@wrongstack/core 0.9.19 → 0.10.0

package/dist/{permission-policy-BUQSutpl.d.ts → permission-policy-CtNscWOA.d.ts}

@@ -1,6 +1,6 @@
-import { Q as Tool, d as Context } from './context-BRNbHmRM.js';
+import { Q as Tool, d as Context } from './context-7u93AcGD.js';
 import { I as InputReader } from './input-reader-E-ffP2ee.js';
-import { a as PermissionPolicy, P as PermissionDecision } from './permission-bPuzAy4x.js';
+import { a as PermissionPolicy, P as PermissionDecision } from './permission-B6sldrSp.js';
 
 interface PermissionPolicyOptions {
     trustFile: string;
@@ -98,17 +98,18 @@ declare class DefaultPermissionPolicy implements PermissionPolicy {
  *
  * Tool defaults of `permission: 'deny'` are still honored (this is a
  * subagent capability override, not a deny-bypass).
+ *
+ * 2026-06+: Primary decision is now based on declared `Tool.capabilities`
+ * (capability allowlist / denylist model). The legacy name-based DENY set
+ * is kept only for backward compatibility with tools that have not yet
+ * declared capabilities.
  */
 declare class AutoApprovePermissionPolicy implements PermissionPolicy {
     /**
-     * Tools that are too dangerous to auto-approve even in a delegated
-     * subagent context. Subagents run non-interactively under a director
-     * and cannot answer prompts, but inherited authorization does not
-     * imply blanket permission for destructive or privilege-escalating
-     * operations. These tools remain at their declared `permission`
-     * level so the leader must explicitly allow them per-spawn.
+     * Legacy name-based denylist.
+     * @deprecated Prefer declaring `capabilities` on the Tool and using capability-based checks.
      */
-    private static readonly DENY;
+    private static readonly LEGACY_NAME_DENY;
     /**
      * Tools from MCP servers (`mcp__<server>__<tool>`) are external code of
      * unknown capability — they may wrap a shell or filesystem. They are

package/dist/{plan-templates-fkQTyz3U.d.ts → plan-templates-BWs6Je7j.d.ts}

@@ -1,10 +1,10 @@
-import { E as EventBus } from './events-CiG9qUM_.js';
+import { E as EventBus } from './events-Bw1K5E6K.js';
 import { S as SecretScrubber } from './secret-scrubber-3MHDDAtm.js';
-import { y as SessionStore, x as SessionMetadata, B as SessionWriter, r as ResumedSession, S as SessionData, z as SessionSummary, c as ContentBlock, w as SessionEvent, N as TodoItem, f as ConversationState } from './context-BRNbHmRM.js';
-import { e as AttachmentStore, A as AddAttachmentInput, d as AttachmentRef, a as Attachment } from './session-reader-CSWcb5Ga.js';
+import { y as SessionStore, x as SessionMetadata, B as SessionWriter, r as ResumedSession, S as SessionData, z as SessionSummary, c as ContentBlock, w as SessionEvent, N as TodoItem, f as ConversationState } from './context-7u93AcGD.js';
+import { e as AttachmentStore, A as AddAttachmentInput, d as AttachmentRef, a as Attachment } from './session-reader-CCSBfQmd.js';
 import { b as MemoryStore, a as MemoryScope } from './memory-CEXuo7sz.js';
-import { a as WstackPaths } from './wstack-paths-BCgmTNlG.js';
-import { c as ConfigStore, a as Config, b as ConfigLoader, m as SyncConfig } from './config-CWva0qoL.js';
+import { a as WstackPaths } from './wstack-paths-eMXnY1_X.js';
+import { c as ConfigStore, a as Config, b as ConfigLoader, n as SyncConfig } from './config-CJXBka2r.js';
 import { S as SecretVault } from './secret-vault-DoISxaKO.js';
 
 interface SessionStoreOptions {
@@ -84,9 +84,9 @@ interface AttachmentStoreOptions {
 }
 /**
  * In-memory attachment store with optional disk spool. Placeholder syntax
- * is `[<kind> #<seq>]` where kind is `pasted` / `image` / `file`. Unknown
- * placeholders are passed through as-is so users can write that literal
- * text without losing it.
+ * is `[<kind> #<seq>]` (seq-keyed) or `[file:<path>]` (path-keyed) where kind
+ * is `pasted` / `image` / `file`. Unknown placeholders are passed through
+ * as-is so users can write that literal text without losing it.
  */
 declare class DefaultAttachmentStore implements AttachmentStore {
     private readonly items;

package/dist/{provider-runner-BEpikbbN.d.ts → provider-runner-BmPe2RuU.d.ts}

@@ -1,8 +1,8 @@
-import { E as EventBus } from './events-CiG9qUM_.js';
+import { E as EventBus } from './events-Bw1K5E6K.js';
 import { a as Logger } from './logger-DDd5C--Z.js';
 import { T as Tracer } from './observability-BhnVLBLS.js';
-import { m as Provider, p as Request, d as Context, q as Response } from './context-BRNbHmRM.js';
-import { a as RetryPolicy } from './retry-policy-BYkq0ugs.js';
+import { m as Provider, p as Request, d as Context, q as Response } from './context-7u93AcGD.js';
+import { a as RetryPolicy } from './retry-policy-KF18W4dg.js';
 
 /**
  * Options passed to a ProviderRunner when calling the provider.

package/dist/{retry-policy-BYkq0ugs.d.ts → retry-policy-KF18W4dg.d.ts}

@@ -1,4 +1,4 @@
-import { q as Response, d as Context, n as ProviderError } from './context-BRNbHmRM.js';
+import { q as Response, d as Context, n as ProviderError } from './context-7u93AcGD.js';
 
 type RecoveryDecision = {
     /**

package/dist/sdd/index.d.ts

@@ -1,15 +1,15 @@
 import { h as Specification, S as SpecAnalysis, g as SpecValidationResult, l as TaskGraph, m as TaskNode, k as TaskFilter, p as TaskSort, o as TaskProgress, r as TaskType, n as TaskPriority, e as SpecStatus, f as SpecTemplate, b as SpecRequirement } from '../task-graph-D1YQbpxF.js';
-import { E as EventBus } from '../events-CiG9qUM_.js';
-import { D as DoneCondition, u as TaskResult } from '../multi-agent-3ZnTB1aT.js';
-import { c as Agent } from '../index-aizK8olO.js';
-import { A as AgentFactory } from '../agent-subagent-runner-C4qt9e5Y.js';
-import '../context-BRNbHmRM.js';
+import { E as EventBus } from '../events-Bw1K5E6K.js';
+import { D as DoneCondition, u as TaskResult } from '../multi-agent-C1O8EFzb.js';
+import { c as Agent } from '../index-DgQWnZxP.js';
+import { A as AgentFactory } from '../agent-subagent-runner-KwufTWwn.js';
+import '../context-7u93AcGD.js';
 import '../logger-DDd5C--Z.js';
-import '../system-prompt-Bs-Wliab.js';
+import '../system-prompt-CM6zOhd2.js';
 import '../observability-BhnVLBLS.js';
 import '../secret-scrubber-3MHDDAtm.js';
-import '../permission-bPuzAy4x.js';
-import '../config-CWva0qoL.js';
+import '../permission-B6sldrSp.js';
+import '../config-CJXBka2r.js';
 import '../models-registry-BcYJDKLm.js';
 
 declare class SpecParser {
@@ -675,10 +675,9 @@ interface TaskBatch {
 }
 declare class SddTaskDecomposer {
     private readonly tracker;
-    private readonly graph;
     private readonly slots;
     private wave;
-    constructor(tracker: TaskTracker, graph: TaskGraph, opts?: SddTaskDecomposerOptions);
+    constructor(tracker: TaskTracker, _graph: TaskGraph, opts?: SddTaskDecomposerOptions);
     /**
      * Return the next batch of runnable tasks.
      * Returns `allDone: true` when every node is completed.