@phamvuhoang/otto-core 0.18.0 → 0.20.0

package/dist/stage-exec.js

@@ -4,10 +4,18 @@ import { DEFAULT_AGENT } from "./agent-runtime.js";
 import { analyzeContext } from "./context-report.js";
 import { applyPromptReduction } from "./prompt-reduction.js";
 import { renderTemplate } from "./render.js";
+import { resolveStageModel } from "./model-tier.js";
 import { DEFAULT_BACKOFF_MS, backoffFor, withRetries } from "./retry.js";
 import { getAgentRuntime, runStage, stageLogPath, } from "./runner.js";
 import { readSafetyPolicy, } from "./safety-policy.js";
 import { USE_COLOR, dim } from "./stream-render.js";
+/** Fallback ladder when routing is requested without one — every tier resolves
+ *  to the runtime default (issue #66 P11). The real ladder comes from run-bin. */
+const EMPTY_LADDER = {
+    cheap: undefined,
+    mid: undefined,
+    strong: undefined,
+};
 /** A policy violation found at a shell/@spill tag becomes a `blocked` trajectory
  *  safety event — the command was denied and skipped, so Otto prevented it. */
 function violationToSafetyEvent(v) {
@@ -50,12 +58,35 @@ export async function executeStage(opts) {
             const { originalChars, reducedChars, cacheHits } = reduced.stats;
             process.stderr.write(`${dim(`prompt reduce ${originalChars} -> ${reducedChars} chars | cache hits ${cacheHits}`)}\n`);
         }
-        const result = await runStage(stage, prompt, workspaceDir, iteration, spillHostDir, stageLog, { signal, runtime, sink: opts.sink });
+        // Route the model for this stage (issue #66 P11): a pin wins, else the
+        // declared tier through the ladder when routing is on, else runtime default.
+        const model = resolveStageModel({
+            runtimeId: opts.agentId ?? DEFAULT_AGENT,
+            stage,
+            routing: opts.modelRouting === true,
+            ladder: opts.tierLadder ?? EMPTY_LADDER,
+            assessment: opts.riskAssessment,
+            escalations: opts.escalations,
+        });
+        const result = await runStage(stage, prompt, workspaceDir, iteration, spillHostDir, stageLog, {
+            signal,
+            runtime,
+            sink: opts.sink,
+            modelSpec: model.spec,
+            sandboxWriteRoots: opts.sandboxWriteRoots,
+        });
         // Attribute the *final* prompt's window footprint by category (issue #62
         // P7). `prompt` is post-reduction, so the breakdown reflects what was sent.
         return {
             ...result,
             contextBreakdown: analyzeContext(prompt),
+            ...(model.tier
+                ? {
+                    routedTier: model.tier,
+                    routedModel: model.spec,
+                    modelSource: model.source,
+                }
+                : {}),
             ...(violations.length > 0
                 ? { safetyEvents: violations.map(violationToSafetyEvent) }
                 : {}),

package/dist/stage-exec.js.map

@@ -1 +1 @@
-{"version":3,"file":"stage-exec.js","sourceRoot":"","sources":["../src/stage-exec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,aAAa,EAAuB,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EACL,eAAe,EACf,QAAQ,EACR,YAAY,GAEb,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,gBAAgB,GAEjB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAqBpD;+EAC+E;AAC/E,SAAS,sBAAsB,CAAC,CAAkB;IAChD,OAAO;QACL,QAAQ,EAAE,kBAAkB;QAC5B,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAyB;IAEzB,MAAM,EACJ,KAAK,EACL,IAAI,EACJ,YAAY,EACZ,UAAU,EACV,SAAS,EACT,UAAU,EACV,SAAS,GAAG,KAAK,EACjB,MAAM,GACP,GAAG,IAAI,CAAC;IACT,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC;IAC1C,MAAM,QAAQ,GAAG,SAAS,OAAO,CAAC,GAAG,IAAI,SAAS,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC5E,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5E,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,IAAI,aAAa,CAAC,CAAC;IAC/D,6EAA6E;IAC7E,+EAA+E;IAC/E,+EAA+E;IAC/E,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAE9C,OAAO,WAAW,CAChB,KAAK,IAAI,EAAE;QACT,uEAAuE;QACvE,uEAAuE;QACvE,MAAM,UAAU,GAAsB,EAAE,CAAC;QACzC,IAAI,MAAM,GAAG,cAAc,CACzB,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,EAC7C,IAAI,EACJ;YACE,GAAG,EAAE,YAAY;YACjB,YAAY;YACZ,YAAY;YACZ,MAAM;YACN,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;SAC7C,CACF,CAAC;QACF,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YACxB,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;YACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,GAAG,CAAC,iBAAiB,aAAa,OAAO,YAAY,uBAAuB,SAAS,EAAE,CAAC,IAAI,CAChG,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAC3B,KAAK,EACL,MAAM,EACN,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CACrC,CAAC;QACF,yEAAyE;QACzE,4EAA4E;QAC5E,OAAO;YACL,GAAG,MAAM;YACT,gBAAgB,EAAE,cAAc,CAAC,MAAM,CAAC;YACxC,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBACvB,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE;gBAC1D,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC,EACD;QACE,GAAG,EAAE,UAAU;QACf,SAAS,EAAE,kBAAkB;QAC7B,SAAS,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;YAC1B,MAAM,IAAI,GAAG,UAAU,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,mBAAmB,OAAO,OAAO,UAAU,UAAU,IAAI,KAAK,CAAC;YAC9E,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,GAAI,GAAa,CAAC,OAAO,GAAG,GAAG,CAAC,IAAI,CACnF,CAAC;YACF,IAAI,CAAC;gBACH,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,yDAAyD;YAC3D,CAAC;QACH,CAAC;KACF,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"stage-exec.js","sourceRoot":"","sources":["../src/stage-exec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,aAAa,EAAuB,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAmB,MAAM,iBAAiB,CAAC;AAErE,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EACL,eAAe,EACf,QAAQ,EACR,YAAY,GAEb,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,gBAAgB,GAEjB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAgCpD;kFACkF;AAClF,MAAM,YAAY,GAAe;IAC/B,KAAK,EAAE,SAAS;IAChB,GAAG,EAAE,SAAS;IACd,MAAM,EAAE,SAAS;CAClB,CAAC;AAEF;+EAC+E;AAC/E,SAAS,sBAAsB,CAAC,CAAkB;IAChD,OAAO;QACL,QAAQ,EAAE,kBAAkB;QAC5B,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAyB;IAEzB,MAAM,EACJ,KAAK,EACL,IAAI,EACJ,YAAY,EACZ,UAAU,EACV,SAAS,EACT,UAAU,EACV,SAAS,GAAG,KAAK,EACjB,MAAM,GACP,GAAG,IAAI,CAAC;IACT,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC;IAC1C,MAAM,QAAQ,GAAG,SAAS,OAAO,CAAC,GAAG,IAAI,SAAS,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC5E,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5E,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,IAAI,aAAa,CAAC,CAAC;IAC/D,6EAA6E;IAC7E,+EAA+E;IAC/E,+EAA+E;IAC/E,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAE9C,OAAO,WAAW,CAChB,KAAK,IAAI,EAAE;QACT,uEAAuE;QACvE,uEAAuE;QACvE,MAAM,UAAU,GAAsB,EAAE,CAAC;QACzC,IAAI,MAAM,GAAG,cAAc,CACzB,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,EAC7C,IAAI,EACJ;YACE,GAAG,EAAE,YAAY;YACjB,YAAY;YACZ,YAAY;YACZ,MAAM;YACN,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;SAC7C,CACF,CAAC;QACF,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YACxB,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;YACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,GAAG,CAAC,iBAAiB,aAAa,OAAO,YAAY,uBAAuB,SAAS,EAAE,CAAC,IAAI,CAChG,CAAC;QACJ,CAAC;QACD,uEAAuE;QACvE,6EAA6E;QAC7E,MAAM,KAAK,GAAG,iBAAiB,CAAC;YAC9B,SAAS,EAAE,IAAI,CAAC,OAAO,IAAI,aAAa;YACxC,KAAK;YACL,OAAO,EAAE,IAAI,CAAC,YAAY,KAAK,IAAI;YACnC,MAAM,EAAE,IAAI,CAAC,UAAU,IAAI,YAAY;YACvC,UAAU,EAAE,IAAI,CAAC,cAAc;YAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAC3B,KAAK,EACL,MAAM,EACN,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,QAAQ,EACR;YACE,MAAM;YACN,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,KAAK,CAAC,IAAI;YACrB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;SAC1C,CACF,CAAC;QACF,yEAAyE;QACzE,4EAA4E;QAC5E,OAAO;YACL,GAAG,MAAM;YACT,gBAAgB,EAAE,cAAc,CAAC,MAAM,CAAC;YACxC,GAAG,CAAC,KAAK,CAAC,IAAI;gBACZ,CAAC,CAAC;oBACE,UAAU,EAAE,KAAK,CAAC,IAAI;oBACtB,WAAW,EAAE,KAAK,CAAC,IAAI;oBACvB,WAAW,EAAE,KAAK,CAAC,MAAM;iBAC1B;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBACvB,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE;gBAC1D,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC,EACD;QACE,GAAG,EAAE,UAAU;QACf,SAAS,EAAE,kBAAkB;QAC7B,SAAS,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;YAC1B,MAAM,IAAI,GAAG,UAAU,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,mBAAmB,OAAO,OAAO,UAAU,UAAU,IAAI,KAAK,CAAC;YAC9E,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,GAAI,GAAa,CAAC,OAAO,GAAG,GAAG,CAAC,IAAI,CACnF,CAAC;YACF,IAAI,CAAC;gBACH,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,yDAAyD;YAC3D,CAAC;QACH,CAAC;KACF,CACF,CAAC;AACJ,CAAC"}

package/dist/stages.d.ts

@@ -1,53 +1,81 @@
+import type { ModelTier } from "./model-tier.js";
 export type Stage = {
     name: string;
     template: string;
     permissionMode?: string;
+    /** Difficulty tier for model routing (issue #66 P11). Absent ⇒ runtime default model. */
+    tier?: ModelTier;
 };
 export declare const STAGES: {
     plan: {
         name: string;
         template: string;
         permissionMode: string;
+        tier: "strong";
     };
     implementer: {
         name: string;
         template: string;
         permissionMode: string;
+        tier: "mid";
     };
     ghafkImplementer: {
         name: string;
         template: string;
         permissionMode: string;
+        tier: "mid";
     };
     ghafkIssueImplementer: {
         name: string;
         template: string;
         permissionMode: string;
+        tier: "mid";
     };
     linearImplementer: {
         name: string;
         template: string;
         permissionMode: string;
+        tier: "mid";
     };
     linearIssueImplementer: {
         name: string;
         template: string;
         permissionMode: string;
+        tier: "mid";
     };
     verifier: {
         name: string;
         template: string;
         permissionMode: string;
+        tier: "strong";
     };
     applyReviewImplementer: {
         name: string;
         template: string;
         permissionMode: string;
+        tier: "strong";
     };
     reviewer: {
         name: string;
         template: string;
         permissionMode: string;
+        tier: "strong";
+    };
+    subImplementer: {
+        name: string;
+        template: string;
+        permissionMode: string;
+        tier: "mid";
+    };
+    journalWrite: {
+        name: string;
+        template: string;
+        permissionMode: string;
+    };
+    journalScreen: {
+        name: string;
+        template: string;
+        permissionMode: string;
     };
 };
 //# sourceMappingURL=stages.d.ts.map

package/dist/stages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stages.d.ts","sourceRoot":"","sources":["../src/stages.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,KAAK,GAAG;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAOF,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgDlB,CAAC"}
+{"version":3,"file":"stages.d.ts","sourceRoot":"","sources":["../src/stages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,MAAM,KAAK,GAAG;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yFAAyF;IACzF,IAAI,CAAC,EAAE,SAAS,CAAC;CAClB,CAAC;AAOF,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8ElB,CAAC"}

package/dist/stages.js

@@ -10,46 +10,76 @@ export const STAGES = {
         name: "plan",
         template: "plan.md",
         permissionMode: "bypassPermissions",
+        tier: "strong",
     },
     implementer: {
         name: "implementer",
         template: "afk.md",
         permissionMode: "bypassPermissions",
+        tier: "mid",
     },
     ghafkImplementer: {
         name: "ghafk-implementer",
         template: "ghafk.md",
         permissionMode: "bypassPermissions",
+        tier: "mid",
     },
     ghafkIssueImplementer: {
         name: "ghafk-issue-implementer",
         template: "ghafk-issue.md",
         permissionMode: "bypassPermissions",
+        tier: "mid",
     },
     linearImplementer: {
         name: "linear-implementer",
         template: "linearafk.md",
         permissionMode: "bypassPermissions",
+        tier: "mid",
     },
     linearIssueImplementer: {
         name: "linear-issue-implementer",
         template: "linearafk-issue.md",
         permissionMode: "bypassPermissions",
+        tier: "mid",
     },
     verifier: {
         name: "verifier",
         template: "verify.md",
         permissionMode: "bypassPermissions",
+        tier: "strong",
     },
     applyReviewImplementer: {
         name: "apply-review-implementer",
         template: "apply-review.md",
         permissionMode: "bypassPermissions",
+        tier: "strong",
     },
     reviewer: {
         name: "reviewer",
         template: "review.md",
         permissionMode: "bypassPermissions",
+        tier: "strong",
+    },
+    // One fanned-out plan task, run in an isolated worktree with bounded context
+    // (issue #66 P11). Mechanical-to-moderate per-task work → mid tier.
+    subImplementer: {
+        name: "sub-implementer",
+        template: "subtask.md",
+        permissionMode: "bypassPermissions",
+        tier: "mid",
+    },
+    // P12 public journal (issue #67): generate a generic field note from a memory
+    // learning, and adversarially screen a candidate note for leaks. Both produce
+    // only text — the harness owns the secrecy gate and the actual posting.
+    journalWrite: {
+        name: "journal-write",
+        template: "journal-write.md",
+        permissionMode: "bypassPermissions",
+    },
+    journalScreen: {
+        name: "journal-screen",
+        template: "journal-screen.md",
+        permissionMode: "bypassPermissions",
     },
 };
 //# sourceMappingURL=stages.js.map

package/dist/stages.js.map

@@ -1 +1 @@
-{"version":3,"file":"stages.js","sourceRoot":"","sources":["../src/stages.ts"],"names":[],"mappings":"AAMA,gFAAgF;AAChF,8EAA8E;AAC9E,iFAAiF;AACjF,kFAAkF;AAClF,gFAAgF;AAChF,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,yEAAyE;IACzE,4EAA4E;IAC5E,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,SAAS;QACnB,cAAc,EAAE,mBAAmB;KACpB;IACjB,WAAW,EAAE;QACX,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,QAAQ;QAClB,cAAc,EAAE,mBAAmB;KACpB;IACjB,gBAAgB,EAAE;QAChB,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,mBAAmB;KACpB;IACjB,qBAAqB,EAAE;QACrB,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,gBAAgB;QAC1B,cAAc,EAAE,mBAAmB;KACpB;IACjB,iBAAiB,EAAE;QACjB,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,cAAc;QACxB,cAAc,EAAE,mBAAmB;KACpB;IACjB,sBAAsB,EAAE;QACtB,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,oBAAoB;QAC9B,cAAc,EAAE,mBAAmB;KACpB;IACjB,QAAQ,EAAE;QACR,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,WAAW;QACrB,cAAc,EAAE,mBAAmB;KACpB;IACjB,sBAAsB,EAAE;QACtB,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,iBAAiB;QAC3B,cAAc,EAAE,mBAAmB;KACpB;IACjB,QAAQ,EAAE;QACR,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,WAAW;QACrB,cAAc,EAAE,mBAAmB;KACpB;CAClB,CAAC"}
+{"version":3,"file":"stages.js","sourceRoot":"","sources":["../src/stages.ts"],"names":[],"mappings":"AAUA,gFAAgF;AAChF,8EAA8E;AAC9E,iFAAiF;AACjF,kFAAkF;AAClF,gFAAgF;AAChF,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,yEAAyE;IACzE,4EAA4E;IAC5E,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,SAAS;QACnB,cAAc,EAAE,mBAAmB;QACnC,IAAI,EAAE,QAAQ;KACC;IACjB,WAAW,EAAE;QACX,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,QAAQ;QAClB,cAAc,EAAE,mBAAmB;QACnC,IAAI,EAAE,KAAK;KACI;IACjB,gBAAgB,EAAE;QAChB,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,mBAAmB;QACnC,IAAI,EAAE,KAAK;KACI;IACjB,qBAAqB,EAAE;QACrB,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,gBAAgB;QAC1B,cAAc,EAAE,mBAAmB;QACnC,IAAI,EAAE,KAAK;KACI;IACjB,iBAAiB,EAAE;QACjB,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,cAAc;QACxB,cAAc,EAAE,mBAAmB;QACnC,IAAI,EAAE,KAAK;KACI;IACjB,sBAAsB,EAAE;QACtB,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,oBAAoB;QAC9B,cAAc,EAAE,mBAAmB;QACnC,IAAI,EAAE,KAAK;KACI;IACjB,QAAQ,EAAE;QACR,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,WAAW;QACrB,cAAc,EAAE,mBAAmB;QACnC,IAAI,EAAE,QAAQ;KACC;IACjB,sBAAsB,EAAE;QACtB,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,iBAAiB;QAC3B,cAAc,EAAE,mBAAmB;QACnC,IAAI,EAAE,QAAQ;KACC;IACjB,QAAQ,EAAE;QACR,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,WAAW;QACrB,cAAc,EAAE,mBAAmB;QACnC,IAAI,EAAE,QAAQ;KACC;IACjB,6EAA6E;IAC7E,oEAAoE;IACpE,cAAc,EAAE;QACd,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,YAAY;QACtB,cAAc,EAAE,mBAAmB;QACnC,IAAI,EAAE,KAAK;KACI;IACjB,8EAA8E;IAC9E,8EAA8E;IAC9E,wEAAwE;IACxE,YAAY,EAAE;QACZ,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,kBAAkB;QAC5B,cAAc,EAAE,mBAAmB;KACpB;IACjB,aAAa,EAAE;QACb,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,mBAAmB;QAC7B,cAAc,EAAE,mBAAmB;KACpB;CAClB,CAAC"}

package/dist/threads-api.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Threads (Meta) publishing client for the P12 public journal (issue #67).
+ * Mirrors linear-api.ts: injectable fetch + credentials from env or
+ * ~/.config/otto/threads.json. The Threads Graph API publishes in two steps —
+ * create a TEXT container, then publish it.
+ */
+export type ThreadsAuth = {
+    token: string;
+    userId: string;
+    source: string;
+};
+export type ThreadsAuthDeps = {
+    env: NodeJS.ProcessEnv;
+    readFile: (path: string) => string | null;
+    home: string;
+};
+/** Canonical location of the stored Threads credentials (outside any repo). */
+export declare function threadsConfigPath(home: string): string;
+/**
+ * Resolve a Threads token + user id with precedence `OTTO_THREADS_TOKEN` +
+ * `OTTO_THREADS_USER_ID` → `~/.config/otto/threads.json` (`{ token, userId }`).
+ * Returns null when no source yields both a token and a user id.
+ */
+export declare function resolveThreadsAuth(deps?: ThreadsAuthDeps): ThreadsAuth | null;
+export type ThreadsErrorKind = "auth" | "network" | "api";
+export declare class ThreadsApiError extends Error {
+    kind: ThreadsErrorKind;
+    constructor(message: string, kind: ThreadsErrorKind);
+}
+export type ThreadsClient = {
+    publish(text: string): Promise<{
+        id: string;
+    }>;
+};
+/**
+ * Create a Threads client. The two-step publish: create a TEXT container
+ * (`/{userId}/threads`), then publish it (`/{userId}/threads_publish`). `fetch`
+ * is injectable for tests; errors are classified as auth/network/api.
+ */
+export declare function createThreadsClient(opts: {
+    token: string;
+    userId: string;
+    fetch?: typeof fetch;
+    baseUrl?: string;
+}): ThreadsClient;
+//# sourceMappingURL=threads-api.d.ts.map

package/dist/threads-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"threads-api.d.ts","sourceRoot":"","sources":["../src/threads-api.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,MAAM,WAAW,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5E,MAAM,MAAM,eAAe,GAAG;IAC5B,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAC1C,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAcF,+EAA+E;AAC/E,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,GAAE,eAAiC,GACtC,WAAW,GAAG,IAAI,CAuBpB;AAED,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,SAAS,GAAG,KAAK,CAAC;AAE1D,qBAAa,eAAgB,SAAQ,KAAK;IACxC,IAAI,EAAE,gBAAgB,CAAC;gBACX,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB;CAKpD;AAED,MAAM,MAAM,aAAa,GAAG;IAAE,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC;AAI/E;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,aAAa,CAoChB"}

package/dist/threads-api.js

@@ -0,0 +1,101 @@
+/**
+ * Threads (Meta) publishing client for the P12 public journal (issue #67).
+ * Mirrors linear-api.ts: injectable fetch + credentials from env or
+ * ~/.config/otto/threads.json. The Threads Graph API publishes in two steps —
+ * create a TEXT container, then publish it.
+ */
+import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+const defaultAuthDeps = {
+    env: process.env,
+    readFile: (p) => {
+        try {
+            return readFileSync(p, "utf8");
+        }
+        catch {
+            return null;
+        }
+    },
+    home: homedir(),
+};
+/** Canonical location of the stored Threads credentials (outside any repo). */
+export function threadsConfigPath(home) {
+    return join(home, ".config", "otto", "threads.json");
+}
+/**
+ * Resolve a Threads token + user id with precedence `OTTO_THREADS_TOKEN` +
+ * `OTTO_THREADS_USER_ID` → `~/.config/otto/threads.json` (`{ token, userId }`).
+ * Returns null when no source yields both a token and a user id.
+ */
+export function resolveThreadsAuth(deps = defaultAuthDeps) {
+    const token = deps.env.OTTO_THREADS_TOKEN?.trim();
+    const userId = deps.env.OTTO_THREADS_USER_ID?.trim();
+    if (token && userId)
+        return { token, userId, source: "env" };
+    const path = threadsConfigPath(deps.home);
+    const raw = deps.readFile(path);
+    if (raw != null) {
+        try {
+            const o = JSON.parse(raw);
+            if (typeof o.token === "string" &&
+                o.token.trim() &&
+                typeof o.userId === "string" &&
+                o.userId.trim()) {
+                return { token: o.token.trim(), userId: o.userId.trim(), source: path };
+            }
+        }
+        catch {
+            // malformed → no credential from this source
+        }
+    }
+    return null;
+}
+export class ThreadsApiError extends Error {
+    kind;
+    constructor(message, kind) {
+        super(message);
+        this.name = "ThreadsApiError";
+        this.kind = kind;
+    }
+}
+const DEFAULT_BASE = "https://graph.threads.net/v1.0";
+/**
+ * Create a Threads client. The two-step publish: create a TEXT container
+ * (`/{userId}/threads`), then publish it (`/{userId}/threads_publish`). `fetch`
+ * is injectable for tests; errors are classified as auth/network/api.
+ */
+export function createThreadsClient(opts) {
+    const fetchImpl = opts.fetch ?? fetch;
+    const base = opts.baseUrl ?? DEFAULT_BASE;
+    if (!opts.token || !opts.userId) {
+        throw new ThreadsApiError("missing Threads credentials", "auth");
+    }
+    const post = async (url) => {
+        let res;
+        try {
+            res = await fetchImpl(url, { method: "POST" });
+        }
+        catch (e) {
+            throw new ThreadsApiError(`Threads request failed: ${e.message}`, "network");
+        }
+        if (!res.ok) {
+            throw new ThreadsApiError(`Threads API returned ${res.status}`, "api");
+        }
+        const json = (await res.json());
+        if (typeof json.id !== "string") {
+            throw new ThreadsApiError("Threads API response missing id", "api");
+        }
+        return { id: json.id };
+    };
+    return {
+        async publish(text) {
+            const tok = encodeURIComponent(opts.token);
+            const create = `${base}/${opts.userId}/threads?media_type=TEXT&text=${encodeURIComponent(text)}&access_token=${tok}`;
+            const { id: creationId } = await post(create);
+            const publish = `${base}/${opts.userId}/threads_publish?creation_id=${encodeURIComponent(creationId)}&access_token=${tok}`;
+            return post(publish);
+        },
+    };
+}
+//# sourceMappingURL=threads-api.js.map

package/dist/threads-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threads-api.js","sourceRoot":"","sources":["../src/threads-api.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAUjC,MAAM,eAAe,GAAoB;IACvC,GAAG,EAAE,OAAO,CAAC,GAAG;IAChB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;QACd,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,IAAI,EAAE,OAAO,EAAE;CAChB,CAAC;AAEF,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAwB,eAAe;IAEvC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC;IACrD,IAAI,KAAK,IAAI,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAE7D,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0C,CAAC;YACnE,IACE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;gBAC3B,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;gBACd,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;gBAC5B,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EACf,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAC1E,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAID,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,IAAI,CAAmB;IACvB,YAAY,OAAe,EAAE,IAAsB;QACjD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAID,MAAM,YAAY,GAAG,gCAAgC,CAAC;AAEtD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAKnC;IACC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC;IAC1C,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,IAAI,eAAe,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAA2B,EAAE;QAC1D,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,eAAe,CACvB,2BAA4B,CAAW,CAAC,OAAO,EAAE,EACjD,SAAS,CACV,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,eAAe,CAAC,wBAAwB,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAqB,CAAC;QACpD,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,eAAe,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IACzB,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,IAAY;YACxB,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,MAAM,iCAAiC,kBAAkB,CAAC,IAAI,CAAC,iBAAiB,GAAG,EAAE,CAAC;YACrH,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,MAAM,gCAAgC,kBAAkB,CAAC,UAAU,CAAC,iBAAiB,GAAG,EAAE,CAAC;YAC3H,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/worktree.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Git-worktree isolation for sub-agent fan-out (issue #66 P11). Each parallel
+ * sub-agent runs in its own worktree under `.otto-tmp/wt/<id>` — a separate
+ * working directory sharing the repo's object store, so the agents never clobber
+ * each other's files. The dir is inside the workspace, so the native OS sandbox
+ * still confines writes. `.otto-tmp/` is already gitignored.
+ */
+/**
+ * Create an isolated worktree at HEAD under `.otto-tmp/wt/<id>`. `--detach` so
+ * the sub-agent commits onto a detached HEAD without creating or moving a branch.
+ * `cleanup()` removes the worktree (and its dir); it is idempotent and safe to
+ * call from a `finally`.
+ */
+export declare function createWorktree(workspaceDir: string, id: string): {
+    dir: string;
+    cleanup: () => void;
+};
+/**
+ * Prune leftover worktrees from a crashed prior run: remove the `.otto-tmp/wt`
+ * tree wholesale, then GC git's worktree registry so the stale entries don't
+ * linger. Call once before a fan-out round.
+ */
+export declare function reapWorktrees(workspaceDir: string): void;
+//# sourceMappingURL=worktree.d.ts.map

package/dist/worktree.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree.d.ts","sourceRoot":"","sources":["../src/worktree.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,YAAY,EAAE,MAAM,EACpB,EAAE,EAAE,MAAM,GACT;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,IAAI,CAAA;CAAE,CAetC;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAGxD"}

package/dist/worktree.js

@@ -0,0 +1,43 @@
+/**
+ * Git-worktree isolation for sub-agent fan-out (issue #66 P11). Each parallel
+ * sub-agent runs in its own worktree under `.otto-tmp/wt/<id>` — a separate
+ * working directory sharing the repo's object store, so the agents never clobber
+ * each other's files. The dir is inside the workspace, so the native OS sandbox
+ * still confines writes. `.otto-tmp/` is already gitignored.
+ */
+import { rmSync } from "node:fs";
+import { join } from "node:path";
+import { git } from "./git.js";
+/**
+ * Create an isolated worktree at HEAD under `.otto-tmp/wt/<id>`. `--detach` so
+ * the sub-agent commits onto a detached HEAD without creating or moving a branch.
+ * `cleanup()` removes the worktree (and its dir); it is idempotent and safe to
+ * call from a `finally`.
+ */
+export function createWorktree(workspaceDir, id) {
+    const rel = join(".otto-tmp", "wt", id);
+    const dir = join(workspaceDir, rel);
+    // Remove any stale worktree at this path first (a crashed prior run), then add.
+    git(["worktree", "remove", "--force", dir], workspaceDir);
+    rmSync(dir, { recursive: true, force: true });
+    git(["worktree", "add", "--detach", dir, "HEAD"], workspaceDir);
+    let cleaned = false;
+    const cleanup = () => {
+        if (cleaned)
+            return;
+        cleaned = true;
+        git(["worktree", "remove", "--force", dir], workspaceDir);
+        rmSync(dir, { recursive: true, force: true });
+    };
+    return { dir, cleanup };
+}
+/**
+ * Prune leftover worktrees from a crashed prior run: remove the `.otto-tmp/wt`
+ * tree wholesale, then GC git's worktree registry so the stale entries don't
+ * linger. Call once before a fan-out round.
+ */
+export function reapWorktrees(workspaceDir) {
+    rmSync(join(workspaceDir, ".otto-tmp", "wt"), { recursive: true, force: true });
+    git(["worktree", "prune"], workspaceDir);
+}
+//# sourceMappingURL=worktree.js.map

package/dist/worktree.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree.js","sourceRoot":"","sources":["../src/worktree.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,YAAoB,EACpB,EAAU;IAEV,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IACpC,gFAAgF;IAChF,GAAG,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,GAAG,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;IAChE,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,GAAG,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC;IACF,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,YAAoB;IAChD,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChF,GAAG,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;AAC3C,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@phamvuhoang/otto-core",
-  "version": "0.18.0",
+  "version": "0.20.0",
   "description": "Claude Code AFK orchestration: iteration loop, native-sandbox runner, template renderer.",
   "type": "module",
   "license": "MIT",

package/templates/journal-screen.md

@@ -0,0 +1,19 @@
+You are a strict pre-publication secrecy reviewer. A note is about to be posted
+publicly by an autonomous coding agent. Your ONLY job is to prevent leaks.
+
+Decide whether the note below is SAFE to post. Treat it as UNSAFE if a reader
+could identify the specific repository, product, company, person, or customer —
+or if it contains code, secrets, paths, URLs, names, or any private/internal
+detail. If there is ANY doubt whatsoever, answer UNSAFE.
+
+Respond with EXACTLY one line and nothing else:
+
+<journal-verdict>SAFE</journal-verdict>
+
+or
+
+<journal-verdict>UNSAFE</journal-verdict>
+
+<note>
+{{ INPUTS }}
+</note>

package/templates/journal-write.md

@@ -0,0 +1,16 @@
+You are _a coding agent's field notes_ — you share short, generic lessons about
+the craft of software work, never about any specific project.
+
+Below is one durable learning. Rewrite it as a SINGLE first-person field note
+(2–4 sentences, under 400 characters) capturing the GENERAL craft lesson.
+
+STRICT RULES:
+
+- No project, product, company, person, file, path, tool, version, or ticket names.
+- No code, commands, URLs, or identifiers of any kind.
+- If the learning cannot be generalized without specifics, output exactly: SKIP
+- Output ONLY the note text (or SKIP). No preamble, no quotes, no markdown.
+
+<learning>
+{{ INPUTS }}
+</learning>

package/templates/plan.md

@@ -87,9 +87,31 @@ Use the `Write` tool. An ordered checklist of **bite-sized, testable tasks**, on
 Keep tasks ordered so each is gated on the prior; name the test file that pins
 each task.
 
+## 4b. WRITE THE TASK GRAPH (optional) — `.otto/tasks/<task-key>/tasks.json`
+
+Use the `Write` tool to also emit a machine-readable task graph so Otto can fan
+independent tasks out to isolated sub-agents (issue #66 P11). Shape:
+
+```json
+{
+  "version": 1,
+  "tasks": [
+    { "id": "t1", "title": "<short>", "fileScope": ["path/you/expect/to/touch"], "dependsOn": [], "parallelSafe": true },
+    { "id": "t2", "title": "<short>", "fileScope": ["other/path"], "dependsOn": ["t1"], "parallelSafe": false }
+  ]
+}
+```
+
+Rules: `id` unique; `dependsOn` lists earlier task ids that must land first;
+`fileScope` lists the files the task is expected to edit; set `parallelSafe`
+**true only when** the task shares no files and no ordering with its siblings —
+**be conservative and default to `false` when unsure**. This file is OPTIONAL:
+if the work does not decompose into cleanly independent tasks, omit it and the
+run proceeds sequentially. A malformed file is ignored (fan-out simply disabled).
+
 ## 5. COMMIT
 
-Commit ONLY the spec + plan (and this is the whole run — no code). Use a
-`docs(plan):` or `chore(plan):` commit. Then print a one-line summary of the
-task-key and the number of plan tasks authored. Do not implement; the human
-reviews the plan next.
+Commit ONLY the spec + plan + (if written) the task graph — this is the whole
+run, no code. Use a `docs(plan):` or `chore(plan):` commit. Then print a one-line
+summary of the task-key and the number of plan tasks authored. Do not implement;
+the human reviews the plan next.

package/templates/subtask.md

@@ -0,0 +1,32 @@
+{{ RESUME }}
+
+<learnings>
+
+!?`cat ./.otto/LEARNINGS.md|||_No learnings recorded yet._`
+
+</learnings>
+
+<task>
+
+You are implementing **one** task in an isolated worktree, as part of a parallel
+fan-out (issue #66 P11). Do the whole task and nothing else.
+
+**Task:** {{ TASK_TITLE }}
+
+**Files you are expected to touch (your scope — do not edit files outside it):**
+
+```
+{{ TASK_SCOPE }}
+```
+
+Stay strictly within that file scope: a sibling sub-agent owns every other file
+in parallel, so editing outside your scope will collide at merge time. If the
+task genuinely cannot be done without touching a file outside the scope, do as
+much as you safely can within scope and note the gap in your commit message.
+
+Write the failing test first where it applies, implement, run the relevant
+feedback loop, and make a single focused commit for this task. Do not push.
+
+</task>
+
+@include:prompt.md