@wrongstack/core 0.305.1 → 0.306.2

package/dist/core/system-prompt-blocks.d.ts

@@ -18,7 +18,7 @@ import { type InstructionTemplateContext } from './instruction-template.js';
  * `getContextBreakdown()` to attribute real token counts per category in the
  * `/context` display.
  */
-export type SystemBlockSource = 'identity' | 'tool-usage' | 'environment' | 'skills' | 'mode' | 'plan' | 'leader-after-task' | 'contributor' | 'ledger' | 'glossary' | 'nextsteps';
+export type SystemBlockSource = 'identity' | 'tool-usage' | 'environment' | 'skills' | 'mode' | 'plan' | 'leader-after-task' | 'contributor' | 'ledger' | 'glossary' | 'peers' | 'nextsteps';
 /**
  * Side-table mapping each system-prompt TextBlock to the section it came from.
  * Kept as a WeakMap rather than a field on TextBlock so the label never reaches

package/dist/core/system-prompt-builder.d.ts

@@ -147,7 +147,13 @@ export declare class DefaultSystemPromptBuilder implements SystemPromptBuilder {
     private _lastCatalogTools?;
     /** Cached rendered online agents string, keyed by content fingerprint. */
     private _lastOnlineAgents?;
-    /** Cached full buildToolUsage output — keyed by tools array ref + agents fingerprint + tier. */
+    /**
+     * Cached full buildToolUsage output — keyed by tools array ref + tier.
+     * Deliberately NOT keyed by the online-agents fingerprint: the live peer
+     * snapshot moved out of this layer into the `peers` volatile block, so
+     * layer2 stays byte-stable (and provider-cache-friendly) while agents
+     * join, leave, or change status.
+     */
     private _toolsUsageCache?;
     private _instructionBundle?;
     /**

package/dist/core/system-prompt-glossary.d.ts

@@ -32,12 +32,6 @@ export interface DomainGlossaryOptions {
     /** Max chars per bullet line (after the **Term** header). Default 80. */
     maxEntryChars?: number | undefined;
 }
-export interface DomainGlossary {
-    /** The extractor port shape we depend on. */
-    readonly memory: MemoryStore;
-    /** Render the block, or `null` when no glossary entries exist. */
-    readonly formatGlossaryBlock: () => Promise<string | null>;
-}
 /**
  * Build the minimal `[Project Jargon Dictionary]` block.
  *
@@ -53,21 +47,4 @@ export interface DomainGlossary {
  * parity (`domain-term`).
  */
 export declare function renderDomainGlossary(ctx: BuildContext, memory: MemoryStore | undefined, options?: DomainGlossaryOptions): Promise<string | null>;
-/**
- * Wire a glossary block into a `DefaultSystemPromptBuilder` via the
- * existing `contributors` channel (see `system-prompt-contributor.ts`).
- *
- * Use from the host (CLI/TUI/WebUI) like this:
- *
- *   const builder = new DefaultSystemPromptBuilder({
- *     ...other opts,
- *     contributors: [
- *       ...DefaultSystemPromptBuilder.defaultContributors({ projectRoot }),
- *       makeDomainGlossaryContributor({ memory: sagePort }),
- *     ],
- *   });
- *
- * The contributor returns `[]` for non-SAGE stores so the prompt stays clean.
- */
-export declare function makeDomainGlossaryContributor(glossary: DomainGlossary): (ctx: BuildContext) => Promise<import('../types/blocks.js').TextBlock[]>;
 //# sourceMappingURL=system-prompt-glossary.d.ts.map

package/dist/defaults/index.js

@@ -2693,6 +2693,7 @@ var TOOLS = {
     "glob",
     "search",
     "tree",
+    "diff",
     "write",
     "edit",
     "replace",
@@ -3724,7 +3725,7 @@ var VERIFY_AGENTS = [
       id: "e2e",
       name: "E2E",
       role: "e2e",
-      tools: [...TOOLS.build, "fetch", ...SPECIALIST_TOOLS.browser],
+      tools: [...TOOLS.build, "fetch", "e2e_plan", ...SPECIALIST_TOOLS.browser],
       prompt: agentPrompt("e2e")
     },
     budget: HEAVY_BUDGET,
@@ -4237,7 +4238,7 @@ var DOMAIN_AGENTS = [
       id: "designer",
       name: "Designer",
       role: "designer",
-      tools: [...TOOLS.docs],
+      tools: [...TOOLS.docs, "design"],
       prompt: agentPrompt("designer")
     },
     budget: MEDIUM_BUDGET,
@@ -9819,45 +9820,12 @@ import * as fsp17 from "node:fs/promises";
 import * as path23 from "node:path";
 
 // src/security/file-permissions.ts
-import { chmod } from "node:fs/promises";
-var SECRET_FILE_MODE = 384;
-async function restrictFilePermissions(filePath, opts) {
-  const label = opts?.label ?? "file-permissions";
-  const warn = opts?.warn ?? ((msg) => console.warn(msg));
-  if (process.platform === "win32") {
-    try {
-      const { execFile: execFile2 } = await import("node:child_process");
-      const { promisify: promisify2 } = await import("node:util");
-      const execFileAsync = promisify2(execFile2);
-      const user = windowsAccountName();
-      if (!user) {
-        warn(
-          `[${label}] Could not determine the current Windows user for ${filePath}; skipping icacls hardening.`
-        );
-        return;
-      }
-      await execFileAsync("icacls", [filePath, "/inheritance:r", "/grant:r", `${user}:(F)`], {
-        windowsHide: true
-      });
-    } catch {
-      warn(
-        `[${label}] Could not restrict permissions on ${filePath} \u2014 it may be readable by other users on this system.`
-      );
-    }
-  } else {
-    try {
-      await chmod(filePath, SECRET_FILE_MODE);
-    } catch {
-    }
-  }
-}
-function windowsAccountName() {
-  const username = process.env.USERNAME || process.env.USER;
-  if (!username || username.includes("\0")) return void 0;
-  const domain = process.env.USERDOMAIN;
-  if (domain && !domain.includes("\0")) return `${domain}\\${username}`;
-  return username;
-}
+import {
+  restrictDirPermissions,
+  restrictFilePermissions,
+  SECRET_DIR_MODE,
+  SECRET_FILE_MODE
+} from "@wrongstack/persistence";
 
 // src/security/secret-scrubber.ts
 var PATTERNS = [

package/dist/execution/index.js

@@ -7270,7 +7270,12 @@ import { dirname as dirname3 } from "node:path";
 import { createInterface } from "node:readline";
 
 // src/security/file-permissions.ts
-var SECRET_FILE_MODE = 384;
+import {
+  restrictDirPermissions,
+  restrictFilePermissions,
+  SECRET_DIR_MODE,
+  SECRET_FILE_MODE
+} from "@wrongstack/persistence";
 
 // src/coordination/brain-ledger.ts
 var QUESTION_MAX = 200;
@@ -14031,6 +14036,7 @@ var TOOLS = {
     "glob",
     "search",
     "tree",
+    "diff",
     "write",
     "edit",
     "replace",
@@ -15062,7 +15068,7 @@ var VERIFY_AGENTS = [
       id: "e2e",
       name: "E2E",
       role: "e2e",
-      tools: [...TOOLS.build, "fetch", ...SPECIALIST_TOOLS.browser],
+      tools: [...TOOLS.build, "fetch", "e2e_plan", ...SPECIALIST_TOOLS.browser],
       prompt: agentPrompt("e2e")
     },
     budget: HEAVY_BUDGET,
@@ -15575,7 +15581,7 @@ var DOMAIN_AGENTS = [
       id: "designer",
       name: "Designer",
       role: "designer",
-      tools: [...TOOLS.docs],
+      tools: [...TOOLS.docs, "design"],
       prompt: agentPrompt("designer")
     },
     budget: MEDIUM_BUDGET,

package/dist/hq/index.js

@@ -2050,45 +2050,12 @@ import * as fs3 from "node:fs/promises";
 import * as path4 from "node:path";
 
 // src/security/file-permissions.ts
-import { chmod } from "node:fs/promises";
-var SECRET_FILE_MODE = 384;
-async function restrictFilePermissions(filePath, opts) {
-  const label = opts?.label ?? "file-permissions";
-  const warn = opts?.warn ?? ((msg) => console.warn(msg));
-  if (process.platform === "win32") {
-    try {
-      const { execFile } = await import("node:child_process");
-      const { promisify } = await import("node:util");
-      const execFileAsync = promisify(execFile);
-      const user = windowsAccountName();
-      if (!user) {
-        warn(
-          `[${label}] Could not determine the current Windows user for ${filePath}; skipping icacls hardening.`
-        );
-        return;
-      }
-      await execFileAsync("icacls", [filePath, "/inheritance:r", "/grant:r", `${user}:(F)`], {
-        windowsHide: true
-      });
-    } catch {
-      warn(
-        `[${label}] Could not restrict permissions on ${filePath} \u2014 it may be readable by other users on this system.`
-      );
-    }
-  } else {
-    try {
-      await chmod(filePath, SECRET_FILE_MODE);
-    } catch {
-    }
-  }
-}
-function windowsAccountName() {
-  const username = process.env.USERNAME || process.env.USER;
-  if (!username || username.includes("\0")) return void 0;
-  const domain = process.env.USERDOMAIN;
-  if (domain && !domain.includes("\0")) return `${domain}\\${username}`;
-  return username;
-}
+import {
+  restrictDirPermissions,
+  restrictFilePermissions,
+  SECRET_DIR_MODE,
+  SECRET_FILE_MODE
+} from "@wrongstack/persistence";
 
 // src/utils/pid.ts
 function isPidAlive(pid) {

package/dist/index.d.ts

@@ -60,7 +60,7 @@ export { runProviderWithRetry } from './core/provider-runner.js';
 export { buildQueuedMessagesBlock, consumeQueuedMessagesUpdate, peekQueuedMessages, setQueuedMessagesSnapshot, } from './core/queued-messages.js';
 export { extractRunEnv, type RunEnv } from './core/run-env.js';
 export { DefaultSystemPromptBuilder, type DefaultSystemPromptBuilderOptions, LAYER_1_IDENTITY, SYSTEM_BLOCK_SOURCE, type SystemBlockSource, } from './core/system-prompt-builder.js';
-export { type DomainGlossary, type DomainGlossaryOptions, makeDomainGlossaryContributor, renderDomainGlossary, } from './core/system-prompt-glossary.js';
+export { type DomainGlossaryOptions, renderDomainGlossary, } from './core/system-prompt-glossary.js';
 export * from './defaults/index.js';
 export { AutoCompactionMiddleware, type CompactorOptions, type CompactorStrategy, createStrategyCompactor, HybridCompactor, IntelligentCompactor, type IntelligentCompactorOptions, installSubagentAutoCompaction, SelectiveCompactor, type SelectiveCompactorOptions, type StrategyCompactorOptions, } from './defaults/index.js';
 export { type AutonomyBrainOptions, type BrainAutoRisk, type BrainLlmTarget, buildBrainUserMessage, completeBrainLlm, createAutonomyBrain, createTieredBrainArbiter, formatDecisionSummary, parseOptionDecision, type TieredBrainArbiterOptions, } from './execution/autonomy-brain.js';