@wrongstack/core 0.265.1 → 0.267.0

package/dist/execution/prompt-enhancer.d.ts

@@ -1,4 +1,4 @@
-import { P as Provider, M as Message } from '../context-MRk5PhNv.js';
+import { P as Provider, M as Message } from '../context-dT5Ueund.js';
 
 /**
  * Prompt refinement ("did you mean this?").

package/dist/extension/index.d.ts

@@ -1,8 +1,8 @@
-export { i as AfterIterationHook, j as AfterRunHook, k as AfterToolExecutionHook, l as AgentExtension, B as BeforeIterationHook, m as BeforeRunHook, n as BeforeToolExecutionHook, E as ExtensionRegistry, O as OnErrorHook, v as ProviderRunnerFn, t as ProviderRunnerWrapper } from '../index-CEDeNodM.js';
-import '../context-MRk5PhNv.js';
+export { i as AfterIterationHook, j as AfterRunHook, k as AfterToolExecutionHook, l as AgentExtension, B as BeforeIterationHook, m as BeforeRunHook, n as BeforeToolExecutionHook, E as ExtensionRegistry, O as OnErrorHook, v as ProviderRunnerFn, t as ProviderRunnerWrapper } from '../index-Bms0m4oy.js';
+import '../context-dT5Ueund.js';
 import '../logger-B63L5bTg.js';
-import '../pipeline-DPDxH_7m.js';
-import '../config-BMCj_XDs.js';
+import '../pipeline-BfD2k1rT.js';
+import '../config-Du3pYYln.js';
 import '../observability-D-HZN_mF.js';
-import '../brain-BXd_61kQ.js';
-import '../permission-B9SB45lp.js';
+import '../brain-Cdg77tVN.js';
+import '../permission-B75JAi3-.js';

package/dist/{goal-preamble-DvHDSKSe.d.ts → goal-preamble-SulMTowG.d.ts}

@@ -1,14 +1,14 @@
 import { S as SkillLoader, a as SkillManifest, b as SkillEntry } from './skill-DGIXCtdv.js';
 import { W as WstackPaths } from './wstack-paths-hOpNLmvf.js';
-import { P as Provider, C as Context } from './context-MRk5PhNv.js';
-import { C as Compactor, a as CompactReport } from './compactor-B8pOf45Y.js';
-import { M as MessageSelector } from './selector-CzHh_igB.js';
-import { E as EventBus } from './brain-BXd_61kQ.js';
-import { M as MiddlewareHandler } from './pipeline-DPDxH_7m.js';
-import { S as SessionEventBridge } from './session-event-bridge-BUI6Jf-4.js';
-import { C as ContextWindowAggressiveOn, g as ContextWindowPolicy } from './config-BMCj_XDs.js';
-import { g as Agent, D as DoneCondition } from './agent-subagent-runner-DM2pP-B6.js';
-import { R as RunResult, S as SystemPromptContributor } from './index-CEDeNodM.js';
+import { P as Provider, C as Context } from './context-dT5Ueund.js';
+import { C as Compactor, a as CompactReport } from './compactor-iMZ84CXq.js';
+import { M as MessageSelector } from './selector-Bc7eWtT3.js';
+import { E as EventBus } from './brain-Cdg77tVN.js';
+import { M as MiddlewareHandler } from './pipeline-BfD2k1rT.js';
+import { S as SessionEventBridge } from './session-event-bridge-D-araDEz.js';
+import { C as ContextWindowAggressiveOn, h as ContextWindowPolicy } from './config-Du3pYYln.js';
+import { g as Agent, D as DoneCondition } from './agent-subagent-runner-CzPGP3jA.js';
+import { R as RunResult, S as SystemPromptContributor } from './index-Bms0m4oy.js';
 
 interface SkillLoaderOptions {
     paths: WstackPaths;
@@ -178,8 +178,15 @@ declare class SelectiveCompactor implements Compactor {
     private computeTargetBudget;
     private eliseOldToolResults;
     private hasTextContent;
+    /**
+     * Estimate message-array tokens via the shared `estimateMessages` primitive
+     * so SelectiveCompactor's before/after/load figures agree with the
+     * middleware threshold math and the other compactors. Previously this used a
+     * private `ceil(len/3.5)` walk that diverged from the calibrated shared
+     * estimator, causing the selective `load`/`targetBudget` comparison to mix
+     * two incompatible token scales.
+     */
     private estimateTokens;
-    private roughTokenEstimate;
 }
 
 type CompactorStrategy = 'hybrid' | 'intelligent' | 'selective';
@@ -224,6 +231,16 @@ interface StrategyCompactorOptions {
  */
 declare function createStrategyCompactor(opts?: StrategyCompactorOptions): Compactor;
 
+interface ContextWindowBudgetSnapshot {
+    maxContext: number;
+    inputTokens: number;
+    availableInputTokens: number;
+    remainingInputTokens: number;
+    reservedOutputTokens: number;
+    reservedSafetyTokens: number;
+    load: number;
+    overflowTokens: number;
+}
 type CompactionFailureMode = 'throw' | 'throw_on_hard' | 'continue';
 interface AutoCompactionOptions {
     aggressiveOn?: ContextWindowAggressiveOn | undefined;
@@ -451,4 +468,4 @@ declare function makeAutonomyPromptContributor(opts: AutonomyPromptContributorOp
  */
 declare function buildGoalPreamble(goal: string, deliverables?: string[]): string;
 
-export { AutoCompactionMiddleware as A, type CompactorStrategy as C, DefaultSkillLoader as D, IntelligentCompactor as I, SelectiveCompactor as S, AutonomousRunner as a, type AutonomousRunnerOptions as b, type AutonomyPromptContributorOptions as c, type DoneCheckResult as d, DoneConditionChecker as e, type IntelligentCompactorOptions as f, type SelectiveCompactorOptions as g, type SkillLoaderOptions as h, type StrategyCompactorOptions as i, buildGoalPreamble as j, createStrategyCompactor as k, makeAutonomyPromptContributor as m };
+export { AutoCompactionMiddleware as A, type CompactorStrategy as C, DefaultSkillLoader as D, IntelligentCompactor as I, SelectiveCompactor as S, AutonomousRunner as a, type AutonomousRunnerOptions as b, type AutonomyPromptContributorOptions as c, type DoneCheckResult as d, DoneConditionChecker as e, type IntelligentCompactorOptions as f, type SelectiveCompactorOptions as g, type SkillLoaderOptions as h, type StrategyCompactorOptions as i, buildGoalPreamble as j, createStrategyCompactor as k, type ContextWindowBudgetSnapshot as l, makeAutonomyPromptContributor as m };

package/dist/{goal-store-DtLMySNb.d.ts → goal-store-CABDwdFE.d.ts}

@@ -1,4 +1,4 @@
-import { E as EventBus } from './brain-BXd_61kQ.js';
+import { E as EventBus } from './brain-Cdg77tVN.js';
 
 /**
  * Long-running autonomous mission. A goal survives across sessions and

package/dist/{index-CEDeNodM.d.ts → index-Bms0m4oy.d.ts}

@@ -1,10 +1,10 @@
-import { n as TextBlock, T as Tool, l as ToolUseBlock, C as Context, m as ToolResultBlock, R as Request, b as Response, P as Provider, g as ContentBlock, a3 as WrongStackError } from './context-MRk5PhNv.js';
+import { o as TextBlock, T as Tool, m as ToolUseBlock, C as Context, n as ToolResultBlock, R as Request, b as Response, P as Provider, g as ContentBlock, a9 as WrongStackError } from './context-dT5Ueund.js';
 import { L as Logger } from './logger-B63L5bTg.js';
-import { B as BuildContext, H as HookRegistry, a as Renderer, P as Pipeline, C as Container } from './pipeline-DPDxH_7m.js';
-import { H as HookEvent, W as WireFamily, P as ProviderConfig } from './config-BMCj_XDs.js';
+import { B as BuildContext, H as HookRegistry, a as Renderer, P as Pipeline, C as Container } from './pipeline-BfD2k1rT.js';
+import { H as HookEvent, W as WireFamily, P as ProviderConfig } from './config-Du3pYYln.js';
 import { T as Tracer } from './observability-D-HZN_mF.js';
-import { E as EventBus } from './brain-BXd_61kQ.js';
-import { P as PermissionPolicy, S as SecretScrubber } from './permission-B9SB45lp.js';
+import { E as EventBus } from './brain-Cdg77tVN.js';
+import { P as PermissionPolicy, S as SecretScrubber } from './permission-B75JAi3-.js';
 
 /**
  * A contributor that injects additional TextBlocks into the system prompt.

package/dist/{index-B-ch8K9C.d.ts → index-DtCVWel4.d.ts}

@@ -1,15 +1,15 @@
-import { T as Token, a as Renderer, S as SystemPromptBuilder, H as HookRegistry } from './pipeline-DPDxH_7m.js';
-import { E as EventBus, c as MemoryStore, B as BrainArbiter } from './brain-BXd_61kQ.js';
-import { C as Compactor } from './compactor-B8pOf45Y.js';
-import { j as ConfigLoader, i as ConfigStore, M as ModelsRegistry } from './config-BMCj_XDs.js';
-import { E as ErrorHandler, R as RetryPolicy } from './retry-policy-CN0khdlj.js';
+import { T as Token, a as Renderer, S as SystemPromptBuilder, H as HookRegistry } from './pipeline-BfD2k1rT.js';
+import { E as EventBus, c as MemoryStore, B as BrainArbiter } from './brain-Cdg77tVN.js';
+import { C as Compactor } from './compactor-iMZ84CXq.js';
+import { k as ConfigLoader, j as ConfigStore, M as ModelsRegistry } from './config-Du3pYYln.js';
+import { E as ErrorHandler, R as RetryPolicy } from './retry-policy-BilV1ujH.js';
 import { I as InputReader } from './input-reader-E-ffP2ee.js';
 import { L as Logger } from './logger-B63L5bTg.js';
 import { M as ModeStore } from './mode-CZlO9iU1.js';
 import { P as PathResolver } from './path-resolver-CPRj4bFY.js';
-import { P as PermissionPolicy, S as SecretScrubber } from './permission-B9SB45lp.js';
-import { P as ProviderRunner } from './provider-runner-DMa70ODu.js';
-import { c as TokenCounter, i as SessionStore } from './context-MRk5PhNv.js';
+import { P as PermissionPolicy, S as SecretScrubber } from './permission-B75JAi3-.js';
+import { P as ProviderRunner } from './provider-runner-CX7iIvox.js';
+import { c as TokenCounter, i as SessionStore } from './context-dT5Ueund.js';
 import { S as SkillLoader } from './skill-DGIXCtdv.js';
 
 /**

package/dist/index-IEuxQd-E.d.ts

@@ -0,0 +1,82 @@
+import './secret-vault-gkvEZZfE.js';
+import './permission-policy-DlR9eJAM.js';
+
+/**
+ * Well-known tool capabilities used for authorization decisions.
+ *
+ * These are the preferred values for `Tool.capabilities`.
+ * New capabilities should be added here with clear documentation.
+ *
+ * Philosophy (2026-06+):
+ * - Prefer capabilities over exact tool name matching.
+ * - Subagent guards and future policies should primarily key off capabilities.
+ * - Name-based denylists are legacy and will be phased down.
+ */
+declare const ToolCapabilities: {
+    /** Can execute arbitrary commands in the user's shell (the `bash` tool). */
+    readonly SHELL_ARBITRARY: "shell.arbitrary";
+    /** Can execute a restricted set of commands (the `exec` tool). */
+    readonly SHELL_RESTRICTED: "shell.restricted";
+    /** Can read files inside the project (and possibly outside via symlinks if not guarded). */
+    readonly FS_READ: "fs.read";
+    /** Can write / modify / delete files inside the project. */
+    readonly FS_WRITE: "fs.write";
+    /** Can write files outside the current project root (very high risk). */
+    readonly FS_WRITE_OUTSIDE_PROJECT: "fs.write.outside-project";
+    /** Can perform outbound network requests. */
+    readonly NET_OUTBOUND: "net.outbound";
+    /** Proxies tools from external MCP servers (unknown capability). */
+    readonly MCP_PROXY: "mcp.proxy";
+    /** Can spawn or manage subagents / multi-agent tasks. */
+    readonly SUBAGENT_SPAWN: "subagent.spawn";
+    /** Can mutate global or session configuration / trust state. */
+    readonly CONFIG_MUTATE: "config.mutate";
+    /** Can install packages or run package managers with side effects. */
+    readonly PACKAGE_INSTALL: "package.install";
+};
+type ToolCapability = (typeof ToolCapabilities)[keyof typeof ToolCapabilities];
+/**
+ * Set of capabilities that are considered dangerous for subagents by default.
+ * Subagents should not receive these capabilities unless the leader explicitly
+ * allows the specific tool at spawn time.
+ */
+declare const DANGEROUS_FOR_SUBAGENTS: readonly ToolCapability[];
+/**
+ * Wide capability allowlist for subagents that the user has authorized to act
+ * with full developer power (the CLI fleet host applies this to any subagent
+ * that isn't given an explicit, narrower grant). It covers everything needed to
+ * do real work end-to-end — read, write/edit inside the project, outbound
+ * network, and shell/build/install — so a delegated coding or build agent runs
+ * the same toolchain the leader would, without per-tool confirmation it cannot
+ * answer.
+ *
+ * Deliberately EXCLUDED (require an explicit per-spawn `allowedCapabilities`
+ * grant, because they escape the task's blast radius rather than perform it):
+ *   - `fs.write.outside-project` — writing outside the repo (e.g. ~/.ssh).
+ *   - `mcp.proxy` — third-party MCP tools (also hard-blocked by name).
+ *   - `subagent.spawn` — recursive delegation (the baseline prompt forbids it).
+ *   - `config.mutate` — rewriting trust/config is privilege escalation, not work.
+ */
+declare const WIDE_SUBAGENT_CAPABILITIES: readonly ToolCapability[];
+/**
+ * Check if a tool (or its capabilities array) includes any dangerous capability
+ * for subagent execution.
+ */
+declare function hasDangerousCapabilityForSubagents(toolOrCaps: {
+    capabilities?: readonly string[] | undefined;
+} | readonly string[] | undefined): boolean;
+/**
+ * Check if a tool declares a specific capability (or any of the provided ones).
+ */
+declare function hasCapability(toolOrCaps: {
+    capabilities?: readonly string[] | undefined;
+} | readonly string[] | undefined, capability: ToolCapability | ToolCapability[]): boolean;
+/**
+ * Returns the intersection of a tool's capabilities with the dangerous set.
+ * Useful for logging and audit trails.
+ */
+declare function getDangerousCapabilities(toolOrCaps: {
+    capabilities?: readonly string[] | undefined;
+} | readonly string[] | undefined): ToolCapability[];
+
+export { DANGEROUS_FOR_SUBAGENTS as D, ToolCapabilities as T, WIDE_SUBAGENT_CAPABILITIES as W, type ToolCapability as a, hasDangerousCapabilityForSubagents as b, getDangerousCapabilities as g, hasCapability as h };

package/dist/index.d.ts

@@ -1,83 +1,84 @@
-import { S as SystemPromptBuilder, b as ModelCapabilities, B as BuildContext, C as Container, H as HookRegistry, c as Mailbox, d as MailboxMessage, a as Renderer } from './pipeline-DPDxH_7m.js';
-export { A as AgentHeartbeatInput, e as AgentRegistrationInput, f as BindOptions, D as Decorator, F as Factory, g as MailboxAckInput, h as MailboxAgentStatus, i as MailboxMessageType, j as MailboxQuery, k as MailboxSendInput, l as MailboxTaskContext, m as Middleware, M as MiddlewareHandler, N as NextFn, P as Pipeline, n as PipelineOptions, o as ReadReceipts, p as RegisteredAgent, T as Token, q as hookMatcherMatches, r as normalizeRecipient } from './pipeline-DPDxH_7m.js';
-import { E as EventBus, c as MemoryStore, a as EventName, L as Listener, B as BrainArbiter } from './brain-BXd_61kQ.js';
-export { e as BrainDecision, f as BrainDecisionOption, g as BrainDecisionQueue, h as BrainDecisionRequest, i as BrainDecisionSource, j as BrainFallback, k as BrainRisk, D as DefaultBrainArbiter, l as DefaultBrainArbiterOptions, m as EventLogger, n as EventMap, H as HumanEscalatingBrainArbiter, o as MEMORY_TYPE_LABELS, p as MemoryClearedPayload, q as MemoryConsolidatedPayload, b as MemoryEntry, r as MemoryForgottenPayload, s as MemoryPriority, d as MemoryRelevanceContext, t as MemoryRememberedPayload, M as MemoryScope, u as MemoryType, O as ObservableBrainArbiter, v as ScopedEventBus, S as ScoredEntry, w as formatHumanPrompt } from './brain-BXd_61kQ.js';
-import { W as WorktreeManager } from './index-B-ch8K9C.js';
-export { A as AllocateOpts, M as MergeOpts, a as MergeResult, R as RunController, b as RunControllerOptions, T as TOKENS, c as WorktreeHandle, d as WorktreeManagerOptions, e as WorktreeRunResult, f as WorktreeStatus, g as assertSafePath } from './index-B-ch8K9C.js';
-import { C as Context, P as Provider, T as Tool, R as Request, b as Response, M as Message, g as ContentBlock, n as TextBlock, J as JSONSchema } from './context-MRk5PhNv.js';
-export { A as AgentError, d as CacheStats, k as Capabilities, u as ConfigError, v as ContextInit, t as ConversationState, E as ERROR_CODES, w as ErrorCode, x as ErrorSeverity, y as ErrorSubsystem, F as FileSnapshot, z as FsError, I as ImageBlock, B as MessageRole, f as Permission, D as PluginError, e as ProviderError, G as ProviderErrorBody, H as ReadonlyConversationState, p as ResumedSession, K as RiskTier, L as RunEnv, o as RunOptions, N as SddError, q as SessionData, O as SessionError, S as SessionEvent, h as SessionMetadata, i as SessionStore, r as SessionSummary, a as SessionWriter, Q as StateChange, V as StateChangeHandler, W as StopReason, X as StreamEvent, Y as StreamHangError, Z as ThinkingBlock, s as TodoItem, c as TokenCounter, _ as ToolCallContext, $ as ToolError, a0 as ToolFinalEvent, a1 as ToolIconId, j as ToolProgressEvent, m as ToolResultBlock, a2 as ToolStreamEvent, l as ToolUseBlock, U as Usage, a3 as WrongStackError, a4 as asBlocks, a5 as asText, a6 as extractRunEnv, a7 as isAgentError, a8 as isConfigError, a9 as isFsError, aa as isImageBlock, ab as isPluginError, ac as isSddError, ad as isSessionError, ae as isTextBlock, af as isThinkingBlock, ag as isToolError, ah as isToolResultBlock, ai as isToolUseBlock, aj as isWrongStackError, ak as toWrongStackError, al as wrapAsState } from './context-MRk5PhNv.js';
-import { P as ProviderRunner, R as RunProviderOptions$1 } from './provider-runner-DMa70ODu.js';
-import { l as HookInput, m as HookOutcome, h as Config, T as TokenSavingTier, H as HookEvent, e as HookMatcher, I as InProcessHook, d as ModelMatrixEntry, i as ConfigStore } from './config-BMCj_XDs.js';
-export { A as AutonomyConfig, n as CONTEXT_WINDOW_MODES, o as CircuitBreakerRuntimeConfig, j as ConfigLoader, p as ContextConfig, C as ContextWindowAggressiveOn, q as ContextWindowConfigLike, r as ContextWindowMode, s as ContextWindowModeId, g as ContextWindowPolicy, t as ContextWindowThresholds, u as CustomModelDefinition, D as DEFAULT_CONTEXT_WINDOW_MODE_ID, F as FeaturesConfig, f as HookEntry, v as IndexingConfig, L as LaunchConfig, w as LogConfig, c as MCPServerConfig, x as ModelsDevModel, a as ModelsDevPayload, y as ModelsDevProvider, M as ModelsRegistry, z as PluginConfig, B as ProviderApiKey, P as ProviderConfig, b as ResolvedModel, R as ResolvedProvider, E as SessionLoggingConfig, S as ShellHook, G as SyncCategory, k as SyncConfig, J as ToolsConfig, W as WireFamily, K as formatContextWindowModeList, N as getContextWindowMode, O as isContextWindowModeId, Q as listContextWindowModes, U as normalizeTokenSavingTier, V as resolveContextWindowPolicy } from './config-BMCj_XDs.js';
-export { a as CompactReport, C as Compactor } from './compactor-B8pOf45Y.js';
-import { P as PermissionPolicy } from './permission-B9SB45lp.js';
-export { a as PermissionDecision, S as SecretScrubber, T as TrustPolicy } from './permission-B9SB45lp.js';
+import { S as SystemPromptBuilder, b as ModelCapabilities, B as BuildContext, C as Container, H as HookRegistry, c as Mailbox, d as MailboxMessage, a as Renderer } from './pipeline-BfD2k1rT.js';
+export { A as AgentHeartbeatInput, e as AgentRegistrationInput, f as BindOptions, D as Decorator, F as Factory, g as MailboxAckInput, h as MailboxAgentStatus, i as MailboxMessageType, j as MailboxQuery, k as MailboxSendInput, l as MailboxTaskContext, m as Middleware, M as MiddlewareHandler, N as NextFn, P as Pipeline, n as PipelineOptions, o as ReadReceipts, p as RegisteredAgent, T as Token, q as hookMatcherMatches, r as normalizeRecipient } from './pipeline-BfD2k1rT.js';
+import { E as EventBus, c as MemoryStore, a as EventName, L as Listener, B as BrainArbiter } from './brain-Cdg77tVN.js';
+export { e as BrainDecision, f as BrainDecisionOption, g as BrainDecisionQueue, h as BrainDecisionRequest, i as BrainDecisionSource, j as BrainFallback, k as BrainRisk, D as DefaultBrainArbiter, l as DefaultBrainArbiterOptions, m as EventLogger, n as EventMap, H as HumanEscalatingBrainArbiter, o as MEMORY_TYPE_LABELS, p as MemoryClearedPayload, q as MemoryConsolidatedPayload, b as MemoryEntry, r as MemoryForgottenPayload, s as MemoryPriority, d as MemoryRelevanceContext, t as MemoryRememberedPayload, M as MemoryScope, u as MemoryType, O as ObservableBrainArbiter, v as ScopedEventBus, S as ScoredEntry, w as formatHumanPrompt } from './brain-Cdg77tVN.js';
+import { W as WorktreeManager } from './index-DtCVWel4.js';
+export { A as AllocateOpts, M as MergeOpts, a as MergeResult, R as RunController, b as RunControllerOptions, T as TOKENS, c as WorktreeHandle, d as WorktreeManagerOptions, e as WorktreeRunResult, f as WorktreeStatus, g as assertSafePath } from './index-DtCVWel4.js';
+import { C as Context, P as Provider, T as Tool, R as Request, b as Response, M as Message, g as ContentBlock, o as TextBlock, J as JSONSchema } from './context-dT5Ueund.js';
+export { A as AgentError, d as CacheStats, l as Capabilities, v as ConfigError, w as ContextEvidenceState, x as ContextFileEvidence, y as ContextInit, z as ContextIntentEvidence, B as ContextRepeatedReadEvidence, u as ConversationState, E as ERROR_CODES, D as ErrorCode, F as ErrorSeverity, G as ErrorSubsystem, H as FileSnapshot, I as FsError, K as ImageBlock, L as MessageRole, f as Permission, N as PluginError, e as ProviderError, O as ProviderErrorBody, Q as ReadonlyConversationState, q as ResumedSession, V as RiskTier, W as RunEnv, p as RunOptions, X as SddError, r as SessionData, Y as SessionError, S as SessionEvent, h as SessionMetadata, i as SessionStore, s as SessionSummary, a as SessionWriter, Z as StateChange, _ as StateChangeHandler, $ as StopReason, a0 as StreamEvent, a1 as StreamHangError, a2 as ThinkingBlock, t as TodoItem, c as TokenCounter, a3 as ToolCallContext, a4 as ToolError, a5 as ToolEvidenceStatus, a6 as ToolFinalEvent, a7 as ToolIconId, k as ToolOutputMetadata, j as ToolProgressEvent, n as ToolResultBlock, a8 as ToolStreamEvent, m as ToolUseBlock, U as Usage, a9 as WrongStackError, aa as asBlocks, ab as asText, ac as extractRunEnv, ad as isAgentError, ae as isConfigError, af as isFsError, ag as isImageBlock, ah as isPluginError, ai as isSddError, aj as isSessionError, ak as isTextBlock, al as isThinkingBlock, am as isToolError, an as isToolResultBlock, ao as isToolUseBlock, ap as isWrongStackError, aq as toWrongStackError, ar as wrapAsState } from './context-dT5Ueund.js';
+import { P as ProviderRunner, R as RunProviderOptions$1 } from './provider-runner-CX7iIvox.js';
+import { m as HookInput, n as HookOutcome, i as Config, T as TokenSavingTier, H as HookEvent, f as HookMatcher, I as InProcessHook, d as ModelMatrixEntry, j as ConfigStore } from './config-Du3pYYln.js';
+export { A as AutonomyConfig, o as CONTEXT_WINDOW_MODES, p as CircuitBreakerRuntimeConfig, k as ConfigLoader, q as ContextConfig, C as ContextWindowAggressiveOn, r as ContextWindowConfigLike, s as ContextWindowMode, t as ContextWindowModeId, h as ContextWindowPolicy, u as ContextWindowThresholds, v as CustomModelDefinition, D as DEFAULT_CONTEXT_WINDOW_MODE_ID, F as FeaturesConfig, g as HookEntry, w as IndexingConfig, L as LaunchConfig, x as LogConfig, c as MCPServerConfig, e as ModelsDevModel, a as ModelsDevPayload, y as ModelsDevProvider, M as ModelsRegistry, z as PluginConfig, B as ProviderApiKey, P as ProviderConfig, b as ResolvedModel, R as ResolvedProvider, E as SessionLoggingConfig, S as ShellHook, G as SyncCategory, l as SyncConfig, J as ToolsConfig, W as WireFamily, K as formatContextWindowModeList, N as getContextWindowMode, O as isContextWindowModeId, Q as listContextWindowModes, U as normalizeTokenSavingTier, V as resolveContextWindowPolicy } from './config-Du3pYYln.js';
+export { a as CompactReport, C as Compactor } from './compactor-iMZ84CXq.js';
+import { P as PermissionPolicy } from './permission-B75JAi3-.js';
+export { a as PermissionDecision, S as SecretScrubber, T as TrustPolicy } from './permission-B75JAi3-.js';
 export { C as CheckpointInfo, R as RewindResult, a as RewindResultExtended, S as SessionRewinder } from './session-rewinder-C9HnMkhP.js';
-import { A as AttachmentStore, b as AttachmentRef, a as AddAttachmentInput } from './session-reader-CMgdMSRP.js';
-export { c as Attachment, d as AttachmentKind, e as AttachmentMeta, D as DefaultSessionReader, f as DefaultSessionReaderOptions, S as SessionReader } from './session-reader-CMgdMSRP.js';
+import { A as AttachmentStore, b as AttachmentRef, a as AddAttachmentInput } from './session-reader-D7Dapswh.js';
+export { c as Attachment, d as AttachmentKind, e as AttachmentMeta, D as DefaultSessionReader, f as DefaultSessionReaderOptions, S as SessionReader } from './session-reader-D7Dapswh.js';
 export { D as DEFAULT_AUTONOMY_CONFIG, a as DEFAULT_CIRCUIT_BREAKER_CONFIG, b as DEFAULT_CONTEXT_CONFIG, c as DEFAULT_SESSION_LOGGING_CONFIG, d as DEFAULT_SESSION_PRUNE_DAYS, e as DEFAULT_TOOLS_CONFIG } from './default-config-B0cj-Hry.js';
-import { a as DefaultSecretVault } from './secret-vault-B2yw84VT.js';
-export { D as DefaultSecretScrubber, S as SecretVaultOptions, d as decryptConfigSecrets, e as encryptConfigSecrets, i as isSecretField, m as migratePlaintextSecrets, r as rewriteConfigEncrypted, b as rotateConfigKeys } from './secret-vault-B2yw84VT.js';
+import { D as DefaultSecretVault } from './secret-vault-gkvEZZfE.js';
+export { a as DefaultSecretScrubber, S as SecretVaultOptions, d as decryptConfigSecrets, e as encryptConfigSecrets, i as isSecretField, m as migratePlaintextSecrets, r as rewriteConfigEncrypted, b as rotateConfigKeys } from './secret-vault-gkvEZZfE.js';
 import { D as DefaultLogger } from './logger-DmmQhf4P.js';
 export { a as DefaultLoggerOptions, L as LogFormat, n as noOpLogger } from './logger-DmmQhf4P.js';
-import { D as DefaultPathResolver } from './path-resolver-Dy2ej-gE.js';
-export { a as DefaultTokenCounter } from './path-resolver-Dy2ej-gE.js';
-export { C as CompactorOptions, D as DEFAULT_RECOVERY_STRATEGIES, a as DefaultErrorHandler, b as DefaultRetryPolicy, E as EternalAutonomyEngine, c as EternalAutonomyOptions, d as EternalEngineState, H as HybridCompactor, I as IterationStage, P as ParallelEngineState, e as ParallelEternalEngine, f as ParallelEternalOptions, g as ParallelIterationStage, R as RecoveryStrategy, T as ToolExecutor, h as buildRecoveryStrategies } from './parallel-eternal-engine-Jw9uhEoT.js';
+import { D as DefaultPathResolver } from './path-resolver-COIMLCQL.js';
+export { a as DefaultTokenCounter } from './path-resolver-COIMLCQL.js';
+export { C as CompactorOptions, D as DEFAULT_RECOVERY_STRATEGIES, a as DefaultErrorHandler, b as DefaultRetryPolicy, E as EternalAutonomyEngine, c as EternalAutonomyOptions, d as EternalEngineState, H as HybridCompactor, I as IterationStage, P as ParallelEngineState, e as ParallelEternalEngine, f as ParallelEternalOptions, g as ParallelIterationStage, R as RecoveryStrategy, T as ToolExecutor, h as buildRecoveryStrategies } from './parallel-eternal-engine-DdNnw9BQ.js';
 import { S as SkillLoader } from './skill-DGIXCtdv.js';
 export { b as SkillEntry, a as SkillManifest } from './skill-DGIXCtdv.js';
 export { I as InputReader, P as PromptOption } from './input-reader-E-ffP2ee.js';
-import { k as SlashCommand, P as PluginAPI, l as PluginPipelines, m as ToolRegistryView, n as ProviderRegistryView, o as MCPRegistryView, p as SlashCommandRegistryView, q as SessionWriterView, r as MetricsSinkView, s as PluginCapabilities, t as PluginDependency, u as Plugin } from './agent-subagent-runner-DM2pP-B6.js';
-export { g as Agent, h as AgentFactory, v as AgentFactoryResult, w as AgentRunnerOptions, x as BudgetExceededError, y as BudgetKind, z as BudgetLimits, E as BudgetNegotiationMode, G as BudgetThresholdDecision, H as BudgetThresholdHandler, I as BudgetThresholdSignal, J as BudgetUsage, K as CoordinatorEvents, C as CoordinatorStatus, L as DECISION_TIMEOUT_MS, D as DoneCondition, F as FleetBus, N as FleetEvent, O as FleetHandler, i as FleetUsage, j as FleetUsageAggregator, c as MultiAgentConfig, M as MultiAgentCoordinator, e as SpawnResult, Q as SubagentBudget, S as SubagentConfig, R as SubagentContext, U as SubagentError, V as SubagentErrorKind, W as SubagentRunContext, X as SubagentRunOutcome, d as SubagentRunner, Y as SubagentUsageSnapshot, Z as TIMEOUT_PREEMPT_FRACTION, _ as TaskDelegation, f as TaskResult, T as TaskSpec, $ as makeAgentSubagentRunner, a0 as withDisabledToolFiltering } from './agent-subagent-runner-DM2pP-B6.js';
-export { D as DefaultModelsRegistry, a as DefaultModelsRegistryOptions, c as classifyFamily } from './models-registry-DmJlKuNp.js';
+import { k as SlashCommand, P as PluginAPI, l as PluginPipelines, m as ToolRegistryView, n as ProviderRegistryView, o as MCPRegistryView, p as SlashCommandRegistryView, q as SessionWriterView, r as MetricsSinkView, s as PluginCapabilities, t as PluginDependency, u as Plugin } from './agent-subagent-runner-CzPGP3jA.js';
+export { g as Agent, h as AgentFactory, v as AgentFactoryResult, w as AgentRunnerOptions, x as BudgetExceededError, y as BudgetKind, z as BudgetLimits, E as BudgetNegotiationMode, G as BudgetThresholdDecision, H as BudgetThresholdHandler, I as BudgetThresholdSignal, J as BudgetUsage, K as CoordinatorEvents, C as CoordinatorStatus, L as DECISION_TIMEOUT_MS, D as DoneCondition, F as FleetBus, N as FleetEvent, O as FleetHandler, i as FleetUsage, j as FleetUsageAggregator, c as MultiAgentConfig, M as MultiAgentCoordinator, e as SpawnResult, Q as SubagentBudget, S as SubagentConfig, R as SubagentContext, U as SubagentError, V as SubagentErrorKind, W as SubagentRunContext, X as SubagentRunOutcome, d as SubagentRunner, Y as SubagentUsageSnapshot, Z as TIMEOUT_PREEMPT_FRACTION, _ as TaskDelegation, f as TaskResult, T as TaskSpec, $ as makeAgentSubagentRunner, a0 as withDisabledToolFiltering } from './agent-subagent-runner-CzPGP3jA.js';
+export { D as DefaultModelsRegistry, a as DefaultModelsRegistryOptions, c as classifyFamily } from './models-registry-BqGZNJQ-.js';
 import { M as ModeStore } from './mode-CZlO9iU1.js';
 export { D as DEFAULT_MODES, b as Mode, a as ModeConfig, c as ModeManifest } from './mode-CZlO9iU1.js';
-export { I as InMemoryAgentBridge, a as InMemoryBridgeTransport, c as createMessage } from './agent-bridge-DrkBxszZ.js';
+export { I as InMemoryAgentBridge, a as InMemoryBridgeTransport, c as createMessage } from './agent-bridge-STJ3JwwK.js';
 export { D as DEFAULT_SPEC_TEMPLATE, S as SpecAnalysis, a as SpecApiEndpoint, b as SpecRequirement, c as SpecSection, d as SpecSectionType, e as SpecStatus, f as SpecTemplate, g as SpecValidationResult, h as Specification } from './spec-TBi3Jr6T.js';
 import { d as TaskGraph, T as TaskType, a as TaskPriority, e as TaskNode } from './task-graph-u1q9Jkyk.js';
 export { C as CriticalPathResult, f as TaskAssignment, g as TaskDependency, h as TaskEdge, i as TaskFilter, c as TaskProgress, j as TaskSort, b as TaskStatus, k as computeTaskProgress, l as findCriticalPath, t as topologicalSort } from './task-graph-u1q9Jkyk.js';
 import { T as Tracer, M as MetricsSink, H as HealthRegistry } from './observability-D-HZN_mF.js';
 export { A as AggregateHealth, a as HealthCheck, b as HealthCheckResult, c as HealthStatus, d as MetricLabels, e as MetricSeries, f as MetricsSnapshot, S as Span } from './observability-D-HZN_mF.js';
-import { e as ToolRegistry, S as SystemPromptContributor, E as ExtensionRegistry, P as ProviderRegistry, A as AgentPipelines, f as ToolExecutorLike, c as ToolCallPipelinePayload } from './index-CEDeNodM.js';
-export { i as AfterIterationHook, j as AfterRunHook, k as AfterToolExecutionHook, l as AgentExtension, g as AgentInit, h as AgentInput, B as BeforeIterationHook, m as BeforeRunHook, n as BeforeToolExecutionHook, D as DEFAULT_MAX_ITERATIONS, H as HookRunEnv, o as HookRunner, p as HookRunnerOptions, O as OnErrorHook, q as PreToolUseResult, r as PromptResult, s as ProviderFactory, t as ProviderRunnerWrapper, R as RunResult, d as ToolWrapper, U as UserInputPayload, u as createDefaultPipelines } from './index-CEDeNodM.js';
+import { e as ToolRegistry, S as SystemPromptContributor, E as ExtensionRegistry, P as ProviderRegistry, A as AgentPipelines, f as ToolExecutorLike, c as ToolCallPipelinePayload } from './index-Bms0m4oy.js';
+export { i as AfterIterationHook, j as AfterRunHook, k as AfterToolExecutionHook, l as AgentExtension, g as AgentInit, h as AgentInput, B as BeforeIterationHook, m as BeforeRunHook, n as BeforeToolExecutionHook, D as DEFAULT_MAX_ITERATIONS, H as HookRunEnv, o as HookRunner, p as HookRunnerOptions, O as OnErrorHook, q as PreToolUseResult, r as PromptResult, s as ProviderFactory, t as ProviderRunnerWrapper, R as RunResult, d as ToolWrapper, U as UserInputPayload, u as createDefaultPipelines } from './index-Bms0m4oy.js';
 export { AutonomyStage, DistributiveOmit, DistributivePick } from './types/index.js';
 import { estimateMessageTokens } from './utils/index.js';
-export { AtomicWriteOptions, BuildChildEnvOptions, CompileFail, CompileResult, DeepMergeOptions, FORBIDDEN_PROTO_KEYS, FileLockOptions, MessageRepairReport, MessageRepairResult, NewlineStyle, OutputLineGuard, RequestTokenBreakdown, SafeParseResult, ToolOutputSerializerOptions, UnifiedDiffOptions, ValidationError, ValidationResult, assertNever, assertNotPrivateHost, atomicWrite, buildChildEnv, color, compileGlob, compileUserRegex, completePartialObject, computeMessageTokens, createToolOutputSerializer, deepMerge, detectNewlineStyle, ensureDir, estimateRequestTokens, estimateRequestTokensCalibrated, estimateTextTokens, estimateToolDefTokens, estimateToolInputTokens, estimateToolResultTokens, expandGlob, expandIPv6, formatTodosList, getCalibrationState, getTermSize, isInteractive, isPrimitiveArray, isPrivateIPv4, isPrivateIPv6, isStdinTTY, isStdoutTTY, matchAny, matchGlob, mergeCustomModelDefs, mergeModelsPayload, normalizeToLf, onResize, recordActualUsage, repairToolUseAdjacency, resetCalibration, safeParse, safeStringify, sanitizeJsonString, setOutputLineGuard, setRawMode, sleep, stripAnsi, toStyle, truncate, unifiedDiff, validateAgainstSchema, withFileLock, writeErr, writeOut } from './utils/index.js';
+export { AtomicWriteOptions, BuildChildEnvOptions, CompactToolDefinitionForWireOptions, CompactWireToolDefinition, CompileFail, CompileResult, DeepMergeOptions, FORBIDDEN_PROTO_KEYS, FileLockOptions, MessageRepairReport, MessageRepairResult, NewlineStyle, OutputLineGuard, RecordToolOutputEvidenceInput, RequestTokenBreakdown, SafeParseResult, ToolOutputSerializerOptions, ToolWireDefinitionLike, UnifiedDiffOptions, ValidationError, ValidationResult, assertNever, assertNotPrivateHost, atomicWrite, buildChildEnv, buildContextEvidenceDigest, color, compactSchemaDescriptions, compactToolDefinitionForWire, compileGlob, compileUserRegex, completePartialObject, computeMessageTokens, createContextEvidenceState, createToolOutputSerializer, deepMerge, detectNewlineStyle, ensureDir, estimateRequestTokens, estimateRequestTokensCalibrated, estimateTextTokens, estimateToolDefTokens, estimateToolInputTokens, estimateToolResultTokens, expandGlob, expandIPv6, formatTodosList, getCalibrationState, getTermSize, isInteractive, isPrimitiveArray, isPrivateIPv4, isPrivateIPv6, isStdinTTY, isStdoutTTY, markAssistantReferencedEvidence, matchAny, matchGlob, mergeCustomModelDefs, mergeModelsPayload, normalizeToLf, onResize, recordActualUsage, recordToolOutputEvidence, recordUserIntentEvidence, repairToolUseAdjacency, repeatedReadPressure, resetCalibration, safeParse, safeStringify, sanitizeJsonString, setOutputLineGuard, setRawMode, sleep, stripAnsi, toStyle, truncate, unifiedDiff, validateAgainstSchema, withFileLock, writeErr, writeOut } from './utils/index.js';
+export { H as HttpDispatcher, a as HttpsAgentAsDispatcher } from './dispatcher-types.d-BBeXBQgS.js';
+export { toErrorMessage } from './utils/error.js';
+export { expectDefined } from './utils/expect-defined.js';
 export { T as TaskItem, c as computeTaskItemProgress, f as formatTaskList, a as formatTaskProgress } from './task-format-vGOIftmK.js';
 import { W as WstackPaths } from './wstack-paths-hOpNLmvf.js';
 export { a as WstackPathOptions, p as projectHash, b as projectSlug, r as resolveWstackPaths, w as wstackGlobalRoot } from './wstack-paths-hOpNLmvf.js';
-export { expectDefined } from './utils/expect-defined.js';
-export { toErrorMessage } from './utils/error.js';
-export { H as HttpDispatcher, a as HttpsAgentAsDispatcher } from './dispatcher-types.d-BBeXBQgS.js';
-export { A as AbandonedSession, a as AttachmentStoreOptions, C as ConfigLoaderOptions, b as ConfigMigration, c as ConfigMigrationError, d as ConfigSource, D as DEFAULT_CONFIG_MIGRATIONS, e as DefaultAttachmentStore, f as DefaultConfigLoader, g as DefaultConfigStore, h as DefaultMemoryStore, i as DefaultSessionStore, F as FileMemoryBackend, j as FileMemoryBackendOptions, M as MemoryBackend, k as MemoryStoreOptions, l as MigrationContext, m as MigrationResult, P as PersistedQueueItem, n as PlanFile, o as PlanItem, p as PlanTemplate, Q as QueueStore, R as RecoveryLock, q as RecoveryLockOptions, S as SessionAnalyzer, r as SessionStoreOptions, T as TodosCheckpointFile, s as addPlanItem, t as attachPlanCheckpoint, u as attachTodosCheckpoint, v as clearPlan, w as deriveTodosFromPlanItem, x as emptyPlan, y as formatPlan, z as formatPlanTemplates, B as getPlanTemplate, E as listPlanTemplates, G as loadPlan, H as loadTodosCheckpoint, I as mutatePlan, J as parseEntries, K as removePlanItem, L as runConfigMigrations, N as savePlan, O as saveTodosCheckpoint, U as setPlanItemStatus } from './plan-templates-CzD9GnAU.js';
-export { A as AuditLevel, C as CORE_RECONSTRUCT_EVENTS, a as STANDARD_AUDIT_EVENTS, S as SessionEventBridge, b as SessionEventBridgeOptions, c as SessionSamplingOptions, T as ToolProgressSamplingOptions, d as createSessionEventBridge, r as resolveAuditLevel, e as resolveSessionLoggingConfig } from './session-event-bridge-BUI6Jf-4.js';
+export { A as AbandonedSession, a as AttachmentStoreOptions, C as ConfigLoaderOptions, b as ConfigMigration, c as ConfigMigrationError, d as ConfigSource, D as DEFAULT_CONFIG_MIGRATIONS, e as DefaultAttachmentStore, f as DefaultConfigLoader, g as DefaultConfigStore, h as DefaultMemoryStore, i as DefaultSessionStore, F as FileMemoryBackend, j as FileMemoryBackendOptions, M as MemoryBackend, k as MemoryStoreOptions, l as MigrationContext, m as MigrationResult, P as PersistedQueueItem, n as PlanFile, o as PlanItem, p as PlanTemplate, Q as QueueStore, R as RecoveryLock, q as RecoveryLockOptions, S as SessionAnalyzer, r as SessionStoreOptions, T as TodosCheckpointFile, s as addPlanItem, t as attachPlanCheckpoint, u as attachTodosCheckpoint, v as clearPlan, w as deriveTodosFromPlanItem, x as emptyPlan, y as formatPlan, z as formatPlanTemplates, B as getPlanTemplate, E as listPlanTemplates, G as loadPlan, H as loadTodosCheckpoint, I as mutatePlan, J as parseEntries, K as removePlanItem, L as runConfigMigrations, N as savePlan, O as saveTodosCheckpoint, U as setPlanItemStatus } from './plan-templates-DSIKCXZN.js';
+export { A as AuditLevel, C as CORE_RECONSTRUCT_EVENTS, a as STANDARD_AUDIT_EVENTS, S as SessionEventBridge, b as SessionEventBridgeOptions, c as SessionSamplingOptions, T as ToolProgressSamplingOptions, d as createSessionEventBridge, r as resolveAuditLevel, e as resolveSessionLoggingConfig } from './session-event-bridge-D-araDEz.js';
 export { a as DirectorStateCheckpoint, D as DirectorStateSnapshot, b as DirectorSubagentState, c as DirectorTaskState, l as loadDirectorState } from './director-state-BfeCUbmk.js';
-export { A as AutoApprovePermissionPolicy, D as DefaultPermissionPolicy, P as PermissionPolicyOptions } from './permission-policy-CkjSXabK.js';
-export { A as AutoCompactionMiddleware, a as AutonomousRunner, b as AutonomousRunnerOptions, c as AutonomyPromptContributorOptions, C as CompactorStrategy, D as DefaultSkillLoader, d as DoneCheckResult, e as DoneConditionChecker, I as IntelligentCompactor, f as IntelligentCompactorOptions, S as SelectiveCompactor, g as SelectiveCompactorOptions, h as SkillLoaderOptions, i as StrategyCompactorOptions, j as buildGoalPreamble, k as createStrategyCompactor, m as makeAutonomyPromptContributor } from './goal-preamble-DvHDSKSe.js';
+export { A as AutoApprovePermissionPolicy, D as DefaultPermissionPolicy, P as PermissionPolicyOptions } from './permission-policy-DlR9eJAM.js';
+export { A as AutoCompactionMiddleware, a as AutonomousRunner, b as AutonomousRunnerOptions, c as AutonomyPromptContributorOptions, C as CompactorStrategy, D as DefaultSkillLoader, d as DoneCheckResult, e as DoneConditionChecker, I as IntelligentCompactor, f as IntelligentCompactorOptions, S as SelectiveCompactor, g as SelectiveCompactorOptions, h as SkillLoaderOptions, i as StrategyCompactorOptions, j as buildGoalPreamble, k as createStrategyCompactor, m as makeAutonomyPromptContributor } from './goal-preamble-SulMTowG.js';
 export { DefaultProviderRunner } from './defaults/index.js';
-export { A as ACP_AGENTS, a as AGENTS_BY_PHASE, b as AGENT_CATALOG, c as ALL_AGENT_DEFINITIONS, d as ALL_FLEET_AGENTS, e as AUDIT_LOG_AGENT, f as AutoExtendCeiling, g as AutoExtendPolicy, B as BUG_HUNTER_AGENT, h as BugFinding, C as CollabBudgetConfig, i as CollabBudgetOverrides, j as CollabBudgetWarningPayload, k as CollabDebugReport, l as CollabSession, m as CollabSessionOptions, n as CreateDelegateToolOptions, o as CriticConcern, p as CriticEvaluation, D as DEFAULT_DIRECTOR_PREAMBLE, q as DEFAULT_SUBAGENT_BASELINE, r as DelegateHost, s as Director, t as DirectorAlert, u as DirectorAlertLevel, v as DirectorCancelCollabPayload, w as DirectorPromptParts, x as DirectorSessionFactory, y as DirectorSessionFactoryOptions, F as FLEET_ROSTER, z as FLEET_ROSTER_BUDGETS, E as FLEET_ROSTER_WITHACP, G as FleetCostCapError, H as FleetManager, I as FleetManagerOptions, J as FleetRosterBudget, K as FleetSpawnBudgetError, L as ICoordinator, M as IFleetManager, N as LargeAnswerStore, O as NULL_FLEET_BUS, R as REFACTOR_PLANNER_AGENT, P as RefactorPhase, Q as RefactorPlan, S as SECURITY_SCANNER_AGENT, T as SharedFileEntry, U as SharedFileSnapshot, V as SubagentPromptParts, W as applyRosterBudget, X as attachAutoExtend, Y as composeDirectorPrompt, Z as composeSubagentPrompt, _ as createDelegateTool, $ as getAgentDefinition, a0 as makeAskResultTool, a1 as makeAskTool, a2 as makeAssignTool, a3 as makeAwaitTasksTool, a4 as makeCollabDebugTool, a5 as makeDirectorSessionFactory, a6 as makeFleetEmitTool, a7 as makeFleetHealthTool, a8 as makeFleetSessionTool, a9 as makeFleetStatusTool, aa as makeFleetUsageTool, ab as makeRollUpTool, ac as makeSpawnTool, ad as makeTerminateTool, ae as makeWorkCompleteTool, af as rosterSummaryFromConfigs } from './null-fleet-bus-CG9QY2aP.js';
-export { T as AGENT_TOOL_PRESETS, c as AgentBudgetTier, d as AgentCapability, b as AgentDefinition, A as AgentPhase, e as DEFAULT_DISPATCH_ROLE, a as DefaultMultiAgentCoordinator, f as DispatchCandidate, D as DispatchClassifier, g as DispatchMethod, h as DispatchOptions, i as DispatchResult, H as HEAVY_BUDGET, L as LIGHT_BUDGET, M as MEDIUM_BUDGET, j as MultiAgentCoordinatorOptions, k as dispatchAgent, m as makeLLMClassifier, s as scoreAgents } from './multi-agent-coordinator-DyCkCZnU.js';
-export { D as DefaultModeStore, L as LLMSelector, a as LLMSelectorOptions, M as ModeLoaderOptions, l as loadProjectModes, b as loadUserModes } from './llm-selector-C0tfTCUe.js';
+export { A as ACP_AGENTS, a as AGENTS_BY_PHASE, b as AGENT_CATALOG, c as ALL_AGENT_DEFINITIONS, d as ALL_FLEET_AGENTS, e as AUDIT_LOG_AGENT, f as AutoExtendCeiling, g as AutoExtendPolicy, B as BUG_HUNTER_AGENT, h as BugFinding, C as CollabBudgetConfig, i as CollabBudgetOverrides, j as CollabBudgetWarningPayload, k as CollabDebugReport, l as CollabSession, m as CollabSessionOptions, n as CreateDelegateToolOptions, o as CriticConcern, p as CriticEvaluation, D as DEFAULT_DIRECTOR_PREAMBLE, q as DEFAULT_SUBAGENT_BASELINE, r as DelegateHost, s as Director, t as DirectorAlert, u as DirectorAlertLevel, v as DirectorCancelCollabPayload, w as DirectorPromptParts, x as DirectorSessionFactory, y as DirectorSessionFactoryOptions, F as FLEET_ROSTER, z as FLEET_ROSTER_BUDGETS, E as FLEET_ROSTER_WITHACP, G as FleetCostCapError, H as FleetManager, I as FleetManagerOptions, J as FleetRosterBudget, K as FleetSpawnBudgetError, L as ICoordinator, M as IFleetManager, N as LargeAnswerStore, O as NULL_FLEET_BUS, R as REFACTOR_PLANNER_AGENT, P as RefactorPhase, Q as RefactorPlan, S as SECURITY_SCANNER_AGENT, T as SharedFileEntry, U as SharedFileSnapshot, V as SubagentPromptParts, W as applyRosterBudget, X as attachAutoExtend, Y as composeDirectorPrompt, Z as composeSubagentPrompt, _ as createDelegateTool, $ as getAgentDefinition, a0 as makeAskResultTool, a1 as makeAskTool, a2 as makeAssignTool, a3 as makeAwaitTasksTool, a4 as makeCollabDebugTool, a5 as makeDirectorSessionFactory, a6 as makeFleetEmitTool, a7 as makeFleetHealthTool, a8 as makeFleetSessionTool, a9 as makeFleetStatusTool, aa as makeFleetUsageTool, ab as makeRollUpTool, ac as makeSpawnTool, ad as makeTerminateTool, ae as makeWorkCompleteTool, af as rosterSummaryFromConfigs } from './null-fleet-bus-CnXa5oTH.js';
+export { T as AGENT_TOOL_PRESETS, c as AgentBudgetTier, d as AgentCapability, b as AgentDefinition, A as AgentPhase, e as DEFAULT_DISPATCH_ROLE, a as DefaultMultiAgentCoordinator, f as DispatchCandidate, D as DispatchClassifier, g as DispatchMethod, h as DispatchOptions, i as DispatchResult, H as HEAVY_BUDGET, L as LIGHT_BUDGET, M as MEDIUM_BUDGET, j as MultiAgentCoordinatorOptions, k as dispatchAgent, m as makeLLMClassifier, s as scoreAgents } from './multi-agent-coordinator-B8R43uPz.js';
+export { D as DefaultModeStore, L as LLMSelector, a as LLMSelectorOptions, M as ModeLoaderOptions, P as ProviderModelDescriptor, d as describeCatalogModel, l as loadProjectModes, b as loadUserModes, r as resolveProviderModelList } from './provider-model-resolve-BNRsNuJx.js';
 import { TaskStore } from './sdd/index.js';
 export { AISpecBuilder, AISpecBuilderOptions, AISpecPhase, AISpecSession, AutoExecutor, AutoExecutorOptions, BottleneckTask, CollectedAnswer, CriticalPathAnalysis, DefaultTaskStore, ExecutionSummary, GeneratedTask, SPEC_TEMPLATES, SddParallelRun, SddParallelRunOptions, SddProgress, SddTaskDecomposer, SddTaskDecomposerOptions, SpecDiff, SpecDrivenDev, SpecDrivenDevOptions, SpecIndexEntry, SpecParser, SpecStore, SpecStoreOptions, SpecVersion, SpecVersioning, TaskBatch, TaskExecutionContext, TaskExecutionResult, TaskFlow, TaskFlowEventMap, TaskFlowEventName, TaskFlowExecutionContext, TaskFlowOptions, TaskFlowPhase, TaskGenerator, TaskGeneratorOptions, TaskGraphIndexEntry, TaskGraphStore, TaskGraphStoreOptions, TaskTracker, TaskTrackerOptions, TaskTransition, WaveResult, analyzeCriticalPath, createAutoExecutor, getTemplate, listTemplates, renderProgress, renderSpecAnalysis, renderTaskGraph, renderTaskList, templateToMarkdown } from './sdd/index.js';
 export { DefaultHealthRegistry, InMemoryMetricsSink, MetricsServerHandle, MetricsServerOptions, NoopMetricsSink, NoopTracer, OTelTracer, OtlpMetricsExporterHandle, OtlpMetricsExporterOptions, OtlpTraceExporterHandle, OtlpTraceExporterOptions, PROMETHEUS_CONTENT_TYPE, buildOtlpMetricsRequest, buildOtlpTracesRequest, renderPrometheus, startMetricsServer, startOtlpMetricsExporter, startOtlpTraceExporter, wireMetricsToEvents } from './observability/index.js';
-export { C as ContextManagerAction, a as ContextManagerInput, b as ContextManagerResult, c as ContextManagerToolOptions, d as allServers, e as awsServer, f as blockServer, g as braveSearchServer, h as context7Server, i as contextManagerTool, j as createContextManagerTool, k as everArtServer, l as filesystemServer, m as githubServer, n as googleMapsServer, o as miniMaxVisionServer, s as sentinelServer, q as slackServer, z as zaiVisionServer } from './mcp-servers-2x4w6Jn9.js';
+export { C as ContextManagerAction, a as ContextManagerInput, b as ContextManagerResult, c as ContextManagerToolOptions, d as allServers, e as awsServer, f as blockServer, g as braveSearchServer, h as context7Server, i as contextManagerTool, j as createContextManagerTool, k as everArtServer, l as filesystemServer, m as githubServer, n as googleMapsServer, o as miniMaxVisionServer, s as sentinelServer, q as slackServer, z as zaiVisionServer } from './mcp-servers-C2cBTxUR.js';
 export { DownloadResult, InstallResult, InstalledSkillEntry, ManifestData, ParsedRef, SkillInstaller, SkillInstallerOptions, SkillManifestStore, UpdateResult, downloadGitHubTarball, parseSkillRef } from './skills/index.js';
 import { ReplayLogStore, DefaultPromptStore } from './storage/index.js';
 export { ALL_SYNC_CATEGORIES, AgentEntry, AgentLiveStatus, AgentStatusTracker, AgentStatusTrackerOptions, Annotation, AnnotationsStore, AnnotationsStoreOptions, AuditEntry, CloudSync, ConsolidationOp, DefaultSessionRewinder, FleetNotifier, FleetNotifierOptions, GraphMemoryBackend, GraphMemoryBackendOptions, MemoryConsolidatorOptions, PromptEntry, PromptStore, RecoveryPlan, ReplayEntry, ReplayLogStoreOptions, SessionLiveStatus, SessionMemoryConsolidator, SessionRecovery, SessionRegistry, SessionRegistryEntry, SessionRewinderOptions, StaleSession, SyncResult, TaskFile, ToolAuditLog, ToolAuditLogOptions, VerifyResult, emptyTaskFile, getSessionRegistry, hasSessionRegistry, loadTasks, mutateTasks, saveTasks } from './storage/index.js';
-export { G as GoalFile, J as JournalEntry, M as MAX_JOURNAL_ENTRIES, a as MAX_PROGRESS_HISTORY, P as ProgressSnapshot, b as appendJournal, e as emptyGoal, f as formatGoal, g as goalFilePath, l as loadGoal, p as parseProgressFromText, r as recordProgress, s as saveGoal, c as setProgress, d as summarizeUsage } from './goal-store-DtLMySNb.js';
-import { R as RetryPolicy, E as ErrorHandler } from './retry-policy-CN0khdlj.js';
+export { G as GoalFile, J as JournalEntry, M as MAX_JOURNAL_ENTRIES, a as MAX_PROGRESS_HISTORY, P as ProgressSnapshot, b as appendJournal, e as emptyGoal, f as formatGoal, g as goalFilePath, l as loadGoal, p as parseProgressFromText, r as recordProgress, s as saveGoal, c as setProgress, d as summarizeUsage } from './goal-store-CABDwdFE.js';
+import { R as RetryPolicy, E as ErrorHandler } from './retry-policy-BilV1ujH.js';
 export { ApplyResult, ApprovalDecision, AutonomousBrain, AutonomousBrainOptions, AutonomousCoordinator, AutonomousCoordinatorOptions, AutonomousDecisionRequest, AutonomousDecisionType, BUILD_AGENTS, BrainInterventionInput, BrainMonitor, BrainMonitorOptions, ChangeFile, ChangeManager, ChangeManagerOptions, ChangeNode, ChangeProposal, ChangeStatus, ConsensusOptions, ConsensusProtocol, ConsensusResult, CoordinatorEvent, CoordinatorStats, DAGEdgeEvent, DAGEdgeHandler, DAGNode, DAGNodeStatus, DEFAULT_QUALITY_CHECKS, DELIVERY_AGENTS, DEPENDENCY_FILE_PATTERNS, DISCOVERY_AGENTS, DOMAIN_AGENTS, DecisionNode, DecisionPrompt, DefaultMailbox, DepWatchEntry, DepWatcherBridgeOptions, DependencyWatcherConfig, EscalationDecision, FactCategory, FactNode, GlobalMailbox, GoalNode, GoalPriority, GoalStatus, GraphSubscription, KNOWLEDGE_AGENTS, KnowledgeGraph, LLMProvider, META_AGENTS, MailToolsOptions, MailboxHooksOptions, MailboxResolver, MailboxToolOptions, NodeFilter, NodeType, OutdatedNotifyMessage, PLANNING_AGENTS, PackageAuthorEntry, PackageAuthorLog, PackageAuthorTrackerOptions, PackageOutdatedEntry, PackageOutdatedResult, PackageOutdatedWatcherOptions, PrioritizationDecision, QualityCheck, QualityGateChecks, QualityGateResult, QuorumRule, REVIEW_AGENTS, RollbackResult, RunnablesHandler, SpawnDecision, TaskAuctionOptions, TaskAuctioneer, TaskBid, TaskDAG, VERIFY_AGENTS, VoteNode, VoteRecord, VoteValue, VoterConfig, attachDepWatcherBridge, createMailboxHooks, detectEcosystem, detectEcosystem as detectPackageEcosystem, getFullPackageLog, getManifestPackages, getPackageAuthor, getPackagesByAgent, mailboxSessionTag, makeDependencyWatcherConfig, makeMailInboxTool, makeMailSendTool, makeMailboxTool, recordPackageAction, resolveMailboxIdentity, resolveProjectDir, startPackageOutdatedWatcher, updatePackageOutdatedStatus } from './coordination/index.js';
 import { MCPRegistryHandle } from './tools/index.js';
 export { createMcpControlTool } from './tools/index.js';
 import { L as Logger } from './logger-B63L5bTg.js';
 export { a as LogLevel } from './logger-B63L5bTg.js';
 export { R as RotatableSecretVault, S as SecretVault, e as encryptedPrefixForVersion, n as noOpVault, p as parseEncryptedVersion } from './secret-vault-BAKpgFw_.js';
+export { D as DANGEROUS_FOR_SUBAGENTS, T as ToolCapabilities, a as ToolCapability, W as WIDE_SUBAGENT_CAPABILITIES, g as getDangerousCapabilities, h as hasCapability, b as hasDangerousCapabilityForSubagents } from './index-IEuxQd-E.js';
 export { ConversationTurn, ENHANCER_SYSTEM_PROMPT, EnhanceResult, EnhanceUserPromptOptions, enhanceUserPrompt, normalizedEqual, recentTextTurns, shouldEnhance } from './execution/prompt-enhancer.js';
 export { AutonomyBrainOptions, BrainAutoRisk, TieredBrainArbiterOptions, createAutonomyBrain, createTieredBrainArbiter, formatDecisionSummary } from './execution/index.js';
 import './path-resolver-CPRj4bFY.js';
 import 'node:https';
 import 'undici';
-import './selector-CzHh_igB.js';
+import './selector-Bc7eWtT3.js';
 import 'node:events';
 
 /**
@@ -474,7 +475,7 @@ interface EliseResult {
     changed: boolean;
 }
 /**
- * Elide oversized tool_results that fall before the preserve window. Pure:
+ * Elide oversized tool I/O that falls before the preserve window. Pure:
  * returns a fresh array (or the same reference when unchanged). Replaces the
  * duplicate copies that lived in all three compactors.
  */
@@ -850,7 +851,7 @@ declare class InputBuilder {
     private shouldCollapse;
 }
 
-declare const LAYER_1_IDENTITY = "You are WrongStack, a command-line AI coding agent.\n\nYou operate inside the user's terminal with direct read and write access to their working directory, the ability to run shell commands, and access to the web. You assist a developer who knows what they're doing \u2014 your job is to accelerate them, not to second-guess them.\n\nThese are your baseline instructions. When an active mode prompt (Teach, Brief, Code Reviewer, etc.) is present in your context, its instructions **override** conflicting defaults below \u2014 the mode layer always wins on conflict.\n\n## Core principles\n\n1. **Read before you write.** Always inspect the relevant files before proposing changes. Assumptions about code you haven't read are bugs in waiting.\n2. **Prefer surgical edits over rewrites.** When modifying existing files, use the edit tool with str_replace; only use write for new files or full replacements explicitly requested.\n3. **Show your work.** Before non-trivial changes, briefly state what you're about to do \u2014 one sentence, not a wall of text. After tool calls, summarize what happened, not what you did mechanically.\n4. **Be honest about limits.** If you don't know, say so. If something failed, say what failed and what you'll try next. Never fabricate file contents, API responses, or test results.\n5. **Be concise.** The user is a developer in a terminal. No marketing language, no \"great question!\", no bullet-point lists when prose works. If a one-liner answers, a one-liner is the answer. (Active modes may override verbosity \u2014 follow the mode's guidance on depth.)\n6. **Ask when blocked, proceed when not.** If the task is ambiguous in a way that meaningfully changes the approach, ask. If it's ambiguous in a way that doesn't, pick a reasonable default and proceed, stating the assumption.\n7. **Trust the tools.** If a permission prompt is shown, the user will answer. Do not preemptively explain that you \"would like to\" do something \u2014 call the tool, let the permission flow decide.\n8. **Format for scanability.** Use code blocks for code, backticks for file paths, bold for key terms. One-liners stay one line. Paragraphs max 3 sentences.\n9. **Match the user's language.** Respond in the same language the user writes in. If they write in Turkish, reply in Turkish. If they mix languages, follow the dominant one.\n10. **Recover explicitly.** When a tool fails, distinguish the failure type and respond accordingly:\n\n| Failure type | Examples | Strategy |\n|---|---|---|\n| **Transient** | Timeout, rate limit, network hiccup | Retry once with adjusted params, then report |\n| **Permanent** | Syntax error, missing file, type error, permission denied | Do NOT retry \u2014 diagnose and report the root cause |\n| **Validation** | Invalid argument, out-of-range value, schema mismatch | State what was rejected and what range/format is accepted |\n\nNever silently skip a failure \u2014 always report it, even when you choose not to retry.\n\n## Decision heuristics\n\n- **Task is ambiguous** (unclear which file, conflicting requirements) \u2192 ask before proceeding\n- **Task is clear, approach is unknown** \u2192 try one approach, report what happened\n- **Tool fails** \u2192 classify the failure (transient/permanent/validation), then apply the appropriate recovery\n- **Permission prompt shown** \u2192 wait for user, do not act unilaterally\n- **Tool denied by user** \u2192 do NOT retry the same tool in the next iteration. If the user denies a write, bash, or any tool, respect that decision. The user's \"no\" is final \u2014 acknowledge it and ask if they'd like to clarify what they actually want.\n- **Context window filling up** \u2192 use context_manager proactively; don't wait to be told\n\n## How you work\n\n- **Stay focused.** When fixing a bug, fix only the bug \u2014 don't refactor neighboring code unless the user asks.\n- **Comment with purpose.** Add comments only when they explain why, not what. The code already says what.\n- **Own your output.** Never call work \"production-ready\" or \"fully tested\" \u2014 the user makes that call.\n- **Move on from mistakes.** When something fails, report what happened and what you'll do next. No apologies, no hand-wringing.\n- **Respect denied tools.** If the user denies a tool call (via permission prompt), do not retry that same operation in the next iteration. The user's \"no\" means \"find another way or ask\". Never re-attempt a denied tool unless the user explicitly asks you to try again.\n- **When denied, ask.** If the user refuses a tool call, do not attempt to work around it, do not suggest alternatives unprompted, and do not retry. Acknowledge the denial and explicitly ask: \"What would you like me to do instead?\"\n- **Stay in your lane.** Don't lecture about software engineering principles unless explicitly asked \u2014 the user is the expert on their codebase.\n\n## After-task suggestions\n\n**You are the leader agent.** After completing a significant task, you MAY end your\nresponse with 2\u20134 suggested next prompt options in a `<next_steps>` block.\nThe `/next 1`, `/next 2`, `/next 1 2 3` shortcuts let the user select one\nand continue in a new agent session.\n\nFormat:\n\n```\n<next_steps>\n1. Prompt option 1 \u2014 a concrete next action phrased as what to type\n2. Prompt option 2\n3. Prompt option 3 (optional)\n</next_steps>\n```\n\nRules:\n- Each item is a **prompt the user can type** \u2014 not an instruction to a human.\n  Write \"pnpm test\" not \"Run the test suite.\"\n- Human-only actions (e.g., \"open DevTools\") go outside the tag as plain text,\n  not inside `<next_steps>`.\n- Items marked `auto=\"true\"` must include the exact input content for copy-paste.\n- Order by priority. Keep each suggestion to one line.\n- Skip during multi-step operations \u2014 only show after completion.\n- If nothing is pending, omit the tag entirely.\n\n**After a significant task**, also post a status update to the inter-agent\nmailbox so other agents in the fleet can discover what you finished and\nroute follow-on work. Use:\n`mailbox action=send to=* type=status subject=\"<one-line task summary>\" body=\"<brief outcome>\"`\n\nThe user can execute via `/next 1`, view via `/next list`, or generate\nfresh suggestions via `/suggest`.";
+declare const LAYER_1_IDENTITY = "You are WrongStack, a command-line AI coding agent.\n\nYou operate inside the user's terminal with direct read and write access to their working directory, the ability to run shell commands, and access to the web. You assist a developer who knows what they're doing \u2014 your job is to accelerate them, not to second-guess them.\n\nThese are your baseline instructions. When an active mode prompt (Teach, Brief, Code Reviewer, etc.) is present in your context, its instructions **override** conflicting defaults below \u2014 the mode layer always wins on conflict.\n\n## Core principles\n\n1. **Read before you write.** Always inspect the relevant files before proposing changes. Assumptions about code you haven't read are bugs in waiting.\n2. **Prefer surgical edits over rewrites.** When modifying existing files, use the edit tool with str_replace; only use write for new files or full replacements explicitly requested.\n3. **Show your work.** Before non-trivial changes, briefly state what you're about to do \u2014 one sentence, not a wall of text. After tool calls, summarize what happened, not what you did mechanically.\n4. **Be honest about limits.** If you don't know, say so. If something failed, say what failed and what you'll try next. Never fabricate file contents, API responses, or test results.\n5. **Be concise.** The user is a developer in a terminal. No marketing language, no \"great question!\", no bullet-point lists when prose works. If a one-liner answers, a one-liner is the answer. (Active modes may override verbosity \u2014 follow the mode's guidance on depth.)\n6. **Ask when blocked, proceed when not.** If the task is ambiguous in a way that meaningfully changes the approach, ask. If it's ambiguous in a way that doesn't, pick a reasonable default and proceed, stating the assumption.\n7. **Trust the tools.** If a permission prompt is shown, the user will answer. Do not preemptively explain that you \"would like to\" do something \u2014 call the tool, let the permission flow decide.\n8. **Format for scanability.** Use code blocks for code, backticks for file paths, bold for key terms. One-liners stay one line. Paragraphs max 3 sentences.\n9. **Match the user's language.** Respond in the same language the user writes in. If they write in Turkish, reply in Turkish. If they mix languages, follow the dominant one.\n10. **Recover explicitly.** When a tool fails, distinguish the failure type and respond accordingly:\n\n| Failure type | Examples | Strategy |\n|---|---|---|\n| **Transient** | Timeout, rate limit, network hiccup | Retry once with adjusted params, then report |\n| **Permanent** | Syntax error, missing file, type error, permission denied | Do NOT retry \u2014 diagnose and report the root cause |\n| **Validation** | Invalid argument, out-of-range value, schema mismatch | State what was rejected and what range/format is accepted |\n\nNever silently skip a failure \u2014 always report it, even when you choose not to retry.\n\n**Empty results are not failures.** When a tool returns an empty result (no lines, no matches, no output), this means the operation completed successfully but found nothing. Do NOT retry the same call with the same parameters \u2014 interpret the empty result and adjust your approach. For example, an empty file read at a given offset means you've reached the end of the file; an empty grep means no matches exist.\n\n## Decision heuristics\n\n- **Task is ambiguous** (unclear which file, conflicting requirements) \u2192 ask before proceeding\n- **Task is clear, approach is unknown** \u2192 try one approach, report what happened\n- **Tool fails** \u2192 classify the failure (transient/permanent/validation), then apply the appropriate recovery\n- **Permission prompt shown** \u2192 wait for user, do not act unilaterally\n- **Tool denied by user** \u2192 do NOT retry the same tool in the next iteration. If the user denies a write, bash, or any tool, respect that decision. The user's \"no\" is final \u2014 acknowledge it and ask if they'd like to clarify what they actually want.\n- **Context window filling up** \u2192 use context_manager proactively; don't wait to be told\n\n## How you work\n\n- **Stay focused.** When fixing a bug, fix only the bug \u2014 don't refactor neighboring code unless the user asks.\n- **Comment with purpose.** Add comments only when they explain why, not what. The code already says what.\n- **Own your output.** Never call work \"production-ready\" or \"fully tested\" \u2014 the user makes that call.\n- **Move on from mistakes.** When something fails, report what happened and what you'll do next. No apologies, no hand-wringing.\n- **Respect denied tools.** If the user denies a tool call (via permission prompt), do not retry that same operation in the next iteration. The user's \"no\" means \"find another way or ask\". Never re-attempt a denied tool unless the user explicitly asks you to try again.\n- **When denied, ask.** If the user refuses a tool call, do not attempt to work around it, do not suggest alternatives unprompted, and do not retry. Acknowledge the denial and explicitly ask: \"What would you like me to do instead?\"\n- **Stay in your lane.** Don't lecture about software engineering principles unless explicitly asked \u2014 the user is the expert on their codebase.\n\n## After-task suggestions\n\n**You are the leader agent.** After completing a significant task, you MAY end your\nresponse with 2\u20134 suggested next prompt options in a `<next_steps>` block.\nThe `/next 1`, `/next 2`, `/next 1 2 3` shortcuts let the user select one\nand continue in a new agent session.\n\nFormat:\n\n```\n<next_steps>\n1. Prompt option 1 \u2014 a concrete next action phrased as what to type\n2. Prompt option 2\n3. Prompt option 3 (optional)\n</next_steps>\n```\n\nRules:\n- Each item is a **prompt the user can type** \u2014 not an instruction to a human.\n  Write \"pnpm test\" not \"Run the test suite.\"\n- Human-only actions (e.g., \"open DevTools\") go outside the tag as plain text,\n  not inside `<next_steps>`.\n- Items marked `auto=\"true\"` must include the exact input content for copy-paste.\n- Order by priority. Keep each suggestion to one line.\n- Skip during multi-step operations \u2014 only show after completion.\n- If nothing is pending, omit the tag entirely.\n\n**After a significant task**, also post a status update to the inter-agent\nmailbox so other agents in the fleet can discover what you finished and\nroute follow-on work. Use:\n`mailbox action=send to=* type=status subject=\"<one-line task summary>\" body=\"<brief outcome>\"`\n\nThe user can execute via `/next 1`, view via `/next list`, or generate\nfresh suggestions via `/suggest`.";
 interface DefaultSystemPromptBuilderOptions {
     memoryStore?: MemoryStore | undefined;
     skillLoader?: SkillLoader | undefined;
@@ -2210,6 +2211,78 @@ declare function compactLog(opts: Pick<FileAuthorTrackerOptions, 'storageDir' |
     kept: number;
 }>;
 
+/**
+ * commit-safety — detect when a commit would sweep up work that this session
+ * did NOT author.
+ *
+ * When several coding agents (or a separate wrongstack process, or a human)
+ * edit the same worktree at once, a blanket `git add .` / commit-all captures
+ * everyone's uncommitted changes — including half-finished work from another
+ * agent. There is no way to un-bake that once it lands in a shared commit.
+ *
+ * This module reads the working tree and cross-references it against the
+ * per-project {@link file-author-tracker} log (which records the sessionId that
+ * created/edited each file). Dirty files whose latest author is a DIFFERENT
+ * session are flagged as "foreign"; dirty files with no recorded author are
+ * "unverified" (a concurrent non-wrongstack agent, a build/format step, or a
+ * human). The result is a plain-text warning callers render before committing.
+ *
+ * Warn-only by design: this never blocks or rewrites what gets committed — it
+ * surfaces the risk so the agent (or user) can scope the commit to its own
+ * files or coordinate first.
+ *
+ * @module commit-safety
+ */
+interface CommitSafetyOptions {
+    /** Directory to run git in (the agent's cwd is fine). */
+    cwd: string;
+    /** Project root, used to locate the file-author log. */
+    projectRoot: string;
+    /**
+     * The current session's id — the "self" key. Dirty files authored by a
+     * different sessionId are flagged as foreign. When omitted, every authored
+     * file counts as foreign (we cannot prove ownership).
+     */
+    sessionId?: string | undefined;
+    /**
+     * Directory holding the file-author log. Defaults to the resolved per-project
+     * dir (`~/.wrongstack/projects/<slug>`). Mainly an injection seam for tests.
+     */
+    storageDir?: string | undefined;
+    /** Abort signal for the git subprocesses. */
+    signal?: AbortSignal | undefined;
+}
+interface ForeignFile {
+    /** Repo-relative path. */
+    path: string;
+    /** Human-readable name of the agent that last authored it, if known. */
+    agentName?: string | undefined;
+    /** Session that last authored it, if known. */
+    sessionId?: string | undefined;
+}
+interface CommitSafetyReport {
+    /** Total uncommitted (staged + unstaged + untracked) paths. */
+    dirtyCount: number;
+    /** Dirty files whose latest recorded author is a DIFFERENT session. */
+    foreignFiles: ForeignFile[];
+    /** Dirty files with no recorded author for any session. */
+    unverifiedFiles: string[];
+    /** Branch names of OTHER active worktrees of this repo (excludes ours). */
+    otherWorktrees: string[];
+    /**
+     * Pre-formatted, plain-text (no ANSI) multi-line warning, or '' when there
+     * is nothing notable to surface. Callers may colorize/wrap as they see fit.
+     */
+    warning: string;
+}
+/**
+ * Assess whether committing now risks capturing another agent's work.
+ *
+ * Best-effort: any git failure (not a repo, git missing, timeout) yields an
+ * empty report rather than throwing — commit-safety must never break a commit.
+ */
+declare function assessCommitSafety(opts: CommitSafetyOptions): Promise<CommitSafetyReport>;
+
 /**
  * techstack-mailbox-consumer — Auto-spawns the tech-stack agent when
  * dep-watcher messages land in the mailbox.
@@ -2529,4 +2602,4 @@ interface ChimeraReviewNeededPayload {
 declare const CHIMERA_REVIEW_PROMPT = "You are Chimera, a post-session code quality agent. You review files that\nwere ADDED or MODIFIED during an AI coding session and produce a concise,\nactionable report.\n\nRULES\n1. Only review the files provided \u2014 do not expand scope.\n2. Use read/grep/lint tools to inspect files before flagging issues.\n3. Be surgical \u2014 flag real bugs, not style preferences.\n4. Severity-ranked: Critical > High > Medium > Low. Only report Medium+.\n5. One finding per line with severity, file:line, and a one-sentence fix.\n\nWHAT TO LOOK FOR\n- Logic bugs: off-by-one, inverted condition, null deref without guard\n- Type safety: `as any`, missing return type on export, `!` assertion\n- Error handling: missing try/catch on async, swallowed errors\n- Security: hardcoded secret, shell injection, innerHTML XSS\n- Resource leaks: event listener not removed, file handle not closed\n- Test gaps: new logic without corresponding test\n- API design: wrong status code, missing validation, secrets in URL\n\nREPORT FORMAT\n## \uD83E\uDD82 Chimera Review\n\n### Critical (N)\n1. [BUG] `path/file.ts:42` \u2014 description\n   \u2192 fix suggestion\n\n### High (N)\n...\n\n### Medium (N)\n...\n\n### Summary\n- Files reviewed: N\n- Findings: C critical, H high, M medium\n- Clean files: N\n\nIf NOTHING worth flagging:\n## \uD83E\uDD82 Chimera Review \u2014 all clear \u2705\nNo issues found in N changed files.";
 declare function createChimeraPlugin(): Plugin;
 
-export { AddAttachmentInput, AgentPipelines, AttachmentRef, AttachmentStore, type AutoPhaseOptions, type AutoPhasePlanResult, AutoPhasePlanner, type AutoPhasePlannerOptions, AutoPhaseRunner, type AutoPhaseRunnerOptions, type BootConfigOptions, type BootConfigResult, BrainArbiter, BuildContext, CHIMERA_REVIEW_PROMPT, type Checkpoint, CheckpointManager, type CheckpointManagerOptions, type ChimeraReviewNeededPayload, type CollabBusState, type InjectedToolResult as CollabInjectedToolResult, type CollabPauseMiddlewareOptions, CollaborationBus, Config, ConfigStore, Container, ContentBlock, type ContentScore, Context, type ContinueDirective, DefaultLogger, DefaultPathResolver, DefaultPluginAPI, DefaultPromptStore, DefaultSecretVault, DefaultSystemPromptBuilder, type DefaultSystemPromptBuilderOptions, type DetectedDependency, type DetectionResult, type EliseResult, EventBus, EventName, ExtensionRegistry, type FileAuthorEntry, type FileAuthorLog, type FileAuthorTrackerOptions, type Finding, type FullScanResult, type GeneratedSecuritySkill, type GeneratedSkill, type GeneratedSkillContent, GitignoreUpdater, HealthRegistry, HookEvent, HookInput, HookMatcher, HookOutcome, HookRegistry, InProcessHook, InputBuilder, type InputBuilderEvent, type InputBuilderOptions, JSONSchema, KERNEL_API_VERSION, LAYER_1_IDENTITY, Listener, type LoadPluginsOptions, Logger, MATRIX_PHASE_KEYS, MCPRegistryHandle, MCPRegistryView, Mailbox, type MailboxLoopOptions, MailboxMessage, type MatrixKeyKind, MemoryStore, Message, MetricsSink, MetricsSinkView, ModeStore, ModelCapabilities, ModelMatrixEntry, type PackageManager, PermissionPolicy, type PhaseEventMap, type PhaseEventName, type PhaseExecutionContext, type PhaseFilter, type PhaseGraph, PhaseGraphBuilder, type PhaseGraphBuilderOptions, type PhaseNode, PhaseOrchestrator, type PhaseOrchestratorOptions, type PhaseProgress, type PhaseSort, type PhaseStatus, PhaseStore, type PhaseStoreOptions, type PhaseTemplate, Plugin, PluginAPI, type PluginAPIInit, PluginCapabilities, PluginDependency, PluginPipelines, Provider, ProviderRegistry, ProviderRegistryView, ProviderRunner, Renderer, ReplayLogStore, type ReplayMode, ReplayProviderRunner, type ReplayProviderRunnerOptions, ReportGenerator, type ReportOptions, Request, type ResolvedChimeraConfig, Response, RunProviderOptions$1 as RunProviderOptions, type ScanOptions, type ScanResult, type ScanScope, type SecurityPattern, SecurityScanner, type SecurityScannerContext, type SecurityScannerOptions, SecurityScannerOrchestrator, SessionWriterView, type SeverityLevel, type ShellHookSpec, type SkillGenerationContext, SkillGenerator, type SkillGeneratorOptions, SkillLoader, SlashCommand, SlashCommandRegistry, SlashCommandRegistryView, SystemPromptBuilder, SystemPromptContributor, TaskGraph, TaskNode, TaskPriority, TaskStore, TaskType, type TechStack, type TechStackConsumerOptions, TechStackDetector, type TechStackInfo, TextBlock, TokenSavingTier, Tool, ToolCallPipelinePayload, ToolRegistry, ToolRegistryView, Tracer, WorktreeManager, WstackPaths, attachMailboxChecker, bootConfig, buildBtwBlock, buildLosslessDigest, buildMailboxBlock, buildQueuedMessagesBlock, buildSmartDigest, collabInjectMiddleware, collabPauseMiddleware, compactLog, consumeBtwNotes, consumeQueuedMessagesUpdate, createAutoPhaseFromTaskGraph, createChimeraPlugin, createGitPlugin, createMailboxChecker, createMcpUseTool, createObservabilityPlugin, createPlanPlugin, createPromptsPlugin, createSecurityPlugin, createSecuritySlashCommand, createSkillsPlugin, createSyncPlugin, defaultGitignoreUpdater, defaultOrchestrator, defaultReportGenerator, defaultSecurityScanner, defaultSkillGenerator, defaultTechStackDetector, definePlugin, eliseOldToolResults, estimateMessageTokens, estimateMessages, extractText, findPreserveStart, flagsToConfigPatch, getFileHistory, getFilesByAgent, getFullLog, getLastAuthor, hasTextContent, hashRequest, injectPendingMailboxMessages, isValidMatrixKey, loadPlugins, makeContinueToNextIterationTool, matrixKeyKind, parseContinueDirective, peekQueuedMessages, pendingBtwCount, phaseForRole, recordFileAction, resolveChimeraConfig, resolveModelMatrix, runProviderWithRetry, runShellHook, scoreMessage, securitySlashCommand, setBtwNote, setQueuedMessagesSnapshot, stableStringify, startTechStackConsumer, unloadPlugins };
+export { AddAttachmentInput, AgentPipelines, AttachmentRef, AttachmentStore, type AutoPhaseOptions, type AutoPhasePlanResult, AutoPhasePlanner, type AutoPhasePlannerOptions, AutoPhaseRunner, type AutoPhaseRunnerOptions, type BootConfigOptions, type BootConfigResult, BrainArbiter, BuildContext, CHIMERA_REVIEW_PROMPT, type Checkpoint, CheckpointManager, type CheckpointManagerOptions, type ChimeraReviewNeededPayload, type CollabBusState, type InjectedToolResult as CollabInjectedToolResult, type CollabPauseMiddlewareOptions, CollaborationBus, type CommitSafetyOptions, type CommitSafetyReport, Config, ConfigStore, Container, ContentBlock, type ContentScore, Context, type ContinueDirective, DefaultLogger, DefaultPathResolver, DefaultPluginAPI, DefaultPromptStore, DefaultSecretVault, DefaultSystemPromptBuilder, type DefaultSystemPromptBuilderOptions, type DetectedDependency, type DetectionResult, type EliseResult, EventBus, EventName, ExtensionRegistry, type FileAuthorEntry, type FileAuthorLog, type FileAuthorTrackerOptions, type Finding, type ForeignFile, type FullScanResult, type GeneratedSecuritySkill, type GeneratedSkill, type GeneratedSkillContent, GitignoreUpdater, HealthRegistry, HookEvent, HookInput, HookMatcher, HookOutcome, HookRegistry, InProcessHook, InputBuilder, type InputBuilderEvent, type InputBuilderOptions, JSONSchema, KERNEL_API_VERSION, LAYER_1_IDENTITY, Listener, type LoadPluginsOptions, Logger, MATRIX_PHASE_KEYS, MCPRegistryHandle, MCPRegistryView, Mailbox, type MailboxLoopOptions, MailboxMessage, type MatrixKeyKind, MemoryStore, Message, MetricsSink, MetricsSinkView, ModeStore, ModelCapabilities, ModelMatrixEntry, type PackageManager, PermissionPolicy, type PhaseEventMap, type PhaseEventName, type PhaseExecutionContext, type PhaseFilter, type PhaseGraph, PhaseGraphBuilder, type PhaseGraphBuilderOptions, type PhaseNode, PhaseOrchestrator, type PhaseOrchestratorOptions, type PhaseProgress, type PhaseSort, type PhaseStatus, PhaseStore, type PhaseStoreOptions, type PhaseTemplate, Plugin, PluginAPI, type PluginAPIInit, PluginCapabilities, PluginDependency, PluginPipelines, Provider, ProviderRegistry, ProviderRegistryView, ProviderRunner, Renderer, ReplayLogStore, type ReplayMode, ReplayProviderRunner, type ReplayProviderRunnerOptions, ReportGenerator, type ReportOptions, Request, type ResolvedChimeraConfig, Response, RunProviderOptions$1 as RunProviderOptions, type ScanOptions, type ScanResult, type ScanScope, type SecurityPattern, SecurityScanner, type SecurityScannerContext, type SecurityScannerOptions, SecurityScannerOrchestrator, SessionWriterView, type SeverityLevel, type ShellHookSpec, type SkillGenerationContext, SkillGenerator, type SkillGeneratorOptions, SkillLoader, SlashCommand, SlashCommandRegistry, SlashCommandRegistryView, SystemPromptBuilder, SystemPromptContributor, TaskGraph, TaskNode, TaskPriority, TaskStore, TaskType, type TechStack, type TechStackConsumerOptions, TechStackDetector, type TechStackInfo, TextBlock, TokenSavingTier, Tool, ToolCallPipelinePayload, ToolRegistry, ToolRegistryView, Tracer, WorktreeManager, WstackPaths, assessCommitSafety, attachMailboxChecker, bootConfig, buildBtwBlock, buildLosslessDigest, buildMailboxBlock, buildQueuedMessagesBlock, buildSmartDigest, collabInjectMiddleware, collabPauseMiddleware, compactLog, consumeBtwNotes, consumeQueuedMessagesUpdate, createAutoPhaseFromTaskGraph, createChimeraPlugin, createGitPlugin, createMailboxChecker, createMcpUseTool, createObservabilityPlugin, createPlanPlugin, createPromptsPlugin, createSecurityPlugin, createSecuritySlashCommand, createSkillsPlugin, createSyncPlugin, defaultGitignoreUpdater, defaultOrchestrator, defaultReportGenerator, defaultSecurityScanner, defaultSkillGenerator, defaultTechStackDetector, definePlugin, eliseOldToolResults, estimateMessageTokens, estimateMessages, extractText, findPreserveStart, flagsToConfigPatch, getFileHistory, getFilesByAgent, getFullLog, getLastAuthor, hasTextContent, hashRequest, injectPendingMailboxMessages, isValidMatrixKey, loadPlugins, makeContinueToNextIterationTool, matrixKeyKind, parseContinueDirective, peekQueuedMessages, pendingBtwCount, phaseForRole, recordFileAction, resolveChimeraConfig, resolveModelMatrix, runProviderWithRetry, runShellHook, scoreMessage, securitySlashCommand, setBtwNote, setQueuedMessagesSnapshot, stableStringify, startTechStackConsumer, unloadPlugins };