@wrongstack/core 0.109.1 → 0.141.0

package/dist/{agent-bridge-mOxbpFcg.d.ts → agent-bridge-r9y6gdn4.d.ts}

@@ -1,4 +1,4 @@
-import { B as BridgeTransport, a as BridgeMessage, A as AgentBridge, b as AgentBridgeConfig } from './agent-subagent-runner-DukQLUcS.js';
+import { B as BridgeTransport, a as BridgeMessage, A as AgentBridge, b as AgentBridgeConfig } from './agent-subagent-runner-1GeQE_L0.js';
 
 /**
  * In-memory pub/sub transport for agent-to-agent messaging.

package/dist/{agent-subagent-runner-DukQLUcS.d.ts → agent-subagent-runner-1GeQE_L0.d.ts}

@@ -1,13 +1,12 @@
-import { c as ToolCallPipelinePayload, d as ToolWrapper, E as ExtensionRegistry, S as SystemPromptContributor, e as ToolRegistry, P as ProviderRegistry, A as AgentPipelines, f as ToolExecutorLike, g as AgentInit, h as AgentInput, R as RunResult } from './index-DIKEcfgC.js';
-import { C as Container, R as ReadonlyPipeline, a as Renderer } from './pipeline-BqiA_UMr.js';
-import { E as EventBus, c as EventName, L as Listener } from './brain-Dfv4Y82E.js';
-import { R as RetryPolicy, E as ErrorHandler } from './retry-policy-BcmuT_V0.js';
+import { c as ToolCallPipelinePayload, d as ToolWrapper, E as ExtensionRegistry, S as SystemPromptContributor, e as ToolRegistry, P as ProviderRegistry, A as AgentPipelines, f as ToolExecutorLike, g as AgentInit, h as AgentInput, R as RunResult } from './index-CPweVoFM.js';
+import { C as Container, R as ReadonlyPipeline, a as Renderer } from './pipeline-BG7UgbDc.js';
+import { E as EventBus, c as EventName, L as Listener } from './brain-Cp_3GIS2.js';
+import { R as RetryPolicy, E as ErrorHandler } from './retry-policy-rutAfVeR.js';
 import { L as Logger } from './logger-B63L5bTg.js';
 import { T as Tracer } from './observability-D-HZN_mF.js';
-import { P as PermissionPolicy } from './permission-BDv7z0mk.js';
-import { U as Usage, C as Context, J as JSONSchema, R as Request, b as Response, g as ContentBlock, l as TextBlock, T as Tool, P as Provider, o as RunOptions } from './context-CNRYfhUv.js';
-import { H as HookEvent, a as HookMatcher, I as InProcessHook, d as Config } from './config-BSU-6vah.js';
-import { W as WireFamily } from './models-registry-B6_KfS65.js';
+import { P as PermissionPolicy } from './permission-B7nKnEvQ.js';
+import { U as Usage, C as Context, J as JSONSchema, R as Request, b as Response, g as ContentBlock, l as TextBlock, T as Tool, P as Provider, o as RunOptions } from './context-C7G_MtLV.js';
+import { W as WireFamily, H as HookEvent, e as HookMatcher, I as InProcessHook, h as Config } from './config-BaVThgnT.js';
 
 /**
  * Single fleet-wide event with subagent attribution. Whatever a child

package/dist/{brain-Dfv4Y82E.d.ts → brain-Cp_3GIS2.d.ts}

@@ -1,4 +1,4 @@
-import { U as Usage, C as Context, j as ToolProgressEvent, T as Tool } from './context-CNRYfhUv.js';
+import { U as Usage, C as Context, j as ToolProgressEvent, T as Tool } from './context-C7G_MtLV.js';
 
 type MemoryScope = 'project-agents' | 'project-memory' | 'user-memory';
 type MemoryType = 'fact' | 'decision' | 'convention' | 'preference' | 'reference' | 'anti_pattern';
@@ -168,6 +168,17 @@ interface EventMap {
         id: string;
         name: string;
     };
+    /**
+     * Fired when a single SSE event handler throws mid-stream. Best-effort: the
+     * malformed event is skipped and the partial response built from earlier
+     * events is preserved, so the stream is not aborted. `eventType` is the SSE
+     * event's `type`; `msg` is the handler error message.
+     */
+    'provider.stream_error': {
+        ctx: Context;
+        eventType: string;
+        msg: string;
+    };
     /**
      * Fired before each retry of a failed provider call. `attempt` is 1-based
      * (the first retry is attempt 1, etc.). `description` is the human-readable
@@ -538,8 +549,8 @@ interface EventMap {
                 name: string | undefined;
                 message: string;
                 stack?: string | undefined;
-            };
-        };
+            } | undefined;
+        } | undefined;
     };
     /**
      * Fired by the delegate tool when a subagent finishes. The agent's run

package/dist/{compactor-DXLxLcmU.d.ts → compactor-BueGt7LG.d.ts}

@@ -1,4 +1,4 @@
-import { C as Context } from './context-CNRYfhUv.js';
+import { C as Context } from './context-C7G_MtLV.js';
 
 interface CompactRepairReport {
     removedToolUses: string[];
@@ -31,6 +31,14 @@ interface CompactReport {
         saved: number;
     }[];
     repaired?: CompactRepairReport | undefined;
+    /**
+     * When a compactor collapses a range of ancient turns into a single digest,
+     * this carries the digest text so callers (e.g. the audit/session log) can
+     * record exactly what was collapsed. Lossless compactors preserve all
+     * textual content here; only raw tool I/O is dropped (it stays in the
+     * session log). Undefined when no range was collapsed this pass.
+     */
+    collapsedDigest?: string | undefined;
 }
 interface Compactor {
     compact(ctx: Context, opts?: {

package/dist/{config-BSU-6vah.d.ts → config-BaVThgnT.d.ts}

@@ -1,5 +1,4 @@
-import { W as WireFamily } from './models-registry-B6_KfS65.js';
-import { k as Capabilities, f as Permission } from './context-CNRYfhUv.js';
+import { k as Capabilities, f as Permission } from './context-C7G_MtLV.js';
 
 type ContextWindowModeId = 'balanced' | 'frugal' | 'deep' | 'archival';
 type ContextWindowAggressiveOn = 'hard' | 'soft' | 'warn';
@@ -131,6 +130,100 @@ type HookEntry = {
     timeoutMs?: number | undefined;
 };
 
+/**
+ * Mirror of the models.dev/api.json schema. Top-level is keyed by provider id.
+ * We keep `unknown` for fields we don't read so the cached payload stays faithful.
+ */
+interface ModelsDevModel {
+    id: string;
+    name: string;
+    family?: string | undefined;
+    attachment?: boolean | undefined;
+    reasoning?: boolean | undefined;
+    tool_call?: boolean | undefined;
+    temperature?: boolean | undefined;
+    knowledge?: string | undefined;
+    release_date?: string | undefined;
+    last_updated?: string | undefined;
+    open_weights?: boolean | undefined;
+    modalities?: {
+        input?: string[] | undefined;
+        output?: string[] | undefined;
+    };
+    cost?: {
+        input?: number | undefined;
+        output?: number | undefined;
+        cache_read?: number | undefined;
+        cache_write?: number | undefined;
+        [k: string]: number | undefined;
+    };
+    limit?: {
+        context?: number | undefined;
+        output?: number | undefined;
+    };
+    [k: string]: unknown;
+}
+interface ModelsDevProvider {
+    id: string;
+    name: string;
+    /** Env vars that hold the API key, in priority order. */
+    env?: string[] | undefined;
+    /** Identifies the wire format family (e.g. @ai-sdk/anthropic). */
+    npm?: string | undefined;
+    /** Default base URL when not provided by SDK defaults. */
+    api?: string | undefined;
+    /** Documentation URL. */
+    doc?: string | undefined;
+    models: Record<string, ModelsDevModel>;
+}
+type ModelsDevPayload = Record<string, ModelsDevProvider>;
+/**
+ * Canonical wire-format families WrongStack knows how to speak natively.
+ * Used by the provider registry to pick a transport.
+ */
+type WireFamily = 'anthropic' | 'openai' | 'openai-compatible' | 'google' | 'unsupported';
+interface ResolvedProvider {
+    id: string;
+    name: string;
+    family: WireFamily;
+    apiBase?: string | undefined;
+    envVars: string[];
+    doc?: string | undefined;
+    models: ModelsDevModel[];
+    npm?: string | undefined;
+}
+interface ResolvedModel {
+    providerId: string;
+    modelId: string;
+    capabilities: {
+        tools: boolean;
+        vision: boolean;
+        reasoning: boolean;
+        maxContext: number;
+        maxOutput?: number | undefined;
+        knowledge?: string | undefined;
+    };
+    cost?: ModelsDevModel['cost'] | undefined;
+}
+interface ModelsRegistry {
+    /** Load (from cache or network). Idempotent; second call returns cached value. */
+    load(opts?: {
+        force?: boolean | undefined;
+    }): Promise<ModelsDevPayload>;
+    /** Force-refresh from network and overwrite cache. */
+    refresh(): Promise<ModelsDevPayload>;
+    /** All providers, classified by wire family. */
+    listProviders(): Promise<ResolvedProvider[]>;
+    /** A single provider by id, or undefined. */
+    getProvider(id: string): Promise<ResolvedProvider | undefined>;
+    /** A model lookup with capabilities + cost. */
+    getModel(providerId: string, modelId: string): Promise<ResolvedModel | undefined>;
+    /** Suggest a default model for the given provider (latest by release_date). */
+    suggestModel(providerId: string): Promise<string | undefined>;
+    /** Cache freshness in seconds since last successful network fetch (Infinity if never). */
+    ageSeconds(): Promise<number>;
+}
+
 interface ContextConfig {
     /** Context-window policy mode. Controls compaction thresholds and preservation depth. */
     mode?: ContextWindowModeId | undefined;
@@ -433,6 +526,14 @@ interface Config {
     autonomy?: AutonomyConfig | undefined;
     /** Show rotating launch hints on startup. Default: true. Set to false to suppress. */
     hints?: boolean | undefined;
+    /** Raw SSE stream debugging — hex-dump every byte received from providers to stderr. */
+    debugStream?: boolean | undefined;
+    /**
+     * Where settings are persisted. 'global' → ~/.wrongstack/config.json
+     * (default). 'project' → ~/.wrongstack/projects/<slug>/config.local.json.
+     * When 'project', provider/model/autonomy/ux settings are saved per-project.
+     */
+    configScope?: 'global' | 'project' | undefined;
     /** Automatic codebase symbol-index maintenance (session-start + live updates). */
     indexing?: IndexingConfig | undefined;
     /** Saved launch preferences — restored on next boot for one-line confirmation. */
@@ -503,4 +604,4 @@ interface ConfigStore {
     watch(cb: (next: Readonly<Config>, prev: Readonly<Config>) => void): () => void;
 }
 
-export { type AutonomyConfig as A, listContextWindowModes as B, type ContextWindowAggressiveOn as C, DEFAULT_CONTEXT_WINDOW_MODE_ID as D, resolveContextWindowPolicy as E, type FeaturesConfig as F, type HookEvent as H, type InProcessHook as I, type LaunchConfig as L, type MCPServerConfig as M, type PluginConfig as P, type ShellHook as S, type ToolsConfig as T, type HookMatcher as a, type HookEntry as b, type ContextWindowPolicy as c, type Config as d, type ConfigStore as e, type ConfigLoader as f, type SyncConfig as g, type ModelMatrixEntry as h, type HookInput as i, type HookOutcome as j, CONTEXT_WINDOW_MODES as k, type ContextConfig as l, type ContextWindowConfigLike as m, type ContextWindowMode as n, type ContextWindowModeId as o, type ContextWindowThresholds as p, type CustomModelDefinition as q, type IndexingConfig as r, type LogConfig as s, type ProviderApiKey as t, type ProviderConfig as u, type SessionLoggingConfig as v, type SyncCategory as w, formatContextWindowModeList as x, getContextWindowMode as y, isContextWindowModeId as z };
+export { type AutonomyConfig as A, type SyncCategory as B, type ContextWindowAggressiveOn as C, DEFAULT_CONTEXT_WINDOW_MODE_ID as D, formatContextWindowModeList as E, type FeaturesConfig as F, getContextWindowMode as G, type HookEvent as H, type InProcessHook as I, isContextWindowModeId as J, listContextWindowModes as K, type LaunchConfig as L, type ModelsRegistry as M, resolveContextWindowPolicy as N, type ProviderConfig as P, type ResolvedProvider as R, type ShellHook as S, type ToolsConfig as T, type WireFamily as W, type ModelsDevPayload as a, type ResolvedModel as b, type MCPServerConfig as c, type ModelMatrixEntry as d, type HookMatcher as e, type HookEntry as f, type ContextWindowPolicy as g, type Config as h, type ConfigStore as i, type ConfigLoader as j, type SyncConfig as k, type HookInput as l, type HookOutcome as m, CONTEXT_WINDOW_MODES as n, type ContextConfig as o, type ContextWindowConfigLike as p, type ContextWindowMode as q, type ContextWindowModeId as r, type ContextWindowThresholds as s, type CustomModelDefinition as t, type IndexingConfig as u, type LogConfig as v, type ModelsDevProvider as w, type PluginConfig as x, type ProviderApiKey as y, type SessionLoggingConfig as z };

package/dist/{context-CNRYfhUv.d.ts → context-C7G_MtLV.d.ts}

@@ -589,6 +589,36 @@ declare class ProviderError extends WrongStackError {
      */
     describe(): string;
 }
+/**
+ * Thrown when the provider stream stops delivering data mid-response.
+ * This is distinct from a network error (TCP reset, DNS failure) — the
+ * connection is established and the response started, but chunks stopped
+ * arriving before the stream completed.
+ *
+ * Status 599 is used as a sentinel to distinguish stream hangs from
+ * regular HTTP errors while still flowing through ProviderError-based
+ * retry and fallback infrastructure.
+ */
+declare class StreamHangError extends ProviderError {
+    /** Name of the provider that hung, e.g. "zai", "anthropic". */
+    readonly hungProviderId: string;
+    /** Model that was being called when the hang occurred. */
+    readonly hungModel: string;
+    /** How long (ms) we waited for the next chunk before declaring a hang. */
+    readonly hangTimeoutMs: number;
+    /** How many bytes were received before the hang. */
+    readonly bytesReceived: number;
+    /** Elapsed time (ms) from the start of the stream until the hang. */
+    readonly elapsedMs: number;
+    constructor(opts: {
+        providerId: string;
+        model: string;
+        hangTimeoutMs: number;
+        bytesReceived: number;
+        elapsedMs: number;
+        cause?: unknown | undefined;
+    });
+}
 
 interface SessionMetadata {
     id: string;
@@ -692,6 +722,13 @@ type SessionEvent = {
         phase: string;
         saved: number;
     }>;
+    /**
+     * Lossless digest of the range collapsed during this compaction (text
+     * content preserved; raw tool I/O omitted). Captures *what* was collapsed
+     * for forensics. May be truncated for log size. Absent when nothing was
+     * collapsed (e.g. elision-only passes).
+     */
+    digest?: string | undefined;
 } | {
     type: 'error';
     ts: string;
@@ -1218,4 +1255,4 @@ declare class Context implements RunEnv {
     usage(): Usage;
 }
 
-export { type ToolStreamEvent as $, AgentError as A, type MessageRole as B, Context as C, PluginError as D, ERROR_CODES as E, type FileSnapshot as F, type ProviderErrorBody as G, type ReadonlyConversationState as H, type ImageBlock as I, type JSONSchema as J, type RiskTier as K, type RunEnv as L, type Message as M, SessionError as N, type StateChange as O, type Provider as P, type StateChangeHandler as Q, type Request as R, type SessionEvent as S, type Tool as T, type Usage as U, type StopReason as V, type StreamEvent as W, type ThinkingBlock as X, type ToolCallContext as Y, ToolError as Z, type ToolFinalEvent as _, type SessionWriter as a, WrongStackError as a0, asBlocks as a1, asText as a2, extractRunEnv as a3, isAgentError as a4, isConfigError as a5, isFsError as a6, isImageBlock as a7, isPluginError as a8, isSessionError as a9, isTextBlock as aa, isThinkingBlock as ab, isToolError as ac, isToolResultBlock as ad, isToolUseBlock as ae, isWrongStackError as af, toWrongStackError as ag, wrapAsState as ah, type Response as b, type TokenCounter as c, type CacheStats as d, ProviderError as e, type Permission as f, type ContentBlock as g, type SessionMetadata as h, type SessionStore as i, type ToolProgressEvent as j, type Capabilities as k, type TextBlock as l, type ToolUseBlock as m, type ToolResultBlock as n, type RunOptions as o, type ResumedSession as p, type SessionData as q, type SessionSummary as r, type TodoItem as s, ConversationState as t, ConfigError as u, type ContextInit as v, type ErrorCode as w, type ErrorSeverity as x, type ErrorSubsystem as y, FsError as z };
+export { type ToolFinalEvent as $, AgentError as A, type MessageRole as B, Context as C, PluginError as D, ERROR_CODES as E, type FileSnapshot as F, type ProviderErrorBody as G, type ReadonlyConversationState as H, type ImageBlock as I, type JSONSchema as J, type RiskTier as K, type RunEnv as L, type Message as M, SessionError as N, type StateChange as O, type Provider as P, type StateChangeHandler as Q, type Request as R, type SessionEvent as S, type Tool as T, type Usage as U, type StopReason as V, type StreamEvent as W, StreamHangError as X, type ThinkingBlock as Y, type ToolCallContext as Z, ToolError as _, type SessionWriter as a, type ToolStreamEvent as a0, WrongStackError as a1, asBlocks as a2, asText as a3, extractRunEnv as a4, isAgentError as a5, isConfigError as a6, isFsError as a7, isImageBlock as a8, isPluginError as a9, isSessionError as aa, isTextBlock as ab, isThinkingBlock as ac, isToolError as ad, isToolResultBlock as ae, isToolUseBlock as af, isWrongStackError as ag, toWrongStackError as ah, wrapAsState as ai, type Response as b, type TokenCounter as c, type CacheStats as d, ProviderError as e, type Permission as f, type ContentBlock as g, type SessionMetadata as h, type SessionStore as i, type ToolProgressEvent as j, type Capabilities as k, type TextBlock as l, type ToolUseBlock as m, type ToolResultBlock as n, type RunOptions as o, type ResumedSession as p, type SessionData as q, type SessionSummary as r, type TodoItem as s, ConversationState as t, ConfigError as u, type ContextInit as v, type ErrorCode as w, type ErrorSeverity as x, type ErrorSubsystem as y, FsError as z };

package/dist/coordination/index.d.ts

@@ -1,20 +1,19 @@
-export { b as BrainArbiter, B as BrainDecision, d as BrainDecisionOption, e as BrainDecisionQueue, a as BrainDecisionRequest, f as BrainDecisionSource, g as BrainFallback, h as BrainRisk, D as DefaultBrainArbiter, i as DefaultBrainArbiterOptions, H as HumanEscalatingBrainArbiter, O as ObservableBrainArbiter, j as formatHumanPrompt } from '../brain-Dfv4Y82E.js';
-export { A as ACP_AGENTS, a as AGENTS_BY_PHASE, b as AGENT_CATALOG, c as ALL_AGENT_DEFINITIONS, d as ALL_FLEET_AGENTS, e as AUDIT_LOG_AGENT, f as AutoExtendCeiling, g as AutoExtendPolicy, B as BUG_HUNTER_AGENT, h as BugFinding, C as CollabBudgetConfig, i as CollabBudgetOverrides, j as CollabBudgetWarningPayload, k as CollabDebugReport, l as CollabSession, m as CollabSessionOptions, n as CreateDelegateToolOptions, o as CriticConcern, p as CriticEvaluation, D as DEFAULT_DIRECTOR_PREAMBLE, q as DEFAULT_SUBAGENT_BASELINE, r as DelegateHost, s as Director, t as DirectorAlert, u as DirectorAlertLevel, v as DirectorCancelCollabPayload, w as DirectorPromptParts, x as DirectorSessionFactory, y as DirectorSessionFactoryOptions, F as FLEET_ROSTER, z as FLEET_ROSTER_BUDGETS, E as FLEET_ROSTER_WITHACP, G as FleetCostCapError, H as FleetManager, I as FleetManagerOptions, J as FleetRosterBudget, K as FleetSpawnBudgetError, L as ICoordinator, M as IFleetManager, N as LargeAnswerStore, O as NULL_FLEET_BUS, R as REFACTOR_PLANNER_AGENT, P as RefactorPhase, Q as RefactorPlan, S as SECURITY_SCANNER_AGENT, T as SharedFileEntry, U as SharedFileSnapshot, V as SubagentPromptParts, W as applyRosterBudget, X as attachAutoExtend, Y as composeDirectorPrompt, Z as composeSubagentPrompt, _ as createDelegateTool, $ as getAgentDefinition, a0 as makeAskResultTool, a1 as makeAskTool, a2 as makeAssignTool, a3 as makeAwaitTasksTool, a4 as makeCollabDebugTool, a5 as makeDirectorSessionFactory, a6 as makeFleetEmitTool, a7 as makeFleetHealthTool, a8 as makeFleetSessionTool, a9 as makeFleetStatusTool, aa as makeFleetUsageTool, ab as makeRollUpTool, ac as makeSpawnTool, ad as makeTerminateTool, ae as makeWorkCompleteTool, af as rosterSummaryFromConfigs } from '../null-fleet-bus-D09hMzFQ.js';
-import { A as AgentDefinition } from '../multi-agent-coordinator-51LvnXkD.js';
-export { T as AGENT_TOOL_PRESETS, b as AgentBudgetTier, c as AgentCapability, d as AgentPhase, e as DEFAULT_DISPATCH_ROLE, a as DefaultMultiAgentCoordinator, f as DispatchCandidate, D as DispatchClassifier, g as DispatchMethod, h as DispatchOptions, i as DispatchResult, H as HEAVY_BUDGET, L as LIGHT_BUDGET, M as MEDIUM_BUDGET, j as MultiAgentCoordinatorOptions, k as dispatchAgent, m as makeLLMClassifier, s as scoreAgents } from '../multi-agent-coordinator-51LvnXkD.js';
-export { h as AgentFactory, i as AgentFactoryResult, j as AgentRunnerOptions, k as BudgetExceededError, l as BudgetKind, m as BudgetLimits, n as BudgetNegotiationMode, o as BudgetThresholdDecision, p as BudgetThresholdHandler, q as BudgetThresholdSignal, r as BudgetUsage, F as FleetBus, s as FleetEvent, t as FleetHandler, u as FleetUsage, v as FleetUsageAggregator, w as SubagentBudget, x as SubagentUsageSnapshot, y as makeAgentSubagentRunner } from '../agent-subagent-runner-DukQLUcS.js';
-export { I as InMemoryAgentBridge, a as InMemoryBridgeTransport, c as createMessage } from '../agent-bridge-mOxbpFcg.js';
-import '../context-CNRYfhUv.js';
+export { b as BrainArbiter, B as BrainDecision, d as BrainDecisionOption, e as BrainDecisionQueue, a as BrainDecisionRequest, f as BrainDecisionSource, g as BrainFallback, h as BrainRisk, D as DefaultBrainArbiter, i as DefaultBrainArbiterOptions, H as HumanEscalatingBrainArbiter, O as ObservableBrainArbiter, j as formatHumanPrompt } from '../brain-Cp_3GIS2.js';
+export { A as ACP_AGENTS, a as AGENTS_BY_PHASE, b as AGENT_CATALOG, c as ALL_AGENT_DEFINITIONS, d as ALL_FLEET_AGENTS, e as AUDIT_LOG_AGENT, f as AutoExtendCeiling, g as AutoExtendPolicy, B as BUG_HUNTER_AGENT, h as BugFinding, C as CollabBudgetConfig, i as CollabBudgetOverrides, j as CollabBudgetWarningPayload, k as CollabDebugReport, l as CollabSession, m as CollabSessionOptions, n as CreateDelegateToolOptions, o as CriticConcern, p as CriticEvaluation, D as DEFAULT_DIRECTOR_PREAMBLE, q as DEFAULT_SUBAGENT_BASELINE, r as DelegateHost, s as Director, t as DirectorAlert, u as DirectorAlertLevel, v as DirectorCancelCollabPayload, w as DirectorPromptParts, x as DirectorSessionFactory, y as DirectorSessionFactoryOptions, F as FLEET_ROSTER, z as FLEET_ROSTER_BUDGETS, E as FLEET_ROSTER_WITHACP, G as FleetCostCapError, H as FleetManager, I as FleetManagerOptions, J as FleetRosterBudget, K as FleetSpawnBudgetError, L as ICoordinator, M as IFleetManager, N as LargeAnswerStore, O as NULL_FLEET_BUS, R as REFACTOR_PLANNER_AGENT, P as RefactorPhase, Q as RefactorPlan, S as SECURITY_SCANNER_AGENT, T as SharedFileEntry, U as SharedFileSnapshot, V as SubagentPromptParts, W as applyRosterBudget, X as attachAutoExtend, Y as composeDirectorPrompt, Z as composeSubagentPrompt, _ as createDelegateTool, $ as getAgentDefinition, a0 as makeAskResultTool, a1 as makeAskTool, a2 as makeAssignTool, a3 as makeAwaitTasksTool, a4 as makeCollabDebugTool, a5 as makeDirectorSessionFactory, a6 as makeFleetEmitTool, a7 as makeFleetHealthTool, a8 as makeFleetSessionTool, a9 as makeFleetStatusTool, aa as makeFleetUsageTool, ab as makeRollUpTool, ac as makeSpawnTool, ad as makeTerminateTool, ae as makeWorkCompleteTool, af as rosterSummaryFromConfigs } from '../null-fleet-bus-BUyfqh23.js';
+import { A as AgentDefinition } from '../multi-agent-coordinator-QWEzJDlm.js';
+export { T as AGENT_TOOL_PRESETS, b as AgentBudgetTier, c as AgentCapability, d as AgentPhase, e as DEFAULT_DISPATCH_ROLE, a as DefaultMultiAgentCoordinator, f as DispatchCandidate, D as DispatchClassifier, g as DispatchMethod, h as DispatchOptions, i as DispatchResult, H as HEAVY_BUDGET, L as LIGHT_BUDGET, M as MEDIUM_BUDGET, j as MultiAgentCoordinatorOptions, k as dispatchAgent, m as makeLLMClassifier, s as scoreAgents } from '../multi-agent-coordinator-QWEzJDlm.js';
+export { h as AgentFactory, i as AgentFactoryResult, j as AgentRunnerOptions, k as BudgetExceededError, l as BudgetKind, m as BudgetLimits, n as BudgetNegotiationMode, o as BudgetThresholdDecision, p as BudgetThresholdHandler, q as BudgetThresholdSignal, r as BudgetUsage, F as FleetBus, s as FleetEvent, t as FleetHandler, u as FleetUsage, v as FleetUsageAggregator, w as SubagentBudget, x as SubagentUsageSnapshot, y as makeAgentSubagentRunner } from '../agent-subagent-runner-1GeQE_L0.js';
+export { I as InMemoryAgentBridge, a as InMemoryBridgeTransport, c as createMessage } from '../agent-bridge-r9y6gdn4.js';
+import '../context-C7G_MtLV.js';
 import 'node:events';
 import '../director-state-BfeCUbmk.js';
-import '../config-BSU-6vah.js';
-import '../models-registry-B6_KfS65.js';
-import '../index-DIKEcfgC.js';
+import '../config-BaVThgnT.js';
+import '../index-CPweVoFM.js';
 import '../logger-B63L5bTg.js';
-import '../pipeline-BqiA_UMr.js';
+import '../pipeline-BG7UgbDc.js';
 import '../observability-D-HZN_mF.js';
-import '../permission-BDv7z0mk.js';
-import '../retry-policy-BcmuT_V0.js';
+import '../permission-B7nKnEvQ.js';
+import '../retry-policy-rutAfVeR.js';
 
 /** Phase 1 · Discovery — map the territory before any work begins. */
 declare const DISCOVERY_AGENTS: AgentDefinition[];

package/dist/coordination/index.js

@@ -123,6 +123,11 @@ var DefaultBrainArbiter = class {
           options: request.options,
           rationale: "Decision requires human authority or lacks a safe automatic option."
         };
+      default:
+        return {
+          type: "deny",
+          reason: `Brain could not safely decide (unknown fallback: ${String(request.fallback)}): ${request.question}`
+        };
     }
   }
 };
@@ -1758,6 +1763,53 @@ Working rules:
         "flaws"
       ]
     }
+  },
+  {
+    config: {
+      id: "refactor-planner",
+      name: "Refactor Planner",
+      role: "refactor-planner",
+      tools: [...PLAN_TOOLS, "diff"],
+      prompt: `You are the Refactor Planner agent. Your job is to analyze code
+structure and produce a concrete, phased refactoring plan with risk
+assessment, dependency ordering, and rollback strategy.
+
+Scope:
+- Map module-level dependencies (import graph)
+- Identify coupling hotspots (high fan-in/out modules)
+- Assess refactoring risk by complexity and test coverage
+- Generate phased plans with checkpoint milestones
+- Produce diff-friendly task lists (one task = one concern)
+
+Input format you accept:
+{ "task": "plan | assess | roadmap", "target": "src/core", "constraint": "no-breaking-changes | minimal-downtime | full-rewrite", "focus": "architecture | performance | maintainability" }
+
+Output: Markdown refactor plan with phases (Low Risk / Medium Risk / High Risk),
+dependency graph, rollback strategy, and exit criteria.
+
+Working rules:
+- Always include rollback strategy \u2014 every refactor can fail
+- Merge tasks that take <1h into a single phase
+- Respect team constraints (reviewer availability, parallelization)
+- Never plan without analyzing the actual code first`
+    },
+    budget: HEAVY_BUDGET,
+    capability: {
+      phase: "planning",
+      summary: "Refactoring planner: analyzes code structure, maps dependencies, produces risk-scored phased plans with rollback strategy.",
+      keywords: [
+        "refactor",
+        "refactoring",
+        "restructure",
+        "debt",
+        "technical debt",
+        "clean up",
+        "modularize",
+        "decouple",
+        "dependency graph",
+        "code structure"
+      ]
+    }
   }
 ];
 
@@ -2297,6 +2349,157 @@ Working rules:
         "robustness"
       ]
     }
+  },
+  {
+    config: {
+      id: "security-scanner",
+      name: "Security Scanner",
+      role: "security-scanner",
+      tools: [...TOOLS.inspect],
+      prompt: `You are the Security Scanner agent. Your job is to scan code,
+configs, and dependencies for security issues from hardcoded secrets to
+supply chain risks.
+
+Scope:
+- Detect hardcoded secrets: API keys, tokens, passwords, private keys
+- Find injection vectors: eval, innerHTML, SQL concat, shell injection
+- Identify insecure patterns: weak crypto, hardcoded IVs, disabled TLS
+- Scan dependencies for known CVEs (via npm/pnpm audit)
+- Flag supply chain risks: postinstall hooks, unverified scripts
+
+Input format you accept:
+{ "task": "scan | audit | secrets | dependencies", "paths": ["src", "config"], "depth": "quick | normal | deep" }
+
+Output: Markdown security report with severity-ranked findings, injection
+vectors, dependency issues, and a remediation checklist.
+
+Working rules:
+- Never scan node_modules \u2014 use npm audit instead
+- Always provide remediation steps, not just findings
+- Verify regex-based secrets before flagging (false positive risk)
+- When in doubt, flag as medium rather than ignoring potential issues`
+    },
+    budget: HEAVY_BUDGET,
+    capability: {
+      phase: "verify",
+      summary: "Security scanner: detects hardcoded secrets, injection vectors, insecure patterns, and supply-chain risks with remediation.",
+      keywords: [
+        "security",
+        "scan",
+        "vulnerability",
+        "secret",
+        "api key",
+        "hardcoded",
+        "injection",
+        "cve",
+        "audit dependencies",
+        "supply chain",
+        "xss",
+        "sqli",
+        "shell injection",
+        "sensitive data",
+        "credential"
+      ]
+    }
+  },
+  {
+    config: {
+      id: "bug-hunter",
+      name: "Bug Hunter",
+      role: "bug-hunter",
+      tools: [...TOOLS.inspect],
+      prompt: `You are the Bug Hunter agent. Your job is to systematically scan
+source code for bugs, anti-patterns, and code smells using pattern matching
+and heuristics. Output a prioritized hit list with file:line references.
+
+Scope:
+- Detect common bug patterns (uncaught errors, resource leaks, race conditions)
+- Identify anti-patterns (callback hell, God objects, circular deps)
+- Find TypeScript-specific issues (unsafe any, missing null checks, branded types)
+- Flag security-sensitive constructs (eval, innerHTML, hardcoded secrets)
+- Rank findings: critical > high > medium > low
+
+Input format you accept:
+{ "task": "scan | hunt | check", "paths": ["src/**/*.ts"], "focus": "bugs | patterns | security | all", "severityThreshold": "medium" }
+
+Output: Markdown bug hunt report with critically/high/medium/low sections.
+Each entry: **[TYPE]** \`file:line\` \u2014 description + suggested fix
+
+Working rules:
+- Never scan node_modules \u2014 it's noise
+- Always include file:line for every finding
+- If >30% of findings are false positives, note the confidence level
+- Ask director for clarification if paths are ambiguous`
+    },
+    budget: HEAVY_BUDGET,
+    capability: {
+      phase: "verify",
+      summary: "Bug hunter: scans source code for bugs, anti-patterns, and code smells, producing a file:line-ranked hit list with fixes.",
+      keywords: [
+        "bug",
+        "hunt",
+        "scan",
+        "code smell",
+        "anti-pattern",
+        "race condition",
+        "memory leak",
+        "null deref",
+        "type safety",
+        "unhandled error",
+        "find bugs",
+        "audit code",
+        "code quality"
+      ]
+    }
+  },
+  {
+    config: {
+      id: "audit-log",
+      name: "Audit Log",
+      role: "audit-log",
+      tools: [...TOOLS.inspect],
+      prompt: `You are the Audit Log agent. Your job is to analyze structured JSONL
+session logs and produce actionable markdown reports.
+
+Scope:
+- Parse session logs (iteration counts, tool calls, errors, usage)
+- Detect repeated failure patterns across multiple runs
+- Identify tool usage anomalies (over-use, failures, unexpected chains)
+- Track token consumption trends
+- Generate structured audit reports with severity ratings
+
+Input format you accept:
+{ "task": "analyze | report | trends", "sessionPath": "<path>", "focus": "errors | tools | usage | all" }
+
+Output: Markdown audit report with Summary, Top Errors, Tool Usage table,
+Anomalies, and Cost Trend sections.
+
+Working rules:
+- Never fabricate numbers \u2014 read the actual logs first
+- Always include file:line references for errors
+- If sessionPath is missing, ask the director to provide it
+- Report confidence level: high (>90% accuracy), medium, low`
+    },
+    budget: MEDIUM_BUDGET,
+    capability: {
+      phase: "verify",
+      summary: "Audit log analyzer: parses session JSONL, detects failure patterns, tool anomalies, and cost trends with structured reports.",
+      keywords: [
+        "audit",
+        "log",
+        "logs",
+        "session",
+        "trace",
+        "analyze logs",
+        "error patterns",
+        "cost analysis",
+        "tool usage",
+        "token usage",
+        "post-mortem",
+        "trend",
+        "anomaly"
+      ]
+    }
   }
 ];
 
@@ -6280,7 +6483,10 @@ var Director = class _Director {
   workCompleteFlag = false;
   /** Pending /btw notes stashed by the leader agent (see setLeaderBtwNote). */
   _leaderBtwNotes = [];
-  /** Active collab sessions tracked by sessionId (see spawnCollab). */
+  /** Active collab sessions tracked by sessionId (see spawnCollab).
+   *  The tuple holds the session and its Director-registered listener unsubs.
+   *  Calling the unsubs on cancel/premature-cleanup prevents listener accumulation
+   *  on CollabSession (EventEmitter) across many spawnCollab() calls. */
   _activeCollabSessions = /* @__PURE__ */ new Map();
   /** Prevents large `ask_subagent` answers from bloating the leader's context window. */
   largeAnswerStore;
@@ -6610,11 +6816,13 @@ var Director = class _Director {
    * The CollabDebugReport will reflect 'cancelled' disposition when awaited.
    */
   cancelCollabSession(sessionId, reason = "Director cancelled") {
-    const session = this._activeCollabSessions.get(sessionId);
-    if (!session || session.isCancelled()) return;
-    session.cancel(reason);
-    for (const [_role, subagentId] of session.getSubagentIds()) {
-      this.coordinator.stop(subagentId).catch(() => {
+    const entry = this._activeCollabSessions.get(sessionId);
+    if (!entry || entry.session.isCancelled()) return;
+    for (const unsub of entry.unsubs) unsub();
+    entry.session.cancel(reason);
+    for (const [_role, subagentId] of entry.session.getSubagentIds()) {
+      this.coordinator.stop(subagentId).catch((err) => {
+        console.debug(`[director] stop subagent ${subagentId} failed (may have already completed): ${err}`);
       });
     }
   }
@@ -7262,9 +7470,15 @@ var Director = class _Director {
         return options.onBudgetWarning?.(alert) ?? "ignore";
       }
     });
-    this._activeCollabSessions.set(session.sessionId, session);
-    session.on("session.done", () => this._activeCollabSessions.delete(session.sessionId));
-    session.on("session.error", () => this._activeCollabSessions.delete(session.sessionId));
+    const doneHandler = () => this._activeCollabSessions.delete(session.sessionId);
+    const errorHandler = () => this._activeCollabSessions.delete(session.sessionId);
+    session.on("session.done", doneHandler);
+    session.on("session.error", errorHandler);
+    const unsubs = [
+      () => session.off("session.done", doneHandler),
+      () => session.off("session.error", errorHandler)
+    ];
+    this._activeCollabSessions.set(session.sessionId, { session, unsubs });
     return session.start();
   }
   /**
@@ -8010,8 +8224,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
         onClose: (s) => this.appendToIndex(s)
       });
     } catch (err) {
-      await handle.close().catch(() => {
-      });
+      await handle.close().catch((e) => console.warn(`[session-store] handle.close() failed: ${e}`));
       throw err;
     }
   }
@@ -8042,8 +8255,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
       );
       return { writer, data };
     } catch (err) {
-      await handle.close().catch(() => {
-      });
+      await handle.close().catch((e) => console.warn(`[session-store] handle.close() failed: ${e}`));
       throw err;
     }
   }
@@ -8232,15 +8444,15 @@ var DefaultSessionStore = class _DefaultSessionStore {
    * sidecars, and the session directory (fleet.json, shared/, subagents/).
    */
   async deleteSession(id) {
-    await fsp6.unlink(this.sessionPath(id, ".jsonl")).catch(() => void 0);
-    await fsp6.unlink(this.sessionPath(id, ".summary.json")).catch(() => void 0);
+    await fsp6.unlink(this.sessionPath(id, ".jsonl")).catch((err) => console.warn(`[session-store] delete .jsonl failed: ${err}`));
+    await fsp6.unlink(this.sessionPath(id, ".summary.json")).catch((err) => console.warn(`[session-store] delete .summary.json failed: ${err}`));
     const shardDir = path4.dirname(path4.join(this.dir, id));
     const base = path4.basename(id);
     for (const ext of [".plan.json", ".todos.json"]) {
-      await fsp6.unlink(path4.join(shardDir, `${base}${ext}`)).catch(() => void 0);
+      await fsp6.unlink(path4.join(shardDir, `${base}${ext}`)).catch((err) => console.warn(`[session-store] delete ${ext} failed: ${err}`));
     }
     const sessDir = path4.join(shardDir, base);
-    await fsp6.rm(sessDir, { recursive: true, force: true }).catch(() => void 0);
+    await fsp6.rm(sessDir, { recursive: true, force: true }).catch((err) => console.warn(`[session-store] delete session dir failed: ${err}`));
     await this.writeTombstone(id);
   }
   async delete(id) {