@wrongstack/core 0.300.0 → 0.302.0

package/dist/execution/tool-executor.d.ts

@@ -67,7 +67,10 @@ export declare class ToolExecutor {
      * Also installs the governed bridge because confirmed tools are re-run
      * through this method after a pending confirmation.
      */
-    executeTool(tool: Tool, use: ToolUseBlock, ctx: Context, budget: number): Promise<{
+    executeTool(tool: Tool, use: ToolUseBlock, ctx: Context, budget: number, preToolContext?: {
+        text: string;
+        contextAs: 'inline' | 'separate';
+    }): Promise<{
         block: ToolResultBlock;
         bytes: number;
     }>;

package/dist/execution/topic-shift-advisor.d.ts

@@ -0,0 +1,53 @@
+import type { Context } from '../core/context.js';
+import { type Message, type Provider } from '../types/index.js';
+export interface TopicShiftAdvice {
+    suggestNewContext: boolean;
+    confidence: number;
+    reason: string;
+    nextTopic?: string | undefined;
+    source: 'explicit' | 'model' | 'cache' | 'local';
+}
+export interface TopicShiftAdvisorInput {
+    prompt: string;
+    messages: readonly Message[];
+    provider?: Provider | undefined;
+    model?: string | undefined;
+    contextTokens?: number | undefined;
+    maxContext?: number | undefined;
+    signal?: AbortSignal | undefined;
+    /** Notifies prompt surfaces only when the remote ambiguity check actually runs. */
+    onModelCheck?: ((busy: boolean) => void) | undefined;
+}
+export interface TopicShiftAdvisorOptions {
+    capacity?: number | undefined;
+    ttlMs?: number | undefined;
+    timeoutMs?: number | undefined;
+    now?: (() => number) | undefined;
+}
+/**
+ * Best-effort, bounded topic-boundary advisor for prompt-submit surfaces.
+ *
+ * Most prompts finish in the local gate. A separate provider call happens
+ * only after history is substantial AND the new prompt has little lexical
+ * continuity with recent user goals. Results are held in a small TTL/LRU so
+ * edit/retry or duplicate submits never pay twice.
+ */
+export declare class TopicShiftAdvisor {
+    private readonly capacity;
+    private readonly ttlMs;
+    private readonly timeoutMs;
+    private readonly now;
+    private readonly cache;
+    constructor(options?: TopicShiftAdvisorOptions);
+    advise(input: TopicShiftAdvisorInput): Promise<TopicShiftAdvice>;
+    private classify;
+    private get;
+    private set;
+}
+/**
+ * Start a clean model context without deleting the session journal or visible
+ * chat. Durable memory, provider/model selection, settings and project state
+ * remain owned by their existing services.
+ */
+export declare function startFreshTopicContext(ctx: Context): Promise<void>;
+//# sourceMappingURL=topic-shift-advisor.d.ts.map

package/dist/extension/index.js

@@ -258,9 +258,15 @@ var ExtensionRegistry = class {
    * Build a composed provider runner. Extensions with `wrapProviderRunner`
    * form a middleware-style chain: the innermost extension wraps the
    * default runner, each subsequent wrapper wraps the previous.
+   *
+   * Utility calls may exclude agent-loop-only middleware (notably
+   * `fallback-model`) while retaining request-safety wrappers such as the
+   * prompt firewall. One-shot orchestration owns its provider and fallback
+   * route, so an agent-loop fallback wrapper cannot safely run against it.
    */
-  wrapProviderRunner(inner) {
-    const wrappers = this.extensions.filter((e) => e.wrapProviderRunner).map((e) => ({ name: e.name, wrap: expectDefined(e.wrapProviderRunner) }));
+  wrapProviderRunner(inner, options) {
+    const excluded = new Set(options?.exclude);
+    const wrappers = this.extensions.filter((e) => e.wrapProviderRunner && !excluded.has(e.name)).map((e) => ({ name: e.name, wrap: expectDefined(e.wrapProviderRunner) }));
     if (wrappers.length === 0) return inner;
     let composed = inner;
     for (let i = wrappers.length - 1; i >= 0; i--) {

package/dist/extension/registry.d.ts

@@ -78,8 +78,15 @@ export declare class ExtensionRegistry {
      * Build a composed provider runner. Extensions with `wrapProviderRunner`
      * form a middleware-style chain: the innermost extension wraps the
      * default runner, each subsequent wrapper wraps the previous.
+     *
+     * Utility calls may exclude agent-loop-only middleware (notably
+     * `fallback-model`) while retaining request-safety wrappers such as the
+     * prompt firewall. One-shot orchestration owns its provider and fallback
+     * route, so an agent-loop fallback wrapper cannot safely run against it.
      */
-    wrapProviderRunner(inner: ProviderRunnerFn): ProviderRunnerFn;
+    wrapProviderRunner(inner: ProviderRunnerFn, options?: {
+        exclude?: readonly string[] | undefined;
+    }): ProviderRunnerFn;
     runBeforeToolExecution(...args: Parameters<BeforeToolExecutionHook>): Promise<Parameters<BeforeToolExecutionHook>[1]>;
     runAfterToolExecution(...args: Parameters<AfterToolExecutionHook>): Promise<void>;
 }

package/dist/goal/index.js

@@ -2765,6 +2765,9 @@ function canonicalProjectRoot(absRoot) {
     const commonDirFile = path4.join(gitDir, "commondir");
     if (!fs.statSync(commonDirFile).isFile()) return checkoutRoot;
     const commonDir = path4.resolve(gitDir, fs.readFileSync(commonDirFile, "utf8").trim());
+    const worktreesDir = path4.dirname(gitDir);
+    if (path4.basename(worktreesDir).toLowerCase() !== "worktrees") return checkoutRoot;
+    if (path4.resolve(worktreesDir, "..") !== commonDir) return checkoutRoot;
     if (path4.basename(commonDir).toLowerCase() !== ".git") return checkoutRoot;
     return path4.dirname(commonDir);
   } catch {
@@ -2787,7 +2790,7 @@ function safeProfileName(name) {
   const safe = (name ?? "").replace(/[/\\:]/g, "_").replace(/\.\./g, "_").trim();
   return safe || "default";
 }
-function activeProfileName(globalRoot) {
+function bootstrapProfileName(globalRoot) {
   try {
     const parsed = JSON.parse(fs.readFileSync(path4.join(globalRoot, "config.json"), "utf8"));
     return safeProfileName(
@@ -2805,7 +2808,7 @@ function wstackGlobalRoot() {
 function resolveWstackPaths(opts) {
   const globalRoot = opts.globalRoot ?? (opts.userHome ? path4.join(opts.userHome, ".wrongstack") : wstackGlobalRoot());
   const homeDir = opts.userHome ?? os.homedir();
-  const profileName = safeProfileName(opts.profileName ?? activeProfileName(globalRoot));
+  const profileName = safeProfileName(opts.profileName ?? bootstrapProfileName(globalRoot));
   const profileDir = path4.join(globalRoot, "profiles", profileName);
   const hash = projectHash(opts.projectRoot);
   const slug = projectSlug(opts.projectRoot);
@@ -2875,7 +2878,12 @@ function resolveWstackPaths(opts) {
     projectRequirementIntakes: path4.join(projectDir, "requirement-intakes"),
     syncConfig: path4.join(profileDir, "sync.json"),
     configHistoryDir: path4.join(globalRoot, "config-history"),
-    projectStatus: (projectHash2) => path4.join(globalRoot, "projects", projectHash2, "status.json")
+    projectStatus: (statusProjectSlug) => {
+      if (!/^[a-z0-9](?:[a-z0-9-]{0,39})-[a-f0-9]{6}$/.test(statusProjectSlug)) {
+        throw new Error(`Invalid project slug: ${statusProjectSlug}`);
+      }
+      return path4.join(globalRoot, "projects", statusProjectSlug, "status.json");
+    }
   };
 }
 

package/dist/hooks/index.js

@@ -781,19 +781,31 @@ var MAX_TIMEOUT_MS = 10 * 6e4;
 function hookTimeoutMs(entry) {
   return entry.timeoutMs ?? (entry.background ? DEFAULT_BACKGROUND_TIMEOUT_MS : DEFAULT_TIMEOUT_MS3);
 }
+function contextFromOutcome(outcome) {
+  return {
+    ...outcome.additionalContext ? { additionalContext: outcome.additionalContext } : {},
+    ...outcome.contextAs ? { contextAs: outcome.contextAs } : {}
+  };
+}
 function normalizePreToolOutcome(outcome) {
-  if ("action" in outcome) return outcome;
+  const context = contextFromOutcome(outcome);
+  if ("action" in outcome) return { ...outcome, ...context };
   if (outcome.decision === "block") {
-    return { action: "deny", reason: outcome.reason?.trim() || "blocked by PreToolUse hook" };
+    return {
+      action: "deny",
+      reason: outcome.reason?.trim() || "blocked by PreToolUse hook",
+      ...context
+    };
   }
   if (outcome.modifiedInput && typeof outcome.modifiedInput === "object") {
     return {
       action: "mutate",
       input: outcome.modifiedInput,
-      ...outcome.reason ? { reason: outcome.reason } : {}
+      ...outcome.reason ? { reason: outcome.reason } : {},
+      ...context
     };
   }
-  return { action: "allow" };
+  return { action: "allow", ...context };
 }
 function malformedOutcome(outcome) {
   if (!("action" in outcome)) return void 0;
@@ -823,11 +835,26 @@ var HookRunner = class {
   has(event) {
     return this.registry.has(event);
   }
-  async preToolUse(toolName, toolInput, env) {
+  async preToolUse(toolName, toolInput, env, toolMeta) {
     const entries = this.matching("PreToolUse", toolName);
     if (entries.length === 0) return {};
+    const declared = {
+      ...toolMeta?.capabilities ? { toolCapabilities: toolMeta.capabilities } : {},
+      ...toolMeta?.mutating === void 0 ? {} : { toolMutating: toolMeta.mutating }
+    };
     let current = toolInput;
     let mutated = false;
+    const contexts = [];
+    let contextAs;
+    const collectContext = (outcome) => {
+      if (outcome.additionalContext) contexts.push(outcome.additionalContext);
+      if (outcome.contextAs === "separate") contextAs = "separate";
+      else if (outcome.contextAs === "inline" && contextAs === void 0) contextAs = "inline";
+    };
+    const resultContext = () => ({
+      ...contexts.length > 0 ? { additionalContext: contexts.join("\n") } : {},
+      ...contextAs ? { contextAs } : {}
+    });
     const mutators = entries.filter((entry) => entry.stage === "mutate");
     const validators = entries.filter((entry) => entry.stage === "validate");
     for (const entry of mutators) {
@@ -835,13 +862,15 @@ var HookRunner = class {
         event: "PreToolUse",
         toolName,
         toolInput: current,
+        ...declared,
         ...this.base(env)
       };
       const outcome = await this.invoke(entry, payload, env);
       if (!outcome) continue;
       const normalized = normalizePreToolOutcome(outcome);
+      collectContext(normalized);
       if (normalized.action === "deny") {
-        return { block: true, reason: normalized.reason };
+        return { block: true, reason: normalized.reason, ...resultContext() };
       }
       if (normalized.action === "mutate") {
         current = normalized.input;
@@ -853,21 +882,25 @@ var HookRunner = class {
         event: "PreToolUse",
         toolName,
         toolInput: current,
+        ...declared,
         ...this.base(env)
       };
       const outcome = await this.invoke(entry, payload, env);
       if (!outcome) continue;
       const normalized = normalizePreToolOutcome(outcome);
+      collectContext(normalized);
       if (normalized.action === "deny") {
-        return { block: true, reason: normalized.reason };
+        return { block: true, reason: normalized.reason, ...resultContext() };
       }
       if (normalized.action === "mutate") {
         const reason = `PreToolUse validator "${entry.name}" attempted to mutate tool arguments`;
         this.opts.logger?.warn?.(reason);
-        if (entry.failurePolicy === "closed") return { block: true, reason };
+        if (entry.failurePolicy === "closed") {
+          return { block: true, reason, ...resultContext() };
+        }
       }
     }
-    return mutated ? { input: current } : {};
+    return { ...mutated ? { input: current } : {}, ...resultContext() };
   }
   async postToolUse(toolName, toolInput, result, env) {
     const payload = {

package/dist/hooks/runner.d.ts

@@ -22,6 +22,8 @@ export interface PreToolUseResult {
     reason?: string | undefined;
     /** Present only when a hook replaced the tool input. */
     input?: Record<string, unknown>;
+    additionalContext?: string | undefined;
+    contextAs?: 'inline' | 'separate' | undefined;
 }
 export interface PromptResult {
     block?: boolean | undefined;
@@ -46,7 +48,16 @@ export declare class HookRunner {
     constructor(opts: HookRunnerOptions);
     /** Cheap guard so callers can skip building payloads when nothing listens. */
     has(event: HookEvent): boolean;
-    preToolUse(toolName: string, toolInput: Record<string, unknown>, env: HookRunEnv): Promise<PreToolUseResult>;
+    preToolUse(toolName: string, toolInput: Record<string, unknown>, env: HookRunEnv, 
+    /**
+     * What the tool declares about itself. Optional so existing callers (and
+     * tests) keep working, but the executor always passes it — a policy hook
+     * that keys on capability instead of tool name needs it to be there.
+     */
+    toolMeta?: {
+        capabilities?: readonly string[] | undefined;
+        mutating?: boolean | undefined;
+    }): Promise<PreToolUseResult>;
     postToolUse(toolName: string, toolInput: unknown, result: {
         content: string;
         isError: boolean;

package/dist/hq/index.js

@@ -1305,6 +1305,7 @@ function createMailboxEventPayload(input) {
 var TRANSCRIPT_EVENT_TYPES = /* @__PURE__ */ new Set(["session.transcript", "agent.message"]);
 var OPEN_STATE = 1;
 var CONNECT_WARN_AFTER_FAILURES = 5;
+var DEFAULT_CONNECT_WARN_COOLDOWN_MS = 5 * 6e4;
 var DEFAULT_RECONNECT_BASE_MS = 1e3;
 var DEFAULT_RECONNECT_MAX_MS = 3e4;
 var DEFAULT_DISCOVERY_POLL_MS = 5e3;
@@ -1316,6 +1317,7 @@ var DEFAULT_MAX_QUEUED_BYTES = Math.min(
 var DEFAULT_COMMAND_POLL_INTERVAL_MS = 500;
 var DEFAULT_COMMAND_POLL_LIMIT = 25;
 var DEFAULT_HEARTBEAT_INTERVAL_MS = 25e3;
+var lastConnectWarningAtMs = 0;
 function queuedFrameCoalesceKey(frame) {
   if (frame.type !== "client.event" || !frame.event.type.endsWith(".snapshot")) {
     return void 0;
@@ -1367,6 +1369,8 @@ var HqPublisher = class {
     this.reconnect = options.reconnect ?? true;
     this.reconnectBaseMs = options.reconnectBaseMs ?? DEFAULT_RECONNECT_BASE_MS;
     this.reconnectMaxMs = options.reconnectMaxMs ?? DEFAULT_RECONNECT_MAX_MS;
+    this.connectWarnAfterFailures = options.connectWarnAfterFailures ?? CONNECT_WARN_AFTER_FAILURES;
+    this.connectWarnCooldownMs = options.connectWarnCooldownMs ?? DEFAULT_CONNECT_WARN_COOLDOWN_MS;
     this.maxQueuedMessages = options.maxQueuedMessages ?? DEFAULT_MAX_QUEUED_MESSAGES;
     this.maxQueuedBytes = options.maxQueuedBytes ?? DEFAULT_MAX_QUEUED_BYTES;
     this.resolvedRedactionPolicy = resolveHqRedactionPolicy(options.redactionPolicy);
@@ -1380,6 +1384,8 @@ var HqPublisher = class {
   reconnect;
   reconnectBaseMs;
   reconnectMaxMs;
+  connectWarnAfterFailures;
+  connectWarnCooldownMs;
   maxQueuedMessages;
   maxQueuedBytes;
   resolvedRedactionPolicy;
@@ -1791,9 +1797,8 @@ var HqPublisher = class {
     if (this.stopped || !this.reconnect || this.reconnectTimer !== null) return;
     const delay = Math.min(this.reconnectMaxMs, this.reconnectBaseMs * 2 ** this.reconnectAttempt);
     this.reconnectAttempt += 1;
-    if (!this.connectWarningEmitted && this.reconnectAttempt >= CONNECT_WARN_AFTER_FAILURES) {
-      this.connectWarningEmitted = true;
-      this.emitConnectWarning();
+    if (!this.connectWarningEmitted && this.reconnectAttempt >= this.connectWarnAfterFailures) {
+      if (this.emitConnectWarning()) this.connectWarningEmitted = true;
     }
     this.reconnectTimer = setTimeout(() => {
       this.reconnectTimer = null;
@@ -1802,11 +1807,16 @@ var HqPublisher = class {
     this.reconnectTimer.unref?.();
   }
   emitConnectWarning() {
+    const nowMs = Date.now();
+    if (nowMs - lastConnectWarningAtMs < this.connectWarnCooldownMs) {
+      return false;
+    }
+    lastConnectWarningAtMs = nowMs;
     const attempt = this.lastAttempt;
     const message = `WrongStack HQ publisher: ${this.reconnectAttempt} consecutive connection failures${attempt !== null ? ` to ${attempt.url} (client token ${attempt.hadToken ? "present" : "absent"})` : ""}. Either the HQ server is unreachable or it rejected the token (401). If HQ runs in client-token mode, verify WRONGSTACK_HQ_TOKEN / auth.json. Retries continue with backoff.`;
     if (this.logger) {
       this.logger.warn(message, { event: "hq.publisher.connect_failed" });
-      return;
+      return true;
     }
     const warn = this.options.warn ?? ((msg) => console.warn(
       JSON.stringify({
@@ -1820,6 +1830,7 @@ var HqPublisher = class {
       warn(message);
     } catch {
     }
+    return true;
   }
   /**
    * Dormant re-check while no HQ endpoint is discoverable. Uses a FIXED
@@ -2071,6 +2082,20 @@ function windowsAccountName() {
   return username;
 }
 
+// src/utils/pid.ts
+function isPidAlive(pid) {
+  if (!Number.isInteger(pid) || pid <= 0) return false;
+  if (pid === process.pid) return true;
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (err) {
+    const code = err.code;
+    if (code === "EPERM") return true;
+    return false;
+  }
+}
+
 // src/utils/wstack-paths.ts
 import { createHash } from "node:crypto";
 import * as fs2 from "node:fs";
@@ -2088,6 +2113,9 @@ function canonicalProjectRoot(absRoot) {
     const commonDirFile = path2.join(gitDir, "commondir");
     if (!fs2.statSync(commonDirFile).isFile()) return checkoutRoot;
     const commonDir = path2.resolve(gitDir, fs2.readFileSync(commonDirFile, "utf8").trim());
+    const worktreesDir = path2.dirname(gitDir);
+    if (path2.basename(worktreesDir).toLowerCase() !== "worktrees") return checkoutRoot;
+    if (path2.resolve(worktreesDir, "..") !== commonDir) return checkoutRoot;
     if (path2.basename(commonDir).toLowerCase() !== ".git") return checkoutRoot;
     return path2.dirname(commonDir);
   } catch {
@@ -2110,7 +2138,7 @@ function safeProfileName(name) {
   const safe = (name ?? "").replace(/[/\\:]/g, "_").replace(/\.\./g, "_").trim();
   return safe || "default";
 }
-function activeProfileName(globalRoot) {
+function bootstrapProfileName(globalRoot) {
   try {
     const parsed = JSON.parse(fs2.readFileSync(path2.join(globalRoot, "config.json"), "utf8"));
     return safeProfileName(
@@ -2128,7 +2156,7 @@ function wstackGlobalRoot() {
 function resolveWstackPaths(opts) {
   const globalRoot = opts.globalRoot ?? (opts.userHome ? path2.join(opts.userHome, ".wrongstack") : wstackGlobalRoot());
   const homeDir = opts.userHome ?? os.homedir();
-  const profileName = safeProfileName(opts.profileName ?? activeProfileName(globalRoot));
+  const profileName = safeProfileName(opts.profileName ?? bootstrapProfileName(globalRoot));
   const profileDir = path2.join(globalRoot, "profiles", profileName);
   const hash = projectHash(opts.projectRoot);
   const slug = projectSlug(opts.projectRoot);
@@ -2198,7 +2226,12 @@ function resolveWstackPaths(opts) {
     projectRequirementIntakes: path2.join(projectDir, "requirement-intakes"),
     syncConfig: path2.join(profileDir, "sync.json"),
     configHistoryDir: path2.join(globalRoot, "config-history"),
-    projectStatus: (projectHash2) => path2.join(globalRoot, "projects", projectHash2, "status.json")
+    projectStatus: (statusProjectSlug) => {
+      if (!/^[a-z0-9](?:[a-z0-9-]{0,39})-[a-f0-9]{6}$/.test(statusProjectSlug)) {
+        throw new Error(`Invalid project slug: ${statusProjectSlug}`);
+      }
+      return path2.join(globalRoot, "projects", statusProjectSlug, "status.json");
+    }
   };
 }
 
@@ -2329,22 +2362,13 @@ async function writeHqRuntimeFile(dataDir, file) {
 `, { mode: SECRET_FILE_MODE });
   await restrictFilePermissions(target, { label: "hq-runtime" });
 }
-function isProcessAlive(pid) {
-  if (!Number.isInteger(pid) || pid <= 0) return false;
-  try {
-    process.kill(pid, 0);
-    return true;
-  } catch {
-    return false;
-  }
-}
 function readHqRuntimeFileSync(dataDir) {
   try {
     const parsed = JSON.parse(
       syncFs.readFileSync(hqRuntimeFilePath(dataDir), "utf8")
     );
     if (typeof parsed.url !== "string" || parsed.url.trim().length === 0) return void 0;
-    if (typeof parsed.pid === "number" && !isProcessAlive(parsed.pid)) return void 0;
+    if (typeof parsed.pid === "number" && !isPidAlive(parsed.pid)) return void 0;
     return {
       url: parsed.url,
       updatedAt: typeof parsed.updatedAt === "string" ? parsed.updatedAt : "",

package/dist/hq/publisher.d.ts

@@ -32,6 +32,20 @@ export interface HqPublisherOptions {
     reconnect?: boolean;
     reconnectBaseMs?: number;
     reconnectMaxMs?: number;
+    /**
+     * Consecutive connect failures (never reaching `open`) before the one-time
+     * diagnostic warning fires. Defaults to `CONNECT_WARN_AFTER_FAILURES` (5).
+     */
+    connectWarnAfterFailures?: number;
+    /**
+     * Minimum gap between connect-failure warnings ACROSS all HqPublisher
+     * instances in this process. When a fleet of agents fails against the same
+     * dead/rejecting HQ at once, only the first instance to cross the threshold
+     * warns; the rest stay silent until the window elapses (each instance still
+     * warns at most once). Defaults to 5 minutes. Set to 0 to disable the
+     * process-wide gate entirely.
+     */
+    connectWarnCooldownMs?: number;
     maxQueuedMessages?: number;
     /** Hard byte cap on the outbound queue (prevents RAM blow-up when HQ is
      * offline). Older frames are dropped oldest-first when exceeded. The default
@@ -66,11 +80,13 @@ export interface HqPublisherOptions {
      */
     heartbeatIntervalMs?: number;
     /**
-     * Diagnostic sink for the one-time consecutive-connect-failure warning.
-     * The publisher is otherwise deliberately silent (dormant queueing), which
+     * Diagnostic sink for the consecutive-connect-failure warning. The
+     * publisher is otherwise deliberately silent (dormant queueing), which
      * made auth failures invisible: a token the server rejects — e.g. a wrong
      * `WRONGSTACK_HQ_TOKEN` against a remote HQ — looked exactly like "HQ not
-     * running". Defaults to a single structured `console.warn` line.
+     * running". Emission is one-shot per instance and rate-limited process-wide
+     * via {@link HqPublisherOptions.connectWarnCooldownMs}. Defaults to a
+     * single structured `console.warn` line.
      */
     warn?: (message: string) => void;
     /** Logger for structured events. When provided, the `warn` callback is derived from it. */
@@ -99,6 +115,8 @@ export declare class HqPublisher {
     private readonly reconnect;
     private readonly reconnectBaseMs;
     private readonly reconnectMaxMs;
+    private readonly connectWarnAfterFailures;
+    private readonly connectWarnCooldownMs;
     private readonly maxQueuedMessages;
     private readonly maxQueuedBytes;
     private readonly resolvedRedactionPolicy;

package/dist/index.d.ts

@@ -2,15 +2,14 @@ export { assertProjectRootOutsideStateDir, type BootConfigOptions, type BootConf
 export * from './chronicle/index.js';
 export { type AgentFactory, type AgentFactoryResult, type AgentRunnerOptions, makeAgentSubagentRunner, } from './coordination/agent-subagent-runner.js';
 export { AGENT_CATALOG, AGENTS_BY_PHASE, type AgentDefinition, type AgentPhase, ALL_AGENT_DEFINITIONS, getAgentDefinition, } from './coordination/agents/index.js';
-export { type BrainArbiter, type BrainDecision, type BrainDecisionOption, BrainDecisionQueue, type BrainDecisionRequest, type BrainDecisionSource, type BrainEscalationMode, type BrainFallback, type BrainRisk, DefaultBrainArbiter, type DefaultBrainArbiterOptions, EscalationRoutingBrainArbiter, formatHumanPrompt, HumanEscalatingBrainArbiter, ObservableBrainArbiter, type BrainTerminalPolicy, terminalPolicyDecision, } from './coordination/brain.js';
+export { type BrainArbiter, type BrainDecision, type BrainDecisionOption, BrainDecisionQueue, type BrainDecisionRequest, type BrainDecisionSource, type BrainEscalationMode, type BrainFallback, type BrainRisk, type BrainTerminalPolicy, DefaultBrainArbiter, type DefaultBrainArbiterOptions, EscalationRoutingBrainArbiter, formatHumanPrompt, HumanEscalatingBrainArbiter, ObservableBrainArbiter, terminalPolicyDecision, } from './coordination/brain.js';
+export { type BrainCacheStats, BrainDecisionCache, type BrainDecisionCacheOptions, brainCacheKey, type CachingBrainArbiterOptions, createCachingBrainArbiter, } from './coordination/brain-cache.js';
+export { BLOCKED_RESOLVED_MARKERS, type BrainHeuristicsConfig, compileResolutionMarkers, DEFAULT_BRAIN_HEURISTICS, isBlockedResolved, type ResolvedBrainHeuristics, resolveBrainHeuristics, } from './coordination/brain-heuristics.js';
 export { BrainDecisionLedger, type BrainDecisionLedgerOptions, type BrainLedgerEntry, brainDecisionKey, createLedgerGuardBrainArbiter, type LedgerGuardBrainArbiterOptions, } from './coordination/brain-ledger.js';
 export { type BrainInterventionInput, BrainMonitor, type BrainMonitorOptions, type BrainMonitorPolicy, type BrainMonitorSignalToggles, DEFAULT_FILE_EDIT_TOOLS, } from './coordination/brain-monitor.js';
-export { BLOCKED_RESOLVED_MARKERS, type BrainHeuristicsConfig, compileResolutionMarkers, DEFAULT_BRAIN_HEURISTICS, isBlockedResolved, type ResolvedBrainHeuristics, resolveBrainHeuristics, } from './coordination/brain-heuristics.js';
 export { applyRule, BRAIN_RULE_PATTERN_MAX, BRAIN_RULE_SUBJECT_MAX, type BrainRule, type BrainRuleAction, type BrainRuleCompileResult, type BrainRuleMatch, type CompiledBrainRule, compileBrainRules, createRuleBrainArbiter, evaluateBrainRules, type RuleBrainArbiterOptions, ruleMatches, } from './coordination/brain-rules.js';
-export { type BrainCacheStats, BrainDecisionCache, type BrainDecisionCacheOptions, brainCacheKey, type CachingBrainArbiterOptions, createCachingBrainArbiter, } from './coordination/brain-cache.js';
-export { BrainCircuitBreaker, type BrainCircuitOptions, type BrainCircuitSnapshot, type BrainCircuitState, } from './execution/brain-circuit.js';
-export { applyContentMode, BRAIN_TRACE_REDACTED_MAX, BRAIN_TRACE_VERSION, type BrainTraceContentMode, type BrainTraceCouncilResolution, type BrainTraceCouncilVote, type BrainTraceLlmCall, type BrainTraceRecord, BrainTraceRecorder, type BrainTraceRecorderOptions, type BrainTraceTierStep, readBrainTrace, sanitizeDecision, sanitizeRequest, } from './coordination/brain-trace.js';
 export { type BrainDecisionTier, BrainTierCounter, type BrainTierStats, DETERMINISTIC_BRAIN_TIERS, isDeterministicTier, markDecisionTier, readDecisionTier, } from './coordination/brain-telemetry.js';
+export { applyContentMode, BRAIN_TRACE_REDACTED_MAX, BRAIN_TRACE_VERSION, type BrainTraceContentMode, type BrainTraceCouncilResolution, type BrainTraceCouncilVote, type BrainTraceLlmCall, type BrainTraceRecord, BrainTraceRecorder, type BrainTraceRecorderOptions, type BrainTraceTierStep, readBrainTrace, sanitizeDecision, sanitizeRequest, } from './coordination/brain-trace.js';
 export { type CollabBusState, CollaborationBus, type ConsumedInjectionInfo, } from './coordination/collab-bus.js';
 export { assessCommitSafety, type CommitSafetyOptions, type CommitSafetyReport, type ForeignFile, } from './coordination/commit-safety.js';
 export { DEPENDENCY_FILE_PATTERNS, type DependencyWatcherConfig, type DepWatchEntry, makeDependencyWatcherConfig, } from './coordination/dep-watcher.js';
@@ -45,7 +44,7 @@ export { startTechStackConsumer, type TechStackConsumerOptions, } from './coordi
 export { type FleetWorktreePolicy, resolveSubagentWorktreeDecision, subagentNeedsWorktree, WorktreeIntegrationError, type WorktreeIsolationDecision, type WorktreeTaskRunnerOptions, type WorktreeTaskStateUpdate, wrapSubagentRunnerWithWorktrees, } from './coordination/worktree-task-runner.js';
 export { Agent, type AgentInit, type AgentInput, type AgentPipelines, createDefaultPipelines, DEFAULT_MAX_ITERATIONS, type RunResult, type ToolCallPipelinePayload, type UserInputPayload, } from './core/agent.js';
 export { buildBtwBlock, consumeBtwNotes, pendingBtwCount, setBtwNote, } from './core/btw.js';
-export { Context, type ContextInit, type RunOptions, type TodoItem } from './core/context.js';
+export { Context, type ContextInit, type ProviderMemoryEvidence, type RunOptions, type TodoItem, } from './core/context.js';
 export { type ContinuationInput, type ContinuationSource, detectContinueIntent, type ResolvedContinuation, resolveContinuation, } from './core/continue-intent.js';
 export { type ContinueDirective, makeContinueToNextIterationTool, parseContinueDirective, } from './core/continue-to-next-iteration.js';
 export { ConversationState, type ReadonlyConversationState, type StateChange, type StateChangeHandler, wrapAsState, } from './core/conversation-state.js';
@@ -62,9 +61,10 @@ export { buildQueuedMessagesBlock, consumeQueuedMessagesUpdate, peekQueuedMessag
 export { extractRunEnv, type RunEnv } from './core/run-env.js';
 export { DefaultSystemPromptBuilder, type DefaultSystemPromptBuilderOptions, LAYER_1_IDENTITY, SYSTEM_BLOCK_SOURCE, type SystemBlockSource, } from './core/system-prompt-builder.js';
 export * from './defaults/index.js';
-export { AutoCompactionMiddleware, type CompactorOptions, type CompactorStrategy, createStrategyCompactor, HybridCompactor, installSubagentAutoCompaction, IntelligentCompactor, type IntelligentCompactorOptions, SelectiveCompactor, type SelectiveCompactorOptions, type StrategyCompactorOptions, } from './defaults/index.js';
+export { AutoCompactionMiddleware, type CompactorOptions, type CompactorStrategy, createStrategyCompactor, HybridCompactor, IntelligentCompactor, type IntelligentCompactorOptions, installSubagentAutoCompaction, SelectiveCompactor, type SelectiveCompactorOptions, type StrategyCompactorOptions, } from './defaults/index.js';
 export { type AutonomyBrainOptions, type BrainAutoRisk, type BrainLlmTarget, buildBrainUserMessage, completeBrainLlm, createAutonomyBrain, createTieredBrainArbiter, formatDecisionSummary, parseOptionDecision, type TieredBrainArbiterOptions, } from './execution/autonomy-brain.js';
 export { assembleBrainTiers, type BrainTierAssembly, type BrainTierAssemblyOptions, } from './execution/brain-chain.js';
+export { BrainCircuitBreaker, type BrainCircuitOptions, type BrainCircuitSnapshot, type BrainCircuitState, } from './execution/brain-circuit.js';
 export { BRAIN_EVALUATION_CASE_VERSION, type BrainEvaluationCaseResult, type BrainEvaluationCaseV1, type BrainEvaluationCaseValidation, type BrainEvaluationExpectations, type BrainEvaluationFailure, type BrainEvaluationFailureCode, type BrainEvaluationMetrics, type BrainEvaluationReport, type BrainTraceCaptureOptions, brainTraceToEvaluationCase, runBrainEvaluation, validateBrainEvaluationCase, } from './execution/brain-evaluation.js';
 export { type BrainApplyResult, type BrainConfigPatch, type BrainConfigSnapshot, type BrainCouncilMinRisk, type BrainCouncilPatch, type BrainDefaultsContext, type BrainPoolStrategy, type BrainRuntime, type BrainRuntimeLedgerHost, type BrainRuntimeOptions, createBrainRuntime, resolveBrainConfigDefaults, } from './execution/brain-runtime.js';
 export { buildLosslessDigest, buildSmartDigest, type ContentScore, type EliseResult, eliseOldToolResults, estimateMessages, extractText, findPreserveStart, hasTextContent, scoreMessage, } from './execution/compaction-core.js';
@@ -83,27 +83,28 @@ export { type Checkpoint, CheckpointManager, type CheckpointManagerOptions, crea
 export { countShellHooks, HookRegistry, type HookRunEnv, HookRunner, type HookRunnerOptions, hookMatcherMatches, type PreToolUseResult, type PromptResult, runShellHook, type ShellHookSpec, shellHooksEqual, } from './hooks/index.js';
 export * from './hq/index.js';
 export { allServers } from './infrastructure/mcp-servers.js';
-export { ProviderCacheLedger, type ProviderCacheEntry, } from './infrastructure/provider-cache-ledger.js';
+export { type ProviderCacheEntry, ProviderCacheLedger, } from './infrastructure/provider-cache-ledger.js';
 export * from './kernel/index.js';
 export { attachMailboxChecker } from './mailbox-attach.js';
 export { type CollabPauseMiddlewareOptions, collabInjectMiddleware, collabPauseMiddleware, type InjectedToolResult as CollabInjectedToolResult, } from './middleware/collab-pause.js';
+export { type NotificationChannel, type NotificationChannelStatus, type NotificationLevel, type NotificationMessage, type NotificationResult, type Notifier, type NotifierCounters, NotifierImpl, } from './notifications/index.js';
 export * from './observability/network-telemetry.js';
 export * from './observability/process-telemetry.js';
-export { type NotificationChannel, type NotificationChannelStatus, type NotificationLevel, type NotificationMessage, type NotificationResult, type Notifier, type NotifierCounters, NotifierImpl, } from './notifications/index.js';
 export { DefaultPluginAPI, definePlugin, type PluginAPIInit } from './plugin/api.js';
-export { diffPluginConfig, type PluginConfigChange, type PluginConfigSource, redactPluginConfig, type ResolvedPluginConfig, type ResolvePluginConfigInput, resolvePluginConfig, resolvePluginManifestConfig, validatePluginConfigMetadata, } from './plugin/config.js';
-export { KERNEL_API_VERSION, type LoadPluginsOptions, type PluginHostHandle, type PluginLoadFailure, loadPlugins, unloadPlugins, } from './plugin/loader.js';
+export { diffPluginConfig, type PluginConfigChange, type PluginConfigSource, type ResolvedPluginConfig, type ResolvePluginConfigInput, redactPluginConfig, resolvePluginConfig, resolvePluginManifestConfig, validatePluginConfigMetadata, } from './plugin/config.js';
+export { KERNEL_API_VERSION, type LoadPluginsOptions, loadPlugins, type PluginHostHandle, type PluginLoadFailure, unloadPlugins, } from './plugin/loader.js';
 export { buildReviewerModelPool, createAutoReviewPlugin, parseReviewSeverity, type ReviewerModelAssignment, selectRoundRobinReviewerAssignment, } from './plugins/auto-review-plugin.js';
 export type { CascadeAgentKind, ChimeraCascadeNeededPayload, ChimeraReviewCompletePayload, ChimeraReviewNeededPayload, ResolvedChimeraConfig, ReviewContextBundle, } from './plugins/chimera-plugin.js';
 export { CHIMERA_REVIEW_PROMPT, createChimeraPlugin, resolveChimeraConfig, } from './plugins/chimera-plugin.js';
-export { integrateFindings, type FindingsIntegrationResult, } from './plugins/review-finding-integration.js';
-export { executeFindingCommand, transitionReport, type FindingCommandContext, } from './plugins/review-finding-commands.js';
-export { JsonlFindingStore, FINDING_STORE_FILE, type FindingStore, type ListOptions as FindingListOptions, type UpsertContext, type UpsertResult, } from './plugins/review-finding-store.js';
-export type { ChimeraFinding, ChimeraFindingLocation, ChimeraFindingOrigin, ChimeraFindingResolution, FindingEventType, FindingLifecycleEvent, FindingSeverity, FindingSource, FindingStatus, ResolutionOutcome, } from './plugins/review-finding-types.js';
-export { JsonlReportStore, REPORT_STORE_FILE, type PersistReportInput, type ReportStore, type ListReportsOptions, type ReportActor, } from './plugins/review-report-store.js';
-export type { ReviewReport, ReviewReportCounts, ReviewReportEvent, ReviewReportFile, ReportEventType, ReportLifecycleStatus, } from './plugins/review-report-types.js';
-export { persistReviewReport, syncReportCompletion, syncReportReopen, type ReportIntegrationResult, type ReportSyncResult, type ReportReopenResult, } from './plugins/review-report-integration.js';
+export { createCloudConfigSyncPlugin } from './plugins/cloud-config-sync-plugin.js';
 export { createPromptsPlugin } from './plugins/prompts-plugin.js';
+export { executeFindingCommand, type FindingCommandContext, transitionReport, } from './plugins/review-finding-commands.js';
+export { type FindingsIntegrationResult, integrateFindings, } from './plugins/review-finding-integration.js';
+export { FINDING_STORE_FILE, type FindingStore, JsonlFindingStore, type ListOptions as FindingListOptions, type UpsertContext, type UpsertResult, } from './plugins/review-finding-store.js';
+export type { ChimeraFinding, ChimeraFindingLocation, ChimeraFindingOrigin, ChimeraFindingResolution, FindingEventType, FindingLifecycleEvent, FindingSeverity, FindingSource, FindingStatus, ResolutionOutcome, } from './plugins/review-finding-types.js';
+export { persistReviewReport, type ReportIntegrationResult, type ReportReopenResult, type ReportSyncResult, syncReportCompletion, syncReportReopen, } from './plugins/review-report-integration.js';
+export { JsonlReportStore, type ListReportsOptions, type PersistReportInput, REPORT_STORE_FILE, type ReportActor, type ReportStore, } from './plugins/review-report-store.js';
+export type { ReportEventType, ReportLifecycleStatus, ReviewReport, ReviewReportCounts, ReviewReportEvent, ReviewReportFile, } from './plugins/review-report-types.js';
 export { createSkillsPlugin } from './plugins/skills-plugin.js';
 export { createSyncPlugin } from './plugins/sync-plugin.js';
 export * from './prompts/index.js';
@@ -114,8 +115,8 @@ export { ToolRegistry } from './registry/tool-registry.js';
 export { hashRequest, stableStringify, } from './replay/hash.js';
 export { type ReplayMode, ReplayProviderRunner, type ReplayProviderRunnerOptions, } from './replay/replay-provider-runner.js';
 export { DANGEROUS_FOR_SUBAGENTS, getDangerousCapabilities, hasCapability, hasDangerousCapabilityForSubagents, ToolCapabilities, type ToolCapability, WIDE_SUBAGENT_CAPABILITIES, } from './security/capabilities.js';
-export { TRUST_POLICY_JSON_SCHEMA, TRUST_POLICY_LIMITS, TRUST_POLICY_SCHEMA_VERSION, type TrustPolicyDiagnostic, type TrustPolicyDiagnosticCode, type TrustPolicyValidationResult, validateTrustPolicy, } from './security/permission-policy-schema.js';
 export { evaluateToolKanbanBoundary, type ToolKanbanBoundaryEvaluation, } from './security/kanban-boundary.js';
+export { TRUST_POLICY_JSON_SCHEMA, TRUST_POLICY_LIMITS, TRUST_POLICY_SCHEMA_VERSION, type TrustPolicyDiagnostic, type TrustPolicyDiagnosticCode, type TrustPolicyValidationResult, validateTrustPolicy, } from './security/permission-policy-schema.js';
 export { DefaultSecretScrubber } from './security/secret-scrubber.js';
 export { getSessionRegistry, hasSessionRegistry, type SessionLiveStatus, SessionRegistry, type SessionRegistryEntry, } from './session-registry.js';
 export * from './skills/index.js';
@@ -132,11 +133,11 @@ export { type CreatePluginManagerToolOptions, createPluginManagerTool, PLUGIN_MA
 export type { Compactor, CompactReport } from './types/compactor.js';
 export { CONTEXT_WINDOW_MODES, type ContextWindowAggressiveOn, type ContextWindowConfigLike, type ContextWindowMode, type ContextWindowModeId, type ContextWindowModeSelectionId, type ContextWindowPolicy, type ContextWindowThresholds, DEFAULT_CONTEXT_WINDOW_MODE_ID, DEPRECATED_CONTEXT_WINDOW_MODE_ALIASES, type DeprecatedContextWindowModeId, formatContextWindowModeList, getContextWindowMode, isContextWindowModeId, isContextWindowModeSelectionId, isDeprecatedContextWindowModeId, listContextWindowModes, normalizeContextWindowModeId, resolveContextWindowPolicy, } from './types/context-window.js';
 export { DEFAULT_SESSION_PRUNE_DAYS } from './types/default-config.js';
+export type { FileEventRecord } from './types/file-event-record.js';
 export * from './types/index.js';
 export type { Logger, LogLevel } from './types/logger.js';
 export type { ModelsDevModel, ModelsDevPayload, ModelsDevProvider, ModelsRegistry, ResolvedModel, ResolvedProvider, WireFamily, } from './types/models-registry.js';
 export type { ProviderRunner, RunProviderOptions } from './types/provider-runner.js';
-export type { FileEventRecord } from './types/file-event-record.js';
 export type { SecretScrubber } from './types/secret-scrubber.js';
 export type { RotatableSecretVault, SecretVault } from './types/secret-vault.js';
 export { encryptedPrefixForVersion, noOpVault, parseEncryptedVersion, } from './types/secret-vault.js';