@wrongstack/core 0.3.3 → 0.3.7

package/dist/{events-BHIQs4o1.d.ts → events-BBaKeMfb.d.ts}

@@ -1,4 +1,4 @@
-import { U as Usage, a0 as Context, y as ToolProgressEvent, u as Tool } from './context-IovtuTf8.js';
+import { U as Usage, a0 as Context, y as ToolProgressEvent, u as Tool } from './context-B1kBj1lY.js';
 
 /**
  * EventBus — observe-only typed event bus.
@@ -109,6 +109,16 @@ interface EventMap {
         suggestedPattern: string;
         resolve: (decision: 'yes' | 'no' | 'always' | 'deny') => void;
     };
+    /**
+     * Fired after the user chooses 'always' or 'deny' on a confirmation prompt.
+     * The TUI can use this to show a brief notification that the decision was
+     * persisted to the trust file (e.g. "✓ always allowed popo.txt" / "✗ denied popo.txt").
+     */
+    'trust.persisted': {
+        tool: string;
+        pattern: string;
+        decision: 'always' | 'deny';
+    };
     /**
      * `output` is a truncated preview of the tool's serialized result text
      * (capped at ~400 chars by the emitter). UIs render this inline in the

package/dist/execution/index.d.ts

@@ -1,18 +1,18 @@
-export { C as CompactorOptions, a as DefaultErrorHandler, b as DefaultRetryPolicy, H as HybridCompactor, T as ToolExecutor } from '../tool-executor-HsBLGRaA.js';
-import { g as Provider, a0 as Context } from '../context-IovtuTf8.js';
-import { a as Compactor, C as CompactReport } from '../compactor-DpJBI1YH.js';
-import { M as MessageSelector } from '../selector-wT2fv9Fg.js';
-import { E as EventBus } from '../events-BHIQs4o1.js';
-import { c as MiddlewareHandler } from '../system-prompt-Dk1qm8ey.js';
-import { e as ContextWindowAggressiveOn, i as ContextWindowPolicy } from '../config-D2qvAxVd.js';
-import { r as Agent, R as RunResult } from '../index-hWNybrNZ.js';
-import { D as DoneCondition } from '../multi-agent-B9a6sflH.js';
-import { a as SkillLoader, b as SkillManifest, S as SkillEntry } from '../skill-C_7znCIC.js';
+export { C as CompactorOptions, a as DefaultErrorHandler, b as DefaultRetryPolicy, H as HybridCompactor, T as ToolExecutor } from '../tool-executor-B5bgmEgE.js';
+import { g as Provider, a0 as Context } from '../context-B1kBj1lY.js';
+import { a as Compactor, C as CompactReport } from '../compactor-CFky6JKM.js';
+import { M as MessageSelector } from '../selector-DBEiwXBk.js';
+import { E as EventBus } from '../events-BBaKeMfb.js';
+import { c as MiddlewareHandler } from '../system-prompt-DNetCecu.js';
+import { e as ContextWindowAggressiveOn, i as ContextWindowPolicy } from '../config-RlhKLjme.js';
+import { r as Agent, R as RunResult } from '../index-meJRuQtc.js';
+import { D as DoneCondition } from '../multi-agent-D5m66hzB.js';
+import { a as SkillLoader, b as SkillManifest, S as SkillEntry } from '../skill-DayhFUBb.js';
 import { a as WstackPaths } from '../wstack-paths-BGu2INTm.js';
 import '../models-registry-Y2xbog0E.js';
 import '../logger-BMQgxvdy.js';
 import '../observability-BhnVLBLS.js';
-import '../secret-scrubber-CgG2tV2B.js';
+import '../secret-scrubber-DyUAWS09.js';
 
 interface SkillLoaderOptions {
     paths: WstackPaths;

package/dist/execution/index.js

@@ -1070,6 +1070,15 @@ var ToolExecutor = class {
   opts;
   serializer;
   iterationTimeoutMs;
+  /**
+   * Clear the interactive confirm awaiter so the executor returns
+   * `ToolConfirmPendingResult` instead of blocking on stdin. Used by
+   * the CLI to switch from inline prompts (REPL) to event-driven
+   * confirmation (TUI) at runtime.
+   */
+  clearConfirmAwaiter() {
+    this.opts.confirmAwaiter = void 0;
+  }
   /**
    * Execute a batch of tool uses using the configured strategy.
    * Returns the execution results and the remaining output budget.
@@ -1318,11 +1327,55 @@ var ToolExecutor = class {
   }
 };
 
+// src/utils/regex-guard.ts
+var MAX_PATTERN_LEN = 512;
+var DANGEROUS_PATTERNS = [
+  /(\([^)]*[+*][^)]*\))[+*]/,
+  // (a+)+, (.*)+, etc
+  /(\(\?:[^)]*[+*][^)]*\))[+*]/
+  // same, with non-capturing group
+];
+function compileUserRegex(pattern, flags) {
+  if (typeof pattern !== "string") {
+    return { ok: false, reason: "pattern must be a string" };
+  }
+  if (pattern.length === 0) {
+    return { ok: false, reason: "pattern is empty" };
+  }
+  if (pattern.length > MAX_PATTERN_LEN) {
+    return { ok: false, reason: `pattern exceeds ${MAX_PATTERN_LEN} characters` };
+  }
+  for (const rx of DANGEROUS_PATTERNS) {
+    if (rx.test(pattern)) {
+      return {
+        ok: false,
+        reason: "pattern looks vulnerable to catastrophic backtracking \u2014 rewrite without nested quantifiers"
+      };
+    }
+  }
+  try {
+    return { ok: true, regex: new RegExp(pattern, flags) };
+  } catch (err) {
+    return {
+      ok: false,
+      reason: err instanceof Error ? err.message : "invalid regex"
+    };
+  }
+}
+
 // src/execution/autonomous-runner.ts
 var DoneConditionChecker = class {
   constructor(condition) {
     this.condition = condition;
-    this.compiledRegex = condition.type === "output_match" && condition.pattern ? new RegExp(condition.pattern) : null;
+    if (condition.type === "output_match" && condition.pattern) {
+      const result = compileUserRegex(condition.pattern, "");
+      this.compiledRegex = result.ok ? result.regex : null;
+      if (!result.ok) {
+        console.warn(`[DoneConditionChecker] Invalid regex pattern "${condition.pattern}": ${result.reason}`);
+      }
+    } else {
+      this.compiledRegex = null;
+    }
   }
   condition;
   compiledRegex;