@wrongstack/core 0.313.1 → 0.316.2

package/dist/observability/tool-usage-source.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Hybrid stats source for the auto-thinning pipeline. The Chronicle rollup
+ * (`tool_daily`) is the cross-session source of truth; the in-process bridge
+ * Map fills the gap when Chronicle is unavailable (no node:sqlite at runtime)
+ * or hasn't been refreshed yet. The source returns a unified
+ * `UnderusedToolCandidate[]` so the policy layer never has to branch on
+ * which backend answered.
+ *
+ * The resolver prefers Chronicle whenever it has at least one row in the
+ * requested window — even when the in-process Map also has data, because the
+ * cross-session history is what the user actually wants to thin against.
+ */
+import type { ChronicleMetricsStore } from '../chronicle/metrics-store.js';
+import type { ToolUsageSnapshot } from './event-bridge.js';
+export interface UnderusedToolCandidate {
+    /** Stable tool name. For MCP names, this is the full `mcp__server__tool` form. */
+    name: string;
+    invocations: number;
+    failures: number;
+    durationMsTotal: number;
+    /** Epoch ms; null when the tool has never been observed in the source's window. */
+    lastInvokedAt: number | null;
+    /** Calendar days since `lastInvokedAt`; null when the tool was never observed. */
+    daysSinceLastUse: number | null;
+    /** Which backend produced the row — useful for the slash command's "source" badge. */
+    source: 'chronicle' | 'in-process';
+}
+export interface UnderusedQueryOptions {
+    /** Calendar days of inactivity. Tools not invoked in this window are candidates. */
+    idleDays: number;
+    /** Tools with `invocations <= minInvocations` in the window are candidates. */
+    minInvocations: number;
+    /** Inclusive lower bound on the Chronicle day range (YYYY-MM-DD). */
+    fromDay?: string;
+    /** Inclusive upper bound on the Chronicle day range (YYYY-MM-DD). */
+    toDay?: string;
+    /** Cap on the returned candidate set. Default 500. */
+    limit?: number;
+}
+export interface ToolUsageSource {
+    kind: 'chronicle' | 'in-process';
+    candidates(opts: UnderusedQueryOptions): Promise<UnderusedToolCandidate[]>;
+    /** Force Chronicle to fold any new journal bytes before answering. */
+    refresh?(): Promise<void>;
+}
+export interface CreateToolUsageSourceDeps {
+    chronicle?: ChronicleMetricsStore | undefined;
+    bridge?: ToolUsageSnapshot | undefined;
+    /**
+     * Wall-clock anchor for "days since last use". Defaults to `Date.now()`. Tests
+     * pass a fixed value to make the boundary deterministic.
+     */
+    now?: () => number;
+}
+export declare function createToolUsageSource(deps: CreateToolUsageSourceDeps): ToolUsageSource;
+/**
+ * Apply the auto-thinning policy to a candidate set: keep only tools that
+ *   - have been seen (or never seen but the source is in-process),
+ *   - sit at or below `minInvocations` in the window, AND
+ *   - have not been invoked in the last `idleDays` days.
+ *
+ * Pure function so the policy is testable without I/O.
+ */
+export declare function filterUnderused(candidates: readonly UnderusedToolCandidate[], opts: UnderusedQueryOptions, now?: number): UnderusedToolCandidate[];
+//# sourceMappingURL=tool-usage-source.d.ts.map

package/dist/plugin/index.d.ts

@@ -13,6 +13,11 @@ export { type ParsedReviewReport, parseChimeraReviewReport, } from '../plugins/r
 export { verifyFindingsAgainstDisk, type VerifyFindingsOptions, } from '../plugins/review-finding-verification.js';
 export { persistReviewReport, type ReportIntegrationResult, updateReviewReportEvidence, } from '../plugins/review-report-integration.js';
 export { maybeCompactReviewStores, type ReviewStoreMaintenanceResult, } from '../plugins/review-store-maintenance.js';
+export { FINDING_STORE_FILE, JsonlFindingStore, resolveFindingStorePath, type FindingStore, type UpsertContext, type UpsertResult, type ListOptions as FindingListOptions, } from '../plugins/review-finding-store.js';
+export { REPORT_STORE_FILE, JsonlReportStore, resolveReportStorePath, type ReportStore, type PersistReportInput, type ListReportsOptions, } from '../plugins/review-report-store.js';
+export { syncReportCompletion, syncReportReopen, type ReportSyncResult, type ReportReopenResult, } from '../plugins/review-report-integration.js';
+export type { ChimeraFinding, ChimeraFindingLocation, ChimeraFindingOrigin, ChimeraFindingResolution, FindingCategory, FindingConfidence, FindingEventType, FindingLifecycleEvent, FindingSeverity, FindingSource, FindingStatus, FindingVerification, FindingVerificationStatus, ResolutionOutcome, } from '../plugins/review-finding-types.js';
+export type { ReportActorKind, ReportEventType, ReportLifecycleStatus, ReviewReport, ReviewReportCounts, ReviewReportEvent, ReviewReportFile, } from '../plugins/review-report-types.js';
 export { createSkillsPlugin } from '../plugins/skills-plugin.js';
 export { createSyncPlugin } from '../plugins/sync-plugin.js';
 export { createCloudConfigSyncPlugin } from '../plugins/cloud-config-sync-plugin.js';

package/dist/plugin/index.js

@@ -3,7 +3,6 @@ import {
   DefaultPluginAPI,
   KERNEL_API_VERSION,
   buildReviewerModelPool,
-  classifyChimeraReviewSource,
   createAutoReviewPlugin,
   createChimeraPlugin,
   createCloudConfigSyncPlugin,
@@ -12,23 +11,15 @@ import {
   createSyncPlugin,
   definePlugin,
   emitReviewIfChanged,
-  integrateFindings,
   loadPlugins,
-  parseChimeraReviewReport,
   parseReviewSeverity,
-  persistReviewReport,
   recordCompletedReview,
   recordStartedReview,
   selectRoundRobinReviewerAssignment,
-  unloadPlugins,
-  updateReviewReportEvidence
-} from "../chunk-I45KAW2N.js";
-import {
-  JsonlFindingStore,
-  resolveFindingStorePath
-} from "../chunk-JVGPR3TS.js";
-import "../chunk-SN2DQRL6.js";
-import "../chunk-QVOVMXJR.js";
+  unloadPlugins
+} from "../chunk-3AGWVSS7.js";
+import "../chunk-RXKSDUAU.js";
+import "../chunk-GJJGJB2R.js";
 import "../chunk-YY6APYUM.js";
 import {
   diffPluginConfig,
@@ -39,63 +30,80 @@ import {
   resolvePluginManifestConfig,
   validatePluginConfigMetadata
 } from "../chunk-3XPVB7BA.js";
-import "../chunk-ASX6AW36.js";
-import "../chunk-AT4V4XGI.js";
-import "../chunk-GAZEWQEZ.js";
-import "../chunk-JVKB2TBL.js";
-import "../chunk-GFXZTHNI.js";
+import "../chunk-LXWCMQNJ.js";
+import "../chunk-4BMVPOHO.js";
 import {
-  JsonlReportStore,
-  resolveReportStorePath
-} from "../chunk-PFXFQQRT.js";
-import "../chunk-G5AAKEEZ.js";
-import "../chunk-WQQON3SV.js";
-import "../chunk-H5E77KUJ.js";
-import "../chunk-RJIZEJ42.js";
-import "../chunk-KDQJCT2J.js";
-import "../chunk-TYW2GI5I.js";
+  classifyChimeraReviewSource,
+  integrateFindings,
+  parseChimeraReviewReport,
+  persistReviewReport,
+  syncReportCompletion,
+  syncReportReopen,
+  updateReviewReportEvidence
+} from "../chunk-YWXT3JNM.js";
+import {
+  FINDING_STORE_FILE,
+  JsonlFindingStore,
+  resolveFindingStorePath
+} from "../chunk-4LCZVJVF.js";
+import "../chunk-UJILKYES.js";
+import "../chunk-XF4VUMKW.js";
+import "../chunk-JVKB2TBL.js";
+import "../chunk-PGRVXIMY.js";
+import "../chunk-J2WRWR37.js";
 import "../chunk-LHOA5DWA.js";
-import "../chunk-GFJOMSHG.js";
-import "../chunk-QRTG4XTI.js";
+import "../chunk-LA7CLDRW.js";
+import "../chunk-WAHQVNWT.js";
 import "../chunk-EODDVJBM.js";
-import "../chunk-CQQL4ZOQ.js";
-import "../chunk-RPOA7IAE.js";
-import "../chunk-FFSX2QDQ.js";
-import "../chunk-DEIQMBD2.js";
-import "../chunk-FNXVT7HF.js";
+import "../chunk-ZT7JNIGX.js";
+import "../chunk-W5VITDM2.js";
+import "../chunk-YPT4A46F.js";
+import "../chunk-B7F4WVP4.js";
 import "../chunk-WQTOVMGV.js";
-import "../chunk-AD7ZFZCS.js";
-import "../chunk-KBZGE6LN.js";
+import "../chunk-FNXVT7HF.js";
+import "../chunk-5BMIE7QG.js";
+import "../chunk-DYLPMV4Q.js";
 import "../chunk-5S437PRC.js";
-import "../chunk-WZO23AWO.js";
+import "../chunk-MTL4O5YR.js";
+import {
+  JsonlReportStore,
+  REPORT_STORE_FILE,
+  resolveReportStorePath
+} from "../chunk-HXKZ7OBQ.js";
+import "../chunk-WP7BVANJ.js";
+import "../chunk-WQQON3SV.js";
+import "../chunk-6FHWXLPT.js";
+import "../chunk-M27LIEKV.js";
 import "../chunk-XEBHSJLT.js";
-import "../chunk-VB3H5WWB.js";
-import "../chunk-M2WF6AXG.js";
-import "../chunk-4XV6IR37.js";
+import "../chunk-6NWEVFEL.js";
+import "../chunk-LSMMOS2Z.js";
 import "../chunk-4VWO3ZXL.js";
-import "../chunk-EFEHDQGY.js";
-import "../chunk-AWNQ6ED6.js";
-import "../chunk-FSWCWSTS.js";
+import "../chunk-ZHZ2Y2DH.js";
+import "../chunk-HI3JGZR2.js";
+import "../chunk-HMLIGAU7.js";
 import "../chunk-TRT2HRWZ.js";
 import "../chunk-LX5QWLBL.js";
-import "../chunk-FAYRX2AD.js";
+import "../chunk-POOOIWE5.js";
 import {
   atomicWrite,
   withFileLock
-} from "../chunk-7ZHZE5EO.js";
+} from "../chunk-OSGLYW5J.js";
+import "../chunk-FC2ZGRF3.js";
+import "../chunk-THEGTRAG.js";
 import "../chunk-SVT4RNTR.js";
-import "../chunk-WEBMSQP2.js";
-import "../chunk-YNCVSFGF.js";
-import "../chunk-CB2HFKTP.js";
+import "../chunk-SAFHACFA.js";
+import "../chunk-RJIZEJ42.js";
+import "../chunk-KDQJCT2J.js";
+import "../chunk-VVBP6KGT.js";
 import "../chunk-KJ2ZTQSL.js";
 import "../chunk-B4AMLZPB.js";
+import "../chunk-PFZO3C6H.js";
 import "../chunk-O37BQ65S.js";
 import {
   ERROR_CODES,
   FsError
-} from "../chunk-WOEZV3Q4.js";
+} from "../chunk-25LSLC3G.js";
 import "../chunk-TBRL2RCC.js";
-import "../chunk-PFZO3C6H.js";
 
 // src/plugin/discovery.ts
 var DEFAULT_PLUGIN_DISCOVERY_IO = {
@@ -670,7 +678,11 @@ export {
   CHIMERA_REVIEW_PROMPT,
   DEFAULT_PLUGIN_DISCOVERY_IO,
   DefaultPluginAPI,
+  FINDING_STORE_FILE,
+  JsonlFindingStore,
+  JsonlReportStore,
   KERNEL_API_VERSION,
+  REPORT_STORE_FILE,
   buildReviewerModelPool,
   classifyChimeraReviewSource,
   createAutoReviewPlugin,
@@ -698,12 +710,16 @@ export {
   recordCompletedReview,
   recordStartedReview,
   redactPluginConfig,
+  resolveFindingStorePath,
   resolvePluginConfig,
   resolvePluginEnablement,
   resolvePluginEntryPath,
   resolvePluginManifestConfig,
   resolvePluginTarget,
+  resolveReportStorePath,
   selectRoundRobinReviewerAssignment,
+  syncReportCompletion,
+  syncReportReopen,
   unloadPlugins,
   unpinPluginTrust,
   updateReviewReportEvidence,

package/dist/plugins/auto-review-plugin.d.ts

@@ -1,5 +1,6 @@
 import type { Plugin } from '../types/plugin.js';
-import { type AutoReviewConfig, buildReviewerModelPool, decideCascadeAgents, parseReviewSeverity, resolveAutoReviewConfig, type ResolvedAutoReviewConfig, type ReviewerModelAssignment, selectRoundRobinReviewerAssignment, severitiesFromFindings, shouldCascade, trimKnownFingerprints } from './auto-review-config.js';
-export { buildReviewerModelPool, decideCascadeAgents, parseReviewSeverity, resolveAutoReviewConfig, selectRoundRobinReviewerAssignment, severitiesFromFindings, shouldCascade, trimKnownFingerprints, type AutoReviewConfig, type ResolvedAutoReviewConfig, type ReviewerModelAssignment, };
+import { buildReviewerModelPool, decideCascadeAgents, parseReviewSeverity, resolveAutoReviewConfig, type ReviewerModelAssignment, selectRoundRobinReviewerAssignment, severitiesFromFindings, shouldCascade, trimKnownFingerprints } from './auto-review-config.js';
+export type { ReviewerModelAssignment };
+export { buildReviewerModelPool, decideCascadeAgents, parseReviewSeverity, resolveAutoReviewConfig, selectRoundRobinReviewerAssignment, severitiesFromFindings, shouldCascade, trimKnownFingerprints };
 export declare function createAutoReviewPlugin(): Plugin;
 //# sourceMappingURL=auto-review-plugin.d.ts.map

package/dist/plugins/review-finding-commands.d.ts

@@ -6,7 +6,6 @@
  *
  * @module review-finding-commands
  */
-import type { ReviewReport } from './review-report-types.js';
 /**
  * Run the review findings command.
  *
@@ -25,12 +24,6 @@ export interface FindingCommandContext {
  * Execute a finding-store command.
  */
 export declare function executeFindingCommand(args: string[], ctx: FindingCommandContext): Promise<string>;
-declare function loadReportStore(ctx: FindingCommandContext): Promise<import("./review-report-store.js").JsonlReportStore>;
-/**
- * Resolve a report by exact ID or short-ID prefix (≥8 chars).
- * Exported for integration testing.
- */
-export declare function resolveReportId(store: Awaited<ReturnType<typeof loadReportStore>>, id: string): Promise<ReviewReport | null>;
 /**
  * Manually transition a report's lifecycle.
  *
@@ -41,5 +34,4 @@ export declare function resolveReportId(store: Awaited<ReturnType<typeof loadRep
  * Maps to: complete → completed, skip → skipped, action → actioned.
  */
 export declare function transitionReport(id: string, action: 'complete' | 'skip' | 'action', extraArgs: string[], ctx: FindingCommandContext): Promise<string>;
-export {};
 //# sourceMappingURL=review-finding-commands.d.ts.map

package/dist/{review-finding-store-DKAV3AS6.js → plugins/review-finding-store.js}

@@ -5,11 +5,12 @@ import {
   FINDING_STORE_FILE,
   JsonlFindingStore,
   resolveFindingStorePath
-} from "./chunk-JVGPR3TS.js";
-import "./chunk-H5E77KUJ.js";
-import "./chunk-7ZHZE5EO.js";
-import "./chunk-WOEZV3Q4.js";
-import "./chunk-TBRL2RCC.js";
+} from "../chunk-4LCZVJVF.js";
+import "../chunk-UJILKYES.js";
+import "../chunk-6FHWXLPT.js";
+import "../chunk-OSGLYW5J.js";
+import "../chunk-25LSLC3G.js";
+import "../chunk-TBRL2RCC.js";
 export {
   FINDING_DEFAULT_PAGE_SIZE,
   FINDING_IGNORED_RETENTION_MS,
@@ -18,4 +19,4 @@ export {
   JsonlFindingStore,
   resolveFindingStorePath
 };
-//# sourceMappingURL=review-finding-store-DKAV3AS6.js.map
+//# sourceMappingURL=review-finding-store.js.map

package/dist/plugins/review-finding-types.js

@@ -0,0 +1,19 @@
+import {
+  FindingNotFoundError,
+  FindingStoreLockError,
+  InvalidTransitionError,
+  computeFindingFingerprint,
+  normalizeFingerprintTitle,
+  validateResolution,
+  validateTransition
+} from "../chunk-UJILKYES.js";
+export {
+  FindingNotFoundError,
+  FindingStoreLockError,
+  InvalidTransitionError,
+  computeFindingFingerprint,
+  normalizeFingerprintTitle,
+  validateResolution,
+  validateTransition
+};
+//# sourceMappingURL=review-finding-types.js.map

package/dist/plugins/review-report-integration.js

@@ -0,0 +1,21 @@
+import {
+  persistReviewReport,
+  syncReportCompletion,
+  syncReportReopen,
+  updateReviewReportEvidence
+} from "../chunk-YWXT3JNM.js";
+import "../chunk-4LCZVJVF.js";
+import "../chunk-UJILKYES.js";
+import "../chunk-HXKZ7OBQ.js";
+import "../chunk-WP7BVANJ.js";
+import "../chunk-6FHWXLPT.js";
+import "../chunk-OSGLYW5J.js";
+import "../chunk-25LSLC3G.js";
+import "../chunk-TBRL2RCC.js";
+export {
+  persistReviewReport,
+  syncReportCompletion,
+  syncReportReopen,
+  updateReviewReportEvidence
+};
+//# sourceMappingURL=review-report-integration.js.map

package/dist/{review-report-store-OWY3EC3N.js → plugins/review-report-store.js}

@@ -4,11 +4,12 @@ import {
   REPORT_RETENTION_MS,
   REPORT_STORE_FILE,
   resolveReportStorePath
-} from "./chunk-PFXFQQRT.js";
-import "./chunk-H5E77KUJ.js";
-import "./chunk-7ZHZE5EO.js";
-import "./chunk-WOEZV3Q4.js";
-import "./chunk-TBRL2RCC.js";
+} from "../chunk-HXKZ7OBQ.js";
+import "../chunk-WP7BVANJ.js";
+import "../chunk-6FHWXLPT.js";
+import "../chunk-OSGLYW5J.js";
+import "../chunk-25LSLC3G.js";
+import "../chunk-TBRL2RCC.js";
 export {
   JsonlReportStore,
   REPORT_DEFAULT_PAGE_SIZE,
@@ -16,4 +17,4 @@ export {
   REPORT_STORE_FILE,
   resolveReportStorePath
 };
-//# sourceMappingURL=review-report-store-OWY3EC3N.js.map
+//# sourceMappingURL=review-report-store.js.map

package/dist/plugins/review-report-types.js

@@ -0,0 +1,13 @@
+import {
+  InvalidReportTransitionError,
+  ReportNotFoundError,
+  reportEventTypeFor,
+  validateReportTransition
+} from "../chunk-WP7BVANJ.js";
+export {
+  InvalidReportTransitionError,
+  ReportNotFoundError,
+  reportEventTypeFor,
+  validateReportTransition
+};
+//# sourceMappingURL=review-report-types.js.map

package/dist/prompts/index.js

@@ -1,17 +1,17 @@
 import {
   PromptInstaller,
   PromptManifestStore
-} from "../chunk-JJPMWPB6.js";
+} from "../chunk-PISBFBJN.js";
 import {
   PROMPT_JOURNAL_RAW_MARKER,
   ensureGitignore,
   getPromptJournalEntries,
   recordPromptJournalEntry
-} from "../chunk-YUPMXOGP.js";
-import "../chunk-3E244UDA.js";
+} from "../chunk-RFQMOKWK.js";
+import "../chunk-QSTSJOCK.js";
+import "../chunk-OSGLYW5J.js";
 import "../chunk-IYFBFX34.js";
-import "../chunk-7ZHZE5EO.js";
-import "../chunk-WOEZV3Q4.js";
+import "../chunk-25LSLC3G.js";
 import "../chunk-TBRL2RCC.js";
 export {
   PROMPT_JOURNAL_RAW_MARKER,

package/dist/registry/index.js

@@ -2,10 +2,10 @@ import {
   ProviderRegistry,
   SlashCommandRegistry,
   ToolRegistry
-} from "../chunk-KI4L2DUL.js";
+} from "../chunk-TCCHINEF.js";
 import "../chunk-WQTOVMGV.js";
-import "../chunk-FSWCWSTS.js";
-import "../chunk-WOEZV3Q4.js";
+import "../chunk-HMLIGAU7.js";
+import "../chunk-25LSLC3G.js";
 import "../chunk-TBRL2RCC.js";
 export {
   ProviderRegistry,

package/dist/registry/tool-registry.d.ts

@@ -1,4 +1,5 @@
-import type { ToolDescriptionMode, ToolDescriptionModeConfig } from '../types/config.js';
+import type { EventBus } from '../kernel/events.js';
+import type { DisabledToolMeta, ToolDescriptionMode, ToolDescriptionModeConfig } from '../types/config.js';
 import type { Tool } from '../types/tool.js';
 /**
  * A function that wraps (decorates) an existing tool. Receives the
@@ -26,11 +27,20 @@ export declare class ToolRegistry {
     private readonly tools;
     private readonly descriptionModes;
     /**
-     * Set of tool names that are disabled (hidden from list(), get() and all
-     * other public accessors). The underlying tool data stays in `_tools` so
-     * re-enable is a constant-time operation.
+     * Disabled tool names plus the audit-trail metadata explaining WHY each
+     * one was disabled. `user` is the historical default (manual
+     * `/tool disable`); `auto-thinned` is the new path the auto-thinning
+     * pipeline writes so `/tool autothin undo` can restore the right subset.
+     * The underlying tool data stays in `_tools` so re-enable is constant-time.
      */
     private readonly _disabled;
+    /**
+     * Optional EventBus used by `thinUnderused()` to emit `tool.thinned`.
+     * Set via `setEventBus()` at boot — optional so the registry stays
+     * usable in pure unit tests and in code paths that never run the
+     * auto-thinning pipeline.
+     */
+    private _events;
     /** Monotonic version bumped on every registry mutation. */
     private _version;
     /** Cached `list()` result, frozen after build. Invalidated on _version change. */
@@ -99,16 +109,26 @@ export declare class ToolRegistry {
     };
     get(name: string): Tool | undefined;
     ownerOf(name: string): string | undefined;
+    /** Attach the EventBus so `thinUnderused()` can emit `tool.thinned`.
+     *  Idempotent; safe to call multiple times at boot. */
+    setEventBus(events: EventBus | undefined): void;
     /**
      * Disable a tool by name. The tool is removed from all public accessors
      * (list(), get(), listByCategory(), listWithOwner()) so it does NOT
      * appear in the system prompt or provider request. The underlying
      * registration is preserved in memory — use `enable()` to restore it.
      *
+     * `reason` defaults to `'user'` for backward compatibility — every
+     * historical caller (CLI `/tool disable`, WebUI, subagent filter)
+     * writes a user-authored disable. The auto-thinning pipeline always
+     * passes `'auto-thinned'`.
+     *
      * @returns `true` if the tool was found and disabled; `false` if the
      *          tool is not registered or is already disabled.
      */
-    disable(name: string): boolean;
+    disable(name: string, reason?: 'user' | 'auto-thinned', meta?: {
+        caller?: string;
+    }): boolean;
     /**
      * Re-enable a previously disabled tool. The tool reappears in all
      * public accessors and will be included in the next system prompt /
@@ -123,24 +143,54 @@ export declare class ToolRegistry {
      * of tools that were re-enabled.
      */
     enableAll(): number;
+    /**
+     * Re-enable only the tools that were disabled by the auto-thinning
+     * pipeline (`reason === 'auto-thinned'` in `disabledToolMeta`). Manual
+     * user disables are preserved. Returns the names that were re-enabled.
+     */
+    enableAutoThinned(): string[];
     /**
      * Check whether a tool is currently disabled.
      */
     isDisabled(name: string): boolean;
+    /** Return the audit-trail metadata for a disabled tool, if any. */
+    disabledMeta(name: string): DisabledToolMeta | undefined;
     /**
      * Apply a list of tool names to disable. Tools not in the registry
      * are silently ignored so config can reference future tools without
-     * error. Returns the number of tools actually disabled.
+     * error. Returns the number of tools actually disabled. Always
+     * tagged `reason: 'user'` — the auto-thinning pipeline uses
+     * `thinUnderused()` instead.
      */
     applyDisabled(names: readonly string[]): number;
     /**
-     * Return the list of all disabled tool entries (tool + owner). Useful
-     * for the /tools slash command to show disabled tools alongside
-     * enabled ones.
+     * Apply the audit-trail metadata for a previously-disabled tool.
+     * Used at boot to restore `disabledToolMeta` (so the auto-thinned
+     * decision survives a restart). Does NOT mutate the disabled set
+     * itself — pair with `applyDisabled()` on the same names.
+     */
+    applyDisabledMeta(meta: Readonly<Record<string, DisabledToolMeta>>): number;
+    /**
+     * Disable every name in `candidates` that is currently registered and
+     * not already disabled, tagged with `reason: 'auto-thinned'`. Emits
+     * a `tool.thinned` event with the names that actually flipped.
+     *
+     * @returns `{ thinned, skipped }` so the caller can persist the
+     *  decision to `disabledToolMeta` and report what was changed.
+     */
+    thinUnderused(candidates: readonly string[], caller: string): {
+        thinned: string[];
+        skipped: string[];
+    };
+    /**
+     * Return the list of all disabled tool entries (tool + owner + reason).
+     * Useful for the /tools slash command to show disabled tools alongside
+     * enabled ones, and for `/tool autothin status` to count the auto-thinned subset.
      */
     listDisabled(): {
         tool: Tool;
         owner: string;
+        meta: DisabledToolMeta;
     }[];
     list(): Tool[];
     /** Replace the direct provider surface. Pass `undefined` to expose the catalog. */

package/dist/{registry-R23UBE7H.js → registry-7N4O3E7W.js}

@@ -2,13 +2,13 @@ import {
   ProjectSessionRegistry,
   getProjectSessionRegistry,
   hasProjectSessionRegistry
-} from "./chunk-YBUJCZ57.js";
-import "./chunk-52RTVH4M.js";
-import "./chunk-E6I5RXVK.js";
-import "./chunk-FAYRX2AD.js";
+} from "./chunk-4I7HGVVA.js";
+import "./chunk-F3JWNST7.js";
+import "./chunk-AYW5YINX.js";
+import "./chunk-POOOIWE5.js";
 export {
   ProjectSessionRegistry,
   getProjectSessionRegistry,
   hasProjectSessionRegistry
 };
-//# sourceMappingURL=registry-R23UBE7H.js.map
+//# sourceMappingURL=registry-7N4O3E7W.js.map

package/dist/security/capabilities.d.ts

@@ -45,6 +45,12 @@ export declare const ToolCapabilities: {
     readonly NET_OUTBOUND: 'net.outbound';
     /** Can mutate in-memory session todos only. */
     readonly SESSION_TODO: 'session.todo';
+    /**
+     * Can post an ephemeral same-session note to the leader or a peer
+     * (`session_note` / `session.note`). In-process only — not the durable
+     * cross-session mailbox (`coordination.mail`).
+     */
+    readonly SESSION_NOTE: 'session.note';
     /** Can park after-task `<nextsteps>` suggestions for the current turn. */
     readonly SESSION_NEXTSTEPS: 'session.nextsteps';
     /** Can mutate in-memory session mode only. */

package/dist/security/file-permissions.d.ts

@@ -14,5 +14,5 @@
  *
  * @module security/file-permissions
  */
-export { restrictDirPermissions, restrictFilePermissions, SECRET_DIR_MODE, SECRET_FILE_MODE, type RestrictPermissionsOptions, } from '@wrongstack/persistence';
+export { restrictDirPermissions, restrictFilePermissions, SECRET_DIR_MODE, SECRET_FILE_MODE } from '@wrongstack/persistence';
 //# sourceMappingURL=file-permissions.d.ts.map