@wrongstack/core 0.310.0 → 0.313.0

package/dist/coordination/index.js

@@ -20988,7 +20988,7 @@ async function readDirectorSubagentSession(args) {
 }
 
 // src/types/quota-regex.ts
-var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|usage[-_\s]*limit[-_\s]*(?:reached|exceeded)/i;
+var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|(?:usage|credit)[-_\s]*(?:quota|limit)(?![-_\w])|usage[-_\s]*(?:limit|quota)[-_\s]*(?:reached|exceeded|for)/i;
 var ROUTE_SCOPED_QUOTA_RE = /\b(?:for|on)\s+(?:(?:this|the)\s+)?(?:route|model)\b|\b(?:route|model)(?:[-_\s]+[\w.-]+)?[-_\s]*(?:quota|limit)\b|\b(?:quota|limit).{0,24}\b(?:for|on)\s+(?:(?:this|the)\s+)?(?:route|model)\b/i;
 
 // src/types/provider.ts
@@ -21001,7 +21001,8 @@ function classifyProviderError(status, body, message) {
   if (status === 0) return "network";
   if (status === 408) return "timeout";
   if (status === 599) return "stream_hang";
-  if (status === 402 || QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
+  if (QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
+  if (status === 402) return "quota_exhausted";
   if (status === 429 && body?.message && body.type !== "rate_limit_exceeded" && RATE_LIMIT_EXCEEDED_RE.test(body.message)) {
     return "quota_exhausted";
   }

package/dist/coordination/mailbox-project-server.js

@@ -67,8 +67,8 @@ var EventBus = class {
    *
    * Returns an unsubscribe function.
    */
-  onAny(fn) {
-    return this.onPattern("*", fn);
+  onAny(fn, owner) {
+    return this.onPattern("*", fn, owner);
   }
   /**
    * Subscribe to all events whose name matches a glob-style prefix.
@@ -81,16 +81,16 @@ var EventBus = class {
    *
    * Returns an unsubscribe function.
    */
-  onPattern(pattern, fn) {
+  onPattern(pattern, fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onPattern("${pattern}"). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onPattern("${pattern}")` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
     const match = makePatternMatcher(pattern);
-    const entry = { match, fn };
+    const entry = { match, fn, owner };
     this.wildcards.push(entry);
     this.wildcardSnapshotCache = null;
     return () => {
@@ -108,15 +108,15 @@ var EventBus = class {
    *
    * Returns an unsubscribe function.
    */
-  onRegex(regex, fn) {
+  onRegex(regex, fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onRegex(${regex}). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onRegex(${regex})` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
-    const entry = { match: (e) => regex.test(e), fn };
+    const entry = { match: (e) => regex.test(e), fn, owner };
     this.wildcards.push(entry);
     this.wildcardSnapshotCache = null;
     return () => {
@@ -1416,6 +1416,38 @@ function isMailboxReceiptRecordV2(value) {
   return true;
 }
 
+// src/coordination/mailbox-session-sync.ts
+function isAffectedBySessionAffinity(message) {
+  return message.sessionAffinity !== void 0;
+}
+async function acceptMailboxMessageForSession(message, currentSessionId, ctx) {
+  if (!isAffectedBySessionAffinity(message)) return true;
+  const affinity = message.sessionAffinity;
+  if (affinity === null || typeof affinity !== "object" || Array.isArray(affinity)) {
+    return false;
+  }
+  if (affinity.sessionId !== void 0 && typeof affinity.sessionId !== "string" || affinity.reportId !== void 0 && typeof affinity.reportId !== "string") {
+    return false;
+  }
+  if (!currentSessionId) {
+    return ctx?.allowUnscoped === true;
+  }
+  if (typeof affinity.sessionId === "string" && affinity.sessionId.length > 0) {
+    if (affinity.sessionId !== currentSessionId) return false;
+    return true;
+  }
+  if (affinity.reportId && ctx?.resolveChimeraReportSessionId) {
+    try {
+      const resolved = await ctx.resolveChimeraReportSessionId(affinity.reportId);
+      if (resolved === currentSessionId) return true;
+      if (resolved !== void 0) return false;
+    } catch {
+    }
+  }
+  if (ctx?.allowUnscoped === true) return true;
+  return false;
+}
+
 // src/coordination/mailbox-message-codec.ts
 var MESSAGE_TYPES = /* @__PURE__ */ new Set([
   "note",
@@ -2772,7 +2804,7 @@ var SqliteMailbox = class {
     }
     const rows = this.stmt(sql).all(...params);
     const idFilter = query.ids === void 0 ? void 0 : new Set(query.ids);
-    const messages = this.materializeMessageRows(rows).filter((message) => {
+    const filtered = this.materializeMessageRows(rows).filter((message) => {
       if (idFilter !== void 0 && !idFilter.has(message.id)) return false;
       if (query.to !== void 0 && message.to !== query.to && message.to !== "*") return false;
       if (query.from !== void 0 && message.from !== query.from) return false;
@@ -2791,6 +2823,20 @@ var SqliteMailbox = class {
       if (query.replyTo !== void 0 && message.replyTo !== query.replyTo) return false;
       return true;
     });
+    let messages = filtered;
+    if (query.currentSessionId !== void 0 || query.sessionAffinityCtx !== void 0) {
+      const kept = [];
+      for (const message of filtered) {
+        if (await acceptMailboxMessageForSession(
+          message,
+          query.currentSessionId,
+          query.sessionAffinityCtx
+        )) {
+          kept.push(message);
+        }
+      }
+      messages = kept;
+    }
     messages.sort((left, right) => right.timestamp.localeCompare(left.timestamp));
     return messages.slice(0, query.limit ?? 50).map((message) => {
       const copy = {
@@ -2903,7 +2949,7 @@ var SqliteMailbox = class {
    *   identity is `leader`. This call path carries no role, matching the
    *   `isMailboxMessageVisibleTo(message, forAgentId)` it replaces.
    */
-  async unreadCount(forAgentId, sessionId) {
+  async unreadCount(forAgentId, sessionId, ctx) {
     const sessionAddress = sessionId === void 0 ? void 0 : sessionRecipient(sessionId);
     const where = [];
     const params = [];
@@ -2944,10 +2990,20 @@ var SqliteMailbox = class {
         WHERE any_receipt.message_id = messages.id
       )
     )`);
-    const row = this.stmt(
-      `SELECT COUNT(*) AS total FROM messages WHERE ${where.join(" AND ")}`
-    ).get(...params);
-    return Number(row?.total ?? 0);
+    if (sessionId === void 0 && ctx === void 0) {
+      const row = this.stmt(
+        `SELECT COUNT(*) AS total FROM messages WHERE ${where.join(" AND ")}`
+      ).get(...params);
+      return Number(row?.total ?? 0);
+    }
+    const rows = this.stmt(
+      `SELECT id, data, legacy_global_completion FROM messages WHERE ${where.join(" AND ")}`
+    ).all(...params);
+    let total = 0;
+    for (const message of this.materializeMessageRows(rows)) {
+      if (await acceptMailboxMessageForSession(message, sessionId, ctx)) total += 1;
+    }
+    return total;
   }
   async softDelete(mailId, by) {
     const message = this.findMessage(mailId);

package/dist/coordination/mailbox-types.d.ts

@@ -3,6 +3,7 @@ import type { MailboxAudience, MailboxMessage, MailboxSessionAffinity, MailboxTa
 export { MAILBOX_TYPE_PROPERTIES, type MailboxMessageType, type MailboxTypeCategory, } from './mailbox-type-properties.js';
 export { expandMailboxCapabilities, hasMailboxCapability, MAILBOX_CAPABILITY_IMPLICATIONS, type MailboxActorContext, type MailboxAuthMode, type MailboxCapability, type MailboxPrincipalKind, } from './mailbox-auth-types.js';
 export { isActionRequiredForActor, isMailboxLeader, isMailboxMessageVisibleTo, isMailboxReceiptRecordV2, isMailboxSenderInFamily, mailboxIdentityBase, normalizeRecipient, SESSION_RECIPIENT_PREFIX, sessionRecipient, validateSendType, } from './mailbox-predicates.js';
+import type { MailboxSessionAffinityContext } from './mailbox-session-sync.js';
 export { acceptMailboxMessageForSession, acceptMailboxMessageForSessionSync, type MailboxSessionAffinityContext, } from './mailbox-session-sync.js';
 export { type ActorMailboxMessage, type MailboxAudience, type MailboxLegacyReportSessionAffinity, type MailboxMessage, type MailboxReceiptRecordV2, type MailboxScopedSessionAffinity, type MailboxSessionAffinity, type MailboxTaskContext, type ReadReceipts, } from './mailbox-message-types.js';
 export interface RegisteredAgent {
@@ -48,7 +49,18 @@ export interface MailboxQuery {
     minPriority?: 'low' | 'normal' | 'high' | undefined;
     limit?: number | undefined;
     since?: string | undefined;
+    /** Filters by the message's SENDER session id (origin), not the reader's session. */
     sessionId?: string | undefined;
+    /**
+     * Reader's current session id. When present, messages carrying a
+     * session-affinity token for a DIFFERENT session are excluded, matching the
+     * inbox checker's receive-side filter (mailbox-attach applySessionAffinityFilter).
+     * Kept distinct from `sessionId` (sender origin) so a reader can filter by
+     * both simultaneously.
+     */
+    currentSessionId?: string | undefined;
+    /** Resolver + unscoped policy for session-affinity tokens (see acceptMailboxMessageForSession). */
+    sessionAffinityCtx?: MailboxSessionAffinityContext | undefined;
     includeDeleted?: boolean | undefined;
     replyTo?: string | undefined;
 }
@@ -172,7 +184,7 @@ export interface Mailbox {
     registerAgent(input: AgentRegistrationInput): Promise<void>;
     deregisterAgent(agentId: string): Promise<void>;
     heartbeat(input: AgentHeartbeatInput): Promise<void>;
-    unreadCount(forAgentId: string, sessionId?: string): Promise<number>;
+    unreadCount(forAgentId: string, sessionId?: string, ctx?: MailboxSessionAffinityContext): Promise<number>;
     close(): Promise<void>;
     clearAll(): Promise<void>;
     purgeStale(opts?: PurgeOptions): Promise<PurgeResult>;

package/dist/coordination/sqlite-mailbox.d.ts

@@ -2,6 +2,7 @@ import type { EventBus } from '../kernel/events.js';
 import type { CredentialValidation, IssueCredentialOptions, MailboxCredential } from './mailbox-credential-store.js';
 import type { MailboxEventEmitter } from './mailbox-events.js';
 import type { AgentHeartbeatInput, AgentRegistrationInput, AutoCompactOptions, AutoCompactResult, ClientHeartbeatInput, ClientRegistrationInput, ClientStatus, Mailbox, MailboxAckBatchInput, MailboxAckInput, MailboxAgentStatus, MailboxMessage, MailboxQuery, MailboxSendInput, PurgeOptions, PurgeResult } from './mailbox-types.js';
+import { type MailboxSessionAffinityContext } from './mailbox-types.js';
 export declare const SQLITE_MAILBOX_FILE = "_mailbox.sqlite";
 export declare class SqliteMailbox implements Mailbox {
     readonly projectDir: string;
@@ -59,7 +60,7 @@ export declare class SqliteMailbox implements Mailbox {
      *   identity is `leader`. This call path carries no role, matching the
      *   `isMailboxMessageVisibleTo(message, forAgentId)` it replaces.
      */
-    unreadCount(forAgentId: string, sessionId?: string): Promise<number>;
+    unreadCount(forAgentId: string, sessionId?: string, ctx?: MailboxSessionAffinityContext): Promise<number>;
     softDelete(mailId: string, by: string): Promise<MailboxMessage | null>;
     restore(mailId: string): Promise<MailboxMessage | null>;
     private persistAgent;

package/dist/core/index.js

@@ -3947,7 +3947,7 @@ function truncate(s, max) {
 }
 
 // src/types/quota-regex.ts
-var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|usage[-_\s]*limit[-_\s]*(?:reached|exceeded)/i;
+var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|(?:usage|credit)[-_\s]*(?:quota|limit)(?![-_\w])|usage[-_\s]*(?:limit|quota)[-_\s]*(?:reached|exceeded|for)/i;
 
 // src/types/provider.ts
 function effectiveInputTokens(usage) {
@@ -3962,7 +3962,8 @@ function classifyProviderError(status, body, message) {
   if (status === 0) return "network";
   if (status === 408) return "timeout";
   if (status === 599) return "stream_hang";
-  if (status === 402 || QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
+  if (QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
+  if (status === 402) return "quota_exhausted";
   if (status === 429 && body?.message && body.type !== "rate_limit_exceeded" && RATE_LIMIT_EXCEEDED_RE.test(body.message)) {
     return "quota_exhausted";
   }

package/dist/execution/index.js

@@ -4854,7 +4854,7 @@ function truncate(s, max) {
 }
 
 // src/types/quota-regex.ts
-var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|usage[-_\s]*limit[-_\s]*(?:reached|exceeded)/i;
+var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|(?:usage|credit)[-_\s]*(?:quota|limit)(?![-_\w])|usage[-_\s]*(?:limit|quota)[-_\s]*(?:reached|exceeded|for)/i;
 
 // src/types/provider.ts
 var CONTEXT_OVERFLOW_RE = /context.length|context.window|maximum context|max.*tokens?.*exceeded|(?:prompt|request|input|messages?).{0,12}too (?:large|long)|exceeds the context|\btokens\b.*exceed|too many tokens|reduce the length|resulted in \d+ tokens|context_length_exceeded/i;
@@ -4866,7 +4866,8 @@ function classifyProviderError(status, body, message) {
   if (status === 0) return "network";
   if (status === 408) return "timeout";
   if (status === 599) return "stream_hang";
-  if (status === 402 || QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
+  if (QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
+  if (status === 402) return "quota_exhausted";
   if (status === 429 && body?.message && body.type !== "rate_limit_exceeded" && RATE_LIMIT_EXCEEDED_RE.test(body.message)) {
     return "quota_exhausted";
   }

package/dist/index.js

@@ -3484,6 +3484,7 @@ function resolveTokenSavingTier(val, maxContext) {
 }
 var DEFAULT_TUI_THINKING_WORD = "thinking";
 var MAX_TUI_THINKING_WORD_LENGTH = 16;
+var MAX_WRONGPROXY_URL_LENGTH = 2048;
 function normalizeTuiThinkingWord(value) {
   if (typeof value !== "string") return DEFAULT_TUI_THINKING_WORD;
   const word = value.trim();
@@ -38420,7 +38421,7 @@ import { randomUUID as randomUUID18 } from "node:crypto";
 init_errors();
 
 // src/types/quota-regex.ts
-var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|usage[-_\s]*limit[-_\s]*(?:reached|exceeded)/i;
+var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|(?:usage|credit)[-_\s]*(?:quota|limit)(?![-_\w])|usage[-_\s]*(?:limit|quota)[-_\s]*(?:reached|exceeded|for)/i;
 var ROUTE_SCOPED_QUOTA_RE = /\b(?:for|on)\s+(?:(?:this|the)\s+)?(?:route|model)\b|\b(?:route|model)(?:[-_\s]+[\w.-]+)?[-_\s]*(?:quota|limit)\b|\b(?:quota|limit).{0,24}\b(?:for|on)\s+(?:(?:this|the)\s+)?(?:route|model)\b/i;
 
 // src/types/provider.ts
@@ -38457,7 +38458,8 @@ function classifyProviderError(status, body, message) {
   if (status === 0) return "network";
   if (status === 408) return "timeout";
   if (status === 599) return "stream_hang";
-  if (status === 402 || QUOTA_EXHAUSTED_RE.test(text2)) return "quota_exhausted";
+  if (QUOTA_EXHAUSTED_RE.test(text2)) return "quota_exhausted";
+  if (status === 402) return "quota_exhausted";
   if (status === 429 && body?.message && body.type !== "rate_limit_exceeded" && RATE_LIMIT_EXCEEDED_RE.test(body.message)) {
     return "quota_exhausted";
   }
@@ -73360,8 +73362,8 @@ var EventBus = class {
    *
    * Returns an unsubscribe function.
    */
-  onAny(fn) {
-    return this.onPattern("*", fn);
+  onAny(fn, owner) {
+    return this.onPattern("*", fn, owner);
   }
   /**
    * Subscribe to all events whose name matches a glob-style prefix.
@@ -73374,16 +73376,16 @@ var EventBus = class {
    *
    * Returns an unsubscribe function.
    */
-  onPattern(pattern, fn) {
+  onPattern(pattern, fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onPattern("${pattern}"). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onPattern("${pattern}")` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
     const match = makePatternMatcher(pattern);
-    const entry = { match, fn };
+    const entry = { match, fn, owner };
     this.wildcards.push(entry);
     this.wildcardSnapshotCache = null;
     return () => {
@@ -73401,15 +73403,15 @@ var EventBus = class {
    *
    * Returns an unsubscribe function.
    */
-  onRegex(regex, fn) {
+  onRegex(regex, fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onRegex(${regex}). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onRegex(${regex})` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
-    const entry = { match: (e) => regex.test(e), fn };
+    const entry = { match: (e) => regex.test(e), fn, owner };
     this.wildcards.push(entry);
     this.wildcardSnapshotCache = null;
     return () => {
@@ -73587,16 +73589,16 @@ var ScopedEventBus = class extends EventBus {
    * Subscribe to all events. Alias for `onPattern('*')` — the listener is
    * tracked so that `teardown()` will remove it automatically.
    */
-  onAny(fn) {
+  onAny(fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onAny(). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onAny()` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
     const key = this.nextKey++;
-    const unsub = EventBus.prototype.onPattern.call(this, "*", fn);
+    const unsub = EventBus.prototype.onPattern.call(this, "*", fn, owner);
     this.registrations.set(key, unsub);
     return () => {
       this.registrations.delete(key);
@@ -73607,16 +73609,16 @@ var ScopedEventBus = class extends EventBus {
    * Identical to `EventBus.onPattern` but the listener is tracked so that
    * `teardown()` will remove it automatically.
    */
-  onPattern(pattern, fn) {
+  onPattern(pattern, fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onPattern("${pattern}"). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onPattern("${pattern}")` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
     const key = this.nextKey++;
-    const unsub = super.onPattern(pattern, fn);
+    const unsub = super.onPattern(pattern, fn, owner);
     this.registrations.set(key, unsub);
     return () => {
       this.registrations.delete(key);
@@ -73627,16 +73629,16 @@ var ScopedEventBus = class extends EventBus {
    * Identical to `EventBus.onRegex` but the listener is tracked so that
    * `teardown()` will remove it automatically.
    */
-  onRegex(regex, fn) {
+  onRegex(regex, fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onRegex(${regex}). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onRegex(${regex})` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
     const key = this.nextKey++;
-    const unsub = super.onRegex(regex, fn);
+    const unsub = super.onRegex(regex, fn, owner);
     this.registrations.set(key, unsub);
     return () => {
       this.registrations.delete(key);
@@ -92933,6 +92935,7 @@ export {
   MAX_SUBAGENT_STRUCTURED_REPORT_CHARS,
   MAX_SUBJECT_LEN,
   MAX_TUI_THINKING_WORD_LENGTH,
+  MAX_WRONGPROXY_URL_LENGTH,
   MEDIUM_BUDGET,
   MEMORY_EVIDENCE_TAG,
   MEMORY_TYPE_LABELS,

package/dist/kernel/events/wrongtrace-events.d.ts

@@ -0,0 +1,26 @@
+/**
+ * WrongTrace gate-decision events.
+ *
+ * Emitted by the WrongTrace lock-gate hooks (see
+ * `@wrongstack/wrongtrace` hooks.ts) through each host's EventBus:
+ * every mutating tool call's gate decision is observable — denied edits,
+ * fragile-file nudges, lock acquisition / race-loss / release.
+ *
+ * Kept structurally matching the adapter's `WrongTraceGateDecisionEvent`
+ * union so core never imports the adapter (direction: wrongtrace is the
+ * leaf; core must not depend on it).
+ */
+export interface WrongTraceEventMap {
+    'wrongtrace.gate.decision': {
+        kind: 'deny' | 'allow-fragile' | 'lock-acquired' | 'lock-conflict-race' | 'lock-released';
+        /** Target file path the gate decided on. */
+        path: string;
+        /** `deny` — human-readable owner/expiry reason shown to the model. */
+        reason?: string | undefined;
+        /** `allow-fragile` — why the file is considered fragile. */
+        reasons?: readonly string[] | undefined;
+        /** `lock-acquired` — lock owner identity (`wrongstack:<sessionId>`). */
+        owner?: string | undefined;
+    };
+}
+//# sourceMappingURL=wrongtrace-events.d.ts.map

package/dist/kernel/events.d.ts

@@ -14,6 +14,7 @@ import type { SddEventMap } from './events/sdd-events.js';
 import type { SessionEventMap } from './events/session-events.js';
 import type { ToolEventMap } from './events/tool-events.js';
 import type { WorktreeEventMap } from './events/worktree-events.js';
+import type { WrongTraceEventMap } from './events/wrongtrace-events.js';
 /** Distress signals the BrainMonitor watches. See `coordination/brain-monitor.ts`. */
 export type BrainInterventionKind = 'tool_failure_streak' | 'error_storm' | 'agent_stall' | 'file_churn';
 /**
@@ -48,7 +49,7 @@ export interface TrackedAgentSnapshot {
     latestPromptAt?: number | undefined;
     lastActivityAt: string;
 }
-export interface EventMap extends AgentEventMap, BrainEventMap, SessionEventMap, ProviderEventMap, ProcessEventMap, NetworkEventMap, FileEventMap, ToolEventMap, MemoryEventMap, SddEventMap, WorktreeEventMap, FleetEventMap {
+export interface EventMap extends AgentEventMap, BrainEventMap, SessionEventMap, ProviderEventMap, ProcessEventMap, NetworkEventMap, FileEventMap, ToolEventMap, MemoryEventMap, SddEventMap, WorktreeEventMap, FleetEventMap, WrongTraceEventMap {
 }
 export type EventName = keyof EventMap;
 export type Listener<E extends EventName> = (payload: EventMap[E]) => void;
@@ -60,6 +61,8 @@ export declare class EventBus {
     protected readonly wildcards: Array<{
         match: (event: string) => boolean;
         fn: (event: string, payload: unknown) => void;
+        /** Optional registration-site label included in cap-rejection warnings. */
+        owner?: string | undefined;
     }>;
     protected logger?: EventLogger | undefined;
     /**
@@ -82,7 +85,9 @@ export declare class EventBus {
      *
      * Returns an unsubscribe function.
      */
-    onAny(fn: (event: string, payload: unknown) => void): () => void;
+    onAny(fn: (event: string, payload: unknown) => void, 
+    /** Optional registration-site label included in cap-rejection warnings. */
+    owner?: string): () => void;
     /**
      * Subscribe to all events whose name matches a glob-style prefix.
      * `'tool.*'` matches `tool.started`, `tool.executed`, `tool.progress`, etc.
@@ -94,7 +99,9 @@ export declare class EventBus {
      *
      * Returns an unsubscribe function.
      */
-    onPattern(pattern: string, fn: (event: string, payload: unknown) => void): () => void;
+    onPattern(pattern: string, fn: (event: string, payload: unknown) => void, 
+    /** Optional registration-site label included in cap-rejection warnings. */
+    owner?: string): () => void;
     /**
      * Subscribe to all events whose name matches a RegExp.
      * More flexible than `onPattern` — use when you need regex features
@@ -102,7 +109,9 @@ export declare class EventBus {
      *
      * Returns an unsubscribe function.
      */
-    onRegex(regex: RegExp, fn: (event: string, payload: unknown) => void): () => void;
+    onRegex(regex: RegExp, fn: (event: string, payload: unknown) => void, 
+    /** Optional registration-site label included in cap-rejection warnings. */
+    owner?: string): () => void;
     emit<E extends EventName>(event: E, payload: EventMap[E]): void;
     /**
      * Dispatch array for one event name, or `undefined` when nothing is
@@ -208,17 +217,17 @@ export declare class ScopedEventBus extends EventBus {
      * Subscribe to all events. Alias for `onPattern('*')` — the listener is
      * tracked so that `teardown()` will remove it automatically.
      */
-    onAny(fn: (event: string, payload: unknown) => void): () => void;
+    onAny(fn: (event: string, payload: unknown) => void, owner?: string): () => void;
     /**
      * Identical to `EventBus.onPattern` but the listener is tracked so that
      * `teardown()` will remove it automatically.
      */
-    onPattern(pattern: string, fn: (event: string, payload: unknown) => void): () => void;
+    onPattern(pattern: string, fn: (event: string, payload: unknown) => void, owner?: string): () => void;
     /**
      * Identical to `EventBus.onRegex` but the listener is tracked so that
      * `teardown()` will remove it automatically.
      */
-    onRegex(regex: RegExp, fn: (event: string, payload: unknown) => void): () => void;
+    onRegex(regex: RegExp, fn: (event: string, payload: unknown) => void, owner?: string): () => void;
     /**
      * Remove every listener that was registered through this scoped bus.
      * Idempotent — calling it multiple times is safe.

package/dist/kernel/index.js

@@ -499,8 +499,8 @@ var EventBus = class {
    *
    * Returns an unsubscribe function.
    */
-  onAny(fn) {
-    return this.onPattern("*", fn);
+  onAny(fn, owner) {
+    return this.onPattern("*", fn, owner);
   }
   /**
    * Subscribe to all events whose name matches a glob-style prefix.
@@ -513,16 +513,16 @@ var EventBus = class {
    *
    * Returns an unsubscribe function.
    */
-  onPattern(pattern, fn) {
+  onPattern(pattern, fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onPattern("${pattern}"). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onPattern("${pattern}")` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
     const match = makePatternMatcher(pattern);
-    const entry = { match, fn };
+    const entry = { match, fn, owner };
     this.wildcards.push(entry);
     this.wildcardSnapshotCache = null;
     return () => {
@@ -540,15 +540,15 @@ var EventBus = class {
    *
    * Returns an unsubscribe function.
    */
-  onRegex(regex, fn) {
+  onRegex(regex, fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onRegex(${regex}). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onRegex(${regex})` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
-    const entry = { match: (e) => regex.test(e), fn };
+    const entry = { match: (e) => regex.test(e), fn, owner };
     this.wildcards.push(entry);
     this.wildcardSnapshotCache = null;
     return () => {
@@ -726,16 +726,16 @@ var ScopedEventBus = class extends EventBus {
    * Subscribe to all events. Alias for `onPattern('*')` — the listener is
    * tracked so that `teardown()` will remove it automatically.
    */
-  onAny(fn) {
+  onAny(fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onAny(). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onAny()` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
     const key = this.nextKey++;
-    const unsub = EventBus.prototype.onPattern.call(this, "*", fn);
+    const unsub = EventBus.prototype.onPattern.call(this, "*", fn, owner);
     this.registrations.set(key, unsub);
     return () => {
       this.registrations.delete(key);
@@ -746,16 +746,16 @@ var ScopedEventBus = class extends EventBus {
    * Identical to `EventBus.onPattern` but the listener is tracked so that
    * `teardown()` will remove it automatically.
    */
-  onPattern(pattern, fn) {
+  onPattern(pattern, fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onPattern("${pattern}"). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onPattern("${pattern}")` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
     const key = this.nextKey++;
-    const unsub = super.onPattern(pattern, fn);
+    const unsub = super.onPattern(pattern, fn, owner);
     this.registrations.set(key, unsub);
     return () => {
       this.registrations.delete(key);
@@ -766,16 +766,16 @@ var ScopedEventBus = class extends EventBus {
    * Identical to `EventBus.onRegex` but the listener is tracked so that
    * `teardown()` will remove it automatically.
    */
-  onRegex(regex, fn) {
+  onRegex(regex, fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onRegex(${regex}). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onRegex(${regex})` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
     const key = this.nextKey++;
-    const unsub = super.onRegex(regex, fn);
+    const unsub = super.onRegex(regex, fn, owner);
     this.registrations.set(key, unsub);
     return () => {
       this.registrations.delete(key);

package/dist/tools/index.js

@@ -1551,7 +1551,7 @@ var FsError = class extends WrongStackError {
 };
 
 // src/types/quota-regex.ts
-var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|usage[-_\s]*limit[-_\s]*(?:reached|exceeded)/i;
+var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|(?:usage|credit)[-_\s]*(?:quota|limit)(?![-_\w])|usage[-_\s]*(?:limit|quota)[-_\s]*(?:reached|exceeded|for)/i;
 
 // src/types/provider.ts
 var CONTEXT_OVERFLOW_RE = /context.length|context.window|maximum context|max.*tokens?.*exceeded|(?:prompt|request|input|messages?).{0,12}too (?:large|long)|exceeds the context|\btokens\b.*exceed|too many tokens|reduce the length|resulted in \d+ tokens|context_length_exceeded/i;
@@ -1563,7 +1563,8 @@ function classifyProviderError(status, body, message) {
   if (status === 0) return "network";
   if (status === 408) return "timeout";
   if (status === 599) return "stream_hang";
-  if (status === 402 || QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
+  if (QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
+  if (status === 402) return "quota_exhausted";
   if (status === 429 && body?.message && body.type !== "rate_limit_exceeded" && RATE_LIMIT_EXCEEDED_RE.test(body.message)) {
     return "quota_exhausted";
   }

package/dist/types/config/runtime.d.ts

@@ -162,6 +162,13 @@ export declare function normalizeTokenSavingTier(val?: TokenSavingTier | boolean
 export declare function resolveTokenSavingTier(val: TokenSavingTier | boolean | undefined, maxContext: number | undefined): ConcreteTokenSavingTier;
 export declare const DEFAULT_TUI_THINKING_WORD = "thinking";
 export declare const MAX_TUI_THINKING_WORD_LENGTH = 16;
+/**
+ * Hard cap on the WrongProxy / WrongTrace URL draft. URLs don't have a
+ * strict length limit, but capping to a sane 2 KiB prevents a runaway
+ * paste from bloating the `settingsPicker` slice. The runtime probe
+ * accepts any well-formed URL up to whatever the OS / fetch allow.
+ */
+export declare const MAX_WRONGPROXY_URL_LENGTH = 2048;
 /**
  * Normalize the configurable statusline word shown while the TUI is working.
  * The value must be a single short word; invalid values fall back to the default.

package/dist/types/config/tools.d.ts

@@ -109,6 +109,36 @@ export interface ToolsConfig {
      * in the next session (same as `features.tokenSavingMode`).
      */
     nextsteps?: NextStepsToolConfig | undefined;
+    /**
+     * WrongProxy / WrongTrace: automatic base-URL rerouting through a
+     * local proxy daemon (default `http://localhost:3444`). When
+     * `enabled` is true AND the daemon at `url` is reachable, every
+     * provider's base URL is rewritten through
+     * `${url}/proxy/<host><path>`. openai-codex is excluded by spec.
+     *
+     * Mirrors the WebUI `LocalPrefs` shape (single object with two
+     * fields, not two top-level keys). Persisted to the encrypted
+     * profile config and mirrored into `ctx.meta` by the TUI settings
+     * adapter so the runtime probe can read it mid-session.
+     */
+    wrongProxy?: WrongProxyToolConfig | undefined;
+}
+/** WrongProxy / WrongTrace tool-config (`tools.wrongProxy`). */
+export interface WrongProxyToolConfig {
+    /**
+     * Master switch. When true AND the daemon at `url` is reachable,
+     * every provider's base URL is rewritten through
+     * `${url}/proxy/<host><path>`. openai-codex is excluded by spec.
+     * Default: false.
+     */
+    enabled?: boolean | undefined;
+    /**
+     * Where the local proxy daemon listens. Default
+     * `http://localhost:3444`. The CLI's periodic probe targets
+     * `<url>/api/health`; a 2xx response flips the runtime's
+     * `active` flag.
+     */
+    url?: string | undefined;
 }
 /** Opt-in switch for the agent-callable `nextsteps` tool (`tools.nextsteps`). */
 export interface NextStepsToolConfig {

package/dist/types/index.d.ts

@@ -4,7 +4,7 @@ export type { ContentBlock, ImageBlock, TextBlock, ThinkingBlock, ToolResultBloc
 export { isImageBlock, isTextBlock, isToolResultBlock, isToolUseBlock } from './blocks.js';
 export type { Compactor, CompactReport } from './compactor.js';
 export type { AdaptiveConcurrencyConfig, AgentLearningConfig, AutonomyConfig, BrainConfig, BrainCouncilConfig, BrainCouncilVoterConfig, BrainModelEntry, CircuitBreakerRuntimeConfig, ConcreteTokenSavingTier, Config, ConfigLoader, ConfigStore, ContextConfig, CouncilPersonaDefinition, CouncilToolConfig, CouncilToolProfileDefinition, CustomModelDefinition, ExecDangerConfig, ExecToolConfig, FeaturesConfig, FleetChatVerbosity, FleetConfig, FleetSupervisorConfig, GitBehaviorConfig, HqClientConfig, IndexingConfig, InputHistoryConfig, LaunchConfig, LaunchMenuChoice, LogConfig, LoopDetectionConfig, MCPHealthConfig, MCPHealthThresholds, MCPServerConfig, ModelMatrixEntry, ModelRuntimeCacheConfig, ModelRuntimeConfig, ModelRuntimeParametersConfig, ModelRuntimeReasoningConfig, NextStepsToolConfig, PluginConfig, PluginManagerConfig, ProviderApiKey, ProviderConfig, SageConfig, SessionLoggingConfig, SkillsConfig, SyncCategory, SyncConfig, ThemePresetId, TokenSavingTier, ToolDescriptionMode, ToolDescriptionModeConfig, ToolResultRenderMode, ToolResultRenderModeConfig, ToolsConfig, } from './config.js';
-export { DEFAULT_TUI_THINKING_WORD, FLEET_CHAT_VERBOSITY_VALUES, MAX_TUI_THINKING_WORD_LENGTH, normalizeTokenSavingTier, normalizeTuiThinkingWord, resolveFleetChatVerbosity, resolveTokenSavingTier, THEME_PRESET_IDS, } from './config.js';
+export { DEFAULT_TUI_THINKING_WORD, FLEET_CHAT_VERBOSITY_VALUES, MAX_TUI_THINKING_WORD_LENGTH, MAX_WRONGPROXY_URL_LENGTH, normalizeTokenSavingTier, normalizeTuiThinkingWord, resolveFleetChatVerbosity, resolveTokenSavingTier, THEME_PRESET_IDS, } from './config.js';
 export type { CompletedWorkEvidence, CompletedWorkSource, ContextEvidenceState, ContextFileEvidence, ContextIntentEvidence, ContextRepeatedReadEvidence, ToolEvidenceStatus, ToolOutputMetadata, } from './context-evidence.js';
 export type { ContextSnapshot, ContextWindowAggressiveOn, ContextWindowConfigLike, ContextWindowMode, ContextWindowModeId, ContextWindowModeSelectionId, ContextWindowPolicy, ContextWindowThresholds, DeprecatedContextWindowModeId, } from './context-window.js';
 export { CONTEXT_WINDOW_MODE_PINNED_META_KEY, CONTEXT_WINDOW_MODES, DEFAULT_CONTEXT_WINDOW_MODE_ID, DEPRECATED_CONTEXT_WINDOW_MODE_ALIASES, formatContextWindowModeList, getContextWindowMode, isContextWindowModeId, isContextWindowModeSelectionId, isDeprecatedContextWindowModeId, LARGE_WINDOW_DEEP_MODE_THRESHOLD, listContextWindowModes, normalizeContextWindowModeId, resolveContextWindowPolicy, } from './context-window.js';

package/dist/types/index.js

@@ -49,6 +49,7 @@ function resolveTokenSavingTier(val, maxContext) {
 }
 var DEFAULT_TUI_THINKING_WORD = "thinking";
 var MAX_TUI_THINKING_WORD_LENGTH = 16;
+var MAX_WRONGPROXY_URL_LENGTH = 2048;
 function normalizeTuiThinkingWord(value) {
   if (typeof value !== "string") return DEFAULT_TUI_THINKING_WORD;
   const word = value.trim();
@@ -911,7 +912,7 @@ function truncate(s, max) {
 }
 
 // src/types/quota-regex.ts
-var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|usage[-_\s]*limit[-_\s]*(?:reached|exceeded)/i;
+var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|(?:usage|credit)[-_\s]*(?:quota|limit)(?![-_\w])|usage[-_\s]*(?:limit|quota)[-_\s]*(?:reached|exceeded|for)/i;
 
 // src/types/provider.ts
 var REASONING_EFFORT_LEVELS = [
@@ -947,7 +948,8 @@ function classifyProviderError(status, body, message) {
   if (status === 0) return "network";
   if (status === 408) return "timeout";
   if (status === 599) return "stream_hang";
-  if (status === 402 || QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
+  if (QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
+  if (status === 402) return "quota_exhausted";
   if (status === 429 && body?.message && body.type !== "rate_limit_exceeded" && RATE_LIMIT_EXCEEDED_RE.test(body.message)) {
     return "quota_exhausted";
   }
@@ -1367,6 +1369,7 @@ export {
   LARGE_WINDOW_DEEP_MODE_THRESHOLD,
   MALFORMED_ARG_MARKERS,
   MAX_TUI_THINKING_WORD_LENGTH,
+  MAX_WRONGPROXY_URL_LENGTH,
   MEMORY_TYPE_LABELS,
   PROMPT_CATEGORY_LABELS,
   ParseError,

package/dist/wiring/proxy-rewrite.d.ts

@@ -0,0 +1,146 @@
+/**
+ * Automatic proxy/trace rerouting for provider base URLs.
+ *
+ * Lives in `@wrongstack/core` so both `cli` and `runtime` packages can
+ * import the same pure-logic rewriter without reaching across workspaces.
+ * The CLI's `proxy-probe` (side-effectful, owns `setInterval`) lives in
+ * `@wrongstack/cli` and pushes state into this module via `applyProxyConfig`.
+ *
+ * Example:
+ *   original  = "https://api.openai.com/v1"
+ *   proxyUrl  = "http://localhost:3444"
+ *   output    = "http://localhost:3444/proxy/api.openai.com/v1"
+ *
+ * The host appears *without* a scheme in the path; the proxy terminates
+ * TLS (or speaks plain HTTP for localhost) and forwards the original
+ * scheme in the `X-Forwarded-Proto` header.
+ */
+/**
+ * Providers whose base URLs MUST NOT be rewritten. openai-codex talks
+ * directly to the ChatGPT backend over an OAuth-issued token, and the
+ * `client_id` / audience in the token constrains the request origin —
+ * routing it through a generic proxy breaks the auth check.
+ */
+export declare const PROXY_EXCLUDED_PROVIDERS: ReadonlySet<string>;
+/**
+ * Decide whether a provider id is eligible for proxy rerouting.
+ *
+ * - `openai-codex` is excluded by spec.
+ * - Everything else (openai, anthropic, google, openai-compatible,
+ *   custom saved-config aliases) flows through.
+ */
+export declare function isProxyEligible(providerId: string): boolean;
+/**
+ * Rewrite a provider base URL through the proxy.
+ *
+ * Returns the original input (passthrough) when the input is missing or
+ * malformed — we never want the proxy rewriter to be the reason a request
+ * fails when the proxy itself is misconfigured. The guards below are
+ * deliberately permissive: a misconfigured proxy must NOT silently turn
+ * into a hard error during provider construction.
+ */
+export declare function rewriteBaseUrl(originalBaseUrl: string | undefined, proxyUrl: string | undefined): string | undefined;
+/**
+ * Active proxy configuration consumed by `resolveProviderCfg`. Module-scoped
+ * so the wiring layer can read it without threading state through every
+ * call site; updates from `applyProxyConfig()` are atomic from the JS
+ * perspective (a single assignment).
+ */
+export interface ProxyConfig {
+    /** Master switch — when false, no rewrite happens regardless of url. */
+    enabled: boolean;
+    /** Where the proxy listens. Empty string = unset (treated as disabled). */
+    url: string;
+    /** Last-known reachability state from the periodic probe. */
+    active: boolean;
+}
+/** Read the current proxy configuration. Safe to call from any layer. */
+export declare function getProxyConfig(): ProxyConfig;
+/**
+ * Listener notified by `applyProxyConfig` when the resulting config
+ * MATERIALLY changed (`enabled` / `url` / `active`). The periodic probe
+ * re-writes the same healthy values every tick, so a value-identical
+ * write must NOT notify — subscribers (e.g. the instant-apply provider
+ * rebuilder) would otherwise run every probe interval.
+ */
+export type ProxyConfigListener = (next: ProxyConfig, previous: ProxyConfig) => void;
+/**
+ * Subscribe to material proxy-config changes. Returns an unsubscribe
+ * function. A throwing listener is isolated: it cannot break the probe
+ * loop or starve other subscribers.
+ */
+export declare function subscribeToProxyConfig(listener: ProxyConfigListener): () => void;
+/**
+ * Apply a new proxy configuration. Returns the previous config so callers
+ * (notably the probe) can decide whether the change requires an immediate
+ * probe vs. waiting for the next tick. Notifies subscribers only when the
+ * merged result actually differs from the previous state.
+ */
+export declare function applyProxyConfig(next: Partial<ProxyConfig>): ProxyConfig;
+/**
+ * Convenience: should the rewriter run for a given provider id given the
+ * current configuration? Centralizes the "is proxy on AND active AND not
+ * excluded" rule so future call sites can't accidentally skip a check.
+ */
+export declare function shouldRewriteFor(providerId: string): boolean;
+/**
+ * Reset to defaults. Intended for tests; do NOT call from production code
+ * (the singleton lives for the lifetime of the process). Also drops all
+ * change listeners so tests never observe each other's notifications.
+ */
+export declare function __resetProxyConfigForTests(): void;
+/** Minimal structural logger — keeps this module dependency-free. */
+export interface ProxyInstantApplyLogger {
+    info: (message: string) => void;
+    warn: (message: string) => void;
+}
+export interface ProxyInstantApplyDeps {
+    /** Current active provider id — the provider whose URL is baked in. */
+    getActiveProviderId: () => string;
+    /**
+     * Raw (pre-rewrite) base URL for a provider id, exactly as
+     * `resolveProviderCfg` reads it: `savedCfg?.baseUrl ?? config.baseUrl`.
+     * The singleton holds no provider configs, so the caller — who owns the
+     * live Config — must inject this reader.
+     */
+    getRawBaseUrl: (providerId: string) => string | undefined;
+    /**
+     * Rebuild the live provider for `providerId` and swap it into the live
+     * context. Callers inject their existing path — e.g.
+     * `buildProviderForModel(providerId, model)` — which re-resolves
+     * proxy-aware config via `shouldRewriteFor` on every build. Should
+     * serialize the swap through the host's model-transition gate and
+     * re-check the live provider id inside it (superseded guard).
+     */
+    rebuildProvider: (providerId: string) => Promise<void>;
+    /** Structured logger for the rebuild decisions. */
+    logger: ProxyInstantApplyLogger;
+}
+export interface ProxyInstantApplyHandle {
+    /** Detach the subscription. Safe to call more than once. */
+    dispose: () => void;
+}
+/**
+ * Subscribe to material proxy-config changes and rebuild the live
+ * provider when the routing verdict for the ACTIVE provider changes.
+ *
+ * Comparison is on the effective base URL, so:
+ *   - probe ticks that rewrite identical values never rebuild;
+ *   - a proxy URL change while enabled+active rebuilds (new target);
+ *   - deactivation rebuilds (proxy-rewritten → raw);
+ *   - toggling off while already direct does NOT rebuild;
+ *   - a provider/model switch between notifications re-baselines against
+ *     the PREVIOUS config — the config the switch actually built under —
+ *     and then falls through to the verdict comparison. Seeding from the
+ *     new config instead would swallow a needed rebuild: a provider that
+ *     switched in while the proxy was on (built rewritten) must rebuild
+ *     direct when the very next change deactivates the proxy.
+ *
+ * Rebuilds are SERIALIZED: a toggle-off immediately followed by a probe
+ * verdict must not race two async rebuilds against each other — the
+ * slower, stale build could overwrite the fresh provider swap. Each
+ * rebuild re-reads proxy state at build time, so the chain converges on
+ * the latest verdict.
+ */
+export declare function createProxyInstantApply(deps: ProxyInstantApplyDeps): ProxyInstantApplyHandle;
+//# sourceMappingURL=proxy-rewrite.d.ts.map

package/dist/wiring/proxy-rewrite.js

@@ -0,0 +1,132 @@
+// src/wiring/proxy-rewrite.ts
+var PROXY_PATH_PREFIX = "/proxy/";
+var PROXY_EXCLUDED_PROVIDERS = /* @__PURE__ */ new Set(["openai-codex"]);
+function isProxyEligible(providerId) {
+  if (!providerId) return false;
+  if (PROXY_EXCLUDED_PROVIDERS.has(providerId)) return false;
+  return true;
+}
+function rewriteBaseUrl(originalBaseUrl, proxyUrl) {
+  if (!originalBaseUrl) return void 0;
+  if (!proxyUrl) return originalBaseUrl;
+  if (!isProxyEligibleForRewrite(originalBaseUrl, proxyUrl)) return originalBaseUrl;
+  return composeRewrittenUrl(originalBaseUrl, proxyUrl);
+}
+function isProxyEligibleForRewrite(originalBaseUrl, proxyUrl) {
+  if (!originalBaseUrl.includes("://")) return false;
+  if (!proxyUrl.includes("://")) return false;
+  const normalizedProxy = proxyUrl.replace(/\/+$/, "");
+  if (originalBaseUrl.startsWith(`${normalizedProxy}${PROXY_PATH_PREFIX}`)) {
+    return false;
+  }
+  try {
+    const parsed = new URL(originalBaseUrl);
+    const isLoopback = parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1" || // WHATWG URL serializes IPv6 hosts with brackets — `[::1]`, not `::1`.
+    parsed.hostname === "[::1]";
+    if (isLoopback && parsed.port !== "") return false;
+  } catch {
+  }
+  return true;
+}
+function composeRewrittenUrl(originalBaseUrl, proxyUrl) {
+  const parsedOriginal = new URL(originalBaseUrl);
+  const hostAndPath = `${parsedOriginal.host}${parsedOriginal.pathname}`;
+  const trailingQuery = parsedOriginal.search || "";
+  const trailingHash = parsedOriginal.hash || "";
+  const proxyRoot = proxyUrl.replace(/\/+$/, "");
+  return `${proxyRoot}${PROXY_PATH_PREFIX}${hostAndPath}${trailingQuery}${trailingHash}`;
+}
+var DEFAULT_PROXY_CONFIG = { enabled: false, url: "", active: false };
+var currentConfig = { ...DEFAULT_PROXY_CONFIG };
+function getProxyConfig() {
+  return currentConfig;
+}
+var listeners = /* @__PURE__ */ new Set();
+function subscribeToProxyConfig(listener) {
+  listeners.add(listener);
+  return () => {
+    listeners.delete(listener);
+  };
+}
+function applyProxyConfig(next) {
+  const previous = currentConfig;
+  currentConfig = {
+    enabled: next.enabled ?? previous.enabled,
+    url: next.url ?? previous.url,
+    active: next.active ?? previous.active
+  };
+  const materialChange = currentConfig.enabled !== previous.enabled || currentConfig.url !== previous.url || currentConfig.active !== previous.active;
+  if (materialChange) {
+    for (const listener of listeners) {
+      try {
+        listener(currentConfig, previous);
+      } catch {
+      }
+    }
+  }
+  return previous;
+}
+function shouldRewriteFor(providerId) {
+  const cfg = currentConfig;
+  if (!cfg.enabled || !cfg.active || !cfg.url) return false;
+  return isProxyEligible(providerId);
+}
+function __resetProxyConfigForTests() {
+  currentConfig = { ...DEFAULT_PROXY_CONFIG };
+  listeners.clear();
+}
+function effectiveBaseUrlFor(cfg, providerId, rawBaseUrl) {
+  if (!rawBaseUrl) return void 0;
+  const active = cfg.enabled && cfg.active && !!cfg.url && isProxyEligible(providerId);
+  return active ? rewriteBaseUrl(rawBaseUrl, cfg.url) : rawBaseUrl;
+}
+function effectiveBaseUrl(providerId, rawBaseUrl) {
+  return effectiveBaseUrlFor(currentConfig, providerId, rawBaseUrl);
+}
+function createProxyInstantApply(deps) {
+  const { getActiveProviderId, getRawBaseUrl, rebuildProvider, logger } = deps;
+  let lastProviderId = getActiveProviderId();
+  let lastEffectiveUrl = effectiveBaseUrl(lastProviderId, getRawBaseUrl(lastProviderId));
+  let disposed = false;
+  let rebuildChain = Promise.resolve();
+  const unsubscribe = subscribeToProxyConfig((next, previous) => {
+    if (disposed) return;
+    const providerId = getActiveProviderId();
+    const raw = getRawBaseUrl(providerId);
+    const nextUrl = effectiveBaseUrlFor(next, providerId, raw);
+    const baselineUrl = providerId === lastProviderId ? lastEffectiveUrl : effectiveBaseUrlFor(previous, providerId, raw);
+    lastProviderId = providerId;
+    lastEffectiveUrl = nextUrl;
+    if (nextUrl === baselineUrl) return;
+    rebuildChain = rebuildChain.then(() => rebuildProvider(providerId)).then(() => {
+      if (!disposed) {
+        logger.info(`WrongProxy routing changed \u2014 live provider rebuilt (${providerId})`);
+      }
+    }).catch((err) => {
+      if (!disposed) {
+        logger.warn(
+          `WrongProxy instant-apply: provider rebuild failed for ${providerId}: ${err instanceof Error ? err.message : String(err)}`
+        );
+      }
+    });
+  });
+  return {
+    dispose() {
+      if (disposed) return;
+      disposed = true;
+      unsubscribe();
+    }
+  };
+}
+export {
+  PROXY_EXCLUDED_PROVIDERS,
+  __resetProxyConfigForTests,
+  applyProxyConfig,
+  createProxyInstantApply,
+  getProxyConfig,
+  isProxyEligible,
+  rewriteBaseUrl,
+  shouldRewriteFor,
+  subscribeToProxyConfig
+};
+//# sourceMappingURL=proxy-rewrite.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/core",
-  "version": "0.310.0",
+  "version": "0.313.0",
   "license": "MIT",
   "description": "WrongStack core: kernel, types, and shared utilities for the WrongStack CLI agent.",
   "repository": {
@@ -165,6 +165,10 @@
     "./replay": {
       "types": "./dist/replay/index.d.ts",
       "import": "./dist/replay/index.js"
+    },
+    "./wiring/proxy-rewrite": {
+      "types": "./dist/wiring/proxy-rewrite.d.ts",
+      "import": "./dist/wiring/proxy-rewrite.js"
     }
   },
   "files": [
@@ -178,9 +182,9 @@
   "wrongstackApiVersion": "0.1.10",
   "dependencies": {
     "zod": "4.4.3",
-    "@wrongstack/primitives": "0.310.0",
-    "@wrongstack/kanban": "0.310.0",
-    "@wrongstack/persistence": "0.310.0"
+    "@wrongstack/kanban": "0.313.0",
+    "@wrongstack/primitives": "0.313.0",
+    "@wrongstack/persistence": "0.313.0"
   },
   "devDependencies": {
     "@types/node": "^22.19.0",