@wrongstack/core 0.1.9 → 0.2.0

package/dist/coordination/index.js

@@ -0,0 +1,2869 @@
+import { randomUUID, randomBytes } from 'crypto';
+import * as fsp4 from 'fs/promises';
+import * as path4 from 'path';
+import { EventEmitter } from 'events';
+
+// src/coordination/director.ts
+async function atomicWrite(targetPath, content, opts = {}) {
+  const dir = path4.dirname(targetPath);
+  await fsp4.mkdir(dir, { recursive: true });
+  const tmp = path4.join(dir, `.${path4.basename(targetPath)}.${randomBytes(6).toString("hex")}.tmp`);
+  try {
+    if (typeof content === "string") {
+      await fsp4.writeFile(tmp, content, { flag: "wx", encoding: opts.encoding ?? "utf8" });
+    } else {
+      await fsp4.writeFile(tmp, content, { flag: "wx" });
+    }
+    try {
+      const fh = await fsp4.open(tmp, "r+");
+      try {
+        await fh.sync();
+      } finally {
+        await fh.close();
+      }
+    } catch {
+    }
+    let mode;
+    try {
+      const stat3 = await fsp4.stat(targetPath);
+      mode = stat3.mode & 511;
+    } catch {
+      mode = opts.mode;
+    }
+    if (mode !== void 0) {
+      await fsp4.chmod(tmp, mode);
+    }
+    await fsp4.rename(tmp, targetPath);
+  } catch (err) {
+    try {
+      await fsp4.unlink(tmp);
+    } catch {
+    }
+    throw err;
+  }
+}
+async function ensureDir(dir) {
+  await fsp4.mkdir(dir, { recursive: true });
+}
+
+// src/storage/director-state.ts
+var DirectorStateCheckpoint = class {
+  snapshot;
+  filePath;
+  timer = null;
+  debounceMs;
+  writing = false;
+  rewriteRequested = false;
+  constructor(filePath, init, debounceMs = 250) {
+    this.filePath = filePath;
+    this.debounceMs = debounceMs;
+    this.snapshot = {
+      version: 1,
+      directorRunId: init.directorRunId,
+      updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      spawnCount: 0,
+      maxSpawns: init.maxSpawns,
+      spawnDepth: init.spawnDepth,
+      maxSpawnDepth: init.maxSpawnDepth,
+      subagents: [],
+      tasks: []
+    };
+  }
+  current() {
+    return this.snapshot;
+  }
+  recordSpawn(sub, spawnCount) {
+    this.snapshot = {
+      ...this.snapshot,
+      spawnCount,
+      subagents: [...this.snapshot.subagents.filter((s) => s.id !== sub.id), sub]
+    };
+    this.bumpUpdatedAt();
+    this.schedule();
+  }
+  recordTaskAssigned(task) {
+    const exists = this.snapshot.tasks.some((t) => t.taskId === task.taskId);
+    this.snapshot = {
+      ...this.snapshot,
+      tasks: exists ? this.snapshot.tasks.map((t) => t.taskId === task.taskId ? { ...t, ...task } : t) : [...this.snapshot.tasks, task]
+    };
+    this.bumpUpdatedAt();
+    this.schedule();
+  }
+  recordTaskStatus(taskId, patch) {
+    this.snapshot = {
+      ...this.snapshot,
+      tasks: this.snapshot.tasks.map(
+        (t) => t.taskId === taskId ? { ...t, ...patch } : t
+      )
+    };
+    this.bumpUpdatedAt();
+    this.schedule();
+  }
+  setUsage(usage) {
+    this.snapshot = { ...this.snapshot, usage };
+    this.bumpUpdatedAt();
+    this.schedule();
+  }
+  /** Force a synchronous flush — used by Director.shutdown(). */
+  async flush() {
+    if (this.timer) {
+      clearTimeout(this.timer);
+      this.timer = null;
+    }
+    await this.persist();
+  }
+  bumpUpdatedAt() {
+    this.snapshot = { ...this.snapshot, updatedAt: (/* @__PURE__ */ new Date()).toISOString() };
+  }
+  schedule() {
+    if (this.timer) return;
+    this.timer = setTimeout(() => {
+      this.timer = null;
+      void this.persist();
+    }, this.debounceMs);
+  }
+  async persist() {
+    if (this.writing) {
+      this.rewriteRequested = true;
+      return;
+    }
+    this.writing = true;
+    try {
+      await atomicWrite(this.filePath, JSON.stringify(this.snapshot, null, 2), {
+        mode: 384
+      });
+    } catch (err) {
+      console.warn(
+        "[director-state] checkpoint write failed:",
+        err instanceof Error ? err.message : String(err)
+      );
+    } finally {
+      this.writing = false;
+      if (this.rewriteRequested) {
+        this.rewriteRequested = false;
+        this.schedule();
+      }
+    }
+  }
+};
+
+// src/coordination/in-memory-transport.ts
+var InMemoryBridgeTransport = class {
+  subs = /* @__PURE__ */ new Map();
+  send(msg, to) {
+    if (to === "*") {
+      for (const [id, handlers2] of this.subs) {
+        if (id === msg.from) continue;
+        for (const h of handlers2) {
+          try {
+            h(msg);
+          } catch {
+          }
+        }
+      }
+      return Promise.resolve();
+    }
+    const handlers = this.subs.get(to);
+    if (handlers) {
+      for (const h of handlers) {
+        try {
+          h(msg);
+        } catch {
+        }
+      }
+    }
+    return Promise.resolve();
+  }
+  subscribe(agentId, handler) {
+    if (!this.subs.has(agentId)) this.subs.set(agentId, /* @__PURE__ */ new Set());
+    this.subs.get(agentId).add(handler);
+    return () => this.subs.get(agentId)?.delete(handler);
+  }
+  close(agentId) {
+    this.subs.delete(agentId);
+    return Promise.resolve();
+  }
+};
+
+// src/coordination/agent-bridge.ts
+var InMemoryAgentBridge = class {
+  agentId;
+  coordinatorId;
+  transport;
+  subscriptions = /* @__PURE__ */ new Set();
+  pendingRequests = /* @__PURE__ */ new Map();
+  stopped = false;
+  timeoutMs;
+  /** Guards request() so concurrent calls on the same id can't silently overwrite. */
+  inflightGuards = /* @__PURE__ */ new Set();
+  constructor(config, transport) {
+    this.agentId = config.agentId;
+    this.coordinatorId = config.coordinatorId;
+    this.transport = transport;
+    this.timeoutMs = config.timeoutMs ?? 3e4;
+    this.transport.subscribe(this.agentId, (msg) => {
+      if (msg.type === "heartbeat") return;
+      const pending = this.pendingRequests.get(msg.id);
+      if (pending) {
+        clearTimeout(pending.timer);
+        this.pendingRequests.delete(msg.id);
+        this.inflightGuards.delete(msg.id);
+        pending.resolve(msg);
+        return;
+      }
+      for (const h of this.subscriptions) {
+        try {
+          h(msg);
+        } catch {
+        }
+      }
+    });
+  }
+  async send(msg) {
+    msg.timestamp = Date.now();
+    await this.transport.send(msg, msg.to ?? this.coordinatorId);
+  }
+  async broadcast(msg) {
+    msg.timestamp = Date.now();
+    msg.to = "*";
+    await this.transport.send(msg, "*");
+  }
+  subscribe(handler) {
+    this.subscriptions.add(handler);
+    return () => this.subscriptions.delete(handler);
+  }
+  async request(msg, timeoutMs) {
+    if (this.stopped) throw new Error("Bridge is stopped");
+    const timeout = timeoutMs ?? this.timeoutMs;
+    const correlationId = msg.id;
+    if (this.inflightGuards.has(correlationId)) {
+      throw new Error(
+        `Bridge request id "${correlationId}" collides with an in-flight request \u2014 caller is reusing message ids`
+      );
+    }
+    this.inflightGuards.add(correlationId);
+    return new Promise((resolve, reject) => {
+      const timer = setTimeout(() => {
+        this.inflightGuards.delete(correlationId);
+        this.pendingRequests.delete(correlationId);
+        reject(new Error(`Request ${correlationId} timed out after ${timeout}ms`));
+      }, timeout);
+      this.pendingRequests.set(correlationId, {
+        resolve,
+        reject,
+        timer
+      });
+      msg.timestamp = Date.now();
+      this.transport.send(msg, msg.to ?? this.coordinatorId).catch((e) => {
+        clearTimeout(timer);
+        this.inflightGuards.delete(correlationId);
+        this.pendingRequests.delete(correlationId);
+        reject(e);
+      });
+    });
+  }
+  async stop() {
+    this.stopped = true;
+    for (const [, p] of this.pendingRequests) {
+      clearTimeout(p.timer);
+    }
+    this.pendingRequests.clear();
+    this.inflightGuards.clear();
+    this.subscriptions.clear();
+    await this.transport.close(this.agentId);
+  }
+};
+function createMessage(type, from, payload, to) {
+  return {
+    id: randomUUID(),
+    type,
+    from,
+    to,
+    payload,
+    timestamp: Date.now(),
+    priority: "normal"
+  };
+}
+
+// src/coordination/director-prompts.ts
+var DEFAULT_DIRECTOR_PREAMBLE = `You are the Director of a multi-agent fleet. You orchestrate worker
+subagents by spawning them, assigning tasks, awaiting completions, and
+rolling up their outputs into your next decision.
+
+Core fleet tools available to you:
+  - spawn_subagent       \u2014 create a worker with a chosen provider / model / role
+  - assign_task          \u2014 hand a piece of work to a specific subagent
+  - await_tasks          \u2014 block until named task ids complete (parallel-safe)
+  - ask_subagent         \u2014 synchronously query a running subagent via the bridge
+  - roll_up              \u2014 aggregate finished tasks into a markdown/json summary
+  - terminate_subagent   \u2014 abort a stuck worker (use sparingly)
+  - fleet_status         \u2014 snapshot of all subagents and pending tasks
+  - fleet_usage          \u2014 token + cost breakdown per subagent and total
+
+Working rules:
+  1. Decompose first. Before spawning, decide which sub-tasks are
+     independent and can run in parallel. Sequential work doesn't need a
+     subagent \u2014 do it yourself.
+  2. Match worker to job. Cheap/fast model for triage, capable model for
+     synthesis. Different providers per sibling is allowed and encouraged.
+  3. Always pair an assign with an await. Don't fire-and-forget; you owe
+     the user a single coherent answer at the end.
+  4. Roll up before deciding. After await_tasks resolves, call roll_up so
+     the results are folded back into your context in a compact form.
+  5. Budget is real. Check fleet_usage periodically. If a subagent is
+     thrashing, terminate it rather than letting cost climb silently.
+  6. Never claim a subagent's work as your own without verifying it. If a
+     result looks wrong, ask_subagent for clarification before passing it
+     to the user.`;
+var DEFAULT_SUBAGENT_BASELINE = `You are a subagent operating under a Director. You were spawned to handle
+a specific slice of a larger plan \u2014 do that slice well and report back.
+
+Bridge contract:
+  - You have a parent (the Director). You may call \`request\` on the
+    parent bridge to ask a clarifying question. Use this sparingly; the
+    parent is also working.
+  - You MAY NOT request the parent's system prompt, tool list, or other
+    subagents' context. Those are not yours to read.
+  - Your final task output is what the Director sees. Be concise,
+    structured, and self-contained \u2014 assume the Director will paste your
+    output into its own context.`;
+function composeDirectorPrompt(parts = {}) {
+  const sections = [];
+  const preamble = parts.directorPreamble ?? DEFAULT_DIRECTOR_PREAMBLE;
+  if (preamble && preamble.trim().length > 0) sections.push(preamble.trim());
+  if (parts.rosterSummary && parts.rosterSummary.trim().length > 0) {
+    sections.push(`Available roles you can spawn:
+${parts.rosterSummary.trim()}`);
+  }
+  if (parts.basePrompt && parts.basePrompt.trim().length > 0) {
+    sections.push(parts.basePrompt.trim());
+  }
+  return sections.join("\n\n");
+}
+function composeSubagentPrompt(parts = {}) {
+  const sections = [];
+  const baseline = parts.baseline ?? DEFAULT_SUBAGENT_BASELINE;
+  if (baseline && baseline.trim().length > 0) sections.push(baseline.trim());
+  if (parts.role && parts.role.trim().length > 0) {
+    sections.push(`Role:
+${parts.role.trim()}`);
+  }
+  if (parts.task && parts.task.trim().length > 0) {
+    sections.push(`Task:
+${parts.task.trim()}`);
+  }
+  if (parts.sharedScratchpad && parts.sharedScratchpad.trim().length > 0) {
+    sections.push(
+      `Shared notes:
+A scratchpad shared with the rest of the fleet is mounted at \`${parts.sharedScratchpad.trim()}\`.
+- Write your final findings as markdown files there (e.g. \`findings.md\`, \`security.md\`).
+- Before starting, list the directory and read any sibling files relevant to your task \u2014 they may already contain context you can build on.
+- Use stable filenames (one file per concern); overwrite instead of appending so the Director sees the latest state.`
+    );
+  }
+  if (parts.override && parts.override.trim().length > 0) {
+    sections.push(parts.override.trim());
+  }
+  return sections.join("\n\n");
+}
+function rosterSummaryFromConfigs(roster) {
+  const lines = [];
+  for (const [roleId, cfg] of Object.entries(roster)) {
+    const tag = cfg.provider && cfg.model ? ` (${cfg.provider}/${cfg.model})` : "";
+    const headline = cfg.prompt ? (cfg.prompt.split("\n").find((l) => l.trim().length > 0) ?? "").trim().slice(0, 80) : "";
+    const tail = headline ? ` \u2014 ${headline}` : "";
+    lines.push(`- ${roleId}: ${cfg.name}${tag}${tail}`);
+  }
+  return lines.join("\n");
+}
+
+// src/coordination/fleet-bus.ts
+var FleetBus = class {
+  byId = /* @__PURE__ */ new Map();
+  byType = /* @__PURE__ */ new Map();
+  any = /* @__PURE__ */ new Set();
+  /**
+   * Hook a subagent's EventBus into the fleet. EventBus is strongly
+   * typed and doesn't expose an `onAny` hook, so we subscribe to the
+   * canonical set of event types a subagent emits during a run. New
+   * event types added to the kernel must be added here too — but the
+   * cost is a tiny single line per type, and the explicit list keeps
+   * the wire format clear.
+   *
+   * Returns a disposer that detaches every subscription; call on
+   * subagent teardown so the listeners don't outlive the run.
+   */
+  attach(subagentId, bus, taskId) {
+    const FORWARDED_TYPES = [
+      "tool.started",
+      "tool.executed",
+      "tool.progress",
+      "tool.confirm_needed",
+      "iteration.started",
+      "iteration.completed",
+      "provider.text_delta",
+      // Subagent extended-thinking output. Forwarded so the FleetPanel /
+      // /fleet log can surface "the planner is thinking…" instead of a
+      // silent gap between iteration.started and the first text_delta.
+      "provider.thinking_delta",
+      "provider.response",
+      "provider.retry",
+      "provider.error",
+      "session.started",
+      "session.ended",
+      "session.damaged",
+      "compaction.fired",
+      "compaction.failed",
+      "token.threshold"
+    ];
+    const offs = [];
+    for (const t of FORWARDED_TYPES) {
+      offs.push(
+        bus.on(t, (payload) => {
+          this.emit({ subagentId, taskId, ts: Date.now(), type: t, payload });
+        })
+      );
+    }
+    return () => {
+      for (const off of offs) off();
+    };
+  }
+  /** Subscribe to every event from one subagent. */
+  subscribe(subagentId, handler) {
+    let set = this.byId.get(subagentId);
+    if (!set) {
+      set = /* @__PURE__ */ new Set();
+      this.byId.set(subagentId, set);
+    }
+    set.add(handler);
+    return () => {
+      set.delete(handler);
+    };
+  }
+  /** Subscribe to one event type across all subagents. */
+  filter(type, handler) {
+    let set = this.byType.get(type);
+    if (!set) {
+      set = /* @__PURE__ */ new Set();
+      this.byType.set(type, set);
+    }
+    set.add(handler);
+    return () => {
+      set.delete(handler);
+    };
+  }
+  /** Subscribe to literally everything. The fleet roll-up uses this. */
+  onAny(handler) {
+    this.any.add(handler);
+    return () => {
+      this.any.delete(handler);
+    };
+  }
+  emit(event) {
+    const byId = this.byId.get(event.subagentId);
+    if (byId)
+      for (const h of byId) {
+        try {
+          h(event);
+        } catch {
+        }
+      }
+    const byType = this.byType.get(event.type);
+    if (byType)
+      for (const h of byType) {
+        try {
+          h(event);
+        } catch {
+        }
+      }
+    for (const h of this.any) {
+      try {
+        h(event);
+      } catch {
+      }
+    }
+  }
+};
+var FleetUsageAggregator = class {
+  constructor(bus, priceLookup, metaLookup) {
+    this.bus = bus;
+    this.priceLookup = priceLookup;
+    this.metaLookup = metaLookup;
+    bus.filter("provider.response", (e) => this.onProviderResponse(e));
+    bus.filter("tool.executed", (e) => this.onToolExecuted(e));
+    bus.filter("iteration.started", (e) => this.onIterationStarted(e));
+  }
+  bus;
+  priceLookup;
+  metaLookup;
+  perSubagent = /* @__PURE__ */ new Map();
+  total = { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, cost: 0 };
+  /** Live snapshot — safe to call from a tool's execute() body. */
+  snapshot() {
+    return {
+      total: { ...this.total },
+      perSubagent: Object.fromEntries(
+        Array.from(this.perSubagent.entries()).map(([k, v]) => [k, { ...v }])
+      )
+    };
+  }
+  ensure(subagentId) {
+    let snap = this.perSubagent.get(subagentId);
+    if (!snap) {
+      const meta = this.metaLookup?.(subagentId);
+      snap = {
+        subagentId,
+        provider: meta?.provider,
+        model: meta?.model,
+        input: 0,
+        output: 0,
+        cacheRead: 0,
+        cacheWrite: 0,
+        cost: 0,
+        toolCalls: 0,
+        iterations: 0,
+        startedAt: Date.now(),
+        lastEventAt: Date.now()
+      };
+      this.perSubagent.set(subagentId, snap);
+    }
+    return snap;
+  }
+  onProviderResponse(e) {
+    const snap = this.ensure(e.subagentId);
+    const p = e.payload;
+    const usage = p?.usage;
+    if (!usage) return;
+    snap.input += usage.input ?? 0;
+    snap.output += usage.output ?? 0;
+    snap.cacheRead += usage.cacheRead ?? 0;
+    snap.cacheWrite += usage.cacheWrite ?? 0;
+    this.total.input += usage.input ?? 0;
+    this.total.output += usage.output ?? 0;
+    this.total.cacheRead += usage.cacheRead ?? 0;
+    this.total.cacheWrite += usage.cacheWrite ?? 0;
+    const price = this.priceLookup?.(e.subagentId);
+    if (price) {
+      const delta = (usage.input ?? 0) / 1e6 * (price.input ?? 0) + (usage.output ?? 0) / 1e6 * (price.output ?? 0) + (usage.cacheRead ?? 0) / 1e6 * (price.cacheRead ?? 0) + (usage.cacheWrite ?? 0) / 1e6 * (price.cacheWrite ?? 0);
+      snap.cost += delta;
+      this.total.cost += delta;
+    }
+    snap.lastEventAt = e.ts;
+  }
+  onToolExecuted(e) {
+    const snap = this.ensure(e.subagentId);
+    snap.toolCalls += 1;
+    snap.lastEventAt = e.ts;
+  }
+  onIterationStarted(e) {
+    const snap = this.ensure(e.subagentId);
+    snap.iterations += 1;
+    snap.lastEventAt = e.ts;
+  }
+};
+
+// src/types/errors.ts
+var WrongStackError = class extends Error {
+  code;
+  subsystem;
+  severity;
+  recoverable;
+  context;
+  constructor(opts) {
+    super(opts.message, { cause: opts.cause });
+    this.name = "WrongStackError";
+    this.code = opts.code;
+    this.subsystem = opts.subsystem;
+    this.severity = opts.severity ?? "error";
+    this.recoverable = opts.recoverable ?? false;
+    this.context = opts.context;
+  }
+  /**
+   * Render a one-line user-facing description.
+   * Subclasses should override for domain-specific formatting.
+   */
+  describe() {
+    const ctx = this.context ? ` ${formatContext(this.context)}` : "";
+    return `${this.code}: ${this.message}${ctx}`;
+  }
+};
+function formatContext(ctx) {
+  const parts = Object.entries(ctx).filter(([, v]) => v !== void 0).slice(0, 3).map(([k, v]) => `${k}=${String(v)}`);
+  return parts.length > 0 ? `[${parts.join(" ")}]` : "";
+}
+
+// src/types/provider.ts
+var ProviderError = class extends WrongStackError {
+  status;
+  retryable;
+  providerId;
+  body;
+  constructor(message, status, retryable, providerId, opts = {}) {
+    super({
+      message,
+      code: providerStatusToCode(status, opts.body?.type),
+      subsystem: "provider",
+      severity: status >= 500 ? "error" : "warning",
+      recoverable: retryable,
+      context: { providerId, status },
+      cause: opts.cause
+    });
+    this.name = "ProviderError";
+    this.status = status;
+    this.retryable = retryable;
+    this.providerId = providerId;
+    this.body = opts.body;
+  }
+  /**
+   * Render a one-line, user-facing description. Designed for the CLI/TUI
+   * status line and the agent's retry warning. Avoids dumping raw JSON
+   * (which is what users see today when a 529 lands and the log message
+   * includes the full `{"type":"error",...}` body).
+   *
+   * Examples:
+   *   "minimax-coding-plan overloaded (529): High traffic detected. Upgrade for highspeed model. [req 06534785201de9c0…]"
+   *   "openai rate limited (429): Retry after 12s"
+   *   "anthropic invalid request (400): messages.0.role must be one of 'user'|'assistant'"
+   *   "groq HTTP 500 (server error)"
+   */
+  describe() {
+    const kind = describeStatus(this.status, this.body?.type);
+    const head = `${this.providerId} ${kind}`;
+    const detail = this.body?.message?.trim();
+    const reqId = this.body?.requestId ? ` [req ${this.body.requestId.slice(0, 16)}${this.body.requestId.length > 16 ? "\u2026" : ""}]` : "";
+    if (detail && detail.length > 0) {
+      return `${head}: ${truncate(detail, 240)}${reqId}`;
+    }
+    return `${head}${reqId}`;
+  }
+};
+function describeStatus(status, type) {
+  if (status === 0) return "network error";
+  if (type === "overloaded_error" || status === 529) return `overloaded (${status})`;
+  if (type === "rate_limit_error" || status === 429) return `rate limited (${status})`;
+  if (type === "authentication_error" || status === 401) return `auth failed (${status})`;
+  if (type === "permission_error" || status === 403) return `forbidden (${status})`;
+  if (type === "not_found_error" || status === 404) return `not found (${status})`;
+  if (type === "invalid_request_error" || status === 400) return `invalid request (${status})`;
+  if (status === 408) return `timeout (${status})`;
+  if (status >= 500 && status < 600) return `HTTP ${status} (server error)`;
+  if (type) return `${type} (${status})`;
+  return `HTTP ${status}`;
+}
+function truncate(s, n) {
+  return s.length <= n ? s : `${s.slice(0, n - 1)}\u2026`;
+}
+function providerStatusToCode(status, type) {
+  if (status === 0) return "PROVIDER_NETWORK_ERROR";
+  if (type === "rate_limit_error" || status === 429) return "PROVIDER_RATE_LIMITED";
+  if (type === "authentication_error" || status === 401) return "PROVIDER_AUTH_FAILED";
+  if (type === "overloaded_error" || status === 529) return "PROVIDER_OVERLOADED";
+  if (type === "invalid_request_error" || status === 400) return "PROVIDER_INVALID_REQUEST";
+  if (status === 408) return "PROVIDER_NETWORK_ERROR";
+  if (status >= 500) return "PROVIDER_SERVER_ERROR";
+  return "PROVIDER_INVALID_REQUEST";
+}
+
+// src/coordination/subagent-budget.ts
+var BudgetExceededError = class extends Error {
+  kind;
+  limit;
+  observed;
+  constructor(kind, limit, observed) {
+    super(`Budget exceeded: ${kind} (limit=${limit}, observed=${observed})`);
+    this.name = "BudgetExceededError";
+    this.kind = kind;
+    this.limit = limit;
+    this.observed = observed;
+  }
+};
+var SubagentBudget = class {
+  limits;
+  iterations = 0;
+  toolCalls = 0;
+  tokenInput = 0;
+  tokenOutput = 0;
+  costUsd = 0;
+  startTime = null;
+  constructor(limits = {}) {
+    this.limits = Object.freeze({ ...limits });
+  }
+  start() {
+    this.startTime = Date.now();
+  }
+  recordIteration() {
+    this.iterations++;
+    if (this.limits.maxIterations !== void 0 && this.iterations > this.limits.maxIterations) {
+      throw new BudgetExceededError("iterations", this.limits.maxIterations, this.iterations);
+    }
+  }
+  recordToolCall() {
+    this.toolCalls++;
+    if (this.limits.maxToolCalls !== void 0 && this.toolCalls > this.limits.maxToolCalls) {
+      throw new BudgetExceededError("tool_calls", this.limits.maxToolCalls, this.toolCalls);
+    }
+  }
+  recordUsage(usage, costUsd = 0) {
+    this.tokenInput += usage.input;
+    this.tokenOutput += usage.output;
+    this.costUsd += costUsd;
+    const totalTokens = this.tokenInput + this.tokenOutput;
+    if (this.limits.maxTokens !== void 0 && totalTokens > this.limits.maxTokens) {
+      throw new BudgetExceededError("tokens", this.limits.maxTokens, totalTokens);
+    }
+    if (this.limits.maxCostUsd !== void 0 && this.costUsd > this.limits.maxCostUsd) {
+      throw new BudgetExceededError("cost", this.limits.maxCostUsd, this.costUsd);
+    }
+  }
+  /**
+   * Throws if the wall-clock budget is exhausted. Call this from the iteration
+   * loop so a hung tool can't keep a subagent running past its deadline.
+   */
+  checkTimeout() {
+    if (this.startTime === null || this.limits.timeoutMs === void 0) return;
+    const elapsed = Date.now() - this.startTime;
+    if (elapsed > this.limits.timeoutMs) {
+      throw new BudgetExceededError("timeout", this.limits.timeoutMs, elapsed);
+    }
+  }
+  /** Returns true if a timeout has occurred without throwing. Useful for races. */
+  isTimedOut() {
+    if (this.startTime === null || this.limits.timeoutMs === void 0) return false;
+    return Date.now() - this.startTime > this.limits.timeoutMs;
+  }
+  usage() {
+    return {
+      iterations: this.iterations,
+      toolCalls: this.toolCalls,
+      tokens: {
+        input: this.tokenInput,
+        output: this.tokenOutput,
+        total: this.tokenInput + this.tokenOutput
+      },
+      costUsd: this.costUsd,
+      elapsedMs: this.startTime === null ? 0 : Date.now() - this.startTime
+    };
+  }
+};
+
+// src/coordination/multi-agent-coordinator.ts
+var DefaultMultiAgentCoordinator = class extends EventEmitter {
+  coordinatorId;
+  config;
+  runner;
+  subagents = /* @__PURE__ */ new Map();
+  pendingTasks = [];
+  completedResults = [];
+  totalIterations = 0;
+  inFlight = 0;
+  /**
+   * Subagents currently being stopped. Set on entry to `stop()`, cleared
+   * once `recordCompletion` lands the terminal TaskResult. Used by
+   * `runDispatched` and `findIdleSubagent` to refuse mid-flight dispatch
+   * to a subagent the caller has already asked to terminate — closes the
+   * assign+terminate race where a fresh task could land on a worker that
+   * was about to be killed.
+   */
+  terminating = /* @__PURE__ */ new Set();
+  constructor(config, options = {}) {
+    super();
+    this.coordinatorId = config.coordinatorId;
+    this.config = config;
+    this.runner = options.runner;
+  }
+  /**
+   * Replace the runner after construction. Used when the runner depends
+   * on infrastructure (e.g. FleetBus) that isn't available until after
+   * the coordinator's owning Director is built.
+   */
+  setRunner(runner) {
+    this.runner = runner;
+  }
+  async spawn(subagent) {
+    const id = subagent.id || randomUUID();
+    if (this.subagents.has(id)) {
+      throw new Error(`Subagent id "${id}" already exists \u2014 refusing to overwrite`);
+    }
+    const context = {
+      subagentId: id,
+      tasks: [],
+      // Wired later by the caller via setSubagentBridge() once the
+      // bidirectional bridge is created. Readers must null-check / use
+      // hasParentBridge() — the type now reflects this.
+      parentBridge: null,
+      doneCondition: this.config.doneCondition,
+      maxConcurrent: this.config.maxConcurrent ?? 4
+    };
+    this.subagents.set(id, {
+      config: { ...subagent, id },
+      context,
+      status: "idle",
+      abortController: new AbortController()
+    });
+    this.emit("subagent.started", { subagent: { ...subagent, id } });
+    return { subagentId: id, agentId: id };
+  }
+  async assign(task) {
+    this.pendingTasks.push(task);
+    this.tryDispatchNext();
+  }
+  async delegate(to, msg) {
+    const subagent = this.subagents.get(to);
+    if (!subagent) throw new Error(`Subagent "${to}" not found`);
+    if (!subagent.context.parentBridge) {
+      throw new Error(`Subagent "${to}" has no parentBridge \u2014 call setSubagentBridge() first`);
+    }
+    await subagent.context.parentBridge.send(msg);
+  }
+  /**
+   * Wire up the communication bridge for a subagent. Call after spawn() once
+   * the caller has created the bidirectional connection.
+   */
+  setSubagentBridge(subagentId, bridge) {
+    const subagent = this.subagents.get(subagentId);
+    if (!subagent) throw new Error(`Subagent "${subagentId}" not found`);
+    subagent.context.parentBridge = bridge;
+  }
+  async stop(subagentId) {
+    const subagent = this.subagents.get(subagentId);
+    if (!subagent) return;
+    this.terminating.add(subagentId);
+    subagent.abortController.abort();
+    subagent.status = "stopped";
+    subagent.currentTask = void 0;
+    subagent.context.parentBridge = null;
+    this.emit("subagent.stopped", { subagentId, reason: "stopped by coordinator" });
+  }
+  async stopAll() {
+    this.drainPendingAsAborted("Coordinator stopAll() drained the pending queue");
+    await Promise.allSettled([...this.subagents.keys()].map((id) => this.stop(id)));
+  }
+  getStatus() {
+    return {
+      coordinatorId: this.coordinatorId,
+      subagents: Array.from(this.subagents.entries()).map(([id, s]) => ({
+        id,
+        name: s.config.name,
+        status: s.status,
+        currentTask: s.currentTask
+      })),
+      pendingTasks: this.pendingTasks.length,
+      completedTasks: this.completedResults.length,
+      totalIterations: this.totalIterations,
+      done: this.isDone()
+    };
+  }
+  /** Expose snapshot of completed results — useful for callers awaiting all done. */
+  results() {
+    return this.completedResults;
+  }
+  /**
+   * Manual completion — for callers that drive subagents without a runner
+   * (e.g. external orchestrators). When a runner is configured the coordinator
+   * calls this itself.
+   */
+  completeTask(result) {
+    this.recordCompletion(result);
+  }
+  // --- internal dispatching ---------------------------------------------
+  tryDispatchNext() {
+    while (this.canDispatch()) {
+      const subagentId = this.findIdleSubagent();
+      if (!subagentId) {
+        if (this.pendingTasks.length > 0 && !this.hasLiveSubagent()) {
+          this.drainPendingAsAborted(
+            "No live subagent available \u2014 all stopped or mid-termination"
+          );
+        }
+        return;
+      }
+      const task = this.pendingTasks.shift();
+      if (!task) return;
+      this.runDispatched(subagentId, task).catch((err) => {
+        this.recordCompletion({
+          subagentId,
+          taskId: task.id,
+          status: "failed",
+          error: classifySubagentError(err),
+          iterations: 0,
+          toolCalls: 0,
+          durationMs: 0
+        });
+      });
+    }
+  }
+  canDispatch() {
+    const max = this.config.maxConcurrent ?? 4;
+    return this.inFlight < max && this.pendingTasks.length > 0;
+  }
+  findIdleSubagent() {
+    for (const [id, s] of this.subagents) {
+      if (s.status === "idle" && !this.terminating.has(id)) return id;
+    }
+    return null;
+  }
+  /**
+   * Returns true iff at least one spawned subagent could still
+   * process a task. A "live" subagent is one that is not stopped
+   * AND not mid-termination — `running` workers count because they
+   * will eventually finish and become idle.
+   *
+   * When no subagent has ever been spawned, returns `true` so a
+   * pre-spawn `assign()` simply queues (legacy behaviour). The
+   * dead-end detection only fires after `stop()` has retired every
+   * spawned worker.
+   *
+   * Used by `tryDispatchNext` to detect a dead-end pending queue.
+   */
+  hasLiveSubagent() {
+    if (this.subagents.size === 0) return true;
+    for (const [id, s] of this.subagents) {
+      if (s.status !== "stopped" && !this.terminating.has(id)) return true;
+    }
+    return false;
+  }
+  /**
+   * Drain every pending task with a synthetic `aborted_by_parent`
+   * completion event. Same shape as the `stopAll()` drain — we go
+   * around `recordCompletion` because pending tasks were never
+   * counted in `inFlight` and routing them through would trip the
+   * underflow guard on every task after the first.
+   */
+  drainPendingAsAborted(message) {
+    const dropped = this.pendingTasks.splice(0, this.pendingTasks.length);
+    for (const t of dropped) {
+      const synthetic = {
+        subagentId: t.subagentId ?? "unassigned",
+        taskId: t.id,
+        status: "stopped",
+        error: {
+          kind: "aborted_by_parent",
+          message,
+          retryable: false
+        },
+        iterations: 0,
+        toolCalls: 0,
+        durationMs: 0
+      };
+      this.completedResults.push(synthetic);
+      this.emit("task.completed", { task: t, result: synthetic });
+    }
+  }
+  async runDispatched(subagentId, task) {
+    const subagent = this.subagents.get(subagentId);
+    if (!subagent) return;
+    if (this.terminating.has(subagentId) || subagent.status === "stopped") {
+      this.recordCompletion({
+        subagentId,
+        taskId: task.id,
+        status: "stopped",
+        error: {
+          kind: "aborted_by_parent",
+          message: "Subagent was terminated before task could start",
+          retryable: false
+        },
+        iterations: 0,
+        toolCalls: 0,
+        durationMs: 0
+      });
+      return;
+    }
+    subagent.status = "running";
+    subagent.currentTask = task.id;
+    task.subagentId = subagentId;
+    subagent.context.tasks.push(task);
+    this.emit("task.assigned", { task, subagentId });
+    const budget = new SubagentBudget({
+      maxIterations: subagent.config.maxIterations ?? this.config.defaultBudget?.maxIterations,
+      maxToolCalls: task.maxToolCalls ?? subagent.config.maxToolCalls ?? this.config.defaultBudget?.maxToolCalls,
+      maxTokens: subagent.config.maxTokens ?? this.config.defaultBudget?.maxTokens,
+      maxCostUsd: subagent.config.maxCostUsd ?? this.config.defaultBudget?.maxCostUsd,
+      timeoutMs: task.timeoutMs ?? subagent.config.timeoutMs ?? this.config.defaultBudget?.timeoutMs
+    });
+    subagent.activeBudget = budget;
+    if (!this.runner) {
+      return;
+    }
+    this.inFlight++;
+    const startTime = Date.now();
+    const runCtx = {
+      subagentId,
+      config: subagent.config,
+      budget,
+      signal: subagent.abortController.signal,
+      bridge: subagent.context.parentBridge || null
+    };
+    let result;
+    budget.start();
+    try {
+      const outcome = await this.executeWithTimeout(this.runner, task, runCtx, budget);
+      result = {
+        subagentId,
+        taskId: task.id,
+        status: "success",
+        result: outcome.result,
+        iterations: outcome.iterations,
+        toolCalls: outcome.toolCalls,
+        durationMs: Date.now() - startTime
+      };
+    } catch (err) {
+      const status = err instanceof BudgetExceededError && err.kind === "timeout" ? "timeout" : subagent.abortController.signal.aborted ? "stopped" : "failed";
+      const usage = budget.usage();
+      result = {
+        subagentId,
+        taskId: task.id,
+        status,
+        error: classifySubagentError(err, {
+          parentAborted: subagent.abortController.signal.aborted
+        }),
+        iterations: usage.iterations,
+        toolCalls: usage.toolCalls,
+        durationMs: Date.now() - startTime
+      };
+    }
+    this.recordCompletion(result);
+  }
+  async executeWithTimeout(runner, task, ctx, budget) {
+    const timeoutMs = budget.limits.timeoutMs;
+    if (timeoutMs === void 0) return runner(task, ctx);
+    let timer = null;
+    const timeoutPromise = new Promise((_, reject) => {
+      timer = setTimeout(() => {
+        this.subagents.get(ctx.subagentId)?.abortController.abort();
+        reject(new BudgetExceededError("timeout", timeoutMs, Date.now()));
+      }, timeoutMs);
+    });
+    try {
+      return await Promise.race([runner(task, ctx), timeoutPromise]);
+    } finally {
+      if (timer) clearTimeout(timer);
+    }
+  }
+  recordCompletion(result) {
+    this.completedResults.push(result);
+    this.totalIterations += result.iterations;
+    if (this.inFlight > 0) {
+      this.inFlight--;
+    } else if (this.runner) {
+      this.emit("warning", {
+        type: "inFlight_underflow",
+        taskId: result.taskId,
+        subagentId: result.subagentId
+      });
+      return;
+    }
+    const subagent = this.subagents.get(result.subagentId);
+    if (subagent && subagent.status !== "stopped") {
+      result.status === "failed" || result.status === "timeout";
+      subagent.status = "idle";
+      subagent.currentTask = void 0;
+      if (subagent.abortController.signal.aborted) {
+        subagent.abortController = new AbortController();
+      }
+    }
+    this.terminating.delete(result.subagentId);
+    this.emit("task.completed", {
+      task: subagent?.context.tasks.find((t) => t.id === result.taskId) ?? { id: result.taskId },
+      result
+    });
+    this.tryDispatchNext();
+    if (this.isDone()) {
+      this.emit("done", {
+        results: this.completedResults,
+        totalIterations: this.totalIterations
+      });
+    }
+  }
+  isDone() {
+    if (this.config.doneCondition.type === "all_tasks_done") {
+      return this.pendingTasks.length === 0 && this.inFlight === 0;
+    }
+    if (this.config.doneCondition.maxIterations !== void 0 && this.totalIterations >= this.config.doneCondition.maxIterations) {
+      return true;
+    }
+    return false;
+  }
+};
+function classifySubagentError(err, hints = {}) {
+  const cause = err instanceof Error ? { name: err.name, message: err.message, stack: err.stack } : void 0;
+  const baseMessage = err instanceof Error ? err.message : String(err);
+  if (err instanceof ProviderError) {
+    return providerErrorToSubagentError(err, baseMessage, cause);
+  }
+  if (err instanceof BudgetExceededError) {
+    const map = {
+      iterations: "budget_iterations",
+      tool_calls: "budget_tool_calls",
+      tokens: "budget_tokens",
+      cost: "budget_cost",
+      timeout: "budget_timeout"
+    };
+    return {
+      kind: map[err.kind],
+      message: baseMessage,
+      // Budgets are user-configured ceilings, not transient failures —
+      // retrying with the same budget will hit the same ceiling. The
+      // orchestrator must raise the budget or narrow the task first.
+      retryable: false,
+      cause
+    };
+  }
+  if (hints.parentAborted) {
+    return {
+      kind: "aborted_by_parent",
+      message: baseMessage,
+      retryable: false,
+      cause
+    };
+  }
+  const lower = baseMessage.toLowerCase();
+  if (/agent aborted$/i.test(baseMessage)) {
+    return {
+      kind: "aborted_by_parent",
+      message: baseMessage,
+      retryable: false,
+      cause
+    };
+  }
+  if (/agent exhausted iteration limit$/i.test(baseMessage)) {
+    return { kind: "budget_iterations", message: baseMessage, retryable: false, cause };
+  }
+  if (/empty response$/i.test(baseMessage)) {
+    return { kind: "empty_response", message: baseMessage, retryable: false, cause };
+  }
+  if (/^tool failed: /i.test(baseMessage)) {
+    return { kind: "tool_failed", message: baseMessage, retryable: false, cause };
+  }
+  if (lower.includes("bridge transport") || /bridge.*(closed|disconnect)/i.test(baseMessage)) {
+    return { kind: "bridge_failed", message: baseMessage, retryable: false, cause };
+  }
+  if (/context length|max.*tokens?.*exceeded|prompt is too long/i.test(baseMessage)) {
+    return { kind: "context_overflow", message: baseMessage, retryable: false, cause };
+  }
+  return {
+    kind: "unknown",
+    message: baseMessage,
+    retryable: false,
+    cause
+  };
+}
+function providerErrorToSubagentError(err, message, cause) {
+  const status = err.status;
+  if (status === 429 || err.body?.type === "rate_limit_error") {
+    return {
+      kind: "provider_rate_limit",
+      message,
+      retryable: true,
+      // Conservative default: 5s. Provider-specific code can override
+      // by emitting an error whose body carries an explicit hint.
+      backoffMs: 5e3,
+      cause
+    };
+  }
+  if (status === 401 || status === 403 || err.body?.type === "authentication_error") {
+    return { kind: "provider_auth", message, retryable: false, cause };
+  }
+  if (status === 408 || status === 0) {
+    return { kind: "provider_timeout", message, retryable: true, cause };
+  }
+  if (status >= 500 && status < 600) {
+    return {
+      kind: "provider_5xx",
+      message,
+      retryable: true,
+      backoffMs: 3e3,
+      cause
+    };
+  }
+  return { kind: "unknown", message, retryable: err.retryable, cause };
+}
+
+// src/coordination/director.ts
+var DirectorBudgetError = class extends Error {
+  kind;
+  limit;
+  observed;
+  constructor(kind, limit, observed) {
+    super(
+      kind === "max_spawns" ? `Director spawn budget exceeded: tried to spawn #${observed} but maxSpawns is ${limit}` : `Director spawn depth budget exceeded: this director is at depth ${observed} and maxSpawnDepth is ${limit}`
+    );
+    this.name = "DirectorBudgetError";
+    this.kind = kind;
+    this.limit = limit;
+    this.observed = observed;
+  }
+};
+var Director = class {
+  id;
+  fleet;
+  usage;
+  /**
+   * Director-side bridge endpoint. Subagents are wired to the same
+   * in-memory transport so the director can `ask()` them synchronously
+   * and they can `send()` progress back. Exposed so external code (e.g.
+   * the TUI) can subscribe to inbound messages.
+   */
+  bridge;
+  transport;
+  coordinator;
+  /** Resolves with the matching `TaskResult` the first time the
+   *  coordinator emits `task.completed` for a given task id. Each entry
+   *  is created lazily on first poll/await and cleared once consumed. */
+  taskWaiters = /* @__PURE__ */ new Map();
+  /** Cache of completed results in case the consumer asks AFTER the
+   *  coordinator already fired the event — `awaitTasks(['t-1'])` after
+   *  t-1 finished should resolve immediately, not hang. */
+  completed = /* @__PURE__ */ new Map();
+  /** Per-subagent provider/model metadata, captured at spawn time so the
+   *  FleetUsageAggregator's metaLookup can surface readable rows. */
+  subagentMeta = /* @__PURE__ */ new Map();
+  priceLookups = /* @__PURE__ */ new Map();
+  /** Bridge endpoints we created per subagent (so we can `stop()` them
+   *  on shutdown and free transport subscriptions). */
+  subagentBridges = /* @__PURE__ */ new Map();
+  /** Tracks per-spawn config + assigned task ids for manifest writing. */
+  manifestEntries = /* @__PURE__ */ new Map();
+  manifestPath;
+  roster;
+  directorPreamble;
+  subagentBaseline;
+  /** Absolute path to the fleet's shared scratchpad directory, or null
+   *  when none was configured. Exposed as a readonly getter for callers
+   *  that need to surface the path to the user (e.g. the CLI logging
+   *  the location after `--director` boots). */
+  sharedScratchpadPath;
+  /** Spawn cap (lifetime total). Infinity means unlimited. */
+  maxSpawns;
+  /** Nesting cap. The N-th director in a chain has `spawnDepth = N-1`. */
+  maxSpawnDepth;
+  /** This director's position in a director chain. Root director = 0. */
+  spawnDepth;
+  /** Live spawn counter for `maxSpawns` enforcement. */
+  spawnCount = 0;
+  /** Optional checkpoint mirror — writes the live task graph + roster to disk. */
+  stateCheckpoint;
+  /** Optional session writer for emitting task_* / agent_* lifecycle events. */
+  sessionWriter;
+  /** Debounce timer for periodic manifest writes. */
+  manifestTimer = null;
+  manifestDebounceMs;
+  /** Resolves task descriptions back from `assign()` so completion events
+   *  can also carry a human-readable title. */
+  taskDescriptions = /* @__PURE__ */ new Map();
+  /** Snapshot of which subagent owns each task — drives state-checkpoint
+   *  status updates without re-walking the manifest. */
+  taskOwners = /* @__PURE__ */ new Map();
+  /**
+   * Handle to the coordinator-side `task.completed` listener so we can
+   * unsubscribe in `shutdown()`. Without this, repeated Director
+   * construction (e.g. tests, hot reloads) accumulates listeners on a
+   * cached coordinator and slowly drifts the EventEmitter past its
+   * default cap.
+   */
+  taskCompletedListener = null;
+  constructor(opts) {
+    this.id = opts.config.coordinatorId || randomUUID();
+    this.manifestPath = opts.manifestPath;
+    this.roster = opts.roster;
+    this.directorPreamble = opts.directorPreamble ?? DEFAULT_DIRECTOR_PREAMBLE;
+    this.subagentBaseline = opts.subagentBaseline ?? DEFAULT_SUBAGENT_BASELINE;
+    this.sharedScratchpadPath = opts.sharedScratchpadPath ?? null;
+    this.maxSpawns = opts.maxSpawns ?? Number.POSITIVE_INFINITY;
+    this.maxSpawnDepth = opts.maxSpawnDepth ?? 2;
+    this.spawnDepth = opts.spawnDepth ?? 0;
+    this.sessionWriter = opts.sessionWriter ?? null;
+    this.manifestDebounceMs = opts.manifestDebounceMs ?? 2e3;
+    this.stateCheckpoint = opts.stateCheckpointPath ? new DirectorStateCheckpoint(opts.stateCheckpointPath, {
+      directorRunId: this.id,
+      maxSpawns: opts.maxSpawns,
+      spawnDepth: this.spawnDepth,
+      maxSpawnDepth: this.maxSpawnDepth
+    }) : null;
+    if (this.sharedScratchpadPath) {
+      void fsp4.mkdir(this.sharedScratchpadPath, { recursive: true }).catch(() => void 0);
+    }
+    this.transport = new InMemoryBridgeTransport();
+    this.bridge = new InMemoryAgentBridge(
+      { agentId: this.id, coordinatorId: this.id },
+      this.transport
+    );
+    this.fleet = new FleetBus();
+    this.usage = new FleetUsageAggregator(
+      this.fleet,
+      (id) => this.priceLookups.get(id),
+      (id) => this.subagentMeta.get(id)
+    );
+    this.coordinator = new DefaultMultiAgentCoordinator(
+      { ...opts.config, coordinatorId: this.id },
+      { runner: opts.runner }
+    );
+    this.taskCompletedListener = (payload) => {
+      const r = payload.result;
+      this.completed.set(r.taskId, r);
+      const waiter = this.taskWaiters.get(r.taskId);
+      if (waiter) {
+        waiter.resolve(r);
+        this.taskWaiters.delete(r.taskId);
+      }
+      const title = this.taskDescriptions.get(r.taskId) ?? payload.task.description ?? r.taskId;
+      const failed = r.status !== "success";
+      const errorString = r.error ? `${r.error.kind}: ${r.error.message}` : void 0;
+      this.stateCheckpoint?.recordTaskStatus(r.taskId, {
+        status: failed ? r.status : "completed",
+        completedAt: (/* @__PURE__ */ new Date()).toISOString(),
+        iterations: r.iterations,
+        toolCalls: r.toolCalls,
+        durationMs: r.durationMs,
+        error: errorString
+      });
+      this.stateCheckpoint?.setUsage(this.usage.snapshot());
+      void this.appendSessionEvent(
+        failed ? {
+          type: "task_failed",
+          ts: (/* @__PURE__ */ new Date()).toISOString(),
+          taskId: r.taskId,
+          title,
+          error: errorString ?? r.status
+        } : {
+          type: "task_completed",
+          ts: (/* @__PURE__ */ new Date()).toISOString(),
+          taskId: r.taskId,
+          title
+        }
+      );
+      this.scheduleManifest();
+    };
+    this.coordinator.on("task.completed", this.taskCompletedListener);
+  }
+  /** Best-effort session-writer append. Swallows failures — the director
+   *  must not break a fleet run because the session JSONL handle closed. */
+  async appendSessionEvent(event) {
+    if (!this.sessionWriter) return;
+    try {
+      await this.sessionWriter.append(event);
+    } catch {
+    }
+  }
+  /** Debounced manifest writer. A burst of spawn/assign/complete events
+   *  collapses into one write. Set `manifestDebounceMs` to 0 to disable. */
+  scheduleManifest() {
+    if (!this.manifestPath || this.manifestDebounceMs <= 0) return;
+    if (this.manifestTimer) return;
+    this.manifestTimer = setTimeout(() => {
+      this.manifestTimer = null;
+      void this.writeManifest().catch(() => void 0);
+    }, this.manifestDebounceMs);
+  }
+  /**
+   * Spawn a subagent. Identical to the coordinator's `spawn()` but
+   * captures provider/model metadata for the usage aggregator and
+   * lets the FleetBus attach to the runner's EventBus when the task
+   * actually runs (see `attachSubagentBus`).
+   *
+   * Caller-supplied `priceLookup` is optional but recommended — without
+   * it the `cost` column in `usage.snapshot()` stays at 0.
+   */
+  async spawn(config, priceLookup) {
+    if (this.spawnDepth >= this.maxSpawnDepth) {
+      throw new DirectorBudgetError("max_spawn_depth", this.maxSpawnDepth, this.spawnDepth);
+    }
+    if (this.spawnCount >= this.maxSpawns) {
+      throw new DirectorBudgetError("max_spawns", this.maxSpawns, this.spawnCount + 1);
+    }
+    this.spawnCount += 1;
+    const result = await this.coordinator.spawn(config);
+    this.subagentMeta.set(result.subagentId, {
+      provider: config.provider,
+      model: config.model
+    });
+    if (priceLookup) this.priceLookups.set(result.subagentId, priceLookup);
+    const subagentBridge = new InMemoryAgentBridge(
+      { agentId: result.subagentId, coordinatorId: this.id },
+      this.transport
+    );
+    this.coordinator.setSubagentBridge(result.subagentId, subagentBridge);
+    this.subagentBridges.set(result.subagentId, subagentBridge);
+    this.manifestEntries.set(result.subagentId, {
+      subagentId: result.subagentId,
+      name: config.name,
+      role: config.role,
+      provider: config.provider,
+      model: config.model,
+      taskIds: []
+    });
+    const spawnedAt = (/* @__PURE__ */ new Date()).toISOString();
+    this.stateCheckpoint?.recordSpawn(
+      {
+        id: result.subagentId,
+        name: config.name,
+        role: config.role,
+        provider: config.provider,
+        model: config.model,
+        spawnedAt
+      },
+      this.spawnCount
+    );
+    void this.appendSessionEvent({
+      type: "agent_spawned",
+      ts: spawnedAt,
+      agentId: result.subagentId,
+      role: config.role ?? config.name
+    });
+    this.scheduleManifest();
+    return result.subagentId;
+  }
+  /**
+   * Synchronously ask a subagent something via the bridge. Sends a
+   * `task` message addressed to the subagent and awaits a matching
+   * reply (matched by message id). Subagent runners that handle these
+   * requests subscribe to `ctx.bridge` and reply with a message whose
+   * `id` equals the incoming request's id (see `InMemoryAgentBridge`'s
+   * `request<T>` implementation).
+   *
+   * Returns the response payload directly (the bridge wrapper is
+   * unwrapped for ergonomics). Times out after `timeoutMs` (default
+   * matches the bridge's own default of 30s) — surface those rejections
+   * to the caller as actionable errors instead of letting tools hang.
+   */
+  async ask(subagentId, payload, timeoutMs) {
+    if (!this.subagentBridges.has(subagentId)) {
+      throw new Error(
+        `ask: unknown subagent "${subagentId}" (spawn() it first; current fleet: ${Array.from(this.subagentBridges.keys()).join(", ") || "(empty)"})`
+      );
+    }
+    const msg = {
+      id: randomUUID(),
+      type: "task",
+      from: this.id,
+      to: subagentId,
+      payload,
+      timestamp: Date.now(),
+      priority: "normal"
+    };
+    const reply = await this.bridge.request(msg, timeoutMs);
+    return reply.payload;
+  }
+  /**
+   * Read completed task results and format them as a structured text
+   * block the director's LLM can paste into its own context. The
+   * Director keeps every completed `TaskResult` in `completed` so this
+   * is a pure read — no bridge round-trip, cheap to call.
+   *
+   * The returned string is intentionally markdown-flavored: headers per
+   * subagent, a one-line meta row (iter / tools / ms), and the task's
+   * result text. Pass `style: 'json'` for a programmatic shape instead
+   * (useful when the director model is doing structured-output work).
+   */
+  rollUp(taskIds, style = "markdown") {
+    const rows = taskIds.map((id) => this.completed.get(id)).filter((r) => !!r);
+    if (style === "json") {
+      return JSON.stringify(
+        rows.map((r) => ({
+          taskId: r.taskId,
+          subagentId: r.subagentId,
+          status: r.status,
+          iterations: r.iterations,
+          toolCalls: r.toolCalls,
+          durationMs: r.durationMs,
+          result: r.result,
+          error: r.error
+        })),
+        null,
+        2
+      );
+    }
+    if (rows.length === 0) {
+      return "_No completed tasks for the requested ids \u2014 try waiting first._";
+    }
+    const lines = [];
+    for (const r of rows) {
+      const meta = this.subagentMeta.get(r.subagentId);
+      const tag = meta?.provider && meta?.model ? ` \xB7 ${meta.provider}/${meta.model}` : "";
+      lines.push(`### ${r.subagentId}${tag}`);
+      lines.push(`_${r.status} \u2014 ${r.iterations} iter \xB7 ${r.toolCalls} tools \xB7 ${r.durationMs}ms_`);
+      lines.push("");
+      if (r.error) lines.push(`**Error:** ${r.error}`);
+      else if (typeof r.result === "string") lines.push(r.result);
+      else if (r.result !== void 0)
+        lines.push("```json\n" + JSON.stringify(r.result, null, 2) + "\n```");
+      else lines.push("_(no output)_");
+      lines.push("");
+    }
+    return lines.join("\n").trimEnd();
+  }
+  /**
+   * Write the fleet manifest to `manifestPath`. Returns the path written
+   * or null when no path was configured. Captures every spawn + its
+   * assigned tasks — paired with per-subagent JSONLs, this is enough to
+   * replay an entire director run.
+   */
+  async writeManifest() {
+    if (!this.manifestPath) return null;
+    const manifest = {
+      directorRunId: this.id,
+      writtenAt: (/* @__PURE__ */ new Date()).toISOString(),
+      children: Array.from(this.manifestEntries.values()).map((e) => ({
+        ...e,
+        // Surface final status from `completed` when available — manifest
+        // becomes much more useful for replay when it carries the
+        // success/failure state.
+        results: e.taskIds.map((tid) => {
+          const r = this.completed.get(tid);
+          return r ? {
+            taskId: tid,
+            status: r.status,
+            iterations: r.iterations,
+            toolCalls: r.toolCalls,
+            durationMs: r.durationMs
+          } : { taskId: tid, status: "pending" };
+        })
+      })),
+      usage: this.usage.snapshot()
+    };
+    await fsp4.mkdir(path4.dirname(this.manifestPath), { recursive: true });
+    await fsp4.writeFile(this.manifestPath, JSON.stringify(manifest, null, 2), { mode: 384 });
+    return this.manifestPath;
+  }
+  /**
+   * Tear down the director: stop every subagent, close every bridge
+   * endpoint, and (when configured) write the final manifest. Idempotent
+   * — calling shutdown twice is a no-op on the second invocation.
+   */
+  async shutdown() {
+    if (this.manifestTimer) {
+      clearTimeout(this.manifestTimer);
+      this.manifestTimer = null;
+    }
+    if (this.taskCompletedListener) {
+      this.coordinator.off("task.completed", this.taskCompletedListener);
+      this.taskCompletedListener = null;
+    }
+    await this.coordinator.stopAll();
+    for (const b of this.subagentBridges.values()) {
+      await b.stop().catch((err) => this.logShutdownError("subagent_bridge_stop", err));
+    }
+    this.subagentBridges.clear();
+    await this.bridge.stop().catch((err) => this.logShutdownError("director_bridge_stop", err));
+    if (this.manifestPath)
+      await this.writeManifest().catch((err) => this.logShutdownError("manifest_write", err));
+    if (this.stateCheckpoint) {
+      this.stateCheckpoint.setUsage(this.usage.snapshot());
+      await this.stateCheckpoint.flush().catch((err) => this.logShutdownError("state_checkpoint_flush", err));
+    }
+  }
+  /**
+   * Funnel for shutdown-phase errors. We can't throw — `shutdown()` is
+   * called from process-exit paths where an uncaught throw would lose
+   * the manifest write that comes after. But we MUST NOT silently
+   * swallow either — a persistent bridge-close failure would otherwise
+   * mask a real bug. `process.emitWarning` is the right tier:
+   * surfaces on stderr by default, lets the host plug a warning
+   * listener for structured collection, and never affects exit code.
+   */
+  logShutdownError(phase, err) {
+    const detail = err instanceof Error ? err.message : String(err);
+    process.emitWarning(
+      `Director shutdown phase "${phase}" failed: ${detail}`,
+      "DirectorShutdownWarning"
+    );
+  }
+  /**
+   * Hand a task to the coordinator. Returns the assigned task id so
+   * callers can wait on it via `awaitTasks([id])`. The coordinator's
+   * concurrency limit applies — the task may queue before running.
+   */
+  async assign(task) {
+    const taskWithId = task.id ? task : { ...task, id: randomUUID() };
+    if (task.subagentId) {
+      const entry = this.manifestEntries.get(task.subagentId);
+      if (entry) entry.taskIds.push(taskWithId.id);
+    }
+    await this.coordinator.assign(taskWithId);
+    this.taskDescriptions.set(taskWithId.id, taskWithId.description);
+    if (taskWithId.subagentId) this.taskOwners.set(taskWithId.id, taskWithId.subagentId);
+    const assignedAt = (/* @__PURE__ */ new Date()).toISOString();
+    this.stateCheckpoint?.recordTaskAssigned({
+      taskId: taskWithId.id,
+      subagentId: taskWithId.subagentId,
+      description: taskWithId.description,
+      status: "running",
+      assignedAt
+    });
+    void this.appendSessionEvent({
+      type: "task_created",
+      ts: assignedAt,
+      taskId: taskWithId.id,
+      title: taskWithId.description
+    });
+    this.scheduleManifest();
+    return taskWithId.id;
+  }
+  /**
+   * Block until every task id resolves. Returns results in the same
+   * order as the input. If any task hasn't completed by the time this
+   * is called, the promise hangs until it does — pair with a timeout
+   * at the caller if that's a concern. Resolves immediately for ids
+   * whose results were already cached.
+   */
+  awaitTasks(taskIds) {
+    return Promise.all(
+      taskIds.map((id) => {
+        const cached = this.completed.get(id);
+        if (cached) return cached;
+        const existing = this.taskWaiters.get(id);
+        if (existing) return existing.promise;
+        let resolve;
+        const promise = new Promise((res) => {
+          resolve = res;
+        });
+        this.taskWaiters.set(id, { promise, resolve });
+        return promise;
+      })
+    );
+  }
+  async terminate(subagentId) {
+    await this.coordinator.stop(subagentId);
+  }
+  async terminateAll() {
+    await this.coordinator.stopAll();
+  }
+  status() {
+    return this.coordinator.getStatus();
+  }
+  /**
+   * Subscribe to coordinator events. Currently only `task.completed` is
+   * exposed (the others are internal lifecycle). Returns an unsubscribe
+   * function. External callers (e.g. the CLI's `MultiAgentHost`) use this
+   * to drive their own pending/results tracking without poking the
+   * coordinator directly.
+   */
+  on(event, handler) {
+    this.coordinator.on(event, handler);
+    return () => {
+      this.coordinator.off(event, handler);
+    };
+  }
+  /**
+   * Snapshot of every task that has resolved (success, failed, timeout,
+   * stopped) since the director started. Returned in completion order
+   * via the internal map's iteration order. Used by `/fleet status` to
+   * paint the completed table without reaching into private state.
+   */
+  completedResults() {
+    return Array.from(this.completed.values());
+  }
+  snapshot() {
+    return this.usage.snapshot();
+  }
+  /**
+   * Look up provider/model metadata for a spawned subagent. Returns
+   * undefined when the subagent id is unknown (not yet spawned, or
+   * already torn down). Callers — notably the TUI fleet panel — use
+   * this to render human-readable provider/model tags next to each
+   * subagent row without reaching into private state.
+   */
+  getSubagentMeta(id) {
+    const usage = this.subagentMeta.get(id);
+    const manifest = this.manifestEntries.get(id);
+    if (!usage && !manifest) return void 0;
+    return {
+      provider: usage?.provider ?? manifest?.provider,
+      model: usage?.model ?? manifest?.model,
+      name: manifest?.name
+    };
+  }
+  /**
+   * Compose the leader/director-agent system prompt: fleet preamble +
+   * (optional) roster summary + user base prompt. Pass the result to your
+   * leader Agent's `ctx.systemPrompt` when constructing it.
+   *
+   * `basePrompt` defaults to `config.leaderSystemPrompt` so callers can
+   * use the no-arg form when the multi-agent config already carries it.
+   */
+  leaderSystemPrompt(basePrompt) {
+    return composeDirectorPrompt({
+      basePrompt: basePrompt ?? this.coordinator.config.leaderSystemPrompt,
+      directorPreamble: this.directorPreamble,
+      rosterSummary: this.roster ? rosterSummaryFromConfigs(this.roster) : void 0
+    });
+  }
+  /**
+   * Compose a subagent's system prompt for a given `SubagentConfig`:
+   * baseline + role + task + per-spawn override. Returned by value — does
+   * not mutate the config. Factories (the user-supplied `AgentFactory`)
+   * should call this when building each subagent's Agent so the bridge
+   * contract, role context, and override are all surfaced.
+   *
+   * When `taskBrief` is omitted the Task section is dropped. Pass the
+   * actual task description here to reinforce it in the system prompt
+   * (the runner already passes it as user input — duplicating in the
+   * system prompt is optional but improves anchoring on small models).
+   */
+  subagentSystemPrompt(config, taskBrief) {
+    return composeSubagentPrompt({
+      baseline: this.subagentBaseline,
+      role: config.prompt,
+      task: taskBrief,
+      sharedScratchpad: this.sharedScratchpadPath ?? void 0,
+      override: config.systemPromptOverride
+    });
+  }
+  /**
+   * Build the tool set the LLM-driven director uses to orchestrate.
+   * Returns an array of `Tool` definitions; register these on the
+   * director's `Agent` to expose `spawn_subagent`, `assign_task`, etc.
+   * Each tool's `execute()` delegates straight to the matching method
+   * above.
+   *
+   * Tools all carry `permission: 'auto'` — the *user* has already
+   * approved running the director when they kicked off the run, so
+   * gating individual orchestration calls behind a confirm prompt
+   * would just be noise. The actual subagent tools they spawn are
+   * still permission-checked normally.
+   */
+  tools(roster) {
+    const t = [
+      makeSpawnTool(this, roster),
+      makeAssignTool(this),
+      makeAwaitTasksTool(this),
+      makeAskTool(this),
+      makeRollUpTool(this),
+      makeTerminateTool(this),
+      makeFleetStatusTool(this),
+      makeFleetUsageTool(this)
+    ];
+    return t;
+  }
+};
+function makeSpawnTool(director, roster) {
+  const inputSchema = {
+    type: "object",
+    properties: {
+      role: {
+        type: "string",
+        description: "Roster role id (preferred). When set, the spawn uses the matching config from the roster and ignores other fields."
+      },
+      name: {
+        type: "string",
+        description: "Display name for the subagent. Required when not using roster."
+      },
+      provider: {
+        type: "string",
+        description: 'Provider id (e.g. "anthropic", "openai"). Defaults to the leader provider when omitted.'
+      },
+      model: {
+        type: "string",
+        description: "Model id within the provider. Defaults to the leader model when omitted."
+      },
+      systemPromptOverride: {
+        type: "string",
+        description: "Extra prompt text appended after the role-base prompt."
+      },
+      maxIterations: { type: "number" },
+      maxToolCalls: { type: "number" },
+      maxCostUsd: { type: "number" }
+    },
+    required: []
+  };
+  return {
+    name: "spawn_subagent",
+    description: "Create a new subagent under this director. Returns the subagent id. Use this when you need a worker with a specific provider, model, or role to handle a piece of the plan.",
+    usageHint: "Either pass `role` (matches the roster) OR pass `name` + optional `provider`/`model`. Returns `{ subagentId }`.",
+    permission: "auto",
+    mutating: false,
+    inputSchema,
+    async execute(input) {
+      const i = input ?? {};
+      const role = typeof i.role === "string" ? i.role : void 0;
+      const base = role && roster ? roster[role] : void 0;
+      if (role && !base) {
+        return {
+          error: `unknown role "${role}". roster has: ${roster ? Object.keys(roster).join(", ") : "(empty)"}`
+        };
+      }
+      const cfg = {
+        ...base ?? { name: i.name ?? "subagent" }
+      };
+      if (typeof i.name === "string") cfg.name = i.name;
+      if (typeof i.provider === "string") cfg.provider = i.provider;
+      if (typeof i.model === "string") cfg.model = i.model;
+      if (typeof i.systemPromptOverride === "string")
+        cfg.systemPromptOverride = i.systemPromptOverride;
+      if (typeof i.maxIterations === "number") cfg.maxIterations = i.maxIterations;
+      if (typeof i.maxToolCalls === "number") cfg.maxToolCalls = i.maxToolCalls;
+      if (typeof i.maxCostUsd === "number") cfg.maxCostUsd = i.maxCostUsd;
+      try {
+        const subagentId = await director.spawn(cfg);
+        return { subagentId, provider: cfg.provider, model: cfg.model, name: cfg.name };
+      } catch (err) {
+        if (err instanceof DirectorBudgetError) {
+          return { error: err.message, kind: err.kind, limit: err.limit, observed: err.observed };
+        }
+        return { error: err instanceof Error ? err.message : String(err) };
+      }
+    }
+  };
+}
+function makeAssignTool(director) {
+  const inputSchema = {
+    type: "object",
+    properties: {
+      subagentId: { type: "string", description: "Target subagent id. Required." },
+      description: {
+        type: "string",
+        description: "The task in natural language \u2014 what you want this subagent to do."
+      },
+      maxToolCalls: { type: "number", description: "Optional per-task tool-call budget override." },
+      timeoutMs: { type: "number", description: "Optional per-task timeout in ms." }
+    },
+    required: ["subagentId", "description"]
+  };
+  return {
+    name: "assign_task",
+    description: "Hand a task to a previously spawned subagent. Returns the task id \u2014 pass it to `await_tasks` to block on completion.",
+    permission: "auto",
+    mutating: false,
+    inputSchema,
+    async execute(input) {
+      const i = input;
+      const task = {
+        id: randomUUID(),
+        description: i.description,
+        subagentId: i.subagentId,
+        maxToolCalls: i.maxToolCalls,
+        timeoutMs: i.timeoutMs
+      };
+      const taskId = await director.assign(task);
+      return { taskId, subagentId: i.subagentId };
+    }
+  };
+}
+function makeAwaitTasksTool(director) {
+  const inputSchema = {
+    type: "object",
+    properties: {
+      taskIds: {
+        type: "array",
+        items: { type: "string" },
+        description: "One or more task ids returned by `assign_task`. The call blocks until every id resolves."
+      }
+    },
+    required: ["taskIds"]
+  };
+  return {
+    name: "await_tasks",
+    description: "Block until every named task completes. Returns the array of TaskResult \u2014 use this to gather subagent output before deciding the next step.",
+    permission: "auto",
+    mutating: false,
+    inputSchema,
+    async execute(input) {
+      const i = input;
+      const results = await director.awaitTasks(i.taskIds);
+      return { results };
+    }
+  };
+}
+function makeAskTool(director) {
+  const inputSchema = {
+    type: "object",
+    properties: {
+      subagentId: {
+        type: "string",
+        description: "Subagent to ask. Must be a previously spawned id."
+      },
+      question: {
+        type: "string",
+        description: "The question or instruction. Sent as the bridge message payload."
+      },
+      timeoutMs: { type: "number", description: "Optional timeout in ms (default 30s)." }
+    },
+    required: ["subagentId", "question"]
+  };
+  return {
+    name: "ask_subagent",
+    description: "Synchronously ask a subagent a question. Blocks until the subagent replies via the bridge (or the timeout fires). Use this when you need a one-shot answer without spawning a fresh task.",
+    permission: "auto",
+    mutating: false,
+    inputSchema,
+    async execute(input) {
+      const i = input;
+      try {
+        const answer = await director.ask(i.subagentId, { question: i.question }, i.timeoutMs);
+        return { ok: true, answer };
+      } catch (err) {
+        return { ok: false, error: err instanceof Error ? err.message : String(err) };
+      }
+    }
+  };
+}
+function makeRollUpTool(director) {
+  const inputSchema = {
+    type: "object",
+    properties: {
+      taskIds: {
+        type: "array",
+        items: { type: "string" },
+        description: "Completed task ids to aggregate. Pass the ids returned by previous `assign_task` calls."
+      },
+      style: {
+        type: "string",
+        enum: ["markdown", "json"],
+        description: "Output flavor \u2014 markdown (default) for in-prompt summarization, json for structured downstream processing."
+      }
+    },
+    required: ["taskIds"]
+  };
+  return {
+    name: "roll_up",
+    description: "Aggregate completed task results into a single formatted summary. Use this after `await_tasks` to fold subagent outputs back into the director's context before deciding the next step.",
+    permission: "auto",
+    mutating: false,
+    inputSchema,
+    async execute(input) {
+      const i = input;
+      const summary = director.rollUp(i.taskIds, i.style ?? "markdown");
+      return { summary, count: i.taskIds.length };
+    }
+  };
+}
+function makeTerminateTool(director) {
+  const inputSchema = {
+    type: "object",
+    properties: {
+      subagentId: { type: "string", description: "Subagent to abort." }
+    },
+    required: ["subagentId"]
+  };
+  return {
+    name: "terminate_subagent",
+    description: 'Forcibly abort a subagent. Use sparingly \u2014 prefer waiting on the natural budget to expire. The current task (if any) ends with status "stopped".',
+    permission: "auto",
+    mutating: true,
+    inputSchema,
+    async execute(input) {
+      const i = input;
+      await director.terminate(i.subagentId);
+      return { ok: true };
+    }
+  };
+}
+function makeFleetStatusTool(director) {
+  return {
+    name: "fleet_status",
+    description: "Snapshot of the fleet \u2014 every subagent's current status, pending vs. completed task counts, and the running total iteration count. Cheap; call freely.",
+    permission: "auto",
+    mutating: false,
+    inputSchema: { type: "object", properties: {}, required: [] },
+    async execute() {
+      return director.status();
+    }
+  };
+}
+function makeFleetUsageTool(director) {
+  return {
+    name: "fleet_usage",
+    description: "Token + cost breakdown across the fleet, per-subagent and totals. Use this to reason about which workers to assign costly tasks to or when to wrap up to stay within budget.",
+    permission: "auto",
+    mutating: false,
+    inputSchema: { type: "object", properties: {}, required: [] },
+    async execute() {
+      return director.snapshot();
+    }
+  };
+}
+function createDelegateTool(opts) {
+  const defaultTimeoutMs = opts.defaultTimeoutMs ?? 4 * 60 * 60 * 1e3;
+  const rosterIds = opts.roster ? Object.keys(opts.roster) : [];
+  const inputSchema = {
+    type: "object",
+    properties: {
+      task: {
+        type: "string",
+        description: "What the subagent should do \u2014 natural language, complete sentence(s). The subagent has its own tool slice, its own LLM call, and returns when its task is done."
+      },
+      role: {
+        type: "string",
+        description: rosterIds.length > 0 ? `Roster role (preferred). One of: ${rosterIds.join(", ")}. Picks a pre-tuned config (prompt, budgets, tools) for that role.` : "No roster is configured \u2014 pass `name` instead.",
+        enum: rosterIds.length > 0 ? rosterIds : void 0
+      },
+      name: {
+        type: "string",
+        description: "Display name for the subagent when not using a roster role. Required when `role` is omitted."
+      },
+      provider: {
+        type: "string",
+        description: 'Provider id (e.g. "anthropic", "openai"). Defaults to the host provider when omitted.'
+      },
+      model: {
+        type: "string",
+        description: "Model id within the provider. Defaults to the host model when omitted."
+      },
+      systemPromptOverride: {
+        type: "string",
+        description: "Optional extra prompt text appended to the role baseline."
+      },
+      timeoutMs: {
+        type: "number",
+        description: `Wall-clock budget for this delegate in milliseconds. No hard cap \u2014 set as high as the task realistically needs (a monorepo audit can take hours, a single-file lint takes seconds). Default ${Math.round(defaultTimeoutMs / 1e3 / 60)} minutes.`
+      },
+      maxIterations: {
+        type: "number",
+        description: "Maximum LLM iterations the subagent may take. Unset = use the role/coordinator default. Raise this for tasks with many tool-think-tool cycles (deep code analysis, multi-file refactors)."
+      },
+      maxToolCalls: {
+        type: "number",
+        description: "Maximum number of tool invocations the subagent may make. Unset = use the role/coordinator default. Raise this for tasks that touch many files (large grep + read + report)."
+      }
+    },
+    required: ["task"]
+  };
+  return {
+    name: "delegate",
+    description: "Hand a discrete piece of work to a dedicated subagent and wait for its result. The subagent has its own context, its own LLM call, and its own budget \u2014 use this when a task is self-contained, would otherwise blow up your context, or benefits from a specialized role (bug-hunter, security-scanner, refactor-planner, audit-log). YOU decide how big the budget is: pass `timeoutMs`, `maxIterations`, and `maxToolCalls` sized to the actual work. There is no hidden cap forcing a 3-minute / 80-iteration limit \u2014 if a monorepo audit needs 2 hours and 500 tool calls, ask for that. Call multiple delegates in parallel through the provider's parallel-tool-call surface to fan work out across roles.",
+    usageHint: "Set `task` to a complete instruction. Either pick `role` from the roster or pass `name` + `provider` + `model`. For non-trivial work, also pass `timeoutMs` (the wall-clock budget you actually need), `maxIterations`, and `maxToolCalls` \u2014 defaults are intentionally generous (4 hours) but the right values depend on scope. Returns the subagent's `TaskResult` \u2014 including the textual `result`, iteration count, tool count, and duration. Auto-promotes the host into director mode on first call.",
+    permission: "auto",
+    mutating: false,
+    inputSchema,
+    async execute(input) {
+      const i = input ?? {};
+      if (typeof i.task !== "string" || !i.task.trim()) {
+        return { ok: false, error: "`task` is required." };
+      }
+      let director = await opts.host.ensureDirector();
+      if (!director) {
+        director = await opts.host.promoteToDirector();
+      }
+      if (!director) {
+        const reason = opts.host.getPromotionBlockReason?.();
+        return {
+          ok: false,
+          error: reason ?? "Director could not be activated \u2014 multi-agent host already running in legacy non-director mode. Restart with `--director` for fleet support."
+        };
+      }
+      const timeoutMs = i.timeoutMs ?? defaultTimeoutMs;
+      let cfg;
+      if (i.role) {
+        const base = opts.roster?.[i.role];
+        if (!base) {
+          return {
+            ok: false,
+            error: `Unknown role "${i.role}". Available: ${rosterIds.join(", ") || "(no roster configured)"}.`
+          };
+        }
+        cfg = { ...base };
+        if (i.systemPromptOverride) cfg.systemPromptOverride = i.systemPromptOverride;
+        if (i.provider) cfg.provider = i.provider;
+        if (i.model) cfg.model = i.model;
+      } else {
+        if (!i.name) {
+          return {
+            ok: false,
+            error: "Either `role` (from the roster) or `name` is required."
+          };
+        }
+        cfg = {
+          name: i.name,
+          provider: i.provider,
+          model: i.model,
+          systemPromptOverride: i.systemPromptOverride
+        };
+      }
+      if (typeof i.maxIterations === "number" && i.maxIterations > 0) {
+        cfg.maxIterations = i.maxIterations;
+      }
+      if (typeof i.maxToolCalls === "number" && i.maxToolCalls > 0) {
+        cfg.maxToolCalls = i.maxToolCalls;
+      }
+      const SUBAGENT_TIMEOUT_BUFFER_MS = 3e4;
+      const desiredSubTimeout = Math.max(3e4, timeoutMs - SUBAGENT_TIMEOUT_BUFFER_MS);
+      if (!cfg.timeoutMs || cfg.timeoutMs > desiredSubTimeout) {
+        cfg.timeoutMs = desiredSubTimeout;
+      }
+      try {
+        const subagentId = await director.spawn(cfg);
+        const taskId = await director.assign({
+          id: "",
+          description: i.task,
+          subagentId
+        });
+        const result = await Promise.race([
+          director.awaitTasks([taskId]).then((r) => r[0]),
+          new Promise(
+            (resolve) => setTimeout(() => resolve({ __timeout: true }), timeoutMs)
+          )
+        ]);
+        if ("__timeout" in result) {
+          const partial2 = await readSubagentPartial(opts, subagentId);
+          return {
+            ok: false,
+            stopReason: "host_timeout",
+            error: `Subagent did not finish within ${timeoutMs}ms.`,
+            hint: "Reduce scope of the next delegate, raise timeoutMs, or use spawn_subagent + await_tasks for long-running work.",
+            subagentId,
+            taskId,
+            partial: partial2
+          };
+        }
+        const baseStopReason = result.status === "success" ? "end_turn" : result.status === "timeout" ? "subagent_timeout" : result.status === "stopped" ? "aborted" : "budget_exhausted";
+        const partial = result.status === "success" ? void 0 : await readSubagentPartial(opts, subagentId);
+        const errorKind = result.error?.kind;
+        const retryable = result.error?.retryable;
+        const backoffMs = result.error?.backoffMs;
+        return {
+          ok: result.status === "success",
+          status: result.status,
+          stopReason: baseStopReason,
+          errorKind,
+          retryable,
+          backoffMs,
+          subagentId: result.subagentId,
+          taskId: result.taskId,
+          result: result.result,
+          error: result.error,
+          iterations: result.iterations,
+          toolCalls: result.toolCalls,
+          durationMs: result.durationMs,
+          ...partial ? { partial } : {},
+          ...hintForKind(errorKind, retryable, backoffMs) ? { hint: hintForKind(errorKind, retryable, backoffMs) } : {}
+        };
+      } catch (err) {
+        return {
+          ok: false,
+          stopReason: "error",
+          error: err instanceof Error ? err.message : String(err)
+        };
+      }
+    }
+  };
+}
+function hintForKind(kind, retryable, backoffMs) {
+  if (!kind) return void 0;
+  switch (kind) {
+    case "provider_rate_limit":
+      return `Provider rate-limited. Retry safe after ${backoffMs ?? 5e3}ms backoff. Consider a smaller model or fewer parallel delegates.`;
+    case "provider_5xx":
+      return `Provider server error. Retry safe after ${backoffMs ?? 3e3}ms backoff \u2014 usually transient.`;
+    case "provider_timeout":
+      return "Provider network timeout. Retry safe; reduce input size if it persists.";
+    case "provider_auth":
+      return "Provider rejected credentials. Cannot retry \u2014 fix the API key / config and re-invoke.";
+    case "context_overflow":
+      return "Subagent context exceeded the model limit. Narrow the task, use a larger-context model, or split into multiple delegates.";
+    case "budget_iterations":
+    case "budget_tool_calls":
+    case "budget_tokens":
+    case "budget_cost":
+      return "Subagent exhausted its budget. Raise the matching `max*` field on the next delegate or narrow task scope.";
+    case "budget_timeout":
+      return "Subagent hit its wall-clock budget. Raise `timeoutMs` on the next delegate or split the task.";
+    case "aborted_by_parent":
+      return "Subagent was aborted (user Ctrl+C, parent unwound, or sibling failure cascade). Not retryable until the abort condition is resolved.";
+    case "empty_response":
+      return "Subagent ended its turn with no text and no tool calls. Almost always a prompt / config issue \u2014 clarify the task or check the model.";
+    case "tool_failed":
+      return "A tool inside the subagent returned ok:false. Inspect `partial.lastAssistantText` for the agent reasoning, then retry with corrected inputs.";
+    case "bridge_failed":
+      return "Parent-child bridge transport failed. This is rare \u2014 restart the session and retry.";
+    default:
+      return retryable ? "Failure classified as retryable. Try again with the same input." : void 0;
+  }
+}
+async function readSubagentPartial(opts, subagentId) {
+  if (!opts.sessionsRoot) return void 0;
+  const candidates = [];
+  if (opts.directorRunId) {
+    candidates.push(path4.join(opts.sessionsRoot, opts.directorRunId, `${subagentId}.jsonl`));
+  } else {
+    try {
+      const runDirs = await fsp4.readdir(opts.sessionsRoot);
+      for (const r of runDirs) {
+        candidates.push(path4.join(opts.sessionsRoot, r, `${subagentId}.jsonl`));
+      }
+    } catch {
+      return void 0;
+    }
+  }
+  for (const file of candidates) {
+    let raw;
+    try {
+      raw = await fsp4.readFile(file, "utf8");
+    } catch {
+      continue;
+    }
+    const lines = raw.split("\n").filter((l) => l.trim());
+    let lastAssistantText;
+    let lastStopReason;
+    let toolUses = 0;
+    for (const line of lines) {
+      try {
+        const ev = JSON.parse(line);
+        if (ev.type === "tool_use") toolUses += 1;
+        if (ev.type === "llm_response") {
+          if (typeof ev.stopReason === "string") lastStopReason = ev.stopReason;
+          if (Array.isArray(ev.content)) {
+            const txt = ev.content.filter((b) => b.type === "text").map((b) => b.text ?? "").join("\n").trim();
+            if (txt) lastAssistantText = txt;
+          }
+        }
+      } catch {
+      }
+    }
+    return {
+      lastAssistantText,
+      lastStopReason,
+      toolUsesObserved: toolUses,
+      events: lines.length
+    };
+  }
+  return void 0;
+}
+
+// src/coordination/agent-subagent-runner.ts
+function makeAgentSubagentRunner(opts) {
+  const format = opts.formatTaskInput ?? defaultFormatTaskInput;
+  return async (task, ctx) => {
+    const factoryResult = await opts.factory(ctx.config);
+    const { agent, events } = factoryResult;
+    const detachFleet = opts.fleetBus?.attach(ctx.subagentId, events, task.id);
+    const aborter = new AbortController();
+    let budgetError = null;
+    const onBudgetError = (err) => {
+      aborter.abort();
+      budgetError = err instanceof BudgetExceededError ? err : new BudgetExceededError(
+        "tool_calls",
+        0,
+        0
+      );
+      if (budgetError !== err && err instanceof Error) {
+        budgetError.message += ` (caused by: ${err.message})`;
+      }
+    };
+    let lastToolFailed = null;
+    const unsub = [];
+    unsub.push(
+      events.on("tool.executed", (e) => {
+        try {
+          ctx.budget.recordToolCall();
+        } catch (eb) {
+          onBudgetError(eb);
+        }
+        if (e.ok === false) {
+          lastToolFailed = e.name;
+        } else if (e.ok === true) {
+          lastToolFailed = null;
+        }
+      }),
+      events.on("provider.response", (e) => {
+        try {
+          ctx.budget.recordUsage(e.usage);
+        } catch (e2) {
+          onBudgetError(e2);
+        }
+      }),
+      events.on("iteration.started", () => {
+        try {
+          ctx.budget.recordIteration();
+          ctx.budget.checkTimeout();
+        } catch (e) {
+          onBudgetError(e);
+        }
+      }),
+      // D3: cooperative timeout enforcement DURING a long tool call.
+      // The iteration-loop checkTimeout() only fires between agent
+      // iterations — a single `bash sleep 3600` call would otherwise
+      // park inside one tool execution while the timeout silently
+      // passes, relying solely on the coordinator's hard Promise.race
+      // to interrupt. Tools that emit `tool.progress` (bash chunks,
+      // fetch byte progress, spawn-stream stdout) give us a heartbeat
+      // we can hang the check on. When the budget trips here:
+      //   1. onBudgetError sets budgetError + aborter.abort()
+      //   2. aborter signal propagates to agent.run → tool executor
+      //   3. tool's own signal listener kills the child process
+      // Cheap: O(1) per progress event, and the budget short-circuits
+      // when timeoutMs is unset (most subagents have one set anyway).
+      events.on("tool.progress", () => {
+        try {
+          ctx.budget.checkTimeout();
+        } catch (e) {
+          onBudgetError(e);
+        }
+      })
+    );
+    const onParentAbort = () => aborter.abort();
+    ctx.signal.addEventListener("abort", onParentAbort);
+    let result;
+    try {
+      result = await agent.run(format(task, ctx.config), { signal: aborter.signal });
+    } finally {
+      detachFleet?.();
+      ctx.signal.removeEventListener("abort", onParentAbort);
+      for (const u of unsub) u();
+      if (factoryResult.dispose) {
+        try {
+          await factoryResult.dispose();
+        } catch {
+        }
+      }
+    }
+    if (budgetError) throw budgetError;
+    if (result.status === "failed") {
+      throw result.error instanceof Error ? result.error : new Error(String(result.error ?? "agent failed"));
+    }
+    if (result.status === "aborted") {
+      throw new Error("agent aborted");
+    }
+    if (result.status === "max_iterations") {
+      throw new Error("agent exhausted iteration limit");
+    }
+    const usage = ctx.budget.usage();
+    const finalText = (result.finalText ?? "").trim();
+    if (finalText.length === 0 && usage.toolCalls === 0) {
+      throw new Error("empty response");
+    }
+    if (finalText.length === 0 && lastToolFailed !== null) {
+      throw new Error(`tool failed: ${lastToolFailed}`);
+    }
+    return {
+      result: result.finalText,
+      iterations: result.iterations,
+      toolCalls: usage.toolCalls
+    };
+  };
+}
+function defaultFormatTaskInput(task) {
+  return task.description ?? "";
+}
+var DefaultSessionStore = class {
+  dir;
+  events;
+  constructor(opts) {
+    this.dir = opts.dir;
+    this.events = opts.events;
+  }
+  async create(meta) {
+    await ensureDir(this.dir);
+    const startedAt = (/* @__PURE__ */ new Date()).toISOString();
+    const id = meta.id ?? `${startedAt.replace(/[:.]/g, "-")}-${randomBytes(2).toString("hex")}`;
+    const file = path4.join(this.dir, `${id}.jsonl`);
+    let handle;
+    try {
+      handle = await fsp4.open(file, "a", 384);
+    } catch (err) {
+      throw new Error(
+        `Failed to open session file: ${err instanceof Error ? err.message : String(err)}`,
+        {
+          cause: err
+        }
+      );
+    }
+    try {
+      return new FileSessionWriter(id, handle, startedAt, meta, { dir: this.dir, filePath: file });
+    } catch (err) {
+      await handle.close().catch(() => {
+      });
+      throw err;
+    }
+  }
+  async resume(id) {
+    const data = await this.load(id);
+    const file = path4.join(this.dir, `${id}.jsonl`);
+    let handle;
+    try {
+      handle = await fsp4.open(file, "a", 384);
+    } catch (err) {
+      throw new Error(
+        `Failed to open session "${id}" for append: ${err instanceof Error ? err.message : String(err)}`,
+        { cause: err }
+      );
+    }
+    const writer = new FileSessionWriter(
+      id,
+      handle,
+      (/* @__PURE__ */ new Date()).toISOString(),
+      {
+        id,
+        model: data.metadata.model,
+        provider: data.metadata.provider
+      },
+      { resumed: true, dir: this.dir, filePath: file }
+    );
+    return { writer, data };
+  }
+  async load(id) {
+    const file = path4.join(this.dir, `${id}.jsonl`);
+    const raw = await fsp4.readFile(file, "utf8");
+    const lines = raw.split("\n").filter((l) => l.trim());
+    const events = [];
+    for (const line of lines) {
+      try {
+        const parsed = JSON.parse(line);
+        if (parsed !== null && typeof parsed === "object" && typeof parsed.type === "string" && typeof parsed.ts === "string") {
+          events.push(parsed);
+        }
+      } catch {
+      }
+    }
+    const meta = this.metaFromEvents(id, events);
+    const { messages, usage } = this.replay(events, id);
+    return { metadata: meta, events, messages, usage };
+  }
+  async list(limit = 20) {
+    try {
+      await ensureDir(this.dir);
+      const files = await fsp4.readdir(this.dir);
+      const ids = files.filter((f) => f.endsWith(".jsonl")).map((f) => f.replace(/\.jsonl$/, ""));
+      const sessions = await Promise.all(ids.map((id) => this.summaryFor(id).catch(() => null)));
+      const out = sessions.filter((s) => s !== null);
+      out.sort((a, b) => {
+        if (a.startedAt < b.startedAt) return 1;
+        if (a.startedAt > b.startedAt) return -1;
+        return a.id.localeCompare(b.id);
+      });
+      return out.slice(0, limit);
+    } catch {
+      return [];
+    }
+  }
+  async summaryFor(id) {
+    const manifest = path4.join(this.dir, `${id}.summary.json`);
+    try {
+      const raw = await fsp4.readFile(manifest, "utf8");
+      return JSON.parse(raw);
+    } catch {
+      const full = path4.join(this.dir, `${id}.jsonl`);
+      const stat3 = await fsp4.stat(full);
+      const summary = await this.summarize(id, stat3.mtime.toISOString());
+      await fsp4.writeFile(manifest, JSON.stringify(summary), { mode: 384 }).catch((err) => {
+        console.warn(
+          `[session-store] Failed to write manifest for "${id}":`,
+          err instanceof Error ? err.message : String(err)
+        );
+      });
+      return summary;
+    }
+  }
+  async delete(id) {
+    await fsp4.unlink(path4.join(this.dir, `${id}.jsonl`));
+    await fsp4.unlink(path4.join(this.dir, `${id}.summary.json`)).catch(() => void 0);
+  }
+  async summarize(id, mtime) {
+    try {
+      const data = await this.load(id);
+      const firstUser = data.events.find((e) => e.type === "user_input");
+      const title = firstUser && firstUser.type === "user_input" ? userInputTitle(firstUser.content) : "(empty session)";
+      return {
+        id,
+        title,
+        startedAt: data.metadata.startedAt,
+        model: data.metadata.model ?? "unknown",
+        provider: data.metadata.provider ?? "unknown",
+        tokenTotal: data.usage.input + data.usage.output
+      };
+    } catch {
+      return {
+        id,
+        title: "(damaged)",
+        startedAt: mtime,
+        model: "unknown",
+        provider: "unknown",
+        tokenTotal: 0
+      };
+    }
+  }
+  metaFromEvents(id, events) {
+    const start = events.find((e) => e.type === "session_start");
+    const end = events.find((e) => e.type === "session_end");
+    return {
+      id,
+      startedAt: start?.ts ?? (/* @__PURE__ */ new Date(0)).toISOString(),
+      endedAt: end?.ts,
+      model: start?.model,
+      provider: start?.provider
+    };
+  }
+  replay(events, sessionId = "unknown") {
+    const messages = [];
+    let usage = { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 };
+    const openToolUses = /* @__PURE__ */ new Set();
+    for (const e of events) {
+      if (e.type === "user_input") {
+        openToolUses.clear();
+        messages.push({ role: "user", content: e.content });
+      } else if (e.type === "llm_response") {
+        messages.push({ role: "assistant", content: e.content });
+        for (const b of e.content) {
+          if (b.type === "tool_use") openToolUses.add(b.id);
+        }
+        usage = {
+          input: usage.input + (e.usage.input ?? 0),
+          output: usage.output + (e.usage.output ?? 0),
+          cacheRead: (usage.cacheRead ?? 0) + (e.usage.cacheRead ?? 0),
+          cacheWrite: (usage.cacheWrite ?? 0) + (e.usage.cacheWrite ?? 0)
+        };
+      } else if (e.type === "tool_result") {
+        if (!openToolUses.has(e.id)) {
+          this.events?.emit("session.damaged", {
+            sessionId,
+            detail: `Orphan tool_result "${e.id}" has no matching tool_use`
+          });
+          continue;
+        }
+        openToolUses.delete(e.id);
+        const content = [
+          {
+            type: "tool_result",
+            tool_use_id: e.id,
+            content: typeof e.content === "string" ? e.content : JSON.stringify(e.content),
+            is_error: e.isError
+          }
+        ];
+        const last = messages[messages.length - 1];
+        if (last && last.role === "user") {
+          if (Array.isArray(last.content)) {
+            last.content.push(...content);
+          } else if (typeof last.content === "string") {
+            last.content = [{ type: "text", text: last.content }, ...content];
+          } else {
+            messages.push({ role: "user", content });
+          }
+        } else {
+          messages.push({ role: "user", content });
+        }
+      }
+    }
+    if (openToolUses.size > 0) {
+      this.events?.emit("session.damaged", {
+        sessionId,
+        detail: `${openToolUses.size} tool_use blocks without matching results \u2014 replay truncated`
+      });
+      return { messages, usage };
+    }
+    return { messages, usage };
+  }
+};
+var FileSessionWriter = class {
+  constructor(id, handle, startedAt, meta, opts = {}) {
+    this.id = id;
+    this.handle = handle;
+    this.startedAt = startedAt;
+    this.meta = meta;
+    this.resumed = opts.resumed ?? false;
+    this.manifestFile = opts.dir ? path4.join(opts.dir, `${id}.summary.json`) : "";
+    this.filePath = opts.filePath ?? "";
+    this.summary = {
+      id,
+      title: "(empty session)",
+      startedAt,
+      model: meta.model ?? "unknown",
+      provider: meta.provider ?? "unknown",
+      tokenTotal: 0
+    };
+  }
+  id;
+  handle;
+  startedAt;
+  meta;
+  closed = false;
+  manifestFile;
+  summary;
+  tokenIn = 0;
+  tokenOut = 0;
+  filePath;
+  /** Public accessor for the JSONL path — required by SessionWriter so
+   *  observability surfaces (`/fleet log`, FleetPanel) can locate the
+   *  transcript without recomputing the path from session metadata. */
+  get transcriptPath() {
+    return this.filePath || void 0;
+  }
+  initDone = false;
+  resumed;
+  appendFailCount = 0;
+  lastAppendWarnAt = 0;
+  async writeSessionStart() {
+    if (this.initDone || this.closed) return;
+    this.initDone = true;
+    const record = `${JSON.stringify({
+      type: this.resumed ? "session_resumed" : "session_start",
+      ts: this.startedAt,
+      id: this.id,
+      model: this.meta.model ?? "unknown",
+      provider: this.meta.provider ?? "unknown"
+    })}
+`;
+    try {
+      if (this.filePath) {
+        await fsp4.writeFile(this.filePath, record, { flag: "a", mode: 384 });
+      }
+    } catch {
+    }
+  }
+  async append(event) {
+    if (this.closed) return;
+    if (!this.initDone) {
+      await this.writeSessionStart();
+    }
+    this.observeForSummary(event);
+    try {
+      await this.handle.appendFile(`${JSON.stringify(event)}
+`, "utf8");
+    } catch (err) {
+      this.appendFailCount++;
+      const now = Date.now();
+      if (now - this.lastAppendWarnAt > 5e3) {
+        const suppressed = this.appendFailCount - 1;
+        const tail = suppressed > 0 ? ` (+${suppressed} suppressed)` : "";
+        console.warn(
+          "[session] append failed:",
+          err instanceof Error ? err.message : String(err),
+          tail
+        );
+        this.lastAppendWarnAt = now;
+        this.appendFailCount = 0;
+      }
+    }
+  }
+  /**
+   * Watch events as they're appended and keep the summary state hot, so
+   * `close()` can flush a `<id>.summary.json` manifest without re-reading
+   * the JSONL. `list()` reads only manifests, turning a per-session full
+   * parse into a single stat+read.
+   */
+  observeForSummary(event) {
+    if (event.type === "user_input" && this.summary.title === "(empty session)") {
+      this.summary = { ...this.summary, title: userInputTitle(event.content) };
+    } else if (event.type === "llm_response") {
+      this.tokenIn += event.usage.input;
+      this.tokenOut += event.usage.output;
+      this.summary = { ...this.summary, tokenTotal: this.tokenIn + this.tokenOut };
+    } else if (event.type === "session_end") {
+      const total = event.usage.input + event.usage.output;
+      if (total > 0) this.summary = { ...this.summary, tokenTotal: total };
+    }
+  }
+  async close() {
+    if (this.closed) return;
+    this.closed = true;
+    if (this.manifestFile) {
+      try {
+        await fsp4.writeFile(this.manifestFile, JSON.stringify(this.summary), { mode: 384 });
+      } catch {
+      }
+    }
+    try {
+      await this.handle.close();
+    } catch {
+    }
+  }
+};
+function userInputTitle(content) {
+  if (typeof content === "string") return content.slice(0, 60);
+  const text = content.filter((b) => b.type === "text").map((b) => b.text).join(" ");
+  return (text || "(non-text input)").slice(0, 60);
+}
+
+// src/coordination/director-session.ts
+function makeDirectorSessionFactory(opts) {
+  const runId = opts.directorRunId ?? `${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}-director`;
+  let store;
+  let dir;
+  if (opts.store) {
+    store = opts.store;
+    dir = opts.sessionsRoot ? path4.join(opts.sessionsRoot, runId) : "(caller-managed)";
+  } else if (opts.sessionsRoot) {
+    dir = path4.join(opts.sessionsRoot, runId);
+    store = new DefaultSessionStore({ dir });
+  } else {
+    throw new Error("makeDirectorSessionFactory requires either `store` or `sessionsRoot`");
+  }
+  return {
+    dir,
+    directorRunId: runId,
+    async createSubagentSession({ subagentId, provider, model, title }) {
+      return store.create({
+        id: subagentId,
+        title: title ?? subagentId,
+        provider: provider ?? "unknown",
+        model: model ?? "unknown"
+      });
+    }
+  };
+}
+
+// src/coordination/fleet.ts
+var AUDIT_LOG_AGENT = {
+  id: "audit-log",
+  name: "Audit Log",
+  role: "audit-log",
+  prompt: `You are the Audit Log agent. Your job is to analyze structured JSONL
+session logs and produce actionable markdown reports.
+
+Scope:
+- Parse session logs (iteration counts, tool calls, errors, usage)
+- Detect repeated failure patterns across multiple runs
+- Identify tool usage anomalies (over-use, failures, unexpected chains)
+- Track token consumption trends
+- Generate structured audit reports with severity ratings
+
+Input format you accept:
+{ "task": "analyze | report | trends", "sessionPath": "<path>", "focus": "errors | tools | usage | all" }
+
+Output: Markdown audit report with sections:
+- ## Summary (totals, error rate)
+- ## Top Errors (count + context)
+- ## Tool Usage (table with calls, failures, avg duration)
+- ## Anomalies (pattern \u2192 severity)
+
+Working rules:
+- Never fabricate numbers \u2014 read the actual logs first
+- Always include file:line references for errors
+- If sessionPath is missing, ask the director to provide it
+- Report confidence level: high (>90% accuracy), medium, low`
+  // No hardcoded budgets — the orchestrator (delegate tool or
+  // spawn_subagent) decides per-task how much room a subagent gets.
+  // A monorepo audit needs hours; a single-file lint check needs
+  // seconds. Pinning a number here forces the orchestrator to fight
+  // the role's default instead of just asking for what it needs.
+};
+var BUG_HUNTER_AGENT = {
+  id: "bug-hunter",
+  name: "Bug Hunter",
+  role: "bug-hunter",
+  prompt: `You are the Bug Hunter agent. Your job is to systematically scan
+source code for bugs, anti-patterns, and code smells using pattern matching
+and heuristics. Output a prioritized hit list with file:line references.
+
+Scope:
+- Detect common bug patterns (uncaught errors, resource leaks, race conditions)
+- Identify anti-patterns (callback hell, God objects, circular deps)
+- Find TypeScript-specific issues (unsafe any, missing null checks, branded types)
+- Flag security-sensitive constructs (eval, innerHTML, hardcoded secrets)
+- Rank findings: critical > high > medium > low
+
+Input format you accept:
+{ "task": "scan | hunt | check", "paths": ["src/**/*.ts"], "focus": "bugs | patterns | security | all", "severityThreshold": "medium" }
+
+Output: Markdown bug hunt report:
+- ## Critical (must fix first)
+- ## High (should fix)
+- ## Medium
+- ## Low (consider)
+Each entry: **[TYPE]** \`file:line\` \u2014 description + suggested fix
+
+Bug pattern reference you know:
+| Pattern | Regex hint | Severity |
+|---------|------------|----------|
+| Uncaught promise | /.then\\(.*\\)/ without catch | high |
+| Event leak | on\\( without off/removeListener | high |
+| Hardcoded secret | [a-zA-Z0-9/_-]{20,} in config files | critical |
+| unsafe any | : any\\b or <any> | medium |
+| innerHTML | innerHTML\\s*= | high |
+
+Working rules:
+- Never scan node_modules \u2014 it's noise
+- Always include file:line for every finding
+- If >30% of findings are false positives, note the confidence level
+- Ask director for clarification if paths are ambiguous`
+  // Budgets are set by the orchestrator per task — see fleet.ts header.
+};
+var REFACTOR_PLANNER_AGENT = {
+  id: "refactor-planner",
+  name: "Refactor Planner",
+  role: "refactor-planner",
+  prompt: `You are the Refactor Planner agent. Your job is to analyze code
+structure and produce a concrete, phased refactoring plan with risk
+assessment, dependency ordering, and rollback strategy.
+
+Scope:
+- Map module-level dependencies (import graph)
+- Identify coupling hotspots (high fan-in/out modules)
+- Assess refactoring risk by complexity and test coverage
+- Generate phased plans with checkpoint milestones
+- Produce diff-friendly task lists (one task = one concern)
+
+Input format you accept:
+{ "task": "plan | assess | roadmap", "target": "src/core", "constraint": "no-breaking-changes | minimal-downtime | full-rewrite", "focus": "architecture | performance | maintainability" }
+
+Output: Markdown refactor plan:
+- ## Phase 1: Low Risk / High Payoff (do first)
+  Table: | # | Task | Module | Risk | Est. Time |
+- ## Phase 2: Medium Risk
+- ## Phase 3: High Risk (requires full regression)
+- ## Dependency Graph (abbreviated ASCII)
+- ## Rollback Strategy
+- ## Exit Criteria (checkbox list)
+
+Risk scoring criteria:
+| Factor | Low | Medium | High |
+|--------|-----|--------|------|
+| Cyclomatic complexity | <10 | 10-20 | >20 |
+| Test coverage | >80% | 50-80% | <50% |
+| Fan-out (imports) | <5 | 5-15 | >15 |
+
+Working rules:
+- Always include rollback strategy \u2014 every refactor can fail
+- Merge tasks that take <1h into a single phase
+- Respect team constraints (reviewer availability, parallelization)
+- Never plan without analyzing the actual code first`
+  // Budgets are set by the orchestrator per task — see fleet.ts header.
+};
+var SECURITY_SCANNER_AGENT = {
+  id: "security-scanner",
+  name: "Security Scanner",
+  role: "security-scanner",
+  prompt: `You are the Security Scanner agent. Your job is to scan code,
+configs, and dependencies for security issues from hardcoded secrets to
+supply chain risks.
+
+Scope:
+- Detect hardcoded secrets: API keys, tokens, passwords, private keys
+- Find injection vectors: eval, innerHTML, SQL concat, shell injection
+- Identify insecure patterns: weak crypto, hardcoded IVs, disabled TLS
+- Scan dependencies for known CVEs (via npm/pnpm audit)
+- Flag supply chain risks: postinstall hooks, unverified scripts, .npmrc
+
+Input format you accept:
+{ "task": "scan | audit | secrets | dependencies", "paths": ["src", "config"], "depth": "quick | normal | deep" }
+
+Output: Markdown security report:
+- ## CRITICAL: Secrets Found (with code snippets)
+- ## HIGH: Injection Vectors
+- ## MEDIUM: Insecure Patterns
+- ## Dependency Issues (CVE list)
+- ## Summary table (severity \u2192 count)
+- ## Remediation Checklist (with checkboxes)
+
+Secret patterns you detect:
+| Pattern | Example | Severity |
+|---------|---------|----------|
+| AWS Access Key | AKIAIOSFODNN7EXAMPLE | critical |
+| AWS Secret Key | [a-zA-Z0-9/+=]{40} base64 | critical |
+| GitHub Token | ghp_[a-zA-Z0-9]{36} | critical |
+| Private Key PEM | -----BEGIN.*PRIVATE KEY----- | critical |
+| JWT | eyJ[a-zA-Z0-9_-]+ | high |
+
+Injection patterns:
+| Construct | Safe alternative |
+|-----------|-----------------|
+| eval(str) | new Function() or parse |
+| innerHTML = x | textContent or sanitize |
+| exec(\`cmd \${x}\`) | execFile with args array |
+
+Working rules:
+- Never scan node_modules \u2014 use npm audit instead
+- Always provide remediation steps, not just findings
+- Verify regex-based secrets before flagging (false positive risk)
+- When in doubt, flag as medium rather than ignoring potential issues`
+  // Budgets are set by the orchestrator per task — see fleet.ts header.
+};
+var FLEET_ROSTER = {
+  "audit-log": AUDIT_LOG_AGENT,
+  "bug-hunter": BUG_HUNTER_AGENT,
+  "refactor-planner": REFACTOR_PLANNER_AGENT,
+  "security-scanner": SECURITY_SCANNER_AGENT
+};
+var ALL_FLEET_AGENTS = Object.values(FLEET_ROSTER);
+
+export { ALL_FLEET_AGENTS, AUDIT_LOG_AGENT, BUG_HUNTER_AGENT, BudgetExceededError, DEFAULT_DIRECTOR_PREAMBLE, DEFAULT_SUBAGENT_BASELINE, DefaultMultiAgentCoordinator, Director, DirectorBudgetError, FLEET_ROSTER, FleetBus, FleetUsageAggregator, InMemoryAgentBridge, InMemoryBridgeTransport, REFACTOR_PLANNER_AGENT, SECURITY_SCANNER_AGENT, SubagentBudget, composeDirectorPrompt, composeSubagentPrompt, createDelegateTool, createMessage, makeAgentSubagentRunner, makeDirectorSessionFactory, rosterSummaryFromConfigs };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map