@wrongstack/core 0.299.0 → 0.301.0

package/dist/plugins/auto-review-plugin.d.ts

@@ -15,6 +15,8 @@ export interface AutoReviewConfig {
      * omitted), and the remaining entries form the fallback chain.
      */
     fallbackProfile?: string | undefined;
+    /** How each review chooses its starting model from the resolved profile pool. */
+    modelSelection?: 'round-robin' | 'random' | undefined;
     /** Debounce window in ms — wait for quiet before firing review (default 15000). */
     debounceMs?: number | undefined;
     /** Max files per review batch (default 15). */
@@ -40,6 +42,7 @@ export interface ResolvedAutoReviewConfig {
     provider: string;
     model: string;
     fallbackModels: string[];
+    modelSelection: 'round-robin' | 'random';
     debounceMs: number;
     maxFilesPerBatch: number;
     maxConcurrentReviews: number;

package/dist/plugins/cloud-config-sync-plugin.d.ts

@@ -0,0 +1,22 @@
+import type { ConfigStore } from '../types/config.js';
+import type { Plugin } from '../types/plugin.js';
+import type { SecretVault } from '../types/secret-vault.js';
+import type { WstackPaths } from '../utils/wstack-paths.js';
+interface CloudConfigSyncPluginOptions {
+    paths?: WstackPaths | undefined;
+    configStore?: ConfigStore | undefined;
+    vault?: SecretVault | undefined;
+    appVersion?: string | undefined;
+}
+/**
+ * CloudConfigSyncPlugin — background config synchronization with my.wrongstack.com.
+ *
+ * Registers `/cloudsync` and, while enabled, runs a pull-then-push pass every
+ * `cloudSync.intervalSeconds` (default 300). Distinct from `wstack-sync` (the legacy
+ * GitHub category sync): this speaks the portal's namespaced, schema-validated,
+ * secret-free sync API v1 and never uploads credential material — the sanitizer in
+ * `storage/cloud-config-sync/sanitize.ts` is the client half of the server's contract.
+ */
+export declare function createCloudConfigSyncPlugin(opts?: CloudConfigSyncPluginOptions): Plugin;
+export {};
+//# sourceMappingURL=cloud-config-sync-plugin.d.ts.map

package/dist/plugins/review-claim-registry.d.ts

@@ -1,24 +1,39 @@
 import type { EventBus } from '../kernel/events.js';
 import type { PluginAPI } from '../types/plugin.js';
 import type { ReviewContextBundle } from './review-types.js';
+export interface ClaimStoreOptions {
+    /**
+     * Override the shared claim-ledger directory. Defaults to `<cwd>/.wrongstack`
+     * (git-ignored, shared by every session on the same working tree). Tests
+     * inject a temp dir; two EventBuses sharing one dir dedupe like two hosts.
+     */
+    storeDir?: string | undefined;
+    /** Claim lifetime in ms before it is treated as stale (default 30 min). */
+    ttlMs?: number | undefined;
+    /** Ledger compaction threshold in lines (default 10,000). Test override. */
+    maxLedgerLines?: number | undefined;
+}
+export declare function breakStaleLock(lockPath: string): Promise<boolean>;
 /**
  * Record review events emitted outside the automatic plugin paths, such as
  * `/review`, so the post-session pass also avoids repeating those files.
  */
-export declare function recordStartedReview(events: EventBus, payload: unknown): void;
+export declare function recordStartedReview(events: EventBus, payload: unknown, opts?: ClaimStoreOptions | undefined): Promise<void>;
 /**
  * Release the exact claims associated with a completed review bundle. Bundle
  * identity prevents an older completion from removing newer in-flight claims.
  */
-export declare function recordCompletedReview(events: EventBus, payload: unknown): void;
+export declare function recordCompletedReview(events: EventBus, payload: unknown): Promise<void>;
 /**
  * Atomically claim review inputs and emit only files whose exact content does
- * not already have a review in progress. The returned bundle contains only
- * claimed files and may be a strict subset of the input.
+ * not already have a review in progress — across every session sharing the
+ * working tree. The returned bundle contains only claimed files and may be a
+ * strict subset of the input.
  *
- * Claims are installed immediately before the synchronous event emission, so
- * concurrent mid/post-session handlers cannot enqueue the same content twice.
- * A synchronous emit failure rolls the claims back.
+ * Claims are installed in the shared ledger (under its exclusive lock) before
+ * the event emission, so concurrent mid/post-session handlers — in this
+ * process or another — cannot enqueue the same content twice. A synchronous
+ * emit failure rolls the claims back.
  */
-export declare function emitReviewIfChanged(api: Pick<PluginAPI, 'events' | 'emitCustom'>, bundle: ReviewContextBundle): ReviewContextBundle | null;
+export declare function emitReviewIfChanged(api: Pick<PluginAPI, 'events' | 'emitCustom'>, bundle: ReviewContextBundle, opts?: ClaimStoreOptions | undefined): Promise<ReviewContextBundle | null>;
 //# sourceMappingURL=review-claim-registry.d.ts.map

package/dist/plugins/review-types.d.ts

@@ -45,6 +45,8 @@ export interface ReviewContextBundle {
      * Absent for ordinary Chimera and manual review triggers.
      */
     reviewFallbackModels?: string[] | undefined;
+    /** Selection policy for the resolved auto-review profile pool. */
+    reviewModelSelection?: 'round-robin' | 'random' | undefined;
     /**
      * Cascade severity threshold from the auto-review plugin config.
      * When the review subagent finds findings at or above this level, a

package/dist/registry/index.js

@@ -269,80 +269,6 @@ function formatContext(ctx) {
   return parts.length > 0 ? `[${parts.join(" ")}]` : "";
 }
 
-// src/utils/tool-description-mode.ts
-var ORIGINAL_TOOL_DESCRIPTION = /* @__PURE__ */ Symbol.for("wrongstack.tool.originalDescription");
-function normalizeToolDescriptionMode(value) {
-  if (typeof value !== "string") return void 0;
-  const raw = value.trim().toLowerCase();
-  if (raw === "extend" || raw === "extended" || raw === "full") return "extend";
-  if (raw === "simple" || raw === "short" || raw === "brief") return "simple";
-  return void 0;
-}
-function simplifyToolDescription(text, opts = {}) {
-  const maxSentences = Math.max(1, opts.maxSentences ?? 2);
-  const maxChars = Math.max(40, opts.maxChars ?? 180);
-  const normalized = text.replace(/\r\n?/g, "\n").split("\n").map((line) => line.trim()).filter(Boolean).join(" ").replace(/\s+/g, " ").trim();
-  if (normalized.length <= maxChars) return normalized;
-  const sentences = normalized.match(/[^.!?]+[.!?]+(?=\s|$)|[^.!?]+$/g) ?? [normalized];
-  const selected = [];
-  for (const sentence of sentences) {
-    selected.push(sentence.trim());
-    const candidate = selected.join(" ");
-    if (selected.length >= maxSentences || candidate.length >= maxChars) break;
-  }
-  const summary = selected.join(" ").trim() || normalized;
-  if (summary.length <= maxChars) return summary;
-  const hardLimit = maxChars - 4;
-  const boundary = findWordBoundary(summary, hardLimit);
-  return `${summary.slice(0, boundary > 0 ? boundary : hardLimit).trimEnd()} ...`;
-}
-function applyToolDescriptionModeToTool(tool, mode) {
-  const existingOriginal = getOriginalDescription(tool);
-  if (mode === "extend" && !existingOriginal) return tool;
-  const original = existingOriginal ?? {
-    description: tool.description,
-    usageHint: tool.usageHint
-  };
-  const next = mode === "simple" ? withDescription(tool, {
-    description: simplifyToolDescription(original.description),
-    usageHint: original.usageHint === void 0 ? void 0 : simplifyToolDescription(original.usageHint)
-  }) : withDescription(tool, original);
-  return attachOriginalDescription(next, original);
-}
-function getOriginalDescription(tool) {
-  return tool[ORIGINAL_TOOL_DESCRIPTION];
-}
-function attachOriginalDescription(tool, original) {
-  Object.defineProperty(tool, ORIGINAL_TOOL_DESCRIPTION, {
-    configurable: true,
-    enumerable: false,
-    value: original,
-    writable: true
-  });
-  return tool;
-}
-function withDescription(tool, next) {
-  const copy = {
-    ...tool,
-    description: next.description,
-    usageHint: next.usageHint
-  };
-  if (next.usageHint === void 0) {
-    delete copy.usageHint;
-  }
-  return copy;
-}
-function findWordBoundary(text, limit) {
-  const semantic = Math.max(
-    text.lastIndexOf(". ", limit),
-    text.lastIndexOf("; ", limit),
-    text.lastIndexOf(", ", limit)
-  );
-  if (semantic > 40) return semantic + 1;
-  const space = text.lastIndexOf(" ", limit);
-  return space > 40 ? space : limit;
-}
-
 // src/utils/tool-wire-compact.ts
 var TOOL_DESCRIPTION_MAX_CHARS = 400;
 var SCHEMA_DESCRIPTION_MAX_CHARS = 120;
@@ -462,6 +388,80 @@ function estimateToolDefTokens(tool) {
   return RoughTokenEstimate(tool.name) + RoughTokenEstimate(compact.description) + RoughTokenEstimate(JSON.stringify(compact.inputSchema));
 }
 
+// src/utils/tool-description-mode.ts
+var ORIGINAL_TOOL_DESCRIPTION = /* @__PURE__ */ Symbol.for("wrongstack.tool.originalDescription");
+function normalizeToolDescriptionMode(value) {
+  if (typeof value !== "string") return void 0;
+  const raw = value.trim().toLowerCase();
+  if (raw === "extend" || raw === "extended" || raw === "full") return "extend";
+  if (raw === "simple" || raw === "short" || raw === "brief") return "simple";
+  return void 0;
+}
+function simplifyToolDescription(text, opts = {}) {
+  const maxSentences = Math.max(1, opts.maxSentences ?? 2);
+  const maxChars = Math.max(40, opts.maxChars ?? 180);
+  const normalized = text.replace(/\r\n?/g, "\n").split("\n").map((line) => line.trim()).filter(Boolean).join(" ").replace(/\s+/g, " ").trim();
+  if (normalized.length <= maxChars) return normalized;
+  const sentences = normalized.match(/[^.!?]+[.!?]+(?=\s|$)|[^.!?]+$/g) ?? [normalized];
+  const selected = [];
+  for (const sentence of sentences) {
+    selected.push(sentence.trim());
+    const candidate = selected.join(" ");
+    if (selected.length >= maxSentences || candidate.length >= maxChars) break;
+  }
+  const summary = selected.join(" ").trim() || normalized;
+  if (summary.length <= maxChars) return summary;
+  const hardLimit = maxChars - 4;
+  const boundary = findWordBoundary(summary, hardLimit);
+  return `${summary.slice(0, boundary > 0 ? boundary : hardLimit).trimEnd()} ...`;
+}
+function applyToolDescriptionModeToTool(tool, mode) {
+  const existingOriginal = getOriginalDescription(tool);
+  if (mode === "extend" && !existingOriginal) return tool;
+  const original = existingOriginal ?? {
+    description: tool.description,
+    usageHint: tool.usageHint
+  };
+  const next = mode === "simple" ? withDescription(tool, {
+    description: simplifyToolDescription(original.description),
+    usageHint: original.usageHint === void 0 ? void 0 : simplifyToolDescription(original.usageHint)
+  }) : withDescription(tool, original);
+  return attachOriginalDescription(next, original);
+}
+function getOriginalDescription(tool) {
+  return tool[ORIGINAL_TOOL_DESCRIPTION];
+}
+function attachOriginalDescription(tool, original) {
+  Object.defineProperty(tool, ORIGINAL_TOOL_DESCRIPTION, {
+    configurable: true,
+    enumerable: false,
+    value: original,
+    writable: true
+  });
+  return tool;
+}
+function withDescription(tool, next) {
+  const copy = {
+    ...tool,
+    description: next.description,
+    usageHint: next.usageHint
+  };
+  if (next.usageHint === void 0) {
+    delete copy.usageHint;
+  }
+  return copy;
+}
+function findWordBoundary(text, limit) {
+  const semantic = Math.max(
+    text.lastIndexOf(". ", limit),
+    text.lastIndexOf("; ", limit),
+    text.lastIndexOf(", ", limit)
+  );
+  if (semantic > 40) return semantic + 1;
+  const space = text.lastIndexOf(" ", limit);
+  return space > 40 ? space : limit;
+}
+
 // src/registry/tool-registry.ts
 var ToolRegistry = class _ToolRegistry {
   tools = /* @__PURE__ */ new Map();
@@ -477,6 +477,15 @@ var ToolRegistry = class _ToolRegistry {
   /** Cached `list()` result, frozen after build. Invalidated on _version change. */
   _listSnapshot;
   _listSnapshotVersion = -1;
+  /**
+   * Optional direct provider surface. `undefined` preserves the legacy
+   * behaviour (every enabled catalog tool is direct); when set, `list()` still
+   * exposes the complete executable catalog while `listForProvider()` returns
+   * only these names. This keeps lazy tools discoverable by tool_search/tool_use.
+   */
+  _providerToolNames;
+  _providerListSnapshot;
+  _providerListSnapshotVersion = -1;
   /** Pre-compute tool definition token estimate once at registration time. */
   _stampDefTokens(tool) {
     if (tool._estDefTokens === void 0) {
@@ -726,6 +735,30 @@ var ToolRegistry = class _ToolRegistry {
     this._listSnapshotVersion = this._version;
     return arr;
   }
+  /** Replace the direct provider surface. Pass `undefined` to expose the catalog. */
+  setProviderToolNames(names) {
+    this._providerToolNames = names ? new Set(names) : void 0;
+    this._version++;
+  }
+  /** Add registered or future tool names to the direct provider surface. */
+  exposeToProvider(names) {
+    if (!this._providerToolNames) return;
+    for (const name of typeof names === "string" ? [names] : names) {
+      this._providerToolNames.add(name);
+    }
+    this._version++;
+  }
+  /** Tools serialized into provider requests and described by the system prompt. */
+  listForProvider() {
+    if (!this._providerToolNames) return this.list();
+    if (this._providerListSnapshot && this._version === this._providerListSnapshotVersion) {
+      return this._providerListSnapshot;
+    }
+    const arr = Array.from(this.tools.entries()).filter(([name]) => !this._disabled.has(name) && this._providerToolNames?.has(name) === true).map(([, entry]) => entry.tool);
+    this._providerListSnapshot = arr;
+    this._providerListSnapshotVersion = this._version;
+    return arr;
+  }
   /**
    * Group tools by their `category` field. Tools without a category
    * are placed under the key `""` (empty string). Returns a Map of
@@ -752,6 +785,7 @@ var ToolRegistry = class _ToolRegistry {
     this.tools.clear();
     this.descriptionModes.clear();
     this._disabled.clear();
+    this._providerToolNames = void 0;
     this._version++;
   }
   /**
@@ -770,6 +804,7 @@ var ToolRegistry = class _ToolRegistry {
     for (const name of this._disabled) {
       copy._disabled.add(name);
     }
+    copy._providerToolNames = this._providerToolNames ? new Set(this._providerToolNames) : void 0;
     copy._version = this._version;
     return copy;
   }

package/dist/registry/tool-registry.d.ts

@@ -36,6 +36,15 @@ export declare class ToolRegistry {
     /** Cached `list()` result, frozen after build. Invalidated on _version change. */
     private _listSnapshot;
     private _listSnapshotVersion;
+    /**
+     * Optional direct provider surface. `undefined` preserves the legacy
+     * behaviour (every enabled catalog tool is direct); when set, `list()` still
+     * exposes the complete executable catalog while `listForProvider()` returns
+     * only these names. This keeps lazy tools discoverable by tool_search/tool_use.
+     */
+    private _providerToolNames;
+    private _providerListSnapshot;
+    private _providerListSnapshotVersion;
     /** Pre-compute tool definition token estimate once at registration time. */
     private _stampDefTokens;
     /** Apply the description mode transform and stamp token estimates. */
@@ -134,6 +143,12 @@ export declare class ToolRegistry {
         owner: string;
     }[];
     list(): Tool[];
+    /** Replace the direct provider surface. Pass `undefined` to expose the catalog. */
+    setProviderToolNames(names: readonly string[] | undefined): void;
+    /** Add registered or future tool names to the direct provider surface. */
+    exposeToProvider(names: string | readonly string[]): void;
+    /** Tools serialized into provider requests and described by the system prompt. */
+    listForProvider(): Tool[];
     /**
      * Group tools by their `category` field. Tools without a category
      * are placed under the key `""` (empty string). Returns a Map of

package/dist/security/capabilities.d.ts

@@ -45,6 +45,8 @@ export declare const ToolCapabilities: {
     readonly NET_OUTBOUND: 'net.outbound';
     /** Can mutate in-memory session todos only. */
     readonly SESSION_TODO: 'session.todo';
+    /** Can park after-task `<nextsteps>` suggestions for the current turn. */
+    readonly SESSION_NEXTSTEPS: 'session.nextsteps';
     /** Can mutate in-memory session mode only. */
     readonly SESSION_MODE: 'session.mode';
     /** Can inspect registered tool metadata. */

package/dist/security/index.d.ts

@@ -8,9 +8,9 @@ export { restrictDirPermissions, restrictFilePermissions, SECRET_DIR_MODE, SECRE
 export { evaluateToolKanbanBoundary, type ToolKanbanBoundaryEvaluation, } from './kanban-boundary.js';
 export { AutoApprovePermissionPolicy, alwaysAllowUnavailableReason, DefaultPermissionPolicy, type PermissionPolicyOptions, } from './permission-policy.js';
 export { TRUST_POLICY_JSON_SCHEMA, TRUST_POLICY_LIMITS, TRUST_POLICY_SCHEMA_VERSION, type TrustPolicyDiagnostic, type TrustPolicyDiagnosticCode, type TrustPolicyValidationResult, validateTrustPolicy, } from './permission-policy-schema.js';
-export { ReadOnlyPermissionPolicy } from './readonly-permission-policy.js';
+export { ReadOnlyPermissionPolicy, toolMutates } from './readonly-permission-policy.js';
 export { DefaultSecretScrubber } from './secret-scrubber.js';
-export { base32Decode, base32Encode, buildOtpAuthUri, generateRecoveryCodes, generateTotpSecret, generateTotp, hashRecoveryCode, verifyRecoveryCode, verifyTotp, } from './totp.js';
+export { base32Decode, base32Encode, buildOtpAuthUri, generateRecoveryCodes, generateTotpSecret, generateTotp, hashRecoveryCode, verifyRecoveryCode, verifyTotp, verifyTotpCounter, } from './totp.js';
 export { DefaultSecretVault, migratePlaintextSecrets, rewriteConfigEncrypted, rotateConfigKeys, type SecretVaultOptions, } from './secret-vault.js';
 export type { CompatibilityTrustBoundaryOptions, TrustActor, TrustActorKind, TrustAllowDecision, TrustAttribute, TrustAuthContext, TrustAuthMethod, TrustBoundary, TrustBoundaryAuditEntry, TrustBoundaryDecision, TrustBoundaryRequest, TrustConfirmDecision, TrustDecodeIssue, TrustDecodeResult, TrustDenyDecision, TrustRisk, TrustScope, TrustScopedTokenDecision, TrustSubject, TrustSurface, } from './trust-boundary.js';
 export { createCompatibilityTrustBoundary, decodeTrustBoundaryDecision, decodeTrustBoundaryRequest, isTrustDecisionAllowed, TRUST_BOUNDARY_VERSION, } from './trust-boundary.js';