@wrongstack/core 0.298.2 → 0.299.0

package/dist/execution/index.js

@@ -4193,7 +4193,7 @@ function truncate(s, max) {
 var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|usage[-_\s]*limit[-_\s]*(?:reached|exceeded)/i;
 
 // src/types/provider.ts
-var CONTEXT_OVERFLOW_RE = /context.length|context.window|maximum context|max.*tokens?.*exceeded|prompt is too long|too long|exceeds the context|\btokens\b.*exceed|too many tokens|reduce the length|resulted in \d+ tokens|input.{0,12}too (?:large|long)|context_length_exceeded/i;
+var CONTEXT_OVERFLOW_RE = /context.length|context.window|maximum context|max.*tokens?.*exceeded|(?:prompt|request|input|messages?).{0,12}too (?:large|long)|exceeds the context|\btokens\b.*exceed|too many tokens|reduce the length|resulted in \d+ tokens|context_length_exceeded/i;
 var CONTENT_FILTER_RE = /content.(filter|policy|moderation)|safety (system|filter)/i;
 var RATE_LIMIT_EXCEEDED_RE = /rate[-_\s]*limit[-_\s]*exceeded/i;
 function classifyProviderError(status, body, message) {
@@ -4203,7 +4203,7 @@ function classifyProviderError(status, body, message) {
   if (status === 408) return "timeout";
   if (status === 599) return "stream_hang";
   if (status === 402 || QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
-  if (status === 429 && body?.message && RATE_LIMIT_EXCEEDED_RE.test(body.message)) {
+  if (status === 429 && body?.message && body.type !== "rate_limit_exceeded" && RATE_LIMIT_EXCEEDED_RE.test(body.message)) {
     return "quota_exhausted";
   }
   if (type === "rate_limit_error" || status === 429) return "rate_limit";
@@ -4280,7 +4280,7 @@ var ProviderError = class extends WrongStackError {
     const e = err;
     const name = e.name;
     if (typeof name !== "string" || !name.endsWith("Error")) return false;
-    return typeof e.status === "number" && typeof e.retryable === "boolean" && typeof e.kind === "string";
+    return typeof e.status === "number" && typeof e.retryable === "boolean" && typeof e.kind === "string" && typeof e.describe === "function";
   }
   constructor(message, status, retryable, providerId, opts = {}) {
     const kind = opts.kind ?? classifyProviderError(status, opts.body, message);
@@ -4785,6 +4785,9 @@ var BUILTIN_COUNCIL_PERSONAS = Object.freeze([
     tags: ["users", "usability", "accessibility"]
   })
 ]);
+var BUILTIN_COUNCIL_PERSONA_IDS = Object.freeze(
+  BUILTIN_COUNCIL_PERSONAS.map((persona) => persona.id)
+);
 var CouncilPersonaRegistry = class _CouncilPersonaRegistry {
   byId;
   constructor(personas = []) {
@@ -5906,6 +5909,44 @@ function errorMessage(error) {
 }
 
 // src/execution/council-brain.ts
+var MAX_CUSTOM_PERSONA_ID_CHARS = 48;
+function customPersonaId(raw, index) {
+  const slug = raw.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, MAX_CUSTOM_PERSONA_ID_CHARS).replace(/-+$/g, "");
+  return slug ? `custom-${slug}` : `custom-${index + 1}`;
+}
+function resolvePersonaRegistry(voters) {
+  let registry = DEFAULT_COUNCIL_PERSONA_REGISTRY;
+  const personaIds = [];
+  const byRawText = /* @__PURE__ */ new Map();
+  voters.forEach((voter, index) => {
+    const raw = voter.persona?.trim();
+    if (!raw) {
+      personaIds.push("executor");
+      return;
+    }
+    if (registry.has(raw)) {
+      personaIds.push(raw);
+      return;
+    }
+    const existing = byRawText.get(raw);
+    if (existing) {
+      personaIds.push(existing);
+      return;
+    }
+    let id = customPersonaId(raw, index);
+    let suffix = 2;
+    while (registry.has(id)) id = `${customPersonaId(raw, index)}-${suffix++}`;
+    registry = registry.with({
+      id,
+      name: raw.length <= 40 ? raw : `${raw.slice(0, 39)}\u2026`,
+      description: "Custom decision lens supplied by the host configuration.",
+      instruction: raw
+    });
+    byRawText.set(raw, id);
+    personaIds.push(id);
+  });
+  return { registry, personaIds };
+}
 function createCouncilBrainArbiter(opts) {
   if (opts.voters.length === 0) {
     throw new Error("createCouncilBrainArbiter: at least one voter is required.");
@@ -5971,14 +6012,15 @@ function createCouncilBrainArbiter(opts) {
     }
     return makeSeatCallerForVoter(voter);
   };
+  const { registry: personas, personaIds } = resolvePersonaRegistry(opts.voters);
   const seats = opts.voters.map((voter, i) => ({
     id: `voter-${i}`,
     label: voter.label ?? voter.model,
-    persona: voter.persona ?? "executor",
+    persona: personaIds[i] ?? "executor",
     target: {
       providerId: voter.provider.id,
       model: voter.model,
-      role: voter.persona ?? "executor"
+      role: personaIds[i] ?? "executor"
     },
     weight: voter.weight,
     veto: voter.veto
@@ -6000,6 +6042,9 @@ function createCouncilBrainArbiter(opts) {
   };
   const orchestrator = new CouncilOrchestrator({
     defaultProfile: "brain-council-adapter",
+    // Carries the ad-hoc lenses registered above; without it the orchestrator
+    // falls back to the built-in registry and rejects every custom persona.
+    personas,
     // Previously never passed, so the panel was pinned at the orchestrator's
     // default of 3 concurrent seats no matter how many voters were configured.
     ...opts.maxConcurrency !== void 0 ? { maxConcurrency: opts.maxConcurrency } : {},
@@ -7820,7 +7865,9 @@ function safeProfileName(name) {
 function activeProfileName(globalRoot) {
   try {
     const parsed = JSON.parse(fs.readFileSync(path4.join(globalRoot, "config.json"), "utf8"));
-    return safeProfileName(typeof parsed.activeProfile === "string" ? parsed.activeProfile : void 0);
+    return safeProfileName(
+      typeof parsed.activeProfile === "string" ? parsed.activeProfile : void 0
+    );
   } catch {
     return "default";
   }
@@ -7900,6 +7947,7 @@ function resolveWstackPaths(opts) {
     projectPlan: path4.join(projectDir, "plan.json"),
     projectAutophase: path4.join(projectDir, "autophase"),
     projectSddBoards: path4.join(projectDir, "sdd-boards"),
+    projectRequirementIntakes: path4.join(projectDir, "requirement-intakes"),
     syncConfig: path4.join(profileDir, "sync.json"),
     configHistoryDir: path4.join(globalRoot, "config-history"),
     projectStatus: (projectHash2) => path4.join(globalRoot, "projects", projectHash2, "status.json")
@@ -20469,7 +20517,8 @@ var OneShotOrchestrator = class {
   resolveTarget(input, config) {
     if (input.role && this.opts.modelRouter) {
       const pick = this.opts.modelRouter.pickForTask(input.role, "");
-      if (pick) {
+      const hasExplicitTarget = Boolean(input.providerId || input.model);
+      if (pick && (pick.fromMatrix === true || !hasExplicitTarget)) {
         return { providerId: pick.provider, model: pick.model };
       }
     }
@@ -21142,6 +21191,7 @@ export {
   AutonomousRunner,
   BRAIN_EVALUATION_CASE_VERSION,
   BUILTIN_COUNCIL_PERSONAS,
+  BUILTIN_COUNCIL_PERSONA_IDS,
   BUILTIN_COUNCIL_PROFILES,
   COUNCIL_JUDGE_PROMPT_PATH,
   COUNCIL_REFUSAL_OPTION_ID,

package/dist/goal/index.js

@@ -2790,7 +2790,9 @@ function safeProfileName(name) {
 function activeProfileName(globalRoot) {
   try {
     const parsed = JSON.parse(fs.readFileSync(path4.join(globalRoot, "config.json"), "utf8"));
-    return safeProfileName(typeof parsed.activeProfile === "string" ? parsed.activeProfile : void 0);
+    return safeProfileName(
+      typeof parsed.activeProfile === "string" ? parsed.activeProfile : void 0
+    );
   } catch {
     return "default";
   }
@@ -2870,6 +2872,7 @@ function resolveWstackPaths(opts) {
     projectPlan: path4.join(projectDir, "plan.json"),
     projectAutophase: path4.join(projectDir, "autophase"),
     projectSddBoards: path4.join(projectDir, "sdd-boards"),
+    projectRequirementIntakes: path4.join(projectDir, "requirement-intakes"),
     syncConfig: path4.join(profileDir, "sync.json"),
     configHistoryDir: path4.join(globalRoot, "config-history"),
     projectStatus: (projectHash2) => path4.join(globalRoot, "projects", projectHash2, "status.json")

package/dist/hooks/index.js

@@ -1,3 +1,121 @@
+// src/utils/ip-guard.ts
+import * as dns from "node:dns/promises";
+import * as net from "node:net";
+function isPrivateIPv4(addr) {
+  const parts = addr.split(".").map((p) => Number.parseInt(p, 10));
+  if (parts.length !== 4 || parts.some((n) => Number.isNaN(n) || n < 0 || n > 255)) {
+    return true;
+  }
+  const [a, b, c] = parts;
+  if (a === 0) return true;
+  if (a === 10) return true;
+  if (a === 127) return true;
+  if (a === 169 && b === 254) return true;
+  if (a === 172 && b >= 16 && b <= 31) return true;
+  if (a === 192 && b === 168) return true;
+  if (a === 192 && b === 0 && c === 0) return true;
+  if (a === 100 && b >= 64 && b <= 127) return true;
+  if (a >= 224) return true;
+  return false;
+}
+function isPrivateIPv6(raw) {
+  const lower = raw.toLowerCase();
+  if (lower === "::" || lower === "::1") return true;
+  const groups = expandIPv6(lower);
+  if (!groups) return true;
+  if (groups[0] === 100 && groups[1] === 65435 && groups[2] === 1) return true;
+  if (groups[0] === 0 && groups[1] === 0 && groups[2] === 0 && groups[3] === 0 && groups[4] === 0 && groups[5] === 65535) {
+    const a = (groups[6] ?? 0) >> 8;
+    const b = (groups[6] ?? 0) & 255;
+    const c = (groups[7] ?? 0) >> 8;
+    const d = (groups[7] ?? 0) & 255;
+    return isPrivateIPv4(`${a}.${b}.${c}.${d}`);
+  }
+  const embedded = embeddedIPv4(groups);
+  if (embedded) return isPrivateIPv4(embedded);
+  const high = groups[0] ?? 0;
+  if ((high & 65024) === 64512) return true;
+  if ((high & 65472) === 65152) return true;
+  if ((high & 65280) === 65280) return true;
+  return false;
+}
+function quad(hi, lo) {
+  return `${(hi ?? 0) >> 8}.${(hi ?? 0) & 255}.${(lo ?? 0) >> 8}.${(lo ?? 0) & 255}`;
+}
+function embeddedIPv4(groups) {
+  const g = (i) => groups[i] ?? 0;
+  if (g(0) === 100 && g(1) === 65435) {
+    if (g(2) === 0 && g(3) === 0 && g(4) === 0 && g(5) === 0) {
+      return quad(g(6), g(7));
+    }
+  }
+  if (g(0) === 8194) return quad(g(1), g(2));
+  if (g(0) === 8193 && g(1) === 0) {
+    return quad(~g(6) & 65535, ~g(7) & 65535);
+  }
+  if ((g(4) === 0 || g(4) === 512) && g(5) === 24318) {
+    return quad(g(6), g(7));
+  }
+  const highZero = g(0) === 0 && g(1) === 0 && g(2) === 0 && g(3) === 0;
+  if (highZero && g(4) === 65535 && g(5) === 0) return quad(g(6), g(7));
+  if (highZero && g(4) === 0 && g(5) === 0) return quad(g(6), g(7));
+  return void 0;
+}
+function expandIPv6(addr) {
+  const parts = addr.split("::");
+  if (parts.length > 2) return null;
+  const parseGroups = (s) => {
+    if (s === "") return [];
+    const out = [];
+    for (const g of s.split(":")) {
+      if (g.length === 0 || g.length > 4) return null;
+      const n = Number.parseInt(g, 16);
+      if (Number.isNaN(n) || n < 0 || n > 65535) return null;
+      out.push(n);
+    }
+    return out;
+  };
+  if (parts.length === 1) {
+    const groups = parseGroups(parts[0] ?? "");
+    if (groups?.length !== 8) return null;
+    return groups;
+  }
+  const head = parseGroups(parts[0] ?? "");
+  const tail = parseGroups(parts[1] ?? "");
+  if (!head || !tail) return null;
+  const fill = 8 - head.length - tail.length;
+  if (fill < 0) return null;
+  return [...head, ...new Array(fill).fill(0), ...tail];
+}
+async function assertNotPrivateHost(hostname) {
+  const host = hostname.startsWith("[") && hostname.endsWith("]") ? hostname.slice(1, -1) : hostname;
+  if (host === "localhost" || host.endsWith(".localhost")) {
+    throw new Error("fetch: blocked localhost target");
+  }
+  const ipVersion = net.isIP(host);
+  if (ipVersion === 4) {
+    if (isPrivateIPv4(host)) {
+      throw new Error(`fetch: blocked private/loopback address "${host}"`);
+    }
+  } else if (ipVersion === 6) {
+    if (isPrivateIPv6(host)) {
+      throw new Error(`fetch: blocked private/loopback address "${host}"`);
+    }
+  } else {
+    try {
+      const records = await dns.lookup(host, { all: true });
+      for (const r of records) {
+        const bad = r.family === 4 ? isPrivateIPv4(r.address) : isPrivateIPv6(r.address);
+        if (bad) {
+          throw new Error(`fetch: resolved to private address ${r.address}`);
+        }
+      }
+    } catch (err) {
+      if (err instanceof Error && err.message.startsWith("fetch:")) throw err;
+    }
+  }
+}
+
 // src/hooks/shell-executor.ts
 import { spawn } from "node:child_process";
 
@@ -424,18 +542,26 @@ function parseHookOutcome(stdout) {
 // src/hooks/http-executor.ts
 var DEFAULT_TIMEOUT_MS2 = 5e3;
 var MAX_OUTPUT_BYTES2 = 64 * 1024;
-function isAllowedUrl(raw) {
+async function isAllowedUrl(raw) {
+  let url;
   try {
-    const url = new URL(raw);
-    if (url.protocol === "https:") return true;
-    if (url.protocol !== "http:") return false;
-    return url.hostname === "localhost" || url.hostname === "127.0.0.1" || url.hostname === "[::1]";
+    url = new URL(raw);
   } catch {
     return false;
   }
+  if (url.protocol === "https:") {
+    try {
+      await assertNotPrivateHost(url.hostname);
+      return true;
+    } catch {
+      return false;
+    }
+  }
+  if (url.protocol !== "http:") return false;
+  return url.hostname === "localhost" || url.hostname === "127.0.0.1" || url.hostname === "[::1]";
 }
 async function runHttpHookDetailed(spec, input, logger, options = {}) {
-  if (!isAllowedUrl(spec.url)) {
+  if (!await isAllowedUrl(spec.url)) {
     return {
       outcome: null,
       failure: {

package/dist/hq/exposure.d.ts

@@ -16,17 +16,6 @@
  * ones. Nothing here changes the default bind — it guards the case where the
  * default silently turns a local-only setup into a public one.
  */
-/**
- * The bind the HQ *CLI* surfaces choose on purpose: HQ is the deliberate
- * cross-machine surface, so `wstack hq` and the launch menu reach every
- * interface without an extra flag.
- *
- * This deliberately does not live in `startHqServer`'s default. A caller
- * that never mentions a host — a test, an embedder — has not asked to be
- * published to its network, and that library default stays loopback. Keep
- * the two apart: collapsing them is what turns "HQ is reachable from my
- * phone" into "every embedder silently binds 0.0.0.0".
- */
 export declare const HQ_CLI_DEFAULT_HOST = "0.0.0.0";
 /**
  * Thrown when the bind host and the auth configuration combine into an

package/dist/hq/index.js

@@ -167,7 +167,8 @@ var KNOWN_HQ_CLIENT_FRAME_TYPES = /* @__PURE__ */ new Set([
   "client.event",
   "client.command_poll",
   "client.command_ack",
-  "client.resume"
+  "client.resume",
+  "client.event_poll"
 ]);
 var HQ_CLIENT_KINDS = /* @__PURE__ */ new Set([
   "tui",
@@ -2102,7 +2103,9 @@ function safeProfileName(name) {
 function activeProfileName(globalRoot) {
   try {
     const parsed = JSON.parse(fs2.readFileSync(path2.join(globalRoot, "config.json"), "utf8"));
-    return safeProfileName(typeof parsed.activeProfile === "string" ? parsed.activeProfile : void 0);
+    return safeProfileName(
+      typeof parsed.activeProfile === "string" ? parsed.activeProfile : void 0
+    );
   } catch {
     return "default";
   }
@@ -2182,6 +2185,7 @@ function resolveWstackPaths(opts) {
     projectPlan: path2.join(projectDir, "plan.json"),
     projectAutophase: path2.join(projectDir, "autophase"),
     projectSddBoards: path2.join(projectDir, "sdd-boards"),
+    projectRequirementIntakes: path2.join(projectDir, "requirement-intakes"),
     syncConfig: path2.join(profileDir, "sync.json"),
     configHistoryDir: path2.join(globalRoot, "config-history"),
     projectStatus: (projectHash2) => path2.join(globalRoot, "projects", projectHash2, "status.json")
@@ -4970,6 +4974,7 @@ var HqBootstrapCodeStore = class {
 };
 
 // src/hq/exposure.ts
+import { isIP } from "node:net";
 var HQ_CLI_DEFAULT_HOST = "0.0.0.0";
 var HqInsecureExposureError = class extends Error {
   constructor(message) {
@@ -4979,8 +4984,15 @@ var HqInsecureExposureError = class extends Error {
 };
 function isLoopbackHost(host) {
   const normalized = host.trim().toLowerCase().replace(/^\[/, "").replace(/\]$/, "");
-  if (normalized === "localhost" || normalized === "::1") return true;
-  return /^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(normalized);
+  if (normalized === "localhost") return true;
+  const family = isIP(normalized);
+  if (family === 4) {
+    return normalized.startsWith("127.");
+  }
+  if (family === 6) {
+    return normalized === "::1" || /^::ffff:127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(normalized);
+  }
+  return false;
 }
 function isOpenMode(input) {
   return !input.hasBrowserTokens && !input.hasPassword;

package/dist/hq/protocol/client.d.ts

@@ -82,5 +82,18 @@ export interface HqClientResumeMessage {
     clientId?: string;
     projectId?: string;
 }
-export type HqClientMessage = HqClientHelloMessage | HqClientEventMessage | HqClientCommandPollMessage | HqClientCommandAckMessage | HqClientResumeMessage;
+export type HqClientMessage = HqClientHelloMessage | HqClientEventMessage | HqClientCommandPollMessage | HqClientCommandAckMessage | HqClientResumeMessage | HqClientEventPollMessage;
+/**
+ * Proactive gap-fill: a client can request missed envelopes by `clientId`
+ * and `afterSeq` without waiting for the push path. The server replies with
+ * `hq.resume_gap` (bounded list) or `hq.snapshot` when the gap is too large.
+ * See `docs/plans/hq-evolution-2026-08.md` §2.2.
+ */
+export interface HqClientEventPollMessage {
+    type: 'client.event_poll';
+    clientId: string;
+    projectId: string;
+    afterSeq: number;
+    limit?: number;
+}
 //# sourceMappingURL=client.d.ts.map

package/dist/hq/protocol/fleet.d.ts

@@ -65,6 +65,8 @@ export interface HqFleetSummary {
 }
 export interface HqQueuedCommand {
     commandId: string;
+    /** Idempotency key deduplicates commands across leader handoffs (§2.2). */
+    idempotencyKey?: string;
     type: string;
     createdAt: string;
     payload: unknown;

package/dist/hq/protocol.js

@@ -167,7 +167,8 @@ var KNOWN_HQ_CLIENT_FRAME_TYPES = /* @__PURE__ */ new Set([
   "client.event",
   "client.command_poll",
   "client.command_ack",
-  "client.resume"
+  "client.resume",
+  "client.event_poll"
 ]);
 var HQ_CLIENT_KINDS = /* @__PURE__ */ new Set([
   "tui",

package/dist/index.d.ts

@@ -69,7 +69,7 @@ export { type BrainApplyResult, type BrainConfigPatch, type BrainConfigSnapshot,
 export { buildLosslessDigest, buildSmartDigest, type ContentScore, type EliseResult, eliseOldToolResults, estimateMessages, extractText, findPreserveStart, hasTextContent, scoreMessage, } from './execution/compaction-core.js';
 export { COUNCIL_REFUSE_OPTION_ID, type CouncilBrainOptions, type CouncilVoter, createCouncilBrainArbiter, } from './execution/council-brain.js';
 export { COUNCIL_REFUSAL_OPTION_ID, CouncilOrchestrator, type CouncilOrchestratorOptions, DEFAULT_COUNCIL_MAX_CONCURRENCY, MAX_COUNCIL_CONCURRENCY, } from './execution/council-orchestrator.js';
-export { BUILTIN_COUNCIL_PERSONAS, CouncilPersonaRegistry, createCouncilPersonaRegistry, DEFAULT_COUNCIL_PERSONA_REGISTRY, } from './execution/council-personas.js';
+export { BUILTIN_COUNCIL_PERSONA_IDS, BUILTIN_COUNCIL_PERSONAS, CouncilPersonaRegistry, createCouncilPersonaRegistry, DEFAULT_COUNCIL_PERSONA_REGISTRY, } from './execution/council-personas.js';
 export { BUILTIN_COUNCIL_PROFILES, CouncilProfileRegistry, createCouncilProfileRegistry, DEFAULT_COUNCIL_APPROVAL_FRACTION, DEFAULT_COUNCIL_JUDGE_MAX_TOKENS, DEFAULT_COUNCIL_OVERALL_TIMEOUT_MS, DEFAULT_COUNCIL_PER_CALL_TIMEOUT_MS, DEFAULT_COUNCIL_PROFILE_REGISTRY, DEFAULT_COUNCIL_QUORUM_FRACTION, DEFAULT_COUNCIL_VOTER_MAX_TOKENS, normalizeCouncilProfile, resolveCouncilProfile, } from './execution/council-profiles.js';
 export { buildCouncilJudgeSystemPrompt, buildCouncilJudgeUserPrompt, buildCouncilQuestionPrompt, buildCouncilVoterSystemPrompt, buildCouncilVoterUserPrompt, COUNCIL_JUDGE_PROMPT_PATH, COUNCIL_VOTER_PROMPT_PATH, } from './execution/council-prompts.js';
 export { type CouncilResolution, type CouncilResolutionInput, type CouncilResolutionSeat, type CouncilResolutionVote, resolveCouncilVotes, } from './execution/council-resolution.js';