@wrongstack/core 0.257.2 → 0.260.0

package/dist/{null-fleet-bus-B5mfTJXT.d.ts → null-fleet-bus-DT92xqgJ.d.ts}

@@ -1,11 +1,11 @@
-import { d as AgentPhase, A as AgentDefinition, a as DefaultMultiAgentCoordinator, D as DispatchClassifier } from './multi-agent-coordinator-DqTUEAeC.js';
-import { F as FleetBus, u as FleetUsage, S as SubagentConfig, v as FleetUsageAggregator, f as TaskResult, C as CoordinatorStatus, T as TaskSpec, c as MultiAgentConfig, d as SubagentRunner } from './agent-subagent-runner-US741uBH.js';
-import { a as SessionWriter, T as Tool, i as SessionStore } from './context-CGdgA0q6.js';
-import { B as BrainArbiter, E as EventBus } from './brain-TjEEwSpw.js';
+import { d as AgentPhase, A as AgentDefinition, a as DefaultMultiAgentCoordinator, D as DispatchClassifier } from './multi-agent-coordinator-CEmrSCMJ.js';
+import { F as FleetBus, u as FleetUsage, S as SubagentConfig, v as FleetUsageAggregator, f as TaskResult, C as CoordinatorStatus, T as TaskSpec, c as MultiAgentConfig, d as SubagentRunner } from './agent-subagent-runner-BNIGZx18.js';
+import { a as SessionWriter, T as Tool, i as SessionStore } from './context-JFOVvu6z.js';
+import { B as BrainArbiter, E as EventBus } from './brain-C2yDd7Lw.js';
 import { EventEmitter } from 'node:events';
 import { D as DirectorStateSnapshot } from './director-state-BfeCUbmk.js';
-import { d as ModelMatrixEntry } from './config-DuAu23zm.js';
-import { I as InMemoryAgentBridge } from './agent-bridge-BrxWHEOm.js';
+import { d as ModelMatrixEntry } from './config-FG6As4H5.js';
+import { I as InMemoryAgentBridge } from './agent-bridge-BbskZ7HH.js';
 
 /**
  * Alert levels the Director can emit when a collab session needs attention.
@@ -1629,6 +1629,11 @@ interface DirectorSessionFactoryOptions {
      * prior fleet manifest.
      */
     directorRunId?: string | undefined;
+    /**
+     * Session-level trace ID for correlating subagent storage events with
+     * the parent session's trace in observability pipelines.
+     */
+    traceId?: string | undefined;
 }
 interface DirectorSessionFactory {
     /** Absolute directory where this director run's transcripts live. */
@@ -1680,7 +1685,7 @@ declare function makeDirectorSessionFactory(opts: DirectorSessionFactoryOptions)
  * descriptions live on the tool definitions themselves; this preamble only
  * teaches *when* to reach for them.
  */
-declare const DEFAULT_DIRECTOR_PREAMBLE = "You are the Director of a multi-agent fleet. You orchestrate worker\nsubagents by spawning them, assigning tasks, awaiting completions, and\nrolling up their outputs into your next decision.\n\nCore fleet tools available to you:\n  - spawn_subagent       \u2014 create a worker with a chosen provider / model / role\n  - assign_task          \u2014 hand a piece of work to a specific subagent\n  - await_tasks          \u2014 block until named task ids complete (parallel-safe)\n  - ask_subagent         \u2014 synchronously query a running subagent via the bridge\n  - roll_up              \u2014 aggregate finished tasks into a markdown/json summary\n  - terminate_subagent   \u2014 abort a stuck worker (use sparingly)\n  - fleet_status         \u2014 snapshot of all subagents and pending tasks\n  - fleet_usage          \u2014 token + cost breakdown per subagent and total\n\nWorking rules:\n  1. Decompose first. Before spawning, decide which sub-tasks are\n     independent and can run in parallel. Sequential work doesn't need a\n     subagent \u2014 do it yourself.\n  2. Match worker to job. Cheap/fast model for triage, capable model for\n     synthesis. Different providers per sibling is allowed and encouraged.\n  3. Always pair an assign with an await. Don't fire-and-forget; you owe\n     the user a single coherent answer at the end.\n  4. Roll up before deciding. After await_tasks resolves, call roll_up so\n     the results are folded back into your context in a compact form.\n  5. Budget is real. Check fleet_usage periodically. If a subagent is\n     thrashing, terminate it rather than letting cost climb silently.\n  6. Never claim a subagent's work as your own without verifying it. If a\n     result looks wrong, ask_subagent for clarification before passing it\n     to the user.\n  7. Wind down when satisfied. When the results are good enough, call\n     work_complete \u2014 no new subagents will spawn and queued tasks complete\n     as aborted. Running subagents finish naturally. Call terminate_subagent\n     only for ones you need to stop immediately.";
+declare const DEFAULT_DIRECTOR_PREAMBLE = "You are the Director of a multi-agent fleet. You orchestrate worker\nsubagents by spawning them, assigning tasks, awaiting completions, and\nrolling up their outputs into your next decision.\n\nCore fleet tools available to you:\n  - spawn_subagent       \u2014 create a worker with a chosen provider / model / role\n  - assign_task          \u2014 hand a piece of work to a specific subagent\n  - await_tasks          \u2014 block until named task ids complete (parallel-safe)\n  - ask_subagent         \u2014 synchronously query a running subagent via the bridge\n  - roll_up              \u2014 aggregate finished tasks into a markdown/json summary\n  - terminate_subagent   \u2014 abort a stuck worker (use sparingly)\n  - fleet_status         \u2014 snapshot of all subagents and pending tasks\n  - fleet_usage          \u2014 token + cost breakdown per subagent and total\n\nWorking rules:\n  1. Decompose first. Before spawning, decide which sub-tasks are\n     independent and can run in parallel. Sequential work doesn't need a\n     subagent \u2014 do it yourself.\n  2. Match worker to job. Cheap/fast model for triage, capable model for\n     synthesis. Different providers per sibling is allowed and encouraged.\n  3. Always pair an assign with an await. Don't fire-and-forget; you owe\n     the user a single coherent answer at the end.\n  4. Roll up before deciding. After await_tasks resolves, call roll_up so\n     the results are folded back into your context in a compact form.\n  5. Budget is real. Check fleet_usage periodically. If a subagent is\n     thrashing, terminate it rather than letting cost climb silently.\n  6. Never claim a subagent's work as your own without verifying it. If a\n     result looks wrong, ask_subagent for clarification before passing it\n     to the user.\n  7. **Act on subagent mail immediately**. Subagent messages (result, ask,\n     assign, note) are injected inline before every step \u2014 even mid-task.\n     When you see one, address it before continuing: reply to asks, factor\n     in results, act on assignments. Use `mailbox action=ack` to mark\n     completed messages.\n  8. Wind down when satisfied. When the results are good enough, call\n     work_complete \u2014 no new subagents will spawn and queued tasks complete\n     as aborted. Running subagents finish naturally. Call terminate_subagent\n     only for ones you need to stop immediately.";
 /**
  * Default baseline prepended to every subagent's system prompt. Tells the
  * subagent its place in the hierarchy and the bridge contract — without
@@ -1692,7 +1697,7 @@ declare const DEFAULT_DIRECTOR_PREAMBLE = "You are the Director of a multi-agent
  * baseline reinforces this in plain text — the actual enforcement is at
  * the bridge transport layer.
  */
-declare const DEFAULT_SUBAGENT_BASELINE = "You are a subagent operating under a Director. You were spawned to handle\na specific slice of a larger plan \u2014 do that slice well and report back.\n\nBridge contract:\n  - You have a parent (the Director). You may call `request` on the\n    parent bridge to ask a clarifying question. Use this sparingly; the\n    parent is also working.\n  - You MAY NOT request the parent's system prompt, tool list, or other\n    subagents' context. Those are not yours to read.\n  - Your final task output is what the Director sees. Be concise,\n    structured, and self-contained \u2014 assume the Director will paste your\n    output into its own context.\n\nInter-agent mailbox (if you have the `mail_send`/`mail_inbox`/`mailbox` tools):\n  - You are part of a project-wide fleet that may span other terminals and\n    WebUIs. Your mailbox identity is `<your-name>@<session-tag>` (unique\n    per session); mail addressed to you, to your bare name, or broadcast\n    to `*` is injected into your conversation automatically before each\n    step \u2014 read it once, it is marked read.\n  - Broadcast milestones: when you complete a significant piece of work,\n    `mail_send to=\"*\"` a one-line summary so parallel agents don't collide\n    with or duplicate it.\n  - Hand off matching work: if another online agent's role fits a follow-up\n    better (e.g. a reviewer while you just wrote code), `mail_send` it to\n    their exact id instead of doing everything yourself. Discover ids with\n    `mailbox action=online`.\n  - Answer your mail: reply to the sender's exact `from` id. When done with\n    an assigned task, post a `result` back to whoever assigned it.";
+declare const DEFAULT_SUBAGENT_BASELINE = "You are a subagent operating under a Director. You were spawned to handle\na specific slice of a larger plan \u2014 do that slice well and report back.\n\nBridge contract:\n  - You have a parent (the Director). You may call `request` on the\n    parent bridge to ask a clarifying question. Use this sparingly; the\n    parent is also working.\n  - You MAY NOT request the parent's system prompt, tool list, or other\n    subagents' context. Those are not yours to read.\n  - Your final task output is what the Director sees. Be concise,\n    structured, and self-contained \u2014 assume the Director will paste your\n    output into its own context.\n\nCRITICAL CONSTRAINT \u2014 NO FURTHER DELEGATION:\n  - You MUST NOT call the `delegate` tool or attempt to spawn subagents.\n  - You MUST NOT use `spawn_subagent`, `assign_task`, or any equivalent.\n  - Your role is to execute the assigned task yourself, not to orchestrate.\n  - If a subtask is too complex, report back to the Director with what you\n    found and let the Director decide how to decompose.\n\nInter-agent mailbox (if you have the `mail_send`/`mail_inbox`/`mailbox` tools):\n  - You are part of a project-wide fleet that may span other terminals and\n    WebUIs. Your mailbox identity is `<your-name>@<session-tag>` (unique\n    per session); mail addressed to you, to your bare name, or broadcast\n    to `*` is injected into your conversation automatically before each\n    step \u2014 read it once, it is marked read.\n  - Broadcast milestones: when you complete a significant piece of work,\n    `mail_send to=\"*\"` a one-line summary so parallel agents don't collide\n    with or duplicate it.\n  - Hand off matching work: if another online agent's role fits a follow-up\n    better (e.g. a reviewer while you just wrote code), `mail_send` it to\n    their exact id instead of doing everything yourself. Discover ids with\n    `mailbox action=online`.\n  - Answer your mail: reply to the sender's exact `from` id. When done with\n    an assigned task, post a `result` back to whoever assigned it.\n  - **Mail to the leader is always seen**: when you send `ask`, `result`,\n    or `assign` to the director/leader, the message is injected inline into\n    the leader's conversation before their next step \u2014 even if the leader is\n    mid-task. Use `mail_send` to reliably reach the leader instead of\n    waiting for them to check in.";
 /** Parts the leader-prompt composer accepts. All optional. */
 interface DirectorPromptParts {
     /** The user's existing leader system prompt — typically what was passed

package/dist/observability/index.d.ts

@@ -1,6 +1,6 @@
 import { M as MetricsSink, d as MetricLabels, f as MetricsSnapshot, H as HealthRegistry, a as HealthCheck, A as AggregateHealth, T as Tracer, S as Span } from '../observability-D-HZN_mF.js';
-import { E as EventBus } from '../brain-TjEEwSpw.js';
-import '../context-CGdgA0q6.js';
+import { E as EventBus } from '../brain-C2yDd7Lw.js';
+import '../context-JFOVvu6z.js';
 
 /**
  * In-memory metrics sink. Suitable for embedded use, tests, and /metrics

package/dist/{package-outdated-watcher-BSgR_kK-.d.ts → package-outdated-watcher-C70ag2G9.d.ts}

@@ -1,6 +1,6 @@
-import { b as Mailbox, c as MailboxSendInput, d as MailboxMessage, e as MailboxQuery, f as MailboxAckInput, g as MailboxAgentStatus, A as AgentRegistrationInput, h as AgentHeartbeatInput, i as ClientRegistrationInput, j as ClientHeartbeatInput, k as ClientStatus } from './pipeline-JG8XoudC.js';
-import { E as EventBus, B as BrainArbiter } from './brain-TjEEwSpw.js';
-import { C as Context, T as Tool } from './context-CGdgA0q6.js';
+import { b as Mailbox, c as MailboxSendInput, d as MailboxMessage, e as MailboxQuery, f as MailboxAckInput, g as MailboxAgentStatus, A as AgentRegistrationInput, h as AgentHeartbeatInput, i as ClientRegistrationInput, j as ClientHeartbeatInput, k as ClientStatus } from './pipeline-zflkI2dp.js';
+import { E as EventBus, B as BrainArbiter } from './brain-C2yDd7Lw.js';
+import { C as Context, T as Tool } from './context-JFOVvu6z.js';
 
 /**
  * DefaultMailbox — append-only JSONL inter-agent mailbox (per-session).

package/dist/{parallel-eternal-engine-C0juOszP.d.ts → parallel-eternal-engine-0SItuq5r.d.ts}

@@ -1,12 +1,12 @@
-import { e as ProviderError, C as Context, T as Tool, l as ToolUseBlock, m as ToolResultBlock } from './context-CGdgA0q6.js';
-import { R as RetryPolicy, E as ErrorHandler, a as RecoveryDecision } from './retry-policy-Tg7LXkoK.js';
-import { C as Compactor, a as CompactReport } from './compactor-C5sT4U7I.js';
-import { M as ModelsRegistry } from './config-DuAu23zm.js';
-import { T as ToolExecutorOptions, a as ToolExecutorStrategy, b as ToolBatchResult } from './index-CitPrI3a.js';
-import { g as Agent, h as AgentFactory } from './agent-subagent-runner-US741uBH.js';
-import { B as BrainArbiter } from './brain-TjEEwSpw.js';
-import { J as JournalEntry } from './goal-store-CV9Yz2X_.js';
-import { D as DispatchClassifier, a as DefaultMultiAgentCoordinator } from './multi-agent-coordinator-DqTUEAeC.js';
+import { e as ProviderError, C as Context, T as Tool, l as ToolUseBlock, m as ToolResultBlock } from './context-JFOVvu6z.js';
+import { R as RetryPolicy, E as ErrorHandler, a as RecoveryDecision } from './retry-policy-Cavrzmtk.js';
+import { C as Compactor, a as CompactReport } from './compactor-t0R_AIt_.js';
+import { M as ModelsRegistry } from './config-FG6As4H5.js';
+import { T as ToolExecutorOptions, a as ToolExecutorStrategy, b as ToolBatchResult } from './index-BPcg4N3M.js';
+import { g as Agent, h as AgentFactory } from './agent-subagent-runner-BNIGZx18.js';
+import { B as BrainArbiter, E as EventBus } from './brain-C2yDd7Lw.js';
+import { J as JournalEntry } from './goal-store-CPXz6Mml.js';
+import { D as DispatchClassifier, a as DefaultMultiAgentCoordinator } from './multi-agent-coordinator-CEmrSCMJ.js';
 
 declare class DefaultRetryPolicy implements RetryPolicy {
     shouldRetry(err: Error | ProviderError, attempt: number): boolean;
@@ -277,6 +277,8 @@ interface EternalAutonomyOptions {
      * Without a brain, the engine uses its built-in heuristics.
      */
     brain?: BrainArbiter | undefined;
+    /** Optional EventBus for emitting storage.* observability events from goal I/O. */
+    events?: EventBus | undefined;
 }
 type EternalEngineState = 'idle' | 'running' | 'stopped';
 /**
@@ -490,6 +492,8 @@ interface ParallelEternalOptions {
      * provider call — preferred for a continuously-ticking autonomous loop).
      */
     dispatchClassifier?: DispatchClassifier | undefined;
+    /** Optional EventBus for emitting storage.* observability events from goal I/O. */
+    events?: EventBus | undefined;
 }
 /**
  * Sense → Decide → Fan-out (4–8 parallel agents) → Aggregate → Loop.

package/dist/{path-resolver-CbkT-RMU.d.ts → path-resolver-DKBh6Jlo.d.ts}

@@ -1,6 +1,6 @@
-import { E as EventBus } from './brain-TjEEwSpw.js';
-import { M as ModelsRegistry, b as ResolvedModel } from './config-DuAu23zm.js';
-import { c as TokenCounter, U as Usage, d as CacheStats } from './context-CGdgA0q6.js';
+import { E as EventBus } from './brain-C2yDd7Lw.js';
+import { M as ModelsRegistry, b as ResolvedModel } from './config-FG6As4H5.js';
+import { c as TokenCounter, U as Usage, d as CacheStats } from './context-JFOVvu6z.js';
 import { P as PathResolver } from './path-resolver-CPRj4bFY.js';
 
 /**

package/dist/{permission-CwBBpCoF.d.ts → permission-BJ7eO9Vl.d.ts}

@@ -1,4 +1,4 @@
-import { T as Tool, C as Context, f as Permission } from './context-CGdgA0q6.js';
+import { T as Tool, C as Context, f as Permission } from './context-JFOVvu6z.js';
 
 interface SecretScrubber {
     scrub(text: string): string;

package/dist/{permission-policy-B8rSu908.d.ts → permission-policy-DEXOfnpm.d.ts}

@@ -1,6 +1,6 @@
-import { T as Tool, C as Context } from './context-CGdgA0q6.js';
+import { T as Tool, C as Context } from './context-JFOVvu6z.js';
 import { I as InputReader } from './input-reader-E-ffP2ee.js';
-import { P as PermissionPolicy, a as PermissionDecision } from './permission-CwBBpCoF.js';
+import { P as PermissionPolicy, a as PermissionDecision } from './permission-BJ7eO9Vl.js';
 
 interface PermissionPolicyOptions {
     trustFile: string;
@@ -97,6 +97,7 @@ declare class DefaultPermissionPolicy implements PermissionPolicy {
     getConfirmDestructive(): boolean;
     reload(): Promise<void>;
     evaluate(tool: Tool, input: unknown, ctx: Context): Promise<PermissionDecision>;
+    private isDestructiveByCapability;
     private isDestructiveYoloCall;
     trust(rule: {
         tool: string;

package/dist/{pipeline-JG8XoudC.d.ts → pipeline-zflkI2dp.d.ts}

@@ -1,5 +1,5 @@
-import { T as Tool, n as TextBlock, g as ContentBlock } from './context-CGdgA0q6.js';
-import { H as HookEvent, e as HookMatcher, I as InProcessHook, S as ShellHook, f as HookEntry } from './config-DuAu23zm.js';
+import { T as Tool, n as TextBlock, g as ContentBlock } from './context-JFOVvu6z.js';
+import { H as HookEvent, e as HookMatcher, I as InProcessHook, S as ShellHook, f as HookEntry } from './config-FG6As4H5.js';
 
 /**
  * Mailbox — persistent inter-agent messaging system with cross-session support.

package/dist/{plan-templates-DPiQMkBz.d.ts → plan-templates-BFXyRkEK.d.ts}

@@ -1,9 +1,9 @@
-import { E as EventBus, M as MemoryScope, k as MemoryEntry, l as MemoryStore, m as MemoryRelevanceContext, S as ScoredEntry } from './brain-TjEEwSpw.js';
-import { S as SecretScrubber } from './permission-CwBBpCoF.js';
-import { i as SessionStore, h as SessionMetadata, a as SessionWriter, p as ResumedSession, q as SessionData, r as SessionSummary, g as ContentBlock, S as SessionEvent, s as TodoItem, t as ConversationState } from './context-CGdgA0q6.js';
-import { A as AttachmentStore, a as AddAttachmentInput, b as AttachmentRef, c as Attachment } from './session-reader-CqRvaL5v.js';
+import { E as EventBus, M as MemoryScope, k as MemoryEntry, l as MemoryStore, m as MemoryRelevanceContext, S as ScoredEntry } from './brain-C2yDd7Lw.js';
+import { S as SecretScrubber } from './permission-BJ7eO9Vl.js';
+import { i as SessionStore, h as SessionMetadata, a as SessionWriter, p as ResumedSession, q as SessionData, r as SessionSummary, g as ContentBlock, S as SessionEvent, s as TodoItem, t as ConversationState } from './context-JFOVvu6z.js';
+import { A as AttachmentStore, a as AddAttachmentInput, b as AttachmentRef, c as Attachment } from './session-reader-DtofsB-2.js';
 import { W as WstackPaths } from './wstack-paths-CJjEwPXn.js';
-import { i as ConfigStore, h as Config, j as ConfigLoader, k as SyncConfig } from './config-DuAu23zm.js';
+import { i as ConfigStore, h as Config, j as ConfigLoader, k as SyncConfig } from './config-FG6As4H5.js';
 import { S as SecretVault } from './secret-vault-BJDY28ev.js';
 
 interface SessionStoreOptions {
@@ -25,6 +25,9 @@ declare class DefaultSessionStore implements SessionStore {
     private readonly events?;
     private readonly secretScrubber?;
     constructor(opts: SessionStoreOptions);
+    private emitRead;
+    private emitWrite;
+    private emitError;
     /** Absolute path to the session index file. */
     private get indexFile();
     /** Join session ID to its absolute path within the store directory. */
@@ -108,8 +111,12 @@ interface PersistedQueueItem {
  */
 declare class QueueStore {
     private readonly file;
+    private readonly events;
+    private readonly traceId;
     constructor(opts: {
         dir: string;
+        events?: EventBus;
+        traceId?: string;
     });
     write(items: PersistedQueueItem[]): Promise<void>;
     read(): Promise<PersistedQueueItem[]>;
@@ -198,6 +205,7 @@ interface MemoryStoreOptions {
 declare class DefaultMemoryStore implements MemoryStore {
     private readonly files;
     private readonly events?;
+    private traceId?;
     private readonly backend;
     /**
      * Per-scope serialization queue. `remember` / `forget` / `consolidate` /
@@ -249,7 +257,16 @@ declare class DefaultMemoryStore implements MemoryStore {
     forget(query: string, scope?: MemoryScope): Promise<number>;
     consolidate(scope: MemoryScope): Promise<void>;
     clear(scope?: MemoryScope): Promise<void>;
-    /** Mirror current memory content to the persistent backup directory. */
+    /**
+     * Return a new MemoryStore proxy that carries `traceId` on every storage
+     * event. The original store is left unchanged — callers that need a
+     * trace-decorated view (e.g. session-run tools) receive the proxy while
+     * the singleton remains trace-free for boot-time use.
+     *
+     * The proxy implements the full `MemoryStore` interface; all other
+     * properties (backend, etc.) are delegated to the original store.
+     */
+    withTraceId(traceId: string): MemoryStore;
     private mirrorBackup;
 }
 
@@ -296,12 +313,16 @@ interface ConfigLoaderOptions {
     vault?: SecretVault | undefined;
     /** Extra sources merged after the built-in layers. */
     sources?: ConfigSource[] | undefined;
+    events?: EventBus;
+    traceId?: string;
 }
 declare class DefaultConfigLoader implements ConfigLoader {
     private readonly paths;
     private readonly strict;
     private readonly vault;
     private readonly extraSources;
+    private readonly events;
+    private readonly traceId;
     constructor(opts: ConfigLoaderOptions);
     load(opts?: {
         cliFlags?: Partial<Config> | undefined;
@@ -544,12 +565,12 @@ type TodosCheckpointDetach = () => Promise<void>;
 /** Read a checkpoint from disk. Returns null when the file doesn't
  *  exist or is corrupt — callers treat both cases as "no prior state".
  */
-declare function loadTodosCheckpoint(filePath: string): Promise<TodoItem[] | null>;
+declare function loadTodosCheckpoint(filePath: string, events?: EventBus, traceId?: string): Promise<TodoItem[] | null>;
 /** Write the checkpoint atomically. Best-effort: a write failure is
  *  logged but does not throw — losing one checkpoint shouldn't bring
  *  down the agent run.
  */
-declare function saveTodosCheckpoint(filePath: string, sessionId: string, todos: readonly TodoItem[]): Promise<void>;
+declare function saveTodosCheckpoint(filePath: string, sessionId: string, todos: readonly TodoItem[], events?: EventBus, traceId?: string): Promise<void>;
 /**
  * Subscribe a `ConversationState` so every `todos_replaced` mutation
  * triggers an atomic write to disk. Returns the unsubscribe function.
@@ -558,7 +579,7 @@ declare function saveTodosCheckpoint(filePath: string, sessionId: string, todos:
  * marking three items done in the same tool call) coalesces into one
  * disk hit.
  */
-declare function attachTodosCheckpoint(state: ConversationState, filePath: string, sessionId: string): TodosCheckpointDetach;
+declare function attachTodosCheckpoint(state: ConversationState, filePath: string, sessionId: string, events?: EventBus, traceId?: string): TodosCheckpointDetach;
 
 /**
  * Plan items are the strategic counterpart to todos. Where `ctx.todos`
@@ -586,8 +607,8 @@ interface PlanFile {
     updatedAt: string;
     items: PlanItem[];
 }
-declare function loadPlan(filePath: string): Promise<PlanFile | null>;
-declare function savePlan(filePath: string, plan: PlanFile): Promise<void>;
+declare function loadPlan(filePath: string, events?: EventBus): Promise<PlanFile | null>;
+declare function savePlan(filePath: string, plan: PlanFile, events?: EventBus): Promise<void>;
 /** Create a new PlanFile when none exists on disk. */
 declare function emptyPlan(sessionId: string, title?: string): PlanFile;
 declare function addPlanItem(plan: PlanFile, title: string, details?: string | undefined): {

package/dist/{provider-runner-hM7EXlLI.d.ts → provider-runner-BC-uywtT.d.ts}

@@ -1,8 +1,8 @@
-import { E as EventBus } from './brain-TjEEwSpw.js';
+import { E as EventBus } from './brain-C2yDd7Lw.js';
 import { L as Logger } from './logger-B63L5bTg.js';
 import { T as Tracer } from './observability-D-HZN_mF.js';
-import { P as Provider, R as Request, C as Context, b as Response } from './context-CGdgA0q6.js';
-import { R as RetryPolicy } from './retry-policy-Tg7LXkoK.js';
+import { P as Provider, R as Request, C as Context, b as Response } from './context-JFOVvu6z.js';
+import { R as RetryPolicy } from './retry-policy-Cavrzmtk.js';
 
 /**
  * Options passed to a ProviderRunner when calling the provider.

package/dist/{retry-policy-Tg7LXkoK.d.ts → retry-policy-Cavrzmtk.d.ts}

@@ -1,4 +1,4 @@
-import { C as Context, b as Response, e as ProviderError } from './context-CGdgA0q6.js';
+import { C as Context, b as Response, e as ProviderError } from './context-JFOVvu6z.js';
 
 type RecoveryDecision = {
     /**

package/dist/sdd/index.d.ts

@@ -1,15 +1,15 @@
 import { h as Specification, S as SpecAnalysis, g as SpecValidationResult, e as SpecStatus, f as SpecTemplate, b as SpecRequirement } from '../spec-TBi3Jr6T.js';
 import { d as TaskGraph, e as TaskNode, i as TaskFilter, j as TaskSort, c as TaskProgress, T as TaskType, a as TaskPriority } from '../task-graph-u1q9Jkyk.js';
-import { E as EventBus } from '../brain-TjEEwSpw.js';
-import { D as DoneCondition, g as Agent, h as AgentFactory, f as TaskResult } from '../agent-subagent-runner-US741uBH.js';
-import '../context-CGdgA0q6.js';
-import '../index-CitPrI3a.js';
+import { E as EventBus } from '../brain-C2yDd7Lw.js';
+import { D as DoneCondition, g as Agent, h as AgentFactory, f as TaskResult } from '../agent-subagent-runner-BNIGZx18.js';
+import '../context-JFOVvu6z.js';
+import '../index-BPcg4N3M.js';
 import '../logger-B63L5bTg.js';
-import '../pipeline-JG8XoudC.js';
-import '../config-DuAu23zm.js';
+import '../pipeline-zflkI2dp.js';
+import '../config-FG6As4H5.js';
 import '../observability-D-HZN_mF.js';
-import '../permission-CwBBpCoF.js';
-import '../retry-policy-Tg7LXkoK.js';
+import '../permission-BJ7eO9Vl.js';
+import '../retry-policy-Cavrzmtk.js';
 
 declare class SpecParser {
     parse(content: string): Specification;

package/dist/sdd/index.js

@@ -3125,6 +3125,20 @@ var SubagentBudget = class _SubagentBudget {
 };
 
 // src/coordination/agent-subagent-runner.ts
+function withDisabledToolFiltering(factory) {
+  return async (config) => {
+    const result = await factory(config);
+    const disabled = config.disabledTools ?? [];
+    if (disabled.length === 0) return result;
+    const registry = result.agent.tools;
+    if (registry && typeof registry.unregister === "function") {
+      for (const toolName of disabled) {
+        registry.unregister(toolName);
+      }
+    }
+    return result;
+  };
+}
 function makeAgentSubagentRunner(opts) {
   const format = opts.formatTaskInput ?? defaultFormatTaskInput;
   return async (task, ctx) => {
@@ -7012,7 +7026,9 @@ var SddParallelRun = class {
       doneCondition: { type: "all_tasks_done" }
     };
     this.coordinator = new DefaultMultiAgentCoordinator(config);
-    const runner = makeAgentSubagentRunner({ factory: this.opts.subagentFactory ?? this.defaultFactory() });
+    const baseFactory = this.opts.subagentFactory ?? this.defaultFactory();
+    const filteredFactory = withDisabledToolFiltering(baseFactory);
+    const runner = makeAgentSubagentRunner({ factory: filteredFactory });
     this.coordinator.setRunner?.(runner);
   }
   defaultFactory() {
@@ -7054,7 +7070,9 @@ var SddParallelRun = class {
         id: subagentId,
         name: subagentId,
         role: "executor",
-        timeoutMs: this.timeoutMs
+        timeoutMs: this.timeoutMs,
+        // Disable delegation — subagents are leaf workers, not orchestrators
+        disabledTools: ["delegate"]
       })
     );
     const spawnResults = await Promise.all(spawns);