@wrongstack/core 0.9.20 → 0.10.0

package/dist/models-registry-gwMAo6E3.d.ts

@@ -0,0 +1,86 @@
+import { b as ModelsRegistry, M as ModelsDevPayload, c as ResolvedProvider, R as ResolvedModel, W as WireFamily } from './models-registry-BcYJDKLm.js';
+
+interface DefaultModelsRegistryOptions {
+    cacheFile: string;
+    url?: string;
+    ttlSeconds?: number;
+    fetchImpl?: typeof fetch;
+    /** Pre-seeded payload — useful for offline scenarios and tests. */
+    seed?: ModelsDevPayload;
+    /**
+     * Maximum age in seconds for stale cache fallback when network fails.
+     * Defaults to 7 days. Set to `Infinity` for full offline resilience
+     * (risk: deprecated models, wrong pricing). Set to `0` to disable
+     * stale fallback entirely.
+     */
+    maxStaleAgeSeconds?: number;
+    /**
+     * Curated override payload deep-merged ON TOP of the models.dev base via
+     * `mergeModelsPayload` — adds providers/models the base lacks and overrides
+     * fields it gets wrong. Resolution order (first non-empty wins): this
+     * in-memory `overlay` → `overlayUrl` (fetched, cached) → `overlayFile`
+     * (bundled, read from disk). A missing/broken overlay degrades to `{}` and
+     * never throws, so the base alone still works.
+     */
+    overlay?: ModelsDevPayload;
+    /** GitHub-raw (or any) URL serving the curated overlay `providers.json`. */
+    overlayUrl?: string;
+    /** Path to the bundled overlay `providers.json` (offline floor). */
+    overlayFile?: string;
+    /** Cache file for the fetched `overlayUrl`. Defaults next to `cacheFile`. */
+    overlayCacheFile?: string;
+}
+declare function classifyFamily(npm: string | undefined): WireFamily;
+declare class DefaultModelsRegistry implements ModelsRegistry {
+    /** Merged (base + overlay) payload — what every reader sees. */
+    private payload?;
+    /** Memoised overlay payload (in-memory / fetched / file). */
+    private overlayPayload?;
+    private fetchedAt?;
+    private readonly cacheFile;
+    private readonly url;
+    private readonly ttlMs;
+    private readonly fetchImpl;
+    private readonly seed?;
+    private readonly maxStaleAgeMs;
+    private readonly overlay?;
+    private readonly overlayUrl?;
+    private readonly overlayFile?;
+    private readonly overlayCacheFile?;
+    constructor(opts: DefaultModelsRegistryOptions);
+    load(opts?: {
+        force?: boolean;
+    }): Promise<ModelsDevPayload>;
+    /**
+     * Load the models.dev base payload: fresh cache → network → stale cache.
+     * On total failure, degrade to `{}` (so a non-empty overlay still drives
+     * the catalog) rather than throwing — unless there's no curated overlay to
+     * fall back on, in which case the original error propagates so pure-
+     * models.dev setups still surface the problem.
+     */
+    private loadBase;
+    /** Fetch + cache the models.dev base. Throws on failure (used by `refresh`). */
+    private refreshBase;
+    /**
+     * Resolve the curated overlay, memoised. Order: in-memory `overlay` →
+     * fetched `overlayUrl` (cached, same TTL/stale rules) → `overlayFile` on
+     * disk. Never throws — a missing/broken overlay yields `{}`.
+     */
+    private loadOverlay;
+    private loadOverlayFromUrl;
+    private readOverlayFile;
+    refresh(): Promise<ModelsDevPayload>;
+    listProviders(): Promise<ResolvedProvider[]>;
+    getProvider(id: string): Promise<ResolvedProvider | undefined>;
+    getModel(providerId: string, modelId: string): Promise<ResolvedModel | undefined>;
+    suggestModel(providerId: string): Promise<string | undefined>;
+    ageSeconds(): Promise<number>;
+    private resolveProvider;
+    private isFresh;
+    private isWithinMaxStaleAge;
+    private readCacheAt;
+    /** Used by `wstack models refresh` to expose where the cache lives. */
+    cacheLocation(): string;
+}
+
+export { DefaultModelsRegistry as D, type DefaultModelsRegistryOptions as a, classifyFamily as c };

package/dist/{multi-agent-DNp6lAzg.d.ts → multi-agent-C1O8EFzb.d.ts}

@@ -1,5 +1,5 @@
-import { $ as Usage } from './context-zkZeILpr.js';
-import { E as EventBus } from './events-DH-9r-_C.js';
+import { $ as Usage } from './context-7u93AcGD.js';
+import { E as EventBus } from './events-Bw1K5E6K.js';
 
 type BridgeMessageType = 'task' | 'result' | 'progress' | 'error' | 'heartbeat' | 'stop' | 'delegate' | 'budget_threshold';
 interface BridgeMessage<T = unknown> {
@@ -45,8 +45,21 @@ interface BudgetLimits {
     maxTokens?: number;
     /** Estimated USD cost ceiling. */
     maxCostUsd?: number;
-    /** Wall-clock timeout from start() to checkTimeout(). */
+    /**
+     * Hard wall-clock timeout measured from `start()`. Off by default — set it
+     * explicitly only when a task must finish within an absolute window. For
+     * the everyday "don't kill an agent that's still working" guard, prefer
+     * `idleTimeoutMs`, which resets on activity.
+     */
     timeoutMs?: number;
+    /**
+     * Idle timeout: the maximum gap (ms) between activity signals (iterations,
+     * tool calls, token usage, streamed progress) before the subagent is
+     * considered hung and reaped. Unlike `timeoutMs`, an actively-working
+     * agent continuously resets this clock via `markActivity()`, so it never
+     * trips on a long-but-productive run — only on a genuine stall.
+     */
+    idleTimeoutMs?: number;
 }
 /**
  * Controls how the budget behaves when `onThreshold` is set and a limit is hit.
@@ -133,6 +146,13 @@ declare class SubagentBudget {
     private tokenOutput;
     private costUsd;
     private startTime;
+    /**
+     * Timestamp of the most recent activity (iteration / tool call / token
+     * usage / streamed progress). Drives the idle timeout — reset by
+     * `markActivity()`. Initialised to `start()` time so a never-active agent
+     * still eventually trips its idle window.
+     */
+    private lastActivityTime;
     private _onThreshold;
     /**
      * Hard cap on how long `_negotiateExtension` waits for the coordinator to
@@ -166,6 +186,18 @@ declare class SubagentBudget {
     get mode(): BudgetNegotiationMode;
     constructor(limits?: BudgetLimits, mode?: BudgetNegotiationMode);
     start(): void;
+    /**
+     * Reset the idle clock. Called on any sign of forward progress —
+     * iterations, tool calls, token usage, and streamed tool/text progress —
+     * so a long-but-productive subagent never trips its `idleTimeoutMs`.
+     */
+    markActivity(): void;
+    /**
+     * Milliseconds since the last activity signal. Returns 0 before `start()`
+     * (nothing to measure yet). Used by the coordinator watchdog to decide
+     * whether to re-arm (still active) or reap (genuinely idle).
+     */
+    idleMs(): number;
     /** Returns true if we're within 10% of any limit — useful for pre-flight checks. */
     isNearLimit(): boolean;
     /**
@@ -225,7 +257,7 @@ declare class SubagentBudget {
      * - `mode === 'auto'` + listener     → throw `BudgetExceededError` (timeout is not extendable)
      */
     checkTimeout(): void;
-    /** Returns true if a timeout has occurred without throwing. Useful for races. */
+    /** Returns true if a wall-clock or idle timeout has occurred without throwing. */
     isTimedOut(): boolean;
     usage(): BudgetUsage;
 }
@@ -239,7 +271,15 @@ interface SubagentConfig {
     maxToolCalls?: number;
     maxTokens?: number;
     maxCostUsd?: number;
+    /** Hard wall-clock cap (ms) from start. Opt-in; prefer `idleTimeoutMs`. */
     timeoutMs?: number;
+    /**
+     * Idle timeout (ms): reap the subagent only after this long with no
+     * activity. Resets on every iteration / tool call / streamed progress, so
+     * an actively-working agent runs until its task naturally ends. This is the
+     * default reaper for delegated subagents (see `applyRosterBudget`).
+     */
+    idleTimeoutMs?: number;
     tools?: string[];
     model?: string;
     priority?: number;
@@ -403,6 +443,7 @@ interface MultiAgentConfig {
         maxTokens?: number;
         maxCostUsd?: number;
         timeoutMs?: number;
+        idleTimeoutMs?: number;
     };
 }
 interface SpawnResult {

package/dist/{multi-agent-coordinator-CAhsegPz.d.ts → multi-agent-coordinator-DoVSBFNx.d.ts}

@@ -1,5 +1,5 @@
-import { n as SubagentConfig, l as MultiAgentCoordinator, M as MultiAgentConfig, t as SubagentRunner, S as SpawnResult, v as TaskSpec, B as BridgeMessage, A as AgentBridge, k as CoordinatorStatus, u as TaskResult } from './multi-agent-DNp6lAzg.js';
-import { F as FleetBus } from './agent-subagent-runner-U-rs7kk7.js';
+import { n as SubagentConfig, l as MultiAgentCoordinator, M as MultiAgentConfig, t as SubagentRunner, S as SpawnResult, v as TaskSpec, B as BridgeMessage, A as AgentBridge, k as CoordinatorStatus, u as TaskResult } from './multi-agent-C1O8EFzb.js';
+import { F as FleetBus } from './agent-subagent-runner-KwufTWwn.js';
 import { EventEmitter } from 'node:events';
 
 /**

package/dist/{null-fleet-bus-Dnl19vmf.d.ts → null-fleet-bus-T-s3JaOt.d.ts}

@@ -1,11 +1,11 @@
-import { c as AgentPhase, b as AgentDefinition, d as DefaultMultiAgentCoordinator, f as DispatchClassifier } from './multi-agent-coordinator-CAhsegPz.js';
-import { n as SubagentConfig, u as TaskResult, k as CoordinatorStatus, v as TaskSpec, M as MultiAgentConfig, t as SubagentRunner } from './multi-agent-DNp6lAzg.js';
-import { B as SessionWriter, Q as Tool, y as SessionStore } from './context-zkZeILpr.js';
-import { F as FleetBus, e as FleetUsage, f as FleetUsageAggregator } from './agent-subagent-runner-U-rs7kk7.js';
+import { c as AgentPhase, b as AgentDefinition, d as DefaultMultiAgentCoordinator, f as DispatchClassifier } from './multi-agent-coordinator-DoVSBFNx.js';
+import { n as SubagentConfig, u as TaskResult, k as CoordinatorStatus, v as TaskSpec, M as MultiAgentConfig, t as SubagentRunner } from './multi-agent-C1O8EFzb.js';
+import { B as SessionWriter, Q as Tool, y as SessionStore } from './context-7u93AcGD.js';
+import { F as FleetBus, e as FleetUsage, f as FleetUsageAggregator } from './agent-subagent-runner-KwufTWwn.js';
 import { EventEmitter } from 'node:events';
 import { a as DirectorStateSnapshot } from './director-state-BmYi3DGA.js';
-import { I as InMemoryAgentBridge } from './agent-bridge-Dti3KXGk.js';
-import { E as EventBus } from './events-DH-9r-_C.js';
+import { I as InMemoryAgentBridge } from './agent-bridge-DBBGP5O4.js';
+import { E as EventBus } from './events-Bw1K5E6K.js';
 
 /**
  * Agent catalog aggregator.
@@ -1676,6 +1676,8 @@ declare const SECURITY_SCANNER_AGENT: SubagentConfig;
 declare const FLEET_ROSTER: Record<string, SubagentConfig>;
 interface FleetRosterBudget {
     timeoutMs?: number;
+    /** Idle reap window (ms). Resets on activity — see `applyRosterBudget`. */
+    idleTimeoutMs?: number;
     maxIterations?: number;
     maxToolCalls?: number;
     maxTokens?: number;

package/dist/observability/index.d.ts

@@ -1,6 +1,6 @@
 import { e as MetricsSink, M as MetricLabels, f as MetricsSnapshot, b as HealthRegistry, H as HealthCheck, A as AggregateHealth, T as Tracer, S as Span } from '../observability-BhnVLBLS.js';
-import { E as EventBus } from '../events-DH-9r-_C.js';
-import '../context-zkZeILpr.js';
+import { E as EventBus } from '../events-Bw1K5E6K.js';
+import '../context-7u93AcGD.js';
 
 /**
  * In-memory metrics sink. Suitable for embedded use, tests, and /metrics

package/dist/{path-resolver-CHiBL0DD.d.ts → path-resolver-BfyK-I7w.d.ts}

@@ -1,6 +1,6 @@
-import { E as EventBus } from './events-DH-9r-_C.js';
+import { E as EventBus } from './events-Bw1K5E6K.js';
 import { b as ModelsRegistry, R as ResolvedModel } from './models-registry-BcYJDKLm.js';
-import { O as TokenCounter, $ as Usage, C as CacheStats } from './context-zkZeILpr.js';
+import { O as TokenCounter, $ as Usage, C as CacheStats } from './context-7u93AcGD.js';
 import { P as PathResolver } from './path-resolver-CPRj4bFY.js';
 
 /**

package/dist/{permission-H35s9Evv.d.ts → permission-B6sldrSp.d.ts}

@@ -1,4 +1,4 @@
-import { Q as Tool, d as Context, P as Permission } from './context-zkZeILpr.js';
+import { Q as Tool, d as Context, P as Permission } from './context-7u93AcGD.js';
 
 interface TrustPolicy {
     [toolNameOrPattern: string]: {

package/dist/{permission-policy-CT-nRmTn.d.ts → permission-policy-CtNscWOA.d.ts}

@@ -1,6 +1,6 @@
-import { Q as Tool, d as Context } from './context-zkZeILpr.js';
+import { Q as Tool, d as Context } from './context-7u93AcGD.js';
 import { I as InputReader } from './input-reader-E-ffP2ee.js';
-import { a as PermissionPolicy, P as PermissionDecision } from './permission-H35s9Evv.js';
+import { a as PermissionPolicy, P as PermissionDecision } from './permission-B6sldrSp.js';
 
 interface PermissionPolicyOptions {
     trustFile: string;
@@ -98,17 +98,18 @@ declare class DefaultPermissionPolicy implements PermissionPolicy {
  *
  * Tool defaults of `permission: 'deny'` are still honored (this is a
  * subagent capability override, not a deny-bypass).
+ *
+ * 2026-06+: Primary decision is now based on declared `Tool.capabilities`
+ * (capability allowlist / denylist model). The legacy name-based DENY set
+ * is kept only for backward compatibility with tools that have not yet
+ * declared capabilities.
  */
 declare class AutoApprovePermissionPolicy implements PermissionPolicy {
     /**
-     * Tools that are too dangerous to auto-approve even in a delegated
-     * subagent context. Subagents run non-interactively under a director
-     * and cannot answer prompts, but inherited authorization does not
-     * imply blanket permission for destructive or privilege-escalating
-     * operations. These tools remain at their declared `permission`
-     * level so the leader must explicitly allow them per-spawn.
+     * Legacy name-based denylist.
+     * @deprecated Prefer declaring `capabilities` on the Tool and using capability-based checks.
      */
-    private static readonly DENY;
+    private static readonly LEGACY_NAME_DENY;
     /**
      * Tools from MCP servers (`mcp__<server>__<tool>`) are external code of
      * unknown capability — they may wrap a shell or filesystem. They are

package/dist/{plan-templates-Bs8iRwi6.d.ts → plan-templates-BWs6Je7j.d.ts}

@@ -1,10 +1,10 @@
-import { E as EventBus } from './events-DH-9r-_C.js';
+import { E as EventBus } from './events-Bw1K5E6K.js';
 import { S as SecretScrubber } from './secret-scrubber-3MHDDAtm.js';
-import { y as SessionStore, x as SessionMetadata, B as SessionWriter, r as ResumedSession, S as SessionData, z as SessionSummary, c as ContentBlock, w as SessionEvent, N as TodoItem, f as ConversationState } from './context-zkZeILpr.js';
-import { e as AttachmentStore, A as AddAttachmentInput, d as AttachmentRef, a as Attachment } from './session-reader-C7JJlxOw.js';
+import { y as SessionStore, x as SessionMetadata, B as SessionWriter, r as ResumedSession, S as SessionData, z as SessionSummary, c as ContentBlock, w as SessionEvent, N as TodoItem, f as ConversationState } from './context-7u93AcGD.js';
+import { e as AttachmentStore, A as AddAttachmentInput, d as AttachmentRef, a as Attachment } from './session-reader-CCSBfQmd.js';
 import { b as MemoryStore, a as MemoryScope } from './memory-CEXuo7sz.js';
-import { a as WstackPaths } from './wstack-paths-BCgmTNlG.js';
-import { c as ConfigStore, a as Config, b as ConfigLoader, m as SyncConfig } from './config-CLXMDOSs.js';
+import { a as WstackPaths } from './wstack-paths-eMXnY1_X.js';
+import { c as ConfigStore, a as Config, b as ConfigLoader, n as SyncConfig } from './config-CJXBka2r.js';
 import { S as SecretVault } from './secret-vault-DoISxaKO.js';
 
 interface SessionStoreOptions {
@@ -84,9 +84,9 @@ interface AttachmentStoreOptions {
 }
 /**
  * In-memory attachment store with optional disk spool. Placeholder syntax
- * is `[<kind> #<seq>]` where kind is `pasted` / `image` / `file`. Unknown
- * placeholders are passed through as-is so users can write that literal
- * text without losing it.
+ * is `[<kind> #<seq>]` (seq-keyed) or `[file:<path>]` (path-keyed) where kind
+ * is `pasted` / `image` / `file`. Unknown placeholders are passed through
+ * as-is so users can write that literal text without losing it.
  */
 declare class DefaultAttachmentStore implements AttachmentStore {
     private readonly items;

package/dist/{provider-runner-BZdDrWrS.d.ts → provider-runner-BmPe2RuU.d.ts}

@@ -1,8 +1,8 @@
-import { E as EventBus } from './events-DH-9r-_C.js';
+import { E as EventBus } from './events-Bw1K5E6K.js';
 import { a as Logger } from './logger-DDd5C--Z.js';
 import { T as Tracer } from './observability-BhnVLBLS.js';
-import { m as Provider, p as Request, d as Context, q as Response } from './context-zkZeILpr.js';
-import { a as RetryPolicy } from './retry-policy-J9N_PM40.js';
+import { m as Provider, p as Request, d as Context, q as Response } from './context-7u93AcGD.js';
+import { a as RetryPolicy } from './retry-policy-KF18W4dg.js';
 
 /**
  * Options passed to a ProviderRunner when calling the provider.

package/dist/{retry-policy-J9N_PM40.d.ts → retry-policy-KF18W4dg.d.ts}

@@ -1,4 +1,4 @@
-import { q as Response, d as Context, n as ProviderError } from './context-zkZeILpr.js';
+import { q as Response, d as Context, n as ProviderError } from './context-7u93AcGD.js';
 
 type RecoveryDecision = {
     /**

package/dist/sdd/index.d.ts

@@ -1,15 +1,15 @@
 import { h as Specification, S as SpecAnalysis, g as SpecValidationResult, l as TaskGraph, m as TaskNode, k as TaskFilter, p as TaskSort, o as TaskProgress, r as TaskType, n as TaskPriority, e as SpecStatus, f as SpecTemplate, b as SpecRequirement } from '../task-graph-D1YQbpxF.js';
-import { E as EventBus } from '../events-DH-9r-_C.js';
-import { D as DoneCondition, u as TaskResult } from '../multi-agent-DNp6lAzg.js';
-import { c as Agent } from '../index-BIHJ4uII.js';
-import { A as AgentFactory } from '../agent-subagent-runner-U-rs7kk7.js';
-import '../context-zkZeILpr.js';
+import { E as EventBus } from '../events-Bw1K5E6K.js';
+import { D as DoneCondition, u as TaskResult } from '../multi-agent-C1O8EFzb.js';
+import { c as Agent } from '../index-DgQWnZxP.js';
+import { A as AgentFactory } from '../agent-subagent-runner-KwufTWwn.js';
+import '../context-7u93AcGD.js';
 import '../logger-DDd5C--Z.js';
-import '../system-prompt-CneIxVip.js';
+import '../system-prompt-CM6zOhd2.js';
 import '../observability-BhnVLBLS.js';
 import '../secret-scrubber-3MHDDAtm.js';
-import '../permission-H35s9Evv.js';
-import '../config-CLXMDOSs.js';
+import '../permission-B6sldrSp.js';
+import '../config-CJXBka2r.js';
 import '../models-registry-BcYJDKLm.js';
 
 declare class SpecParser {