@wrongstack/core 0.9.20 → 0.10.2

package/README.md

@@ -20,7 +20,7 @@ Requires **Node.js ≥ 22.0.0**.
 src/
   core/         — Agent, Context, ConversationState, ProviderRunner, InputBuilder
   defaults/     — Production-ready implementations (session store, secret vault, …)
-  kernel/       — Container, TOKENS, EventBus, ToolRegistry, ProviderRegistry
+  kernel/       — Container, TOKENS, EventBus, ScopedEventBus, Pipeline, RunController
   plugin/       — Plugin loader, PluginAPI, manifest validation
   registry/     — SlashCommandRegistry, ToolRegistry, ProviderRegistry
   types/        — Public type surface (Tool, Provider, SessionStore, …)
@@ -29,55 +29,59 @@ src/
 
 ## Quick example
 
-Run an agent loop with the Anthropic provider and a single tool:
+The kernel is the small set of primitives the agent is built on. You can use them
+standalone — for instance, to wire a small observability pipeline around a tool call:
 
 ```ts
 import {
-  Agent,
   Container,
-  Context,
-  DefaultEventBus,
+  EventBus,
+  Pipeline,
+  RunController,
+  TOKENS,
   DefaultLogger,
   DefaultPermissionPolicy,
-  DefaultSessionStore,
-  DefaultSystemPromptBuilder,
-  DefaultTokenCounter,
-  ToolRegistry,
-  TOKENS,
 } from '@wrongstack/core';
-import { AnthropicProvider } from '@wrongstack/providers';
-import { readTool, writeTool, bashTool } from '@wrongstack/tools';
 
+// 1. DI container — bind defaults to TOKENS, override per token.
 const container = new Container();
-container.bind(TOKENS.EventBus, () => new DefaultEventBus());
 container.bind(TOKENS.Logger, () => new DefaultLogger());
 container.bind(TOKENS.PermissionPolicy, () => new DefaultPermissionPolicy());
 
-const provider = new AnthropicProvider({ apiKey: process.env.ANTHROPIC_API_KEY! });
-const tools = new ToolRegistry([readTool, writeTool, bashTool]);
-
-const ctx = new Context({
-  cwd: process.cwd(),
-  projectRoot: process.cwd(),
-  provider,
-  model: 'claude-sonnet-4-6',
-  tokenCounter: new DefaultTokenCounter({ providerId: 'anthropic' }),
+// 2. Typed event bus — observe, don't mutate. Listener errors are isolated
+//    and routed to the optional logger; one bad subscriber can't kill emit().
+const events = new EventBus();
+events.on('tool.executed', ({ name, durationMs }) => {
+  console.log(`tool ${name} ran in ${durationMs}ms`);
 });
 
-const agent = new Agent({
-  container,
-  ctx,
-  tools,
-  systemPromptBuilder: new DefaultSystemPromptBuilder(),
-});
-
-const result = await agent.run({
-  input: { text: 'list the files in src/' },
+// 3. Koa-style pipeline — chain middleware around a value. The error
+//    boundary decides per-middleware whether to rethrow or swallow, so
+//    one bad plugin can't take down the agent loop.
+type Req = { url: string };
+const requestLog = new Pipeline<Req>();
+requestLog.use({
+  name: 'timing',
+  handler: async (req, next) => {
+    const start = Date.now();
+    const res = await next(req);
+    console.log(`${req.url} took ${Date.now() - start}ms`);
+    return res;
+  },
 });
+requestLog.setErrorHandler(() => 'swallow');
 
-console.log(result.assistantText);
+// 4. Abort + cleanup — hooks fire in LIFO order on abort OR dispose().
+const run = new RunController();
+const off = run.onAbort(() => console.log('cleaning up'));
+// later, when the run ends:  await run.dispose();
 ```
 
+For a full agent loop with a real LLM provider and tools, see
+[`packages/cli/src/wiring/pipeline.ts`](../cli/src/wiring/pipeline.ts) — the
+`Agent` constructor needs a `ToolExecutor`, `ProviderRegistry`, and several
+container-resolved policies, which the CLI assembles from the user's config.
+
 ## Replacing a default
 
 Every concrete class under `defaults/` implements an interface in `types/`. The container resolves by token, so swapping is a one-line change:
@@ -95,7 +99,7 @@ class StrictPolicy implements PermissionPolicy {
 container.bind(TOKENS.PermissionPolicy, () => new StrictPolicy());
 ```
 
-The same pattern works for `SessionStore`, `MemoryStore`, `SystemPromptBuilder`, `RetryPolicy`, `ErrorHandler`, `TokenCounter`, `SecretVault`, `SecretScrubber`, `Compactor`, `ConfigStore`, `ModelsRegistry`, `ModeStore`.
+The same pattern works for `SessionStore`, `MemoryStore`, `SystemPromptBuilder`, `RetryPolicy`, `ErrorHandler`, `TokenCounter`, `SecretScrubber`, `Compactor`, `ConfigStore`, `ModelsRegistry`, `ModeStore`. (`SecretVault` isn't container-resolved — pass it to `ConfigLoader` instead.)
 
 ## Building a tool
 

package/dist/{agent-bridge-Dti3KXGk.d.ts → agent-bridge-DBBGP5O4.d.ts}

@@ -1,4 +1,4 @@
-import { b as BridgeTransport, B as BridgeMessage, A as AgentBridge, a as AgentBridgeConfig } from './multi-agent-DNp6lAzg.js';
+import { b as BridgeTransport, B as BridgeMessage, A as AgentBridge, a as AgentBridgeConfig } from './multi-agent-C1O8EFzb.js';
 
 /**
  * In-memory pub/sub transport for agent-to-agent messaging.

package/dist/{agent-subagent-runner-U-rs7kk7.d.ts → agent-subagent-runner-KwufTWwn.d.ts}

@@ -1,6 +1,6 @@
-import { c as Agent, f as AgentInput } from './index-BIHJ4uII.js';
-import { E as EventBus } from './events-DH-9r-_C.js';
-import { n as SubagentConfig, v as TaskSpec, t as SubagentRunner } from './multi-agent-DNp6lAzg.js';
+import { c as Agent, f as AgentInput } from './index-DgQWnZxP.js';
+import { E as EventBus } from './events-Bw1K5E6K.js';
+import { n as SubagentConfig, v as TaskSpec, t as SubagentRunner } from './multi-agent-C1O8EFzb.js';
 
 /**
  * Single fleet-wide event with subagent attribution. Whatever a child

package/dist/{compactor-D7X96RLZ.d.ts → compactor-D1RHFRmF.d.ts}

@@ -1,4 +1,4 @@
-import { d as Context } from './context-zkZeILpr.js';
+import { d as Context } from './context-7u93AcGD.js';
 
 interface CompactRepairReport {
     removedToolUses: string[];

package/dist/{config-CLXMDOSs.d.ts → config-CJXBka2r.d.ts}

@@ -1,5 +1,5 @@
 import { W as WireFamily } from './models-registry-BcYJDKLm.js';
-import { P as Permission } from './context-zkZeILpr.js';
+import { P as Permission } from './context-7u93AcGD.js';
 
 type ContextWindowModeId = 'balanced' | 'frugal' | 'deep' | 'archival';
 type ContextWindowAggressiveOn = 'hard' | 'soft' | 'warn';
@@ -165,6 +165,37 @@ interface AutonomyConfig {
     /** ms to wait before auto-proceeding in 'auto' mode. Default: 45000. */
     autoProceedDelayMs?: number;
 }
+/**
+ * Controls how much detail is persisted to the per-session JSONL log
+ * (`~/.wrongstack/projects/<hash>/sessions/<id>.jsonl`).
+ */
+interface SessionLoggingConfig {
+    /**
+     * How much detail to write to the persistent session log.
+     *
+     * - "minimal"  → Only events required for resume/rewind/recovery
+     * - "standard" → (default) + high-value lightweight audit events
+     *                (compaction, tool timing, retries, errors, etc.)
+     * - "full"     → Also persist full request payloads (very large).
+     *                Consider enabling a separate replay log instead.
+     */
+    auditLevel?: 'minimal' | 'standard' | 'full';
+    /**
+     * Sampling configuration for high-volume events (especially relevant at
+     * `auditLevel: "full"`).
+     */
+    sampling?: {
+        /** Controls sampling of `tool_progress` events. */
+        toolProgress?: {
+            /**
+             * Sample rate for noisy progress events (`log`, `partial_output`).
+             * - 1 = no sampling (every message is logged)
+             * - 8 = default (first message + every 8th)
+             */
+            sampleRate?: number;
+        };
+    };
+}
 type SyncCategory = 'settings' | 'skills' | 'prompts' | 'memory' | 'history';
 interface SyncConfig {
     enabled: boolean;
@@ -191,6 +222,11 @@ interface Config {
     cwd?: string;
     /** Autonomy mode configuration (auto-proceed delay, etc.). */
     autonomy?: AutonomyConfig;
+    /**
+     * Session logging & audit configuration.
+     * Controls what gets written to the persistent JSONL transcript.
+     */
+    session?: SessionLoggingConfig;
     /**
      * Cloud sync configuration. Stored separately in sync.json to avoid
      * accidentally committing the GitHub token to project configs.
@@ -252,4 +288,4 @@ interface ConfigStore {
     watch(cb: (next: Readonly<Config>, prev: Readonly<Config>) => void): () => void;
 }
 
-export { type AutonomyConfig as A, CONTEXT_WINDOW_MODES as C, DEFAULT_CONTEXT_WINDOW_MODE_ID as D, type FeaturesConfig as F, type LogConfig as L, type MCPServerConfig as M, type PluginConfig as P, type SyncCategory as S, type ToolsConfig as T, type Config as a, type ConfigLoader as b, type ConfigStore as c, type ContextConfig as d, type ContextWindowAggressiveOn as e, type ContextWindowConfigLike as f, type ContextWindowMode as g, type ContextWindowModeId as h, type ContextWindowPolicy as i, type ContextWindowThresholds as j, type ProviderApiKey as k, type ProviderConfig as l, type SyncConfig as m, formatContextWindowModeList as n, getContextWindowMode as o, isContextWindowModeId as p, listContextWindowModes as q, resolveContextWindowPolicy as r };
+export { type AutonomyConfig as A, CONTEXT_WINDOW_MODES as C, DEFAULT_CONTEXT_WINDOW_MODE_ID as D, type FeaturesConfig as F, type LogConfig as L, type MCPServerConfig as M, type PluginConfig as P, type SessionLoggingConfig as S, type ToolsConfig as T, type Config as a, type ConfigLoader as b, type ConfigStore as c, type ContextConfig as d, type ContextWindowAggressiveOn as e, type ContextWindowConfigLike as f, type ContextWindowMode as g, type ContextWindowModeId as h, type ContextWindowPolicy as i, type ContextWindowThresholds as j, type ProviderApiKey as k, type ProviderConfig as l, type SyncCategory as m, type SyncConfig as n, formatContextWindowModeList as o, getContextWindowMode as p, isContextWindowModeId as q, listContextWindowModes as r, resolveContextWindowPolicy as s };

package/dist/{context-zkZeILpr.d.ts → context-7u93AcGD.d.ts}

@@ -131,8 +131,10 @@ declare const ERROR_CODES: {
     readonly SESSION_WRITE_FAILED: "SESSION_WRITE_FAILED";
     readonly CONTAINER_TOKEN_ALREADY_BOUND: "CONTAINER_TOKEN_ALREADY_BOUND";
     readonly CONTAINER_TOKEN_NOT_BOUND: "CONTAINER_TOKEN_NOT_BOUND";
+    readonly CONTAINER_CIRCULAR_DEPENDENCY: "CONTAINER_CIRCULAR_DEPENDENCY";
     readonly REGISTRY_DUPLICATE: "REGISTRY_DUPLICATE";
     readonly REGISTRY_NOT_FOUND: "REGISTRY_NOT_FOUND";
+    readonly REGISTRY_INVALID: "REGISTRY_INVALID";
     readonly FS_READ_FAILED: "FS_READ_FAILED";
     readonly FS_WRITE_FAILED: "FS_WRITE_FAILED";
     readonly FS_MKDIR_FAILED: "FS_MKDIR_FAILED";
@@ -348,6 +350,19 @@ interface Tool<I = unknown, O = unknown> {
      * unpredictably.
      */
     estimatedDurationMs?: number;
+    /**
+     * Declarative security capabilities granted by this tool.
+     *
+     * Examples: "shell.arbitrary", "fs.write", "fs.write.outside-project",
+     * "net.outbound", "mcp.proxy", "subagent.spawn", "config.mutate".
+     *
+     * These are used by permission policies (especially subagent guards) and
+     * future capability-based allowlists. Prefer well-known values over ad-hoc strings.
+     *
+     * This field is optional for backward compatibility. Tools without it are
+     * treated conservatively by guards.
+     */
+    capabilities?: readonly string[];
     execute(input: I, ctx: Context, opts: {
         signal: AbortSignal;
     }): Promise<O>;
@@ -584,6 +599,42 @@ interface SessionMetadata {
     /** Set when a session is closed with open tool calls — used to restore pending state on resume. */
     pendingToolUses?: string[];
 }
+/**
+ * SessionEvent — per-session persistent JSONL audit + reconstruct log.
+ *
+ * ## Two-Tier Model (see Config.session.auditLevel)
+ *
+ * **Core Reconstruct Set** (always persisted, minimal & reliable):
+ * - `session_start`, `session_resumed`, `user_input`, `llm_response`, `tool_result`
+ * - `checkpoint`, `file_snapshot`, `rewound`
+ * - `in_flight_start` / `in_flight_end`, `session_end`
+ *
+ * These events are **required** for correct resume, rewind, crash recovery
+ * and conversation replay. They are written regardless of auditLevel.
+ *
+ * **Audit Detail Set** (controlled by `session.auditLevel`):
+ * - `llm_request` (lightweight by default)
+ * - `tool_use`, `tool_call_start`/`tool_call_end`
+ * - `compaction`, `error`, `message_truncated`, provider retries, etc.
+ *
+ * When `auditLevel: "minimal"` only Core Reconstruct events are guaranteed.
+ * `"standard"` (default) adds the most valuable lightweight audit events.
+ * `"full"` enables heavier payloads (may be stored in a sidecar replay log).
+ *
+ * ## Guarantees
+ * - All appends are best-effort. A failed write logs a throttled warning but
+ *   never aborts the agent loop.
+ * - Sensitive content in `user_input` and `llm_response` is passed through
+ *   the configured SecretScrubber before being written or summarized.
+ * - The log is append-only JSONL. Individual lines may be malformed after
+ *   hard crashes; `DefaultSessionStore.load()` silently skips bad lines.
+ *
+ * ## Location (source of truth: resolveWstackPaths)
+ * ~/.wrongstack/projects/<sha256(projectRoot).slice(0,12)>/sessions/<id>.jsonl
+ *
+ * The only files that live inside the project tree are the committed
+ * `.wrongstack/AGENTS.md` and `.wrongstack/skills/`.
+ */
 type SessionEvent = {
     type: 'session_start';
     ts: string;
@@ -605,6 +656,10 @@ type SessionEvent = {
     ts: string;
     model: string;
     messageCount: number;
+    /** Estimated total input tokens for this request (messages + tools + system). */
+    estimatedInputTokens?: number;
+    /** Number of tools offered to the model in this request. */
+    toolCount?: number;
 } | {
     type: 'llm_response';
     ts: string;
@@ -628,6 +683,14 @@ type SessionEvent = {
     ts: string;
     before: number;
     after: number;
+    /** Pressure level that triggered the compaction. */
+    level?: 'warn' | 'soft' | 'hard';
+    aggressive?: boolean;
+    /** Summary of token savings per phase (elision, summary, selective). */
+    reductions?: Array<{
+        phase: string;
+        saved: number;
+    }>;
 } | {
     type: 'error';
     ts: string;
@@ -709,12 +772,43 @@ type SessionEvent = {
     name: string;
     id: string;
     durationMs: number;
+    /** Legacy field kept for backward compatibility. Prefer outputBytes. */
     outputSize: number;
+    ok?: boolean;
+    outputBytes?: number;
+    outputTokens?: number;
+    outputLines?: number;
+} | {
+    /** Lightweight sampled progress from Tool.executeStream (only at auditLevel 'full'). */
+    type: 'tool_progress';
+    ts: string;
+    name: string;
+    id: string;
+    event: {
+        type: 'log' | 'warning' | 'metric' | 'file_changed' | 'partial_output';
+        text?: string;
+        data?: Record<string, unknown>;
+    };
 } | {
     type: 'message_truncated';
     ts: string;
     before: number;
     after: number;
+} | {
+    type: 'provider_retry';
+    ts: string;
+    providerId: string;
+    attempt: number;
+    delayMs: number;
+    status?: number;
+    description: string;
+} | {
+    type: 'provider_error';
+    ts: string;
+    providerId: string;
+    status?: number;
+    description: string;
+    retryable: boolean;
 } | {
     type: 'checkpoint';
     ts: string;

package/dist/coordination/index.d.ts

@@ -1,20 +1,20 @@
-export { A as ACP_AGENTS, a as AGENTS_BY_PHASE, b as AGENT_CATALOG, c as ALL_AGENT_DEFINITIONS, d as ALL_FLEET_AGENTS, e as AUDIT_LOG_AGENT, f as AutoExtendCeiling, g as AutoExtendPolicy, B as BUG_HUNTER_AGENT, h as BugFinding, C as CollabBudgetConfig, i as CollabBudgetOverrides, j as CollabBudgetWarningPayload, k as CollabDebugReport, l as CollabSession, m as CollabSessionOptions, n as CreateDelegateToolOptions, o as CriticConcern, p as CriticEvaluation, D as DEFAULT_DIRECTOR_PREAMBLE, q as DEFAULT_SUBAGENT_BASELINE, r as DelegateHost, s as Director, t as DirectorAlert, u as DirectorAlertLevel, v as DirectorCancelCollabPayload, w as DirectorPromptParts, x as DirectorSessionFactory, y as DirectorSessionFactoryOptions, F as FLEET_ROSTER, z as FLEET_ROSTER_BUDGETS, E as FLEET_ROSTER_WITHACP, G as FleetCostCapError, H as FleetManager, I as FleetManagerOptions, J as FleetRosterBudget, K as FleetSpawnBudgetError, L as ICoordinator, M as IFleetManager, N as NULL_FLEET_BUS, R as REFACTOR_PLANNER_AGENT, O as RefactorPhase, P as RefactorPlan, S as SECURITY_SCANNER_AGENT, Q as SharedFileEntry, T as SharedFileSnapshot, U as SubagentPromptParts, V as applyRosterBudget, W as attachAutoExtend, X as composeDirectorPrompt, Y as composeSubagentPrompt, Z as createDelegateTool, _ as getAgentDefinition, $ as makeAskTool, a0 as makeAssignTool, a1 as makeAwaitTasksTool, a2 as makeCollabDebugTool, a3 as makeDirectorSessionFactory, a4 as makeFleetEmitTool, a5 as makeFleetHealthTool, a6 as makeFleetSessionTool, a7 as makeFleetStatusTool, a8 as makeFleetUsageTool, a9 as makeRollUpTool, aa as makeSpawnTool, ab as makeTerminateTool, ac as makeWorkCompleteTool, ad as rosterSummaryFromConfigs } from '../null-fleet-bus-Dnl19vmf.js';
-import { b as AgentDefinition } from '../multi-agent-coordinator-CAhsegPz.js';
-export { T as AGENT_TOOL_PRESETS, A as AgentBudgetTier, a as AgentCapability, c as AgentPhase, D as DEFAULT_DISPATCH_ROLE, d as DefaultMultiAgentCoordinator, e as DispatchCandidate, f as DispatchClassifier, g as DispatchMethod, h as DispatchOptions, i as DispatchResult, H as HEAVY_BUDGET, L as LIGHT_BUDGET, M as MEDIUM_BUDGET, j as MultiAgentCoordinatorOptions, k as dispatchAgent, m as makeLLMClassifier, s as scoreAgents } from '../multi-agent-coordinator-CAhsegPz.js';
-export { c as BudgetExceededError, d as BudgetKind, e as BudgetLimits, f as BudgetNegotiationMode, g as BudgetThresholdDecision, h as BudgetThresholdHandler, i as BudgetThresholdSignal, j as BudgetUsage, m as SubagentBudget } from '../multi-agent-DNp6lAzg.js';
-export { A as AgentFactory, a as AgentFactoryResult, b as AgentRunnerOptions, F as FleetBus, c as FleetEvent, d as FleetHandler, e as FleetUsage, f as FleetUsageAggregator, S as SubagentUsageSnapshot, m as makeAgentSubagentRunner } from '../agent-subagent-runner-U-rs7kk7.js';
-export { I as InMemoryAgentBridge, a as InMemoryBridgeTransport, c as createMessage } from '../agent-bridge-Dti3KXGk.js';
-import '../context-zkZeILpr.js';
+export { A as ACP_AGENTS, a as AGENTS_BY_PHASE, b as AGENT_CATALOG, c as ALL_AGENT_DEFINITIONS, d as ALL_FLEET_AGENTS, e as AUDIT_LOG_AGENT, f as AutoExtendCeiling, g as AutoExtendPolicy, B as BUG_HUNTER_AGENT, h as BugFinding, C as CollabBudgetConfig, i as CollabBudgetOverrides, j as CollabBudgetWarningPayload, k as CollabDebugReport, l as CollabSession, m as CollabSessionOptions, n as CreateDelegateToolOptions, o as CriticConcern, p as CriticEvaluation, D as DEFAULT_DIRECTOR_PREAMBLE, q as DEFAULT_SUBAGENT_BASELINE, r as DelegateHost, s as Director, t as DirectorAlert, u as DirectorAlertLevel, v as DirectorCancelCollabPayload, w as DirectorPromptParts, x as DirectorSessionFactory, y as DirectorSessionFactoryOptions, F as FLEET_ROSTER, z as FLEET_ROSTER_BUDGETS, E as FLEET_ROSTER_WITHACP, G as FleetCostCapError, H as FleetManager, I as FleetManagerOptions, J as FleetRosterBudget, K as FleetSpawnBudgetError, L as ICoordinator, M as IFleetManager, N as NULL_FLEET_BUS, R as REFACTOR_PLANNER_AGENT, O as RefactorPhase, P as RefactorPlan, S as SECURITY_SCANNER_AGENT, Q as SharedFileEntry, T as SharedFileSnapshot, U as SubagentPromptParts, V as applyRosterBudget, W as attachAutoExtend, X as composeDirectorPrompt, Y as composeSubagentPrompt, Z as createDelegateTool, _ as getAgentDefinition, $ as makeAskTool, a0 as makeAssignTool, a1 as makeAwaitTasksTool, a2 as makeCollabDebugTool, a3 as makeDirectorSessionFactory, a4 as makeFleetEmitTool, a5 as makeFleetHealthTool, a6 as makeFleetSessionTool, a7 as makeFleetStatusTool, a8 as makeFleetUsageTool, a9 as makeRollUpTool, aa as makeSpawnTool, ab as makeTerminateTool, ac as makeWorkCompleteTool, ad as rosterSummaryFromConfigs } from '../null-fleet-bus-T-s3JaOt.js';
+import { b as AgentDefinition } from '../multi-agent-coordinator-DoVSBFNx.js';
+export { T as AGENT_TOOL_PRESETS, A as AgentBudgetTier, a as AgentCapability, c as AgentPhase, D as DEFAULT_DISPATCH_ROLE, d as DefaultMultiAgentCoordinator, e as DispatchCandidate, f as DispatchClassifier, g as DispatchMethod, h as DispatchOptions, i as DispatchResult, H as HEAVY_BUDGET, L as LIGHT_BUDGET, M as MEDIUM_BUDGET, j as MultiAgentCoordinatorOptions, k as dispatchAgent, m as makeLLMClassifier, s as scoreAgents } from '../multi-agent-coordinator-DoVSBFNx.js';
+export { c as BudgetExceededError, d as BudgetKind, e as BudgetLimits, f as BudgetNegotiationMode, g as BudgetThresholdDecision, h as BudgetThresholdHandler, i as BudgetThresholdSignal, j as BudgetUsage, m as SubagentBudget } from '../multi-agent-C1O8EFzb.js';
+export { A as AgentFactory, a as AgentFactoryResult, b as AgentRunnerOptions, F as FleetBus, c as FleetEvent, d as FleetHandler, e as FleetUsage, f as FleetUsageAggregator, S as SubagentUsageSnapshot, m as makeAgentSubagentRunner } from '../agent-subagent-runner-KwufTWwn.js';
+export { I as InMemoryAgentBridge, a as InMemoryBridgeTransport, c as createMessage } from '../agent-bridge-DBBGP5O4.js';
+import '../context-7u93AcGD.js';
 import 'node:events';
 import '../director-state-BmYi3DGA.js';
-import '../events-DH-9r-_C.js';
-import '../index-BIHJ4uII.js';
+import '../events-Bw1K5E6K.js';
+import '../index-DgQWnZxP.js';
 import '../logger-DDd5C--Z.js';
-import '../system-prompt-CneIxVip.js';
+import '../system-prompt-CM6zOhd2.js';
 import '../observability-BhnVLBLS.js';
 import '../secret-scrubber-3MHDDAtm.js';
-import '../permission-H35s9Evv.js';
-import '../config-CLXMDOSs.js';
+import '../permission-B6sldrSp.js';
+import '../config-CJXBka2r.js';
 import '../models-registry-BcYJDKLm.js';
 
 /** Phase 1 · Discovery — map the territory before any work begins. */