@spinabot/brigade 0.1.2 → 1.0.1

package/dist/core/gateway-spawn.js

@@ -0,0 +1,156 @@
+/**
+ * Gateway auto-spawn — ensure a Brigade gateway daemon is running, starting a
+ * detached one if not.
+ *
+ * `brigade chat` is a thin WebSocket client to the gateway (the single
+ * per-turn runtime). When the user runs `brigade chat` and no gateway is up,
+ * we spawn one as a DETACHED background process so it survives the chat
+ * session — later `brigade chat` / `brigade connect` reattach to the same
+ * daemon instantly. Native apps and the TUI are always clients of a
+ * long-lived gateway subprocess; the TUI is never the agent host.
+ *
+ * The spawned daemon is independent: we `unref()` it so the parent (chat)
+ * can exit without tearing it down. Stopping it is explicit:
+ * `brigade gateway stop`.
+ */
+import { spawn } from "node:child_process";
+import process from "node:process";
+import { DEFAULT_PORT } from "../protocol.js";
+import { probeGateway } from "./gateway-probe.js";
+const SPAWN_POLL_INTERVAL_MS = 250;
+const DEFAULT_SPAWN_TIMEOUT_MS = 20_000;
+/** Quick probe budget — local boot answers fast; keep the wait responsive. */
+const PROBE_TIMEOUT_MS = 1000;
+function sleep(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
+/**
+ * Resolve the argv that re-execs THIS brigade install as a gateway daemon.
+ *
+ * Installed mode: `process.argv[1]` is `brigade.mjs`, so the daemon is
+ * `node brigade.mjs gateway run …` — the exact same binary the user invoked.
+ *
+ * Escape hatch (dev + tests): `BRIGADE_GATEWAY_SPAWN_ARGV`, a JSON string
+ * array `[cmd, ...args]`, overrides the command entirely. Dev runs from a
+ * `.ts` entry under tsx can't be re-exec'd by plain `node`, so we detect that
+ * and surface a clear "start it manually" error instead of spawning a process
+ * that would crash on the TypeScript syntax.
+ */
+function resolveGatewaySpawnArgv(host, port) {
+    const override = process.env.BRIGADE_GATEWAY_SPAWN_ARGV?.trim();
+    if (override) {
+        try {
+            const parsed = JSON.parse(override);
+            if (Array.isArray(parsed) && parsed.length > 0 && typeof parsed[0] === "string") {
+                const cmd = parsed[0];
+                const rest = parsed.slice(1).map((v) => String(v));
+                // Override is taken VERBATIM — we do NOT append --port/--host.
+                // The port reaches the override via the `BRIGADE_PORT` env var
+                // (set in spawnDetachedGateway), which the gateway honours. This
+                // keeps the override usable with arbitrary launchers (and test
+                // stubs like `node -e "…"` that would choke on trailing flags).
+                return { cmd, args: rest };
+            }
+        }
+        catch {
+            // Malformed override — fall through to the default re-exec.
+        }
+    }
+    const entry = process.argv[1] ?? "";
+    if (/\.tsx?$/.test(entry)) {
+        throw new Error("can't auto-start the Brigade service from a TypeScript dev entry. " +
+            "Start it manually in another terminal: `npm run dev gateway run` " +
+            "(or set BRIGADE_GATEWAY_SPAWN_ARGV).");
+    }
+    return {
+        cmd: process.execPath,
+        args: [entry, "gateway", "run", "--quiet", "--port", String(port), "--host", host],
+    };
+}
+function spawnDetachedGateway(host, port) {
+    const { cmd, args } = resolveGatewaySpawnArgv(host, port);
+    return spawn(cmd, args, {
+        // Detach so the daemon outlives the chat process (persistent
+        // long-lived lifecycle). `stdio: "ignore"` because the daemon writes
+        // to its own JSONL log + console stream, not our TTY.
+        detached: true,
+        stdio: "ignore",
+        windowsHide: true,
+        env: { ...process.env, BRIGADE_PORT: String(port) },
+    });
+    // NOTE: caller attaches error/exit listeners and `unref()`s once readiness
+    // is established (see ensureGatewayRunning). We must NOT unref here, or a
+    // spawn `error` event would go unhandled and crash the parent.
+}
+/**
+ * Ensure a gateway is reachable at host:port. If one is already up, return
+ * immediately. Otherwise spawn a detached daemon and poll until it accepts
+ * connections (or the timeout elapses). Throws a friendly error on timeout.
+ *
+ * The caller is expected to have already verified a provider/model is
+ * configured — a gateway with no config exits on boot, which would surface
+ * here as a readiness timeout.
+ */
+export async function ensureGatewayRunning(opts = {}) {
+    const host = opts.host ?? "127.0.0.1";
+    const port = opts.port ?? (Number(process.env.BRIGADE_PORT) || DEFAULT_PORT);
+    const timeoutMs = opts.spawnTimeoutMs ?? DEFAULT_SPAWN_TIMEOUT_MS;
+    const existing = await probeGateway({ host, port, timeoutMs: PROBE_TIMEOUT_MS });
+    if (existing.reachable)
+        return { alreadyRunning: true, host, port };
+    opts.onStatus?.("starting Brigade service…");
+    const child = spawnDetachedGateway(host, port);
+    // Watch the child for failure signals so we fail FAST + LOUD instead of
+    // dead-waiting the full timeout. Without an `error` listener the event is
+    // unhandled and crashes the parent (chat); without the `exit` watch, a
+    // daemon that dies on boot (bad key, port held by a non-Brigade process,
+    // model not in registry) would just silently never appear and we'd time out.
+    // `stdio` is "ignore", so the exit CODE is the only signal we get — point
+    // the user at `brigade gateway` (foreground, verbose) for the real reason.
+    let spawnError;
+    let earlyExit;
+    const onError = (err) => {
+        spawnError = err;
+    };
+    const onExit = (code, signal) => {
+        earlyExit = { code, signal };
+    };
+    child.once("error", onError);
+    child.once("exit", onExit);
+    try {
+        const deadline = Date.now() + timeoutMs;
+        let lastError = existing.error;
+        while (Date.now() < deadline) {
+            if (spawnError) {
+                throw new Error(`couldn't start the Brigade service: ${spawnError.message}. ` +
+                    "Try starting it manually: `brigade gateway`.");
+            }
+            if (earlyExit) {
+                const detail = earlyExit.code != null ? `exit code ${earlyExit.code}` : `signal ${earlyExit.signal}`;
+                throw new Error(`the Brigade service stopped right after starting (${detail}). ` +
+                    "Run `brigade gateway` in this terminal to see why " +
+                    "(usually an auth/key, port, or model-config issue).");
+            }
+            await sleep(SPAWN_POLL_INTERVAL_MS);
+            const probe = await probeGateway({ host, port, timeoutMs: PROBE_TIMEOUT_MS });
+            if (probe.reachable)
+                return { alreadyRunning: false, host, port };
+            lastError = probe.error;
+        }
+        throw new Error(`the Brigade service didn't come online within ${Math.round(timeoutMs / 1000)}s` +
+            (lastError ? ` (last error: ${lastError})` : "") +
+            ". Try starting it manually to see why: `brigade gateway`.");
+    }
+    finally {
+        // Stop tracking the child and release the parent's handle so chat can
+        // exit independently of the (now detached, persistent) daemon. Done in
+        // `finally` so success, early-exit, and timeout paths all unref cleanly.
+        child.removeListener("error", onError);
+        child.removeListener("exit", onExit);
+        // Keep a no-op error sink so a LATE async spawn error (after we've
+        // stopped watching) can't resurface as an unhandled 'error' crash.
+        child.on("error", () => { });
+        child.unref();
+    }
+}
+//# sourceMappingURL=gateway-spawn.js.map

package/dist/core/gateway-spawn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-spawn.js","sourceRoot":"","sources":["../../src/core/gateway-spawn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAqB,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AACxC,8EAA8E;AAC9E,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAkB9B,SAAS,KAAK,CAAC,EAAU;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,uBAAuB,CAAC,IAAY,EAAE,IAAY;IAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE,CAAC;IAChE,IAAI,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAY,CAAC;YAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACjF,MAAM,GAAG,GAAW,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC9B,MAAM,IAAI,GAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClE,+DAA+D;gBAC/D,+DAA+D;gBAC/D,iEAAiE;gBACjE,+DAA+D;gBAC/D,gEAAgE;gBAChE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC5B,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,4DAA4D;QAC7D,CAAC;IACF,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACd,oEAAoE;YACnE,mEAAmE;YACnE,sCAAsC,CACvC,CAAC;IACH,CAAC;IACD,OAAO;QACN,GAAG,EAAE,OAAO,CAAC,QAAQ;QACrB,IAAI,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC;KAClF,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY,EAAE,IAAY;IACvD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,uBAAuB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1D,OAAO,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;QACvB,6DAA6D;QAC7D,qEAAqE;QACrE,sDAAsD;QACtD,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,IAAI;QACjB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;KACnD,CAAC,CAAC;IACH,2EAA2E;IAC3E,0EAA0E;IAC1E,+DAA+D;AAChE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAA6B,EAAE;IACzE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAElE,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACjF,IAAI,QAAQ,CAAC,SAAS;QAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAEpE,IAAI,CAAC,QAAQ,EAAE,CAAC,2BAA2B,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE/C,wEAAwE;IACxE,0EAA0E;IAC1E,uEAAuE;IACvE,yEAAyE;IACzE,6EAA6E;IAC7E,0EAA0E;IAC1E,2EAA2E;IAC3E,IAAI,UAA6B,CAAC;IAClC,IAAI,SAA6E,CAAC;IAClF,MAAM,OAAO,GAAG,CAAC,GAAU,EAAQ,EAAE;QACpC,UAAU,GAAG,GAAG,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,IAAmB,EAAE,MAA6B,EAAQ,EAAE;QAC3E,SAAS,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE3B,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,IAAI,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC/B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC9B,IAAI,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CACd,uCAAuC,UAAU,CAAC,OAAO,IAAI;oBAC5D,8CAA8C,CAC/C,CAAC;YACH,CAAC;YACD,IAAI,SAAS,EAAE,CAAC;gBACf,MAAM,MAAM,GACX,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,aAAa,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,SAAS,CAAC,MAAM,EAAE,CAAC;gBACvF,MAAM,IAAI,KAAK,CACd,qDAAqD,MAAM,KAAK;oBAC/D,oDAAoD;oBACpD,qDAAqD,CACtD,CAAC;YACH,CAAC;YACD,MAAM,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACpC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC9E,IAAI,KAAK,CAAC,SAAS;gBAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAClE,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC;QACzB,CAAC;QACD,MAAM,IAAI,KAAK,CACd,iDAAiD,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG;YAC/E,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,2DAA2D,CAC5D,CAAC;IACH,CAAC;YAAS,CAAC;QACV,sEAAsE;QACtE,uEAAuE;QACvE,yEAAyE;QACzE,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,mEAAmE;QACnE,mEAAmE;QACnE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC5B,KAAK,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;AACF,CAAC"}

package/dist/core/model-caps.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Model capability adapter.
+ *
+ * Pi-AI exposes ~150+ models across 9 providers. They have wildly different
+ * defaults, quirks, and breakages. This module is the single place where
+ * Brigade encodes that knowledge. Two responsibilities:
+ *
+ *   1. Pick a SAFE initial `thinkingLevel` for a freshly-selected model
+ *      (some reasoning-only models reject `thinking budget = 0`).
+ *   2. Render a human-readable description of what a model supports
+ *      (used in the header and in the model picker).
+ *
+ * If a new model regression shows up — "X provider rejects Y when Z" —
+ * encode it here, not scattered across agent.ts/tui.ts/onboarding.ts.
+ */
+import type { Model } from "@mariozechner/pi-ai";
+import type { ThinkingLevel } from "@mariozechner/pi-agent-core";
+export declare function readPersistedThinkingLevel(entry: unknown): ThinkingLevel | undefined;
+export declare function pickInitialThinkingLevel(model: Model<any>): ThinkingLevel;
+/**
+ * Conservative id-pattern detector for reasoning-only models that reject a
+ * zero thinking budget. Kept tight on purpose — only families we KNOW
+ * require thinking-on, so we never send "low" to a plain non-reasoning model
+ * (which some providers would bill for or reject). Aggregator-prefix
+ * tolerant (`openrouter/google/gemini-2.5-pro`).
+ */
+export declare function isLikelyReasoningModelId(modelId: string): boolean;
+/**
+ * Remap a thinking level across a MODEL SWITCH (or clamp a set-thinking request)
+ * so the operator's intent survives instead of resetting to the new model's
+ * initial default. Unlike `pickInitialThinkingLevel` (which ignores the current
+ * level), this PRESERVES the active level when the new model can honor it, and
+ * only adjusts when it can't — the difference between "switched model, kept
+ * thinking on high" and "switched model, silently dropped to off":
+ *   - new model can't reason             → "off"
+ *   - new model reasons, level is valid  → keep it (`high` stays `high`)
+ *   - level is "off" but the new model is reasoning-ONLY (rejects budget=0,
+ *     e.g. gemini-2.5/o-series/r1)        → "low" (so it isn't rejected)
+ *   - current level missing/invalid       → fall back to pickInitialThinkingLevel
+ */
+export declare function remapThinkingLevel(current: ThinkingLevel | undefined, target: Model<any>): ThinkingLevel;
+/**
+ * Short human description of a model's notable capabilities,
+ * suitable for the chat header (e.g. "thinking · vision · 1M ctx · $1.25/Mtok").
+ *
+ * Renders only what's relevant — omits cost when zero (free tier),
+ * omits vision when text-only, omits thinking when not supported.
+ */
+export declare function describeModelCapabilities(model: Model<any>, currentThinkingLevel?: ThinkingLevel): string;
+/**
+ * Pick the SAFE stream-idle timeout for this model in milliseconds.
+ *
+ * Wrong defaults here are user-visible failures: too low and we abort a
+ * working slow model (the "qwen3-coder:30b: no response for 60s" bug from
+ * the screenshot); too high and a genuinely-stalled connection makes the
+ * user wait minutes before getting feedback.
+ *
+ * Trade-off chosen:
+ *   - Cloud (Anthropic, OpenAI, Google, Groq, etc.) → 60s
+ *     First token typically <3s; >60s of silence is genuine stall.
+ *   - Cloud reasoning (Gemini 2.5 Pro thinking, etc.) → 180s
+ *     Heavy reasoning can take 30-60s before any text emits.
+ *   - Ollama (local) → 300s (5 min)
+ *     30B model on consumer GPU: 30-90s first token, 5+ min for complex.
+ *   - Custom OpenAI-compatible → 180s
+ *     Could be cloud OR local (Together, Fireworks, vLLM, LM Studio);
+ *     conservative default keeps both working.
+ */
+export declare function pickStreamIdleMs(model: Model<any>): number;
+/**
+ * Parse a raw provider error message (often an embedded JSON blob) into
+ * a single human-readable line. Each provider returns errors in a slightly
+ * different shape — this function unwraps the common ones.
+ *
+ * Examples this handles:
+ *   - Google:    `{"error":{"message":"Budget 0 is invalid…","code":400,…}}`
+ *   - OpenAI:    `{"error":{"message":"Invalid API key…","type":"invalid_request_error","code":"invalid_api_key"}}`
+ *   - Anthropic: `{"error":{"type":"authentication_error","message":"…"}}`
+ *   - Pi-wrapped: `{"error":{"message":"<the JSON above stringified>","code":400,"status":"Bad Request"}}`
+ *
+ * Returns the cleaned message, or the original input if nothing matched.
+ * Never throws.
+ */
+export declare function cleanProviderError(raw: string): string;
+//# sourceMappingURL=model-caps.d.ts.map

package/dist/core/model-caps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-caps.d.ts","sourceRoot":"","sources":["../../src/core/model-caps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAgCjE,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,GAAG,SAAS,CAKpF;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,GAAG,aAAa,CAYzE;AASD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAUjE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,aAAa,GAAG,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,GAAG,aAAa,CASxG;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,oBAAoB,CAAC,EAAE,aAAa,GAAG,MAAM,CAsBzG;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CA+B1D;AAYD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAetD"}

package/dist/core/model-caps.js

@@ -28,10 +28,96 @@
  *     without burning tokens on heavy chain-of-thought.
  *   - Users who want more reasoning can `/thinking high` at runtime.
  */
+/**
+ * H4: narrow a persisted `cfg.agents.<id>.thinking` string back to a
+ * `ThinkingLevel` (or undefined when missing / malformed). Boot + seed
+ * paths use this to honour the operator's set-thinking selection across
+ * daemon restarts — without it, the level silently reset to the model's
+ * initial default on every reboot.
+ */
+const VALID_THINKING_LEVELS = new Set([
+    "off",
+    "minimal",
+    "low",
+    "medium",
+    "high",
+    "xhigh",
+]);
+export function readPersistedThinkingLevel(entry) {
+    if (!entry || typeof entry !== "object")
+        return undefined;
+    const raw = entry.thinking;
+    if (typeof raw !== "string")
+        return undefined;
+    return VALID_THINKING_LEVELS.has(raw) ? raw : undefined;
+}
 export function pickInitialThinkingLevel(model) {
-    if (!model.reasoning)
+    // Primary signal: the catalog's `reasoning` flag — reasoning → "low",
+    // else "off".
+    if (model.reasoning)
+        return "low";
+    // Robustness fallback: aggregators (OpenRouter, Vercel AI Gateway, etc.)
+    // frequently ship model metadata WITHOUT the reasoning flag set, even for
+    // models that REQUIRE a non-zero thinking budget and reject "off"
+    // (budget=0 → HTTP 400 → empty turn). gemini-2.5-pro via OpenRouter is the
+    // canonical case. Detect those known reasoning-only families by id so
+    // they still default to "low" instead of the rejected "off".
+    if (isLikelyReasoningModelId(modelIdOf(model)))
+        return "low";
+    return "off";
+}
+/** Best-effort extraction of a comparable model id across Pi model shapes. */
+function modelIdOf(model) {
+    const m = model;
+    const raw = (typeof m.id === "string" && m.id) || (typeof m.modelId === "string" && m.modelId) || "";
+    return raw.trim().toLowerCase();
+}
+/**
+ * Conservative id-pattern detector for reasoning-only models that reject a
+ * zero thinking budget. Kept tight on purpose — only families we KNOW
+ * require thinking-on, so we never send "low" to a plain non-reasoning model
+ * (which some providers would bill for or reject). Aggregator-prefix
+ * tolerant (`openrouter/google/gemini-2.5-pro`).
+ */
+export function isLikelyReasoningModelId(modelId) {
+    const id = (modelId ?? "").trim().toLowerCase();
+    if (!id)
+        return false;
+    // Gemini 2.5 / 3.x Pro + Flash-thinking — reject budget=0.
+    if (/(?:^|\/)gemini-(?:2\.5|3)(?:[-.]|$)/.test(id))
+        return true;
+    // OpenAI o-series reasoning models.
+    if (/(?:^|\/)o[13](?:[-_]|$)/.test(id))
+        return true;
+    // DeepSeek R1 reasoning family.
+    if (/(?:^|\/)deepseek-r1(?:[-_:]|$)/.test(id))
+        return true;
+    return false;
+}
+/**
+ * Remap a thinking level across a MODEL SWITCH (or clamp a set-thinking request)
+ * so the operator's intent survives instead of resetting to the new model's
+ * initial default. Unlike `pickInitialThinkingLevel` (which ignores the current
+ * level), this PRESERVES the active level when the new model can honor it, and
+ * only adjusts when it can't — the difference between "switched model, kept
+ * thinking on high" and "switched model, silently dropped to off":
+ *   - new model can't reason             → "off"
+ *   - new model reasons, level is valid  → keep it (`high` stays `high`)
+ *   - level is "off" but the new model is reasoning-ONLY (rejects budget=0,
+ *     e.g. gemini-2.5/o-series/r1)        → "low" (so it isn't rejected)
+ *   - current level missing/invalid       → fall back to pickInitialThinkingLevel
+ */
+export function remapThinkingLevel(current, target) {
+    if (current === undefined || !VALID_THINKING_LEVELS.has(current)) {
+        return pickInitialThinkingLevel(target);
+    }
+    const reasoningOnly = isLikelyReasoningModelId(modelIdOf(target));
+    const canReason = !!target.reasoning || reasoningOnly;
+    if (!canReason)
         return "off";
-    return "low";
+    if (current === "off" && reasoningOnly)
+        return "low";
+    return current;
 }
 /**
  * Short human description of a model's notable capabilities,

package/dist/core/model-caps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-caps.js","sourceRoot":"","sources":["../../src/core/model-caps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH;;;;;;;;;;;;;;GAcG;AACH;;;;;;GAMG;AACH,MAAM,qBAAqB,GAA+B,IAAI,GAAG,CAAgB;IAChF,KAAK;IACL,SAAS;IACT,KAAK;IACL,QAAQ;IACR,MAAM;IACN,OAAO;CACP,CAAC,CAAC;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACxD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,GAAG,GAAI,KAAgC,CAAC,QAAQ,CAAC;IACvD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9C,OAAO,qBAAqB,CAAC,GAAG,CAAC,GAAoB,CAAC,CAAC,CAAC,CAAE,GAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAiB;IACzD,sEAAsE;IACtE,cAAc;IACd,IAAI,KAAK,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAClC,yEAAyE;IACzE,0EAA0E;IAC1E,kEAAkE;IAClE,2EAA2E;IAC3E,sEAAsE;IACtE,6DAA6D;IAC7D,IAAI,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,OAAO,KAAK,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,SAAS,SAAS,CAAC,KAAiB;IACnC,MAAM,CAAC,GAAG,KAAuD,CAAC;IAClE,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACrG,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACvD,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,2DAA2D;IAC3D,IAAI,qCAAqC,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAChE,oCAAoC;IACpC,IAAI,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,gCAAgC;IAChC,IAAI,gCAAgC,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAkC,EAAE,MAAkB;IACxF,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAClE,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,aAAa,GAAG,wBAAwB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,aAAa,CAAC;IACtD,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,OAAO,KAAK,KAAK,IAAI,aAAa;QAAE,OAAO,KAAK,CAAC;IACrD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAiB,EAAE,oBAAoC;IAChG,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACrB,8EAA8E;QAC9E,4EAA4E;QAC5E,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,oBAAoB,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QACxE,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IACjD,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAEvD,wEAAwE;IACxE,8BAA8B;IAC9B,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,CAAC,QAAQ;IAEnD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;QACrC,WAAW;QACX,QAAQ;QACR,QAAQ;QACR,eAAe;QACf,YAAY;QACZ,MAAM;QACN,UAAU;QACV,KAAK;QACL,UAAU;QACV,SAAS;QACT,gBAAgB;QAChB,mBAAmB;KACnB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAEpD,wEAAwE;IACxE,yDAAyD;IACzD,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC;IAE7B,0EAA0E;IAC1E,IAAI,KAAK,EAAE,SAAS;QAAE,OAAO,OAAO,CAAC;IAErC,OAAO,MAAM,CAAC,CAAC,uBAAuB;AACvC,CAAC;AAED,kCAAkC;AAClC,SAAS,YAAY,CAAC,CAAS;IAC9B,IAAI,CAAC,IAAI,SAAS,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;QACxB,OAAO,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,IAAI,IAAI;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;IACjD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC7C,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC;IAErB,uEAAuE;IACvE,sEAAsE;IACtE,wDAAwD;IACxD,IAAI,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,OAAO;YAAE,MAAM;QACjD,OAAO,GAAG,MAAM,CAAC;IAClB,CAAC;IAED,gDAAgD;IAChD,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACpC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAE9C,gFAAgF;IAChF,IAAI,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAgC,CAAC;QACnD,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnE,OAAO,KAAK,CAAC,OAAO,CAAC;QACtB,CAAC;IACF,CAAC;IAED,2DAA2D;IAC3D,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3D,OAAO,GAAG,CAAC,KAAK,CAAC;IAClB,CAAC;IAED,4DAA4D;IAC5D,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,OAAO,GAAG,CAAC,OAAO,CAAC;IACpB,CAAC;IAED,2EAA2E;IAC3E,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7D,OAAO,GAAG,CAAC,MAAM,CAAC;IACnB,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/core/port-inspect.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Cross-platform "who's holding this port?" helper.
+ *
+ * Brigade-shaped to the single use case we have today: when
+ * `brigade gateway run` fails because port 7777 is already bound, OR
+ * when `brigade gateway status` wants to surface the listener,
+ * print one line that names the PID and (if we can extract it) the
+ * command line of the holder.
+ *
+ * Implementation strategy:
+ *
+ *   - Windows: parse `netstat -ano -p tcp` + enrich with `tasklist /FI`
+ *   - macOS:   `lsof -nP -iTCP:<port> -sTCP:LISTEN -FpFcn`
+ *   - Linux:   `ss -H -ltnp` (modern) → fallback to `lsof`
+ *
+ * All shell-outs are bounded by a 1500ms timeout so a hung tool can't
+ * hang `brigade gateway status`. Failures degrade silently — the caller
+ * gets `[]` and prints "(no listener info available on this platform)".
+ */
+export interface PortListener {
+    pid: number;
+    /** Process binary name, e.g. "node.exe". */
+    command?: string;
+    /** Full command line if the platform tools surface it; undefined otherwise. */
+    commandLine?: string;
+    /** Bound address, e.g. "127.0.0.1:7777". */
+    address?: string;
+}
+/**
+ * Return the listeners on `port` for the current platform. Resolves with
+ * `[]` if no listener is found OR the platform tool isn't available OR the
+ * shell-out timed out. Never throws — diagnostic code path only.
+ */
+export declare function inspectPortListeners(port: number): PortListener[];
+/** Pretty-print a single listener. */
+export declare function formatPortListener(l: PortListener): string;
+//# sourceMappingURL=port-inspect.d.ts.map

package/dist/core/port-inspect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"port-inspect.d.ts","sourceRoot":"","sources":["../../src/core/port-inspect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,4CAA4C;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4CAA4C;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAID;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,EAAE,CAQjE;AAED,sCAAsC;AACtC,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,CAI1D"}

package/dist/core/port-inspect.js

@@ -0,0 +1,165 @@
+/**
+ * Cross-platform "who's holding this port?" helper.
+ *
+ * Brigade-shaped to the single use case we have today: when
+ * `brigade gateway run` fails because port 7777 is already bound, OR
+ * when `brigade gateway status` wants to surface the listener,
+ * print one line that names the PID and (if we can extract it) the
+ * command line of the holder.
+ *
+ * Implementation strategy:
+ *
+ *   - Windows: parse `netstat -ano -p tcp` + enrich with `tasklist /FI`
+ *   - macOS:   `lsof -nP -iTCP:<port> -sTCP:LISTEN -FpFcn`
+ *   - Linux:   `ss -H -ltnp` (modern) → fallback to `lsof`
+ *
+ * All shell-outs are bounded by a 1500ms timeout so a hung tool can't
+ * hang `brigade gateway status`. Failures degrade silently — the caller
+ * gets `[]` and prints "(no listener info available on this platform)".
+ */
+import { spawnSync } from "node:child_process";
+import process from "node:process";
+const SHELL_TIMEOUT_MS = 1500;
+/**
+ * Return the listeners on `port` for the current platform. Resolves with
+ * `[]` if no listener is found OR the platform tool isn't available OR the
+ * shell-out timed out. Never throws — diagnostic code path only.
+ */
+export function inspectPortListeners(port) {
+    try {
+        if (process.platform === "win32")
+            return inspectWindows(port);
+        if (process.platform === "darwin")
+            return inspectDarwin(port);
+        return inspectLinux(port);
+    }
+    catch {
+        return [];
+    }
+}
+/** Pretty-print a single listener. */
+export function formatPortListener(l) {
+    const cmd = l.commandLine || l.command || "unknown";
+    const addr = l.address ? ` (${l.address})` : "";
+    return `pid ${l.pid}: ${cmd}${addr}`;
+}
+/* ────────────────────────── platform impls ─────────────────────── */
+function inspectWindows(port) {
+    // `netstat -ano -p tcp` outputs columns:
+    //   Proto  Local Address    Foreign Address  State       PID
+    // We filter for LISTENING + the target port.
+    const ns = runShell("netstat", ["-ano", "-p", "tcp"]);
+    if (!ns)
+        return [];
+    const listeners = [];
+    const portStr = `:${port}`;
+    for (const raw of ns.split(/\r?\n/)) {
+        const line = raw.trim();
+        if (!line || !/listening/i.test(line) || !line.includes(portStr))
+            continue;
+        const cols = line.split(/\s+/);
+        // Format: ["TCP", "<local>", "<foreign>", "LISTENING", "<pid>"]
+        if (cols.length < 5)
+            continue;
+        const local = cols[1];
+        const pidStr = cols[cols.length - 1];
+        const pid = Number(pidStr);
+        if (!Number.isInteger(pid) || pid <= 0)
+            continue;
+        listeners.push({ pid, address: local, command: lookupWindowsImage(pid) });
+    }
+    return listeners;
+}
+function lookupWindowsImage(pid) {
+    // `tasklist /FI "PID eq <pid>" /FO CSV /NH` returns:
+    //   "Image","PID","Session","Sess#","MemUsage"
+    const out = runShell("tasklist", ["/FI", `PID eq ${pid}`, "/FO", "CSV", "/NH"]);
+    if (!out)
+        return undefined;
+    const first = out.split(/\r?\n/).find((l) => l.trim().length > 0);
+    if (!first)
+        return undefined;
+    // Strip wrapping quotes from the first CSV column.
+    const m = first.match(/^"([^"]+)"/);
+    return m?.[1];
+}
+function inspectDarwin(port) {
+    // `lsof -nP -iTCP:<port> -sTCP:LISTEN -FpcfP` produces records:
+    //   p<pid>\nc<command>\nf<fd>\nP<protocol>\n...
+    const out = runShell("lsof", ["-nP", `-iTCP:${port}`, "-sTCP:LISTEN", "-FpcfP"]);
+    return parseLsofOutput(out);
+}
+function inspectLinux(port) {
+    // Prefer `ss` (modern, ships with iproute2). Fall back to `lsof`.
+    const ss = runShell("ss", ["-H", "-ltnp", `sport = :${port}`]);
+    if (ss) {
+        const listeners = [];
+        for (const raw of ss.split(/\r?\n/)) {
+            const line = raw.trim();
+            if (!line)
+                continue;
+            // Format: LISTEN 0 4096 127.0.0.1:7777 0.0.0.0:* users:(("node",pid=12345,fd=20))
+            const addrM = line.match(/(\S+:\d+)\s+\S+\s+users:\(/);
+            const pidM = line.match(/pid=(\d+)/);
+            const cmdM = line.match(/users:\(\("([^"]+)"/);
+            if (pidM) {
+                listeners.push({
+                    pid: Number(pidM[1]),
+                    address: addrM?.[1],
+                    command: cmdM?.[1],
+                });
+            }
+        }
+        return listeners;
+    }
+    // Fallback: lsof same flags as macOS.
+    const lsof = runShell("lsof", ["-nP", `-iTCP:${port}`, "-sTCP:LISTEN", "-FpcfP"]);
+    return parseLsofOutput(lsof);
+}
+function parseLsofOutput(out) {
+    if (!out)
+        return [];
+    const listeners = [];
+    let cur = {};
+    const flush = () => {
+        if (cur.pid)
+            listeners.push(cur);
+        cur = {};
+    };
+    for (const raw of out.split(/\r?\n/)) {
+        if (raw.length < 1)
+            continue;
+        const tag = raw[0];
+        const rest = raw.slice(1);
+        if (tag === "p") {
+            flush();
+            cur = { pid: Number(rest) };
+        }
+        else if (tag === "c") {
+            cur.command = rest;
+        }
+        else if (tag === "n") {
+            cur.address = rest;
+        }
+        // skip f, P, etc.
+    }
+    flush();
+    return listeners.filter((l) => Number.isInteger(l.pid) && l.pid > 0);
+}
+function runShell(cmd, args) {
+    try {
+        const result = spawnSync(cmd, args, {
+            encoding: "utf8",
+            timeout: SHELL_TIMEOUT_MS,
+            stdio: ["ignore", "pipe", "pipe"],
+            windowsHide: true,
+        });
+        if (result.status !== 0)
+            return undefined;
+        return typeof result.stdout === "string" ? result.stdout : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=port-inspect.js.map

package/dist/core/port-inspect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"port-inspect.js","sourceRoot":"","sources":["../../src/core/port-inspect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,OAAO,MAAM,cAAc,CAAC;AAYnC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;QAC9D,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,sCAAsC;AACtC,MAAM,UAAU,kBAAkB,CAAC,CAAe;IAChD,MAAM,GAAG,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,OAAO,IAAI,SAAS,CAAC;IACpD,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,OAAO,OAAO,CAAC,CAAC,GAAG,KAAK,GAAG,GAAG,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,uEAAuE;AAEvE,SAAS,cAAc,CAAC,IAAY;IAClC,yCAAyC;IACzC,6DAA6D;IAC7D,6CAA6C;IAC7C,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACtD,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IACnB,MAAM,SAAS,GAAmB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,gEAAgE;QAChE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;YAAE,SAAS;QACjD,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACrC,qDAAqD;IACrD,+CAA+C;IAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,UAAU,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAChF,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,mDAAmD;IACnD,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACpC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,gEAAgE;IAChE,gDAAgD;IAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjF,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,kEAAkE;IAClE,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/D,IAAI,EAAE,EAAE,CAAC;QACP,MAAM,SAAS,GAAmB,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,kFAAkF;YAClF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAC/C,IAAI,IAAI,EAAE,CAAC;gBACT,SAAS,CAAC,IAAI,CAAC;oBACb,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACpB,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;oBACnB,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,sCAAsC;IACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClF,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,eAAe,CAAC,GAAuB;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,SAAS,GAAmB,EAAE,CAAC;IACrC,IAAI,GAAG,GAA0B,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,IAAI,GAAG,CAAC,GAAG;YAAE,SAAS,CAAC,IAAI,CAAC,GAAmB,CAAC,CAAC;QACjD,GAAG,GAAG,EAAE,CAAC;IACX,CAAC,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACnB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YAChB,KAAK,EAAE,CAAC;YACR,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,CAAC;aAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YACvB,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;QACrB,CAAC;aAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YACvB,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,kBAAkB;IACpB,CAAC;IACD,KAAK,EAAE,CAAC;IACR,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW,EAAE,IAAc;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE;YAClC,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1C,OAAO,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/core/server-lanes.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Gateway-lane concurrency wiring.
+ *
+ * Called at gateway boot and on `system.reload` to push the resolved
+ * `Main` / `Subagent` / `Cron` budgets into the runtime. Pre-existing
+ * in-flight tasks keep running; future enqueues pump up to the new cap.
+ *
+ * Knob sources (see `config/agent-limits.ts`):
+ *   - `cfg.agents.defaults.maxConcurrent`         → `CommandLane.Main`
+ *   - `cfg.agents.defaults.maxSubagentConcurrent` → `subagent-budget` semaphore
+ *   - `cfg.cron.maxConcurrentRuns`                → `CommandLane.Cron`
+ *
+ * Sub-agent budget is enforced by a process-wide semaphore around the
+ * spawn enqueue (see `agents/subagent-budget.ts`), NOT by a lane cap on
+ * `CommandLane.Subagent` — Brigade uses per-parent lanes for isolation so
+ * one parent's children never block another parent's. The global cap
+ * therefore lives outside the lane engine.
+ *
+ * Per-session lanes (`session:<key>`) + per-parent sub-agent lanes
+ * (`subagent:<key>`, `nested:<key>`) are NOT bumped here — each stays at
+ * the engine default (1, strict FIFO per peer / per parent).
+ */
+import type { BrigadeConfig } from "../config/io.js";
+export declare function applyGatewayLaneConcurrency(cfg?: BrigadeConfig | null): void;
+//# sourceMappingURL=server-lanes.d.ts.map

package/dist/core/server-lanes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-lanes.d.ts","sourceRoot":"","sources":["../../src/core/server-lanes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAOH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAIrD,wBAAgB,2BAA2B,CAAC,GAAG,CAAC,EAAE,aAAa,GAAG,IAAI,GAAG,IAAI,CAI5E"}

package/dist/core/server-lanes.js

@@ -0,0 +1,31 @@
+/**
+ * Gateway-lane concurrency wiring.
+ *
+ * Called at gateway boot and on `system.reload` to push the resolved
+ * `Main` / `Subagent` / `Cron` budgets into the runtime. Pre-existing
+ * in-flight tasks keep running; future enqueues pump up to the new cap.
+ *
+ * Knob sources (see `config/agent-limits.ts`):
+ *   - `cfg.agents.defaults.maxConcurrent`         → `CommandLane.Main`
+ *   - `cfg.agents.defaults.maxSubagentConcurrent` → `subagent-budget` semaphore
+ *   - `cfg.cron.maxConcurrentRuns`                → `CommandLane.Cron`
+ *
+ * Sub-agent budget is enforced by a process-wide semaphore around the
+ * spawn enqueue (see `agents/subagent-budget.ts`), NOT by a lane cap on
+ * `CommandLane.Subagent` — Brigade uses per-parent lanes for isolation so
+ * one parent's children never block another parent's. The global cap
+ * therefore lives outside the lane engine.
+ *
+ * Per-session lanes (`session:<key>`) + per-parent sub-agent lanes
+ * (`subagent:<key>`, `nested:<key>`) are NOT bumped here — each stays at
+ * the engine default (1, strict FIFO per peer / per parent).
+ */
+import { resolveAgentMaxConcurrent, resolveCronMaxConcurrent, resolveSubagentMaxConcurrent, } from "../config/agent-limits.js";
+import { setSubagentBudget } from "../agents/subagent-budget.js";
+import { CommandLane, setCommandLaneConcurrency } from "../process/lanes.js";
+export function applyGatewayLaneConcurrency(cfg) {
+    setCommandLaneConcurrency(CommandLane.Main, resolveAgentMaxConcurrent(cfg));
+    setSubagentBudget(resolveSubagentMaxConcurrent(cfg));
+    setCommandLaneConcurrency(CommandLane.Cron, resolveCronMaxConcurrent(cfg));
+}
+//# sourceMappingURL=server-lanes.js.map

package/dist/core/server-lanes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-lanes.js","sourceRoot":"","sources":["../../src/core/server-lanes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EACN,yBAAyB,EACzB,wBAAwB,EACxB,4BAA4B,GAC5B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAE7E,MAAM,UAAU,2BAA2B,CAAC,GAA0B;IACrE,yBAAyB,CAAC,WAAW,CAAC,IAAI,EAAE,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5E,iBAAiB,CAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,yBAAyB,CAAC,WAAW,CAAC,IAAI,EAAE,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5E,CAAC"}