@wrongstack/core 0.310.1 → 0.313.0

package/dist/coordination/index.js

@@ -20988,7 +20988,7 @@ async function readDirectorSubagentSession(args) {
 }
 
 // src/types/quota-regex.ts
-var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|usage[-_\s]*limit[-_\s]*(?:reached|exceeded)/i;
+var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|(?:usage|credit)[-_\s]*(?:quota|limit)(?![-_\w])|usage[-_\s]*(?:limit|quota)[-_\s]*(?:reached|exceeded|for)/i;
 var ROUTE_SCOPED_QUOTA_RE = /\b(?:for|on)\s+(?:(?:this|the)\s+)?(?:route|model)\b|\b(?:route|model)(?:[-_\s]+[\w.-]+)?[-_\s]*(?:quota|limit)\b|\b(?:quota|limit).{0,24}\b(?:for|on)\s+(?:(?:this|the)\s+)?(?:route|model)\b/i;
 
 // src/types/provider.ts
@@ -21001,7 +21001,8 @@ function classifyProviderError(status, body, message) {
   if (status === 0) return "network";
   if (status === 408) return "timeout";
   if (status === 599) return "stream_hang";
-  if (status === 402 || QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
+  if (QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
+  if (status === 402) return "quota_exhausted";
   if (status === 429 && body?.message && body.type !== "rate_limit_exceeded" && RATE_LIMIT_EXCEEDED_RE.test(body.message)) {
     return "quota_exhausted";
   }

package/dist/coordination/mailbox-project-server.js

@@ -67,8 +67,8 @@ var EventBus = class {
    *
    * Returns an unsubscribe function.
    */
-  onAny(fn) {
-    return this.onPattern("*", fn);
+  onAny(fn, owner) {
+    return this.onPattern("*", fn, owner);
   }
   /**
    * Subscribe to all events whose name matches a glob-style prefix.
@@ -81,16 +81,16 @@ var EventBus = class {
    *
    * Returns an unsubscribe function.
    */
-  onPattern(pattern, fn) {
+  onPattern(pattern, fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onPattern("${pattern}"). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onPattern("${pattern}")` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
     const match = makePatternMatcher(pattern);
-    const entry = { match, fn };
+    const entry = { match, fn, owner };
     this.wildcards.push(entry);
     this.wildcardSnapshotCache = null;
     return () => {
@@ -108,15 +108,15 @@ var EventBus = class {
    *
    * Returns an unsubscribe function.
    */
-  onRegex(regex, fn) {
+  onRegex(regex, fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onRegex(${regex}). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onRegex(${regex})` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
-    const entry = { match: (e) => regex.test(e), fn };
+    const entry = { match: (e) => regex.test(e), fn, owner };
     this.wildcards.push(entry);
     this.wildcardSnapshotCache = null;
     return () => {
@@ -1416,6 +1416,38 @@ function isMailboxReceiptRecordV2(value) {
   return true;
 }
 
+// src/coordination/mailbox-session-sync.ts
+function isAffectedBySessionAffinity(message) {
+  return message.sessionAffinity !== void 0;
+}
+async function acceptMailboxMessageForSession(message, currentSessionId, ctx) {
+  if (!isAffectedBySessionAffinity(message)) return true;
+  const affinity = message.sessionAffinity;
+  if (affinity === null || typeof affinity !== "object" || Array.isArray(affinity)) {
+    return false;
+  }
+  if (affinity.sessionId !== void 0 && typeof affinity.sessionId !== "string" || affinity.reportId !== void 0 && typeof affinity.reportId !== "string") {
+    return false;
+  }
+  if (!currentSessionId) {
+    return ctx?.allowUnscoped === true;
+  }
+  if (typeof affinity.sessionId === "string" && affinity.sessionId.length > 0) {
+    if (affinity.sessionId !== currentSessionId) return false;
+    return true;
+  }
+  if (affinity.reportId && ctx?.resolveChimeraReportSessionId) {
+    try {
+      const resolved = await ctx.resolveChimeraReportSessionId(affinity.reportId);
+      if (resolved === currentSessionId) return true;
+      if (resolved !== void 0) return false;
+    } catch {
+    }
+  }
+  if (ctx?.allowUnscoped === true) return true;
+  return false;
+}
+
 // src/coordination/mailbox-message-codec.ts
 var MESSAGE_TYPES = /* @__PURE__ */ new Set([
   "note",
@@ -2772,7 +2804,7 @@ var SqliteMailbox = class {
     }
     const rows = this.stmt(sql).all(...params);
     const idFilter = query.ids === void 0 ? void 0 : new Set(query.ids);
-    const messages = this.materializeMessageRows(rows).filter((message) => {
+    const filtered = this.materializeMessageRows(rows).filter((message) => {
       if (idFilter !== void 0 && !idFilter.has(message.id)) return false;
       if (query.to !== void 0 && message.to !== query.to && message.to !== "*") return false;
       if (query.from !== void 0 && message.from !== query.from) return false;
@@ -2791,6 +2823,20 @@ var SqliteMailbox = class {
       if (query.replyTo !== void 0 && message.replyTo !== query.replyTo) return false;
       return true;
     });
+    let messages = filtered;
+    if (query.currentSessionId !== void 0 || query.sessionAffinityCtx !== void 0) {
+      const kept = [];
+      for (const message of filtered) {
+        if (await acceptMailboxMessageForSession(
+          message,
+          query.currentSessionId,
+          query.sessionAffinityCtx
+        )) {
+          kept.push(message);
+        }
+      }
+      messages = kept;
+    }
     messages.sort((left, right) => right.timestamp.localeCompare(left.timestamp));
     return messages.slice(0, query.limit ?? 50).map((message) => {
       const copy = {
@@ -2903,7 +2949,7 @@ var SqliteMailbox = class {
    *   identity is `leader`. This call path carries no role, matching the
    *   `isMailboxMessageVisibleTo(message, forAgentId)` it replaces.
    */
-  async unreadCount(forAgentId, sessionId) {
+  async unreadCount(forAgentId, sessionId, ctx) {
     const sessionAddress = sessionId === void 0 ? void 0 : sessionRecipient(sessionId);
     const where = [];
     const params = [];
@@ -2944,10 +2990,20 @@ var SqliteMailbox = class {
         WHERE any_receipt.message_id = messages.id
       )
     )`);
-    const row = this.stmt(
-      `SELECT COUNT(*) AS total FROM messages WHERE ${where.join(" AND ")}`
-    ).get(...params);
-    return Number(row?.total ?? 0);
+    if (sessionId === void 0 && ctx === void 0) {
+      const row = this.stmt(
+        `SELECT COUNT(*) AS total FROM messages WHERE ${where.join(" AND ")}`
+      ).get(...params);
+      return Number(row?.total ?? 0);
+    }
+    const rows = this.stmt(
+      `SELECT id, data, legacy_global_completion FROM messages WHERE ${where.join(" AND ")}`
+    ).all(...params);
+    let total = 0;
+    for (const message of this.materializeMessageRows(rows)) {
+      if (await acceptMailboxMessageForSession(message, sessionId, ctx)) total += 1;
+    }
+    return total;
   }
   async softDelete(mailId, by) {
     const message = this.findMessage(mailId);

package/dist/coordination/mailbox-types.d.ts

@@ -3,6 +3,7 @@ import type { MailboxAudience, MailboxMessage, MailboxSessionAffinity, MailboxTa
 export { MAILBOX_TYPE_PROPERTIES, type MailboxMessageType, type MailboxTypeCategory, } from './mailbox-type-properties.js';
 export { expandMailboxCapabilities, hasMailboxCapability, MAILBOX_CAPABILITY_IMPLICATIONS, type MailboxActorContext, type MailboxAuthMode, type MailboxCapability, type MailboxPrincipalKind, } from './mailbox-auth-types.js';
 export { isActionRequiredForActor, isMailboxLeader, isMailboxMessageVisibleTo, isMailboxReceiptRecordV2, isMailboxSenderInFamily, mailboxIdentityBase, normalizeRecipient, SESSION_RECIPIENT_PREFIX, sessionRecipient, validateSendType, } from './mailbox-predicates.js';
+import type { MailboxSessionAffinityContext } from './mailbox-session-sync.js';
 export { acceptMailboxMessageForSession, acceptMailboxMessageForSessionSync, type MailboxSessionAffinityContext, } from './mailbox-session-sync.js';
 export { type ActorMailboxMessage, type MailboxAudience, type MailboxLegacyReportSessionAffinity, type MailboxMessage, type MailboxReceiptRecordV2, type MailboxScopedSessionAffinity, type MailboxSessionAffinity, type MailboxTaskContext, type ReadReceipts, } from './mailbox-message-types.js';
 export interface RegisteredAgent {
@@ -48,7 +49,18 @@ export interface MailboxQuery {
     minPriority?: 'low' | 'normal' | 'high' | undefined;
     limit?: number | undefined;
     since?: string | undefined;
+    /** Filters by the message's SENDER session id (origin), not the reader's session. */
     sessionId?: string | undefined;
+    /**
+     * Reader's current session id. When present, messages carrying a
+     * session-affinity token for a DIFFERENT session are excluded, matching the
+     * inbox checker's receive-side filter (mailbox-attach applySessionAffinityFilter).
+     * Kept distinct from `sessionId` (sender origin) so a reader can filter by
+     * both simultaneously.
+     */
+    currentSessionId?: string | undefined;
+    /** Resolver + unscoped policy for session-affinity tokens (see acceptMailboxMessageForSession). */
+    sessionAffinityCtx?: MailboxSessionAffinityContext | undefined;
     includeDeleted?: boolean | undefined;
     replyTo?: string | undefined;
 }
@@ -172,7 +184,7 @@ export interface Mailbox {
     registerAgent(input: AgentRegistrationInput): Promise<void>;
     deregisterAgent(agentId: string): Promise<void>;
     heartbeat(input: AgentHeartbeatInput): Promise<void>;
-    unreadCount(forAgentId: string, sessionId?: string): Promise<number>;
+    unreadCount(forAgentId: string, sessionId?: string, ctx?: MailboxSessionAffinityContext): Promise<number>;
     close(): Promise<void>;
     clearAll(): Promise<void>;
     purgeStale(opts?: PurgeOptions): Promise<PurgeResult>;

package/dist/coordination/sqlite-mailbox.d.ts

@@ -2,6 +2,7 @@ import type { EventBus } from '../kernel/events.js';
 import type { CredentialValidation, IssueCredentialOptions, MailboxCredential } from './mailbox-credential-store.js';
 import type { MailboxEventEmitter } from './mailbox-events.js';
 import type { AgentHeartbeatInput, AgentRegistrationInput, AutoCompactOptions, AutoCompactResult, ClientHeartbeatInput, ClientRegistrationInput, ClientStatus, Mailbox, MailboxAckBatchInput, MailboxAckInput, MailboxAgentStatus, MailboxMessage, MailboxQuery, MailboxSendInput, PurgeOptions, PurgeResult } from './mailbox-types.js';
+import { type MailboxSessionAffinityContext } from './mailbox-types.js';
 export declare const SQLITE_MAILBOX_FILE = "_mailbox.sqlite";
 export declare class SqliteMailbox implements Mailbox {
     readonly projectDir: string;
@@ -59,7 +60,7 @@ export declare class SqliteMailbox implements Mailbox {
      *   identity is `leader`. This call path carries no role, matching the
      *   `isMailboxMessageVisibleTo(message, forAgentId)` it replaces.
      */
-    unreadCount(forAgentId: string, sessionId?: string): Promise<number>;
+    unreadCount(forAgentId: string, sessionId?: string, ctx?: MailboxSessionAffinityContext): Promise<number>;
     softDelete(mailId: string, by: string): Promise<MailboxMessage | null>;
     restore(mailId: string): Promise<MailboxMessage | null>;
     private persistAgent;

package/dist/core/index.js

@@ -3947,7 +3947,7 @@ function truncate(s, max) {
 }
 
 // src/types/quota-regex.ts
-var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|usage[-_\s]*limit[-_\s]*(?:reached|exceeded)/i;
+var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|(?:usage|credit)[-_\s]*(?:quota|limit)(?![-_\w])|usage[-_\s]*(?:limit|quota)[-_\s]*(?:reached|exceeded|for)/i;
 
 // src/types/provider.ts
 function effectiveInputTokens(usage) {
@@ -3962,7 +3962,8 @@ function classifyProviderError(status, body, message) {
   if (status === 0) return "network";
   if (status === 408) return "timeout";
   if (status === 599) return "stream_hang";
-  if (status === 402 || QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
+  if (QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
+  if (status === 402) return "quota_exhausted";
   if (status === 429 && body?.message && body.type !== "rate_limit_exceeded" && RATE_LIMIT_EXCEEDED_RE.test(body.message)) {
     return "quota_exhausted";
   }

package/dist/execution/index.js

@@ -4854,7 +4854,7 @@ function truncate(s, max) {
 }
 
 // src/types/quota-regex.ts
-var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|usage[-_\s]*limit[-_\s]*(?:reached|exceeded)/i;
+var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|(?:usage|credit)[-_\s]*(?:quota|limit)(?![-_\w])|usage[-_\s]*(?:limit|quota)[-_\s]*(?:reached|exceeded|for)/i;
 
 // src/types/provider.ts
 var CONTEXT_OVERFLOW_RE = /context.length|context.window|maximum context|max.*tokens?.*exceeded|(?:prompt|request|input|messages?).{0,12}too (?:large|long)|exceeds the context|\btokens\b.*exceed|too many tokens|reduce the length|resulted in \d+ tokens|context_length_exceeded/i;
@@ -4866,7 +4866,8 @@ function classifyProviderError(status, body, message) {
   if (status === 0) return "network";
   if (status === 408) return "timeout";
   if (status === 599) return "stream_hang";
-  if (status === 402 || QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
+  if (QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
+  if (status === 402) return "quota_exhausted";
   if (status === 429 && body?.message && body.type !== "rate_limit_exceeded" && RATE_LIMIT_EXCEEDED_RE.test(body.message)) {
     return "quota_exhausted";
   }

package/dist/index.js

@@ -38421,7 +38421,7 @@ import { randomUUID as randomUUID18 } from "node:crypto";
 init_errors();
 
 // src/types/quota-regex.ts
-var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|usage[-_\s]*limit[-_\s]*(?:reached|exceeded)/i;
+var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|(?:usage|credit)[-_\s]*(?:quota|limit)(?![-_\w])|usage[-_\s]*(?:limit|quota)[-_\s]*(?:reached|exceeded|for)/i;
 var ROUTE_SCOPED_QUOTA_RE = /\b(?:for|on)\s+(?:(?:this|the)\s+)?(?:route|model)\b|\b(?:route|model)(?:[-_\s]+[\w.-]+)?[-_\s]*(?:quota|limit)\b|\b(?:quota|limit).{0,24}\b(?:for|on)\s+(?:(?:this|the)\s+)?(?:route|model)\b/i;
 
 // src/types/provider.ts
@@ -38458,7 +38458,8 @@ function classifyProviderError(status, body, message) {
   if (status === 0) return "network";
   if (status === 408) return "timeout";
   if (status === 599) return "stream_hang";
-  if (status === 402 || QUOTA_EXHAUSTED_RE.test(text2)) return "quota_exhausted";
+  if (QUOTA_EXHAUSTED_RE.test(text2)) return "quota_exhausted";
+  if (status === 402) return "quota_exhausted";
   if (status === 429 && body?.message && body.type !== "rate_limit_exceeded" && RATE_LIMIT_EXCEEDED_RE.test(body.message)) {
     return "quota_exhausted";
   }
@@ -73361,8 +73362,8 @@ var EventBus = class {
    *
    * Returns an unsubscribe function.
    */
-  onAny(fn) {
-    return this.onPattern("*", fn);
+  onAny(fn, owner) {
+    return this.onPattern("*", fn, owner);
   }
   /**
    * Subscribe to all events whose name matches a glob-style prefix.
@@ -73375,16 +73376,16 @@ var EventBus = class {
    *
    * Returns an unsubscribe function.
    */
-  onPattern(pattern, fn) {
+  onPattern(pattern, fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onPattern("${pattern}"). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onPattern("${pattern}")` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
     const match = makePatternMatcher(pattern);
-    const entry = { match, fn };
+    const entry = { match, fn, owner };
     this.wildcards.push(entry);
     this.wildcardSnapshotCache = null;
     return () => {
@@ -73402,15 +73403,15 @@ var EventBus = class {
    *
    * Returns an unsubscribe function.
    */
-  onRegex(regex, fn) {
+  onRegex(regex, fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onRegex(${regex}). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onRegex(${regex})` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
-    const entry = { match: (e) => regex.test(e), fn };
+    const entry = { match: (e) => regex.test(e), fn, owner };
     this.wildcards.push(entry);
     this.wildcardSnapshotCache = null;
     return () => {
@@ -73588,16 +73589,16 @@ var ScopedEventBus = class extends EventBus {
    * Subscribe to all events. Alias for `onPattern('*')` — the listener is
    * tracked so that `teardown()` will remove it automatically.
    */
-  onAny(fn) {
+  onAny(fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onAny(). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onAny()` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
     const key = this.nextKey++;
-    const unsub = EventBus.prototype.onPattern.call(this, "*", fn);
+    const unsub = EventBus.prototype.onPattern.call(this, "*", fn, owner);
     this.registrations.set(key, unsub);
     return () => {
       this.registrations.delete(key);
@@ -73608,16 +73609,16 @@ var ScopedEventBus = class extends EventBus {
    * Identical to `EventBus.onPattern` but the listener is tracked so that
    * `teardown()` will remove it automatically.
    */
-  onPattern(pattern, fn) {
+  onPattern(pattern, fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onPattern("${pattern}"). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onPattern("${pattern}")` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
     const key = this.nextKey++;
-    const unsub = super.onPattern(pattern, fn);
+    const unsub = super.onPattern(pattern, fn, owner);
     this.registrations.set(key, unsub);
     return () => {
       this.registrations.delete(key);
@@ -73628,16 +73629,16 @@ var ScopedEventBus = class extends EventBus {
    * Identical to `EventBus.onRegex` but the listener is tracked so that
    * `teardown()` will remove it automatically.
    */
-  onRegex(regex, fn) {
+  onRegex(regex, fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onRegex(${regex}). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onRegex(${regex})` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
     const key = this.nextKey++;
-    const unsub = super.onRegex(regex, fn);
+    const unsub = super.onRegex(regex, fn, owner);
     this.registrations.set(key, unsub);
     return () => {
       this.registrations.delete(key);

package/dist/kernel/events/wrongtrace-events.d.ts

@@ -0,0 +1,26 @@
+/**
+ * WrongTrace gate-decision events.
+ *
+ * Emitted by the WrongTrace lock-gate hooks (see
+ * `@wrongstack/wrongtrace` hooks.ts) through each host's EventBus:
+ * every mutating tool call's gate decision is observable — denied edits,
+ * fragile-file nudges, lock acquisition / race-loss / release.
+ *
+ * Kept structurally matching the adapter's `WrongTraceGateDecisionEvent`
+ * union so core never imports the adapter (direction: wrongtrace is the
+ * leaf; core must not depend on it).
+ */
+export interface WrongTraceEventMap {
+    'wrongtrace.gate.decision': {
+        kind: 'deny' | 'allow-fragile' | 'lock-acquired' | 'lock-conflict-race' | 'lock-released';
+        /** Target file path the gate decided on. */
+        path: string;
+        /** `deny` — human-readable owner/expiry reason shown to the model. */
+        reason?: string | undefined;
+        /** `allow-fragile` — why the file is considered fragile. */
+        reasons?: readonly string[] | undefined;
+        /** `lock-acquired` — lock owner identity (`wrongstack:<sessionId>`). */
+        owner?: string | undefined;
+    };
+}
+//# sourceMappingURL=wrongtrace-events.d.ts.map

package/dist/kernel/events.d.ts

@@ -14,6 +14,7 @@ import type { SddEventMap } from './events/sdd-events.js';
 import type { SessionEventMap } from './events/session-events.js';
 import type { ToolEventMap } from './events/tool-events.js';
 import type { WorktreeEventMap } from './events/worktree-events.js';
+import type { WrongTraceEventMap } from './events/wrongtrace-events.js';
 /** Distress signals the BrainMonitor watches. See `coordination/brain-monitor.ts`. */
 export type BrainInterventionKind = 'tool_failure_streak' | 'error_storm' | 'agent_stall' | 'file_churn';
 /**
@@ -48,7 +49,7 @@ export interface TrackedAgentSnapshot {
     latestPromptAt?: number | undefined;
     lastActivityAt: string;
 }
-export interface EventMap extends AgentEventMap, BrainEventMap, SessionEventMap, ProviderEventMap, ProcessEventMap, NetworkEventMap, FileEventMap, ToolEventMap, MemoryEventMap, SddEventMap, WorktreeEventMap, FleetEventMap {
+export interface EventMap extends AgentEventMap, BrainEventMap, SessionEventMap, ProviderEventMap, ProcessEventMap, NetworkEventMap, FileEventMap, ToolEventMap, MemoryEventMap, SddEventMap, WorktreeEventMap, FleetEventMap, WrongTraceEventMap {
 }
 export type EventName = keyof EventMap;
 export type Listener<E extends EventName> = (payload: EventMap[E]) => void;
@@ -60,6 +61,8 @@ export declare class EventBus {
     protected readonly wildcards: Array<{
         match: (event: string) => boolean;
         fn: (event: string, payload: unknown) => void;
+        /** Optional registration-site label included in cap-rejection warnings. */
+        owner?: string | undefined;
     }>;
     protected logger?: EventLogger | undefined;
     /**
@@ -82,7 +85,9 @@ export declare class EventBus {
      *
      * Returns an unsubscribe function.
      */
-    onAny(fn: (event: string, payload: unknown) => void): () => void;
+    onAny(fn: (event: string, payload: unknown) => void, 
+    /** Optional registration-site label included in cap-rejection warnings. */
+    owner?: string): () => void;
     /**
      * Subscribe to all events whose name matches a glob-style prefix.
      * `'tool.*'` matches `tool.started`, `tool.executed`, `tool.progress`, etc.
@@ -94,7 +99,9 @@ export declare class EventBus {
      *
      * Returns an unsubscribe function.
      */
-    onPattern(pattern: string, fn: (event: string, payload: unknown) => void): () => void;
+    onPattern(pattern: string, fn: (event: string, payload: unknown) => void, 
+    /** Optional registration-site label included in cap-rejection warnings. */
+    owner?: string): () => void;
     /**
      * Subscribe to all events whose name matches a RegExp.
      * More flexible than `onPattern` — use when you need regex features
@@ -102,7 +109,9 @@ export declare class EventBus {
      *
      * Returns an unsubscribe function.
      */
-    onRegex(regex: RegExp, fn: (event: string, payload: unknown) => void): () => void;
+    onRegex(regex: RegExp, fn: (event: string, payload: unknown) => void, 
+    /** Optional registration-site label included in cap-rejection warnings. */
+    owner?: string): () => void;
     emit<E extends EventName>(event: E, payload: EventMap[E]): void;
     /**
      * Dispatch array for one event name, or `undefined` when nothing is
@@ -208,17 +217,17 @@ export declare class ScopedEventBus extends EventBus {
      * Subscribe to all events. Alias for `onPattern('*')` — the listener is
      * tracked so that `teardown()` will remove it automatically.
      */
-    onAny(fn: (event: string, payload: unknown) => void): () => void;
+    onAny(fn: (event: string, payload: unknown) => void, owner?: string): () => void;
     /**
      * Identical to `EventBus.onPattern` but the listener is tracked so that
      * `teardown()` will remove it automatically.
      */
-    onPattern(pattern: string, fn: (event: string, payload: unknown) => void): () => void;
+    onPattern(pattern: string, fn: (event: string, payload: unknown) => void, owner?: string): () => void;
     /**
      * Identical to `EventBus.onRegex` but the listener is tracked so that
      * `teardown()` will remove it automatically.
      */
-    onRegex(regex: RegExp, fn: (event: string, payload: unknown) => void): () => void;
+    onRegex(regex: RegExp, fn: (event: string, payload: unknown) => void, owner?: string): () => void;
     /**
      * Remove every listener that was registered through this scoped bus.
      * Idempotent — calling it multiple times is safe.

package/dist/kernel/index.js

@@ -499,8 +499,8 @@ var EventBus = class {
    *
    * Returns an unsubscribe function.
    */
-  onAny(fn) {
-    return this.onPattern("*", fn);
+  onAny(fn, owner) {
+    return this.onPattern("*", fn, owner);
   }
   /**
    * Subscribe to all events whose name matches a glob-style prefix.
@@ -513,16 +513,16 @@ var EventBus = class {
    *
    * Returns an unsubscribe function.
    */
-  onPattern(pattern, fn) {
+  onPattern(pattern, fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onPattern("${pattern}"). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onPattern("${pattern}")` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
     const match = makePatternMatcher(pattern);
-    const entry = { match, fn };
+    const entry = { match, fn, owner };
     this.wildcards.push(entry);
     this.wildcardSnapshotCache = null;
     return () => {
@@ -540,15 +540,15 @@ var EventBus = class {
    *
    * Returns an unsubscribe function.
    */
-  onRegex(regex, fn) {
+  onRegex(regex, fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onRegex(${regex}). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onRegex(${regex})` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
-    const entry = { match: (e) => regex.test(e), fn };
+    const entry = { match: (e) => regex.test(e), fn, owner };
     this.wildcards.push(entry);
     this.wildcardSnapshotCache = null;
     return () => {
@@ -726,16 +726,16 @@ var ScopedEventBus = class extends EventBus {
    * Subscribe to all events. Alias for `onPattern('*')` — the listener is
    * tracked so that `teardown()` will remove it automatically.
    */
-  onAny(fn) {
+  onAny(fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onAny(). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onAny()` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
     const key = this.nextKey++;
-    const unsub = EventBus.prototype.onPattern.call(this, "*", fn);
+    const unsub = EventBus.prototype.onPattern.call(this, "*", fn, owner);
     this.registrations.set(key, unsub);
     return () => {
       this.registrations.delete(key);
@@ -746,16 +746,16 @@ var ScopedEventBus = class extends EventBus {
    * Identical to `EventBus.onPattern` but the listener is tracked so that
    * `teardown()` will remove it automatically.
    */
-  onPattern(pattern, fn) {
+  onPattern(pattern, fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onPattern("${pattern}"). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onPattern("${pattern}")` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
     const key = this.nextKey++;
-    const unsub = super.onPattern(pattern, fn);
+    const unsub = super.onPattern(pattern, fn, owner);
     this.registrations.set(key, unsub);
     return () => {
       this.registrations.delete(key);
@@ -766,16 +766,16 @@ var ScopedEventBus = class extends EventBus {
    * Identical to `EventBus.onRegex` but the listener is tracked so that
    * `teardown()` will remove it automatically.
    */
-  onRegex(regex, fn) {
+  onRegex(regex, fn, owner) {
     if (this.wildcards.length >= MAX_WILDCARDS) {
       this.logger?.error(
-        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onRegex(${regex}). Callers must dispose their wildcard listeners to prevent unbounded growth.`
+        `EventBus wildcard limit (${MAX_WILDCARDS}) reached \u2014 rejecting onRegex(${regex})` + (owner ? ` (owner: ${owner})` : "") + ". Callers must dispose their wildcard listeners to prevent unbounded growth."
       );
       return () => {
       };
     }
     const key = this.nextKey++;
-    const unsub = super.onRegex(regex, fn);
+    const unsub = super.onRegex(regex, fn, owner);
     this.registrations.set(key, unsub);
     return () => {
       this.registrations.delete(key);

package/dist/tools/index.js

@@ -1551,7 +1551,7 @@ var FsError = class extends WrongStackError {
 };
 
 // src/types/quota-regex.ts
-var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|usage[-_\s]*limit[-_\s]*(?:reached|exceeded)/i;
+var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|(?:usage|credit)[-_\s]*(?:quota|limit)(?![-_\w])|usage[-_\s]*(?:limit|quota)[-_\s]*(?:reached|exceeded|for)/i;
 
 // src/types/provider.ts
 var CONTEXT_OVERFLOW_RE = /context.length|context.window|maximum context|max.*tokens?.*exceeded|(?:prompt|request|input|messages?).{0,12}too (?:large|long)|exceeds the context|\btokens\b.*exceed|too many tokens|reduce the length|resulted in \d+ tokens|context_length_exceeded/i;
@@ -1563,7 +1563,8 @@ function classifyProviderError(status, body, message) {
   if (status === 0) return "network";
   if (status === 408) return "timeout";
   if (status === 599) return "stream_hang";
-  if (status === 402 || QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
+  if (QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
+  if (status === 402) return "quota_exhausted";
   if (status === 429 && body?.message && body.type !== "rate_limit_exceeded" && RATE_LIMIT_EXCEEDED_RE.test(body.message)) {
     return "quota_exhausted";
   }

package/dist/types/config/tools.d.ts

@@ -111,7 +111,7 @@ export interface ToolsConfig {
     nextsteps?: NextStepsToolConfig | undefined;
     /**
      * WrongProxy / WrongTrace: automatic base-URL rerouting through a
-     * local proxy daemon (default `http://localhost:8000`). When
+     * local proxy daemon (default `http://localhost:3444`). When
      * `enabled` is true AND the daemon at `url` is reachable, every
      * provider's base URL is rewritten through
      * `${url}/proxy/<host><path>`. openai-codex is excluded by spec.
@@ -134,7 +134,7 @@ export interface WrongProxyToolConfig {
     enabled?: boolean | undefined;
     /**
      * Where the local proxy daemon listens. Default
-     * `http://localhost:8000`. The CLI's periodic probe targets
+     * `http://localhost:3444`. The CLI's periodic probe targets
      * `<url>/api/health`; a 2xx response flips the runtime's
      * `active` flag.
      */

package/dist/types/index.js

@@ -912,7 +912,7 @@ function truncate(s, max) {
 }
 
 // src/types/quota-regex.ts
-var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|usage[-_\s]*limit[-_\s]*(?:reached|exceeded)/i;
+var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|(?:usage|credit)[-_\s]*(?:quota|limit)(?![-_\w])|usage[-_\s]*(?:limit|quota)[-_\s]*(?:reached|exceeded|for)/i;
 
 // src/types/provider.ts
 var REASONING_EFFORT_LEVELS = [
@@ -948,7 +948,8 @@ function classifyProviderError(status, body, message) {
   if (status === 0) return "network";
   if (status === 408) return "timeout";
   if (status === 599) return "stream_hang";
-  if (status === 402 || QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
+  if (QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
+  if (status === 402) return "quota_exhausted";
   if (status === 429 && body?.message && body.type !== "rate_limit_exceeded" && RATE_LIMIT_EXCEEDED_RE.test(body.message)) {
     return "quota_exhausted";
   }

package/dist/wiring/proxy-rewrite.d.ts

@@ -8,8 +8,8 @@
  *
  * Example:
  *   original  = "https://api.openai.com/v1"
- *   proxyUrl  = "http://localhost:8000"
- *   output    = "http://localhost:8000/proxy/api.openai.com/v1"
+ *   proxyUrl  = "http://localhost:3444"
+ *   output    = "http://localhost:3444/proxy/api.openai.com/v1"
  *
  * The host appears *without* a scheme in the path; the proxy terminates
  * TLS (or speaks plain HTTP for localhost) and forwards the original
@@ -56,10 +56,25 @@ export interface ProxyConfig {
 }
 /** Read the current proxy configuration. Safe to call from any layer. */
 export declare function getProxyConfig(): ProxyConfig;
+/**
+ * Listener notified by `applyProxyConfig` when the resulting config
+ * MATERIALLY changed (`enabled` / `url` / `active`). The periodic probe
+ * re-writes the same healthy values every tick, so a value-identical
+ * write must NOT notify — subscribers (e.g. the instant-apply provider
+ * rebuilder) would otherwise run every probe interval.
+ */
+export type ProxyConfigListener = (next: ProxyConfig, previous: ProxyConfig) => void;
+/**
+ * Subscribe to material proxy-config changes. Returns an unsubscribe
+ * function. A throwing listener is isolated: it cannot break the probe
+ * loop or starve other subscribers.
+ */
+export declare function subscribeToProxyConfig(listener: ProxyConfigListener): () => void;
 /**
  * Apply a new proxy configuration. Returns the previous config so callers
  * (notably the probe) can decide whether the change requires an immediate
- * probe vs. waiting for the next tick.
+ * probe vs. waiting for the next tick. Notifies subscribers only when the
+ * merged result actually differs from the previous state.
  */
 export declare function applyProxyConfig(next: Partial<ProxyConfig>): ProxyConfig;
 /**
@@ -70,7 +85,62 @@ export declare function applyProxyConfig(next: Partial<ProxyConfig>): ProxyConfi
 export declare function shouldRewriteFor(providerId: string): boolean;
 /**
  * Reset to defaults. Intended for tests; do NOT call from production code
- * (the singleton lives for the lifetime of the process).
+ * (the singleton lives for the lifetime of the process). Also drops all
+ * change listeners so tests never observe each other's notifications.
  */
 export declare function __resetProxyConfigForTests(): void;
+/** Minimal structural logger — keeps this module dependency-free. */
+export interface ProxyInstantApplyLogger {
+    info: (message: string) => void;
+    warn: (message: string) => void;
+}
+export interface ProxyInstantApplyDeps {
+    /** Current active provider id — the provider whose URL is baked in. */
+    getActiveProviderId: () => string;
+    /**
+     * Raw (pre-rewrite) base URL for a provider id, exactly as
+     * `resolveProviderCfg` reads it: `savedCfg?.baseUrl ?? config.baseUrl`.
+     * The singleton holds no provider configs, so the caller — who owns the
+     * live Config — must inject this reader.
+     */
+    getRawBaseUrl: (providerId: string) => string | undefined;
+    /**
+     * Rebuild the live provider for `providerId` and swap it into the live
+     * context. Callers inject their existing path — e.g.
+     * `buildProviderForModel(providerId, model)` — which re-resolves
+     * proxy-aware config via `shouldRewriteFor` on every build. Should
+     * serialize the swap through the host's model-transition gate and
+     * re-check the live provider id inside it (superseded guard).
+     */
+    rebuildProvider: (providerId: string) => Promise<void>;
+    /** Structured logger for the rebuild decisions. */
+    logger: ProxyInstantApplyLogger;
+}
+export interface ProxyInstantApplyHandle {
+    /** Detach the subscription. Safe to call more than once. */
+    dispose: () => void;
+}
+/**
+ * Subscribe to material proxy-config changes and rebuild the live
+ * provider when the routing verdict for the ACTIVE provider changes.
+ *
+ * Comparison is on the effective base URL, so:
+ *   - probe ticks that rewrite identical values never rebuild;
+ *   - a proxy URL change while enabled+active rebuilds (new target);
+ *   - deactivation rebuilds (proxy-rewritten → raw);
+ *   - toggling off while already direct does NOT rebuild;
+ *   - a provider/model switch between notifications re-baselines against
+ *     the PREVIOUS config — the config the switch actually built under —
+ *     and then falls through to the verdict comparison. Seeding from the
+ *     new config instead would swallow a needed rebuild: a provider that
+ *     switched in while the proxy was on (built rewritten) must rebuild
+ *     direct when the very next change deactivates the proxy.
+ *
+ * Rebuilds are SERIALIZED: a toggle-off immediately followed by a probe
+ * verdict must not race two async rebuilds against each other — the
+ * slower, stale build could overwrite the fresh provider swap. Each
+ * rebuild re-reads proxy state at build time, so the chain converges on
+ * the latest verdict.
+ */
+export declare function createProxyInstantApply(deps: ProxyInstantApplyDeps): ProxyInstantApplyHandle;
 //# sourceMappingURL=proxy-rewrite.d.ts.map

package/dist/wiring/proxy-rewrite.js

@@ -41,6 +41,13 @@ var currentConfig = { ...DEFAULT_PROXY_CONFIG };
 function getProxyConfig() {
   return currentConfig;
 }
+var listeners = /* @__PURE__ */ new Set();
+function subscribeToProxyConfig(listener) {
+  listeners.add(listener);
+  return () => {
+    listeners.delete(listener);
+  };
+}
 function applyProxyConfig(next) {
   const previous = currentConfig;
   currentConfig = {
@@ -48,6 +55,15 @@ function applyProxyConfig(next) {
     url: next.url ?? previous.url,
     active: next.active ?? previous.active
   };
+  const materialChange = currentConfig.enabled !== previous.enabled || currentConfig.url !== previous.url || currentConfig.active !== previous.active;
+  if (materialChange) {
+    for (const listener of listeners) {
+      try {
+        listener(currentConfig, previous);
+      } catch {
+      }
+    }
+  }
   return previous;
 }
 function shouldRewriteFor(providerId) {
@@ -57,14 +73,60 @@ function shouldRewriteFor(providerId) {
 }
 function __resetProxyConfigForTests() {
   currentConfig = { ...DEFAULT_PROXY_CONFIG };
+  listeners.clear();
+}
+function effectiveBaseUrlFor(cfg, providerId, rawBaseUrl) {
+  if (!rawBaseUrl) return void 0;
+  const active = cfg.enabled && cfg.active && !!cfg.url && isProxyEligible(providerId);
+  return active ? rewriteBaseUrl(rawBaseUrl, cfg.url) : rawBaseUrl;
+}
+function effectiveBaseUrl(providerId, rawBaseUrl) {
+  return effectiveBaseUrlFor(currentConfig, providerId, rawBaseUrl);
+}
+function createProxyInstantApply(deps) {
+  const { getActiveProviderId, getRawBaseUrl, rebuildProvider, logger } = deps;
+  let lastProviderId = getActiveProviderId();
+  let lastEffectiveUrl = effectiveBaseUrl(lastProviderId, getRawBaseUrl(lastProviderId));
+  let disposed = false;
+  let rebuildChain = Promise.resolve();
+  const unsubscribe = subscribeToProxyConfig((next, previous) => {
+    if (disposed) return;
+    const providerId = getActiveProviderId();
+    const raw = getRawBaseUrl(providerId);
+    const nextUrl = effectiveBaseUrlFor(next, providerId, raw);
+    const baselineUrl = providerId === lastProviderId ? lastEffectiveUrl : effectiveBaseUrlFor(previous, providerId, raw);
+    lastProviderId = providerId;
+    lastEffectiveUrl = nextUrl;
+    if (nextUrl === baselineUrl) return;
+    rebuildChain = rebuildChain.then(() => rebuildProvider(providerId)).then(() => {
+      if (!disposed) {
+        logger.info(`WrongProxy routing changed \u2014 live provider rebuilt (${providerId})`);
+      }
+    }).catch((err) => {
+      if (!disposed) {
+        logger.warn(
+          `WrongProxy instant-apply: provider rebuild failed for ${providerId}: ${err instanceof Error ? err.message : String(err)}`
+        );
+      }
+    });
+  });
+  return {
+    dispose() {
+      if (disposed) return;
+      disposed = true;
+      unsubscribe();
+    }
+  };
 }
 export {
   PROXY_EXCLUDED_PROVIDERS,
   __resetProxyConfigForTests,
   applyProxyConfig,
+  createProxyInstantApply,
   getProxyConfig,
   isProxyEligible,
   rewriteBaseUrl,
-  shouldRewriteFor
+  shouldRewriteFor,
+  subscribeToProxyConfig
 };
 //# sourceMappingURL=proxy-rewrite.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/core",
-  "version": "0.310.1",
+  "version": "0.313.0",
   "license": "MIT",
   "description": "WrongStack core: kernel, types, and shared utilities for the WrongStack CLI agent.",
   "repository": {
@@ -182,9 +182,9 @@
   "wrongstackApiVersion": "0.1.10",
   "dependencies": {
     "zod": "4.4.3",
-    "@wrongstack/primitives": "0.310.1",
-    "@wrongstack/kanban": "0.310.1",
-    "@wrongstack/persistence": "0.310.1"
+    "@wrongstack/kanban": "0.313.0",
+    "@wrongstack/primitives": "0.313.0",
+    "@wrongstack/persistence": "0.313.0"
   },
   "devDependencies": {
     "@types/node": "^22.19.0",