@wrongstack/core 0.155.0 → 0.236.0

package/dist/index.d.ts

@@ -1,72 +1,77 @@
-import { S as SystemPromptBuilder, b as ModelCapabilities, B as BuildContext, C as Container, H as HookRegistry } from './pipeline-BG7UgbDc.js';
-export { c as BindOptions, D as Decorator, F as Factory, d as Middleware, M as MiddlewareHandler, N as NextFn, P as Pipeline, e as PipelineOptions, a as Renderer, T as Token, h as hookMatcherMatches } from './pipeline-BG7UgbDc.js';
-import { E as EventBus, l as MemoryStore, c as EventName, L as Listener, b as BrainArbiter } from './brain-CS_B0vIE.js';
-export { B as BrainDecision, d as BrainDecisionOption, e as BrainDecisionQueue, a as BrainDecisionRequest, f as BrainDecisionSource, g as BrainFallback, h as BrainRisk, D as DefaultBrainArbiter, i as DefaultBrainArbiterOptions, n as EventLogger, o as EventMap, H as HumanEscalatingBrainArbiter, p as MEMORY_TYPE_LABELS, q as MemoryClearedPayload, r as MemoryConsolidatedPayload, k as MemoryEntry, s as MemoryForgottenPayload, t as MemoryPriority, m as MemoryRelevanceContext, u as MemoryRememberedPayload, M as MemoryScope, v as MemoryType, O as ObservableBrainArbiter, w as ScopedEventBus, S as ScoredEntry, j as formatHumanPrompt } from './brain-CS_B0vIE.js';
-import { W as WorktreeManager } from './index-CI1hRfPt.js';
-export { A as AllocateOpts, M as MergeOpts, a as MergeResult, R as RunController, b as RunControllerOptions, T as TOKENS, c as WorktreeHandle, d as WorktreeManagerOptions, e as WorktreeRunResult, f as WorktreeStatus, g as assertSafePath } from './index-CI1hRfPt.js';
-import { C as Context, P as Provider, T as Tool, R as Request, b as Response, g as ContentBlock, l as TextBlock, M as Message } from './context-C7G_MtLV.js';
-export { A as AgentError, k as Capabilities, u as ConfigError, v as ContextInit, t as ConversationState, E as ERROR_CODES, w as ErrorCode, x as ErrorSeverity, y as ErrorSubsystem, F as FileSnapshot, z as FsError, I as ImageBlock, J as JSONSchema, B as MessageRole, f as Permission, D as PluginError, e as ProviderError, G as ProviderErrorBody, H as ReadonlyConversationState, p as ResumedSession, K as RiskTier, L as RunEnv, o as RunOptions, q as SessionData, N as SessionError, S as SessionEvent, h as SessionMetadata, i as SessionStore, r as SessionSummary, a as SessionWriter, O as StateChange, Q as StateChangeHandler, V as StopReason, W as StreamEvent, X as StreamHangError, Y as ThinkingBlock, s as TodoItem, c as TokenCounter, Z as ToolCallContext, _ as ToolError, $ as ToolFinalEvent, j as ToolProgressEvent, n as ToolResultBlock, a0 as ToolStreamEvent, m as ToolUseBlock, U as Usage, a1 as WrongStackError, a2 as asBlocks, a3 as asText, a4 as extractRunEnv, a5 as isAgentError, a6 as isConfigError, a7 as isFsError, a8 as isImageBlock, a9 as isPluginError, aa as isSessionError, ab as isTextBlock, ac as isThinkingBlock, ad as isToolError, ae as isToolResultBlock, af as isToolUseBlock, ag as isWrongStackError, ah as toWrongStackError, ai as wrapAsState } from './context-C7G_MtLV.js';
-import { P as ProviderRunner, R as RunProviderOptions$1 } from './provider-runner-Cocq0O9E.js';
-import { c as MCPServerConfig, h as Config, l as HookInput, m as HookOutcome, H as HookEvent, e as HookMatcher, I as InProcessHook, d as ModelMatrixEntry, i as ConfigStore } from './config-BaVThgnT.js';
-export { A as AutonomyConfig, n as CONTEXT_WINDOW_MODES, j as ConfigLoader, o as ContextConfig, C as ContextWindowAggressiveOn, p as ContextWindowConfigLike, q as ContextWindowMode, r as ContextWindowModeId, g as ContextWindowPolicy, s as ContextWindowThresholds, t as CustomModelDefinition, D as DEFAULT_CONTEXT_WINDOW_MODE_ID, F as FeaturesConfig, f as HookEntry, u as IndexingConfig, L as LaunchConfig, v as LogConfig, a as ModelsDevPayload, w as ModelsDevProvider, M as ModelsRegistry, x as PluginConfig, y as ProviderApiKey, P as ProviderConfig, b as ResolvedModel, R as ResolvedProvider, z as SessionLoggingConfig, S as ShellHook, B as SyncCategory, k as SyncConfig, T as ToolsConfig, W as WireFamily, E as formatContextWindowModeList, G as getContextWindowMode, J as isContextWindowModeId, K as listContextWindowModes, N as resolveContextWindowPolicy } from './config-BaVThgnT.js';
-export { a as CompactReport, C as Compactor } from './compactor-BueGt7LG.js';
-export { a as PermissionDecision, P as PermissionPolicy, S as SecretScrubber, T as TrustPolicy } from './permission-B7nKnEvQ.js';
+import { S as SystemPromptBuilder, m as ModelCapabilities, B as BuildContext, C as Container, H as HookRegistry, b as Mailbox, d as MailboxMessage, a as Renderer } from './pipeline-DsmlwTXu.js';
+export { h as AgentHeartbeatInput, A as AgentRegistrationInput, o as BindOptions, D as Decorator, F as Factory, f as MailboxAckInput, g as MailboxAgentStatus, i as MailboxMessageType, e as MailboxQuery, c as MailboxSendInput, j as MailboxTaskContext, p as Middleware, M as MiddlewareHandler, N as NextFn, P as Pipeline, q as PipelineOptions, k as ReadReceipts, l as RegisteredAgent, T as Token, r as hookMatcherMatches, n as normalizeRecipient } from './pipeline-DsmlwTXu.js';
+import { E as EventBus, l as MemoryStore, a as EventName, L as Listener, B as BrainArbiter } from './brain-sCZ3lCjq.js';
+export { b as BrainDecision, c as BrainDecisionOption, d as BrainDecisionQueue, e as BrainDecisionRequest, f as BrainDecisionSource, g as BrainFallback, h as BrainRisk, D as DefaultBrainArbiter, i as DefaultBrainArbiterOptions, n as EventLogger, o as EventMap, H as HumanEscalatingBrainArbiter, p as MEMORY_TYPE_LABELS, q as MemoryClearedPayload, r as MemoryConsolidatedPayload, k as MemoryEntry, s as MemoryForgottenPayload, t as MemoryPriority, m as MemoryRelevanceContext, u as MemoryRememberedPayload, M as MemoryScope, v as MemoryType, O as ObservableBrainArbiter, w as ScopedEventBus, S as ScoredEntry, j as formatHumanPrompt } from './brain-sCZ3lCjq.js';
+import { W as WorktreeManager } from './index-BlMqh5GO.js';
+export { A as AllocateOpts, M as MergeOpts, a as MergeResult, R as RunController, b as RunControllerOptions, T as TOKENS, c as WorktreeHandle, d as WorktreeManagerOptions, e as WorktreeRunResult, f as WorktreeStatus, g as assertSafePath } from './index-BlMqh5GO.js';
+import { C as Context, P as Provider, T as Tool, R as Request, b as Response, M as Message, g as ContentBlock, n as TextBlock } from './context-CLz3z_E8.js';
+export { A as AgentError, k as Capabilities, u as ConfigError, v as ContextInit, t as ConversationState, E as ERROR_CODES, w as ErrorCode, x as ErrorSeverity, y as ErrorSubsystem, F as FileSnapshot, z as FsError, I as ImageBlock, J as JSONSchema, B as MessageRole, f as Permission, D as PluginError, e as ProviderError, G as ProviderErrorBody, H as ReadonlyConversationState, p as ResumedSession, K as RiskTier, L as RunEnv, o as RunOptions, N as SddError, q as SessionData, O as SessionError, S as SessionEvent, h as SessionMetadata, i as SessionStore, r as SessionSummary, a as SessionWriter, Q as StateChange, V as StateChangeHandler, W as StopReason, X as StreamEvent, Y as StreamHangError, Z as ThinkingBlock, s as TodoItem, c as TokenCounter, _ as ToolCallContext, $ as ToolError, a0 as ToolFinalEvent, j as ToolProgressEvent, m as ToolResultBlock, a1 as ToolStreamEvent, l as ToolUseBlock, U as Usage, a2 as WrongStackError, a3 as asBlocks, a4 as asText, a5 as extractRunEnv, a6 as isAgentError, a7 as isConfigError, a8 as isFsError, a9 as isImageBlock, aa as isPluginError, ab as isSddError, ac as isSessionError, ad as isTextBlock, ae as isThinkingBlock, af as isToolError, ag as isToolResultBlock, ah as isToolUseBlock, ai as isWrongStackError, aj as toWrongStackError, ak as wrapAsState } from './context-CLz3z_E8.js';
+import { P as ProviderRunner, R as RunProviderOptions$1 } from './provider-runner-D0HgUqwV.js';
+import { c as MCPServerConfig, h as Config, l as HookInput, m as HookOutcome, H as HookEvent, e as HookMatcher, I as InProcessHook, d as ModelMatrixEntry, i as ConfigStore } from './config-Koq6f3fs.js';
+export { A as AutonomyConfig, n as CONTEXT_WINDOW_MODES, j as ConfigLoader, o as ContextConfig, C as ContextWindowAggressiveOn, p as ContextWindowConfigLike, q as ContextWindowMode, r as ContextWindowModeId, g as ContextWindowPolicy, s as ContextWindowThresholds, t as CustomModelDefinition, D as DEFAULT_CONTEXT_WINDOW_MODE_ID, F as FeaturesConfig, f as HookEntry, u as IndexingConfig, L as LaunchConfig, v as LogConfig, w as ModelsDevModel, a as ModelsDevPayload, x as ModelsDevProvider, M as ModelsRegistry, y as PluginConfig, z as ProviderApiKey, P as ProviderConfig, b as ResolvedModel, R as ResolvedProvider, B as SessionLoggingConfig, S as ShellHook, E as SyncCategory, k as SyncConfig, T as ToolsConfig, W as WireFamily, G as formatContextWindowModeList, J as getContextWindowMode, K as isContextWindowModeId, N as listContextWindowModes, O as resolveContextWindowPolicy } from './config-Koq6f3fs.js';
+export { a as CompactReport, C as Compactor } from './compactor-BRfg3QPd.js';
+import { P as PermissionPolicy } from './permission-DbWPbuoA.js';
+export { a as PermissionDecision, S as SecretScrubber, T as TrustPolicy } from './permission-DbWPbuoA.js';
 export { C as CheckpointInfo, R as RewindResult, a as RewindResultExtended, S as SessionRewinder } from './session-rewinder-C9HnMkhP.js';
-import { A as AttachmentStore, b as AttachmentRef, a as AddAttachmentInput } from './session-reader-BAtCxdaw.js';
-export { c as Attachment, d as AttachmentKind, e as AttachmentMeta, D as DefaultSessionReader, f as DefaultSessionReaderOptions, S as SessionReader } from './session-reader-BAtCxdaw.js';
+import { A as AttachmentStore, b as AttachmentRef, a as AddAttachmentInput } from './session-reader-CCOssnBS.js';
+export { c as Attachment, d as AttachmentKind, e as AttachmentMeta, D as DefaultSessionReader, f as DefaultSessionReaderOptions, S as SessionReader } from './session-reader-CCOssnBS.js';
 export { D as DEFAULT_AUTONOMY_CONFIG, a as DEFAULT_CONTEXT_CONFIG, b as DEFAULT_SESSION_LOGGING_CONFIG, c as DEFAULT_SESSION_PRUNE_DAYS, d as DEFAULT_TOOLS_CONFIG } from './default-config-CXsDvOmP.js';
-import { a as DefaultSecretVault } from './secret-vault-w8MbUe2Q.js';
-export { D as DefaultSecretScrubber, S as SecretVaultOptions, d as decryptConfigSecrets, e as encryptConfigSecrets, i as isSecretField, m as migratePlaintextSecrets, r as rewriteConfigEncrypted } from './secret-vault-w8MbUe2Q.js';
-import { D as DefaultLogger } from './logger-B9J5puGM.js';
-export { a as DefaultLoggerOptions } from './logger-B9J5puGM.js';
-import { D as DefaultPathResolver } from './path-resolver-DuhlmPil.js';
-export { a as DefaultTokenCounter } from './path-resolver-DuhlmPil.js';
-export { C as CompactorOptions, g as DEFAULT_RECOVERY_STRATEGIES, D as DefaultErrorHandler, a as DefaultRetryPolicy, E as EternalAutonomyEngine, b as EternalAutonomyOptions, c as EternalEngineState, H as HybridCompactor, I as IterationStage, P as ParallelEngineState, d as ParallelEternalEngine, e as ParallelEternalOptions, f as ParallelIterationStage, R as RecoveryStrategy, T as ToolExecutor, h as buildRecoveryStrategies } from './parallel-eternal-engine-CYoTKjsz.js';
+import { a as DefaultSecretVault } from './secret-vault-CeVNiy_f.js';
+export { D as DefaultSecretScrubber, S as SecretVaultOptions, d as decryptConfigSecrets, e as encryptConfigSecrets, i as isSecretField, m as migratePlaintextSecrets, r as rewriteConfigEncrypted } from './secret-vault-CeVNiy_f.js';
+import { D as DefaultLogger } from './logger-DmmQhf4P.js';
+export { a as DefaultLoggerOptions, L as LogFormat, n as noOpLogger } from './logger-DmmQhf4P.js';
+import { D as DefaultPathResolver } from './path-resolver-CA1ULU0J.js';
+export { a as DefaultTokenCounter } from './path-resolver-CA1ULU0J.js';
+export { C as CompactorOptions, D as DEFAULT_RECOVERY_STRATEGIES, a as DefaultErrorHandler, b as DefaultRetryPolicy, E as EternalAutonomyEngine, c as EternalAutonomyOptions, d as EternalEngineState, H as HybridCompactor, I as IterationStage, P as ParallelEngineState, e as ParallelEternalEngine, f as ParallelEternalOptions, g as ParallelIterationStage, R as RecoveryStrategy, T as ToolExecutor, h as buildRecoveryStrategies } from './parallel-eternal-engine-DtG1fjc9.js';
 import { S as SkillLoader } from './skill-Bj6Ezqb8.js';
 export { b as SkillEntry, a as SkillManifest } from './skill-Bj6Ezqb8.js';
 export { I as InputReader, P as PromptOption } from './input-reader-E-ffP2ee.js';
-import { z as SlashCommand, P as PluginAPI, E as PluginPipelines, G as ToolRegistryView, H as ProviderRegistryView, I as MCPRegistryView, J as SlashCommandRegistryView, K as SessionWriterView, L as MetricsSinkView, N as Plugin } from './agent-subagent-runner-Bsueu0J2.js';
-export { g as Agent, h as AgentFactory, i as AgentFactoryResult, j as AgentRunnerOptions, k as BudgetExceededError, l as BudgetKind, m as BudgetLimits, r as BudgetUsage, O as CoordinatorEvents, C as CoordinatorStatus, D as DoneCondition, F as FleetBus, s as FleetEvent, t as FleetHandler, u as FleetUsage, v as FleetUsageAggregator, c as MultiAgentConfig, M as MultiAgentCoordinator, Q as PluginCapabilities, R as PluginDependency, e as SpawnResult, w as SubagentBudget, S as SubagentConfig, U as SubagentContext, V as SubagentError, W as SubagentErrorKind, X as SubagentRunContext, Y as SubagentRunOutcome, d as SubagentRunner, x as SubagentUsageSnapshot, Z as TaskDelegation, f as TaskResult, T as TaskSpec, y as makeAgentSubagentRunner } from './agent-subagent-runner-Bsueu0J2.js';
-export { D as DefaultModelsRegistry, a as DefaultModelsRegistryOptions, c as classifyFamily } from './models-registry-D90K9UnM.js';
+import { z as SlashCommand, P as PluginAPI, E as PluginPipelines, G as ToolRegistryView, H as ProviderRegistryView, I as MCPRegistryView, J as SlashCommandRegistryView, K as SessionWriterView, L as MetricsSinkView, N as Plugin } from './agent-subagent-runner-C658wj_c.js';
+export { g as Agent, h as AgentFactory, i as AgentFactoryResult, j as AgentRunnerOptions, k as BudgetExceededError, l as BudgetKind, m as BudgetLimits, r as BudgetUsage, O as CoordinatorEvents, C as CoordinatorStatus, D as DoneCondition, F as FleetBus, s as FleetEvent, t as FleetHandler, u as FleetUsage, v as FleetUsageAggregator, c as MultiAgentConfig, M as MultiAgentCoordinator, Q as PluginCapabilities, R as PluginDependency, e as SpawnResult, w as SubagentBudget, S as SubagentConfig, U as SubagentContext, V as SubagentError, W as SubagentErrorKind, X as SubagentRunContext, Y as SubagentRunOutcome, d as SubagentRunner, x as SubagentUsageSnapshot, Z as TaskDelegation, f as TaskResult, T as TaskSpec, y as makeAgentSubagentRunner } from './agent-subagent-runner-C658wj_c.js';
+export { D as DefaultModelsRegistry, a as DefaultModelsRegistryOptions, c as classifyFamily } from './models-registry-CnJRjTXc.js';
 import { M as ModeStore } from './mode-CZlO9iU1.js';
 export { D as DEFAULT_MODES, b as Mode, a as ModeConfig, c as ModeManifest } from './mode-CZlO9iU1.js';
-export { I as InMemoryAgentBridge, a as InMemoryBridgeTransport, c as createMessage } from './agent-bridge-BbZU5TPN.js';
+export { I as InMemoryAgentBridge, a as InMemoryBridgeTransport, c as createMessage } from './agent-bridge-Cimv7bK7.js';
 export { D as DEFAULT_SPEC_TEMPLATE, S as SpecAnalysis, a as SpecApiEndpoint, b as SpecRequirement, c as SpecSection, d as SpecSectionType, e as SpecStatus, f as SpecTemplate, g as SpecValidationResult, h as Specification } from './spec-TBi3Jr6T.js';
 import { d as TaskGraph, T as TaskType, a as TaskPriority, e as TaskNode } from './task-graph-u1q9Jkyk.js';
 export { C as CriticalPathResult, f as TaskAssignment, g as TaskDependency, h as TaskEdge, i as TaskFilter, c as TaskProgress, j as TaskSort, b as TaskStatus, k as computeTaskProgress, l as findCriticalPath, t as topologicalSort } from './task-graph-u1q9Jkyk.js';
 import { T as Tracer, M as MetricsSink, H as HealthRegistry } from './observability-D-HZN_mF.js';
 export { A as AggregateHealth, a as HealthCheck, b as HealthCheckResult, c as HealthStatus, d as MetricLabels, e as MetricSeries, f as MetricsSnapshot, S as Span } from './observability-D-HZN_mF.js';
-import { S as SystemPromptContributor, E as ExtensionRegistry, e as ToolRegistry, P as ProviderRegistry, c as ToolCallPipelinePayload } from './index-B5wz-GXm.js';
-export { i as AfterIterationHook, j as AfterRunHook, k as AfterToolExecutionHook, l as AgentExtension, g as AgentInit, h as AgentInput, A as AgentPipelines, B as BeforeIterationHook, m as BeforeRunHook, n as BeforeToolExecutionHook, D as DEFAULT_MAX_ITERATIONS, H as HookRunEnv, o as HookRunner, p as HookRunnerOptions, O as OnErrorHook, q as PreToolUseResult, r as PromptResult, s as ProviderFactory, t as ProviderRunnerWrapper, R as RunResult, d as ToolWrapper, U as UserInputPayload, u as createDefaultPipelines } from './index-B5wz-GXm.js';
-export { AutonomyStage } from './types/index.js';
-export { AtomicWriteOptions, BuildChildEnvOptions, CompileFail, CompileResult, DeepMergeOptions, FORBIDDEN_PROTO_KEYS, FileLockOptions, MessageRepairReport, MessageRepairResult, NewlineStyle, OutputLineGuard, RequestTokenBreakdown, SafeParseResult, ToolOutputSerializerOptions, UnifiedDiffOptions, ValidationError, ValidationResult, assertNever, atomicWrite, buildChildEnv, color, compileGlob, compileUserRegex, completePartialObject, createToolOutputSerializer, deepMerge, detectNewlineStyle, ensureDir, estimateMessageTokens, estimateRequestTokens, estimateRequestTokensCalibrated, estimateTextTokens, estimateToolDefTokens, estimateToolInputTokens, estimateToolResultTokens, expandGlob, formatTodosList, getCalibrationState, getTermSize, isInteractive, isPrimitiveArray, isStdinTTY, isStdoutTTY, matchAny, matchGlob, mergeCustomModelDefs, mergeModelsPayload, normalizeToLf, onResize, recordActualUsage, repairToolUseAdjacency, resetCalibration, safeParse, safeStringify, sanitizeJsonString, setOutputLineGuard, setRawMode, sleep, stripAnsi, toStyle, unifiedDiff, validateAgainstSchema, withFileLock, writeErr, writeOut } from './utils/index.js';
+import { S as SystemPromptContributor, E as ExtensionRegistry, e as ToolRegistry, P as ProviderRegistry, A as AgentPipelines, f as ToolExecutorLike, c as ToolCallPipelinePayload } from './index-C2eSNPsB.js';
+export { i as AfterIterationHook, j as AfterRunHook, k as AfterToolExecutionHook, l as AgentExtension, g as AgentInit, h as AgentInput, B as BeforeIterationHook, m as BeforeRunHook, n as BeforeToolExecutionHook, D as DEFAULT_MAX_ITERATIONS, H as HookRunEnv, o as HookRunner, p as HookRunnerOptions, O as OnErrorHook, q as PreToolUseResult, r as PromptResult, s as ProviderFactory, t as ProviderRunnerWrapper, R as RunResult, d as ToolWrapper, U as UserInputPayload, u as createDefaultPipelines } from './index-C2eSNPsB.js';
+export { AutonomyStage, DistributiveOmit, DistributivePick } from './types/index.js';
+import { estimateMessageTokens } from './utils/index.js';
+export { AtomicWriteOptions, BuildChildEnvOptions, CompileFail, CompileResult, DeepMergeOptions, FORBIDDEN_PROTO_KEYS, FileLockOptions, MessageRepairReport, MessageRepairResult, NewlineStyle, OutputLineGuard, RequestTokenBreakdown, SafeParseResult, ToolOutputSerializerOptions, UnifiedDiffOptions, ValidationError, ValidationResult, assertNever, atomicWrite, buildChildEnv, color, compileGlob, compileUserRegex, completePartialObject, computeMessageTokens, createToolOutputSerializer, deepMerge, detectNewlineStyle, ensureDir, estimateRequestTokens, estimateRequestTokensCalibrated, estimateTextTokens, estimateToolDefTokens, estimateToolInputTokens, estimateToolResultTokens, expandGlob, formatTodosList, getCalibrationState, getTermSize, isInteractive, isPrimitiveArray, isStdinTTY, isStdoutTTY, matchAny, matchGlob, mergeCustomModelDefs, mergeModelsPayload, normalizeToLf, onResize, recordActualUsage, repairToolUseAdjacency, resetCalibration, safeParse, safeStringify, sanitizeJsonString, setOutputLineGuard, setRawMode, sleep, stripAnsi, toStyle, unifiedDiff, validateAgainstSchema, withFileLock, writeErr, writeOut } from './utils/index.js';
 export { T as TaskItem, c as computeTaskItemProgress, f as formatTaskList, a as formatTaskProgress } from './task-format-vGOIftmK.js';
-import { W as WstackPaths } from './wstack-paths-DD50Omgn.js';
-export { a as WstackPathOptions, p as projectHash, b as projectSlug, r as resolveWstackPaths } from './wstack-paths-DD50Omgn.js';
+import { W as WstackPaths } from './wstack-paths-CJjEwPXn.js';
+export { a as WstackPathOptions, p as projectHash, b as projectSlug, r as resolveWstackPaths, w as wstackGlobalRoot } from './wstack-paths-CJjEwPXn.js';
 export { expectDefined } from './utils/expect-defined.js';
-export { A as AbandonedSession, a as AttachmentStoreOptions, C as ConfigLoaderOptions, b as ConfigMigration, c as ConfigMigrationError, d as ConfigSource, D as DEFAULT_CONFIG_MIGRATIONS, e as DefaultAttachmentStore, f as DefaultConfigLoader, g as DefaultConfigStore, h as DefaultMemoryStore, i as DefaultSessionStore, F as FileMemoryBackend, j as FileMemoryBackendOptions, M as MemoryBackend, k as MemoryStoreOptions, l as MigrationContext, m as MigrationResult, P as PersistedQueueItem, n as PlanFile, o as PlanItem, p as PlanTemplate, Q as QueueStore, R as RecoveryLock, q as RecoveryLockOptions, S as SessionAnalyzer, r as SessionStoreOptions, T as TodosCheckpointFile, s as addPlanItem, t as attachPlanCheckpoint, u as attachTodosCheckpoint, v as clearPlan, w as deriveTodosFromPlanItem, x as emptyPlan, y as formatPlan, z as formatPlanTemplates, B as getPlanTemplate, E as listPlanTemplates, G as loadPlan, H as loadTodosCheckpoint, I as parseEntries, J as removePlanItem, K as runConfigMigrations, L as savePlan, N as saveTodosCheckpoint, O as setPlanItemStatus } from './plan-templates-DbH7lg-t.js';
-export { A as AuditLevel, C as CORE_RECONSTRUCT_EVENTS, a as STANDARD_AUDIT_EVENTS, S as SessionEventBridge, b as SessionEventBridgeOptions, c as SessionSamplingOptions, T as ToolProgressSamplingOptions, d as createSessionEventBridge, r as resolveAuditLevel, e as resolveSessionLoggingConfig } from './session-event-bridge-DWlvglC2.js';
+export { A as AbandonedSession, a as AttachmentStoreOptions, C as ConfigLoaderOptions, b as ConfigMigration, c as ConfigMigrationError, d as ConfigSource, D as DEFAULT_CONFIG_MIGRATIONS, e as DefaultAttachmentStore, f as DefaultConfigLoader, g as DefaultConfigStore, h as DefaultMemoryStore, i as DefaultSessionStore, F as FileMemoryBackend, j as FileMemoryBackendOptions, M as MemoryBackend, k as MemoryStoreOptions, l as MigrationContext, m as MigrationResult, P as PersistedQueueItem, n as PlanFile, o as PlanItem, p as PlanTemplate, Q as QueueStore, R as RecoveryLock, q as RecoveryLockOptions, S as SessionAnalyzer, r as SessionStoreOptions, T as TodosCheckpointFile, s as addPlanItem, t as attachPlanCheckpoint, u as attachTodosCheckpoint, v as clearPlan, w as deriveTodosFromPlanItem, x as emptyPlan, y as formatPlan, z as formatPlanTemplates, B as getPlanTemplate, E as listPlanTemplates, G as loadPlan, H as loadTodosCheckpoint, I as mutatePlan, J as parseEntries, K as removePlanItem, L as runConfigMigrations, N as savePlan, O as saveTodosCheckpoint, U as setPlanItemStatus } from './plan-templates-DPABrDvy.js';
+export { A as AuditLevel, C as CORE_RECONSTRUCT_EVENTS, a as STANDARD_AUDIT_EVENTS, S as SessionEventBridge, b as SessionEventBridgeOptions, c as SessionSamplingOptions, T as ToolProgressSamplingOptions, d as createSessionEventBridge, r as resolveAuditLevel, e as resolveSessionLoggingConfig } from './session-event-bridge-BhtkkFFy.js';
 export { a as DirectorStateCheckpoint, D as DirectorStateSnapshot, b as DirectorSubagentState, c as DirectorTaskState, l as loadDirectorState } from './director-state-BfeCUbmk.js';
-export { A as AutoApprovePermissionPolicy, D as DefaultPermissionPolicy, P as PermissionPolicyOptions } from './permission-policy-8-6zBmfA.js';
-export { A as AutoCompactionMiddleware, a as AutonomousRunner, b as AutonomousRunnerOptions, c as AutonomyPromptContributorOptions, C as CompactorStrategy, D as DefaultSkillLoader, d as DoneCheckResult, e as DoneConditionChecker, I as IntelligentCompactor, f as IntelligentCompactorOptions, S as SelectiveCompactor, g as SelectiveCompactorOptions, h as SkillLoaderOptions, i as StrategyCompactorOptions, j as buildGoalPreamble, k as createStrategyCompactor, m as makeAutonomyPromptContributor } from './goal-preamble-CbV8pXLD.js';
+export { A as AutoApprovePermissionPolicy, D as DefaultPermissionPolicy, P as PermissionPolicyOptions } from './permission-policy-AOk0LVsV.js';
+export { A as AutoCompactionMiddleware, a as AutonomousRunner, b as AutonomousRunnerOptions, c as AutonomyPromptContributorOptions, C as CompactorStrategy, D as DefaultSkillLoader, d as DoneCheckResult, e as DoneConditionChecker, I as IntelligentCompactor, f as IntelligentCompactorOptions, S as SelectiveCompactor, g as SelectiveCompactorOptions, h as SkillLoaderOptions, i as StrategyCompactorOptions, j as buildGoalPreamble, k as createStrategyCompactor, m as makeAutonomyPromptContributor } from './goal-preamble-CnbzyVvl.js';
 export { DefaultProviderRunner } from './defaults/index.js';
-export { A as ACP_AGENTS, a as AGENTS_BY_PHASE, b as AGENT_CATALOG, c as ALL_AGENT_DEFINITIONS, d as ALL_FLEET_AGENTS, e as AUDIT_LOG_AGENT, f as AutoExtendCeiling, g as AutoExtendPolicy, B as BUG_HUNTER_AGENT, n as CreateDelegateToolOptions, D as DEFAULT_DIRECTOR_PREAMBLE, q as DEFAULT_SUBAGENT_BASELINE, r as DelegateHost, s as Director, w as DirectorPromptParts, x as DirectorSessionFactory, y as DirectorSessionFactoryOptions, F as FLEET_ROSTER, z as FLEET_ROSTER_BUDGETS, E as FLEET_ROSTER_WITHACP, G as FleetCostCapError, H as FleetManager, I as FleetManagerOptions, J as FleetRosterBudget, K as FleetSpawnBudgetError, L as ICoordinator, M as IFleetManager, O as NULL_FLEET_BUS, R as REFACTOR_PLANNER_AGENT, S as SECURITY_SCANNER_AGENT, V as SubagentPromptParts, W as applyRosterBudget, X as attachAutoExtend, Y as composeDirectorPrompt, Z as composeSubagentPrompt, _ as createDelegateTool, $ as getAgentDefinition, a1 as makeAskTool, a2 as makeAssignTool, a3 as makeAwaitTasksTool, a4 as makeCollabDebugTool, a5 as makeDirectorSessionFactory, a6 as makeFleetEmitTool, a7 as makeFleetHealthTool, a8 as makeFleetSessionTool, a9 as makeFleetStatusTool, aa as makeFleetUsageTool, ab as makeRollUpTool, ac as makeSpawnTool, ad as makeTerminateTool, af as rosterSummaryFromConfigs } from './null-fleet-bus-CGOez8Le.js';
-export { b as AgentBudgetTier, c as AgentCapability, A as AgentDefinition, d as AgentPhase, e as DEFAULT_DISPATCH_ROLE, a as DefaultMultiAgentCoordinator, f as DispatchCandidate, D as DispatchClassifier, g as DispatchMethod, h as DispatchOptions, i as DispatchResult, j as MultiAgentCoordinatorOptions, k as dispatchAgent, m as makeLLMClassifier, s as scoreAgents } from './multi-agent-coordinator-BSKSFNhv.js';
-export { D as DefaultModeStore, L as LLMSelector, a as LLMSelectorOptions, M as ModeLoaderOptions, l as loadProjectModes, b as loadUserModes } from './llm-selector-CP72f1lC.js';
+export { A as ACP_AGENTS, a as AGENTS_BY_PHASE, b as AGENT_CATALOG, c as ALL_AGENT_DEFINITIONS, d as ALL_FLEET_AGENTS, e as AUDIT_LOG_AGENT, f as AutoExtendCeiling, g as AutoExtendPolicy, B as BUG_HUNTER_AGENT, n as CreateDelegateToolOptions, D as DEFAULT_DIRECTOR_PREAMBLE, q as DEFAULT_SUBAGENT_BASELINE, r as DelegateHost, s as Director, w as DirectorPromptParts, x as DirectorSessionFactory, y as DirectorSessionFactoryOptions, F as FLEET_ROSTER, z as FLEET_ROSTER_BUDGETS, E as FLEET_ROSTER_WITHACP, G as FleetCostCapError, H as FleetManager, I as FleetManagerOptions, J as FleetRosterBudget, K as FleetSpawnBudgetError, L as ICoordinator, M as IFleetManager, O as NULL_FLEET_BUS, R as REFACTOR_PLANNER_AGENT, S as SECURITY_SCANNER_AGENT, V as SubagentPromptParts, W as applyRosterBudget, X as attachAutoExtend, Y as composeDirectorPrompt, Z as composeSubagentPrompt, _ as createDelegateTool, $ as getAgentDefinition, a1 as makeAskTool, a2 as makeAssignTool, a3 as makeAwaitTasksTool, a4 as makeCollabDebugTool, a5 as makeDirectorSessionFactory, a6 as makeFleetEmitTool, a7 as makeFleetHealthTool, a8 as makeFleetSessionTool, a9 as makeFleetStatusTool, aa as makeFleetUsageTool, ab as makeRollUpTool, ac as makeSpawnTool, ad as makeTerminateTool, af as rosterSummaryFromConfigs } from './null-fleet-bus-1068dEnr.js';
+export { b as AgentBudgetTier, c as AgentCapability, A as AgentDefinition, d as AgentPhase, e as DEFAULT_DISPATCH_ROLE, a as DefaultMultiAgentCoordinator, f as DispatchCandidate, D as DispatchClassifier, g as DispatchMethod, h as DispatchOptions, i as DispatchResult, j as MultiAgentCoordinatorOptions, k as dispatchAgent, m as makeLLMClassifier, s as scoreAgents } from './multi-agent-coordinator-60weDZoA.js';
+export { D as DefaultModeStore, L as LLMSelector, a as LLMSelectorOptions, M as ModeLoaderOptions, l as loadProjectModes, b as loadUserModes } from './llm-selector-D22R4AFz.js';
 import { TaskStore } from './sdd/index.js';
 export { AISpecBuilder, AISpecBuilderOptions, AISpecPhase, AISpecSession, AutoExecutor, AutoExecutorOptions, BottleneckTask, CollectedAnswer, CriticalPathAnalysis, DefaultTaskStore, ExecutionSummary, GeneratedTask, SPEC_TEMPLATES, SddParallelRun, SddParallelRunOptions, SddProgress, SddTaskDecomposer, SddTaskDecomposerOptions, SpecDiff, SpecDrivenDev, SpecDrivenDevOptions, SpecIndexEntry, SpecParser, SpecStore, SpecStoreOptions, SpecVersion, SpecVersioning, TaskBatch, TaskExecutionContext, TaskExecutionResult, TaskFlow, TaskFlowEventMap, TaskFlowEventName, TaskFlowExecutionContext, TaskFlowOptions, TaskFlowPhase, TaskGenerator, TaskGeneratorOptions, TaskGraphIndexEntry, TaskGraphStore, TaskGraphStoreOptions, TaskTracker, TaskTrackerOptions, TaskTransition, WaveResult, analyzeCriticalPath, createAutoExecutor, getTemplate, listTemplates, renderProgress, renderSpecAnalysis, renderTaskGraph, renderTaskList, templateToMarkdown } from './sdd/index.js';
 export { DefaultHealthRegistry, InMemoryMetricsSink, MetricsServerHandle, MetricsServerOptions, NoopMetricsSink, NoopTracer, OTelTracer, OtlpMetricsExporterHandle, OtlpMetricsExporterOptions, OtlpTraceExporterHandle, OtlpTraceExporterOptions, PROMETHEUS_CONTENT_TYPE, buildOtlpMetricsRequest, buildOtlpTracesRequest, renderPrometheus, startMetricsServer, startOtlpMetricsExporter, startOtlpTraceExporter, wireMetricsToEvents } from './observability/index.js';
-export { C as ContextManagerAction, a as ContextManagerInput, b as ContextManagerResult, c as ContextManagerToolOptions, d as allServers, e as awsServer, f as blockServer, g as braveSearchServer, h as context7Server, i as contextManagerTool, j as createContextManagerTool, k as everArtServer, l as filesystemServer, m as githubServer, n as googleMapsServer, o as miniMaxVisionServer, s as sentinelServer, q as slackServer, z as zaiVisionServer } from './mcp-servers-CPERR2De.js';
+export { C as ContextManagerAction, a as ContextManagerInput, b as ContextManagerResult, c as ContextManagerToolOptions, d as allServers, e as awsServer, f as blockServer, g as braveSearchServer, h as context7Server, i as contextManagerTool, j as createContextManagerTool, k as everArtServer, l as filesystemServer, m as githubServer, n as googleMapsServer, o as miniMaxVisionServer, s as sentinelServer, q as slackServer, z as zaiVisionServer } from './mcp-servers-DFbirBv6.js';
 export { DownloadResult, InstallResult, InstalledSkillEntry, ManifestData, ParsedRef, SkillInstaller, SkillInstallerOptions, SkillManifestStore, UpdateResult, downloadGitHubTarball, parseSkillRef } from './skills/index.js';
 import { ReplayLogStore, DefaultPromptStore } from './storage/index.js';
-export { ALL_SYNC_CATEGORIES, Annotation, AnnotationsStore, AnnotationsStoreOptions, AuditEntry, CloudSync, ConsolidationOp, DefaultSessionRewinder, GraphMemoryBackend, GraphMemoryBackendOptions, MemoryConsolidatorOptions, PromptEntry, PromptStore, RecoveryPlan, ReplayEntry, ReplayLogStoreOptions, SessionMemoryConsolidator, SessionRecovery, SessionRewinderOptions, StaleSession, SyncResult, TaskFile, ToolAuditLog, ToolAuditLogOptions, VerifyResult, emptyTaskFile, loadTasks, saveTasks } from './storage/index.js';
+export { ALL_SYNC_CATEGORIES, AgentEntry, AgentLiveStatus, AgentStatusTracker, AgentStatusTrackerOptions, Annotation, AnnotationsStore, AnnotationsStoreOptions, AuditEntry, CloudSync, ConsolidationOp, DefaultSessionRewinder, GraphMemoryBackend, GraphMemoryBackendOptions, MemoryConsolidatorOptions, PromptEntry, PromptStore, RecoveryPlan, ReplayEntry, ReplayLogStoreOptions, SessionLiveStatus, SessionMemoryConsolidator, SessionRecovery, SessionRegistry, SessionRegistryEntry, SessionRewinderOptions, StaleSession, SyncResult, TaskFile, ToolAuditLog, ToolAuditLogOptions, VerifyResult, emptyTaskFile, getSessionRegistry, hasSessionRegistry, loadTasks, mutateTasks, saveTasks } from './storage/index.js';
 export { G as GoalFile, J as JournalEntry, M as MAX_JOURNAL_ENTRIES, a as MAX_PROGRESS_HISTORY, P as ProgressSnapshot, b as appendJournal, e as emptyGoal, f as formatGoal, g as goalFilePath, l as loadGoal, p as parseProgressFromText, r as recordProgress, s as saveGoal, c as setProgress, d as summarizeUsage } from './goal-store-CV9Yz2X_.js';
-import { R as RetryPolicy, E as ErrorHandler } from './retry-policy-rutAfVeR.js';
+import { R as RetryPolicy, E as ErrorHandler } from './retry-policy-BVnkbMET.js';
 import { L as Logger } from './logger-B63L5bTg.js';
 export { a as LogLevel } from './logger-B63L5bTg.js';
 export { S as SecretVault, n as noOpVault } from './secret-vault-BJDY28ev.js';
+export { ConversationTurn, ENHANCER_SYSTEM_PROMPT, EnhanceResult, EnhanceUserPromptOptions, enhanceUserPrompt, normalizedEqual, recentTextTurns, shouldEnhance } from './execution/prompt-enhancer.js';
+export { B as BrainInterventionInput, a as BrainMonitor, b as BrainMonitorOptions, D as DEPENDENCY_FILE_PATTERNS, c as DefaultMailbox, d as DepWatchEntry, e as DepWatcherBridgeOptions, f as DependencyWatcherConfig, G as GlobalMailbox, M as MailToolsOptions, g as MailboxResolver, h as MailboxToolOptions, O as OutdatedNotifyMessage, P as PackageAuthorEntry, i as PackageAuthorLog, j as PackageAuthorTrackerOptions, k as PackageOutdatedEntry, l as PackageOutdatedResult, m as PackageOutdatedWatcherOptions, n as attachDepWatcherBridge, o as detectPackageEcosystem, p as getFullPackageLog, q as getManifestPackages, r as getPackageAuthor, s as getPackagesByAgent, t as mailboxSessionTag, u as makeDependencyWatcherConfig, v as makeMailInboxTool, w as makeMailSendTool, x as makeMailboxTool, y as recordPackageAction, z as resolveMailboxIdentity, A as resolveProjectDir, C as startPackageOutdatedWatcher, E as updatePackageOutdatedStatus } from './package-outdated-watcher-pzJ5w7y8.js';
+export { AutonomyBrainOptions, BrainAutoRisk, TieredBrainArbiterOptions, createAutonomyBrain, createTieredBrainArbiter, formatDecisionSummary } from './execution/index.js';
 import './path-resolver-CPRj4bFY.js';
-import './selector-4vDFZKt3.js';
+import './selector-Cb4_9-hf.js';
 import 'node:events';
 
 /**
@@ -437,6 +442,89 @@ interface ShellHookSpec {
  */
 declare function runShellHook(spec: ShellHookSpec, input: HookInput, logger?: Logger | undefined): Promise<HookOutcome | null>;
 
+/**
+ * Token estimate for a message array (text + tool I/O). Re-exported from the
+ * canonical `token-estimate` helper so compactors and the context-pressure
+ * monitor share one number.
+ */
+declare const estimateMessages: typeof estimateMessageTokens;
+/**
+ * Shared, pure compaction primitives.
+ *
+ * Before this module the three compactors (`HybridCompactor`,
+ * `IntelligentCompactor`, `SelectiveCompactor`) each carried their own copies
+ * of message-token estimation, tool-result elision, text detection and digest
+ * rendering — with subtle divergences (notably Selective lacked the
+ * tool_use/tool_result pair preservation, so it could elide the result of a
+ * tool call it was supposed to keep). These helpers are the single source of
+ * truth. They operate on plain `Message[]` and never touch `Context`/state, so
+ * each compactor keeps its own `ctx.state.replaceMessages(...)` plumbing.
+ */
+/** Does this message carry any non-empty text? */
+declare function hasTextContent(m: Message): boolean;
+/**
+ * Index where the preserved (recent) window starts. Walks back counting
+ * user/assistant messages until `preserveK` are covered, then walks forward to
+ * keep any tool_use/tool_result protocol pair intact — so a tool_result whose
+ * tool_use is preserved is never elided.
+ */
+declare function findPreserveStart(messages: readonly Message[], preserveK: number): number;
+interface EliseResult {
+    /** New message array, or the same reference when nothing changed. */
+    messages: Message[];
+    /** Estimated tokens reclaimed. */
+    saved: number;
+    changed: boolean;
+}
+/**
+ * Elide oversized tool_results that fall before the preserve window. Pure:
+ * returns a fresh array (or the same reference when unchanged). Replaces the
+ * duplicate copies that lived in all three compactors.
+ */
+declare function eliseOldToolResults(messages: readonly Message[], opts: {
+    preserveK: number;
+    eliseThreshold: number;
+}): EliseResult;
+/**
+ * Lossless textual digest of a message range. Every text block is kept verbatim
+ * (across all roles, so prior `system` digests fold forward and nothing
+ * accumulates as loss). `tool_use` / `tool_result` blocks are counted and
+ * replaced with a marker rather than serialized — their payload is already
+ * persisted in the session log. Empty/tool-only messages are skipped.
+ */
+declare function buildLosslessDigest(messages: readonly Message[]): string;
+/** Importance score for a message — drives retention vs. summarization. */
+type ContentScore = 0 | 1 | 2 | 3 | 4 | 5;
+/**
+ * Extract the plain text from a message (ignoring tool blocks).
+ * Returns empty string if no text content exists.
+ */
+declare function extractText(m: Message): string;
+/**
+ * Score a message by content importance.
+ *
+ * CRITICAL (5): user corrections, explicit "no/wrong/stop", error messages,
+ *   architecture decisions, security findings.
+ * MEDIUM (3): normal exchanges, successful tool calls, file reads, edits.
+ * LOW (1): large tool results (>3K chars), grep/file-list outputs, boilerplate.
+ * NOISE (0): repeated identical failures (same tool, same error, 5th+ occurrence
+ *   within the range), pure tool I/O with no text.
+ */
+declare function scoreMessage(m: Message, context?: {
+    failureCounts?: Map<string, number>;
+}): ContentScore;
+/**
+ * Build a content-aware digest of messages.
+ *
+ * Unlike `buildLosslessDigest` which preserves all text equally, this uses
+ * `scoreMessage` to apply tiered treatment:
+ * - Score 5 (critical): verbatim text
+ * - Score 3 (medium):   first sentence only
+ * - Score 1 (low):      one-line summary
+ * - Score 0 (noise):    collapsed to count marker
+ */
+declare function buildSmartDigest(messages: readonly Message[]): string;
+
 /**
  * Options for {@link bootConfig}. Both the CLI and the WebUI server boot the
  * same way; the only intentional differences are the label used in the
@@ -617,6 +705,61 @@ declare function consumeBtwNotes(ctx: Context): string[];
  */
 declare function buildBtwBlock(notes: string[]): string;
 
+/**
+ * Queue awareness — let the running agent *see* messages the user typed
+ * while it was busy, without delivering them early.
+ *
+ * The TUI queues plain messages typed mid-run and replays them as real user
+ * turns after the run finishes (the queue drainer in app.tsx). That keeps
+ * turn-taking clean, but the model is blind to the backlog: a queued message
+ * may invalidate the current approach, add a constraint, or just be a
+ * "by the way" note the user expected the agent to notice.
+ *
+ * Unlike `/btw` (a consume-once note channel, {@link ./btw.ts}), this is a
+ * SNAPSHOT channel: the host mirrors the queue's current contents onto the
+ * live `Context` on every queue mutation (enqueue, /queue delete, /queue
+ * clear, dequeue-for-delivery). At each iteration boundary the agent loop
+ * asks "did the snapshot change since the model last saw it?" and, if so,
+ * injects an informational block listing the pending messages. The queue
+ * itself is untouched — every queued message still arrives later as its own
+ * user turn.
+ *
+ * Deliberate quietness: when the queue transitions to empty (cleared by the
+ * user, drained between runs, or dropped by steering/abort) the snapshot is
+ * marked seen WITHOUT injecting a "queue is now empty" block. The empty
+ * transition usually happens at run boundaries where such a notice is stale
+ * noise; the cost is that a mid-run `/queue clear` isn't announced, which is
+ * safe because the block's framing already tells the model the queue may
+ * change and the authoritative messages arrive as future turns.
+ */
+
+/**
+ * Mirror the host's pending-message queue onto the context. Call on every
+ * queue mutation with the FULL current queue (head first) — not a delta.
+ * Blank entries are dropped; the head-most {@link MAX_ITEMS} are kept since
+ * the head is what arrives first.
+ */
+declare function setQueuedMessagesSnapshot(ctx: Context, texts: string[]): void;
+/** Current snapshot (previews), without affecting seen-state. */
+declare function peekQueuedMessages(ctx: Context): string[];
+/**
+ * Called by the agent loop at each iteration boundary. Returns the queued
+ * messages to surface when the snapshot changed since the model last saw it,
+ * or `null` when there is nothing new to say. Marks the snapshot seen either
+ * way, so the same state is never injected twice. An empty snapshot is
+ * acknowledged silently (see module comment).
+ */
+declare function consumeQueuedMessagesUpdate(ctx: Context): string[] | null;
+/**
+ * Format the awareness block. Framing goals: (1) the model must NOT treat
+ * the listed messages as instructions to execute now — they each arrive as
+ * their own turn later; (2) it SHOULD let them influence in-flight decisions
+ * (a queued message may invalidate the current approach or be a /btw-style
+ * note); (3) the list is a full replacement of any earlier notice, so a
+ * shrunken list implicitly communicates deletions.
+ */
+declare function buildQueuedMessagesBlock(items: string[]): string;
+
 interface InputBuilderOptions {
     store: AttachmentStore;
     /**
@@ -710,7 +853,7 @@ declare class InputBuilder {
     private shouldCollapse;
 }
 
-declare const LAYER_1_IDENTITY = "You are WrongStack, a command-line AI coding agent.\n\nYou operate inside the user's terminal with direct read and write access to their working directory, the ability to run shell commands, and access to the web. You assist a developer who knows what they're doing \u2014 your job is to accelerate them, not to second-guess them.\n\nThese are your baseline instructions. When an active mode prompt (Teach, Brief, Code Reviewer, etc.) is present in your context, its instructions **override** conflicting defaults below \u2014 the mode layer always wins on conflict.\n\n## Core principles\n\n1. **Read before you write.** Always inspect the relevant files before proposing changes. Assumptions about code you haven't read are bugs in waiting.\n2. **Prefer surgical edits over rewrites.** When modifying existing files, use the edit tool with str_replace; only use write for new files or full replacements explicitly requested.\n3. **Show your work.** Before non-trivial changes, briefly state what you're about to do \u2014 one sentence, not a wall of text. After tool calls, summarize what happened, not what you did mechanically.\n4. **Be honest about limits.** If you don't know, say so. If something failed, say what failed and what you'll try next. Never fabricate file contents, API responses, or test results.\n5. **Be concise.** The user is a developer in a terminal. No marketing language, no \"great question!\", no bullet-point lists when prose works. If a one-liner answers, a one-liner is the answer. (Active modes may override verbosity \u2014 follow the mode's guidance on depth.)\n6. **Ask when blocked, proceed when not.** If the task is ambiguous in a way that meaningfully changes the approach, ask. If it's ambiguous in a way that doesn't, pick a reasonable default and proceed, stating the assumption.\n7. **Trust the tools.** If a permission prompt is shown, the user will answer. Do not preemptively explain that you \"would like to\" do something \u2014 call the tool, let the permission flow decide.\n8. **Format for scanability.** Use code blocks for code, backticks for file paths, bold for key terms. One-liners stay one line. Paragraphs max 3 sentences.\n9. **Match the user's language.** Respond in the same language the user writes in. If they write in Turkish, reply in Turkish. If they mix languages, follow the dominant one.\n10. **Recover explicitly.** When a tool fails, distinguish the failure type and respond accordingly:\n\n| Failure type | Examples | Strategy |\n|---|---|---|\n| **Transient** | Timeout, rate limit, network hiccup | Retry once with adjusted params, then report |\n| **Permanent** | Syntax error, missing file, type error, permission denied | Do NOT retry \u2014 diagnose and report the root cause |\n| **Validation** | Invalid argument, out-of-range value, schema mismatch | State what was rejected and what range/format is accepted |\n\nNever silently skip a failure \u2014 always report it, even when you choose not to retry.\n\n## Decision heuristics\n\n- **Task is ambiguous** (unclear which file, conflicting requirements) \u2192 ask before proceeding\n- **Task is clear, approach is unknown** \u2192 try one approach, report what happened\n- **Tool fails** \u2192 classify the failure (transient/permanent/validation), then apply the appropriate recovery\n- **Permission prompt shown** \u2192 wait for user, do not act unilaterally\n- **Tool denied by user** \u2192 do NOT retry the same tool in the next iteration. If the user denies a write, bash, or any tool, respect that decision. The user's \"no\" is final \u2014 acknowledge it and ask if they'd like to clarify what they actually want.\n- **Context window filling up** \u2192 use context_manager proactively; don't wait to be told\n\n## How you work\n\n- **Stay focused.** When fixing a bug, fix only the bug \u2014 don't refactor neighboring code unless the user asks.\n- **Comment with purpose.** Add comments only when they explain why, not what. The code already says what.\n- **Own your output.** Never call work \"production-ready\" or \"fully tested\" \u2014 the user makes that call.\n- **Move on from mistakes.** When something fails, report what happened and what you'll do next. No apologies, no hand-wringing.\n- **Respect denied tools.** If the user denies a tool call (via permission prompt), do not retry that same operation in the next iteration. The user's \"no\" means \"find another way or ask\". Never re-attempt a denied tool unless the user explicitly asks you to try again.\n- **When denied, ask.** If the user refuses a tool call, do not attempt to work around it, do not suggest alternatives unprompted, and do not retry. Acknowledge the denial and explicitly ask: \"What would you like me to do instead?\"\n- **Stay in your lane.** Don't lecture about software engineering principles unless explicitly asked \u2014 the user is the expert on their codebase.\n\n## After-task suggestions\n\nAfter completing a significant task, end your response with 2\u20134 suggested next\nactions under a `\uD83D\uDCA1 Next steps` heading. Use this format so the user can\nselect them with `/next 1`, `/next 2`, or `/next 1 2 3`:\n\n```\n\uD83D\uDCA1 Next steps\n1. First suggestion \u2014 imperative, specific, actionable\n2. Second suggestion\n3. Third suggestion\n```\n\nRules:\n- Each line is a single imperative sentence the user can act on immediately.\n- Be specific: mention file names, tool names, or commands.\n- Order by priority. Keep each suggestion to one line.\n- Skip during multi-step operations \u2014 only show after completion.\n- If nothing is pending, say \"No pending actions.\"\n\nThe user can execute via `/next 1`, view via `/next list`, or generate\nfresh suggestions via `/suggest`.";
+declare const LAYER_1_IDENTITY = "You are WrongStack, a command-line AI coding agent.\n\nYou operate inside the user's terminal with direct read and write access to their working directory, the ability to run shell commands, and access to the web. You assist a developer who knows what they're doing \u2014 your job is to accelerate them, not to second-guess them.\n\nThese are your baseline instructions. When an active mode prompt (Teach, Brief, Code Reviewer, etc.) is present in your context, its instructions **override** conflicting defaults below \u2014 the mode layer always wins on conflict.\n\n## Core principles\n\n1. **Read before you write.** Always inspect the relevant files before proposing changes. Assumptions about code you haven't read are bugs in waiting.\n2. **Prefer surgical edits over rewrites.** When modifying existing files, use the edit tool with str_replace; only use write for new files or full replacements explicitly requested.\n3. **Show your work.** Before non-trivial changes, briefly state what you're about to do \u2014 one sentence, not a wall of text. After tool calls, summarize what happened, not what you did mechanically.\n4. **Be honest about limits.** If you don't know, say so. If something failed, say what failed and what you'll try next. Never fabricate file contents, API responses, or test results.\n5. **Be concise.** The user is a developer in a terminal. No marketing language, no \"great question!\", no bullet-point lists when prose works. If a one-liner answers, a one-liner is the answer. (Active modes may override verbosity \u2014 follow the mode's guidance on depth.)\n6. **Ask when blocked, proceed when not.** If the task is ambiguous in a way that meaningfully changes the approach, ask. If it's ambiguous in a way that doesn't, pick a reasonable default and proceed, stating the assumption.\n7. **Trust the tools.** If a permission prompt is shown, the user will answer. Do not preemptively explain that you \"would like to\" do something \u2014 call the tool, let the permission flow decide.\n8. **Format for scanability.** Use code blocks for code, backticks for file paths, bold for key terms. One-liners stay one line. Paragraphs max 3 sentences.\n9. **Match the user's language.** Respond in the same language the user writes in. If they write in Turkish, reply in Turkish. If they mix languages, follow the dominant one.\n10. **Recover explicitly.** When a tool fails, distinguish the failure type and respond accordingly:\n\n| Failure type | Examples | Strategy |\n|---|---|---|\n| **Transient** | Timeout, rate limit, network hiccup | Retry once with adjusted params, then report |\n| **Permanent** | Syntax error, missing file, type error, permission denied | Do NOT retry \u2014 diagnose and report the root cause |\n| **Validation** | Invalid argument, out-of-range value, schema mismatch | State what was rejected and what range/format is accepted |\n\nNever silently skip a failure \u2014 always report it, even when you choose not to retry.\n\n## Decision heuristics\n\n- **Task is ambiguous** (unclear which file, conflicting requirements) \u2192 ask before proceeding\n- **Task is clear, approach is unknown** \u2192 try one approach, report what happened\n- **Tool fails** \u2192 classify the failure (transient/permanent/validation), then apply the appropriate recovery\n- **Permission prompt shown** \u2192 wait for user, do not act unilaterally\n- **Tool denied by user** \u2192 do NOT retry the same tool in the next iteration. If the user denies a write, bash, or any tool, respect that decision. The user's \"no\" is final \u2014 acknowledge it and ask if they'd like to clarify what they actually want.\n- **Context window filling up** \u2192 use context_manager proactively; don't wait to be told\n\n## How you work\n\n- **Stay focused.** When fixing a bug, fix only the bug \u2014 don't refactor neighboring code unless the user asks.\n- **Comment with purpose.** Add comments only when they explain why, not what. The code already says what.\n- **Own your output.** Never call work \"production-ready\" or \"fully tested\" \u2014 the user makes that call.\n- **Move on from mistakes.** When something fails, report what happened and what you'll do next. No apologies, no hand-wringing.\n- **Respect denied tools.** If the user denies a tool call (via permission prompt), do not retry that same operation in the next iteration. The user's \"no\" means \"find another way or ask\". Never re-attempt a denied tool unless the user explicitly asks you to try again.\n- **When denied, ask.** If the user refuses a tool call, do not attempt to work around it, do not suggest alternatives unprompted, and do not retry. Acknowledge the denial and explicitly ask: \"What would you like me to do instead?\"\n- **Stay in your lane.** Don't lecture about software engineering principles unless explicitly asked \u2014 the user is the expert on their codebase.\n\n## After-task suggestions\n\nAfter completing a significant task, end your response with 2\u20134 suggested next\nactions under a `\uD83D\uDCA1 Next steps` heading. Use this format so the user can\nselect them with `/next 1`, `/next 2`, or `/next 1 2 3`:\n\n```\n\uD83D\uDCA1 Next steps\n1. First suggestion \u2014 imperative, specific, actionable\n2. Second suggestion\n3. Third suggestion\n```\n\nRules:\n- Each line is a single imperative sentence the user can act on immediately.\n- Be specific: mention file names, tool names, or commands.\n- Order by priority. Keep each suggestion to one line.\n- Skip during multi-step operations \u2014 only show after completion.\n- If nothing is pending, say \"No pending actions.\"\n\n**After a significant task**, also post a status update to the inter-agent\nmailbox so other agents in the fleet can discover what you finished and\nroute follow-on work. Use:\n`mailbox action=send to=* type=status subject=\"<one-line task summary>\" body=\"<brief outcome>\"`\n\nThe user can execute via `/next 1`, view via `/next list`, or generate\nfresh suggestions via `/suggest`.";
 interface DefaultSystemPromptBuilderOptions {
     memoryStore?: MemoryStore | undefined;
     skillLoader?: SkillLoader | undefined;
@@ -761,6 +904,13 @@ declare class DefaultSystemPromptBuilder implements SystemPromptBuilder {
     private _lastBuildTools?;
     constructor(opts?: DefaultSystemPromptBuilderOptions);
     build(ctx: BuildContext): Promise<TextBlock[]>;
+    /**
+     * Cached plan content keyed by (planPath, mtimeMs). The plan is read
+     * once per system-prompt build; most turns don't change the plan, so
+     * this avoids a blocking fs.readFile + JSON.parse on every iteration.
+     * Cleared when the file's mtime changes (the `/plan` tool mutated it).
+     */
+    private _planCache?;
     /**
      * Reads `<sessionId>.plan.json` (when configured) and produces a short
      * "Active plan" block listing open items so the model is anchored to
@@ -769,6 +919,7 @@ declare class DefaultSystemPromptBuilder implements SystemPromptBuilder {
      * turn without restarting the session.
      */
     private buildActivePlan;
+    private _formatPlan;
     private buildToolUsage;
     private buildEnvironment;
     private buildMemoryAndSkills;
@@ -969,89 +1120,6 @@ declare function loadPlugins(plugins: Plugin[], opts: LoadPluginsOptions): Promi
  */
 declare function unloadPlugins(loadedPlugins: Plugin[], opts: LoadPluginsOptions): Promise<void>;
 
-/**
- * Prompt refinement ("did you mean this?").
- *
- * Runs a one-shot LLM call in a SEPARATE context (its own system prompt, no
- * conversation history, no tools) that rewrites a raw user message into a
- * clearer, more complete instruction BEFORE the main agent sees it. The goal
- * is to make the main context start from a well-understood request rather than
- * guessing intent from terse input like "fix the bug".
- *
- * This mirrors `IntelligentCompactor.callSummarizer` — a plain
- * `provider.complete()` with a dedicated system prompt — and is deliberately
- * free of React / TUI dependencies so it can be unit-tested in isolation.
- */
-declare const ENHANCER_SYSTEM_PROMPT = "You are a request refiner embedded in a coding agent. Your ONLY job is to rewrite the user's message into clearer, unambiguous instructions that the coding agent can act on confidently.\n\nRules:\n- Preserve the user's intent and scope EXACTLY. Do not add new requirements, features, constraints, or steps the user did not ask for. Do not remove anything they did ask for.\n- Do NOT answer, solve, or perform the request. Only restate it more clearly.\n- Keep all concrete details verbatim: file paths, identifiers, code, error text, numbers, names, URLs.\n- Resolve obvious ambiguity by making the implied subject explicit, not by inventing specifics. If something is genuinely unspecified, leave it general rather than guessing.\n- Be concise: one tight instruction per version (a few sentences at most). No preamble, no explanation, no quotes, no markdown headers.\n- If the message is already clear and complete, return it essentially unchanged.\n\nYou MUST output TWO versions of the refined request, separated by a line containing only \"---\".\n- First version: refined in the SAME LANGUAGE the user wrote in (if Turkish \u2192 Turkish, if Spanish \u2192 Spanish, etc.).\n- Second version: refined in ENGLISH (translate the intent into clear English while preserving all concrete details).\n\nOutput format:\n<refined in user's language>\n---\n<refined in English>\n\nWhen earlier conversation turns are provided, they are CONTEXT ONLY. Use them to resolve references in the user's latest message \u2014 \"it\", \"that\", \"the same\", \"the other one\", \"this file\", \"again\" \u2014 so the refined instruction is self-contained. Refine ONLY the user's latest message; do not answer it, do not act on or restate earlier turns, and do not summarize the conversation.\n\nOutput ONLY the two versions separated by \"---\" \u2014 nothing else.";
-/**
- * Heuristic gate: should this raw input be sent through the refiner at all?
- * Pure + exported for unit testing. Returns false for inputs where refinement
- * is pointless or unwanted (slash commands, one-word affirmations, trivially
- * short text, bare numbers).
- */
-declare function shouldEnhance(text: string): boolean;
-/**
- * Normalize for "did the refiner actually change anything?" comparison —
- * collapse whitespace and lowercase so trivial reformatting doesn't trigger
- * the confirmation panel.
- */
-declare function normalizedEqual(a: string, b: string): boolean;
-/** A single text-only conversation turn used as refiner context. */
-interface ConversationTurn {
-    role: 'user' | 'assistant';
-    text: string;
-}
-/**
- * Result of a successful prompt refinement. Contains both the
- * original-language and English versions so the UI can offer both.
- */
-interface EnhanceResult {
-    /** Refined in the user's original language. */
-    refined: string;
-    /** Refined in English. */
-    english: string;
-}
-interface EnhanceUserPromptOptions {
-    provider: Provider;
-    model: string;
-    text: string;
-    /**
-     * Recent conversation turns (oldest→newest), text only, used purely as
-     * CONTEXT so the refiner can resolve references in a follow-up message
-     * ("it", "the same", "that file"). Without this, the refiner is blind to
-     * the conversation and can only refine self-contained prompts. Build with
-     * `recentTextTurns(ctx.messages)`.
-     */
-    history?: ConversationTurn[] | undefined;
-    /** Parent abort signal (e.g. the run controller / Esc). */
-    signal?: AbortSignal | undefined;
-    /** Hard cap on how long to wait for the refiner before giving up. Default 90s. */
-    timeoutMs?: number | undefined;
-    /** Max tokens for the refined output. Default 2048. */
-    maxTokens?: number | undefined;
-    /**
-     * Called with a short reason when refinement fails (provider error, timeout,
-     * empty response). NOT called when the caller cancels via `signal`. Lets the
-     * UI surface *why* a refine fell through instead of a generic message.
-     */
-    onError?: ((reason: string) => void) | undefined;
-}
-/**
- * Refine a raw user prompt. Returns the refined text, or `null` when the
- * caller should fall back to the original (refiner errored, timed out, was
- * aborted, or returned nothing useful). NEVER throws — refinement is a
- * best-effort convenience and must never block the user from sending.
- */
-declare function enhanceUserPrompt(opts: EnhanceUserPromptOptions): Promise<EnhanceResult | null>;
-/**
- * Extract the last few user/assistant TEXT turns from a conversation, newest
- * last, for use as refiner context. Skips system messages and tool-only turns
- * (tool_use / tool_result carry no useful natural-language context and bloat
- * the call). Each turn is truncated to `maxChars`; at most `maxTurns` are
- * returned. Pure + exported for unit testing.
- */
-declare function recentTextTurns(messages: Message[], maxTurns?: number, maxChars?: number): ConversationTurn[];
-
 type PhaseStatus = 'pending' | 'ready' | 'running' | 'paused' | 'completed' | 'failed' | 'skipped';
 interface PhaseNode {
     id: string;
@@ -1816,6 +1884,218 @@ interface InjectedToolResult {
     authorId: string;
 }
 
+/**
+ * mailbox-loop — Agent-loop integration for mailbox checking.
+ *
+ * Integrates the inter-agent mailbox into the agent's iteration cycle.
+ * Before each LLM call, checks for unread high-priority messages (steer, btw).
+ * Found messages are folded into the conversation so the agent can react.
+ *
+ * Uses the project-level GlobalMailbox for cross-session communication.
+ *
+ * @module mailbox-loop
+ */
+
+interface MailboxLoopOptions {
+    mailbox: Mailbox;
+    /**
+     * The agent's globally unique mailbox identity (e.g. `leader@a1b2c3d4`,
+     * session-bound). Read receipts are recorded under this id, so two
+     * sessions whose leaders share a base name never consume each other's
+     * receipts. Pass a GETTER when the identity can change at runtime (an
+     * in-process session swap moves the leader onto a new session tag).
+     */
+    agentId: string | (() => string);
+    /**
+     * Additional addresses this agent also answers to — typically the bare
+     * base id (`leader`). Lets other agents (and humans) address "leader"
+     * without knowing the session tag; every live leader session receives it.
+     */
+    aliases?: string[] | undefined;
+}
+declare function createMailboxChecker(opts: MailboxLoopOptions): () => Promise<MailboxMessage[]>;
+declare function buildMailboxBlock(messages: MailboxMessage[]): {
+    type: 'text';
+    text: string;
+};
+declare function injectPendingMailboxMessages(checkMailbox: () => Promise<MailboxMessage[]>, foldFn: (block: {
+    type: 'text';
+    text: string;
+}) => void, a: {
+    events: {
+        emit: (type: string, payload: unknown) => void;
+    };
+    logger: {
+        debug?: (...args: unknown[]) => void;
+    };
+}): Promise<void>;
+
+/**
+ * Minimal interface exposing the Agent fields that the extracted
+ * loop / tool-execution / response modules need. Each extracted
+ * function takes this interface instead of the full Agent class,
+ * keeping coupling explicit and testable.
+ */
+interface AgentInternals {
+    readonly container: Container;
+    readonly tools: ToolRegistry;
+    readonly providers: ProviderRegistry;
+    readonly events: EventBus;
+    readonly pipelines: AgentPipelines;
+    readonly ctx: Context;
+    readonly maxIterations: number;
+    readonly executionStrategy: 'parallel' | 'sequential' | 'smart';
+    readonly perIterationOutputCapBytes: number;
+    readonly autoExtendLimit: boolean;
+    readonly toolExecutor: ToolExecutorLike;
+    readonly extensions: ExtensionRegistry;
+    readonly logger: Logger;
+    readonly retry: RetryPolicy;
+    readonly errorHandler: ErrorHandler;
+    readonly permission: PermissionPolicy;
+    readonly renderer: Renderer | undefined;
+    readonly tracer: Tracer | undefined;
+}
+
+/**
+ * mailbox-attach — composition glue for the agent-loop mailbox checker.
+ *
+ * Lives at the src root (composition layer) because it constructs the
+ * concrete GlobalMailbox from coordination/ and hands the resulting
+ * checker to core/ — core/ itself may only depend on the Mailbox
+ * interface (architecture Rule 3, see tests/architecture/
+ * package-boundaries.test.ts).
+ *
+ * @module mailbox-attach
+ */
+
+declare function attachMailboxChecker(a: AgentInternals, source?: 'cli' | 'webui'): () => Promise<MailboxMessage[]>;
+
+/**
+ * file-author-tracker — JSON-based tracking of which agent created/edited files.
+ *
+ * Stores a per-project JSON log in the global project directory:
+ *   ~/.wrongstack/projects/<slug-hash>/file-authors.json
+ *
+ * Each entry records: file path, action (create|edit), agent id/name,
+ * timestamp, and optional session id.
+ *
+ * Used by the tech-stack agent and other coordination tools to know
+ * who touched what, so warnings can be routed to the right agent.
+ *
+ * @module file-author-tracker
+ */
+interface FileAuthorEntry {
+    /** Absolute or relative file path. */
+    filePath: string;
+    /** What happened to the file. */
+    action: 'create' | 'edit' | 'delete';
+    /** Agent id (e.g. 'leader', 'tech-stack', 'executor'). */
+    agentId: string;
+    /** Human-readable agent name. */
+    agentName?: string | undefined;
+    /** Session that performed the action. */
+    sessionId?: string | undefined;
+    /** ISO8601 timestamp. */
+    timestamp: string;
+    /** Optional commit hash if known. */
+    commitHash?: string | undefined;
+}
+interface FileAuthorLog {
+    /** Project root this log belongs to. */
+    projectRoot: string;
+    /** All entries, newest last. */
+    entries: FileAuthorEntry[];
+    /** Last time the log was compacted (old entries archived). */
+    lastCompactedAt?: string | undefined;
+}
+interface FileAuthorTrackerOptions {
+    /** Directory where the JSON log is stored. Usually the global project dir. */
+    storageDir: string;
+    /** Project root for reference. */
+    projectRoot: string;
+    /** Max entries before auto-compaction. Default: 5000. */
+    maxEntries?: number | undefined;
+}
+/**
+ * Record that an agent created, edited, or deleted a file.
+ */
+declare function recordFileAction(opts: FileAuthorTrackerOptions, entry: Omit<FileAuthorEntry, 'timestamp'>): Promise<void>;
+/**
+ * Get the most recent author entry for a given file path.
+ * Returns undefined if no entry exists.
+ */
+declare function getLastAuthor(opts: Pick<FileAuthorTrackerOptions, 'storageDir' | 'projectRoot'>, filePath: string): Promise<FileAuthorEntry | undefined>;
+/**
+ * Get all entries for a file, newest last.
+ */
+declare function getFileHistory(opts: Pick<FileAuthorTrackerOptions, 'storageDir' | 'projectRoot'>, filePath: string): Promise<FileAuthorEntry[]>;
+/**
+ * Get all files last touched by a specific agent.
+ */
+declare function getFilesByAgent(opts: Pick<FileAuthorTrackerOptions, 'storageDir' | 'projectRoot'>, agentId: string): Promise<Map<string, FileAuthorEntry>>;
+/**
+ * Return the full log (for debugging/auditing).
+ */
+declare function getFullLog(opts: Pick<FileAuthorTrackerOptions, 'storageDir' | 'projectRoot'>): Promise<FileAuthorLog>;
+/**
+ * Compact the log by archiving old entries to a separate file.
+ * Keeps the most recent `keepCount` entries in the active log.
+ */
+declare function compactLog(opts: Pick<FileAuthorTrackerOptions, 'storageDir' | 'projectRoot'>, keepCount?: number): Promise<{
+    archived: number;
+    kept: number;
+}>;
+
+/**
+ * techstack-mailbox-consumer — Auto-spawns the tech-stack agent when
+ * dep-watcher messages land in the mailbox.
+ *
+ * This module runs a lightweight polling loop that checks the mailbox
+ * for unread `assign` messages directed at the `tech-stack` agent.
+ * When found, it invokes the provided `onSpawn` callback to spawn a
+ * tech-stack subagent, passing the manifest path as the task.
+ *
+ * The consumer also records file-author entries when it detects that
+ * a manifest was edited, so the tech-stack agent knows who to warn.
+ *
+ * @module techstack-mailbox-consumer
+ */
+
+interface TechStackConsumerOptions {
+    /** The mailbox to poll. */
+    mailbox: Mailbox;
+    /** Called when a tech-stack agent should be spawned. Receives the task description. */
+    onSpawn: (task: string, name: string) => Promise<{
+        subagentId: string;
+        taskId: string;
+    }>;
+    /** Agent id that the consumer watches for. Default: 'tech-stack'. */
+    targetAgent?: string | undefined;
+    /** Agent id that sends the completion ack. Default: 'tech-stack-consumer'. */
+    consumerAgentId?: string | undefined;
+    /** Polling interval in ms. Default: 5000. */
+    pollIntervalMs?: number | undefined;
+    /** File-author tracker config (for recording manifest edits). */
+    fileAuthorOpts?: FileAuthorTrackerOptions | undefined;
+    /** Current session id (for file-author entries). */
+    sessionId?: string | undefined;
+    /** Current agent id (for file-author entries). */
+    currentAgentId?: string | undefined;
+    /** Current agent name (for file-author entries). */
+    currentAgentName?: string | undefined;
+    /** Called on each poll cycle for logging. */
+    onLog?: ((msg: string) => void) | undefined;
+    /** Called when an error occurs. */
+    onError?: ((err: unknown) => void) | undefined;
+}
+/**
+ * Start the mailbox consumer loop.
+ *
+ * Returns a dispose function that stops polling and cleans up.
+ */
+declare function startTechStackConsumer(opts: TechStackConsumerOptions): () => void;
+
 /**
  * collabPauseMiddleware — gates the agent's `toolCall` pipeline on
  * the collaboration pause signal.
@@ -2056,4 +2336,34 @@ interface PlanPluginOptions {
  */
 declare function createPlanPlugin(opts?: PlanPluginOptions): Plugin;
 
-export { AddAttachmentInput, AttachmentRef, AttachmentStore, type AutoPhaseOptions, type AutoPhasePlanResult, AutoPhasePlanner, type AutoPhasePlannerOptions, AutoPhaseRunner, type AutoPhaseRunnerOptions, type BootConfigOptions, type BootConfigResult, BrainArbiter, BuildContext, type Checkpoint, CheckpointManager, type CheckpointManagerOptions, type CollabBusState, type InjectedToolResult as CollabInjectedToolResult, type CollabPauseMiddlewareOptions, CollaborationBus, Config, ConfigStore, Container, ContentBlock, Context, type ContinueDirective, type ConversationTurn, DefaultLogger, DefaultPathResolver, DefaultPluginAPI, DefaultPromptStore, DefaultSecretVault, DefaultSystemPromptBuilder, type DefaultSystemPromptBuilderOptions, type DetectedDependency, type DetectionResult, ENHANCER_SYSTEM_PROMPT, type EnhanceResult, type EnhanceUserPromptOptions, EventBus, EventName, ExtensionRegistry, type Finding, type FullScanResult, type GeneratedSecuritySkill, type GeneratedSkill, type GeneratedSkillContent, GitignoreUpdater, HealthRegistry, HookEvent, HookInput, HookMatcher, HookOutcome, HookRegistry, InProcessHook, InputBuilder, type InputBuilderEvent, type InputBuilderOptions, KERNEL_API_VERSION, LAYER_1_IDENTITY, Listener, type LoadPluginsOptions, Logger, MATRIX_PHASE_KEYS, type MCPRegistryHandle, MCPRegistryView, MCPServerConfig, type MatrixKeyKind, MemoryStore, Message, MetricsSink, MetricsSinkView, ModeStore, ModelCapabilities, ModelMatrixEntry, type PackageManager, type PhaseEventMap, type PhaseEventName, type PhaseExecutionContext, type PhaseFilter, type PhaseGraph, PhaseGraphBuilder, type PhaseGraphBuilderOptions, type PhaseNode, PhaseOrchestrator, type PhaseOrchestratorOptions, type PhaseProgress, type PhaseSort, type PhaseStatus, PhaseStore, type PhaseStoreOptions, type PhaseTemplate, Plugin, PluginAPI, type PluginAPIInit, PluginPipelines, Provider, ProviderRegistry, ProviderRegistryView, ProviderRunner, ReplayLogStore, type ReplayMode, ReplayProviderRunner, type ReplayProviderRunnerOptions, ReportGenerator, type ReportOptions, Request, Response, RunProviderOptions$1 as RunProviderOptions, type ScanOptions, type ScanResult, type ScanScope, type SecurityPattern, SecurityScanner, type SecurityScannerContext, type SecurityScannerOptions, SecurityScannerOrchestrator, SessionWriterView, type SeverityLevel, type ShellHookSpec, type SkillGenerationContext, SkillGenerator, type SkillGeneratorOptions, SkillLoader, SlashCommand, SlashCommandRegistry, SlashCommandRegistryView, SystemPromptBuilder, SystemPromptContributor, TaskGraph, TaskNode, TaskPriority, TaskStore, TaskType, type TechStack, TechStackDetector, type TechStackInfo, TextBlock, Tool, ToolCallPipelinePayload, ToolRegistry, ToolRegistryView, Tracer, WorktreeManager, WstackPaths, bootConfig, buildBtwBlock, collabInjectMiddleware, collabPauseMiddleware, consumeBtwNotes, createAutoPhaseFromTaskGraph, createGitPlugin, createMcpControlTool, createObservabilityPlugin, createPlanPlugin, createPromptsPlugin, createSecurityPlugin, createSecuritySlashCommand, createSkillsPlugin, createSyncPlugin, defaultGitignoreUpdater, defaultOrchestrator, defaultReportGenerator, defaultSecurityScanner, defaultSkillGenerator, defaultTechStackDetector, enhanceUserPrompt, flagsToConfigPatch, hashRequest, isValidMatrixKey, loadPlugins, makeContinueToNextIterationTool, matrixKeyKind, normalizedEqual, parseContinueDirective, pendingBtwCount, phaseForRole, recentTextTurns, resolveModelMatrix, runProviderWithRetry, runShellHook, securitySlashCommand, setBtwNote, shouldEnhance, stableStringify, unloadPlugins };
+interface ChimeraConfig {
+    enabled?: boolean | undefined;
+    provider?: string | undefined;
+    model?: string | undefined;
+    maxFiles?: number | undefined;
+    maxTokens?: number | undefined;
+}
+interface ResolvedChimeraConfig {
+    enabled: boolean;
+    provider: string;
+    model: string;
+    maxFiles: number;
+    maxTokens: number;
+}
+declare function resolveChimeraConfig(cfg: ChimeraConfig, sessionProvider: string, sessionModel: string): ResolvedChimeraConfig;
+interface ChimeraReviewNeededPayload {
+    /** Resolved chimera config */
+    config: ResolvedChimeraConfig;
+    /** Project root for git operations */
+    cwd: string;
+    /** Changed files with their contents */
+    files: Array<{
+        path: string;
+        status: 'added' | 'modified';
+        content: string;
+    }>;
+}
+declare const CHIMERA_REVIEW_PROMPT = "You are Chimera, a post-session code quality agent. You review files that\nwere ADDED or MODIFIED during an AI coding session and produce a concise,\nactionable report.\n\nRULES\n1. Only review the files provided \u2014 do not expand scope.\n2. Use read/grep/lint tools to inspect files before flagging issues.\n3. Be surgical \u2014 flag real bugs, not style preferences.\n4. Severity-ranked: Critical > High > Medium > Low. Only report Medium+.\n5. One finding per line with severity, file:line, and a one-sentence fix.\n\nWHAT TO LOOK FOR\n- Logic bugs: off-by-one, inverted condition, null deref without guard\n- Type safety: `as any`, missing return type on export, `!` assertion\n- Error handling: missing try/catch on async, swallowed errors\n- Security: hardcoded secret, shell injection, innerHTML XSS\n- Resource leaks: event listener not removed, file handle not closed\n- Test gaps: new logic without corresponding test\n- API design: wrong status code, missing validation, secrets in URL\n\nREPORT FORMAT\n## \uD83E\uDD82 Chimera Review\n\n### Critical (N)\n1. [BUG] `path/file.ts:42` \u2014 description\n   \u2192 fix suggestion\n\n### High (N)\n...\n\n### Medium (N)\n...\n\n### Summary\n- Files reviewed: N\n- Findings: C critical, H high, M medium\n- Clean files: N\n\nIf NOTHING worth flagging:\n## \uD83E\uDD82 Chimera Review \u2014 all clear \u2705\nNo issues found in N changed files.";
+declare function createChimeraPlugin(): Plugin;
+
+export { AddAttachmentInput, AgentPipelines, AttachmentRef, AttachmentStore, type AutoPhaseOptions, type AutoPhasePlanResult, AutoPhasePlanner, type AutoPhasePlannerOptions, AutoPhaseRunner, type AutoPhaseRunnerOptions, type BootConfigOptions, type BootConfigResult, BrainArbiter, BuildContext, CHIMERA_REVIEW_PROMPT, type Checkpoint, CheckpointManager, type CheckpointManagerOptions, type ChimeraReviewNeededPayload, type CollabBusState, type InjectedToolResult as CollabInjectedToolResult, type CollabPauseMiddlewareOptions, CollaborationBus, Config, ConfigStore, Container, ContentBlock, type ContentScore, Context, type ContinueDirective, DefaultLogger, DefaultPathResolver, DefaultPluginAPI, DefaultPromptStore, DefaultSecretVault, DefaultSystemPromptBuilder, type DefaultSystemPromptBuilderOptions, type DetectedDependency, type DetectionResult, type EliseResult, EventBus, EventName, ExtensionRegistry, type FileAuthorEntry, type FileAuthorLog, type FileAuthorTrackerOptions, type Finding, type FullScanResult, type GeneratedSecuritySkill, type GeneratedSkill, type GeneratedSkillContent, GitignoreUpdater, HealthRegistry, HookEvent, HookInput, HookMatcher, HookOutcome, HookRegistry, InProcessHook, InputBuilder, type InputBuilderEvent, type InputBuilderOptions, KERNEL_API_VERSION, LAYER_1_IDENTITY, Listener, type LoadPluginsOptions, Logger, MATRIX_PHASE_KEYS, type MCPRegistryHandle, MCPRegistryView, MCPServerConfig, Mailbox, type MailboxLoopOptions, MailboxMessage, type MatrixKeyKind, MemoryStore, Message, MetricsSink, MetricsSinkView, ModeStore, ModelCapabilities, ModelMatrixEntry, type PackageManager, PermissionPolicy, type PhaseEventMap, type PhaseEventName, type PhaseExecutionContext, type PhaseFilter, type PhaseGraph, PhaseGraphBuilder, type PhaseGraphBuilderOptions, type PhaseNode, PhaseOrchestrator, type PhaseOrchestratorOptions, type PhaseProgress, type PhaseSort, type PhaseStatus, PhaseStore, type PhaseStoreOptions, type PhaseTemplate, Plugin, PluginAPI, type PluginAPIInit, PluginPipelines, Provider, ProviderRegistry, ProviderRegistryView, ProviderRunner, Renderer, ReplayLogStore, type ReplayMode, ReplayProviderRunner, type ReplayProviderRunnerOptions, ReportGenerator, type ReportOptions, Request, type ResolvedChimeraConfig, Response, RunProviderOptions$1 as RunProviderOptions, type ScanOptions, type ScanResult, type ScanScope, type SecurityPattern, SecurityScanner, type SecurityScannerContext, type SecurityScannerOptions, SecurityScannerOrchestrator, SessionWriterView, type SeverityLevel, type ShellHookSpec, type SkillGenerationContext, SkillGenerator, type SkillGeneratorOptions, SkillLoader, SlashCommand, SlashCommandRegistry, SlashCommandRegistryView, SystemPromptBuilder, SystemPromptContributor, TaskGraph, TaskNode, TaskPriority, TaskStore, TaskType, type TechStack, type TechStackConsumerOptions, TechStackDetector, type TechStackInfo, TextBlock, Tool, ToolCallPipelinePayload, ToolRegistry, ToolRegistryView, Tracer, WorktreeManager, WstackPaths, attachMailboxChecker, bootConfig, buildBtwBlock, buildLosslessDigest, buildMailboxBlock, buildQueuedMessagesBlock, buildSmartDigest, collabInjectMiddleware, collabPauseMiddleware, compactLog, consumeBtwNotes, consumeQueuedMessagesUpdate, createAutoPhaseFromTaskGraph, createChimeraPlugin, createGitPlugin, createMailboxChecker, createMcpControlTool, createObservabilityPlugin, createPlanPlugin, createPromptsPlugin, createSecurityPlugin, createSecuritySlashCommand, createSkillsPlugin, createSyncPlugin, defaultGitignoreUpdater, defaultOrchestrator, defaultReportGenerator, defaultSecurityScanner, defaultSkillGenerator, defaultTechStackDetector, eliseOldToolResults, estimateMessageTokens, estimateMessages, extractText, findPreserveStart, flagsToConfigPatch, getFileHistory, getFilesByAgent, getFullLog, getLastAuthor, hasTextContent, hashRequest, injectPendingMailboxMessages, isValidMatrixKey, loadPlugins, makeContinueToNextIterationTool, matrixKeyKind, parseContinueDirective, peekQueuedMessages, pendingBtwCount, phaseForRole, recordFileAction, resolveChimeraConfig, resolveModelMatrix, runProviderWithRetry, runShellHook, scoreMessage, securitySlashCommand, setBtwNote, setQueuedMessagesSnapshot, stableStringify, startTechStackConsumer, unloadPlugins };