@wrongstack/core 0.5.2 → 0.5.5

package/dist/{director-state-CVzkjKRZ.d.ts → director-state-BUxlqkOa.d.ts}

@@ -1,9 +1,9 @@
-import { E as EventBus } from './events-oxn-Wkub.js';
-import { o as SessionStore, n as SessionMetadata, q as SessionWriter, k as ResumedSession, S as SessionData, p as SessionSummary, b as ContentBlock, m as SessionEvent, ab as TodoItem, a5 as ConversationState } from './context-PH4DvBZV.js';
-import { e as AttachmentStore, A as AddAttachmentInput, d as AttachmentRef, a as Attachment } from './session-reader-1tOyoY1s.js';
+import { E as EventBus } from './events-qnDZbrtb.js';
+import { p as SessionStore, o as SessionMetadata, r as SessionWriter, k as ResumedSession, S as SessionData, q as SessionSummary, b as ContentBlock, n as SessionEvent, a5 as TodoItem, a6 as ConversationState } from './context-CLZXPPYk.js';
+import { e as AttachmentStore, A as AddAttachmentInput, d as AttachmentRef, a as Attachment } from './session-reader-4jxsYLZ8.js';
 import { b as MemoryStore, a as MemoryScope } from './memory-CEXuo7sz.js';
-import { a as WstackPaths } from './wstack-paths-BGu2INTm.js';
-import { c as ConfigStore, a as Config, b as ConfigLoader } from './config-BOD_HQBw.js';
+import { W as WstackPaths } from './wstack-paths-86YPFktR.js';
+import { c as ConfigStore, a as Config, b as ConfigLoader } from './config-BgM0BIpz.js';
 import { S as SecretVault } from './secret-vault-DoISxaKO.js';
 
 interface SessionStoreOptions {

package/dist/{events-oxn-Wkub.d.ts → events-qnDZbrtb.d.ts}

@@ -1,4 +1,4 @@
-import { U as Usage, a1 as Context, y as ToolProgressEvent, u as Tool } from './context-PH4DvBZV.js';
+import { U as Usage, a2 as Context, z as ToolProgressEvent, v as Tool } from './context-CLZXPPYk.js';
 
 /**
  * EventBus — observe-only typed event bus.
@@ -386,5 +386,70 @@ declare class EventBus {
      */
     wildcardCount(): number;
 }
+/**
+ * A decorator over `EventBus` that records every listener registration
+ * (`.on`, `.once`, `.onPattern`, `.onRegex`) so that `teardown()` can
+ * remove all of them at once — preventing the memory leaks that occur
+ * when dynamic plugins or long-lived TUI/WebUI interfaces forget to
+ * call `.off()` during session termination.
+ *
+ * Usage:
+ * ```ts
+ * const bus = new ScopedEventBus();
+ * bus.on('tool.executed', handler1);   // tracked
+ * bus.on('provider.response', handler2); // tracked
+ * bus.onPattern('subagent.*', handler3); // tracked
+ * // ... later, when the plugin or session is torn down:
+ * bus.teardown(); // removes all three listeners
+ * ```
+ *
+ * Also implements `Disposable` (via `[Symbol.dispose]`) for use with
+ * the `using` keyword in Node ≥ 22, or can be used manually with
+ * `bus.teardown()`.
+ */
+declare class ScopedEventBus extends EventBus {
+    private readonly registrations;
+    private nextKey;
+    /**
+     * Identical to `EventBus.on` but the listener is tracked so that
+     * `teardown()` will remove it automatically.
+     */
+    on<E extends EventName>(event: E, fn: Listener<E>): () => void;
+    /**
+     * Identical to `EventBus.once` but the listener is tracked so that
+     * `teardown()` will remove it automatically.
+     *
+     * Uses EventBus's public API directly to avoid triggering our own `on()`
+     * override (which would consume a key slot for the wrapper, then orphan
+     * our registration entry under a different key).
+     */
+    once<E extends EventName>(event: E, fn: Listener<E>): () => void;
+    /**
+     * Identical to `EventBus.onPattern` but the listener is tracked so that
+     * `teardown()` will remove it automatically.
+     */
+    onPattern(pattern: string, fn: (event: string, payload: unknown) => void): () => void;
+    /**
+     * Identical to `EventBus.onRegex` but the listener is tracked so that
+     * `teardown()` will remove it automatically.
+     */
+    onRegex(regex: RegExp, fn: (event: string, payload: unknown) => void): () => void;
+    /**
+     * Remove every listener that was registered through this scoped bus.
+     * Idempotent — calling it multiple times is safe.
+     *
+     * Also available as `[Symbol.dispose]` for explicit resource management:
+     * ```ts
+     * using scope = new ScopedEventBus();
+     * scope.on('tool.executed', handler);
+     * // automatically teardown()'d when scope exits
+     * ```
+     */
+    teardown(): void;
+    /** Alias for `teardown()` — enables `using new ScopedEventBus()` in Node ≥ 22. */
+    [Symbol.dispose](): void;
+    /** Number of tracked registrations. */
+    get scopedListenerCount(): number;
+}
 
-export { EventBus as E, type Listener as L, type EventName as a, type EventLogger as b, type EventMap as c };
+export { EventBus as E, type Listener as L, ScopedEventBus as S, type EventName as a, type EventLogger as b, type EventMap as c };

package/dist/execution/index.d.ts

@@ -1,19 +1,19 @@
-export { C as CompactorOptions, a as DefaultErrorHandler, b as DefaultRetryPolicy, H as HybridCompactor, T as ToolExecutor } from '../tool-executor-B6kRcWeF.js';
-import { g as Provider, a1 as Context } from '../context-PH4DvBZV.js';
-import { a as Compactor, C as CompactReport } from '../compactor-BP4xhKVi.js';
-import { M as MessageSelector } from '../selector-yqyxt-Ii.js';
-import { E as EventBus } from '../events-oxn-Wkub.js';
-import { c as MiddlewareHandler } from '../system-prompt-BJlzKGO6.js';
-import { e as ContextWindowAggressiveOn, i as ContextWindowPolicy } from '../config-BOD_HQBw.js';
-import { r as Agent, R as RunResult } from '../index-a12jc7-r.js';
-import { D as DoneCondition } from '../multi-agent-D6S4Z7H8.js';
+export { C as CompactorOptions, a as DefaultErrorHandler, b as DefaultRetryPolicy, H as HybridCompactor, T as ToolExecutor } from '../tool-executor-DSvmOBe6.js';
+import { g as Provider, a2 as Context } from '../context-CLZXPPYk.js';
+import { a as Compactor, C as CompactReport } from '../compactor-BWhJXxsW.js';
+import { M as MessageSelector } from '../selector-DB2-byKH.js';
+import { E as EventBus } from '../events-qnDZbrtb.js';
+import { c as MiddlewareHandler } from '../system-prompt-DI4Dtc1I.js';
+import { e as ContextWindowAggressiveOn, i as ContextWindowPolicy } from '../config-BgM0BIpz.js';
+import { r as Agent, R as RunResult } from '../index-DPLJw_ZI.js';
+import { D as DoneCondition } from '../multi-agent-Cv8wk47i.js';
 import { a as SkillLoader, b as SkillManifest, S as SkillEntry } from '../skill-CxuWrsKK.js';
-import { a as WstackPaths } from '../wstack-paths-BGu2INTm.js';
-import '../retry-policy-DUJ8-Qc_.js';
+import { W as WstackPaths } from '../wstack-paths-86YPFktR.js';
+import '../retry-policy-LLUxJmYY.js';
 import '../models-registry-Y2xbog0E.js';
 import '../logger-BMQgxvdy.js';
 import '../observability-BhnVLBLS.js';
-import '../secret-scrubber-CB11A2P7.js';
+import '../secret-scrubber-BhJTNr9v.js';
 
 interface SkillLoaderOptions {
     paths: WstackPaths;

package/dist/extension/index.d.ts

@@ -1,9 +1,9 @@
-export { A as AfterIterationHook, p as AfterRunHook, q as AfterToolExecutionHook, s as AgentExtension, B as BeforeIterationHook, w as BeforeRunHook, x as BeforeToolExecutionHook, E as ExtensionRegistry, O as OnErrorHook, G as ProviderRunnerFn, z as ProviderRunnerWrapper } from '../index-a12jc7-r.js';
-import '../context-PH4DvBZV.js';
+export { A as AfterIterationHook, p as AfterRunHook, q as AfterToolExecutionHook, s as AgentExtension, B as BeforeIterationHook, w as BeforeRunHook, x as BeforeToolExecutionHook, E as ExtensionRegistry, O as OnErrorHook, G as ProviderRunnerFn, z as ProviderRunnerWrapper } from '../index-DPLJw_ZI.js';
+import '../context-CLZXPPYk.js';
 import '../logger-BMQgxvdy.js';
-import '../system-prompt-BJlzKGO6.js';
+import '../system-prompt-DI4Dtc1I.js';
 import '../observability-BhnVLBLS.js';
-import '../events-oxn-Wkub.js';
-import '../secret-scrubber-CB11A2P7.js';
-import '../config-BOD_HQBw.js';
+import '../events-qnDZbrtb.js';
+import '../secret-scrubber-BhJTNr9v.js';
+import '../config-BgM0BIpz.js';
 import '../models-registry-Y2xbog0E.js';

package/dist/{index-a12jc7-r.d.ts → index-DPLJw_ZI.d.ts}

@@ -1,10 +1,10 @@
-import { u as Tool, z as ToolResultBlock, T as TextBlock, a1 as Context, R as Request, j as Response, D as ToolUseBlock, g as Provider, W as WrongStackError, b as ContentBlock, a8 as RunOptions, J as JSONSchema } from './context-PH4DvBZV.js';
+import { v as Tool, B as ToolResultBlock, T as TextBlock, a2 as Context, R as Request, j as Response, G as ToolUseBlock, g as Provider, W as WrongStackError, b as ContentBlock, aa as RunOptions, J as JSONSchema } from './context-CLZXPPYk.js';
 import { L as Logger } from './logger-BMQgxvdy.js';
-import { R as Renderer, B as BuildContext, C as Container, P as Pipeline, e as ReadonlyPipeline } from './system-prompt-BJlzKGO6.js';
+import { R as Renderer, B as BuildContext, C as Container, P as Pipeline, e as ReadonlyPipeline } from './system-prompt-DI4Dtc1I.js';
 import { T as Tracer } from './observability-BhnVLBLS.js';
-import { E as EventBus, a as EventName, L as Listener } from './events-oxn-Wkub.js';
-import { a as PermissionPolicy, S as SecretScrubber } from './secret-scrubber-CB11A2P7.js';
-import { l as ProviderConfig, a as Config } from './config-BOD_HQBw.js';
+import { E as EventBus, a as EventName, L as Listener } from './events-qnDZbrtb.js';
+import { a as PermissionPolicy, S as SecretScrubber } from './secret-scrubber-BhJTNr9v.js';
+import { l as ProviderConfig, a as Config } from './config-BgM0BIpz.js';
 import { W as WireFamily } from './models-registry-Y2xbog0E.js';
 
 /**

package/dist/{index-CcbWbcpy.d.ts → index-De4R4rQ7.d.ts}

@@ -1,9 +1,9 @@
-import { M as MultiAgentConfig, i as SubagentRunner, c as SubagentConfig, k as TaskSpec, j as TaskResult, a as CoordinatorStatus, b as MultiAgentCoordinator, S as SpawnResult, l as BridgeMessage, A as AgentBridge } from './multi-agent-D6S4Z7H8.js';
-import { q as SessionWriter, u as Tool, o as SessionStore } from './context-PH4DvBZV.js';
-import { I as InMemoryAgentBridge } from './agent-bridge-EiUFe3if.js';
-import { E as EventBus } from './events-oxn-Wkub.js';
+import { M as MultiAgentConfig, i as SubagentRunner, c as SubagentConfig, k as TaskSpec, j as TaskResult, a as CoordinatorStatus, b as MultiAgentCoordinator, S as SpawnResult, l as BridgeMessage, A as AgentBridge } from './multi-agent-Cv8wk47i.js';
+import { r as SessionWriter, v as Tool, p as SessionStore } from './context-CLZXPPYk.js';
+import { I as InMemoryAgentBridge } from './agent-bridge-B07AYFBk.js';
+import { E as EventBus } from './events-qnDZbrtb.js';
 import { EventEmitter } from 'node:events';
-import { r as Agent, u as AgentInput } from './index-a12jc7-r.js';
+import { r as Agent, u as AgentInput } from './index-DPLJw_ZI.js';
 
 /**
  * Single fleet-wide event with subagent attribution. Whatever a child

package/dist/index.d.ts

@@ -1,58 +1,359 @@
-import { S as SystemPromptBuilder, M as ModelCapabilities, B as BuildContext, C as Container } from './system-prompt-BJlzKGO6.js';
-export { a as BindOptions, D as Decorator, F as Factory, b as Middleware, c as MiddlewareHandler, N as NextFn, P as Pipeline, d as PipelineOptions, R as Renderer, T as Token } from './system-prompt-BJlzKGO6.js';
-import { E as EventBus, a as EventName, L as Listener } from './events-oxn-Wkub.js';
-export { b as EventLogger, c as EventMap } from './events-oxn-Wkub.js';
+import { S as SystemPromptBuilder, M as ModelCapabilities, B as BuildContext, C as Container } from './system-prompt-DI4Dtc1I.js';
+export { a as BindOptions, D as Decorator, F as Factory, b as Middleware, c as MiddlewareHandler, N as NextFn, P as Pipeline, d as PipelineOptions, R as Renderer, T as Token } from './system-prompt-DI4Dtc1I.js';
+import { E as EventBus, a as EventName, L as Listener } from './events-qnDZbrtb.js';
+export { b as EventLogger, c as EventMap, S as ScopedEventBus } from './events-qnDZbrtb.js';
 export { RunController, RunControllerOptions, TOKENS } from './kernel/index.js';
-import { b as ContentBlock, T as TextBlock, a1 as Context } from './context-PH4DvBZV.js';
-export { A as AgentError, C as Capabilities, a as ConfigError, a4 as ContextInit, a5 as ConversationState, E as ErrorCode, c as ErrorSeverity, d as ErrorSubsystem, F as FileSnapshot, I as ImageBlock, J as JSONSchema, M as Message, e as MessageRole, P as Permission, f as PluginError, g as Provider, h as ProviderError, i as ProviderErrorBody, a6 as ReadonlyConversationState, R as Request, j as Response, k as ResumedSession, a7 as RunEnv, a8 as RunOptions, S as SessionData, l as SessionError, m as SessionEvent, n as SessionMetadata, o as SessionStore, p as SessionSummary, q as SessionWriter, a9 as StateChange, aa as StateChangeHandler, r as StopReason, s as StreamEvent, t as ThinkingBlock, ab as TodoItem, a2 as TokenCounter, u as Tool, v as ToolCallContext, w as ToolError, x as ToolFinalEvent, y as ToolProgressEvent, z as ToolResultBlock, B as ToolStreamEvent, D as ToolUseBlock, U as Usage, W as WrongStackError, G as asBlocks, H as asText, ac as extractRunEnv, K as isAgentError, L as isConfigError, N as isImageBlock, O as isPluginError, Q as isSessionError, V as isTextBlock, X as isThinkingBlock, Y as isToolError, Z as isToolResultBlock, _ as isToolUseBlock, $ as isWrongStackError, a0 as toWrongStackError, ad as wrapAsState } from './context-PH4DvBZV.js';
-export { P as ProviderRunner, R as RunProviderOptions } from './provider-runner-DGisz_lG.js';
-import { a as Config } from './config-BOD_HQBw.js';
-export { C as CONTEXT_WINDOW_MODES, b as ConfigLoader, c as ConfigStore, d as ContextConfig, e as ContextWindowAggressiveOn, f as ContextWindowConfigLike, g as ContextWindowMode, h as ContextWindowModeId, i as ContextWindowPolicy, j as ContextWindowThresholds, D as DEFAULT_CONTEXT_WINDOW_MODE_ID, F as FeaturesConfig, L as LogConfig, M as MCPServerConfig, P as PluginConfig, k as ProviderApiKey, l as ProviderConfig, T as ToolsConfig, m as formatContextWindowModeList, n as getContextWindowMode, o as isContextWindowModeId, p as listContextWindowModes, r as resolveContextWindowPolicy } from './config-BOD_HQBw.js';
-export { C as CompactReport, a as Compactor } from './compactor-BP4xhKVi.js';
-export { P as PermissionDecision, a as PermissionPolicy, T as TrustPolicy } from './secret-scrubber-CB11A2P7.js';
+import { a2 as Context, g as Provider, b as ContentBlock, T as TextBlock } from './context-CLZXPPYk.js';
+export { A as AgentError, C as Capabilities, a as ConfigError, a7 as ContextInit, a6 as ConversationState, E as ErrorCode, c as ErrorSeverity, d as ErrorSubsystem, F as FileSnapshot, I as ImageBlock, J as JSONSchema, M as Message, e as MessageRole, P as Permission, f as PluginError, h as ProviderError, i as ProviderErrorBody, a8 as ReadonlyConversationState, R as Request, j as Response, k as ResumedSession, l as RiskTier, a9 as RunEnv, aa as RunOptions, S as SessionData, m as SessionError, n as SessionEvent, o as SessionMetadata, p as SessionStore, q as SessionSummary, r as SessionWriter, ab as StateChange, ac as StateChangeHandler, s as StopReason, t as StreamEvent, u as ThinkingBlock, a5 as TodoItem, a3 as TokenCounter, v as Tool, w as ToolCallContext, x as ToolError, y as ToolFinalEvent, z as ToolProgressEvent, B as ToolResultBlock, D as ToolStreamEvent, G as ToolUseBlock, U as Usage, W as WrongStackError, H as asBlocks, K as asText, ad as extractRunEnv, L as isAgentError, N as isConfigError, O as isImageBlock, Q as isPluginError, V as isSessionError, X as isTextBlock, Y as isThinkingBlock, Z as isToolError, _ as isToolResultBlock, $ as isToolUseBlock, a0 as isWrongStackError, a1 as toWrongStackError, ae as wrapAsState } from './context-CLZXPPYk.js';
+export { P as ProviderRunner, R as RunProviderOptions } from './provider-runner-3SHqk9zB.js';
+import { a as Config } from './config-BgM0BIpz.js';
+export { C as CONTEXT_WINDOW_MODES, b as ConfigLoader, c as ConfigStore, d as ContextConfig, e as ContextWindowAggressiveOn, f as ContextWindowConfigLike, g as ContextWindowMode, h as ContextWindowModeId, i as ContextWindowPolicy, j as ContextWindowThresholds, D as DEFAULT_CONTEXT_WINDOW_MODE_ID, F as FeaturesConfig, L as LogConfig, M as MCPServerConfig, P as PluginConfig, k as ProviderApiKey, l as ProviderConfig, T as ToolsConfig, m as formatContextWindowModeList, n as getContextWindowMode, o as isContextWindowModeId, p as listContextWindowModes, r as resolveContextWindowPolicy } from './config-BgM0BIpz.js';
+export { C as CompactReport, a as Compactor } from './compactor-BWhJXxsW.js';
+export { P as PermissionDecision, a as PermissionPolicy, T as TrustPolicy } from './secret-scrubber-BhJTNr9v.js';
 export { C as CheckpointInfo, R as RewindResult, a as RewindResultExtended, S as SessionRewinder } from './session-rewinder-C9HnMkhP.js';
-import { e as AttachmentStore, d as AttachmentRef, A as AddAttachmentInput } from './session-reader-1tOyoY1s.js';
-export { a as Attachment, b as AttachmentKind, c as AttachmentMeta, D as DefaultSessionReader } from './session-reader-1tOyoY1s.js';
-export { D as DefaultSecretScrubber, a as DefaultSecretVault, S as SecretVaultOptions, d as decryptConfigSecrets, e as encryptConfigSecrets, m as migratePlaintextSecrets, r as rewriteConfigEncrypted } from './secret-scrubber-EqFa0SyI.js';
+import { e as AttachmentStore, d as AttachmentRef, A as AddAttachmentInput } from './session-reader-4jxsYLZ8.js';
+export { a as Attachment, b as AttachmentKind, c as AttachmentMeta, D as DefaultSessionReader } from './session-reader-4jxsYLZ8.js';
+export { D as DefaultSecretScrubber, a as DefaultSecretVault, S as SecretVaultOptions, d as decryptConfigSecrets, e as encryptConfigSecrets, m as migratePlaintextSecrets, r as rewriteConfigEncrypted } from './secret-scrubber-Z_VXuXQT.js';
 export { D as DefaultLogger, a as DefaultLoggerOptions } from './logger-BH6AE0W9.js';
-export { D as DefaultPathResolver, a as DefaultTokenCounter } from './path-resolver-CprD5DhS.js';
+export { D as DefaultPathResolver, a as DefaultTokenCounter } from './path-resolver-DiCUvEg6.js';
 import { b as MemoryStore } from './memory-CEXuo7sz.js';
 export { M as MemoryEntry, a as MemoryScope } from './memory-CEXuo7sz.js';
-export { C as CompactorOptions, D as DEFAULT_RECOVERY_STRATEGIES, a as DefaultErrorHandler, b as DefaultRetryPolicy, H as HybridCompactor, R as RecoveryStrategy, T as ToolExecutor, c as buildRecoveryStrategies } from './tool-executor-B6kRcWeF.js';
+export { C as CompactorOptions, D as DEFAULT_RECOVERY_STRATEGIES, a as DefaultErrorHandler, b as DefaultRetryPolicy, H as HybridCompactor, R as RecoveryStrategy, T as ToolExecutor, c as buildRecoveryStrategies } from './tool-executor-DSvmOBe6.js';
 import { a as SkillLoader } from './skill-CxuWrsKK.js';
 export { S as SkillEntry, b as SkillManifest } from './skill-CxuWrsKK.js';
 export { I as InputReader, P as PromptOption } from './input-reader-E-ffP2ee.js';
-import { j as SystemPromptContributor, h as SlashCommand, b as PluginAPI, e as PluginPipelines, T as ToolRegistryView, g as ProviderRegistryView, M as MCPRegistryView, i as SlashCommandRegistryView, E as ExtensionRegistry, S as SessionWriterView, a as MetricsSinkView, n as ToolRegistry, o as ProviderRegistry, P as Plugin } from './index-a12jc7-r.js';
-export { A as AfterIterationHook, p as AfterRunHook, q as AfterToolExecutionHook, r as Agent, s as AgentExtension, t as AgentInit, u as AgentInput, v as AgentPipelines, B as BeforeIterationHook, w as BeforeRunHook, x as BeforeToolExecutionHook, D as DEFAULT_MAX_ITERATIONS, O as OnErrorHook, c as PluginCapabilities, d as PluginDependency, y as ProviderFactory, z as ProviderRunnerWrapper, R as RunResult, C as ToolWrapper, U as UserInputPayload, F as createDefaultPipelines } from './index-a12jc7-r.js';
+import { h as SlashCommand, j as SystemPromptContributor, b as PluginAPI, e as PluginPipelines, T as ToolRegistryView, g as ProviderRegistryView, M as MCPRegistryView, i as SlashCommandRegistryView, E as ExtensionRegistry, S as SessionWriterView, a as MetricsSinkView, n as ToolRegistry, o as ProviderRegistry, P as Plugin } from './index-DPLJw_ZI.js';
+export { A as AfterIterationHook, p as AfterRunHook, q as AfterToolExecutionHook, r as Agent, s as AgentExtension, t as AgentInit, u as AgentInput, v as AgentPipelines, B as BeforeIterationHook, w as BeforeRunHook, x as BeforeToolExecutionHook, D as DEFAULT_MAX_ITERATIONS, O as OnErrorHook, c as PluginCapabilities, d as PluginDependency, y as ProviderFactory, z as ProviderRunnerWrapper, R as RunResult, C as ToolWrapper, U as UserInputPayload, F as createDefaultPipelines } from './index-DPLJw_ZI.js';
 export { D as DefaultModelsRegistry, a as DefaultModelsRegistryOptions, c as classifyFamily } from './models-registry-DqzwpBQy.js';
 import { c as ModeStore } from './mode-CV077NjV.js';
 export { D as DEFAULT_MODES, M as Mode, a as ModeConfig, b as ModeManifest } from './mode-CV077NjV.js';
-export { I as InMemoryAgentBridge, a as InMemoryBridgeTransport, c as createMessage } from './agent-bridge-EiUFe3if.js';
-export { n as BudgetExceededError, o as BudgetKind, p as BudgetLimits, q as BudgetUsage, C as CoordinatorEvents, a as CoordinatorStatus, D as DoneCondition, M as MultiAgentConfig, b as MultiAgentCoordinator, S as SpawnResult, r as SubagentBudget, c as SubagentConfig, d as SubagentContext, e as SubagentError, f as SubagentErrorKind, g as SubagentRunContext, h as SubagentRunOutcome, i as SubagentRunner, T as TaskDelegation, j as TaskResult, k as TaskSpec } from './multi-agent-D6S4Z7H8.js';
+export { I as InMemoryAgentBridge, a as InMemoryBridgeTransport, c as createMessage } from './agent-bridge-B07AYFBk.js';
+export { n as BudgetExceededError, o as BudgetKind, p as BudgetLimits, q as BudgetUsage, C as CoordinatorEvents, a as CoordinatorStatus, D as DoneCondition, M as MultiAgentConfig, b as MultiAgentCoordinator, S as SpawnResult, r as SubagentBudget, c as SubagentConfig, d as SubagentContext, e as SubagentError, f as SubagentErrorKind, g as SubagentRunContext, h as SubagentRunOutcome, i as SubagentRunner, T as TaskDelegation, j as TaskResult, k as TaskSpec } from './multi-agent-Cv8wk47i.js';
 export { C as CriticalPathResult, D as DEFAULT_SPEC_TEMPLATE, S as SpecAnalysis, a as SpecApiEndpoint, b as SpecRequirement, c as SpecSection, d as SpecSectionType, e as SpecStatus, f as SpecTemplate, g as SpecValidationResult, h as Specification, T as TaskAssignment, i as TaskDependency, j as TaskEdge, k as TaskFilter, l as TaskGraph, m as TaskNode, n as TaskPriority, o as TaskProgress, p as TaskSort, q as TaskStatus, r as TaskType, s as computeTaskProgress, t as findCriticalPath, u as topologicalSort } from './task-graph-BITvWt4t.js';
 export { A as AggregateHealth, H as HealthCheck, a as HealthCheckResult, b as HealthRegistry, c as HealthStatus, M as MetricLabels, d as MetricSeries, e as MetricsSink, f as MetricsSnapshot, S as Span, T as Tracer } from './observability-BhnVLBLS.js';
 export { AtomicWriteOptions, BuildChildEnvOptions, CompileFail, CompileResult, MessageRepairReport, MessageRepairResult, NewlineStyle, RequestTokenBreakdown, SafeParseResult, ToolOutputSerializerOptions, UnifiedDiffOptions, ValidationError, ValidationResult, atomicWrite, buildChildEnv, color, compileGlob, compileUserRegex, createToolOutputSerializer, detectNewlineStyle, ensureDir, estimateRequestTokens, estimateTextTokens, estimateToolDefTokens, estimateToolInputTokens, estimateToolResultTokens, formatTodosList, matchAny, matchGlob, normalizeToLf, repairToolUseAdjacency, safeParse, safeStringify, sanitizeJsonString, stripAnsi, toStyle, unifiedDiff, validateAgainstSchema } from './utils/index.js';
-export { W as WstackPathOptions, a as WstackPaths, p as projectHash, r as resolveWstackPaths } from './wstack-paths-BGu2INTm.js';
-export { A as AbandonedSession, a as AttachmentStoreOptions, C as ConfigLoaderOptions, b as ConfigMigration, c as ConfigMigrationError, d as ConfigSource, D as DEFAULT_CONFIG_MIGRATIONS, e as DefaultAttachmentStore, f as DefaultConfigLoader, g as DefaultConfigStore, h as DefaultMemoryStore, i as DefaultSessionStore, j as DirectorStateCheckpoint, k as DirectorStateSnapshot, l as DirectorSubagentState, m as DirectorTaskState, M as MemoryStoreOptions, n as MigrationContext, o as MigrationResult, P as PersistedQueueItem, p as PlanFile, q as PlanItem, Q as QueueStore, R as RecoveryLock, r as RecoveryLockOptions, S as SessionAnalyzer, s as SessionStoreOptions, T as TodosCheckpointFile, t as addPlanItem, u as attachPlanCheckpoint, v as attachTodosCheckpoint, w as clearPlan, x as emptyPlan, y as formatPlan, z as loadDirectorState, B as loadPlan, E as loadTodosCheckpoint, F as removePlanItem, G as runConfigMigrations, H as savePlan, I as saveTodosCheckpoint, J as setPlanItemStatus } from './director-state-CVzkjKRZ.js';
+export { a as WstackPathOptions, W as WstackPaths, p as projectHash, r as resolveWstackPaths } from './wstack-paths-86YPFktR.js';
+export { A as AbandonedSession, a as AttachmentStoreOptions, C as ConfigLoaderOptions, b as ConfigMigration, c as ConfigMigrationError, d as ConfigSource, D as DEFAULT_CONFIG_MIGRATIONS, e as DefaultAttachmentStore, f as DefaultConfigLoader, g as DefaultConfigStore, h as DefaultMemoryStore, i as DefaultSessionStore, j as DirectorStateCheckpoint, k as DirectorStateSnapshot, l as DirectorSubagentState, m as DirectorTaskState, M as MemoryStoreOptions, n as MigrationContext, o as MigrationResult, P as PersistedQueueItem, p as PlanFile, q as PlanItem, Q as QueueStore, R as RecoveryLock, r as RecoveryLockOptions, S as SessionAnalyzer, s as SessionStoreOptions, T as TodosCheckpointFile, t as addPlanItem, u as attachPlanCheckpoint, v as attachTodosCheckpoint, w as clearPlan, x as emptyPlan, y as formatPlan, z as loadDirectorState, B as loadPlan, E as loadTodosCheckpoint, F as removePlanItem, G as runConfigMigrations, H as savePlan, I as saveTodosCheckpoint, J as setPlanItemStatus } from './director-state-BUxlqkOa.js';
 export { AutoApprovePermissionPolicy, DefaultPermissionPolicy, PermissionPolicyOptions } from './security/index.js';
 export { AutoCompactionMiddleware, AutonomousRunner, AutonomousRunnerOptions, DefaultSkillLoader, DoneCheckResult, DoneConditionChecker, IntelligentCompactor, IntelligentCompactorOptions, SelectiveCompactor, SelectiveCompactorOptions, SkillLoaderOptions } from './execution/index.js';
 export { DefaultProviderRunner } from './defaults/index.js';
-export { A as ALL_FLEET_AGENTS, a as AUDIT_LOG_AGENT, b as AgentFactory, c as AgentFactoryResult, d as AgentRunnerOptions, B as BUG_HUNTER_AGENT, C as CreateDelegateToolOptions, D as DEFAULT_DIRECTOR_PREAMBLE, e as DEFAULT_SUBAGENT_BASELINE, f as DefaultMultiAgentCoordinator, g as DelegateHost, h as Director, i as DirectorBudgetError, j as DirectorPromptParts, k as DirectorSessionFactory, l as DirectorSessionFactoryOptions, F as FLEET_ROSTER, m as FLEET_ROSTER_BUDGETS, n as FleetBus, o as FleetEvent, p as FleetHandler, q as FleetUsage, r as FleetUsageAggregator, M as MultiAgentCoordinatorOptions, R as REFACTOR_PLANNER_AGENT, S as SECURITY_SCANNER_AGENT, s as SubagentPromptParts, t as SubagentUsageSnapshot, u as applyRosterBudget, v as composeDirectorPrompt, w as composeSubagentPrompt, x as createDelegateTool, y as makeAgentSubagentRunner, z as makeDirectorSessionFactory, E as rosterSummaryFromConfigs } from './index-CcbWbcpy.js';
+export { A as ALL_FLEET_AGENTS, a as AUDIT_LOG_AGENT, b as AgentFactory, c as AgentFactoryResult, d as AgentRunnerOptions, B as BUG_HUNTER_AGENT, C as CreateDelegateToolOptions, D as DEFAULT_DIRECTOR_PREAMBLE, e as DEFAULT_SUBAGENT_BASELINE, f as DefaultMultiAgentCoordinator, g as DelegateHost, h as Director, i as DirectorBudgetError, j as DirectorPromptParts, k as DirectorSessionFactory, l as DirectorSessionFactoryOptions, F as FLEET_ROSTER, m as FLEET_ROSTER_BUDGETS, n as FleetBus, o as FleetEvent, p as FleetHandler, q as FleetUsage, r as FleetUsageAggregator, M as MultiAgentCoordinatorOptions, R as REFACTOR_PLANNER_AGENT, S as SECURITY_SCANNER_AGENT, s as SubagentPromptParts, t as SubagentUsageSnapshot, u as applyRosterBudget, v as composeDirectorPrompt, w as composeSubagentPrompt, x as createDelegateTool, y as makeAgentSubagentRunner, z as makeDirectorSessionFactory, E as rosterSummaryFromConfigs } from './index-De4R4rQ7.js';
 export { DefaultModeStore, LLMSelector, LLMSelectorOptions, ModeLoaderOptions, loadProjectModes, loadUserModes } from './models/index.js';
 export { AISpecBuilder, AISpecBuilderOptions, AISpecPhase, AISpecSession, AutoExecutor, AutoExecutorOptions, BottleneckTask, CollectedAnswer, CriticalPathAnalysis, DefaultTaskStore, ExecutionSummary, GeneratedTask, SPEC_TEMPLATES, SpecDiff, SpecDrivenDev, SpecDrivenDevOptions, SpecIndexEntry, SpecParser, SpecStore, SpecStoreOptions, SpecVersion, SpecVersioning, TaskExecutionContext, TaskExecutionResult, TaskFlow, TaskFlowEventMap, TaskFlowEventName, TaskFlowExecutionContext, TaskFlowOptions, TaskFlowPhase, TaskGenerator, TaskGeneratorOptions, TaskGraphIndexEntry, TaskGraphStore, TaskGraphStoreOptions, TaskStore, TaskTracker, TaskTrackerOptions, TaskTransition, analyzeCriticalPath, createAutoExecutor, getTemplate, listTemplates, renderProgress, renderSpecAnalysis, renderTaskGraph, renderTaskList, templateToMarkdown } from './sdd/index.js';
 export { DefaultHealthRegistry, InMemoryMetricsSink, MetricsServerHandle, MetricsServerOptions, NoopMetricsSink, NoopTracer, OTelTracer, OtlpMetricsExporterHandle, OtlpMetricsExporterOptions, OtlpTraceExporterHandle, OtlpTraceExporterOptions, PROMETHEUS_CONTENT_TYPE, buildOtlpMetricsRequest, buildOtlpTracesRequest, renderPrometheus, startMetricsServer, startOtlpMetricsExporter, startOtlpTraceExporter, wireMetricsToEvents } from './observability/index.js';
-export { C as ContextManagerAction, a as ContextManagerInput, b as ContextManagerResult, c as ContextManagerToolOptions, d as allServers, e as awsServer, f as blockServer, g as braveSearchServer, h as context7Server, i as contextManagerTool, j as createContextManagerTool, k as everArtServer, l as filesystemServer, m as githubServer, n as googleMapsServer, o as miniMaxVisionServer, s as sentinelServer, p as slackServer, z as zaiVisionServer } from './mcp-servers-uPmBxZ1B.js';
+export { C as ContextManagerAction, a as ContextManagerInput, b as ContextManagerResult, c as ContextManagerToolOptions, d as allServers, e as awsServer, f as blockServer, g as braveSearchServer, h as context7Server, i as contextManagerTool, j as createContextManagerTool, k as everArtServer, l as filesystemServer, m as githubServer, n as googleMapsServer, o as miniMaxVisionServer, s as sentinelServer, p as slackServer, z as zaiVisionServer } from './mcp-servers-CSMfaBuL.js';
 export { DownloadResult, InstallResult, InstalledSkillEntry, ManifestData, ParsedRef, SkillInstaller, SkillInstallerOptions, SkillManifestStore, UpdateResult, downloadGitHubTarball, parseSkillRef } from './skills/index.js';
 export { DefaultSessionRewinder, SessionRewinderOptions } from './storage/index.js';
+import { R as RetryPolicy, E as ErrorHandler } from './retry-policy-LLUxJmYY.js';
 import { L as Logger } from './logger-BMQgxvdy.js';
 export { a as LogLevel } from './logger-BMQgxvdy.js';
 export { a as ModelsDevPayload, c as ModelsDevProvider, M as ModelsRegistry, b as ResolvedModel, R as ResolvedProvider, W as WireFamily } from './models-registry-Y2xbog0E.js';
 export { S as SecretVault } from './secret-vault-DoISxaKO.js';
-import './retry-policy-DUJ8-Qc_.js';
 import './path-resolver-CPRj4bFY.js';
-import './selector-yqyxt-Ii.js';
+import './selector-DB2-byKH.js';
 import 'node:events';
 
+/**
+ * Skill content structure for generated security skills.
+ */
+interface GeneratedSkillContent {
+    type: 'skill';
+    content: string;
+}
+type TechStack = 'nodejs' | 'python' | 'rust' | 'go' | 'java' | 'dotnet' | 'php' | 'ruby' | 'cpp' | 'c' | 'kotlin' | 'swift' | 'unknown';
+type PackageManager = 'npm' | 'pnpm' | 'yarn' | 'bun' | 'pip' | 'poetry' | 'cargo' | 'maven' | 'gradle' | 'nuget' | 'composer' | 'bundler' | 'cmake' | 'swiftpm' | 'go' | 'unknown';
+interface DetectedDependency {
+    name: string;
+    version: string;
+    isDev: boolean;
+    hasSecurityIssue?: boolean;
+}
+interface TechStackInfo {
+    stack: TechStack;
+    packageManager: PackageManager;
+    manifestFile: string;
+    dependencies: DetectedDependency[];
+    projectPath: string;
+}
+interface DetectionResult {
+    timestamp: string;
+    projectRoot: string;
+    detectedStacks: TechStackInfo[];
+    isMonorepo: boolean;
+    workspaceConfigs?: string[];
+}
+interface SkillGenerationContext {
+    techStack: TechStackInfo;
+    scanScope: ScanScope;
+    severityLevel: SeverityLevel;
+}
+type ScanScope = 'quick' | 'standard' | 'deep';
+type SeverityLevel = 'critical' | 'high' | 'medium' | 'low' | 'all';
+interface SecurityPattern {
+    id: string;
+    name: string;
+    severity: SeverityLevel;
+    description: string;
+    patterns: RegExp[];
+    fileExtensions: string[];
+    falsePositiveMarkers: string[];
+    remediation: string;
+}
+interface GeneratedSecuritySkill {
+    name: string;
+    description: string;
+    techStack: TechStack;
+    patterns: SecurityPattern[];
+    rules: string[];
+    metadata: {
+        generatedAt: string;
+        version: string;
+        confidence: number;
+    };
+    content: GeneratedSkillContent;
+}
+
+declare class TechStackDetector {
+    private cachedResults;
+    detect(projectRoot: string): Promise<DetectionResult>;
+    private matchSignature;
+    private findMatchingManifest;
+    private detectMonorepo;
+    private findWorkspaceConfigs;
+    clearCache(): void;
+}
+declare const defaultTechStackDetector: TechStackDetector;
+
+interface GeneratedSkill {
+    name: string;
+    description: string;
+    version: string;
+    techStack: TechStack;
+    content: GeneratedSkillContent;
+    patterns: SecurityPattern[];
+    metadata: {
+        generatedAt: string;
+        confidence: number;
+        targetFiles: string[];
+    };
+}
+interface SkillGeneratorOptions {
+    includeSecrets: boolean;
+    includeInjection: boolean;
+    includeConfig: boolean;
+    includeDependencies: boolean;
+    severityThreshold: 'critical' | 'high' | 'medium' | 'low';
+}
+/**
+ * Generates security skills dynamically based on tech stack.
+ * Uses predefined vulnerability patterns per stack.
+ */
+declare class SkillGenerator {
+    private options;
+    constructor(options?: Partial<SkillGeneratorOptions>);
+    generate(techStack: TechStackInfo): GeneratedSkill;
+    private getPatternsForStack;
+    private getSecretPatterns;
+    private getInjectionPatterns;
+    private getConfigPatterns;
+    private getTargetFilesForStack;
+    private buildSkillContent;
+    private calculateConfidence;
+}
+declare const defaultSkillGenerator: SkillGenerator;
+
+interface Finding {
+    id: string;
+    severity: 'critical' | 'high' | 'medium' | 'low';
+    category: 'secrets' | 'injection' | 'config' | 'dependency' | 'filesystem';
+    title: string;
+    description: string;
+    file: string;
+    line?: number;
+    snippet?: string;
+    remediation: string;
+    patternId: string;
+    confidence: 'high' | 'medium' | 'low';
+}
+interface ScanResult {
+    timestamp: string;
+    projectRoot: string;
+    techStack: TechStackInfo;
+    findings: Finding[];
+    summary: {
+        critical: number;
+        high: number;
+        medium: number;
+        low: number;
+        total: number;
+    };
+    scannedFiles: number;
+    scanDurationMs: number;
+    errors: string[];
+}
+interface ScanOptions {
+    includeSecrets: boolean;
+    includeInjection: boolean;
+    includeConfig: boolean;
+    includeDependencies: boolean;
+    excludePaths: string[];
+    fileExtensions: string[];
+    depth: 'quick' | 'standard' | 'deep';
+}
+declare class SecurityScanner {
+    private options;
+    constructor(options?: Partial<ScanOptions>);
+    scan(projectRoot: string, skill: GeneratedSkill, techStack: TechStackInfo): Promise<ScanResult>;
+    private gatherFiles;
+    private gatherFilesRecursive;
+    private shouldExclude;
+    private getTargetExtensions;
+    private scanFile;
+    private matchesCategory;
+    private getCategoryFromPattern;
+    private isFalsePositive;
+    private calculateSummary;
+}
+declare const defaultSecurityScanner: SecurityScanner;
+
+interface ReportOptions {
+    outputDir: string;
+    format: 'markdown' | 'json' | 'html';
+    includeRemediation: boolean;
+    groupBySeverity: boolean;
+    maxFindingsPerCategory?: number;
+}
+declare class ReportGenerator {
+    private options;
+    constructor(options?: Partial<ReportOptions>);
+    generate(scanResult: ScanResult): Promise<string>;
+    private ensureOutputDir;
+    private generateMarkdown;
+    private formatFinding;
+    private groupBySeverity;
+    private groupByCategory;
+    private generateJson;
+    private generateHtml;
+}
+declare const defaultReportGenerator: ReportGenerator;
+
+interface GitignoreUpdaterOptions {
+    gitignorePath: string;
+    entries: string[];
+}
+declare class GitignoreUpdater {
+    private options;
+    constructor(options?: Partial<GitignoreUpdaterOptions>);
+    update(): Promise<{
+        added: string[];
+        existing: string[];
+        errors: string[];
+    }>;
+    isEntryIgnored(entry: string): Promise<boolean>;
+}
+declare const defaultGitignoreUpdater: GitignoreUpdater;
+
+interface SecurityScannerOptions {
+    projectRoot: string;
+    scanOptions?: {
+        depth?: 'quick' | 'standard' | 'deep';
+        includeSecrets?: boolean;
+        includeInjection?: boolean;
+        includeConfig?: boolean;
+    };
+    reportOptions?: Partial<ReportOptions>;
+    skipGitignore?: boolean;
+    /** Optional model name to pass to the LLM provider (defaults to the provider's default). */
+    model?: string;
+}
+/** Accepts a full Context or just the provider+model needed for LLM calls. */
+type SecurityScannerContext = Context | {
+    provider: Provider;
+    model?: string;
+};
+interface FullScanResult {
+    detectionResult: Awaited<ReturnType<typeof defaultTechStackDetector.detect>>;
+    generatedSkill: GeneratedSkill;
+    scanResult: ScanResult;
+    reportPath: string;
+    synthesizedReport?: string;
+    gitignoreResult?: Awaited<ReturnType<typeof defaultGitignoreUpdater.update>>;
+}
+/**
+ * LLM-powered Security Scanner Orchestrator
+ *
+ * Flow:
+ * 1. Detect tech stack (static)
+ * 2. Generate project-specific security skill via LLM
+ * 3. Scan code using LLM with generated skill as context
+ * 4. Synthesize findings into structured report via LLM
+ */
+declare class SecurityScannerOrchestrator {
+    private readonly retryPolicy?;
+    private readonly errorHandler?;
+    private detector;
+    private reportGenerator;
+    private gitignoreUpdater;
+    constructor(retryPolicy?: RetryPolicy | undefined, errorHandler?: ErrorHandler | undefined);
+    /**
+     * Wraps provider.complete with retry logic using the injected RetryPolicy.
+     */
+    private completeWithRetry;
+    /**
+     * Run full security scan with LLM assistance.
+     * Accepts a full Context (active agent run) or just provider+model (pre-agent session).
+     */
+    run(ctx: SecurityScannerContext, options: SecurityScannerOptions): Promise<FullScanResult>;
+    /**
+     * Generate a project-specific security skill using LLM.
+     * The LLM analyzes the project structure and creates tailored security patterns.
+     */
+    private generateSkillLLM;
+    /**
+     * Scan code using LLM with the generated skill as context.
+     * The LLM analyzes files and reports security findings.
+     */
+    private scanWithLLM;
+    /**
+     * Scan a batch of files using LLM.
+     */
+    private scanFileBatchLLM;
+    /**
+     * Synthesize a comprehensive security report using LLM.
+     */
+    private synthesizeReportLLM;
+    /**
+     * Generate a basic fallback report when LLM synthesis fails.
+     */
+    private generateBasicReport;
+    /**
+     * Write synthesized report to file.
+     */
+    private writeReport;
+    /**
+     * Gather project info for skill generation.
+     */
+    private gatherProjectInfo;
+    /**
+     * Gather files to scan based on patterns.
+     */
+    private gatherFiles;
+    private gatherFilesRecursive;
+    /**
+     * Generate fallback skill when LLM fails.
+     */
+    private generateFallbackSkill;
+    /**
+     * Quick scan - legacy compatibility.
+     * NOTE: This won't use LLM as it doesn't have access to ctx.
+     */
+    quickScan(projectRoot: string): Promise<ScanResult>;
+}
+declare const defaultOrchestrator: SecurityScannerOrchestrator;
+
+declare function createSecuritySlashCommand(): SlashCommand;
+declare const securitySlashCommand: SlashCommand;
+
 interface InputBuilderOptions {
     store: AttachmentStore;
     /**
@@ -340,4 +641,4 @@ declare function loadPlugins(plugins: Plugin[], opts: LoadPluginsOptions): Promi
  */
 declare function unloadPlugins(loadedPlugins: Plugin[], opts: LoadPluginsOptions): Promise<void>;
 
-export { AddAttachmentInput, AttachmentRef, AttachmentStore, BuildContext, Config, Container, ContentBlock, Context, DefaultPluginAPI, DefaultSystemPromptBuilder, type DefaultSystemPromptBuilderOptions, EventBus, EventName, ExtensionRegistry, InputBuilder, type InputBuilderEvent, type InputBuilderOptions, KERNEL_API_VERSION, LAYER_1_IDENTITY, Listener, type LoadPluginsOptions, Logger, MCPRegistryView, MemoryStore, MetricsSinkView, ModeStore, ModelCapabilities, Plugin, PluginAPI, type PluginAPIInit, PluginPipelines, ProviderRegistry, ProviderRegistryView, SessionWriterView, SkillLoader, SlashCommand, SlashCommandRegistry, SlashCommandRegistryView, SystemPromptBuilder, SystemPromptContributor, TextBlock, ToolRegistry, ToolRegistryView, loadPlugins, unloadPlugins };
+export { AddAttachmentInput, AttachmentRef, AttachmentStore, BuildContext, Config, Container, ContentBlock, Context, DefaultPluginAPI, DefaultSystemPromptBuilder, type DefaultSystemPromptBuilderOptions, type DetectedDependency, type DetectionResult, EventBus, EventName, ExtensionRegistry, type Finding, type FullScanResult, type GeneratedSecuritySkill, type GeneratedSkill, type GeneratedSkillContent, GitignoreUpdater, InputBuilder, type InputBuilderEvent, type InputBuilderOptions, KERNEL_API_VERSION, LAYER_1_IDENTITY, Listener, type LoadPluginsOptions, Logger, MCPRegistryView, MemoryStore, MetricsSinkView, ModeStore, ModelCapabilities, type PackageManager, Plugin, PluginAPI, type PluginAPIInit, PluginPipelines, Provider, ProviderRegistry, ProviderRegistryView, ReportGenerator, type ReportOptions, type ScanOptions, type ScanResult, type ScanScope, type SecurityPattern, SecurityScanner, type SecurityScannerContext, type SecurityScannerOptions, SecurityScannerOrchestrator, SessionWriterView, type SeverityLevel, type SkillGenerationContext, SkillGenerator, type SkillGeneratorOptions, SkillLoader, SlashCommand, SlashCommandRegistry, SlashCommandRegistryView, SystemPromptBuilder, SystemPromptContributor, type TechStack, TechStackDetector, type TechStackInfo, TextBlock, ToolRegistry, ToolRegistryView, createSecuritySlashCommand, defaultGitignoreUpdater, defaultOrchestrator, defaultReportGenerator, defaultSecurityScanner, defaultSkillGenerator, defaultTechStackDetector, loadPlugins, securitySlashCommand, unloadPlugins };