@wrongstack/runtime 1.0.3 → 1.0.5

package/dist/host.js

@@ -25,7 +25,7 @@ async function applyWrongStackPack(host, pack, opts = {}) {
       unregisterExtensions[i]();
     }
     for (let i = registeredCommandNames.length - 1; i >= 0; i--) {
-      host.slashCommands.unregister(registeredCommandNames[i]);
+      host.slashCommands.unregister(registeredCommandNames[i], owner);
     }
     for (let i = registeredToolNames.length - 1; i >= 0; i--) {
       host.tools.unregister(registeredToolNames[i]);

package/dist/index.js

@@ -287,6 +287,7 @@ import {
   DefaultPermissionPolicy,
   DefaultSecretScrubber,
   DirectoryPermissionPolicy,
+  resolveYoloConfirmKinds,
   validateDirectoryPolicy
 } from "@wrongstack/core/security";
 import {
@@ -437,7 +438,11 @@ function createDefaultContainer(opts) {
   container.bind(TOKENS.PermissionPolicy, () => {
     const policyOptions = {
       trustFile: wpaths.projectTrust,
-      yolo: opts.permission?.yolo ?? false
+      yolo: opts.permission?.yolo ?? false,
+      // Which kinds of damage still prompt under YOLO. Read from the user's
+      // profile config; an absent map gates every kind (fail-closed), and the
+      // in-project loader strips `autonomy.yoloConfirm` so a repo cannot widen it.
+      yoloConfirmKinds: resolveYoloConfirmKinds(config.autonomy?.yoloConfirm)
     };
     if (opts.permission?.promptDelegate !== void 0) {
       policyOptions.promptDelegate = opts.permission.promptDelegate;
@@ -612,7 +617,12 @@ function makeLightSubagentFactory(deps) {
       context: ctx,
       permissionPolicy,
       toolExecutor,
-      loopDetection: config.tools?.loopDetection
+      loopDetection: config.tools?.loopDetection,
+      // See the sibling CLI subagent factory: only a POSITIVE configured budget
+      // is forwarded, because the shipped default is `0` ("no hard limit") and
+      // handing that down would replace a missing setting with a missing
+      // safety net.
+      ...typeof config.tools?.maxIterations === "number" && Number.isFinite(config.tools.maxIterations) && config.tools.maxIterations > 0 ? { maxIterations: config.tools.maxIterations } : {}
     });
     agent.extensions.register(
       createFallbackModelExtension({
@@ -751,7 +761,7 @@ async function applyWrongStackPack(host, pack, opts = {}) {
       unregisterExtensions[i]();
     }
     for (let i = registeredCommandNames.length - 1; i >= 0; i--) {
-      host.slashCommands.unregister(registeredCommandNames[i]);
+      host.slashCommands.unregister(registeredCommandNames[i], owner);
     }
     for (let i = registeredToolNames.length - 1; i >= 0; i--) {
       host.tools.unregister(registeredToolNames[i]);

package/dist/tool-registration.d.ts

@@ -7,6 +7,9 @@ export interface CanonicalHostToolRegistrationOptions {
     tier: ConcreteTokenSavingTier;
     contextTool?: Tool | undefined;
     coordinationTools?: readonly Tool[] | undefined;
+    browser?: {
+        enabled?: boolean;
+    } | undefined;
     memory?: {
         enabled: boolean;
         store?: MemoryPort | null | undefined;

package/dist/tool-registration.js

@@ -8,6 +8,9 @@ import {
   rememberTool,
   searchMemoryTool
 } from "@wrongstack/tools/memory";
+import {
+  BROWSER_TOOL_NAMES
+} from "@wrongstack/tools";
 import { registerBuiltinToolTier, selectBuiltinToolsForTier } from "@wrongstack/tools/tool-tier";
 import { createVectorMemoryTools } from "@wrongstack/vector-memory";
 
@@ -69,7 +72,7 @@ function wireKanbanPorts() {
 }
 
 // src/tool-registration.ts
-var DIRECT_LAZY_GATEWAYS = ["tool_search", "tool_use", "tool_help"];
+var DIRECT_LAZY_GATEWAYS = ["tool_search", "tool_use"];
 function registerCanonicalHostTools(options) {
   wireKanbanPorts();
   const catalogBuiltinTools = registerBuiltinToolTier({
@@ -121,9 +124,18 @@ function registerCanonicalHostTools(options) {
         directNames.add(name);
       }
     }
+    if (options.browser?.enabled) {
+      for (const name of BROWSER_TOOL_NAMES) directNames.add(name);
+    }
     options.registry.setProviderToolNames([...directNames]);
   } else {
-    options.registry.setProviderToolNames(void 0);
+    if (options.browser?.enabled !== true) {
+      const allNames = options.registry.list().map((tool) => tool.name);
+      const browserSet = new Set(BROWSER_TOOL_NAMES);
+      options.registry.setProviderToolNames(allNames.filter((name) => !browserSet.has(name)));
+    } else {
+      options.registry.setProviderToolNames(void 0);
+    }
   }
   applyToolDescriptionModes(options.registry, options.descriptionMode);
   applyToolResultRenderModes(options.registry, options.resultRenderMode);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/runtime",
-  "version": "1.0.3",
+  "version": "1.0.5",
   "license": "MIT",
   "description": "WrongStack default runtime implementations and host-level composition helpers built on @wrongstack/core.",
   "repository": {
@@ -64,16 +64,16 @@
     "README.md"
   ],
   "dependencies": {
-    "@wrongstack/core": "1.0.3",
-    "@wrongstack/kanban": "1.0.3",
-    "@wrongstack/governance": "1.0.3",
-    "@wrongstack/sage": "1.0.3",
-    "@wrongstack/tools": "1.0.3",
-    "@wrongstack/vector-memory": "1.0.3"
+    "@wrongstack/core": "1.0.5",
+    "@wrongstack/kanban": "1.0.5",
+    "@wrongstack/governance": "1.0.5",
+    "@wrongstack/sage": "1.0.5",
+    "@wrongstack/tools": "1.0.5",
+    "@wrongstack/vector-memory": "1.0.5"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",
-    "@wrongstack/wrongtrace": "1.0.3",
+    "@wrongstack/wrongtrace": "1.0.5",
     "typescript": "^7.0.2"
   },
   "publishConfig": {