@wrongstack/core 0.5.3 → 0.5.6

package/dist/{director-state-CVzkjKRZ.d.ts → plan-templates-DaxTCPfk.d.ts}

@@ -1,9 +1,9 @@
-import { E as EventBus } from './events-oxn-Wkub.js';
-import { o as SessionStore, n as SessionMetadata, q as SessionWriter, k as ResumedSession, S as SessionData, p as SessionSummary, b as ContentBlock, m as SessionEvent, ab as TodoItem, a5 as ConversationState } from './context-PH4DvBZV.js';
-import { e as AttachmentStore, A as AddAttachmentInput, d as AttachmentRef, a as Attachment } from './session-reader-1tOyoY1s.js';
+import { E as EventBus } from './events-qnDZbrtb.js';
+import { p as SessionStore, o as SessionMetadata, r as SessionWriter, k as ResumedSession, S as SessionData, q as SessionSummary, b as ContentBlock, n as SessionEvent, a5 as TodoItem, a6 as ConversationState } from './context-CLZXPPYk.js';
+import { e as AttachmentStore, A as AddAttachmentInput, d as AttachmentRef, a as Attachment } from './session-reader-4jxsYLZ8.js';
 import { b as MemoryStore, a as MemoryScope } from './memory-CEXuo7sz.js';
-import { a as WstackPaths } from './wstack-paths-BGu2INTm.js';
-import { c as ConfigStore, a as Config, b as ConfigLoader } from './config-BOD_HQBw.js';
+import { W as WstackPaths } from './wstack-paths-86YPFktR.js';
+import { c as ConfigStore, a as Config, b as ConfigLoader } from './config-BgM0BIpz.js';
 import { S as SecretVault } from './secret-vault-DoISxaKO.js';
 
 interface SessionStoreOptions {
@@ -452,6 +452,22 @@ declare function setPlanItemStatus(plan: PlanFile, idOrIndex: string, status: Pl
 declare function clearPlan(plan: PlanFile): PlanFile;
 /** Render the plan as a short markdown-ish string suitable for slash output. */
 declare function formatPlan(plan: PlanFile): string;
+/**
+ * Promote a plan item to a set of todo items.
+ * The plan item is marked 'in_progress' (if not already done) and its
+ * title + details become the first todo; additional subtasks are appended.
+ * Returns the derived todo list so the caller can pass it to `todoTool`
+ * or `ctx.state.replaceTodos()`.
+ */
+declare function deriveTodosFromPlanItem(plan: PlanFile, idOrIndex: string, subtasks?: string[]): {
+    plan: PlanFile;
+    todos: Array<{
+        id: string;
+        content: string;
+        status: 'pending' | 'in_progress' | 'completed';
+        activeForm?: string;
+    }>;
+} | null;
 /**
  * Optional: attach a state-listener so meta operations (storing a plan
  * id on ctx.meta) trigger a save. Currently a stub — plans don't live
@@ -461,79 +477,24 @@ declare function formatPlan(plan: PlanFile): string;
 declare function attachPlanCheckpoint(_state: ConversationState, _filePath: string, _sessionId: string): () => void;
 
 /**
- * Director state checkpoint — written incrementally throughout a fleet
- * run so a crashed director can be inspected (and eventually resumed)
- * instead of leaving only a final `fleet.json` manifest after `shutdown()`.
+ * Plan templates — pre-defined plan skeletons for common workflows.
  *
- * Schema is JSON-friendly and deliberately denormalized. Each mutation
- * triggers an atomic-write of the whole file — small payloads (typically
- * < 10 KB even with dozens of subagents) make this cheap.
- */
-interface DirectorSubagentState {
-    id: string;
-    name?: string;
-    role?: string;
-    provider?: string;
-    model?: string;
-    spawnedAt: string;
-}
-interface DirectorTaskState {
-    taskId: string;
-    subagentId?: string;
-    description?: string;
-    status: 'pending' | 'running' | 'completed' | 'failed' | 'stopped' | 'timeout';
-    assignedAt?: string;
-    completedAt?: string;
-    iterations?: number;
-    toolCalls?: number;
-    durationMs?: number;
-    error?: string;
-}
-interface DirectorStateSnapshot {
-    version: 1;
-    directorRunId: string;
-    updatedAt: string;
-    spawnCount: number;
-    maxSpawns?: number;
-    spawnDepth: number;
-    maxSpawnDepth: number;
-    subagents: DirectorSubagentState[];
-    tasks: DirectorTaskState[];
-    /** Aggregated usage snapshot. Optional — populated by the Director on save when available. */
-    usage?: unknown;
-}
-declare function loadDirectorState(filePath: string): Promise<DirectorStateSnapshot | null>;
-/**
- * In-memory accumulator with atomic-write checkpoint. The Director keeps
- * an instance, mutates it on every spawn/assign/complete/fail event, and
- * the instance debounces writes so a burst of activity collapses into a
- * single disk hit.
+ * Templates are stored in-memory (no disk I/O). Users instantiate them
+ * via `/plan template use <name>` or `planTool(action: 'template_use')`.
+ * Each template is a function that returns an array of item titles, so
+ * dynamic content (dates, project names) can be injected later.
  */
-declare class DirectorStateCheckpoint {
-    private snapshot;
-    private readonly filePath;
-    private timer;
-    private readonly debounceMs;
-    private writing;
-    private rewriteRequested;
-    constructor(filePath: string, init: {
-        directorRunId: string;
-        maxSpawns?: number;
-        spawnDepth: number;
-        maxSpawnDepth: number;
-    }, debounceMs?: number);
-    current(): DirectorStateSnapshot;
-    recordSpawn(sub: DirectorSubagentState, spawnCount: number): void;
-    recordTaskAssigned(task: DirectorTaskState): void;
-    recordTaskStatus(taskId: string, patch: Partial<DirectorTaskState> & {
-        status: DirectorTaskState['status'];
-    }): void;
-    setUsage(usage: unknown): void;
-    /** Force a synchronous flush — used by Director.shutdown(). */
-    flush(): Promise<void>;
-    private bumpUpdatedAt;
-    private schedule;
-    private persist;
+interface PlanTemplate {
+    name: string;
+    description: string;
+    category: 'development' | 'release' | 'maintenance' | 'infrastructure';
+    items: Array<{
+        title: string;
+        details?: string;
+    }>;
 }
+declare function listPlanTemplates(): PlanTemplate[];
+declare function getPlanTemplate(name: string): PlanTemplate | undefined;
+declare function formatPlanTemplates(): string;
 
-export { type AbandonedSession as A, loadPlan as B, type ConfigLoaderOptions as C, DEFAULT_CONFIG_MIGRATIONS as D, loadTodosCheckpoint as E, removePlanItem as F, runConfigMigrations as G, savePlan as H, saveTodosCheckpoint as I, setPlanItemStatus as J, type MemoryStoreOptions as M, type PersistedQueueItem as P, QueueStore as Q, RecoveryLock as R, SessionAnalyzer as S, type TodosCheckpointFile as T, type AttachmentStoreOptions as a, type ConfigMigration as b, ConfigMigrationError as c, type ConfigSource as d, DefaultAttachmentStore as e, DefaultConfigLoader as f, DefaultConfigStore as g, DefaultMemoryStore as h, DefaultSessionStore as i, DirectorStateCheckpoint as j, type DirectorStateSnapshot as k, type DirectorSubagentState as l, type DirectorTaskState as m, type MigrationContext as n, type MigrationResult as o, type PlanFile as p, type PlanItem as q, type RecoveryLockOptions as r, type SessionStoreOptions as s, addPlanItem as t, attachPlanCheckpoint as u, attachTodosCheckpoint as v, clearPlan as w, emptyPlan as x, formatPlan as y, loadDirectorState as z };
+export { type AbandonedSession as A, loadPlan as B, type ConfigLoaderOptions as C, DEFAULT_CONFIG_MIGRATIONS as D, loadTodosCheckpoint as E, removePlanItem as F, runConfigMigrations as G, savePlan as H, saveTodosCheckpoint as I, setPlanItemStatus as J, type MemoryStoreOptions as M, type PersistedQueueItem as P, QueueStore as Q, RecoveryLock as R, SessionAnalyzer as S, type TodosCheckpointFile as T, type AttachmentStoreOptions as a, type ConfigMigration as b, ConfigMigrationError as c, type ConfigSource as d, DefaultAttachmentStore as e, DefaultConfigLoader as f, DefaultConfigStore as g, DefaultMemoryStore as h, DefaultSessionStore as i, type MigrationContext as j, type MigrationResult as k, type PlanFile as l, type PlanItem as m, type PlanTemplate as n, type RecoveryLockOptions as o, type SessionStoreOptions as p, addPlanItem as q, attachPlanCheckpoint as r, attachTodosCheckpoint as s, clearPlan as t, deriveTodosFromPlanItem as u, emptyPlan as v, formatPlan as w, formatPlanTemplates as x, getPlanTemplate as y, listPlanTemplates as z };

package/dist/{provider-runner-DGisz_lG.d.ts → provider-runner-3SHqk9zB.d.ts}

@@ -1,8 +1,8 @@
-import { E as EventBus } from './events-oxn-Wkub.js';
+import { E as EventBus } from './events-qnDZbrtb.js';
 import { L as Logger } from './logger-BMQgxvdy.js';
 import { T as Tracer } from './observability-BhnVLBLS.js';
-import { g as Provider, R as Request, a1 as Context, j as Response } from './context-PH4DvBZV.js';
-import { R as RetryPolicy } from './retry-policy-DUJ8-Qc_.js';
+import { g as Provider, R as Request, a2 as Context, j as Response } from './context-CLZXPPYk.js';
+import { R as RetryPolicy } from './retry-policy-LLUxJmYY.js';
 
 /**
  * Options passed to a ProviderRunner when calling the provider.

package/dist/{retry-policy-DUJ8-Qc_.d.ts → retry-policy-LLUxJmYY.d.ts}

@@ -1,4 +1,4 @@
-import { j as Response, a1 as Context, h as ProviderError } from './context-PH4DvBZV.js';
+import { j as Response, a2 as Context, h as ProviderError } from './context-CLZXPPYk.js';
 
 type RecoveryDecision = {
     /**

package/dist/sdd/index.d.ts

@@ -1,7 +1,7 @@
 import { h as Specification, S as SpecAnalysis, g as SpecValidationResult, l as TaskGraph, m as TaskNode, k as TaskFilter, p as TaskSort, o as TaskProgress, r as TaskType, n as TaskPriority, e as SpecStatus, f as SpecTemplate, b as SpecRequirement } from '../task-graph-BITvWt4t.js';
-import { E as EventBus } from '../events-oxn-Wkub.js';
-import { D as DoneCondition } from '../multi-agent-D6S4Z7H8.js';
-import '../context-PH4DvBZV.js';
+import { E as EventBus } from '../events-qnDZbrtb.js';
+import { D as DoneCondition } from '../multi-agent-Cv8wk47i.js';
+import '../context-CLZXPPYk.js';
 
 declare class SpecParser {
     parse(content: string): Specification;

package/dist/{secret-scrubber-CB11A2P7.d.ts → secret-scrubber-BhJTNr9v.d.ts}

@@ -1,4 +1,4 @@
-import { u as Tool, a1 as Context, P as Permission } from './context-PH4DvBZV.js';
+import { v as Tool, a2 as Context, P as Permission } from './context-CLZXPPYk.js';
 
 interface TrustPolicy {
     [toolNameOrPattern: string]: {
@@ -12,7 +12,9 @@ interface TrustPolicy {
 interface PermissionDecision {
     permission: Permission;
     reason?: string;
-    source: 'default' | 'trust' | 'yolo' | 'user' | 'deny' | 'context';
+    source: 'default' | 'trust' | 'yolo' | 'yolo_destructive' | 'user' | 'deny' | 'context';
+    /** Risk tier of the tool, if classified. */
+    riskTier?: 'safe' | 'standard' | 'destructive';
 }
 interface PermissionPolicy {
     evaluate(tool: Tool, input: unknown, ctx: Context): Promise<PermissionDecision>;

package/dist/{secret-scrubber-EqFa0SyI.d.ts → secret-scrubber-Z_VXuXQT.d.ts}

@@ -1,5 +1,5 @@
 import { S as SecretVault } from './secret-vault-DoISxaKO.js';
-import { S as SecretScrubber } from './secret-scrubber-CB11A2P7.js';
+import { S as SecretScrubber } from './secret-scrubber-BhJTNr9v.js';
 
 interface SecretVaultOptions {
     /** Absolute path to the key file. Created with mode 0o600 if missing. */

package/dist/security/index.d.ts

@@ -1,12 +1,17 @@
-export { D as DefaultSecretScrubber, a as DefaultSecretVault, S as SecretVaultOptions, d as decryptConfigSecrets, e as encryptConfigSecrets, m as migratePlaintextSecrets, r as rewriteConfigEncrypted } from '../secret-scrubber-EqFa0SyI.js';
-import { u as Tool, a1 as Context } from '../context-PH4DvBZV.js';
+export { D as DefaultSecretScrubber, a as DefaultSecretVault, S as SecretVaultOptions, d as decryptConfigSecrets, e as encryptConfigSecrets, m as migratePlaintextSecrets, r as rewriteConfigEncrypted } from '../secret-scrubber-Z_VXuXQT.js';
+import { v as Tool, a2 as Context } from '../context-CLZXPPYk.js';
 import { I as InputReader } from '../input-reader-E-ffP2ee.js';
-import { a as PermissionPolicy, P as PermissionDecision } from '../secret-scrubber-CB11A2P7.js';
+import { a as PermissionPolicy, P as PermissionDecision } from '../secret-scrubber-BhJTNr9v.js';
 import '../secret-vault-DoISxaKO.js';
 
 interface PermissionPolicyOptions {
     trustFile: string;
     yolo?: boolean;
+    /**
+     * When true, YOLO mode allows even `destructive` tools without confirm.
+     * Corresponds to the `--force-all-yolo` CLI flag.
+     */
+    forceAllYolo?: boolean;
     promptDelegate?: (tool: Tool, input: unknown, suggestedPattern: string) => Promise<'yes' | 'no' | 'always' | 'deny'>;
     inputReader?: InputReader;
 }
@@ -15,6 +20,7 @@ declare class DefaultPermissionPolicy implements PermissionPolicy {
     private loaded;
     private readonly trustFile;
     private yolo;
+    private forceAllYolo;
     /**
      * Session-scoped "soft deny" map. When the user presses 'n' (block once),
      * the tool+pattern is added here. If the LLM retries in the same session,
@@ -56,6 +62,10 @@ declare class DefaultPermissionPolicy implements PermissionPolicy {
     setYolo(enabled: boolean): void;
     /** Check whether YOLO mode is currently active. */
     getYolo(): boolean;
+    /** Toggle force-all-YOLO at runtime. */
+    setForceAllYolo(enabled: boolean): void;
+    /** Check whether force-all-YOLO is active. */
+    getForceAllYolo(): boolean;
     reload(): Promise<void>;
     evaluate(tool: Tool, input: unknown, ctx: Context): Promise<PermissionDecision>;
     trust(rule: {

package/dist/security/index.js

@@ -21,7 +21,15 @@ var PATTERNS = [
     type: "stripe_key",
     regex: /(?<![A-Za-z0-9])sk_(?:live|test)_[A-Za-z0-9]{24,}(?![A-Za-z0-9])/g
   },
-  { type: "twilio_sid", regex: /(?<![A-Za-z0-9])AC[a-f0-9]{32}(?![A-Za-z0-9])/g },
+  {
+    type: "twilio_sid",
+    regex: /(?<![A-Za-z0-9])AC[a-f0-9]{32}(?![A-Za-z0-9])/g
+  },
+  {
+    type: "telegram_bot_token",
+    // Telegram tokens are of the form  bot<digits>:<alphanum>  in URL paths
+    regex: /\/bot\d+:[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g
+  },
   {
     type: "jwt",
     // Anchored: look for literal "eyJ" which is unambiguous for JWT header
@@ -453,6 +461,7 @@ var DefaultPermissionPolicy = class {
   loaded = false;
   trustFile;
   yolo;
+  forceAllYolo;
   /**
    * Session-scoped "soft deny" map. When the user presses 'n' (block once),
    * the tool+pattern is added here. If the LLM retries in the same session,
@@ -485,6 +494,7 @@ var DefaultPermissionPolicy = class {
   constructor(opts) {
     this.trustFile = opts.trustFile;
     this.yolo = opts.yolo ?? false;
+    this.forceAllYolo = opts.forceAllYolo ?? false;
     this.promptDelegate = opts.promptDelegate;
   }
   /**
@@ -504,6 +514,14 @@ var DefaultPermissionPolicy = class {
   getYolo() {
     return this.yolo;
   }
+  /** Toggle force-all-YOLO at runtime. */
+  setForceAllYolo(enabled) {
+    this.forceAllYolo = enabled;
+  }
+  /** Check whether force-all-YOLO is active. */
+  getForceAllYolo() {
+    return this.forceAllYolo;
+  }
   async reload() {
     try {
       const raw = await fs2.readFile(this.trustFile, "utf8");
@@ -545,6 +563,21 @@ var DefaultPermissionPolicy = class {
       return { permission: "auto", source: "trust" };
     }
     if (this.yolo) {
+      if (tool.riskTier === "destructive" && !this.forceAllYolo) {
+        if (this.promptDelegate) {
+          const decision = await this.promptDelegate(tool, input, subject ?? tool.name);
+          if (decision === "always") {
+            await this.trust({ tool: tool.name, pattern: subject ?? tool.name });
+            return { permission: "auto", source: "user", reason: "destructive yolo always-allowed" };
+          }
+          if (decision === "deny") {
+            await this.deny({ tool: tool.name, pattern: subject ?? tool.name });
+            return { permission: "deny", source: "user", reason: "user denied destructive yolo" };
+          }
+          return { permission: decision === "yes" ? "auto" : "deny", source: "user" };
+        }
+        return { permission: "confirm", source: "yolo_destructive", riskTier: "destructive", reason: "destructive tool needs explicit approval even in yolo mode" };
+      }
       return { permission: "auto", source: "yolo" };
     }
     if (tool.name === "write" && subject) {