@wrongstack/core 0.4.0 → 0.5.0

package/dist/{system-prompt-DNetCecu.d.ts → system-prompt-CzY1zrbC.d.ts}

@@ -1,4 +1,4 @@
-import { T as TextBlock, b as ContentBlock, u as Tool } from './context-B1kBj1lY.js';
+import { T as TextBlock, b as ContentBlock, u as Tool } from './context-P207fTpo.js';
 
 /**
  * Container — dependency injection with explicit bind / override / decorate.

package/dist/{tool-executor-B5bgmEgE.d.ts → tool-executor-CYe5cp5U.d.ts}

@@ -1,8 +1,8 @@
-import { a0 as Context, h as ProviderError, u as Tool, D as ToolUseBlock, z as ToolResultBlock } from './context-B1kBj1lY.js';
-import { a as Compactor, C as CompactReport } from './compactor-CFky6JKM.js';
-import { c as RecoveryDecision, E as ErrorHandler, R as RetryPolicy } from './skill-DayhFUBb.js';
+import { a0 as Context, h as ProviderError, u as Tool, D as ToolUseBlock, z as ToolResultBlock } from './context-P207fTpo.js';
+import { a as Compactor, C as CompactReport } from './compactor-CTHjZAwf.js';
+import { a as RecoveryDecision, E as ErrorHandler, R as RetryPolicy } from './retry-policy-CnYVKGPv.js';
 import { M as ModelsRegistry } from './models-registry-Y2xbog0E.js';
-import { k as ToolExecutorOptions, l as ToolExecutorStrategy, m as ToolBatchResult } from './index-meJRuQtc.js';
+import { k as ToolExecutorOptions, l as ToolExecutorStrategy, m as ToolBatchResult } from './index-BNzUUDVR.js';
 
 interface CompactorOptions {
     preserveK?: number;

package/dist/types/index.d.ts

@@ -1,26 +1,27 @@
-export { A as AgentError, C as Capabilities, a as ConfigError, b as ContentBlock, E as ErrorCode, c as ErrorSeverity, d as ErrorSubsystem, I as ImageBlock, J as JSONSchema, M as Message, e as MessageRole, P as Permission, f as PluginError, g as Provider, h as ProviderError, i as ProviderErrorBody, R as Request, j as Response, k as ResumedSession, S as SessionData, l as SessionError, m as SessionEvent, n as SessionMetadata, o as SessionStore, p as SessionSummary, q as SessionWriter, r as StopReason, s as StreamEvent, T as TextBlock, t as ThinkingBlock, u as Tool, v as ToolCallContext, w as ToolError, x as ToolFinalEvent, y as ToolProgressEvent, z as ToolResultBlock, B as ToolStreamEvent, D as ToolUseBlock, U as Usage, W as WrongStackError, F as asBlocks, G as asText, H as isAgentError, K as isConfigError, L as isImageBlock, N as isPluginError, O as isSessionError, Q as isTextBlock, V as isThinkingBlock, X as isToolError, Y as isToolResultBlock, Z as isToolUseBlock, _ as isWrongStackError, $ as toWrongStackError } from '../context-B1kBj1lY.js';
-export { P as ProviderRunner, R as RunProviderOptions } from '../provider-runner-CU9gnU2E.js';
-export { C as CONTEXT_WINDOW_MODES, a as Config, b as ConfigLoader, c as ConfigStore, d as ContextConfig, e as ContextWindowAggressiveOn, f as ContextWindowConfigLike, g as ContextWindowMode, h as ContextWindowModeId, i as ContextWindowPolicy, j as ContextWindowThresholds, D as DEFAULT_CONTEXT_WINDOW_MODE_ID, F as FeaturesConfig, L as LogConfig, M as MCPServerConfig, P as PluginConfig, k as ProviderApiKey, l as ProviderConfig, T as ToolsConfig, m as formatContextWindowModeList, n as getContextWindowMode, o as isContextWindowModeId, p as listContextWindowModes, r as resolveContextWindowPolicy } from '../config-RlhKLjme.js';
-export { C as CompactReport, a as Compactor } from '../compactor-CFky6JKM.js';
-export { P as PermissionDecision, a as PermissionPolicy, T as TrustPolicy } from '../secret-scrubber-DyUAWS09.js';
-export { A as AddAttachmentInput, a as Attachment, b as AttachmentKind, c as AttachmentMeta, d as AttachmentRef, e as AttachmentStore, D as DefaultSessionReader } from '../session-reader-D-z0AgHs.js';
-export { D as DefaultSecretScrubber, a as DefaultSecretVault, S as SecretVaultOptions, d as decryptConfigSecrets, e as encryptConfigSecrets, m as migratePlaintextSecrets, r as rewriteConfigEncrypted } from '../secret-scrubber-Dyh5LVYL.js';
+export { A as AgentError, C as Capabilities, a as ConfigError, b as ContentBlock, E as ErrorCode, c as ErrorSeverity, d as ErrorSubsystem, I as ImageBlock, J as JSONSchema, M as Message, e as MessageRole, P as Permission, f as PluginError, g as Provider, h as ProviderError, i as ProviderErrorBody, R as Request, j as Response, k as ResumedSession, S as SessionData, l as SessionError, m as SessionEvent, n as SessionMetadata, o as SessionStore, p as SessionSummary, q as SessionWriter, r as StopReason, s as StreamEvent, T as TextBlock, t as ThinkingBlock, u as Tool, v as ToolCallContext, w as ToolError, x as ToolFinalEvent, y as ToolProgressEvent, z as ToolResultBlock, B as ToolStreamEvent, D as ToolUseBlock, U as Usage, W as WrongStackError, F as asBlocks, G as asText, H as isAgentError, K as isConfigError, L as isImageBlock, N as isPluginError, O as isSessionError, Q as isTextBlock, V as isThinkingBlock, X as isToolError, Y as isToolResultBlock, Z as isToolUseBlock, _ as isWrongStackError, $ as toWrongStackError } from '../context-P207fTpo.js';
+export { P as ProviderRunner, R as RunProviderOptions } from '../provider-runner-D7lHu07L.js';
+export { C as CONTEXT_WINDOW_MODES, a as Config, b as ConfigLoader, c as ConfigStore, d as ContextConfig, e as ContextWindowAggressiveOn, f as ContextWindowConfigLike, g as ContextWindowMode, h as ContextWindowModeId, i as ContextWindowPolicy, j as ContextWindowThresholds, D as DEFAULT_CONTEXT_WINDOW_MODE_ID, F as FeaturesConfig, L as LogConfig, M as MCPServerConfig, P as PluginConfig, k as ProviderApiKey, l as ProviderConfig, T as ToolsConfig, m as formatContextWindowModeList, n as getContextWindowMode, o as isContextWindowModeId, p as listContextWindowModes, r as resolveContextWindowPolicy } from '../config-DO2eCKgq.js';
+export { C as CompactReport, a as Compactor } from '../compactor-CTHjZAwf.js';
+export { P as PermissionDecision, a as PermissionPolicy, T as TrustPolicy } from '../secret-scrubber-Buo9zLGs.js';
+export { A as AddAttachmentInput, a as Attachment, b as AttachmentKind, c as AttachmentMeta, d as AttachmentRef, e as AttachmentStore, D as DefaultSessionReader } from '../session-reader-DmOEmSkq.js';
+export { D as DefaultSecretScrubber, a as DefaultSecretVault, S as SecretVaultOptions, d as decryptConfigSecrets, e as encryptConfigSecrets, m as migratePlaintextSecrets, r as rewriteConfigEncrypted } from '../secret-scrubber-BSgec8CU.js';
 export { D as DefaultLogger, a as DefaultLoggerOptions } from '../logger-BH6AE0W9.js';
-export { D as DefaultPathResolver, a as DefaultTokenCounter } from '../path-resolver-Bg4OP5fi.js';
+export { D as DefaultPathResolver, a as DefaultTokenCounter } from '../path-resolver-mPccVA0l.js';
 export { M as MemoryEntry, a as MemoryScope, b as MemoryStore } from '../memory-CEXuo7sz.js';
-export { C as CompactorOptions, D as DEFAULT_RECOVERY_STRATEGIES, a as DefaultErrorHandler, b as DefaultRetryPolicy, H as HybridCompactor, R as RecoveryStrategy, T as ToolExecutor, c as buildRecoveryStrategies } from '../tool-executor-B5bgmEgE.js';
-export { S as SkillEntry, a as SkillLoader, b as SkillManifest } from '../skill-DayhFUBb.js';
-export { B as BuildContext, M as ModelCapabilities, R as Renderer, S as SystemPromptBuilder } from '../system-prompt-DNetCecu.js';
+export { C as CompactorOptions, D as DEFAULT_RECOVERY_STRATEGIES, a as DefaultErrorHandler, b as DefaultRetryPolicy, H as HybridCompactor, R as RecoveryStrategy, T as ToolExecutor, c as buildRecoveryStrategies } from '../tool-executor-CYe5cp5U.js';
+export { S as SkillEntry, a as SkillLoader, b as SkillManifest } from '../skill-CxuWrsKK.js';
+export { B as BuildContext, M as ModelCapabilities, R as Renderer, S as SystemPromptBuilder } from '../system-prompt-CzY1zrbC.js';
 export { I as InputReader, P as PromptOption } from '../input-reader-E-ffP2ee.js';
-export { M as MCPRegistryView, a as MetricsSinkView, P as Plugin, b as PluginAPI, c as PluginCapabilities, d as PluginDependency, e as PluginPipelines, f as ProviderFactory, g as ProviderRegistryView, S as SessionWriterView, h as SlashCommand, i as SlashCommandRegistryView, j as SystemPromptContributor, T as ToolRegistryView } from '../index-meJRuQtc.js';
+export { M as MCPRegistryView, a as MetricsSinkView, P as Plugin, b as PluginAPI, c as PluginCapabilities, d as PluginDependency, e as PluginPipelines, f as ProviderFactory, g as ProviderRegistryView, S as SessionWriterView, h as SlashCommand, i as SlashCommandRegistryView, j as SystemPromptContributor, T as ToolRegistryView } from '../index-BNzUUDVR.js';
 export { D as DefaultModelsRegistry, a as DefaultModelsRegistryOptions, c as classifyFamily } from '../models-registry-DqzwpBQy.js';
 export { D as DEFAULT_MODES, M as Mode, a as ModeConfig, b as ModeManifest, c as ModeStore } from '../mode-CV077NjV.js';
-export { I as InMemoryAgentBridge, a as InMemoryBridgeTransport, c as createMessage } from '../agent-bridge-DaOnnHNW.js';
-export { C as CoordinatorEvents, a as CoordinatorStatus, D as DoneCondition, M as MultiAgentConfig, b as MultiAgentCoordinator, S as SpawnResult, c as SubagentConfig, d as SubagentContext, e as SubagentError, f as SubagentErrorKind, g as SubagentRunContext, h as SubagentRunOutcome, i as SubagentRunner, T as TaskDelegation, j as TaskResult, k as TaskSpec } from '../multi-agent-D5m66hzB.js';
+export { I as InMemoryAgentBridge, a as InMemoryBridgeTransport, c as createMessage } from '../agent-bridge-BkjOkSkD.js';
+export { C as CoordinatorEvents, a as CoordinatorStatus, D as DoneCondition, M as MultiAgentConfig, b as MultiAgentCoordinator, S as SpawnResult, c as SubagentConfig, d as SubagentContext, e as SubagentError, f as SubagentErrorKind, g as SubagentRunContext, h as SubagentRunOutcome, i as SubagentRunner, T as TaskDelegation, j as TaskResult, k as TaskSpec } from '../multi-agent-B1Nn9eC0.js';
 export { C as CriticalPathResult, D as DEFAULT_SPEC_TEMPLATE, S as SpecAnalysis, a as SpecApiEndpoint, b as SpecRequirement, c as SpecSection, d as SpecSectionType, e as SpecStatus, f as SpecTemplate, g as SpecValidationResult, h as Specification, T as TaskAssignment, i as TaskDependency, j as TaskEdge, k as TaskFilter, l as TaskGraph, m as TaskNode, n as TaskPriority, o as TaskProgress, p as TaskSort, q as TaskStatus, r as TaskType, s as computeTaskProgress, t as findCriticalPath, u as topologicalSort } from '../task-graph-BITvWt4t.js';
 export { A as AggregateHealth, H as HealthCheck, a as HealthCheckResult, b as HealthRegistry, c as HealthStatus, M as MetricLabels, d as MetricSeries, e as MetricsSink, f as MetricsSnapshot, S as Span, T as Tracer } from '../observability-BhnVLBLS.js';
-import '../events-BBaKeMfb.js';
+import '../events-DYAbU84e.js';
 import '../logger-BMQgxvdy.js';
+import '../retry-policy-CnYVKGPv.js';
 import '../models-registry-Y2xbog0E.js';
 import '../secret-vault-DoISxaKO.js';
 import '../path-resolver-CPRj4bFY.js';

package/dist/types/index.js

@@ -393,7 +393,7 @@ function walkCount(node, vault, counter) {
   if (Array.isArray(node)) {
     return node.map((item) => walkCount(item, vault, counter));
   }
-  const out = {};
+  const out = /* @__PURE__ */ Object.create(null);
   for (const [k, v] of Object.entries(node)) {
     if (typeof v === "string" && isSecretField(k) && !vault.isEncrypted(v) && v.length > 0) {
       out[k] = vault.encrypt(v);
@@ -406,7 +406,15 @@ function walkCount(node, vault, counter) {
   }
   return out;
 }
-var FORBIDDEN_PROTO_KEYS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
+var FORBIDDEN_PROTO_KEYS = /* @__PURE__ */ new Set([
+  "__proto__",
+  "constructor",
+  "prototype",
+  "__defineGetter__",
+  "__defineSetter__",
+  "__lookupGetter__",
+  "__lookupSetter__"
+]);
 function deepMerge(a, b) {
   const out = { ...a };
   for (const [k, v] of Object.entries(b)) {
@@ -553,6 +561,9 @@ var DefaultTokenCounter = class {
   providerId;
   events;
   priceCache = /* @__PURE__ */ new Map();
+  /** Most recently accounted request's tokens. Used for per-request context pressure. */
+  lastInput = 0;
+  lastCacheRead = 0;
   constructor(opts = {}) {
     this.registry = opts.registry;
     this.providerId = opts.providerId;
@@ -563,6 +574,8 @@ var DefaultTokenCounter = class {
     this.output += usage.output;
     this.cacheRead += usage.cacheRead ?? 0;
     this.cacheWrite += usage.cacheWrite ?? 0;
+    this.lastInput = usage.input;
+    this.lastCacheRead = usage.cacheRead ?? 0;
     const price = model ? this.priceCache.get(model) : void 0;
     if (price) {
       this.applyPrice(usage, price);
@@ -585,6 +598,8 @@ var DefaultTokenCounter = class {
     this.output += usage.output;
     this.cacheRead += usage.cacheRead ?? 0;
     this.cacheWrite += usage.cacheWrite ?? 0;
+    this.lastInput = usage.input;
+    this.lastCacheRead = usage.cacheRead ?? 0;
     const price = priceFromModel(resolved);
     this.priceCache.set(resolved.modelId, price);
     this.applyPrice(usage, price);
@@ -597,6 +612,9 @@ var DefaultTokenCounter = class {
       cacheWrite: this.cacheWrite
     };
   }
+  currentRequestTokens() {
+    return { input: this.lastInput, cacheRead: this.lastCacheRead };
+  }
   estimateCost() {
     return {
       input: round4(this.costInput),
@@ -1152,12 +1170,15 @@ var PATTERNS = [
   { type: "redis_uri", regex: /redis:\/\/[^\s"'`]+/g },
   {
     type: "bearer_token",
-    regex: /(?<![A-Za-z0-9_.~+/-])Bearer\s+[A-Za-z0-9._~+/-]{20,}=*(?![A-Za-z0-9_.~+/-])/g
+    // Bounded at 512 chars to prevent catastrophic backtracking on adversarial input.
+    // Negative lookahead is a simple single-char check — no backtracking risk.
+    regex: /(?<![A-Za-z0-9_.~+/-])Bearer\s+[A-Za-z0-9._~+/-]{20,512}=*(?![A-Za-z0-9_.~+/-])/g
   },
   {
     type: "high_entropy_env",
-    // Value-side word boundary + length gate to avoid matching short random strings
-    regex: /\b([A-Z_]{4,}(?:KEY|TOKEN|SECRET|PASSWORD|PWD))\s*[:=]\s*['"]?([A-Za-z0-9_/+=-]{20,})['"]?(?!\s*[A-Za-z_]{4,}(?:KEY|TOKEN|SECRET|PASSWORD|PWD))/g
+    // Value bounded at 512 chars; negative lookahead simplified to avoid
+    // nested quantifier backtracking on adversarial input.
+    regex: /\b([A-Z_]{4,}(?:KEY|TOKEN|SECRET|PASSWORD|PWD))\s*[:=]\s*['"]?([A-Za-z0-9_/+=-]{20,512})['"]?/g
   }
 ];
 var SCRUB_CHUNK_BYTES = 64 * 1024;
@@ -1572,6 +1593,112 @@ When refactoring code:
 - Keep performance in mind \u2014 don't regress`,
     tags: ["refactor", "modernization", "improvement"],
     toolPreferences: ["read", "edit", "test", "git", "grep"]
+  },
+  {
+    id: "brief",
+    name: "Brief",
+    description: "Fast, no-nonsense \u2014 get to the point",
+    prompt: `## Brief Mode
+
+You are WrongStack, a fast, no-nonsense AI coding agent.
+
+You operate inside the user's terminal. Read files, run commands, make changes \u2014 get to the point.
+
+### Operating rules
+
+1. **Read first.** Inspect relevant files before touching anything.
+2. **Edit surgically.** Use edit tool for existing files, write only for new ones.
+3. **One sentence before action.** State what you're doing, then do it. No preambles.
+4. **Say what happened.** After tool calls, one line: success, failure, or what's next.
+5. **Be honest.** Admit when you don't know or something failed. No fake progress.
+6. **Keep moving.** Task done? Stop. More work needed? State it and continue.
+
+### Decision rules
+
+- **Ambiguous task?** Ask. One question, get clarity, proceed.
+- **Clear task, unknown approach?** Pick one reasonable path, execute, report.
+- **Tool fails?** Retry once with adjusted params, then report.
+- **Permission denied?** Stop. Acknowledge. Ask what they want instead.
+- **Context filling up?** Compact proactively, don't wait.
+
+### Output style
+
+- Prose paragraphs (no bullet points unless unavoidable)
+- Code blocks for code, backticks for paths/commands
+- One-liner sufficient? One liner.
+- No "Great question!", "Here's what I did:", or similar filler.
+- Max 3 sentences per paragraph.
+
+### Focus
+
+Stay on task. Fix only what's asked. Don't refactor surrounding code unless explicitly requested. Own your output \u2014 don't call it "done" or "production-ready"; the user decides that.`,
+    tags: ["fast", "concise", "direct"],
+    toolPreferences: ["read", "edit", "bash"]
+  },
+  {
+    id: "teach",
+    name: "Teach",
+    description: "Mentor mode \u2014 explains why, not just what",
+    prompt: `## Teach Mode
+
+You are WrongStack, an expert AI coding mentor.
+
+You operate inside the user's terminal with full access to their codebase. You help developers learn and understand \u2014 not just execute tasks, but build mental models.
+
+### Teaching philosophy
+
+1. **Explain the why.** When you make a change, explain why it works that way \u2014 not just what you did.
+2. **Build mental models.** Use analogies, highlight patterns, connect new concepts to things the user already knows.
+3. **Read before teaching.** Always inspect relevant files so your explanations are accurate and specific to the actual code.
+4. **Surgical edits with context.** When editing code, explain the approach before doing it, and what trade-offs were considered.
+5. **Be thorough but not verbose.** A 2-paragraph explanation beats a 5-paragraph one. Depth without padding.
+6. **Admit knowledge gaps.** If you're unsure, say so. Speculating teaches bad patterns.
+
+### Teaching style
+
+- **Before action:** Briefly explain what you're going to do and why.
+- **After action:** Summarize what happened and what the user should take away from this.
+- **With code:** Show concrete examples, explain syntax choices, point out gotchas.
+- **With errors:** Explain why the error occurred, what it's actually complaining about, and how to avoid it in the future.
+- **General principles:** Offer them when the user's question suggests a deeper concept they'd benefit from understanding.
+
+### Decision heuristics
+
+- **Task is ambiguous?** Ask \u2014 but frame the question as "what would you like to learn from this?"
+- **Task is clear, approach is unknown?** Execute, then teach the approach as you go.
+- **Tool fails?** Explain what failed, why it failed, and how to avoid the failure.
+- **User asks "how do I...?"** Don't just give the answer \u2014 explain the underlying mechanism.
+- **Context window filling up?** Compact, but summarize what was lost so the teaching continuity isn't broken.
+
+### Output format
+
+- Use headings to structure multi-concept explanations.
+- Code blocks with brief annotations for code examples.
+- **Bold** key terms and concepts worth remembering.
+- Callouts like "Key takeaway:" or "Pattern:" to anchor learning.
+- Max 3 sentences per paragraph \u2014 readability over completeness.
+
+### Don'ts
+
+- Don't lecture condescendingly \u2014 the user is a developer, not a beginner.
+- Don't pad explanations with obvious things.
+- Don't skip the "why" \u2014 even quick tasks deserve one sentence of context.
+- Don't just say "do X" \u2014 say "do X because Y."
+- Don't leave the user hanging after a complex operation \u2014 explain what just happened.
+
+### Core principles
+
+You follow these principles, but always with explanation:
+- Read before write
+- Surgical edits over rewrites
+- Show your work (explain your reasoning, not just mechanical steps)
+- Be honest about limits
+- Format for scanability
+- Recover explicitly from failures
+
+Remember: your job is to make the user a better developer, not just to complete tasks faster.`,
+    tags: ["teaching", "mentor", "learning"],
+    toolPreferences: ["read", "edit", "explain"]
   }
 ];