@wrongstack/core 0.306.0 → 0.306.3

package/dist/coordination/techstack-mailbox-consumer.d.ts

@@ -24,6 +24,23 @@ export interface TechStackConsumerOptions {
     }>;
     /** Agent id that the consumer watches for. Default: 'tech-stack'. */
     targetAgent?: string | undefined;
+    /**
+     * The only sender whose `assign` messages may spawn an agent. Default:
+     * `'dep-watcher'` — the `watcherAgentId` default of
+     * {@link attachDepWatcherBridge}, which is the pipeline this consumer exists
+     * to serve. Matched on the base identity, so a session-qualified
+     * `dep-watcher@<tag>` also passes.
+     *
+     * Without this the consumer acted on an `assign` addressed to `tech-stack`
+     * from ANY sender. The mailbox is a shared bus: every agent on the project
+     * can send one with `mail_send`, and so can any external credential holding
+     * `mail.send.actionable` when the HTTP bridge is enabled. The message body
+     * then chose a file path and was pasted verbatim into the task of a freshly
+     * spawned subagent holding `read`, `fetch` and `mailbox` — a peer-writable
+     * path into an agent that can read files, reach the network, and broadcast
+     * to everyone. Restricting the sender is what makes the spawn intentional.
+     */
+    senderAgentId?: string | undefined;
     /** Agent id that sends the completion ack. Default: 'tech-stack-consumer'. */
     consumerAgentId?: string | undefined;
     /** Polling interval in ms. Default: 5000. */

package/dist/core/index.js

@@ -1505,24 +1505,34 @@ var RemoteMailbox = class {
   }
   publishHqRegistryEvent(event, payload) {
     const publisher = this.hqPublisher;
-    if (!publisher || !event.startsWith("mailbox.agent_") && !event.startsWith("mailbox.client_")) {
+    if (!publisher || this.closed || !event.startsWith("mailbox.agent_") && !event.startsWith("mailbox.client_")) {
       return;
     }
     const mailboxId = `${path5.basename(this.projectDir)}:mailbox`;
     const record = typeof payload === "object" && payload !== null ? payload : {};
     const agentId = typeof record["agentId"] === "string" ? record["agentId"] : void 0;
     const action = event === "mailbox.agent_registered" ? "agent.registered" : event === "mailbox.agent_heartbeat" ? "agent.heartbeat" : event === "mailbox.agent_deregistered" ? "agent.deregistered" : void 0;
-    void this.getAgentStatuses().then((statuses) => {
-      const agent = agentId ? statuses.find((candidate) => candidate.agentId === agentId) : void 0;
+    if (action !== "agent.registered") {
       if (action) {
         publisher.publishMailboxEvent({
           mailboxId,
           action,
-          ...agent ? { agent } : {},
           ...agentId ? { summary: agentId } : {}
         });
       }
       if (action !== "agent.heartbeat") this.scheduleHqSnapshot(mailboxId);
+      return;
+    }
+    void this.getAgentStatuses().then((statuses) => {
+      if (this.closed) return;
+      const agent = agentId ? statuses.find((candidate) => candidate.agentId === agentId) : void 0;
+      publisher.publishMailboxEvent({
+        mailboxId,
+        action,
+        ...agent ? { agent } : {},
+        ...agentId ? { summary: agentId } : {}
+      });
+      this.scheduleHqSnapshot(mailboxId);
     }).catch(() => {
     });
   }
@@ -1654,7 +1664,12 @@ import * as syncFs from "node:fs";
 import * as path7 from "node:path";
 
 // src/security/file-permissions.ts
-var SECRET_FILE_MODE = 384;
+import {
+  restrictDirPermissions,
+  restrictFilePermissions,
+  SECRET_DIR_MODE,
+  SECRET_FILE_MODE
+} from "@wrongstack/persistence";
 
 // src/utils/pid.ts
 function isPidAlive(pid) {
@@ -7389,6 +7404,24 @@ function deriveCachePrefixKey(systemPrompt) {
   return key;
 }
 
+// src/utils/memory-evidence-fence.ts
+var MEMORY_EVIDENCE_TAG = "memory_evidence";
+var FENCE_DELIMITER = /\[[ \t]*\/?[ \t]*memory_evidence\b[^\]\n]*\]/gi;
+function sanitizeMemoryEvidenceBody(text) {
+  return text.replace(FENCE_DELIMITER, (match) => `(${match.slice(1, -1)})`);
+}
+function sanitizeMemoryEvidenceSource(source) {
+  const collapsed = source.replace(/[^a-z0-9_.-]+/gi, "-").replace(/^-+|-+$/g, "").slice(0, 80).replace(/-+$/, "");
+  return collapsed || "memory";
+}
+function formatMemoryEvidenceBlock(source, body) {
+  const label = sanitizeMemoryEvidenceSource(source);
+  const safe = sanitizeMemoryEvidenceBody(body);
+  return `[${MEMORY_EVIDENCE_TAG} source="${label}"]
+${safe}
+[/${MEMORY_EVIDENCE_TAG}]`;
+}
+
 // src/utils/message-invariants.ts
 function repairToolUseAdjacency(messages) {
   const removedToolUses = [];
@@ -8014,15 +8047,9 @@ function buildMemoryEvidenceBlocks(ctx) {
     if (remaining <= 0) break;
     const text = entry.text.trim();
     if (!text) continue;
-    const source = entry.source.replace(/[^a-z0-9_.-]+/gi, "-").slice(0, 80) || "memory";
     const bounded = text.slice(0, remaining);
     remaining -= bounded.length;
-    blocks.push({
-      type: "text",
-      text: `[memory_evidence source="${source}"]
-${bounded}
-[/memory_evidence]`
-    });
+    blocks.push({ type: "text", text: formatMemoryEvidenceBlock(entry.source, bounded) });
   }
   return blocks;
 }

package/dist/defaults/index.js

@@ -9820,45 +9820,12 @@ import * as fsp17 from "node:fs/promises";
 import * as path23 from "node:path";
 
 // src/security/file-permissions.ts
-import { chmod } from "node:fs/promises";
-var SECRET_FILE_MODE = 384;
-async function restrictFilePermissions(filePath, opts) {
-  const label = opts?.label ?? "file-permissions";
-  const warn = opts?.warn ?? ((msg) => console.warn(msg));
-  if (process.platform === "win32") {
-    try {
-      const { execFile: execFile2 } = await import("node:child_process");
-      const { promisify: promisify2 } = await import("node:util");
-      const execFileAsync = promisify2(execFile2);
-      const user = windowsAccountName();
-      if (!user) {
-        warn(
-          `[${label}] Could not determine the current Windows user for ${filePath}; skipping icacls hardening.`
-        );
-        return;
-      }
-      await execFileAsync("icacls", [filePath, "/inheritance:r", "/grant:r", `${user}:(F)`], {
-        windowsHide: true
-      });
-    } catch {
-      warn(
-        `[${label}] Could not restrict permissions on ${filePath} \u2014 it may be readable by other users on this system.`
-      );
-    }
-  } else {
-    try {
-      await chmod(filePath, SECRET_FILE_MODE);
-    } catch {
-    }
-  }
-}
-function windowsAccountName() {
-  const username = process.env.USERNAME || process.env.USER;
-  if (!username || username.includes("\0")) return void 0;
-  const domain = process.env.USERDOMAIN;
-  if (domain && !domain.includes("\0")) return `${domain}\\${username}`;
-  return username;
-}
+import {
+  restrictDirPermissions,
+  restrictFilePermissions,
+  SECRET_DIR_MODE,
+  SECRET_FILE_MODE
+} from "@wrongstack/persistence";
 
 // src/security/secret-scrubber.ts
 var PATTERNS = [
@@ -14038,6 +14005,44 @@ function userInputTitle(content) {
   return sessionContentPreview(content, 60);
 }
 
+// src/storage/session-writer-scrubber.ts
+function scrubSessionWriterEvent(event, secretScrubber) {
+  const persistMessage = (message) => {
+    const { _estTokens: _ignored, ...persisted } = message;
+    return {
+      ...persisted,
+      content: typeof persisted.content === "string" ? secretScrubber?.scrub(persisted.content) ?? persisted.content : secretScrubber?.scrubObject(persisted.content) ?? persisted.content
+    };
+  };
+  if (event.type === "context_snapshot" || event.type === "messages_replaced") {
+    return { ...event, messages: event.messages.map(persistMessage) };
+  }
+  if (event.type === "message_appended" || event.type === "message_updated") {
+    return { ...event, message: persistMessage(event.message) };
+  }
+  if (!secretScrubber) return event;
+  if (event.type === "user_input") {
+    return {
+      ...event,
+      content: typeof event.content === "string" ? secretScrubber.scrub(event.content) : secretScrubber.scrubObject(event.content)
+    };
+  }
+  if (event.type === "llm_response") {
+    return { ...event, content: secretScrubber.scrubObject(event.content) };
+  }
+  if (event.type === "file_snapshot") {
+    return {
+      ...event,
+      files: event.files.map((f) => ({
+        ...f,
+        before: f.before !== null ? secretScrubber.scrub(f.before) : null,
+        after: f.after !== null ? secretScrubber.scrub(f.after) : null
+      }))
+    };
+  }
+  return event;
+}
+
 // src/storage/session-writer-truncate.ts
 import * as fsp6 from "node:fs/promises";
 var CHUNK_SIZE = 65536;
@@ -14182,45 +14187,11 @@ async function rewriteSessionToCheckpoint(filePath, checkpointByteOffset) {
   }
 }
 
-// src/storage/session-writer-scrubber.ts
-function scrubSessionWriterEvent(event, secretScrubber) {
-  const persistMessage = (message) => {
-    const { _estTokens: _ignored, ...persisted } = message;
-    return {
-      ...persisted,
-      content: typeof persisted.content === "string" ? secretScrubber?.scrub(persisted.content) ?? persisted.content : secretScrubber?.scrubObject(persisted.content) ?? persisted.content
-    };
-  };
-  if (event.type === "context_snapshot" || event.type === "messages_replaced") {
-    return { ...event, messages: event.messages.map(persistMessage) };
-  }
-  if (event.type === "message_appended" || event.type === "message_updated") {
-    return { ...event, message: persistMessage(event.message) };
-  }
-  if (!secretScrubber) return event;
-  if (event.type === "user_input") {
-    return {
-      ...event,
-      content: typeof event.content === "string" ? secretScrubber.scrub(event.content) : secretScrubber.scrubObject(event.content)
-    };
-  }
-  if (event.type === "llm_response") {
-    return { ...event, content: secretScrubber.scrubObject(event.content) };
-  }
-  if (event.type === "file_snapshot") {
-    return {
-      ...event,
-      files: event.files.map((f) => ({
-        ...f,
-        before: f.before !== null ? secretScrubber.scrub(f.before) : null,
-        after: f.after !== null ? secretScrubber.scrub(f.after) : null
-      }))
-    };
-  }
-  return event;
-}
-
 // src/storage/file-session-writer.ts
+function isClosedHandleError(err) {
+  const code = err?.code;
+  return code === "EBADF" || code === "ERR_CLOSED_RESOURCE" || code === "ERR_INVALID_HANDLE";
+}
 var FileSessionWriter = class _FileSessionWriter {
   constructor(id, handle, startedAt, meta, events, opts = {}, traceId) {
     this.id = id;
@@ -14392,8 +14363,7 @@ var FileSessionWriter = class _FileSessionWriter {
       try {
         return await this.handle.appendFile(data, "utf8");
       } catch (err) {
-        const nodeErr = err;
-        if (nodeErr?.code === "EBADF") {
+        if (isClosedHandleError(err)) {
           this.handle = await fsp7.open(this.filePath, "a", 384);
           return await this.handle.appendFile(data, "utf8");
         }
@@ -14433,8 +14403,8 @@ var FileSessionWriter = class _FileSessionWriter {
   bufferSynchronousEvent(event) {
     if (this.closed) return;
     void this.ensureInit();
-    this.observeForSummary(event);
-    const appendEvent = event.type === "file_snapshot" ? scrubSessionWriterEvent(event, this.secretScrubber) : event;
+    const appendEvent = scrubSessionWriterEvent(event, this.secretScrubber);
+    this.observeForSummary(appendEvent);
     try {
       this._onAppend?.(appendEvent);
     } catch {
@@ -14587,8 +14557,7 @@ var FileSessionWriter = class _FileSessionWriter {
     try {
       await this.handle.datasync();
     } catch (err) {
-      const nodeErr = err;
-      if (nodeErr?.code === "EBADF") {
+      if (isClosedHandleError(err)) {
         this.handle = await fsp7.open(this.filePath, "a", 384);
         return;
       }
@@ -14825,6 +14794,7 @@ var FileSessionWriter = class _FileSessionWriter {
     return this.closePromise;
   }
   async doClose() {
+    await this.ensureInit();
     if (this.pendingFileSnapshots.length > 0) {
       await this.writeFileSnapshot(this.activePromptIndex ?? 0, [...this.pendingFileSnapshots]);
       this.pendingFileSnapshots = [];
@@ -14840,8 +14810,7 @@ var FileSessionWriter = class _FileSessionWriter {
     try {
       await this.handle.datasync();
     } catch (err) {
-      const nodeErr = err;
-      if (nodeErr?.code !== "EBADF") throw err;
+      if (!isClosedHandleError(err)) throw err;
     }
     const endedAt = (/* @__PURE__ */ new Date()).toISOString();
     const observedActivityMs = Date.parse(this.lastActivityAt);
@@ -28277,7 +28246,8 @@ async function evaluateToolKanbanBoundary(tool, input, ctx, options = {}) {
         decision: "block",
         reason: "Active card is not implementation-ready: " + readiness.issues.map((issue) => issue.message).join(" | "),
         boardId: board.id,
-        taskId: task.id
+        taskId: task.id,
+        readinessIssues: readiness.issues
       };
     }
     if (task.lifecycle?.currentStage !== "running" || task.assignment?.status !== "running") {
@@ -29068,7 +29038,8 @@ ${errorDetails}`,
           type: "tool_result",
           tool_use_id: use.id,
           content: `Tool "${tool.name}" blocked by Kanban boundary. ${boundary.reason ?? ""}`.trim(),
-          is_error: true
+          is_error: true,
+          _kanbanBoundary: boundary
         };
         budget = this.budgetForString(result.content, budget);
         return { result, tool, durationMs: Date.now() - start };

package/dist/execution/index.js

@@ -7270,7 +7270,12 @@ import { dirname as dirname3 } from "node:path";
 import { createInterface } from "node:readline";
 
 // src/security/file-permissions.ts
-var SECRET_FILE_MODE = 384;
+import {
+  restrictDirPermissions,
+  restrictFilePermissions,
+  SECRET_DIR_MODE,
+  SECRET_FILE_MODE
+} from "@wrongstack/persistence";
 
 // src/coordination/brain-ledger.ts
 var QUESTION_MAX = 200;
@@ -21401,7 +21406,8 @@ async function evaluateToolKanbanBoundary(tool, input, ctx, options = {}) {
         decision: "block",
         reason: "Active card is not implementation-ready: " + readiness.issues.map((issue) => issue.message).join(" | "),
         boardId: board.id,
-        taskId: task.id
+        taskId: task.id,
+        readinessIssues: readiness.issues
       };
     }
     if (task.lifecycle?.currentStage !== "running" || task.assignment?.status !== "running") {
@@ -22192,7 +22198,8 @@ ${errorDetails}`,
           type: "tool_result",
           tool_use_id: use.id,
           content: `Tool "${tool.name}" blocked by Kanban boundary. ${boundary.reason ?? ""}`.trim(),
-          is_error: true
+          is_error: true,
+          _kanbanBoundary: boundary
         };
         budget = this.budgetForString(result.content, budget);
         return { result, tool, durationMs: Date.now() - start };

package/dist/hq/index.js

@@ -2050,45 +2050,12 @@ import * as fs3 from "node:fs/promises";
 import * as path4 from "node:path";
 
 // src/security/file-permissions.ts
-import { chmod } from "node:fs/promises";
-var SECRET_FILE_MODE = 384;
-async function restrictFilePermissions(filePath, opts) {
-  const label = opts?.label ?? "file-permissions";
-  const warn = opts?.warn ?? ((msg) => console.warn(msg));
-  if (process.platform === "win32") {
-    try {
-      const { execFile } = await import("node:child_process");
-      const { promisify } = await import("node:util");
-      const execFileAsync = promisify(execFile);
-      const user = windowsAccountName();
-      if (!user) {
-        warn(
-          `[${label}] Could not determine the current Windows user for ${filePath}; skipping icacls hardening.`
-        );
-        return;
-      }
-      await execFileAsync("icacls", [filePath, "/inheritance:r", "/grant:r", `${user}:(F)`], {
-        windowsHide: true
-      });
-    } catch {
-      warn(
-        `[${label}] Could not restrict permissions on ${filePath} \u2014 it may be readable by other users on this system.`
-      );
-    }
-  } else {
-    try {
-      await chmod(filePath, SECRET_FILE_MODE);
-    } catch {
-    }
-  }
-}
-function windowsAccountName() {
-  const username = process.env.USERNAME || process.env.USER;
-  if (!username || username.includes("\0")) return void 0;
-  const domain = process.env.USERDOMAIN;
-  if (domain && !domain.includes("\0")) return `${domain}\\${username}`;
-  return username;
-}
+import {
+  restrictDirPermissions,
+  restrictFilePermissions,
+  SECRET_DIR_MODE,
+  SECRET_FILE_MODE
+} from "@wrongstack/persistence";
 
 // src/utils/pid.ts
 function isPidAlive(pid) {