 0
         });
@@ -24802,7 +24857,8 @@ async function runProviderWithRetry(opts) {
         maxAttempts,
         delayMs: delay,
         errorDescription: description,
-        status: isProviderErr ? err.status : void 0
+        status: isProviderErr ? err.status : void 0,
+        errorBody: providerErrorBody
       });
       events.emit("provider.retry", {
         sessionId: resolveEventSessionId(ctx),
@@ -24810,7 +24866,8 @@ async function runProviderWithRetry(opts) {
         attempt: attemptNum,
         delayMs: delay,
         status: isProviderErr ? err.status : 0,
-        description
+        description,
+        ...providerErrorBody ? { errorBody: providerErrorBody } : {}
       });
       await new Promise((resolve17, reject) => {
         let settled = false;
@@ -26580,14 +26637,14 @@ ${head}${TOOL_OUTPUT_ARTIFACT_OMISSION}${tail}`;
     return content;
   }
 }
-function hashPermissionInput(input, scrubber) {
+function hashPermissionInput(input, scrubber2) {
   let serialized;
   try {
     serialized = JSON.stringify(input) ?? "";
   } catch {
     serialized = String(input);
   }
-  return createHash7("sha256").update(scrubber.scrub(serialized), "utf8").digest("hex");
+  return createHash7("sha256").update(scrubber2.scrub(serialized), "utf8").digest("hex");
 }
 function sliceUtf8Prefix(text, maxBytes) {
   if (maxBytes <= 0) return "";
@@ -27902,6 +27959,38 @@ var sshManagerServer = () => ({
   permission: "confirm",
   requestTimeoutMs: 18e4
 });
+var requirementIntakeServer = () => ({
+  name: "requirement-intake",
+  description: "WrongStack Requirements Intake \u2014 list intake records and file new ones (project-scoped, --writable)",
+  transport: "stdio",
+  command: "wstack-requirement-intake-mcp",
+  args: ["--project-root", ".", "--writable"],
+  permission: "auto"
+});
+var kanbanServer = () => ({
+  name: "kanban",
+  description: "WrongStack Kanban \u2014 inspect and manage project work boards (project-scoped, manage tier, no destructive ops)",
+  transport: "stdio",
+  command: "wstack-kanban-mcp",
+  args: ["--project-root", ".", "--writable"],
+  permission: "confirm"
+});
+var mailboxServer = () => ({
+  name: "mailbox",
+  description: "WrongStack Mailbox \u2014 read and send project agent mail (project-scoped, no admin/credentials)",
+  transport: "stdio",
+  command: "wstack-mailbox-mcp",
+  args: ["--project-root", ".", "--actor", "external-agent", "--writable"],
+  permission: "auto"
+});
+var codebaseIndexServer = () => ({
+  name: "codebase-index",
+  description: "WrongStack Codebase Index \u2014 symbol search and dependency graphs (project-scoped, --writable)",
+  transport: "stdio",
+  command: "wstack-codebase-index-mcp",
+  args: ["--project-root", ".", "--writable"],
+  permission: "auto"
+});
 var allServers = () => ({
   filesystem: { ...filesystemServer(), enabled: false },
   github: { ...githubServer(), enabled: false },
@@ -27916,7 +28005,11 @@ var allServers = () => ({
   "zai-vision": { ...zaiVisionServer(), enabled: false },
   "minimax-vision": { ...miniMaxVisionServer(), enabled: false },
   playwright: { ...playwrightServer(), enabled: false },
-  ssh: { ...sshManagerServer(), enabled: false }
+  ssh: { ...sshManagerServer(), enabled: false },
+  kanban: { ...kanbanServer(), enabled: false },
+  mailbox: { ...mailboxServer(), enabled: false },
+  "codebase-index": { ...codebaseIndexServer(), enabled: false },
+  "requirement-intake": { ...requirementIntakeServer(), enabled: false }
 });
 
 // src/models/codex-catalog.ts
@@ -31866,6 +31959,15 @@ var IN_PROJECT_DENIED_PATHS = [
     reason: "Extends the exec allow-list; a repo could authorise its own binaries."
   },
   { path: "tools.exec.danger", reason: "Weakens the destructive-command banner." },
+  {
+    // The whole subtree, not just the dangerous leaves: a persona's
+    // `instruction` is rendered into the voter SYSTEM prompt, a profile seat
+    // may pin providerId/model, and `defaultProfile` selects which of those
+    // runs when the agent names no profile. Denying the parent leaves no leaf
+    // to reclassify wrongly later.
+    path: "tools.council",
+    reason: "Council tool panel definitions: persona instructions are injected into the voter SYSTEM prompt and profile seats can pin an attacker-chosen providerId/model."
+  },
   { path: "skills.extraDirs", reason: "Loads skill definitions from repo-chosen directories." },
   { path: "skills.registryUrl", reason: "Redirects skill installs to a repo-chosen host." },
   // Deliberately NOT denied: skills.mode and skills.eagerMaxChars. The audit

package/dist/design/index.js

@@ -91,7 +91,9 @@ function safeProfileName(name) {
 function activeProfileName(globalRoot) {
   try {
     const parsed = JSON.parse(fs.readFileSync(path.join(globalRoot, "config.json"), "utf8"));
-    return safeProfileName(typeof parsed.activeProfile === "string" ? parsed.activeProfile : void 0);
+    return safeProfileName(
+      typeof parsed.activeProfile === "string" ? parsed.activeProfile : void 0
+    );
   } catch {
     return "default";
   }
@@ -171,6 +173,7 @@ function resolveWstackPaths(opts) {
     projectPlan: path.join(projectDir, "plan.json"),
     projectAutophase: path.join(projectDir, "autophase"),
     projectSddBoards: path.join(projectDir, "sdd-boards"),
+    projectRequirementIntakes: path.join(projectDir, "requirement-intakes"),
     syncConfig: path.join(profileDir, "sync.json"),
     configHistoryDir: path.join(globalRoot, "config-history"),
     projectStatus: (projectHash2) => path.join(globalRoot, "projects", projectHash2, "status.json")

package/dist/execution/council-brain.d.ts

@@ -13,6 +13,9 @@
  *   - maintainer   — evaluates complexity, compatibility, long-term ownership.
  *   - user-advocate — evaluates from the affected user's perspective.
  *
+ * Any other persona string is registered as an ad-hoc lens instead of being
+ * rejected — see `resolvePersonaRegistry`.
+ *
  * @module council-brain
  */
 import type { BrainArbiter, BrainDecisionRequest } from '../coordination/brain.js';
@@ -30,8 +33,9 @@ export interface CouncilVoter {
     /** Model id this voter uses. */
     model: string;
     /**
-     * Decision lens. Built-ins: 'executor', 'skeptic', 'auditor'. Any other
-     * string is injected verbatim as the persona description.
+     * Decision lens. Built-ins: 'executor', 'skeptic', 'auditor', 'security',
+     * 'maintainer', 'user-advocate'. Any other string is registered as an ad-hoc
+     * lens whose instruction is the string itself (see `resolvePersonaRegistry`).
      */
     persona?: string | undefined;
     /** Vote weight. Default 1. */

package/dist/execution/council-personas.d.ts

@@ -1,6 +1,16 @@
 import type { CouncilPersona } from '../types/council.js';
 /** Provider-neutral personas shipped with every Council installation. */
 export declare const BUILTIN_COUNCIL_PERSONAS: readonly CouncilPersona[];
+/**
+ * Built-in persona ids in display order.
+ *
+ * The single source every surface cycles through. The TUI panel, the WebUI
+ * settings section and `/brain council` each used to hard-code
+ * `['executor','skeptic','auditor']`, which is why `security`, `maintainer`
+ * and `user-advocate` shipped in the registry but were unreachable from any
+ * UI — exactly the lenses `risk-review` is built around.
+ */
+export declare const BUILTIN_COUNCIL_PERSONA_IDS: readonly string[];
 /** Immutable registry of trusted Council persona definitions. */
 export declare class CouncilPersonaRegistry {
     private readonly byId;

package/dist/execution/index.d.ts

@@ -7,7 +7,7 @@ export { BRAIN_EVALUATION_CASE_VERSION, type BrainEvaluationCaseResult, type Bra
 export { type BrainApplyResult, type BrainConfigPatch, type BrainConfigSnapshot, type BrainCouncilMinRisk, type BrainCouncilPatch, type BrainDefaultsContext, type BrainPoolStrategy, type BrainRuntime, type BrainRuntimeLedgerHost, type BrainRuntimeOptions, createBrainRuntime, resolveBrainConfigDefaults, } from './brain-runtime.js';
 export { COUNCIL_REFUSE_OPTION_ID, type CouncilBrainOptions, type CouncilVoter, createCouncilBrainArbiter, } from './council-brain.js';
 export { type CouncilResolution, type CouncilResolutionInput, type CouncilResolutionSeat, type CouncilResolutionVote, resolveCouncilVotes, } from './council-resolution.js';
-export { BUILTIN_COUNCIL_PERSONAS, CouncilPersonaRegistry, createCouncilPersonaRegistry, DEFAULT_COUNCIL_PERSONA_REGISTRY, } from './council-personas.js';
+export { BUILTIN_COUNCIL_PERSONA_IDS, BUILTIN_COUNCIL_PERSONAS, CouncilPersonaRegistry, createCouncilPersonaRegistry, DEFAULT_COUNCIL_PERSONA_REGISTRY, } from './council-personas.js';
 export { BUILTIN_COUNCIL_PROFILES, CouncilProfileRegistry, createCouncilProfileRegistry, DEFAULT_COUNCIL_APPROVAL_FRACTION, DEFAULT_COUNCIL_JUDGE_MAX_TOKENS, DEFAULT_COUNCIL_OVERALL_TIMEOUT_MS, DEFAULT_COUNCIL_PER_CALL_TIMEOUT_MS, DEFAULT_COUNCIL_PROFILE_REGISTRY, DEFAULT_COUNCIL_QUORUM_FRACTION, DEFAULT_COUNCIL_VOTER_MAX_TOKENS, normalizeCouncilProfile, resolveCouncilProfile, } from './council-profiles.js';
 export { buildCouncilJudgeSystemPrompt, buildCouncilJudgeUserPrompt, buildCouncilQuestionPrompt, buildCouncilVoterSystemPrompt, buildCouncilVoterUserPrompt, COUNCIL_JUDGE_PROMPT_PATH, COUNCIL_VOTER_PROMPT_PATH, } from './council-prompts.js';
 export { COUNCIL_REFUSAL_OPTION_ID, CouncilOrchestrator, type CouncilOrchestratorOptions, DEFAULT_COUNCIL_MAX_CONCURRENCY, MAX_COUNCIL_CONCURRENCY, } from './council-orchestrator.js';