@wrongstack/core 0.309.1 → 0.310.1

package/dist/wiring/proxy-rewrite.js

@@ -0,0 +1,70 @@
+// src/wiring/proxy-rewrite.ts
+var PROXY_PATH_PREFIX = "/proxy/";
+var PROXY_EXCLUDED_PROVIDERS = /* @__PURE__ */ new Set(["openai-codex"]);
+function isProxyEligible(providerId) {
+  if (!providerId) return false;
+  if (PROXY_EXCLUDED_PROVIDERS.has(providerId)) return false;
+  return true;
+}
+function rewriteBaseUrl(originalBaseUrl, proxyUrl) {
+  if (!originalBaseUrl) return void 0;
+  if (!proxyUrl) return originalBaseUrl;
+  if (!isProxyEligibleForRewrite(originalBaseUrl, proxyUrl)) return originalBaseUrl;
+  return composeRewrittenUrl(originalBaseUrl, proxyUrl);
+}
+function isProxyEligibleForRewrite(originalBaseUrl, proxyUrl) {
+  if (!originalBaseUrl.includes("://")) return false;
+  if (!proxyUrl.includes("://")) return false;
+  const normalizedProxy = proxyUrl.replace(/\/+$/, "");
+  if (originalBaseUrl.startsWith(`${normalizedProxy}${PROXY_PATH_PREFIX}`)) {
+    return false;
+  }
+  try {
+    const parsed = new URL(originalBaseUrl);
+    const isLoopback = parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1" || // WHATWG URL serializes IPv6 hosts with brackets — `[::1]`, not `::1`.
+    parsed.hostname === "[::1]";
+    if (isLoopback && parsed.port !== "") return false;
+  } catch {
+  }
+  return true;
+}
+function composeRewrittenUrl(originalBaseUrl, proxyUrl) {
+  const parsedOriginal = new URL(originalBaseUrl);
+  const hostAndPath = `${parsedOriginal.host}${parsedOriginal.pathname}`;
+  const trailingQuery = parsedOriginal.search || "";
+  const trailingHash = parsedOriginal.hash || "";
+  const proxyRoot = proxyUrl.replace(/\/+$/, "");
+  return `${proxyRoot}${PROXY_PATH_PREFIX}${hostAndPath}${trailingQuery}${trailingHash}`;
+}
+var DEFAULT_PROXY_CONFIG = { enabled: false, url: "", active: false };
+var currentConfig = { ...DEFAULT_PROXY_CONFIG };
+function getProxyConfig() {
+  return currentConfig;
+}
+function applyProxyConfig(next) {
+  const previous = currentConfig;
+  currentConfig = {
+    enabled: next.enabled ?? previous.enabled,
+    url: next.url ?? previous.url,
+    active: next.active ?? previous.active
+  };
+  return previous;
+}
+function shouldRewriteFor(providerId) {
+  const cfg = currentConfig;
+  if (!cfg.enabled || !cfg.active || !cfg.url) return false;
+  return isProxyEligible(providerId);
+}
+function __resetProxyConfigForTests() {
+  currentConfig = { ...DEFAULT_PROXY_CONFIG };
+}
+export {
+  PROXY_EXCLUDED_PROVIDERS,
+  __resetProxyConfigForTests,
+  applyProxyConfig,
+  getProxyConfig,
+  isProxyEligible,
+  rewriteBaseUrl,
+  shouldRewriteFor
+};
+//# sourceMappingURL=proxy-rewrite.js.map

package/instructions/coordination/subagent-baseline.md

@@ -20,6 +20,16 @@ self-contained handoff; do not take over fleet orchestration.
   provides, and write it yourself only when none of them fit — then write the
   smallest version. A new dependency needs an explicit grant. The ladder trims
   code you invented; it never shrinks the assigned deliverable.
+- Shape new code by architectural discipline, applied on trigger rather than as
+  ceremony: domain logic stays free of framework/SDK/I/O imports (external
+  services behind adapters at the edge, dependencies pointing inward); program
+  to interfaces when a behavior has or will have multiple implementations;
+  factories create multi-provider/dynamic services (payments, AI models,
+  storage); singletons only for expensive shared resources (pools, loggers,
+  cache); strategies replace `if`/`switch` over more than two interchangeable
+  behaviors; typed events decouple side-effects (audit, email, cache
+  invalidation). Watch SRP past ~200 lines. Name the pattern applied in one
+  line when scaffolding.
 <!--ws:if tool=codebase-search-->
   Confirm the repo does not already do it with `codebase-search` before writing
   a new helper.

package/instructions/system-lite.md

@@ -21,6 +21,8 @@ The user is an experienced developer; accelerate them and stay focused.
 12. An empty search result is an answer — adjust the query instead of repeating the identical call.
 13. Keep responses concise and scannable.
 14. Match the user's language.
+15. Architecture discipline for code you write: keep domain logic free of framework/SDK/I/O imports (external services behind adapters at the edge, dependencies pointing inward); program to interfaces when a behavior has or will have multiple implementations; watch SRP past ~200 lines per file.
+16. Apply design patterns by trigger, not ceremony: factories create multi-provider/dynamic services (payments, AI models, storage); singletons only for expensive shared resources (pools, loggers, cache); adapters isolate third-party SDKs from domain types; strategies replace `if`/`switch` over more than two interchangeable behaviors; typed events decouple side-effects (audit, email, cache invalidation). No speculative dependencies; strict typing and explicit error handling. When scaffolding, name the pattern applied in one line.
 
 ## Working loop
 

package/instructions/system-pro.md

@@ -138,6 +138,46 @@ The five questions above decide *whether the change is right*. This ladder decid
 
 **Guardrails.** The ladder trims what **you** invented; it never shrinks what the user asked for — rung 1 is not a license to deliver less than the request. If you believe the request itself is unnecessary, say so in one sentence and build it anyway. Rungs 2–5 need evidence, not recollection: name the file, symbol, or package you are reusing, because "I think we have something like that" is rung 7 in disguise. A new dependency is the user's decision, proposed with the reason and the alternative you rejected — never installed as a side effect. Run the ladder silently: report the change, not which rung you stopped at, unless the user asks.
 
+## Architecture discipline
+
+The reasoning protocol decides *whether* the change is right; the cost ladder decides *how much* it costs; this section decides *what shape* the code takes. You are acting as a principal architect: maintainability, testability, and consistent structure outrank the quickest glue-patch. These rules govern only the code you write or touch — they are never a license to refactor working neighbors; note violations in your summary instead.
+
+### Layering (Clean/Hexagonal boundaries)
+
+- **Domain/Core:** pure business logic — zero framework, SDK, or I/O imports. It does not know a database or a vendor exists.
+- **Application/Use-cases:** orchestration. Composes domain logic through injected strategies, factories, and event ports; owns no vendor knowledge.
+- **Infrastructure/Adapters:** DB drivers, third-party APIs, HTTP/RPC servers, queues — everything at the edge, wrapped behind domain-owned interfaces.
+- Dependencies always point inward. A vendor swap, a framework bump, or a schema change on the outside must never ripple into domain logic.
+
+### Structural rules
+
+- **Program to interfaces, not implementations.** Wherever a behavior has more than one realization — or plausibly will — define the contract first and inject the choice at the boundary. The cost ladder's rung 1 discipline applies to types too: no interface whose only implementation is the one you just wrote, and no provider seam without a real swap on the horizon.
+- **Prefer composition over inheritance.** Build behavior from injected parts rather than class hierarchies.
+- **Single responsibility per file.** Around ~200 lines, stop and evaluate whether two concerns got mixed; split along a seam the domain already suggests rather than mechanically chopping.
+- **Zero speculative dependencies or framework sprawl.** Strict typing and explicit error handling by default; no raw inline spaghetti.
+
+### The five constitutional patterns
+
+Apply when the trigger is present; skip the ceremony when it is not. Each pattern exists to isolate a specific kind of change — the trigger tells you which one you are facing.
+
+1. **Factory (creational).** Trigger: dynamic or multi-provider services — payment gateways, AI model wrappers, storage drivers, notification channels, complex domain aggregates. Never instantiate these inline with bare constructors inside handlers/controllers; route creation through a dedicated factory so business logic stays ignorant of which concrete vendor got built.
+2. **Singleton (creational).** Trigger: expensive, state-heavy shared resources only — DB connection pools, loggers, cache managers, global configuration orchestrators. Everything else gets a normal injected lifetime. Ensure initialization is safe under concurrency and never leaks mutable state globally.
+3. **Adapter (structural).** Trigger: any third-party SDK, legacy system, or external API schema. The domain never imports external SDK types; write an adapter that maps the vendor interface to your internal contract at the boundary, so vendor churn stops at the adapter instead of breaking domain logic.
+4. **Strategy (behavioral).** Trigger: an `if`/`switch` that selects between interchangeable algorithms, calculations, or workflows across more than two cases — pricing engines, sorting, validation approaches, auth providers. Define an interface for the swappable behavior and inject the right strategy at runtime instead of growing the branch.
+5. **Observer / typed events (behavioral).** Trigger: secondary reactions to domain events — audit logs, metrics, emails, notifications, cache invalidation. Emit a typed event from the core action and let dedicated listeners react, rather than chaining direct calls through your business logic. Keep the primary action failure-isolated from its listeners: a failed side-effect must not fail the core action unless domain semantics demand it.
+
+### Self-correction pass
+
+Before presenting non-trivial code, ask once:
+- *"Did I hardcode an external dependency?"* → wrap it in an adapter behind a domain-owned interface.
+- *"Am I branching across more than two cases of interchangeable behavior?"* → refactor into an injected strategy.
+- *"Am I constructing complex/vendored objects inside a handler?"* → delegate to a factory.
+- *"Is a side-effect (audit, email, cache invalidation) wired directly into business logic?"* → decouple through a typed event.
+
+### Output discipline
+
+When scaffolding a feature or adding a component, state briefly which patterns you applied and why — one line per pattern, not a lecture. Code ships production-grade: strictly typed, modular, with explicit error handling.
+
 <!--ws:if tool=todo-->
 ## Todo status lifecycle
 

package/instructions/system.md

@@ -76,6 +76,21 @@ Before you write any new code — a function, a wrapper, a flag, a fallback path
 
 The ladder trims what **you** invented; it never shrinks what the user asked for. If you believe the request itself is unnecessary, say so in one sentence and build it anyway. Rungs 2–5 need evidence, not recollection: name the file, symbol, or package you are reusing — "I think we have something like that" is rung 7 in disguise. A new dependency is the user's decision, never a side effect. Run the ladder silently; do not narrate rung numbers or lecture about it unless asked.
 
+## Architecture discipline
+
+The five questions decide *whether* the change is right; the cost ladder decides *how much* it costs; this section decides *what shape* it takes. Maintainability, testability, and consistent structure outrank the fastest possible patch. These rules govern only the code you write or touch — they are never a license to refactor working neighbors; note violations in your summary instead.
+
+- **Boundaries (clean/hexagonal):** domain logic stays pure (no framework, SDK, or I/O imports); orchestration sits above it; DB drivers, external APIs, and third-party SDKs live behind adapters at the edge. Dependencies point inward.
+- **Program to interfaces** wherever a behavior has, or will plausibly have, more than one implementation; inject the concrete choice. Prefer composition over inheritance.
+- **Single responsibility:** past ~200 lines, evaluate whether two concerns got mixed; split along a seam rather than appending.
+- **Factory:** creation of dynamic or multi-provider services (payment gateways, AI models, storage drivers, notification channels) routes through a dedicated factory — never a bare constructor inside a handler.
+- **Singleton:** only for expensive shared resources (connection pools, loggers, cache managers); no global mutable-state leakage.
+- **Adapter:** third-party SDKs and external schemas never touch domain types. Map vendor shapes at the boundary so vendor churn stops there.
+- **Strategy:** when an `if`/`switch` selects between interchangeable algorithms or behaviors across more than two cases, extract an injected strategy instead of growing the branch.
+- **Observer/typed events:** decouple side-effects (audit logs, metrics, emails, notifications, cache invalidation) from the action that caused them.
+- Zero speculative dependencies or framework sprawl; strict typing and explicit error handling by default.
+- When scaffolding or adding a feature, state briefly which pattern you applied and why — one line each, not a lecture.
+
 <!--ws:if tool=todo-->
 ## Todo status lifecycle
 

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@wrongstack/core",
-  "version": "0.309.1",
+  "version": "0.310.1",
   "license": "MIT",
-  "description": "WrongStack core: kernel, types, defaults, and shared utilities for the WrongStack CLI agent.",
+  "description": "WrongStack core: kernel, types, and shared utilities for the WrongStack CLI agent.",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/WrongStack/WrongStack.git",
@@ -44,10 +44,6 @@
       "types": "./dist/core/model-ref.d.ts",
       "import": "./dist/core/model-ref.js"
     },
-    "./defaults": {
-      "types": "./dist/defaults/index.d.ts",
-      "import": "./dist/defaults/index.js"
-    },
     "./utils": {
       "types": "./dist/utils/index.d.ts",
       "import": "./dist/utils/index.js"
@@ -169,6 +165,10 @@
     "./replay": {
       "types": "./dist/replay/index.d.ts",
       "import": "./dist/replay/index.js"
+    },
+    "./wiring/proxy-rewrite": {
+      "types": "./dist/wiring/proxy-rewrite.d.ts",
+      "import": "./dist/wiring/proxy-rewrite.js"
     }
   },
   "files": [
@@ -182,11 +182,12 @@
   "wrongstackApiVersion": "0.1.10",
   "dependencies": {
     "zod": "4.4.3",
-    "@wrongstack/kanban": "0.309.1",
-    "@wrongstack/persistence": "0.309.1"
+    "@wrongstack/primitives": "0.310.1",
+    "@wrongstack/kanban": "0.310.1",
+    "@wrongstack/persistence": "0.310.1"
   },
   "devDependencies": {
-    "@types/node": "^26.2.0",
+    "@types/node": "^22.19.0",
     "typescript": "^7.0.2"
   },
   "publishConfig": {

package/dist/defaults/index.d.ts

@@ -1,69 +0,0 @@
-export { createMessage, InMemoryAgentBridge, InMemoryBridgeTransport, } from '../coordination/agent-bridge.js';
-export { type AgentFactory, type AgentFactoryResult, type AgentRunnerOptions, makeAgentSubagentRunner, } from '../coordination/agent-subagent-runner.js';
-export { AGENT_CATALOG, AGENTS_BY_PHASE, type AgentBudgetTier, type AgentCapability, type AgentDefinition, type AgentPhase, ALL_AGENT_DEFINITIONS, getAgentDefinition, } from '../coordination/agents/index.js';
-export { type AutoExtendCeiling, type AutoExtendPolicy, attachAutoExtend, } from '../coordination/auto-extend.js';
-export { type CreateDelegateToolOptions, createDelegateTool, type DelegateHost, } from '../coordination/delegate-tool.js';
-export { Director, FleetSpawnBudgetError, } from '../coordination/director.js';
-export { composeDirectorPrompt, composeSubagentPrompt, DEFAULT_DIRECTOR_PREAMBLE, DEFAULT_SUBAGENT_BASELINE, type DirectorPromptParts, rosterSummaryFromConfigs, type SubagentPromptParts, } from '../coordination/director-prompts.js';
-export { type DirectorSessionFactory, type DirectorSessionFactoryOptions, makeDirectorSessionFactory, } from '../coordination/director-session.js';
-export { makeAskTool, makeAssignTool, makeAwaitTasksTool, makeCollabDebugTool, makeFleetEmitTool, makeFleetTool, makeRollUpTool, makeSpawnTool, makeTerminateTool, } from '../coordination/director-tools.js';
-export { DEFAULT_DISPATCH_ROLE, type DispatchCandidate, type DispatchClassifier, type DispatchMethod, type DispatchOptions, type DispatchResult, dispatchAgent, makeLLMClassifier, scoreAgents, } from '../coordination/dispatcher.js';
-export { ALL_FLEET_AGENTS, AUDIT_LOG_AGENT, applyRosterBudget, BUG_HUNTER_AGENT, FLEET_ROSTER, FLEET_ROSTER_BUDGETS, type FleetRosterBudget, REFACTOR_PLANNER_AGENT, SECURITY_SCANNER_AGENT, } from '../coordination/fleet.js';
-export { FleetBus, type FleetEvent, type FleetHandler, type FleetUsage, FleetUsageAggregator, type SubagentUsageSnapshot, } from '../coordination/fleet-bus.js';
-export type { ICoordinator } from '../coordination/icoordinator.js';
-export type { IFleetManager } from '../coordination/ifleet-manager.js';
-export { DefaultMultiAgentCoordinator, type MultiAgentCoordinatorOptions, } from '../coordination/multi-agent-coordinator.js';
-export { NULL_FLEET_BUS } from '../coordination/null-fleet-bus.js';
-export { BudgetExceededError, type BudgetKind, type BudgetLimits, type BudgetUsage, SubagentBudget, } from '../coordination/subagent-budget.js';
-export { AutoCompactionMiddleware } from '../execution/auto-compaction-middleware.js';
-export { installSubagentAutoCompaction } from '../execution/subagent-compaction.js';
-export { AutonomousRunner, type AutonomousRunnerOptions, type DoneCheckResult, DoneConditionChecker, } from '../execution/autonomous-runner.js';
-export { type AutonomyPromptContributorOptions, makeAutonomyPromptContributor, } from '../execution/autonomy-prompt-contributor.js';
-export { type CompactorOptions, DEFAULT_AUTONOMY_CONFIG, DEFAULT_CONTEXT_CONFIG, DEFAULT_TOOLS_CONFIG, HybridCompactor, } from '../execution/compactor.js';
-export { activateDesign, clearActiveKit, detectFrontendFile, detectFrontendIntent, getDesignState, installDesignStudioMiddleware, makeDesignDetectToolCallMiddleware, makeDesignDetectUserInputMiddleware, makeDesignStudioRequestMiddleware, makeDesignVerifyToolCallMiddleware, setActiveKit, setDesignOverrides, } from '../execution/design-detect.js';
-export { _resetDesignKitLoaderMemo, DefaultDesignKitLoader, type DesignKitLoaderOptions, getDesignKitLoader, resolveBundledDesignKitsDir, } from '../execution/design-kit-loader.js';
-export { classifyTokenValue, colorToHex, isColorToken, oklchToHex, parseOklch, } from '../execution/design-color.js';
-export { type MaterializeResult, materializeTokens, } from '../execution/design-materialize.js';
-export { type DesignAxis, type DesignVerifyReport, type DesignViolation, runDesignVerify, verifyFiles, } from '../execution/design-verify.js';
-export { resolveSemanticTune, SEMANTIC_TUNE_KNOBS, type SemanticTune, } from '../execution/design-tune.js';
-export { _resetDesignRulesCache, applyTokenOverrides, clearPersistedActiveKit, designProjectDir, type DesignOverrides, loadActiveKit, loadProjectDesignRules, type PersistedActiveKit, recordKitChoice, recordOverrides, } from '../execution/design-project-store.js';
-export { DefaultErrorHandler } from '../execution/error-handler.js';
-export { EternalAutonomyEngine, type EternalAutonomyOptions, type EternalEngineState, type IterationStage, } from '../execution/eternal-autonomy.js';
-export { buildGoalPreamble } from '../execution/goal-preamble.js';
-export { IntelligentCompactor, type IntelligentCompactorOptions, } from '../execution/intelligent-compactor.js';
-export { type ParallelEngineState, ParallelEternalEngine, type ParallelEternalOptions, type ParallelIterationStage, } from '../execution/parallel-eternal-engine.js';
-export { DefaultProviderRunner } from '../execution/provider-runner-impl.js';
-export { DefaultRetryPolicy } from '../execution/retry-policy.js';
-export { SelectiveCompactor, type SelectiveCompactorOptions, } from '../execution/selective-compactor.js';
-export { DefaultSkillLoader, type SkillLoaderOptions } from '../execution/skill-loader.js';
-export { DefaultPromptLoader, type PromptLoaderOptions, renderPrompt, } from '../execution/prompt-loader.js';
-export { type CompactorStrategy, createStrategyCompactor, type StrategyCompactorOptions, } from '../execution/strategy-compactor.js';
-export { ToolExecutor } from '../execution/tool-executor.js';
-export { type ContextManagerAction, type ContextManagerInput, type ContextManagerResult, type ContextManagerToolOptions, contextManagerTool, createContextManagerTool, } from '../infrastructure/context-manager.js';
-export { DefaultLogger, type DefaultLoggerOptions, type LogFormat, } from '../infrastructure/logger.js';
-export { allServers, awsServer, blockServer, braveSearchServer, context7Server, everArtServer, filesystemServer, githubServer, googleMapsServer, miniMaxVisionServer, playwrightServer, sentinelServer, slackServer, sshManagerServer, zaiVisionServer, } from '../infrastructure/mcp-servers.js';
-export { CODEX_MODELS, type CodexModelMeta, codexModelMeta } from '../models/codex-catalog.js';
-export { LLMSelector, type LLMSelectorOptions } from '../models/llm-selector.js';
-export { DefaultModeStore, loadProjectModes, loadUserModes, type ModeLoaderOptions, } from '../models/mode-store.js';
-export { classifyFamily, DefaultModelsRegistry, type DefaultModelsRegistryOptions, } from '../models/models-registry.js';
-export { describeCatalogModel, type ProviderModelDescriptor, resolveProviderModelList, } from '../models/provider-model-resolve.js';
-export { buildOtlpMetricsRequest, buildOtlpTracesRequest, DefaultHealthRegistry, InMemoryMetricsSink, type MetricsServerHandle, type MetricsServerOptions, NoopMetricsSink, NoopTracer, OTelTracer, type OtlpMetricsExporterHandle, type OtlpMetricsExporterOptions, type OtlpTraceExporterHandle, type OtlpTraceExporterOptions, PROMETHEUS_CONTENT_TYPE, renderPrometheus, startMetricsServer, startOtlpMetricsExporter, startOtlpTraceExporter, wireMetricsToEvents, } from '../observability/index.js';
-export { AutoApprovePermissionPolicy, DefaultPermissionPolicy, type PermissionPolicyOptions, } from '../security/permission-policy.js';
-export { DefaultSecretScrubber } from '../security/secret-scrubber.js';
-export { DefaultSecretVault, migratePlaintextSecrets, rewriteConfigEncrypted, type SecretVaultOptions, } from '../security/secret-vault.js';
-export { decryptConfigSecrets, encryptConfigSecrets } from '../security/config-secrets.js';
-export { type AttachmentStoreOptions, DefaultAttachmentStore, } from '../storage/attachment-store.js';
-export { type ConfigLoaderOptions, type ConfigSource, DefaultConfigLoader, } from '../storage/config-loader.js';
-export { type ConfigMigration, ConfigMigrationError, DEFAULT_CONFIG_MIGRATIONS, type MigrationContext, type MigrationResult, runConfigMigrations, } from '../storage/config-migration.js';
-export { DefaultConfigStore } from '../storage/config-store.js';
-export { DirectorStateCheckpoint, type DirectorStateSnapshot, type DirectorSubagentState, type DirectorTaskState, loadDirectorState, } from '../storage/director-state.js';
-export { addPlanItem, attachPlanCheckpoint, clearPlan, deriveTodosFromPlanItem, emptyPlan, formatPlan, loadPlan, type PlanFile, type PlanItem, removePlanItem, savePlan, setPlanItemStatus, } from '../storage/plan-store.js';
-export { formatPlanTemplates, getPlanTemplate, listPlanTemplates, type PlanTemplate, } from '../storage/plan-templates.js';
-export { type PersistedQueueItem, QueueStore, } from '../storage/queue-store.js';
-export { type AbandonedSession, RecoveryLock, type RecoveryLockOptions, } from '../storage/recovery-lock.js';
-export { SessionAnalyzer } from '../storage/session-analyzer.js';
-export { type AuditLevel, createSessionEventBridge, resolveAuditLevel, resolveSessionLoggingConfig, type SessionEventBridge, type SessionEventBridgeOptions, type SessionSamplingOptions, type ToolProgressSamplingOptions, } from '../storage/session-event-bridge.js';
-export { DefaultSessionReader } from '../storage/session-reader.js';
-export { DefaultSessionStore, type SessionStoreOptions, } from '../storage/session-store.js';
-export { attachTodosCheckpoint, loadTodosCheckpoint, saveTodosCheckpoint, type TodosCheckpointFile, } from '../storage/todos-checkpoint.js';
-//# sourceMappingURL=index.d.ts.map