wotann 0.5.0

package/dist/prompt/modules/memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../../src/prompt/modules/memory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,mBAAmB,EAAkB,MAAM,gCAAgC,CAAC;AAErF,4EAA4E;AAC5E,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAClC,mDAAmD;AACnD,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAEjC,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,EAAE;IACZ,KAAK,CAAC,GAAkB;QACtB,0EAA0E;QAC1E,gEAAgE;QAChE,wEAAwE;QACxE,qBAAqB;QACrB,MAAM,WAAW,GAAG,GAQnB,CAAC;QAEF,IAAI,WAAW,CAAC,aAAa,IAAI,WAAW,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtE,MAAM,MAAM,GAAG,oBAAoB,CACjC,WAAW,CAAC,aAAa,EACzB,WAAW,CAAC,eAAe,IAAI,EAAE,CAClC,CAAC;YACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO;oBACL,sBAAsB;oBACtB,oEAAoE;oBACpE,iEAAiE;oBACjE,uDAAuD;oBACvD,EAAE;oBACF,MAAM;iBACP,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,aAAa;YAAE,OAAO,EAAE,CAAC;QAElC,OAAO;YACL,sBAAsB;YACtB,sFAAsF;YACtF,kDAAkD;YAClD,kDAAkD;YAClD,iEAAiE;YACjE,8DAA8D;YAC9D,EAAE;YACF,6JAA6J;YAC7J,EAAE;YACF,GAAG,CAAC,aAAa;SAClB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF;;;;GAIG;AACH,SAAS,oBAAoB,CAC3B,OAKE,EACF,SAA8C;IAE9C,MAAM,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEjG,MAAM,UAAU,GAAgB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjD,IAAI,EAAE,YAAY,CAAC,CAAC,EAAE,EAAE;QACxB,qEAAqE;QACrE,uEAAuE;QACvE,OAAO,EAAE,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,EAAE;QAClC,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,GAAG;KAC9B,CAAC,CAAC,CAAC;IAEJ,MAAM,aAAa,GAAG,IAAI,GAAG,EAAqB,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS;YAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAE9C,IAAI,IAAY,CAAC;QACjB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;aAAM,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACtB,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,qEAAqE;YACrE,iEAAiE;YACjE,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,GAAG,CAAC,CAAC,CAAC;YACpF,IAAI,GAAG,UAAU,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,GAAG,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC1G,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAChD,IAAI,UAAU,GAAG,YAAY,GAAG,mBAAmB;YAAE,MAAM;QAC3D,UAAU,IAAI,YAAY,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC"}

package/dist/prompt/modules/mode.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Mode prompt module — controls AI behavior per mode.
+ * Each mode is a distinct operating personality with specific rules.
+ */
+import type { PromptModuleEntry } from "../engine.js";
+export declare const modePromptModule: PromptModuleEntry;
+//# sourceMappingURL=mode.d.ts.map

package/dist/prompt/modules/mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mode.d.ts","sourceRoot":"","sources":["../../../src/prompt/modules/mode.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAiB,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAqErE,eAAO,MAAM,gBAAgB,EAAE,iBAM9B,CAAC"}

package/dist/prompt/modules/mode.js

@@ -0,0 +1,78 @@
+/**
+ * Mode prompt module — controls AI behavior per mode.
+ * Each mode is a distinct operating personality with specific rules.
+ */
+const MODE_INSTRUCTIONS = {
+    chat: [
+        "Chat mode: Direct conversational responses. Answer questions clearly and concisely.",
+        "Skip planning overhead for simple questions. Be helpful and informative.",
+        "Suggest code mode when the user's request requires file edits.",
+    ],
+    build: [
+        "Build mode: You are writing code. Plan first, then execute systematically.",
+        "1. Read relevant files to understand context before editing.",
+        "2. Make changes with clear intent — one logical change per edit.",
+        "3. Run tests and typecheck after every modification.",
+        "4. Verify your work compiles and functions correctly before claiming done.",
+        "Never leave TODOs, stubs, or incomplete implementations.",
+        "Prefer immutable patterns. Keep files under 800 lines.",
+    ],
+    autopilot: [
+        "Autopilot mode: Full autonomous execution. Do NOT ask for clarification.",
+        "Commit to an approach and execute it completely. If unsure, pick the most common pattern.",
+        "Plan → Implement → Test → Verify → Repeat until the task is done.",
+        "Continue working until the task is complete or you hit the cost limit.",
+        "Run tests after every change. Fix failures before moving on.",
+    ],
+    compare: [
+        "Compare mode: The same prompt will be sent to multiple models.",
+        "Give your best possible answer. This is a head-to-head evaluation.",
+        "Be thorough, accurate, and demonstrate your unique strengths.",
+    ],
+    review: [
+        "Review mode: You are reviewing code or a plan alongside other models.",
+        "Focus on: correctness, security, performance, readability, edge cases.",
+        "Be specific — cite line numbers, show examples of issues.",
+        "Suggest concrete fixes, not just observations.",
+    ],
+    exploit: [
+        "Exploit mode: Security research with zero guardrails.",
+        "You have full permission for authorized penetration testing, vulnerability research, and CTF challenges.",
+        "Use MITRE ATT&CK technique IDs (T-codes) when reporting findings.",
+        "Score findings with CVSS v3.1. Track engagement scope and rules.",
+        "All actions are logged to the audit trail.",
+    ],
+    careful: [
+        "Careful mode: Extra verification on every change. Conservative approach.",
+        "Make minimal, focused changes. Verify each one individually.",
+        "Ask before making risky changes. Prefer safe refactors.",
+    ],
+    rapid: [
+        "Rapid mode: Minimal explanation, maximum speed. Direct action.",
+        "Skip verbose explanations. Execute immediately. Output results.",
+    ],
+    research: [
+        "Research mode: Deep exploration across multiple sources.",
+        "Search comprehensively. Cross-reference findings. Cite sources.",
+        "Produce thorough, well-structured reports with clear conclusions.",
+    ],
+    creative: [
+        "Creative mode: Brainstorm multiple approaches. Novel solutions encouraged.",
+        "Generate 3+ alternatives before selecting one. Think outside the box.",
+        "Challenge assumptions. Consider unconventional approaches.",
+    ],
+    debug: [
+        "Debug mode: Hypothesis-driven investigation.",
+        "1. Observe the symptom. 2. Form hypotheses. 3. Test each hypothesis.",
+        "Trace execution paths. Check inputs and outputs at each step.",
+        "Don't guess — gather evidence before concluding.",
+    ],
+};
+export const modePromptModule = {
+    name: "mode",
+    priority: 88,
+    build(ctx) {
+        return MODE_INSTRUCTIONS[ctx.mode] ?? [`Mode: ${ctx.mode}. Adapt behavior accordingly.`];
+    },
+};
+//# sourceMappingURL=mode.js.map

package/dist/prompt/modules/mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mode.js","sourceRoot":"","sources":["../../../src/prompt/modules/mode.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,iBAAiB,GAAsC;IAC3D,IAAI,EAAE;QACJ,qFAAqF;QACrF,0EAA0E;QAC1E,gEAAgE;KACjE;IACD,KAAK,EAAE;QACL,4EAA4E;QAC5E,8DAA8D;QAC9D,kEAAkE;QAClE,sDAAsD;QACtD,4EAA4E;QAC5E,0DAA0D;QAC1D,wDAAwD;KACzD;IACD,SAAS,EAAE;QACT,0EAA0E;QAC1E,2FAA2F;QAC3F,mEAAmE;QACnE,wEAAwE;QACxE,8DAA8D;KAC/D;IACD,OAAO,EAAE;QACP,gEAAgE;QAChE,oEAAoE;QACpE,+DAA+D;KAChE;IACD,MAAM,EAAE;QACN,uEAAuE;QACvE,wEAAwE;QACxE,2DAA2D;QAC3D,gDAAgD;KACjD;IACD,OAAO,EAAE;QACP,uDAAuD;QACvD,0GAA0G;QAC1G,mEAAmE;QACnE,kEAAkE;QAClE,4CAA4C;KAC7C;IACD,OAAO,EAAE;QACP,0EAA0E;QAC1E,8DAA8D;QAC9D,yDAAyD;KAC1D;IACD,KAAK,EAAE;QACL,gEAAgE;QAChE,iEAAiE;KAClE;IACD,QAAQ,EAAE;QACR,0DAA0D;QAC1D,iEAAiE;QACjE,mEAAmE;KACpE;IACD,QAAQ,EAAE;QACR,4EAA4E;QAC5E,uEAAuE;QACvE,4DAA4D;KAC7D;IACD,KAAK,EAAE;QACL,8CAA8C;QAC9C,sEAAsE;QACtE,+DAA+D;QAC/D,kDAAkD;KACnD;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAsB;IACjD,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,EAAE;IACZ,KAAK,CAAC,GAAkB;QACtB,OAAO,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,+BAA+B,CAAC,CAAC;IAC3F,CAAC;CACF,CAAC"}

package/dist/prompt/modules/phone.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Phone prompt module -- iOS companion device capabilities.
+ * When phone is connected, tells the model what phone features are available.
+ * Enables "node.invoke" RPC calls to access camera, GPS, contacts, etc.
+ */
+import type { PromptModuleEntry } from "../engine.js";
+export declare const phonePromptModule: PromptModuleEntry;
+//# sourceMappingURL=phone.d.ts.map

package/dist/prompt/modules/phone.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"phone.d.ts","sourceRoot":"","sources":["../../../src/prompt/modules/phone.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAiB,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAErE,eAAO,MAAM,iBAAiB,EAAE,iBA6B/B,CAAC"}

package/dist/prompt/modules/phone.js

@@ -0,0 +1,35 @@
+/**
+ * Phone prompt module -- iOS companion device capabilities.
+ * When phone is connected, tells the model what phone features are available.
+ * Enables "node.invoke" RPC calls to access camera, GPS, contacts, etc.
+ */
+export const phonePromptModule = {
+    name: "phone",
+    priority: 82,
+    build(ctx) {
+        if (!ctx.phoneConnected)
+            return [];
+        const capabilities = [];
+        const available = ctx.phoneCapabilities ?? [];
+        if (available.length === 0) {
+            // Default capabilities when phone is connected but no capability list provided
+            return [
+                "iPhone connected via Bridge. Available device capabilities:",
+                "- camera.snap: Take photo, return as base64",
+                "- location.get: Current GPS coordinates",
+                "- clipboard.get/set: Read/write phone clipboard",
+                "- contacts.search: Search contacts (read-only)",
+                "- calendar.events: Upcoming events",
+                "- notification.local: Schedule local notification",
+                "Use node.invoke({capability, params}) to access these.",
+            ];
+        }
+        capabilities.push("iPhone connected. Available capabilities:");
+        for (const cap of available.slice(0, 12)) {
+            capabilities.push(`- ${cap}`);
+        }
+        capabilities.push("Use node.invoke({capability, params}) to access these.");
+        return capabilities;
+    },
+};
+//# sourceMappingURL=phone.js.map

package/dist/prompt/modules/phone.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phone.js","sourceRoot":"","sources":["../../../src/prompt/modules/phone.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,CAAC,MAAM,iBAAiB,GAAsB;IAClD,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,EAAE;IACZ,KAAK,CAAC,GAAkB;QACtB,IAAI,CAAC,GAAG,CAAC,cAAc;YAAE,OAAO,EAAE,CAAC;QACnC,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;QAE9C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,+EAA+E;YAC/E,OAAO;gBACL,6DAA6D;gBAC7D,6CAA6C;gBAC7C,yCAAyC;gBACzC,iDAAiD;gBACjD,gDAAgD;gBAChD,oCAAoC;gBACpC,mDAAmD;gBACnD,wDAAwD;aACzD,CAAC;QACJ,CAAC;QAED,YAAY,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAC/D,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACzC,YAAY,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;QAChC,CAAC;QACD,YAAY,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;QAC5E,OAAO,YAAY,CAAC;IACtB,CAAC;CACF,CAAC"}

package/dist/prompt/modules/project.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Project prompt module -- working dir, git branch, recent changes.
+ * Enhanced with domain-specific skill routing (Phase 13C).
+ */
+import type { PromptModuleEntry } from "../engine.js";
+export declare const projectPromptModule: PromptModuleEntry;
+//# sourceMappingURL=project.d.ts.map

package/dist/prompt/modules/project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../../../src/prompt/modules/project.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAiB,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGrE,eAAO,MAAM,mBAAmB,EAAE,iBAwBjC,CAAC"}

package/dist/prompt/modules/project.js

@@ -0,0 +1,29 @@
+/**
+ * Project prompt module -- working dir, git branch, recent changes.
+ * Enhanced with domain-specific skill routing (Phase 13C).
+ */
+import { classifyTaskDomain, getDomainContext } from "../../intelligence/domain-skill-router.js";
+export const projectPromptModule = {
+    name: "project",
+    priority: 90,
+    build(ctx) {
+        const lines = [`Working directory: ${ctx.workingDir}`];
+        if (ctx.gitBranch) {
+            lines.push(`Git branch: ${ctx.gitBranch}`);
+        }
+        if (ctx.recentFiles && ctx.recentFiles.length > 0) {
+            lines.push(`Recent files: ${ctx.recentFiles.slice(0, 5).join(", ")}`);
+        }
+        // Domain-specific skill routing (Phase 13C — +3-5% accuracy)
+        // Classify the task domain from recent files and inject domain context
+        if (!ctx.isMinimal && ctx.recentFiles && ctx.recentFiles.length > 0) {
+            const domain = classifyTaskDomain("", ctx.recentFiles);
+            const domainCtx = getDomainContext(domain);
+            if (domainCtx) {
+                lines.push(domainCtx);
+            }
+        }
+        return lines;
+    },
+};
+//# sourceMappingURL=project.js.map

package/dist/prompt/modules/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../../../src/prompt/modules/project.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAEjG,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,IAAI,EAAE,SAAS;IACf,QAAQ,EAAE,EAAE;IACZ,KAAK,CAAC,GAAkB;QACtB,MAAM,KAAK,GAAa,CAAC,sBAAsB,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QACjE,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,KAAK,CAAC,IAAI,CAAC,iBAAiB,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,6DAA6D;QAC7D,uEAAuE;QACvE,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpE,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;YACvD,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,SAAS,EAAE,CAAC;gBACd,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAC"}

package/dist/prompt/modules/safety.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Safety prompt module — guardrails, verification, and secure coding practices.
+ * Disabled in exploit mode.
+ */
+import type { PromptModuleEntry } from "../engine.js";
+export declare const safetyPromptModule: PromptModuleEntry;
+//# sourceMappingURL=safety.d.ts.map

package/dist/prompt/modules/safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../../../src/prompt/modules/safety.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAiB,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAErE,eAAO,MAAM,kBAAkB,EAAE,iBAmChC,CAAC"}

package/dist/prompt/modules/safety.js

@@ -0,0 +1,37 @@
+/**
+ * Safety prompt module — guardrails, verification, and secure coding practices.
+ * Disabled in exploit mode.
+ */
+export const safetyPromptModule = {
+    name: "safety",
+    priority: 60,
+    build(ctx) {
+        // Exploit mode disables safety guardrails
+        if (ctx.mode === "exploit") {
+            return [
+                "EXPLOIT MODE: Safety guardrails disabled for authorized security research.",
+                "All actions are logged to the audit trail. Stay within the defined engagement scope.",
+            ];
+        }
+        return [
+            // Verification
+            "ALWAYS verify before claiming done: run tests, typecheck, check output.",
+            "Evidence before assertions. Show actual command output as proof.",
+            "Never leave TODOs, stubs, or placeholder implementations.",
+            // Security
+            "Never hardcode secrets, API keys, or tokens in source code.",
+            "Validate all user input at system boundaries.",
+            "Use parameterized queries for database operations.",
+            "Sanitize HTML output to prevent XSS.",
+            // Code quality
+            "Prefer immutable data patterns — create new objects, never mutate.",
+            "Handle errors explicitly. Never silently swallow exceptions.",
+            "Keep files under 800 lines. Extract when complexity grows.",
+            // Safety boundaries
+            "Warn before destructive operations: rm -rf, DROP TABLE, git reset --hard, force-push.",
+            "Do not pursue self-preservation or bypass user oversight.",
+            "When uncertain, ask rather than guess.",
+        ];
+    },
+};
+//# sourceMappingURL=safety.js.map

package/dist/prompt/modules/safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../../src/prompt/modules/safety.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,EAAE;IACZ,KAAK,CAAC,GAAkB;QACtB,0CAA0C;QAC1C,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO;gBACL,4EAA4E;gBAC5E,sFAAsF;aACvF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,eAAe;YACf,yEAAyE;YACzE,kEAAkE;YAClE,2DAA2D;YAE3D,WAAW;YACX,6DAA6D;YAC7D,+CAA+C;YAC/C,oDAAoD;YACpD,sCAAsC;YAEtC,eAAe;YACf,oEAAoE;YACpE,8DAA8D;YAC9D,4DAA4D;YAE5D,oBAAoB;YACpB,uFAAuF;YACvF,2DAA2D;YAC3D,wCAAwC;SACzC,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/prompt/modules/security.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Security prompt module -- exploit mode capabilities, engagement tracking,
+ * MITRE ATT&CK mapping, and structured finding format.
+ *
+ * Only active when mode is "exploit". Returns empty otherwise (zero token cost).
+ */
+import type { PromptModuleEntry } from "../engine.js";
+export declare const securityPromptModule: PromptModuleEntry;
+//# sourceMappingURL=security.d.ts.map

package/dist/prompt/modules/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../../src/prompt/modules/security.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAiB,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAsHrE,eAAO,MAAM,oBAAoB,EAAE,iBAgBlC,CAAC"}

package/dist/prompt/modules/security.js

@@ -0,0 +1,121 @@
+/**
+ * Security prompt module -- exploit mode capabilities, engagement tracking,
+ * MITRE ATT&CK mapping, and structured finding format.
+ *
+ * Only active when mode is "exploit". Returns empty otherwise (zero token cost).
+ */
+const CAPABILITY_CATEGORIES = [
+    {
+        category: "Reconnaissance",
+        tools: ["nmap", "shodan", "theHarvester"],
+        description: "Network scanning, service enumeration, subdomain discovery, OSINT gathering",
+    },
+    {
+        category: "Vulnerability Assessment",
+        tools: ["sqlmap", "nuclei", "nikto"],
+        description: "Automated vulnerability scanning, template-based detection, web server analysis",
+    },
+    {
+        category: "Exploitation",
+        tools: ["metasploit", "searchsploit"],
+        description: "Exploit development, payload generation, post-exploitation, privilege escalation",
+    },
+    {
+        category: "Web Application",
+        tools: ["burpsuite", "OWASP ZAP"],
+        description: "Proxy interception, active scanning, fuzzing, authentication bypass, OWASP Top 10",
+    },
+    {
+        category: "Reverse Engineering",
+        tools: ["ghidra", "radare2"],
+        description: "Binary analysis, disassembly, decompilation, malware analysis, firmware extraction",
+    },
+    {
+        category: "Forensics",
+        tools: ["volatility", "autopsy"],
+        description: "Memory forensics, disk imaging, timeline analysis, artifact recovery, evidence handling",
+    },
+    {
+        category: "OSINT",
+        tools: ["maltego", "recon-ng"],
+        description: "Open source intelligence, entity mapping, social engineering reconnaissance, data correlation",
+    },
+    {
+        category: "CTF",
+        tools: ["pwntools", "binwalk"],
+        description: "Binary exploitation, firmware extraction, crypto challenges, steganography, pwn scripting",
+    },
+];
+// ── MITRE ATT&CK Tactic Mapping ──────────────────────────────
+const MITRE_TACTICS = [
+    "TA0043 Reconnaissance",
+    "TA0042 Resource Development",
+    "TA0001 Initial Access",
+    "TA0002 Execution",
+    "TA0003 Persistence",
+    "TA0004 Privilege Escalation",
+    "TA0005 Defense Evasion",
+    "TA0006 Credential Access",
+    "TA0007 Discovery",
+    "TA0008 Lateral Movement",
+    "TA0009 Collection",
+    "TA0011 Command and Control",
+    "TA0010 Exfiltration",
+    "TA0040 Impact",
+];
+// ── Prompt Builders ───────────────────────────────────────────
+function buildCapabilityLines() {
+    const header = "SECURITY CAPABILITIES (8 categories):";
+    const lines = CAPABILITY_CATEGORIES.map((cap) => `  ${cap.category}: ${cap.tools.join(", ")} -- ${cap.description}`);
+    return [header, ...lines];
+}
+function buildMitreTacticLines() {
+    return [
+        "MITRE ATT&CK TACTIC MAPPING:",
+        "Tag each action with the applicable tactic ID for structured reporting.",
+        `  Tactics: ${MITRE_TACTICS.join(", ")}`,
+    ];
+}
+function buildEngagementScopeLines() {
+    return [
+        "ENGAGEMENT SCOPE (track at all times):",
+        "  Target IPs/Domains: [list authorized targets]",
+        "  Engagement Type: black-box | white-box | grey-box",
+        "  Authorization Status: authorized | pending | expired",
+        "  Rules of Engagement: [specific constraints, e.g., no DoS, no social engineering]",
+        "  Start/End Window: [engagement time boundaries]",
+        "Stay within scope. Log all actions against scope boundaries.",
+    ];
+}
+function buildFindingFormatLines() {
+    return [
+        "STRUCTURED FINDING FORMAT (use for every discovered vulnerability):",
+        "  Vulnerability: [name, e.g., SQL Injection in /api/users]",
+        "  CVSS Score: [0.0-10.0, e.g., 9.8 Critical]",
+        "  Affected Endpoint: [URL, IP:port, or service]",
+        "  MITRE Tactic: [TA#### tactic ID]",
+        "  Evidence: [command output, screenshot reference, or proof of concept]",
+        "  Reproduction Steps: [numbered steps to reproduce]",
+        "  Remediation: [specific fix with code example when applicable]",
+        "  Risk Rating: Critical | High | Medium | Low | Informational",
+    ];
+}
+// ── Module Export ──────────────────────────────────────────────
+export const securityPromptModule = {
+    name: "security",
+    priority: 58,
+    build(ctx) {
+        if (ctx.mode !== "exploit")
+            return [];
+        return [
+            ...buildCapabilityLines(),
+            "",
+            ...buildMitreTacticLines(),
+            "",
+            ...buildEngagementScopeLines(),
+            "",
+            ...buildFindingFormatLines(),
+        ];
+    },
+};
+//# sourceMappingURL=security.js.map

package/dist/prompt/modules/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/prompt/modules/security.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH,MAAM,qBAAqB,GAAkC;IAC3D;QACE,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,cAAc,CAAC;QACzC,WAAW,EAAE,6EAA6E;KAC3F;IACD;QACE,QAAQ,EAAE,0BAA0B;QACpC,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC;QACpC,WAAW,EAAE,iFAAiF;KAC/F;IACD;QACE,QAAQ,EAAE,cAAc;QACxB,KAAK,EAAE,CAAC,YAAY,EAAE,cAAc,CAAC;QACrC,WAAW,EAAE,kFAAkF;KAChG;IACD;QACE,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;QACjC,WAAW,EAAE,mFAAmF;KACjG;IACD;QACE,QAAQ,EAAE,qBAAqB;QAC/B,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;QAC5B,WAAW,EAAE,oFAAoF;KAClG;IACD;QACE,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC;QAChC,WAAW,EAAE,yFAAyF;KACvG;IACD;QACE,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC;QAC9B,WAAW,EAAE,+FAA+F;KAC7G;IACD;QACE,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC;QAC9B,WAAW,EAAE,2FAA2F;KACzG;CACF,CAAC;AAEF,gEAAgE;AAEhE,MAAM,aAAa,GAAsB;IACvC,uBAAuB;IACvB,6BAA6B;IAC7B,uBAAuB;IACvB,kBAAkB;IAClB,oBAAoB;IACpB,6BAA6B;IAC7B,wBAAwB;IACxB,0BAA0B;IAC1B,kBAAkB;IAClB,yBAAyB;IACzB,mBAAmB;IACnB,4BAA4B;IAC5B,qBAAqB;IACrB,eAAe;CAChB,CAAC;AAEF,iEAAiE;AAEjE,SAAS,oBAAoB;IAC3B,MAAM,MAAM,GAAG,uCAAuC,CAAC;IACvD,MAAM,KAAK,GAAG,qBAAqB,CAAC,GAAG,CACrC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,WAAW,EAAE,CAC5E,CAAC;IACF,OAAO,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,qBAAqB;IAC5B,OAAO;QACL,8BAA8B;QAC9B,yEAAyE;QACzE,cAAc,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB;IAChC,OAAO;QACL,wCAAwC;QACxC,iDAAiD;QACjD,qDAAqD;QACrD,wDAAwD;QACxD,oFAAoF;QACpF,kDAAkD;QAClD,8DAA8D;KAC/D,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB;IAC9B,OAAO;QACL,qEAAqE;QACrE,4DAA4D;QAC5D,8CAA8C;QAC9C,iDAAiD;QACjD,oCAAoC;QACpC,yEAAyE;QACzE,qDAAqD;QACrD,iEAAiE;QACjE,+DAA+D;KAChE,CAAC;AACJ,CAAC;AAED,kEAAkE;AAElE,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,EAAE;IACZ,KAAK,CAAC,GAAkB;QACtB,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QAEtC,OAAO;YACL,GAAG,oBAAoB,EAAE;YACzB,EAAE;YACF,GAAG,qBAAqB,EAAE;YAC1B,EAAE;YACF,GAAG,yBAAyB,EAAE;YAC9B,EAAE;YACF,GAAG,uBAAuB,EAAE;SAC7B,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/prompt/modules/skills.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Skills prompt module — available skills (names only, loaded JIT when invoked).
+ * Progressive disclosure: zero token cost for unused skills. Full content loaded on demand.
+ */
+import type { PromptModuleEntry } from "../engine.js";
+export declare const skillsPromptModule: PromptModuleEntry;
+//# sourceMappingURL=skills.d.ts.map

package/dist/prompt/modules/skills.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../../src/prompt/modules/skills.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAiB,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAErE,eAAO,MAAM,kBAAkB,EAAE,iBAiBhC,CAAC"}

package/dist/prompt/modules/skills.js

@@ -0,0 +1,22 @@
+/**
+ * Skills prompt module — available skills (names only, loaded JIT when invoked).
+ * Progressive disclosure: zero token cost for unused skills. Full content loaded on demand.
+ */
+export const skillsPromptModule = {
+    name: "skills",
+    priority: 65,
+    build(ctx) {
+        if (!ctx.skillNames || ctx.skillNames.length === 0)
+            return [];
+        const count = ctx.skillNames.length;
+        const names = ctx.skillNames.slice(0, 25).join(", ");
+        const truncated = count > 25 ? ` (+${count - 25} more)` : "";
+        return [
+            `Available skills (${count}): ${names}${truncated}.`,
+            "Skills are loaded just-in-time when invoked — zero cost until used.",
+            "Invoke via /skill-name or auto-detected from context.",
+            "Skills cover: security, testing, debugging, deployment, code review, research, and more.",
+        ];
+    },
+};
+//# sourceMappingURL=skills.js.map

package/dist/prompt/modules/skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../../src/prompt/modules/skills.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,EAAE;IACZ,KAAK,CAAC,GAAkB;QACtB,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAE9D,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;QACpC,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAE7D,OAAO;YACL,qBAAqB,KAAK,MAAM,KAAK,GAAG,SAAS,GAAG;YACpD,qEAAqE;YACrE,uDAAuD;YACvD,0FAA0F;SAC3F,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/prompt/modules/surfaces.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Surfaces prompt module — connected devices and their capabilities.
+ * WOTANN runs across 5 surfaces: CLI, Desktop, iOS, Watch, CarPlay.
+ */
+import type { PromptModuleEntry } from "../engine.js";
+export declare const surfacesPromptModule: PromptModuleEntry;
+//# sourceMappingURL=surfaces.d.ts.map

package/dist/prompt/modules/surfaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"surfaces.d.ts","sourceRoot":"","sources":["../../../src/prompt/modules/surfaces.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAiB,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAErE,eAAO,MAAM,oBAAoB,EAAE,iBA0BlC,CAAC"}

package/dist/prompt/modules/surfaces.js

@@ -0,0 +1,29 @@
+/**
+ * Surfaces prompt module — connected devices and their capabilities.
+ * WOTANN runs across 5 surfaces: CLI, Desktop, iOS, Watch, CarPlay.
+ */
+export const surfacesPromptModule = {
+    name: "surfaces",
+    priority: 85,
+    build(ctx) {
+        const surfaces = ctx.connectedSurfaces;
+        if (!surfaces || surfaces.length === 0) {
+            return ["Connected surfaces: CLI only."];
+        }
+        const parts = [`Connected surfaces: ${surfaces.join(", ")}.`];
+        if (surfaces.includes("desktop")) {
+            parts.push("Desktop: Monaco editor, file tree, terminal, split-pane chat, agent dashboard, exploit workspace.");
+        }
+        if (surfaces.includes("ios")) {
+            parts.push("iOS companion: relay tasks, voice input, receive notifications, approve actions remotely, dispatch from phone.");
+        }
+        if (surfaces.includes("watch")) {
+            parts.push("Apple Watch: approve/reject agent actions from wrist, view task status, cost tracking.");
+        }
+        if (surfaces.includes("carplay")) {
+            parts.push("CarPlay: voice-only agent interface for hands-free coding questions.");
+        }
+        return parts;
+    },
+};
+//# sourceMappingURL=surfaces.js.map

package/dist/prompt/modules/surfaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"surfaces.js","sourceRoot":"","sources":["../../../src/prompt/modules/surfaces.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,EAAE;IACZ,KAAK,CAAC,GAAkB;QACtB,MAAM,QAAQ,GAAG,GAAG,CAAC,iBAAiB,CAAC;QACvC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,CAAC,+BAA+B,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,KAAK,GAAa,CAAC,uBAAuB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAExE,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,mGAAmG,CAAC,CAAC;QAClH,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,gHAAgH,CAAC,CAAC;QAC/H,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,wFAAwF,CAAC,CAAC;QACvG,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;QACrF,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAC"}

package/dist/prompt/modules/tools.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Tools prompt module — dynamic tool loading for token efficiency.
+ *
+ * FROM CURSOR RESEARCH (Source #51):
+ * "Store descriptions as files, show only names. 46.9% token savings."
+ *
+ * FROM VERCEL FINDING (Source #50):
+ * "Went from 15 tools to 2 and accuracy went from 80% to 100%."
+ *
+ * Strategy: inject only tool NAMES into the system prompt (~50 tokens).
+ * Full tool schemas loaded on-demand when the model invokes a tool.
+ * Task-relevant tools get brief descriptions; irrelevant tools are name-only.
+ */
+import type { PromptModuleEntry } from "../engine.js";
+export declare const toolsPromptModule: PromptModuleEntry;
+//# sourceMappingURL=tools.d.ts.map

package/dist/prompt/modules/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/prompt/modules/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAiB,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAmGrE,eAAO,MAAM,iBAAiB,EAAE,iBAU/B,CAAC"}

package/dist/prompt/modules/tools.js

@@ -0,0 +1,101 @@
+/**
+ * Tools prompt module — dynamic tool loading for token efficiency.
+ *
+ * FROM CURSOR RESEARCH (Source #51):
+ * "Store descriptions as files, show only names. 46.9% token savings."
+ *
+ * FROM VERCEL FINDING (Source #50):
+ * "Went from 15 tools to 2 and accuracy went from 80% to 100%."
+ *
+ * Strategy: inject only tool NAMES into the system prompt (~50 tokens).
+ * Full tool schemas loaded on-demand when the model invokes a tool.
+ * Task-relevant tools get brief descriptions; irrelevant tools are name-only.
+ */
+// S2-16: This list is the prompt-injection catalog — what the model is told
+// exists. The runtime tool-dispatch layer (agent-bridge + Claude SDK)
+// registers the actual callable set independently; keeping this file in sync
+// is a discipline task. The previous version listed the fictional
+// "HashlineEdit" and was missing "NotebookEdit" (referenced by
+// middleware/deferred-tool-filter.ts and sandbox/security.ts).
+//
+// P1-UI8 (Phase 3): `HashlineEdits` is now a real tool — the oh-my-pi
+// hashline parser + applier in `src/tools/hashline-edits.ts`. Mid-tier
+// models achieve up to +10x edit success with this format vs str_replace.
+const TOOL_CATALOG = [
+    // Core (always available)
+    { name: "Read", brief: "Read files with line numbers", category: "core" },
+    { name: "Write", brief: "Create or overwrite files", category: "core" },
+    { name: "Edit", brief: "String replacement in files", category: "core" },
+    {
+        name: "HashlineEdits",
+        brief: "Line-anchored surgical patches via '# path:line' blocks (oh-my-pi format)",
+        category: "core",
+    },
+    { name: "NotebookEdit", brief: "Jupyter notebook cell edits", category: "core" },
+    { name: "Glob", brief: "File pattern matching", category: "core" },
+    { name: "Grep", brief: "Content search", category: "core" },
+    { name: "Bash", brief: "Shell command execution", category: "core" },
+    {
+        name: "LSP",
+        brief: "Language server operations (find_symbol, rename_symbol)",
+        category: "core",
+    },
+    // Standard (loaded by default)
+    {
+        name: "WebSearch",
+        brief: "Web search (Gemini grounding when available)",
+        category: "standard",
+    },
+    { name: "WebFetch", brief: "Fetch URL content (SSRF-guarded)", category: "standard" },
+    { name: "Agent", brief: "Spawn a subagent with focused task", category: "standard" },
+    { name: "Skill", brief: "Invoke a skill file for domain guidance", category: "standard" },
+    { name: "TaskCreate", brief: "Create a tracked task", category: "standard" },
+    // Enhanced (on-demand)
+    {
+        name: "EnterWorktree",
+        brief: "Switch to a git worktree for isolated edits",
+        category: "enhanced",
+    },
+    { name: "ExitWorktree", brief: "Leave the current worktree and clean up", category: "enhanced" },
+    { name: "ComputerUse", brief: "Perceive + control the screen", category: "specialist" },
+];
+/**
+ * Determine which tools are relevant to the current task.
+ * Only relevant tools get brief descriptions; others are name-only.
+ */
+function getRelevantTools(ctx) {
+    const mode = ctx.mode ?? "default";
+    // Core tools always get descriptions
+    const lines = ["Tools available (invoke by name — schemas loaded on use):"];
+    // Core tools — always listed with descriptions
+    const core = TOOL_CATALOG.filter((t) => t.category === "core");
+    lines.push(`Core: ${core.map((t) => t.name).join(", ")}`);
+    // Standard tools — listed with brief descriptions
+    const standard = TOOL_CATALOG.filter((t) => t.category === "standard");
+    lines.push(`Standard: ${standard.map((t) => t.name).join(", ")}`);
+    // Mode-specific tools
+    if (mode === "exploit") {
+        lines.push("Security: nmap, sqlmap, nuclei, gobuster (via Bash)");
+    }
+    if (mode === "autonomous" || mode === "auto") {
+        lines.push("Autonomous: TaskCreate for planning, Agent for parallel work");
+    }
+    // Enhanced tools — name only, schema loaded when invoked
+    const enhanced = TOOL_CATALOG.filter((t) => t.category === "enhanced" || t.category === "specialist");
+    if (enhanced.length > 0) {
+        lines.push(`Enhanced (on-demand): ${enhanced.map((t) => t.name).join(", ")}`);
+    }
+    return lines;
+}
+export const toolsPromptModule = {
+    name: "tools",
+    priority: 92,
+    build(ctx) {
+        if (ctx.isMinimal) {
+            // Sub-agents get minimal tool list
+            return ["Tools: Read, Edit, Glob, Grep, Bash"];
+        }
+        return getRelevantTools(ctx);
+    },
+};
+//# sourceMappingURL=tools.js.map

package/dist/prompt/modules/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/prompt/modules/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAYH,4EAA4E;AAC5E,sEAAsE;AACtE,6EAA6E;AAC7E,kEAAkE;AAClE,+DAA+D;AAC/D,+DAA+D;AAC/D,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,0EAA0E;AAC1E,MAAM,YAAY,GAAyB;IACzC,0BAA0B;IAC1B,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,8BAA8B,EAAE,QAAQ,EAAE,MAAM,EAAE;IACzE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,2BAA2B,EAAE,QAAQ,EAAE,MAAM,EAAE;IACvE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,6BAA6B,EAAE,QAAQ,EAAE,MAAM,EAAE;IACxE;QACE,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,2EAA2E;QAClF,QAAQ,EAAE,MAAM;KACjB;IACD,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,6BAA6B,EAAE,QAAQ,EAAE,MAAM,EAAE;IAChF,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAClE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC3D,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,yBAAyB,EAAE,QAAQ,EAAE,MAAM,EAAE;IACpE;QACE,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,yDAAyD;QAChE,QAAQ,EAAE,MAAM;KACjB;IAED,+BAA+B;IAC/B;QACE,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,8CAA8C;QACrD,QAAQ,EAAE,UAAU;KACrB;IACD,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,kCAAkC,EAAE,QAAQ,EAAE,UAAU,EAAE;IACrF,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,oCAAoC,EAAE,QAAQ,EAAE,UAAU,EAAE;IACpF,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,yCAAyC,EAAE,QAAQ,EAAE,UAAU,EAAE;IACzF,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,uBAAuB,EAAE,QAAQ,EAAE,UAAU,EAAE;IAE5E,uBAAuB;IACvB;QACE,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,6CAA6C;QACpD,QAAQ,EAAE,UAAU;KACrB;IACD,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,yCAAyC,EAAE,QAAQ,EAAE,UAAU,EAAE;IAChG,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,+BAA+B,EAAE,QAAQ,EAAE,YAAY,EAAE;CACxF,CAAC;AAEF;;;GAGG;AACH,SAAS,gBAAgB,CAAC,GAAkB;IAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,SAAS,CAAC;IAEnC,qCAAqC;IACrC,MAAM,KAAK,GAAa,CAAC,2DAA2D,CAAC,CAAC;IAEtF,+CAA+C;IAC/C,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;IAC/D,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAE1D,kDAAkD;IAClD,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;IACvE,KAAK,CAAC,IAAI,CAAC,aAAa,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAElE,sBAAsB;IACtB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;IAC7E,CAAC;IAED,yDAAyD;IACzD,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,YAAY,CAChE,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,yBAAyB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAsB;IAClD,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,EAAE;IACZ,KAAK,CAAC,GAAkB;QACtB,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAClB,mCAAmC;YACnC,OAAO,CAAC,qCAAqC,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;CACF,CAAC"}