@wrongstack/cli 0.297.0 → 0.298.1

package/dist/{execution-A4PGK4XV.js → execution-HJ643JGZ.js}

@@ -7,7 +7,7 @@ import {
   resolvePersistPath,
   setAutoSuggestions,
   setSuggestions
-} from "./chunk-QZKWRNIP.js";
+} from "./chunk-V3XH6XBJ.js";
 import {
   startCliHqConnection
 } from "./chunk-JW75HY4F.js";
@@ -40,17 +40,10 @@ import {
 import "./chunk-7OCVIDC7.js";
 
 // src/execution.ts
-import { randomUUID as randomUUID4 } from "node:crypto";
-import * as path10 from "node:path";
-import { setQueuedMessagesSnapshot as setQueuedMessagesSnapshot2 } from "@wrongstack/core/agent";
-import { isMailboxLeader } from "@wrongstack/core/coordination";
-import {
-  CHIMERA_REVIEW_PROMPT
-} from "@wrongstack/core/plugin";
+import * as path11 from "node:path";
+import { effectiveFallbackChain as effectiveFallbackChain2, setQueuedMessagesSnapshot as setQueuedMessagesSnapshot2 } from "@wrongstack/core/agent";
 import { attachTodosCheckpoint as attachTodosCheckpoint2 } from "@wrongstack/core/storage";
-import {
-  normalizeTokenSavingTier as normalizeTokenSavingTier2
-} from "@wrongstack/core/types";
+import { normalizeTokenSavingTier as normalizeTokenSavingTier2 } from "@wrongstack/core/types";
 import { mergeCustomModelDefs } from "@wrongstack/core/utils";
 import { capabilitiesFor } from "@wrongstack/providers";
 import { createToolVisionAdapters } from "@wrongstack/runtime/vision";
@@ -194,7 +187,7 @@ async function runWebUIDispatch(ctx) {
   const isSimpleUi = flags["simpleui"] === true;
   agent.disableInteractiveConfirmation();
   renderer.setSilent(true);
-  const { runWebUI } = await import("./webui-server-XKFUOKMJ.js");
+  const { runWebUI } = await import("./webui-server-PCLSXX6L.js");
   const flagValue = (names) => {
     for (const name of names) {
       if (!Object.hasOwn(flags, name)) continue;
@@ -1096,6 +1089,12 @@ async function resumeSession(ctx, sessionId) {
   let identityClaimed = false;
   let writerSwapped = false;
   let openedWriter;
+  let oldWriter;
+  let oldMessages;
+  let previousDetachFn;
+  let oldTodos = [];
+  let oldPlanPath;
+  let oldTaskPath;
   try {
     if (state.activateSessionIdentity) {
       await state.activateSessionIdentity(canonicalSessionId);
@@ -1118,8 +1117,8 @@ async function resumeSession(ctx, sessionId) {
       agent.ctx.traceId,
       resumed.writer.id
     ).catch(() => null);
-    const oldWriter = agent.ctx.session;
-    const oldMessages = [...agent.ctx.messages];
+    oldWriter = agent.ctx.session;
+    oldMessages = [...agent.ctx.messages];
     agent.ctx.session = resumed.writer;
     try {
       agent.ctx.state.replaceMessages(resumed.data.messages);
@@ -1139,7 +1138,11 @@ async function resumeSession(ctx, sessionId) {
         })
       );
     });
-    await Promise.resolve(state.detachActiveTodosCheckpoint?.()).catch(() => void 0);
+    previousDetachFn = state.detachActiveTodosCheckpoint;
+    oldTodos = agent.ctx.state.todos ? [...agent.ctx.state.todos] : [];
+    oldPlanPath = agent.ctx.state.meta?.["plan.path"];
+    oldTaskPath = agent.ctx.state.meta?.["task.path"];
+    await Promise.resolve(previousDetachFn?.()).catch(() => void 0);
     agent.ctx.state.setMeta(
       "plan.path",
       sessionScopedPath2(sessionsDir, resumed.writer.id, ".plan.json")
@@ -1181,9 +1184,10 @@ async function resumeSession(ctx, sessionId) {
     } else if (targetModel !== agent.ctx.model) {
       agent.ctx.model = targetModel;
     }
+    let oldWriterFinalize;
     if (oldWriter && oldWriter !== resumed.writer) {
       const endedUsage = tokenCounter.total();
-      void (async () => {
+      oldWriterFinalize = void (async () => {
         let appendOk = false;
         try {
           await oldWriter.append({
@@ -1220,13 +1224,19 @@ async function resumeSession(ctx, sessionId) {
     }
     tokenCounter.reset();
     tokenCounter.account(resumed.data.usage, targetModel, targetProviderId);
-    return {
+    const reqTokens = tokenCounter.currentRequestTokens?.();
+    const tokens = (typeof reqTokens === "number" ? reqTokens : 0) + (typeof reqTokens?.input === "number" ? reqTokens.input : 0) + (typeof reqTokens?.cacheRead === "number" ? reqTokens.cacheRead : 0) + (typeof reqTokens?.cacheWrite === "number" ? reqTokens.cacheWrite : 0);
+    const maxContext = agent.ctx.provider?.capabilities?.maxContext ?? 0;
+    const result = {
       entries,
       nextId: entries.length + 1,
-      sessionId: resumed.writer.id
+      sessionId: resumed.writer.id,
+      contextSnapshot: { tokens, maxContext }
     };
+    void oldWriterFinalize;
+    return result;
   } catch (err) {
-    if (identityClaimed && !writerSwapped && previousSessionId) {
+    if (identityClaimed && previousSessionId) {
       await state.activateSessionIdentity?.(previousSessionId).catch((rollbackErr) => {
         console.error(
           JSON.stringify({
@@ -1241,6 +1251,24 @@ async function resumeSession(ctx, sessionId) {
     }
     if (!writerSwapped) {
       await openedWriter?.close().catch(() => void 0);
+    } else {
+      try {
+        if (oldWriter !== void 0) agent.ctx.session = oldWriter;
+        if (oldMessages !== void 0) agent.ctx.state.replaceMessages(oldMessages);
+        if (previousDetachFn !== void 0) state.detachActiveTodosCheckpoint = previousDetachFn;
+        agent.ctx.state.replaceTodos([...oldTodos]);
+        if (oldPlanPath !== void 0) agent.ctx.state.setMeta("plan.path", oldPlanPath);
+        if (oldTaskPath !== void 0) agent.ctx.state.setMeta("task.path", oldTaskPath);
+      } catch (rollbackErr) {
+        console.error(
+          JSON.stringify({
+            level: "error",
+            event: "execution.resume_post_swap_rollback_failed",
+            message: rollbackErr instanceof Error ? rollbackErr.message : String(rollbackErr),
+            timestamp: (/* @__PURE__ */ new Date()).toISOString()
+          })
+        );
+      }
     }
     console.error(
       JSON.stringify({
@@ -1261,6 +1289,12 @@ import { decryptConfigSecrets, encryptConfigSecrets, noOpVault } from "@wrongsta
 import { normalizeTokenSavingTier, resolveFleetChatVerbosity } from "@wrongstack/core/types";
 import { atomicWrite } from "@wrongstack/core/utils";
 import { getProcessRegistry } from "@wrongstack/tools";
+function coerceAgentSwarmMode(v) {
+  if (v === true || v === void 0) return "bottom";
+  if (v === false) return "off";
+  if (typeof v === "string" && (v === "bottom" || v === "sidebar" || v === "off")) return v;
+  return "bottom";
+}
 var ANIMATION_STYLES = ["rainbow", "wave", "pulse", "dots", "breathe", "cycle"];
 function normalizeAnimationStyle(raw) {
   return typeof raw === "string" && ANIMATION_STYLES.includes(raw) ? raw : "rainbow";
@@ -1313,7 +1347,7 @@ function createSettingsAdapter(ctx) {
       autoProceedMaxIterations: cfg.autonomy?.autoProceedMaxIterations ?? 50,
       debugStream: cfg.debugStream ?? false,
       shellBangWarningDontShowAgain: autonomy?.shellBangWarningDontShowAgain === true,
-      statuslineMode: autonomy?.statuslineMode === "no-color" ? "no-color" : autonomy?.statuslineMode === "minimum" ? "minimum" : "detailed",
+      statuslineMode: autonomy?.statuslineMode === "no-color" ? "no-color" : autonomy?.statuslineMode === "detailed" ? "detailed" : "minimum",
       thinkingWord: normalizeTuiThinkingWord(autonomy?.thinkingWord),
       animationStyle: normalizeAnimationStyle(autonomy?.animationStyle),
       configScope: cfg.configScope ?? "global",
@@ -1330,7 +1364,7 @@ function createSettingsAdapter(ctx) {
       breakerEnabled: cfg.circuitBreaker?.enabled === true,
       breakerAutoKillResetMs: cfg.circuitBreaker?.autoKillResetMs ?? 6e4,
       showModelReasoning: autonomy?.showModelReasoning ?? true,
-      showAgentSwarmPanel: autonomy?.showAgentSwarmPanel ?? true,
+      showAgentSwarmPanel: coerceAgentSwarmMode(autonomy?.showAgentSwarmPanel),
       showSageMemoryInject: autonomy?.showSageMemoryInject ?? false,
       readSymbols: autonomy?.readAdvancedMode ?? false,
       sageMemoryInjectThreshold: cfg.Sage?.inject ? cfg.Sage.inject?.relationFloor : void 0
@@ -1389,8 +1423,7 @@ function createSettingsAdapter(ctx) {
           autonomy.showAgentSwarmPanel = s.showAgentSwarmPanel;
         if (s.showSageMemoryInject !== void 0)
           autonomy.showSageMemoryInject = s.showSageMemoryInject;
-        if (s.readSymbols !== void 0)
-          autonomy.readAdvancedMode = s.readSymbols;
+        if (s.readSymbols !== void 0) autonomy.readAdvancedMode = s.readSymbols;
         if (s.autonomyNextPrompt !== void 0) autonomy.autonomyNextPrompt = s.autonomyNextPrompt;
         if (s.autoProceedMaxIterations !== void 0)
           autonomy.autoProceedMaxIterations = s.autoProceedMaxIterations;
@@ -1723,151 +1756,8 @@ function createBrainPanelHost(deps) {
   };
 }
 
-// src/chimera-review-task.ts
-import { parseReviewSeverity } from "@wrongstack/core/plugin";
-function truncateAtCodePointBoundary(text, maxCodeUnits) {
-  if (text.length <= maxCodeUnits) return text;
-  let result = "";
-  for (const ch of text) {
-    if (result.length + ch.length > maxCodeUnits) break;
-    result += ch;
-  }
-  return result;
-}
-function isChimeraAllClearReview(text) {
-  const severities = parseReviewSeverity(text);
-  if (severities.critical > 0 || severities.high > 0 || severities.medium > 0) {
-    return false;
-  }
-  const normalized = text.trim().toLowerCase();
-  return normalized.startsWith("## \u{1F982} chimera review \u2014 all clear") || normalized.includes("chimera review: all clear");
-}
-function buildChimeraReviewTaskDescription(p) {
-  const lines = [];
-  lines.push(`Review the following ${p.files.length} file(s) changed in this session at ${p.cwd}.`);
-  lines.push("");
-  for (const f of p.files) {
-    lines.push(`## [${f.status.toUpperCase()}] ${f.path}`);
-    if (f.diff) {
-      lines.push("");
-      lines.push("```diff");
-      lines.push(f.diff);
-      lines.push("```");
-    } else if (f.status === "added") {
-      lines.push("");
-      lines.push("(New file \u2014 full content provided)");
-    }
-    lines.push("");
-  }
-  if (p.allChangedFiles && p.allChangedFiles.length > p.files.length) {
-    const reviewedPaths = new Set(p.files.map((f) => f.path));
-    const siblings = p.allChangedFiles.filter((s) => !reviewedPaths.has(s.path)).map((s) => `  ${s.path} (${s.status})`);
-    if (siblings.length > 0) {
-      lines.push("---");
-      lines.push("");
-      lines.push(
-        `**Also changed this session (${siblings.length} files \u2014 for context, NOT in your review scope):**`
-      );
-      lines.push(siblings.slice(0, 30).join("\n"));
-      lines.push("");
-    }
-  }
-  if (p.recentCommits && p.recentCommits.length > 0) {
-    lines.push("---");
-    lines.push("");
-    lines.push("**Recent commits (newest first):**");
-    for (const c of p.recentCommits) lines.push(`  ${c}`);
-    lines.push("");
-  }
-  if (p.activeTodos && p.activeTodos.length > 0) {
-    lines.push("---");
-    lines.push("");
-    lines.push(`**Active task items (${p.activeTodos.length}):**`);
-    for (const t of p.activeTodos) {
-      lines.push(`  [${t.status}] ${t.content}`);
-    }
-    lines.push("");
-  }
-  if (p.kanbanCard) {
-    lines.push("---");
-    lines.push("");
-    lines.push(`**Kanban card: ${p.kanbanCard.title}**`);
-    if (p.kanbanCard.description) {
-      lines.push(`  ${p.kanbanCard.description.slice(0, 500)}`);
-    }
-    if (p.kanbanCard.successCriteria && p.kanbanCard.successCriteria.length > 0) {
-      lines.push("  **Success criteria:**");
-      for (const sc of p.kanbanCard.successCriteria) lines.push(`    - ${sc}`);
-    }
-    lines.push("");
-  }
-  if (p.fileProvenance && p.fileProvenance.length > 0) {
-    lines.push("---");
-    lines.push("");
-    lines.push("**File provenance (Chronicle):**");
-    for (const fp of p.fileProvenance) {
-      const parts = [];
-      if (fp.agentId) parts.push(`agent: ${fp.agentId}`);
-      if (fp.taskId) parts.push(`task: ${fp.taskId}`);
-      if (fp.eventType) parts.push(fp.eventType);
-      if (fp.observedAt) parts.push(fp.observedAt);
-      lines.push(`  ${fp.path} \u2014 ${parts.join(", ")}`);
-    }
-    lines.push("");
-  }
-  lines.push("---");
-  lines.push("");
-  lines.push("Read each file using the read tool. For modified files, focus on the");
-  lines.push("diff above \u2014 do not re-review unchanged pre-existing code.");
-  lines.push("Check for bugs, type issues, security problems, and produce a");
-  lines.push("structured review report.");
-  return lines.join("\n");
-}
-function buildChimeraCascadeTaskDescription(agentKind, p) {
-  const fileList = p.bundle.files.map((f) => `- ${f.path}`).join("\n");
-  const reportSlice = truncateAtCodePointBoundary(p.reviewText, 12e3);
-  const severityLine = `Critical: ${p.severities.critical}, High: ${p.severities.high}, Medium: ${p.severities.medium}`;
-  if (agentKind === "security-scanner") {
-    return [
-      `You are a security cascade agent. A Chimera code review flagged security-relevant findings.`,
-      ``,
-      `Repository: ${p.bundle.cwd}`,
-      `Severity summary: ${severityLine}`,
-      ``,
-      `--- Review report ---`,
-      reportSlice,
-      ``,
-      `--- Changed files ---`,
-      fileList,
-      ``,
-      `Investigate the security findings above. Read the flagged files, confirm or refute`,
-      `each finding, and **apply fixes** for confirmed vulnerabilities using the edit tool.`,
-      `Use severity (Critical/High/Medium), file:line citations, and remediation steps.`,
-      `After fixing, run the project's typecheck and linter to verify. If a finding is a`,
-      `false positive, say so and do not modify the file.`
-    ].join("\n");
-  }
-  return [
-    `You are a bug-hunter cascade agent. A Chimera code review flagged correctness defects.`,
-    ``,
-    `Repository: ${p.bundle.cwd}`,
-    `Severity summary: ${severityLine}`,
-    ``,
-    `--- Review report ---`,
-    reportSlice,
-    ``,
-    `--- Changed files ---`,
-    fileList,
-    ``,
-    `Hunt for the bugs flagged above. Read the affected files, trace each finding to its`,
-    `root cause, and **apply minimal fixes** for confirmed bugs using the edit tool.`,
-    `Use severity (Critical/High/Medium), file:line citations. After fixing, run the`,
-    `project's typecheck and linter to verify. If a finding is a false positive, say so`,
-    `and do not modify the file.`
-  ].join("\n");
-}
-
 // src/chimera-reviewer-policy.ts
+import { parseModelRef } from "@wrongstack/core/agent";
 import {
   buildReviewerModelPool,
   selectRoundRobinReviewerAssignment
@@ -1905,6 +1795,75 @@ function assignReviewerModelsRoundRobin(provider, model, fallbackModels) {
     fallbackModels: assignment.fallbackModels
   };
 }
+var MAX_REVIEWER_ATTEMPTS = 4;
+var REVIEWER_ATTEMPT_TIMEOUT_MS = 9e5;
+var REVIEWER_LADDER_BUDGET_MS = 12e5;
+var REVIEWER_MIN_ATTEMPT_MS = 12e4;
+function buildReviewerAttemptLadder(input) {
+  const assignedChain = [...input.assigned.fallbackModels ?? []];
+  const profileChain = [...input.profileChain ?? []];
+  const rungs = [];
+  const seen = /* @__PURE__ */ new Set();
+  const key = (provider, model) => `${provider.trim()}/${model.trim()}`;
+  const push = (provider, model, fallbackModels, tier) => {
+    const p = provider.trim();
+    const m = model.trim();
+    if (!p || !m) return;
+    if (seen.has(key(p, m))) return;
+    seen.add(key(p, m));
+    rungs.push({ provider: p, model: m, fallbackModels, tier });
+  };
+  push(input.assigned.provider, input.assigned.model, [...assignedChain], "primary");
+  for (const [chain, tier] of [
+    [assignedChain, "fallback"],
+    [profileChain, "fallback"]
+  ]) {
+    for (let i = 0; i < chain.length; i++) {
+      const parsed = parseModelRef(chain[i]);
+      push(parsed.provider ?? "", parsed.model, chain.slice(i + 1), tier);
+    }
+  }
+  const sessionKey = key(input.session.provider, input.session.model);
+  push(input.session.provider, input.session.model, [], "session");
+  const cap = Math.max(1, Math.floor(input.maxAttempts ?? MAX_REVIEWER_ATTEMPTS));
+  if (rungs.length <= cap) return rungs;
+  const trimmed = rungs.slice(0, cap);
+  if (!trimmed.some((r) => key(r.provider, r.model) === sessionKey)) {
+    const sessionRung = rungs.find((r) => key(r.provider, r.model) === sessionKey);
+    if (sessionRung) trimmed[trimmed.length - 1] = sessionRung;
+  }
+  return trimmed;
+}
+var MAX_MUTATING_ATTEMPTS = 2;
+function buildMutatingAgentLadder(input) {
+  const cap = Math.max(1, Math.floor(input.maxAttempts ?? MAX_MUTATING_ATTEMPTS));
+  const inherit = {
+    provider: "",
+    model: "",
+    fallbackModels: [],
+    tier: "inherit"
+  };
+  if (cap === 1) return [inherit];
+  return [
+    inherit,
+    ...buildReviewerAttemptLadder({
+      assigned: { provider: "", model: "" },
+      profileChain: input.profileChain,
+      session: input.session,
+      maxAttempts: cap - 1
+    })
+  ];
+}
+function shouldAdvanceReviewerLadder(status, error) {
+  if (status === "success") return false;
+  if (status === "stopped") return false;
+  if (error?.kind === "aborted_by_parent") return false;
+  return true;
+}
+function reviewerAttemptTimeoutMs(remainingMs, attemptTimeoutMs = REVIEWER_ATTEMPT_TIMEOUT_MS, minAttemptMs = REVIEWER_MIN_ATTEMPT_MS) {
+  if (remainingMs < minAttemptMs) return 0;
+  return Math.min(attemptTimeoutMs, Math.floor(remainingMs));
+}
 var CHIMERA_REVIEW_READ_ONLY_TOOLS = Object.freeze([
   "read",
   "grep",
@@ -2040,7 +1999,7 @@ import { WIDE_SUBAGENT_CAPABILITIES } from "@wrongstack/core/security";
 // src/kanban-dispatch-route.ts
 import {
   fallbackProfileChain,
-  parseModelRef
+  parseModelRef as parseModelRef2
 } from "@wrongstack/core/agent";
 function resolveKanbanDispatchRoute(config, spawnOpts) {
   let provider = spawnOpts?.provider;
@@ -2048,7 +2007,7 @@ function resolveKanbanDispatchRoute(config, spawnOpts) {
   let fallbackModels = spawnOpts?.fallbackModels;
   if (spawnOpts?.fallbackProfile) {
     const chain = fallbackProfileChain(config, spawnOpts.fallbackProfile);
-    const primary = chain[0] ? parseModelRef(chain[0]) : void 0;
+    const primary = chain[0] ? parseModelRef2(chain[0]) : void 0;
     if (primary?.model) {
       provider = primary.provider ?? config.provider;
       model = primary.model;
@@ -2233,6 +2192,7 @@ var FleetStatusLine = class {
   rows = 0;
   repaintTimer = null;
   tickTimer = null;
+  deactivateTimer = null;
   resizeCleanup = null;
   lastPaint = 0;
   onResize = () => {
@@ -2308,7 +2268,9 @@ var FleetStatusLine = class {
         s.endedAt = this.now();
         this.schedulePaint();
         if (![...this.states.values()].some((a) => a.status === "running")) {
-          setTimeout(() => {
+          if (this.deactivateTimer) clearTimeout(this.deactivateTimer);
+          this.deactivateTimer = setTimeout(() => {
+            this.deactivateTimer = null;
             if (![...this.states.values()].some((a) => a.status === "running")) {
               this.deactivate();
             }
@@ -2352,6 +2314,10 @@ var FleetStatusLine = class {
       clearTimeout(this.repaintTimer);
       this.repaintTimer = null;
     }
+    if (this.deactivateTimer) {
+      clearTimeout(this.deactivateTimer);
+      this.deactivateTimer = null;
+    }
     this.resizeCleanup?.();
     this.resizeCleanup = null;
     if (this.isTty()) {
@@ -2389,216 +2355,341 @@ var FleetStatusLine = class {
   }
 };
 
-// src/execution-chimera-ask.ts
-import { createHash } from "node:crypto";
-async function waitForChimeraAskApproval(opts) {
-  const rawPoll = opts.meta["chimeraPollIntervalMs"] ?? 2e3;
-  const pollIntervalMs = Number.isFinite(rawPoll) ? Math.max(0, rawPoll) : 2e3;
-  const abortSignal = opts.meta["chimeraAbortSignal"];
-  const askStartTime = Date.now();
-  let leaderApproved = false;
-  let repliesFound = false;
-  let nonLeaderReplyCount = 0;
-  let pollDone = false;
-  const pollNext = () => {
-    if (pollDone) return Promise.resolve();
-    const elapsed = Date.now() - askStartTime;
-    const remaining = opts.askTimeoutMs - elapsed;
-    if (remaining <= 0 || abortSignal?.aborted) {
-      pollDone = true;
-      return Promise.resolve();
-    }
-    return new Promise((r) => setTimeout(r, Math.min(pollIntervalMs, remaining))).then(
-      () => pollForReply()
-    );
-  };
-  const pollForReply = async () => {
-    if (pollDone) return;
-    const replies = await opts.mailbox.query({ replyTo: opts.messageId, limit: 5 });
-    if (replies.length > 0) {
-      repliesFound = true;
-      const firstReply = replies[0];
-      if (!firstReply) return pollNext();
-      const replyFromBase = (firstReply.from ?? "").split("@")[0];
-      if (replyFromBase !== "leader" || firstReply.audience === "leaders") {
-        nonLeaderReplyCount++;
-        if (nonLeaderReplyCount >= 5) {
-          console.warn(
-            JSON.stringify({
-              level: "warn",
-              event: "execution.chimera_ask_non_leader_threshold",
-              message: `${nonLeaderReplyCount} non-leader replies seen on chimera ask \u2014 stopping poll`,
-              timestamp: (/* @__PURE__ */ new Date()).toISOString()
-            })
-          );
-          pollDone = true;
-          return;
-        }
-        console.warn(
-          JSON.stringify({
-            level: nonLeaderReplyCount <= 1 ? "warn" : "debug",
-            event: "execution.chimera_ask_non_leader_reply",
-            message: `Ignoring non-leader reply #${nonLeaderReplyCount} from ${firstReply.from}`,
-            timestamp: (/* @__PURE__ */ new Date()).toISOString()
-          })
-        );
-        return pollNext();
-      }
-      await opts.mailbox.ack({
-        messageId: firstReply.id,
-        readerId: "chimera-review",
-        read: true,
-        completed: true
-      }).catch((_ackErr) => {
-        console.warn(
-          JSON.stringify({
-            level: "warn",
-            event: "execution.chimera_ask_ack_failed",
-            message: _ackErr instanceof Error ? _ackErr.message : String(_ackErr),
-            replyMessageId: firstReply.id,
-            timestamp: (/* @__PURE__ */ new Date()).toISOString()
-          })
-        );
-      });
-      const body = firstReply.body.toLowerCase();
-      if (body.trim().length === 0) {
-        pollDone = true;
-        return;
-      }
-      leaderApproved = /^\s*(?:y(?:es)?|sure|ok(?:ay)?|go ahead|proceed|approve|fix it|please do|do it|yep|yeah)\b/.test(
-        body
-      ) || /^\s*👍/.test(body);
-      if (leaderApproved) {
-        pollDone = true;
-        return;
-      }
-      if (/^\s*(no|don'?t|stop|skip|ignore|cancel|reject|decline)\b/.test(body)) {
-        pollDone = true;
-        return;
-      }
-      leaderApproved = /\b(?:y(?:es)?|sure|approve|proceed|go ahead)\b/i.test(body);
-      if (leaderApproved) {
-        pollDone = true;
-        return;
-      }
-      const hash = createHash("sha256").update(body).digest("hex").slice(0, 12);
-      console.warn(
-        JSON.stringify({
-          level: "debug",
-          event: "execution.chimera_ask_reply_unmatched",
-          replyBodyHash: hash,
-          replyBodyLength: body.length,
-          timestamp: (/* @__PURE__ */ new Date()).toISOString()
-        })
-      );
-    }
-    return pollNext();
-  };
-  await pollForReply();
-  if (!leaderApproved) {
-    await recordChimeraAskFallback(opts.session, opts.askTimeoutMs, repliesFound);
-  }
-  return leaderApproved;
-}
-async function recordChimeraAskFallback(session, askTimeoutMs, repliesFound) {
-  console.warn(
-    JSON.stringify({
-      level: "warn",
-      event: repliesFound ? "execution.chimera_ask_rejected" : "execution.chimera_ask_timeout",
-      message: repliesFound ? "Leader replied to ask but did not approve" : "Ask timeout expired, falling back to off mode (no auto-fix)",
-      timestamp: (/* @__PURE__ */ new Date()).toISOString()
-    })
-  );
-  await session.append({
-    type: "llm_response",
-    ts: (/* @__PURE__ */ new Date()).toISOString(),
-    content: [
-      {
-        type: "text",
-        text: `\u{1F982} Chimera auto-fix request sent to leader \u2014 no approval received within ${askTimeoutMs / 1e3}s timeout. Falling back to manual review mode. Set autoFix via \`/chimera autoFix auto\` to auto-approve future reviews.`
-      }
-    ],
-    stopReason: "end_turn",
-    usage: { input: 0, output: 0 }
-  }).catch((_appendErr) => {
-    console.warn(
-      JSON.stringify({
-        level: "warn",
-        event: "execution.chimera_timeout_append_failed",
-        message: _appendErr instanceof Error ? _appendErr.message : String(_appendErr),
-        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      })
-    );
-  });
-}
-
 // src/execution-chimera-cascade.ts
-import { randomUUID as randomUUID2 } from "node:crypto";
 import * as fsp from "node:fs/promises";
 import * as path8 from "node:path";
 import { emitReviewIfChanged } from "@wrongstack/core/plugin";
-function installChimeraCascadeHandler({
-  events,
-  director,
-  session,
-  getPendingWork,
-  setPendingWork
-}) {
-  events.onPattern("chimera.cascade_needed", (_event, payload) => {
-    const p = payload;
-    const dir = director;
-    if (!dir) return;
-    if (p.agents.length === 0) return;
-    const previousWork = getPendingWork();
-    const pendingWork = (async () => {
-      try {
-        await previousWork;
-      } catch {
-      }
-      for (const agentKind of p.agents) {
-        try {
-          const taskDesc = buildChimeraCascadeTaskDescription(agentKind, p);
-          const role = agentKind === "security-scanner" ? "security-scanner" : "bug-hunter";
-          const cfg = {
-            name: `chimera-cascade-${agentKind}`,
-            role,
-            maxIterations: 40,
-            maxToolCalls: 200,
-            timeoutMs: 6e5
-          };
-          const subagentId = await dir.spawn(cfg);
-          try {
-            const taskId = randomUUID2();
-            await dir.assign({ id: taskId, description: taskDesc, subagentId });
-            const results = await dir.awaitTasks([taskId]);
-            const result = results[0];
-            if (result?.status === "success") {
-              const resultText = typeof result.result === "string" ? result.result : JSON.stringify(result.result);
-              await session.append({
-                type: "llm_response",
-                ts: (/* @__PURE__ */ new Date()).toISOString(),
-                content: [
-                  {
-                    type: "text",
-                    text: `\u{1F982} Chimera cascade (${agentKind}) \u2014 ${resultText}`
-                  }
-                ],
-                stopReason: "end_turn",
-                usage: { input: 0, output: 0 }
-              });
-            } else {
+
+// src/chimera-review-task.ts
+import { parseReviewSeverity } from "@wrongstack/core/plugin";
+function truncateAtCodePointBoundary(text, maxCodeUnits) {
+  if (text.length <= maxCodeUnits) return text;
+  let result = "";
+  for (const ch of text) {
+    if (result.length + ch.length > maxCodeUnits) break;
+    result += ch;
+  }
+  return result;
+}
+function isChimeraAllClearReview(text) {
+  const severities = parseReviewSeverity(text);
+  if (severities.critical > 0 || severities.high > 0 || severities.medium > 0) {
+    return false;
+  }
+  const normalized = text.trim().toLowerCase();
+  return normalized.startsWith("## \u{1F982} chimera review \u2014 all clear") || normalized.includes("chimera review: all clear");
+}
+function buildChimeraReviewTaskDescription(p) {
+  const lines = [];
+  lines.push(`Review the following ${p.files.length} file(s) changed in this session at ${p.cwd}.`);
+  lines.push("");
+  for (const f of p.files) {
+    lines.push(`## [${f.status.toUpperCase()}] ${f.path}`);
+    if (f.diff) {
+      lines.push("");
+      lines.push("```diff");
+      lines.push(f.diff);
+      lines.push("```");
+    } else if (f.status === "added") {
+      lines.push("");
+      lines.push("(New file \u2014 full content provided)");
+    }
+    lines.push("");
+  }
+  if (p.allChangedFiles && p.allChangedFiles.length > p.files.length) {
+    const reviewedPaths = new Set(p.files.map((f) => f.path));
+    const siblings = p.allChangedFiles.filter((s) => !reviewedPaths.has(s.path)).map((s) => `  ${s.path} (${s.status})`);
+    if (siblings.length > 0) {
+      lines.push("---");
+      lines.push("");
+      lines.push(
+        `**Also changed this session (${siblings.length} files \u2014 for context, NOT in your review scope):**`
+      );
+      lines.push(siblings.slice(0, 30).join("\n"));
+      lines.push("");
+    }
+  }
+  if (p.recentCommits && p.recentCommits.length > 0) {
+    lines.push("---");
+    lines.push("");
+    lines.push("**Recent commits (newest first):**");
+    for (const c of p.recentCommits) lines.push(`  ${c}`);
+    lines.push("");
+  }
+  if (p.activeTodos && p.activeTodos.length > 0) {
+    lines.push("---");
+    lines.push("");
+    lines.push(`**Active task items (${p.activeTodos.length}):**`);
+    for (const t of p.activeTodos) {
+      lines.push(`  [${t.status}] ${t.content}`);
+    }
+    lines.push("");
+  }
+  if (p.kanbanCard) {
+    lines.push("---");
+    lines.push("");
+    lines.push(`**Kanban card: ${p.kanbanCard.title}**`);
+    if (p.kanbanCard.description) {
+      lines.push(`  ${p.kanbanCard.description.slice(0, 500)}`);
+    }
+    if (p.kanbanCard.successCriteria && p.kanbanCard.successCriteria.length > 0) {
+      lines.push("  **Success criteria:**");
+      for (const sc of p.kanbanCard.successCriteria) lines.push(`    - ${sc}`);
+    }
+    lines.push("");
+  }
+  if (p.fileProvenance && p.fileProvenance.length > 0) {
+    lines.push("---");
+    lines.push("");
+    lines.push("**File provenance (Chronicle):**");
+    for (const fp of p.fileProvenance) {
+      const parts = [];
+      if (fp.agentId) parts.push(`agent: ${fp.agentId}`);
+      if (fp.taskId) parts.push(`task: ${fp.taskId}`);
+      if (fp.eventType) parts.push(fp.eventType);
+      if (fp.observedAt) parts.push(fp.observedAt);
+      lines.push(`  ${fp.path} \u2014 ${parts.join(", ")}`);
+    }
+    lines.push("");
+  }
+  lines.push("---");
+  lines.push("");
+  lines.push("Read each file using the read tool. For modified files, focus on the");
+  lines.push("diff above \u2014 do not re-review unchanged pre-existing code.");
+  lines.push("Check for bugs, type issues, security problems, and produce a");
+  lines.push("structured review report.");
+  return lines.join("\n");
+}
+function buildChimeraCascadeTaskDescription(agentKind, p) {
+  const fileList = p.bundle.files.map((f) => `- ${f.path}`).join("\n");
+  const reportSlice = truncateAtCodePointBoundary(p.reviewText, 12e3);
+  const severityLine = `Critical: ${p.severities.critical}, High: ${p.severities.high}, Medium: ${p.severities.medium}`;
+  if (agentKind === "security-scanner") {
+    return [
+      `You are a security cascade agent. A Chimera code review flagged security-relevant findings.`,
+      ``,
+      `Repository: ${p.bundle.cwd}`,
+      `Severity summary: ${severityLine}`,
+      ``,
+      `--- Review report ---`,
+      reportSlice,
+      ``,
+      `--- Changed files ---`,
+      fileList,
+      ``,
+      `Investigate the security findings above. Read the flagged files, confirm or refute`,
+      `each finding, and **apply fixes** for confirmed vulnerabilities using the edit tool.`,
+      `Use severity (Critical/High/Medium), file:line citations, and remediation steps.`,
+      `After fixing, run the project's typecheck and linter to verify. If a finding is a`,
+      `false positive, say so and do not modify the file.`
+    ].join("\n");
+  }
+  return [
+    `You are a bug-hunter cascade agent. A Chimera code review flagged correctness defects.`,
+    ``,
+    `Repository: ${p.bundle.cwd}`,
+    `Severity summary: ${severityLine}`,
+    ``,
+    `--- Review report ---`,
+    reportSlice,
+    ``,
+    `--- Changed files ---`,
+    fileList,
+    ``,
+    `Hunt for the bugs flagged above. Read the affected files, trace each finding to its`,
+    `root cause, and **apply minimal fixes** for confirmed bugs using the edit tool.`,
+    `Use severity (Critical/High/Medium), file:line citations. After fixing, run the`,
+    `project's typecheck and linter to verify. If a finding is a false positive, say so`,
+    `and do not modify the file.`
+  ].join("\n");
+}
+
+// src/chimera-subagent-ladder.ts
+import { randomUUID as randomUUID2 } from "node:crypto";
+function attemptLabel(attempt) {
+  return attempt.tier === "inherit" ? "inherited model" : `${attempt.provider}/${attempt.model}`;
+}
+async function runSubagentModelLadder(opts) {
+  const {
+    director: dir,
+    ladder,
+    buildConfig,
+    buildTask,
+    attemptTimeoutMs = REVIEWER_ATTEMPT_TIMEOUT_MS,
+    budgetMs = REVIEWER_LADDER_BUDGET_MS,
+    keepWinnerAlive = false,
+    onAttemptFailed,
+    onRecovered,
+    now = Date.now
+  } = opts;
+  const startedAt = now();
+  const failures = [];
+  const outcome = { attemptsUsed: 0, failures };
+  for (let rung = 0; rung < ladder.length; rung++) {
+    const attempt = ladder[rung];
+    const timeoutMs = reviewerAttemptTimeoutMs(
+      budgetMs - (now() - startedAt),
+      attemptTimeoutMs,
+      REVIEWER_MIN_ATTEMPT_MS
+    );
+    if (timeoutMs === 0) {
+      outcome.lastError = new Error(
+        `ladder budget exhausted after ${outcome.attemptsUsed} attempt(s)`
+      );
+      break;
+    }
+    outcome.attemptsUsed++;
+    let subagentId;
+    let attemptResult;
+    let attemptError;
+    try {
+      subagentId = await dir.spawn(buildConfig(attempt, timeoutMs));
+      const taskId = randomUUID2();
+      await dir.assign({
+        id: taskId,
+        description: buildTask(attempt, failures),
+        subagentId
+      });
+      attemptResult = (await dir.awaitTasks([taskId]))[0];
+    } catch (err) {
+      attemptError = err;
+    }
+    if (!attemptError && attemptResult?.status === "success") {
+      outcome.result = attemptResult;
+      outcome.wonAt = rung + 1;
+      outcome.lastError = void 0;
+      if (keepWinnerAlive) {
+        outcome.subagentId = subagentId;
+      } else if (subagentId) {
+        await terminateQuietly(dir, subagentId);
+      }
+      if (rung > 0) await onRecovered?.(attempt, failures);
+      return outcome;
+    }
+    if (subagentId) await terminateQuietly(dir, subagentId);
+    outcome.result = attemptResult;
+    outcome.lastError = attemptError;
+    const failure = {
+      model: attemptLabel(attempt),
+      tier: attempt.tier,
+      attempt: rung + 1,
+      reason: attemptError ? errorText(attemptError) : `${attemptResult?.status ?? "unknown"}: ${attemptResult?.error?.message ?? "no result"}`,
+      threw: attemptError !== void 0,
+      toolCalls: attemptResult?.toolCalls ?? 0
+    };
+    failures.push(failure);
+    const canAdvance = attemptError ? true : shouldAdvanceReviewerLadder(attemptResult?.status, attemptResult?.error);
+    const next = canAdvance ? ladder[rung + 1] : void 0;
+    await onAttemptFailed?.(failure, next);
+    if (!next) break;
+  }
+  return outcome;
+}
+function buildRetryPreamble(failures) {
+  if (failures.length === 0) return "";
+  const mayHaveWritten = failures.some((f) => f.threw || f.toolCalls > 0);
+  const history = failures.map((f) => `${f.model} (${f.reason})`).join("; ");
+  return [
+    `\u26A0 RETRY \u2014 ${failures.length} previous attempt(s) failed: ${history}.`,
+    mayHaveWritten ? "Those attempts may have already applied part of this work, so the working tree can be in a half-finished state. Re-read every file before you change it and treat any fix that is already present as done \u2014 do not apply it twice." : "They made no tool calls, so the working tree is untouched.",
+    ""
+  ].join("\n");
+}
+function errorText(err) {
+  return err instanceof Error ? err.message : String(err);
+}
+async function terminateQuietly(dir, subagentId) {
+  try {
+    await dir.terminate(subagentId);
+  } catch {
+  }
+}
+
+// src/execution-chimera-cascade.ts
+var CASCADE_ATTEMPT_TIMEOUT_MS = 6e5;
+var CASCADE_LADDER_BUDGET_MS = 9e5;
+var INHERIT_ONLY_LADDER = [
+  { provider: "", model: "", fallbackModels: [], tier: "inherit" }
+];
+function installChimeraCascadeHandler({
+  events,
+  director,
+  session,
+  getPendingWork,
+  setPendingWork,
+  buildLadder
+}) {
+  events.onPattern("chimera.cascade_needed", (_event, payload) => {
+    const p = payload;
+    const dir = director;
+    if (!dir) return;
+    if (p.agents.length === 0) return;
+    const previousWork = getPendingWork();
+    const pendingWork = (async () => {
+      try {
+        await previousWork;
+      } catch {
+      }
+      for (const agentKind of p.agents) {
+        try {
+          const taskDesc = buildChimeraCascadeTaskDescription(agentKind, p);
+          const role = agentKind === "security-scanner" ? "security-scanner" : "bug-hunter";
+          const ladder = buildLadder?.() ?? INHERIT_ONLY_LADDER;
+          const outcome = await runSubagentModelLadder({
+            director: dir,
+            ladder,
+            attemptTimeoutMs: CASCADE_ATTEMPT_TIMEOUT_MS,
+            budgetMs: CASCADE_LADDER_BUDGET_MS,
+            buildConfig: (attempt, timeoutMs) => ({
+              name: `chimera-cascade-${agentKind}`,
+              role,
+              maxIterations: 40,
+              maxToolCalls: 200,
+              timeoutMs,
+              // Rung 0 stays unpinned so the role model matrix still decides;
+              // later rungs pin a model precisely because it just failed.
+              ...attempt.tier === "inherit" ? {} : {
+                provider: attempt.provider,
+                model: attempt.model,
+                fallbackModels: attempt.fallbackModels
+              }
+            }),
+            // Cascade agents write files, so a successor must be told the tree
+            // may already hold the dead attempt's partial edits.
+            buildTask: (_attempt, failures) => `${buildRetryPreamble(failures)}${taskDesc}`,
+            onAttemptFailed: async (failure, next) => {
+              if (!next) return;
               await session.append({
                 type: "error",
                 ts: (/* @__PURE__ */ new Date()).toISOString(),
-                message: `\u{1F982} Chimera cascade (${agentKind}) ${result?.status ?? "unknown"}: ${result?.error?.message ?? "no result"}`,
+                message: `\u{1F982} Chimera cascade (${agentKind}) on ${failure.model} failed (${failure.reason}) \u2014 retrying on ${attemptLabel(next)} (${next.tier}).`,
                 phase: "agent"
               });
             }
-          } finally {
-            try {
-              await dir.terminate(subagentId);
-            } catch {
-            }
+          });
+          const result = outcome.result;
+          if (result?.status === "success") {
+            const resultText = typeof result.result === "string" ? result.result : JSON.stringify(result.result);
+            await session.append({
+              type: "llm_response",
+              ts: (/* @__PURE__ */ new Date()).toISOString(),
+              content: [
+                {
+                  type: "text",
+                  text: `\u{1F982} Chimera cascade (${agentKind}) \u2014 ${resultText}`
+                }
+              ],
+              stopReason: "end_turn",
+              usage: { input: 0, output: 0 }
+            });
+          } else {
+            const detail = outcome.lastError ? outcome.lastError instanceof Error ? outcome.lastError.message : String(outcome.lastError) : `${result?.status ?? "unknown"}: ${result?.error?.message ?? "no result"}`;
+            await session.append({
+              type: "error",
+              ts: (/* @__PURE__ */ new Date()).toISOString(),
+              message: `\u{1F982} Chimera cascade (${agentKind}) ${result?.status ?? "unknown"}: ${detail} \u2014 exhausted ${outcome.attemptsUsed} of ${ladder.length} model(s)`,
+              phase: "agent"
+            });
           }
         } catch (err) {
           await session.append({
@@ -2693,6 +2784,357 @@ async function maybeReReviewCascade({
   }
 }
 
+// src/execution-chimera-review.ts
+import { randomUUID as randomUUID3 } from "node:crypto";
+import path9 from "node:path";
+import { effectiveFallbackChain } from "@wrongstack/core/agent";
+import {
+  CHIMERA_REVIEW_PROMPT,
+  integrateFindings,
+  maybeCompactReviewStores,
+  parseChimeraReviewReport,
+  persistReviewReport,
+  recordCompletedReview
+} from "@wrongstack/core/plugin";
+function normalizeFileKeyForCitation(raw, cwd) {
+  const forward = raw.replace(/\\/g, "/").replace(/^\.\//, "");
+  const isAbsolute = forward.startsWith("/") || /^[a-zA-Z]:\//.test(forward);
+  const relative = isAbsolute ? path9.relative(cwd, forward).replace(/\\/g, "/").replace(/^\.\//, "") : forward;
+  return process.platform === "win32" ? relative.toLowerCase() : relative;
+}
+function installChimeraReviewHandler({
+  events,
+  director,
+  session,
+  mailbox,
+  agent,
+  config,
+  projectDir,
+  persistReview = persistChimeraReview,
+  setPendingWork
+}) {
+  events.onPattern("chimera.review_needed", (_event, payload) => {
+    const p = payload;
+    const reviewSessionId = agent.ctx.activeRunSessionId ?? agent.ctx.session?.id ?? session.id;
+    const dir = director;
+    if (!dir) {
+      return;
+    }
+    if (p.files.length === 0) return;
+    const appendChimeraNotice = async (message) => {
+      try {
+        await session.append({
+          type: "error",
+          ts: (/* @__PURE__ */ new Date()).toISOString(),
+          message,
+          phase: "agent"
+        });
+      } catch (err) {
+        console.warn(
+          JSON.stringify({
+            level: "warn",
+            event: "execution.chimera_notice_append_failed",
+            message: err instanceof Error ? err.message : String(err),
+            timestamp: (/* @__PURE__ */ new Date()).toISOString()
+          })
+        );
+      }
+    };
+    const persistAndEmitCompletion = async (completion) => {
+      try {
+        await persistReview(completion, projectDir);
+        events.emitCustom("chimera.review_persisted", {
+          reportId: completion.reportId,
+          sessionId: completion.sessionId,
+          cwd: completion.cwd
+        });
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        events.emitCustom("chimera.review_persistence_failed", {
+          reportId: completion.reportId,
+          sessionId: completion.sessionId,
+          cwd: completion.cwd,
+          error: message
+        });
+        await appendChimeraNotice(
+          `\u{1F982} Chimera report persistence failed: ${message}. The review remains in the session transcript and mailbox.`
+        );
+      } finally {
+        recordCompletedReview(events, completion);
+        events.emitCustom("chimera.review_complete", completion);
+      }
+    };
+    setPendingWork(
+      (async () => {
+        let subagentId;
+        try {
+          const taskDesc = buildChimeraReviewTaskDescription(p);
+          const tProvider = config.provider?.trim() || void 0;
+          const tModel = config.model?.trim() || void 0;
+          const rawProvider = p.reviewFallbackModels ? p.config.provider?.trim() || void 0 : tProvider;
+          const rawModel = p.reviewFallbackModels ? p.config.model?.trim() || void 0 : tModel;
+          const baseProvider = rawProvider || tProvider || config.provider;
+          const baseModel = rawModel || tModel || config.model;
+          const baseFallbacks = p.reviewFallbackModels ? [...p.reviewFallbackModels] : resolveReviewerFallbackModels(void 0);
+          const assigned = assignReviewerModelsRoundRobin(baseProvider, baseModel, baseFallbacks);
+          const ladder = buildReviewerAttemptLadder({
+            assigned,
+            profileChain: effectiveFallbackChain(config),
+            session: { provider: config.provider, model: config.model }
+          });
+          const ladderRefs = ladder.map(attemptLabel);
+          const outcome = await runSubagentModelLadder({
+            director: dir,
+            ladder,
+            budgetMs: REVIEWER_LADDER_BUDGET_MS,
+            keepWinnerAlive: false,
+            buildConfig: (attempt, timeoutMs) => applyChimeraReviewerReadOnlyPolicy({
+              name: "chimera-review",
+              role: "reviewer",
+              systemPromptOverride: CHIMERA_REVIEW_PROMPT,
+              maxIterations: 50,
+              maxToolCalls: 250,
+              timeoutMs,
+              provider: attempt.provider,
+              model: attempt.model,
+              fallbackModels: attempt.fallbackModels
+            }),
+            // The reviewer is read-only, so a retry re-runs the task verbatim.
+            buildTask: () => taskDesc,
+            onAttemptFailed: async (failure, next) => {
+              console.warn(
+                JSON.stringify({
+                  level: "warn",
+                  event: "execution.chimera_reviewer_attempt_failed",
+                  message: failure.reason,
+                  model: failure.model,
+                  tier: failure.tier,
+                  attempt: failure.attempt,
+                  of: ladder.length,
+                  nextModel: next ? attemptLabel(next) : void 0,
+                  timestamp: (/* @__PURE__ */ new Date()).toISOString()
+                })
+              );
+              if (!next) return;
+              events.emitCustom("chimera.reviewer_model_fallback", {
+                from: failure.model,
+                to: attemptLabel(next),
+                tier: next.tier,
+                attempt: failure.attempt,
+                of: ladder.length,
+                reason: failure.reason
+              });
+              await appendChimeraNotice(
+                `\u{1F982} Chimera review on ${failure.model} failed (${failure.reason}) \u2014 retrying the same review on ${attemptLabel(next)} (${next.tier}).`
+              );
+            },
+            onRecovered: async (attempt, failures) => {
+              await appendChimeraNotice(
+                `\u{1F982} Chimera review recovered on ${attemptLabel(attempt)} (${attempt.tier}) after ${failures.length} failed attempt(s).`
+              );
+            }
+          });
+          subagentId = outcome.subagentId;
+          const result = outcome.result;
+          if (result?.status !== "success") {
+            const exhaustedDetail = outcome.lastError ? outcome.lastError instanceof Error ? outcome.lastError.message : String(outcome.lastError) : `${result?.status ?? "unknown"}: ${result?.error?.message ?? "no result"}`;
+            try {
+              await session.append({
+                type: "error",
+                ts: (/* @__PURE__ */ new Date()).toISOString(),
+                message: `\u{1F982} Chimera review subagent ${result?.status ?? "unknown"}: ${exhaustedDetail} \u2014 exhausted ${outcome.attemptsUsed} of ${ladder.length} model(s): ${ladderRefs.join(" \u2192 ")}`,
+                phase: "agent"
+              });
+            } catch (err) {
+              console.error(
+                JSON.stringify({
+                  level: "error",
+                  event: "execution.chimera_append_failed",
+                  message: err instanceof Error ? err.message : String(err),
+                  timestamp: (/* @__PURE__ */ new Date()).toISOString()
+                })
+              );
+            }
+            await persistAndEmitCompletion({
+              bundle: p,
+              reviewText: "",
+              status: result?.status ?? "unknown",
+              cwd: p.cwd,
+              sessionId: reviewSessionId,
+              reportId: randomUUID3()
+            });
+            return;
+          }
+          const reviewText = typeof result.result === "string" ? result.result.trim() : JSON.stringify(result.result);
+          const reportId = randomUUID3();
+          await persistAndEmitCompletion({
+            bundle: p,
+            reviewText,
+            status: "success",
+            cwd: p.cwd,
+            sessionId: reviewSessionId,
+            reportId
+          });
+          if (reviewText) {
+            const reviewHasFindings = !isChimeraAllClearReview(reviewText);
+            const parsedReview = parseChimeraReviewReport(reviewText);
+            const citedFindings = parsedReview.findings.filter((finding) => finding.location);
+            const citedPaths = new Set(
+              p.files.map((file) => normalizeFileKeyForCitation(file.path, p.cwd))
+            );
+            const changedBasenameIndex = /* @__PURE__ */ new Map();
+            for (const file of p.files) {
+              const normalized = normalizeFileKeyForCitation(file.path, p.cwd);
+              const basename5 = path9.basename(file.path).toLowerCase();
+              const bucket = changedBasenameIndex.get(basename5);
+              if (bucket) bucket.push(normalized);
+              else changedBasenameIndex.set(basename5, [normalized]);
+            }
+            const droppedCitations = citedFindings.filter((finding) => {
+              const citedKey = normalizeFileKeyForCitation(finding.location.file, p.cwd);
+              if (citedPaths.has(citedKey)) return false;
+              const basename5 = path9.basename(finding.location.file).toLowerCase();
+              const bucket = changedBasenameIndex.get(basename5);
+              return !(bucket && bucket.length === 1);
+            });
+            const effectiveHasFindings = reviewHasFindings && (parsedReview.findings.length === 0 || parsedReview.findings.length > droppedCitations.length);
+            const hallucinationNote = droppedCitations.length > 0 ? `
+
+\u26A0\uFE0F Citation validation: ${droppedCitations.length} finding(s) cite files outside the changed-file set and should be verified before acting.` : "";
+            const subject = `\u{1F982} Chimera report ready \u2014 ${p.files.length} file(s) checked`;
+            let reviewMailMessageId;
+            try {
+              const directive = effectiveHasFindings ? "Chimera found potential issues. This report is informational: no leader turn, fix agent, or cascade was started. Open the report and explicitly ask the leader to act if you want changes." : "Chimera completed with no actionable findings. No follow-up was started.";
+              const reviewBody = reviewText.length > 7500 ? truncateAtCodePointBoundary(reviewText, 7500) + "\n\n\u2026(truncated, full report is in the Chimera report store)" : reviewText;
+              const body = `${directive}${hallucinationNote}
+
+${reviewBody}`;
+              const mailMsg = await mailbox.send({
+                from: "chimera-review",
+                to: "leader",
+                type: "result",
+                audience: "leaders",
+                subject,
+                body,
+                priority: "normal"
+              });
+              if (!mailMsg?.id) throw new Error("mailbox.send returned no message id");
+              reviewMailMessageId = mailMsg.id;
+              events.emitCustom("chimera.mailbox_delivered", {
+                subject,
+                autoFixMode: "off",
+                fileCount: p.files.length,
+                reviewLength: reviewText.length,
+                messageId: reviewMailMessageId
+              });
+              if (!effectiveHasFindings) {
+                try {
+                  await mailbox.ack({
+                    messageId: reviewMailMessageId,
+                    readerId: "chimera",
+                    completed: true,
+                    outcome: "Review completed with no actionable findings."
+                  });
+                } catch (ackError) {
+                  console.warn(
+                    JSON.stringify({
+                      level: "warn",
+                      event: "execution.chimera_mailbox_completion_failed",
+                      message: ackError instanceof Error ? ackError.message : String(ackError),
+                      messageId: reviewMailMessageId,
+                      timestamp: (/* @__PURE__ */ new Date()).toISOString()
+                    })
+                  );
+                }
+              }
+            } catch (mailErr) {
+              const errMsg = mailErr instanceof Error ? mailErr.message : String(mailErr);
+              console.error(
+                JSON.stringify({
+                  level: "error",
+                  event: "execution.chimera_mailbox_failed",
+                  message: errMsg,
+                  timestamp: (/* @__PURE__ */ new Date()).toISOString()
+                })
+              );
+              events.emitCustom("chimera.mailbox_failed", {
+                subject,
+                autoFixMode: "off",
+                fileCount: p.files.length,
+                reviewLength: reviewText.length,
+                error: errMsg
+              });
+              await session.append({
+                type: "error",
+                ts: (/* @__PURE__ */ new Date()).toISOString(),
+                message: `\u{1F982} Chimera report ${reportId} is ready, but mailbox delivery failed: ${errMsg}. No follow-up was started.`,
+                phase: "agent"
+              });
+            }
+            const findingCount = Math.max(
+              0,
+              parsedReview.findings.length - droppedCitations.length
+            );
+            const message = effectiveHasFindings ? `\u{1F982} Chimera report ready \u2014 ${findingCount || "unparsed"} potential finding(s) across ${p.files.length} file(s). No follow-up started; open the mailbox and explicitly ask the leader to act if wanted.` : `\u{1F982} Chimera report ready \u2014 ${p.files.length} file(s) checked, no actionable findings. No follow-up started.`;
+            events.emitCustom("chimera.report_available", {
+              reportId,
+              sessionId: reviewSessionId,
+              message,
+              fileCount: p.files.length,
+              findingCount,
+              hasActionableFindings: effectiveHasFindings,
+              ...reviewMailMessageId ? { messageId: reviewMailMessageId } : {}
+            });
+          }
+        } catch (err) {
+          try {
+            await session.append({
+              type: "error",
+              ts: (/* @__PURE__ */ new Date()).toISOString(),
+              message: `\u{1F982} Chimera review failed: ${err instanceof Error ? err.message : String(err)}`,
+              phase: "agent"
+            });
+          } catch (appendErr) {
+            console.error(
+              JSON.stringify({
+                level: "error",
+                event: "execution.chimera_review_append_failed",
+                message: appendErr instanceof Error ? appendErr.message : String(appendErr),
+                timestamp: (/* @__PURE__ */ new Date()).toISOString()
+              })
+            );
+          }
+        } finally {
+          if (subagentId) {
+            try {
+              await dir.terminate(subagentId);
+            } catch {
+            }
+          }
+        }
+      })()
+    );
+  });
+}
+async function persistChimeraReview(payload, projectDir) {
+  const reportId = payload.reportId;
+  if (!reportId) throw new Error("Chimera completion is missing reportId");
+  await persistReviewReport(payload, reportId, projectDir);
+  await integrateFindings(payload, projectDir, reportId);
+  try {
+    await maybeCompactReviewStores(projectDir);
+  } catch (error) {
+    console.error(
+      JSON.stringify({
+        level: "warn",
+        event: "execution.chimera_store_maintenance_failed",
+        message: error instanceof Error ? error.message : String(error),
+        timestamp: (/* @__PURE__ */ new Date()).toISOString()
+      })
+    );
+  }
+}
+
 // src/execution-storage-observability.ts
 function installStorageObservability(events, rootTraceId) {
   const isStorageNamespace = (event) => event === "storage.read" || event === "storage.write" || event === "storage.error" || event.startsWith("storage.");
@@ -3061,7 +3503,7 @@ function printBanner(renderer, projectName) {
 
 // src/repl-client-registration.ts
 import * as crypto from "node:crypto";
-import * as path9 from "node:path";
+import * as path10 from "node:path";
 import {
   getSharedProjectMailbox,
   resolveProjectDir
@@ -3074,7 +3516,7 @@ function registerReplClient(opts) {
   const hqConnection = startCliHqConnection({
     clientKind: "repl",
     projectRoot: replProjectRoot,
-    projectName: path9.basename(replProjectRoot),
+    projectName: path10.basename(replProjectRoot),
     appConfig: opts.appConfig,
     capabilities: ["telemetry.publish", "mailbox.summary"]
   });
@@ -3083,14 +3525,16 @@ function registerReplClient(opts) {
     void 0,
     () => hqConnection.getPublisher()
   );
+  let closed = false;
   let clientHeartbeat;
   clientMailbox.registerClient({
     clientId,
     sessionId: opts.getSessionId?.() ?? replProjectRoot,
-    name: `REPL [${path9.basename(replProjectRoot)}]`,
+    name: `REPL [${path10.basename(replProjectRoot)}]`,
     source: "repl",
     pid: process.pid
   }).then(() => {
+    if (closed) return;
     clientHeartbeat = setInterval(() => {
       clientMailbox.clientHeartbeat({ clientId, sessionId: opts.getSessionId?.() ?? replProjectRoot }).catch(() => {
       });
@@ -3100,6 +3544,7 @@ function registerReplClient(opts) {
   return {
     clientId,
     close() {
+      closed = true;
       if (clientHeartbeat) clearInterval(clientHeartbeat);
       clientMailbox.deregisterClient(clientId).catch(() => void 0);
       hqConnection.stop();
@@ -3993,313 +4438,26 @@ async function execute(deps) {
   const bootUpdateInfo = initialUpdateInfo;
   const offStorageObservability = installStorageObservability(events, context.traceId);
   let pendingChimeraWork;
-  events.onPattern("chimera.review_needed", (_event, payload) => {
-    const p = payload;
-    const dir = director;
-    if (!dir) {
-      return;
+  installChimeraReviewHandler({
+    events,
+    director,
+    session,
+    mailbox,
+    agent,
+    config,
+    projectDir: wpaths.projectDir,
+    setPendingWork: (work) => {
+      pendingChimeraWork = work;
     }
-    if (p.files.length === 0) return;
-    pendingChimeraWork = (async () => {
-      let subagentId;
-      try {
-        const taskDesc = buildChimeraReviewTaskDescription(p);
-        const tProvider = config.provider?.trim() || void 0;
-        const tModel = config.model?.trim() || void 0;
-        const rawProvider = p.reviewFallbackModels ? p.config.provider?.trim() || void 0 : tProvider;
-        const rawModel = p.reviewFallbackModels ? p.config.model?.trim() || void 0 : tModel;
-        const baseProvider = rawProvider || tProvider || config.provider;
-        const baseModel = rawModel || tModel || config.model;
-        const baseFallbacks = p.reviewFallbackModels ? [...p.reviewFallbackModels] : resolveReviewerFallbackModels(void 0);
-        const assigned = assignReviewerModelsRoundRobin(baseProvider, baseModel, baseFallbacks);
-        const cfg = applyChimeraReviewerReadOnlyPolicy({
-          name: "chimera-review",
-          role: "reviewer",
-          systemPromptOverride: CHIMERA_REVIEW_PROMPT,
-          maxIterations: 50,
-          maxToolCalls: 250,
-          timeoutMs: 9e5,
-          provider: assigned.provider,
-          model: assigned.model,
-          fallbackModels: assigned.fallbackModels
-        });
-        subagentId = await dir.spawn(cfg);
-        const taskId = randomUUID4();
-        await dir.assign({
-          id: taskId,
-          description: taskDesc,
-          subagentId
-        });
-        const results = await dir.awaitTasks([taskId]);
-        const result = results[0];
-        if (result?.status !== "success") {
-          try {
-            await session.append({
-              type: "error",
-              ts: (/* @__PURE__ */ new Date()).toISOString(),
-              message: `\u{1F982} Chimera review subagent ${result?.status ?? "unknown"}: ${result?.error?.message ?? "no result"}`,
-              phase: "agent"
-            });
-          } catch (err) {
-            console.error(
-              JSON.stringify({
-                level: "error",
-                event: "execution.chimera_append_failed",
-                message: err instanceof Error ? err.message : String(err),
-                timestamp: (/* @__PURE__ */ new Date()).toISOString()
-              })
-            );
-          }
-          events.emitCustom("chimera.review_complete", {
-            bundle: p,
-            reviewText: "",
-            status: result?.status ?? "unknown",
-            cwd: p.cwd,
-            sessionId: session.id
-          });
-          return;
-        }
-        const reviewText = typeof result.result === "string" ? result.result.trim() : JSON.stringify(result.result);
-        events.emitCustom("chimera.review_complete", {
-          bundle: p,
-          reviewText,
-          status: "success",
-          cwd: p.cwd,
-          sessionId: session.id
-        });
-        if (reviewText) {
-          await session.append({
-            type: "llm_response",
-            ts: (/* @__PURE__ */ new Date()).toISOString(),
-            content: [{ type: "text", text: reviewText }],
-            stopReason: "end_turn",
-            usage: { input: 0, output: 0 }
-          });
-          const autoFix = agent.ctx.meta["chimeraAutoFix"] ?? p.config.autoFix ?? "off";
-          const reviewHasFindings = !isChimeraAllClearReview(reviewText);
-          const isAskMode = autoFix === "ask" && reviewHasFindings;
-          const mailboxType = isAskMode ? "ask" : "result";
-          const subject = isAskMode ? `\u{1F982} Chimera review \u2014 ${p.files.length} file(s) changed. Shall I fix the findings?` : `\u{1F982} Chimera review \u2014 ${p.files.length} file(s) changed`;
-          let leaderApproved = false;
-          let spawnedFix = false;
-          let askMailMsgId;
-          let leaderOnline = false;
-          if (isAskMode) {
-            try {
-              const onlineAgents = await mailbox.getOnlineAgents();
-              leaderOnline = onlineAgents.some(
-                (a) => a.online && isMailboxLeader(a.agentId, a.role)
-              );
-            } catch (leaderCheckErr) {
-              console.warn(
-                JSON.stringify({
-                  level: "warn",
-                  event: "execution.chimera_leader_check_failed",
-                  message: leaderCheckErr instanceof Error ? leaderCheckErr.message : String(leaderCheckErr),
-                  timestamp: (/* @__PURE__ */ new Date()).toISOString()
-                })
-              );
-            }
-            if (!leaderOnline) {
-              console.warn(
-                JSON.stringify({
-                  level: "warn",
-                  event: "execution.chimera_mailbox_leader_offline",
-                  message: `Leader not online \u2014 mailbox ${mailboxType} from chimera-review to leader will be delivered when leader reconnects`,
-                  fileCount: p.files.length,
-                  autoFix,
-                  timestamp: (/* @__PURE__ */ new Date()).toISOString()
-                })
-              );
-            }
-          } else {
-            leaderOnline = true;
-            console.debug(
-              JSON.stringify({
-                level: "debug",
-                event: "execution.chimera_auto_no_presence_check",
-                message: "Result mode: leader presence not checked \u2014 mailbox message delivered regardless",
-                fileCount: p.files.length,
-                autoFix,
-                timestamp: (/* @__PURE__ */ new Date()).toISOString()
-              })
-            );
-          }
-          try {
-            const askTimeoutRaw = agent.ctx.meta["chimeraAskTimeoutMs"] ?? 3e4;
-            const ASK_TIMEOUT_MS = Number.isFinite(askTimeoutRaw) ? Math.max(0, askTimeoutRaw) : 3e4;
-            const directive = isAskMode ? `LEADER ACTION REQUIRED: The Chimera review below found issues. Reply with "yes" to auto-fix, or "no" to skip (${ASK_TIMEOUT_MS / 1e3}s timeout).` : reviewHasFindings ? "LEADER ACTION REQUIRED: The Chimera review below found issues. Read the report and fix any Critical or High findings automatically using the edit tool. Verify with typecheck and linter." : "Chimera review completed with no findings. Read the report summary below; no fix action is requested.";
-            const reviewBody = reviewText.length > 7500 ? truncateAtCodePointBoundary(reviewText, 7500) + "\n\n\u2026(truncated, full report in session transcript)" : reviewText;
-            const body = `${directive}
-
-${reviewBody}`;
-            const mailMsg = await mailbox.send({
-              from: "chimera-review",
-              to: "leader",
-              type: mailboxType,
-              audience: "leaders",
-              subject,
-              body,
-              priority: "normal"
-            });
-            if (!mailMsg?.id) throw new Error("mailbox.send returned no message id");
-            askMailMsgId = mailMsg.id;
-            if (isAskMode) {
-              leaderApproved = await waitForChimeraAskApproval({
-                mailbox,
-                messageId: askMailMsgId,
-                meta: agent.ctx.meta,
-                session: agent.ctx.session ?? session,
-                askTimeoutMs: ASK_TIMEOUT_MS
-              });
-            }
-          } catch (mailErr) {
-            const errMsg = mailErr instanceof Error ? mailErr.message : String(mailErr);
-            console.error(
-              JSON.stringify({
-                level: "error",
-                event: "execution.chimera_mailbox_failed",
-                message: errMsg,
-                timestamp: (/* @__PURE__ */ new Date()).toISOString()
-              })
-            );
-            await session.append({
-              type: "error",
-              ts: (/* @__PURE__ */ new Date()).toISOString(),
-              message: `\u{1F982} Chimera auto-fix skipped \u2014 mailbox unreachable: ${errMsg}. Falling back to manual review mode.`,
-              phase: "agent"
-            });
-          }
-          events.emitCustom("chimera.mailbox_delivered", {
-            subject,
-            autoFixMode: autoFix,
-            fileCount: p.files.length,
-            reviewLength: reviewText.length
-          });
-          if (!leaderOnline) {
-            try {
-              await mailbox.send({
-                from: "chimera-review",
-                to: "leader",
-                type: "note",
-                audience: "leaders",
-                subject: `\u23F0 Chimera review pending \u2014 ${p.files.length} file(s) checked`,
-                body: `The leader was offline when a chimera review completed. A full review result with "LEADER ACTION REQUIRED" directive is waiting in this mailbox from chimera-review. Open it, read the findings, and fix any Critical or High issues.`,
-                priority: "high"
-              });
-            } catch (wakeErr) {
-              console.warn(
-                JSON.stringify({
-                  level: "warn",
-                  event: "execution.chimera_wakeup_companion_failed",
-                  message: wakeErr instanceof Error ? wakeErr.message : String(wakeErr),
-                  timestamp: (/* @__PURE__ */ new Date()).toISOString()
-                })
-              );
-            }
-          }
-          const shouldSpawnFix = !spawnedFix && reviewHasFindings && (autoFix === "auto" || isAskMode && leaderApproved) && reviewText.length > 0;
-          if (shouldSpawnFix) {
-            spawnedFix = true;
-            const fixTaskDesc = [
-              `You are a fix agent. Apply the fixes requested in this review report.`,
-              ``,
-              `Repository: ${p.cwd}`,
-              ``,
-              `--- Review report ---`,
-              truncateAtCodePointBoundary(reviewText, 12e3),
-              ``,
-              `--- Changed files ---`,
-              p.files.map((f) => `- ${f.path}`).join("\n"),
-              ``,
-              `Read each file, understand the issue, apply fixes using the edit tool.`,
-              `After fixing, run the project's typecheck and linter to verify.`,
-              `Do NOT remove or reorder existing code unless the bug requires it.`
-            ].join("\n");
-            try {
-              const fixCfg = {
-                name: "chimera-fix",
-                role: "fixer",
-                maxIterations: 60,
-                maxToolCalls: 350,
-                timeoutMs: 12e5
-              };
-              const fixSubagentId = await dir.spawn(fixCfg);
-              try {
-                const fixTaskId = randomUUID4();
-                await dir.assign({
-                  id: fixTaskId,
-                  description: fixTaskDesc,
-                  subagentId: fixSubagentId
-                });
-                const fixResults = await dir.awaitTasks([fixTaskId]);
-                const fixResult = fixResults[0];
-                if (fixResult?.status === "success") {
-                  await session.append({
-                    type: "llm_response",
-                    ts: (/* @__PURE__ */ new Date()).toISOString(),
-                    content: [
-                      { type: "text", text: `Chimera fix subagent completed: ${fixResult.result}` }
-                    ],
-                    stopReason: "end_turn",
-                    usage: { input: 0, output: 0 }
-                  });
-                } else {
-                  await session.append({
-                    type: "error",
-                    ts: (/* @__PURE__ */ new Date()).toISOString(),
-                    message: `Chimera fix subagent ${fixResult?.status ?? "unknown"}: ${fixResult?.error?.message ?? "no result"}`,
-                    phase: "agent"
-                  });
-                }
-              } finally {
-                try {
-                  await dir.terminate(fixSubagentId);
-                } catch {
-                }
-              }
-            } catch (fixErr) {
-              await session.append({
-                type: "error",
-                ts: (/* @__PURE__ */ new Date()).toISOString(),
-                message: `\u{1F982} Chimera auto-fix failed: ${fixErr instanceof Error ? fixErr.message : String(fixErr)}`,
-                phase: "agent"
-              });
-            }
-          }
-        }
-      } catch (err) {
-        try {
-          await session.append({
-            type: "error",
-            ts: (/* @__PURE__ */ new Date()).toISOString(),
-            message: `\u{1F982} Chimera review failed: ${err instanceof Error ? err.message : String(err)}`,
-            phase: "agent"
-          });
-        } catch (appendErr) {
-          console.error(
-            JSON.stringify({
-              level: "error",
-              event: "execution.chimera_review_append_failed",
-              message: appendErr instanceof Error ? appendErr.message : String(appendErr),
-              timestamp: (/* @__PURE__ */ new Date()).toISOString()
-            })
-          );
-        }
-      } finally {
-        if (subagentId) {
-          try {
-            await dir.terminate(subagentId);
-          } catch {
-          }
-        }
-      }
-    })();
   });
   installChimeraCascadeHandler({
     events,
     director,
     session,
+    buildLadder: () => buildMutatingAgentLadder({
+      profileChain: effectiveFallbackChain2(config),
+      session: { provider: config.provider, model: config.model }
+    }),
     getPendingWork: () => pendingChimeraWork,
     setPendingWork: (work) => {
       pendingChimeraWork = work;
@@ -4651,7 +4809,7 @@ ${reviewBody}`;
           attachments,
           effectiveMaxContext,
           getEffectiveMaxContext,
-          projectName: path10.basename(projectRoot) || void 0,
+          projectName: path11.basename(projectRoot) || void 0,
           projectRoot,
           appConfig: config,
           getSessionId: () => agent.ctx.session?.id ?? session.id,
@@ -4709,4 +4867,4 @@ export {
   execute,
   resolveReviewerFallbackModels
 };
-//# sourceMappingURL=execution-A4PGK4XV.js.map
+//# sourceMappingURL=execution-HJ643JGZ.js.map