@wrongstack/core 0.265.1 → 0.268.0

package/dist/{models-registry-DmJlKuNp.d.ts → models-registry-Bvcl3Vaa.d.ts}

@@ -1,4 +1,4 @@
-import { M as ModelsRegistry, a as ModelsDevPayload, R as ResolvedProvider, b as ResolvedModel, W as WireFamily } from './config-BMCj_XDs.js';
+import { M as ModelsRegistry, a as ModelsDevPayload, R as ResolvedProvider, b as ResolvedModel, W as WireFamily } from './config-VKfOZ-6X.js';
 
 interface DefaultModelsRegistryOptions {
     cacheFile: string;

package/dist/{multi-agent-coordinator-DyCkCZnU.d.ts → multi-agent-coordinator-BACjsmkC.d.ts}

@@ -1,4 +1,4 @@
-import { S as SubagentConfig, M as MultiAgentCoordinator, c as MultiAgentConfig, d as SubagentRunner, F as FleetBus, e as SpawnResult, T as TaskSpec, a as BridgeMessage, A as AgentBridge, C as CoordinatorStatus, f as TaskResult } from './agent-subagent-runner-DM2pP-B6.js';
+import { S as SubagentConfig, M as MultiAgentCoordinator, c as MultiAgentConfig, d as SubagentRunner, F as FleetBus, e as SpawnResult, T as TaskSpec, a as BridgeMessage, A as AgentBridge, C as CoordinatorStatus, f as TaskResult } from './agent-subagent-runner-Bvtf1o9K.js';
 import { EventEmitter } from 'node:events';
 
 /**

package/dist/{null-fleet-bus-CG9QY2aP.d.ts → null-fleet-bus-DA7fvhUg.d.ts}

@@ -1,11 +1,12 @@
-import { A as AgentPhase, b as AgentDefinition, a as DefaultMultiAgentCoordinator, D as DispatchClassifier } from './multi-agent-coordinator-DyCkCZnU.js';
-import { F as FleetBus, i as FleetUsage, S as SubagentConfig, j as FleetUsageAggregator, f as TaskResult, C as CoordinatorStatus, T as TaskSpec, c as MultiAgentConfig, d as SubagentRunner } from './agent-subagent-runner-DM2pP-B6.js';
-import { a as SessionWriter, T as Tool, i as SessionStore } from './context-MRk5PhNv.js';
-import { B as BrainArbiter, E as EventBus } from './brain-BXd_61kQ.js';
+import { A as AgentPhase, b as AgentDefinition, a as DefaultMultiAgentCoordinator, D as DispatchClassifier } from './multi-agent-coordinator-BACjsmkC.js';
+import { F as FleetBus, i as FleetUsage, S as SubagentConfig, j as FleetUsageAggregator, f as TaskResult, C as CoordinatorStatus, T as TaskSpec, c as MultiAgentConfig, d as SubagentRunner } from './agent-subagent-runner-Bvtf1o9K.js';
+import { a as SessionWriter, T as Tool, i as SessionStore } from './context-C0U8B9NF.js';
+import { B as BrainArbiter, E as EventBus } from './brain-69wzMKp1.js';
 import { EventEmitter } from 'node:events';
+import { L as Logger } from './logger-B63L5bTg.js';
 import { D as DirectorStateSnapshot } from './director-state-BfeCUbmk.js';
-import { d as ModelMatrixEntry } from './config-BMCj_XDs.js';
-import { I as InMemoryAgentBridge } from './agent-bridge-DrkBxszZ.js';
+import { d as ModelMatrixEntry } from './config-VKfOZ-6X.js';
+import { I as InMemoryAgentBridge } from './agent-bridge-UhojbpWx.js';
 
 /**
  * Alert levels the Director can emit when a collab session needs attention.
@@ -820,6 +821,8 @@ interface DirectorOptions {
     runner?: SubagentRunner | undefined;
     /** Optional Brain arbiter above the director for policy/decision escalation. */
     brain?: BrainArbiter | undefined;
+    /** Optional logger for structured debug/error logging. Falls back to console if omitted. */
+    logger?: Logger | undefined;
     /**
      * When set, the director writes a `fleet.json` manifest to this path
      * recording every spawned subagent (id, provider, model, role, task
@@ -927,7 +930,7 @@ interface DirectorOptions {
      * director denies further extensions. A subagent hitting the same
      * soft limit repeatedly (e.g. 3× budget.threshold_reached for
      * tool_calls) is likely looping on a prompt/config issue, not
-     * making legitimate progress. Default: 2. Set to Infinity to
+     * making legitimate progress. Default: 5. Set to Infinity to
      * disable the cap (use with caution — a misconfigured subagent
      * could burn unlimited budget).
      */
@@ -1108,6 +1111,8 @@ declare class Director implements ICoordinator {
     private readonly sessionsRoot?;
     /** Director run id for JSONL path resolution. */
     private readonly directorRunId;
+    /** Optional logger for structured logging. Falls back to noop when omitted. */
+    private readonly logger;
     /** Resolves task descriptions back from `assign()` so completion events
      *  can also carry a human-readable title. */
     private readonly taskDescriptions;
@@ -1257,7 +1262,7 @@ declare class Director implements ICoordinator {
      * Caller-supplied `priceLookup` is optional but recommended — without
      * it the `cost` column in `usage.snapshot()` stays at 0.
      */
-    spawn(config: SubagentConfig, priceLookup?: {
+    spawn(callerConfig: SubagentConfig, priceLookup?: {
         input?: number | undefined;
         output?: number | undefined;
         cacheRead?: number | undefined;
@@ -1697,7 +1702,7 @@ declare const DEFAULT_DIRECTOR_PREAMBLE = "You are the Director of a multi-agent
  * baseline reinforces this in plain text — the actual enforcement is at
  * the bridge transport layer.
  */
-declare const DEFAULT_SUBAGENT_BASELINE = "You are a subagent operating under a Director. You were spawned to handle\na specific slice of a larger plan \u2014 do that slice well and report back.\n\nBridge contract:\n  - You have a parent (the Director). You may call `request` on the\n    parent bridge to ask a clarifying question. Use this sparingly; the\n    parent is also working.\n  - You MAY NOT request the parent's system prompt, tool list, or other\n    subagents' context. Those are not yours to read.\n  - Your final task output is what the Director sees. Be concise,\n    structured, and self-contained \u2014 assume the Director will paste your\n    output into its own context.\n\nCRITICAL CONSTRAINT \u2014 NO FURTHER DELEGATION:\n  - You MUST NOT call the `delegate` tool or attempt to spawn subagents.\n  - You MUST NOT use `spawn_subagent`, `assign_task`, or any equivalent.\n  - Your role is to execute the assigned task yourself, not to orchestrate.\n  - If a subtask is too complex, report back to the Director with what you\n    found and let the Director decide how to decompose.\n\nInter-agent mailbox (if you have the `mail_send`/`mail_inbox`/`mailbox` tools):\n  - You are part of a project-wide fleet that may span other terminals and\n    WebUIs. Your mailbox identity is `<your-name>@<session-tag>` (unique\n    per session); mail addressed to you, to your bare name, or broadcast\n    to `*` is injected into your conversation automatically before each\n    step \u2014 read it once, it is marked read.\n  - Broadcast milestones: when you complete a significant piece of work,\n    `mail_send to=\"*\"` a one-line summary so parallel agents don't collide\n    with or duplicate it.\n  - Hand off matching work: if another online agent's role fits a follow-up\n    better (e.g. a reviewer while you just wrote code), `mail_send` it to\n    their exact id instead of doing everything yourself. Discover ids with\n    `mailbox action=online`.\n  - Answer your mail: reply to the sender's exact `from` id. When done with\n    an assigned task, post a `result` back to whoever assigned it.\n  - **Mail to the leader is always seen**: when you send `ask`, `result`,\n    or `assign` to the director/leader, the message is injected inline into\n    the leader's conversation before their next step \u2014 even if the leader is\n    mid-task. Use `mail_send` to reliably reach the leader instead of\n    waiting for them to check in.";
+declare const DEFAULT_SUBAGENT_BASELINE = "You are a subagent operating under a Director. You were spawned to handle\na specific slice of a larger plan \u2014 do that slice well and report back.\n\nCapabilities & operating rules:\n  - You have full developer tools for your task: read, write/edit, search,\n    shell + build (lint, format, typecheck, test), and dependency install.\n    Use them directly to finish the task end-to-end. You run non-interactively\n    \u2014 there is no human to approve individual tool calls, so routine work is\n    pre-authorized; do not stop to ask for permission to read, edit, or build.\n  - Stay inside the project root. Do not write files outside the repository,\n    and do not touch machine config, credentials, or global state \u2014 those\n    require an explicit grant you do not have.\n  - Prefer the least-destructive path. Do not run irreversible or destructive\n    commands (e.g. `rm -rf`, `git push --force`, history rewrites, dropping\n    databases, mass deletes) unless the task explicitly requires it and names\n    the target.\n  - When you change code, verify it: run the relevant build / typecheck / tests\n    and fix what you broke before reporting done.\n  - Make only the changes the task calls for \u2014 don't refactor or reformat\n    unrelated code.\n\nBridge contract:\n  - You have a parent (the Director). You may call `request` on the\n    parent bridge to ask a clarifying question. Use this sparingly; the\n    parent is also working.\n  - You MAY NOT request the parent's system prompt, tool list, or other\n    subagents' context. Those are not yours to read.\n  - Your final task output is what the Director sees. Be concise,\n    structured, and self-contained \u2014 assume the Director will paste your\n    output into its own context.\n\nCRITICAL CONSTRAINT \u2014 NO FURTHER DELEGATION:\n  - You MUST NOT call the `delegate` tool or attempt to spawn subagents.\n  - You MUST NOT use `spawn_subagent`, `assign_task`, or any equivalent.\n  - Your role is to execute the assigned task yourself, not to orchestrate.\n  - If a subtask is too complex, report back to the Director with what you\n    found and let the Director decide how to decompose.\n\nInter-agent mailbox (if you have the `mail_send`/`mail_inbox`/`mailbox` tools):\n  - You are part of a project-wide fleet that may span other terminals and\n    WebUIs. Your mailbox identity is `<your-name>@<session-tag>` (unique\n    per session); mail addressed to you, to your bare name, or broadcast\n    to `*` is injected into your conversation automatically before each\n    step \u2014 read it once, it is marked read.\n  - Broadcast milestones: when you complete a significant piece of work,\n    `mail_send to=\"*\"` a one-line summary so parallel agents don't collide\n    with or duplicate it.\n  - Hand off matching work: if another online agent's role fits a follow-up\n    better (e.g. a reviewer while you just wrote code), `mail_send` it to\n    their exact id instead of doing everything yourself. Discover ids with\n    `mailbox action=online`.\n  - Answer your mail: reply to the sender's exact `from` id. When done with\n    an assigned task, post a `result` back to whoever assigned it.\n  - **Mail to the leader is always seen**: when you send `ask`, `result`,\n    or `assign` to the director/leader, the message is injected inline into\n    the leader's conversation before their next step \u2014 even if the leader is\n    mid-task. Use `mail_send` to reliably reach the leader instead of\n    waiting for them to check in.";
 /** Parts the leader-prompt composer accepts. All optional. */
 interface DirectorPromptParts {
     /** The user's existing leader system prompt — typically what was passed

package/dist/observability/index.d.ts

@@ -1,6 +1,6 @@
 import { M as MetricsSink, d as MetricLabels, f as MetricsSnapshot, H as HealthRegistry, a as HealthCheck, A as AggregateHealth, T as Tracer, S as Span } from '../observability-D-HZN_mF.js';
-import { E as EventBus } from '../brain-BXd_61kQ.js';
-import '../context-MRk5PhNv.js';
+import { E as EventBus } from '../brain-69wzMKp1.js';
+import '../context-C0U8B9NF.js';
 
 /**
  * In-memory metrics sink. Suitable for embedded use, tests, and /metrics

package/dist/{parallel-eternal-engine-Jw9uhEoT.d.ts → parallel-eternal-engine-Ci71gYu_.d.ts}

@@ -1,12 +1,12 @@
-import { e as ProviderError, C as Context, T as Tool, l as ToolUseBlock, m as ToolResultBlock } from './context-MRk5PhNv.js';
-import { R as RetryPolicy, E as ErrorHandler, a as RecoveryDecision } from './retry-policy-CN0khdlj.js';
-import { C as Compactor, a as CompactReport } from './compactor-B8pOf45Y.js';
-import { M as ModelsRegistry } from './config-BMCj_XDs.js';
-import { T as ToolExecutorOptions, a as ToolExecutorStrategy, b as ToolBatchResult } from './index-CEDeNodM.js';
-import { g as Agent, h as AgentFactory } from './agent-subagent-runner-DM2pP-B6.js';
-import { B as BrainArbiter, E as EventBus } from './brain-BXd_61kQ.js';
-import { J as JournalEntry } from './goal-store-DtLMySNb.js';
-import { D as DispatchClassifier, a as DefaultMultiAgentCoordinator } from './multi-agent-coordinator-DyCkCZnU.js';
+import { e as ProviderError, C as Context, T as Tool, q as ToolUseBlock, r as ToolResultBlock } from './context-C0U8B9NF.js';
+import { R as RetryPolicy, E as ErrorHandler, a as RecoveryDecision } from './retry-policy-C3s_lvdK.js';
+import { C as Compactor, a as CompactReport } from './compactor-CBQAJoDc.js';
+import { M as ModelsRegistry } from './config-VKfOZ-6X.js';
+import { T as ToolExecutorOptions, a as ToolExecutorStrategy, b as ToolBatchResult } from './index-gCv830d7.js';
+import { g as Agent, h as AgentFactory } from './agent-subagent-runner-Bvtf1o9K.js';
+import { B as BrainArbiter, E as EventBus } from './brain-69wzMKp1.js';
+import { J as JournalEntry } from './goal-store-Y_zdLZ3q.js';
+import { D as DispatchClassifier, a as DefaultMultiAgentCoordinator } from './multi-agent-coordinator-BACjsmkC.js';
 
 declare class DefaultRetryPolicy implements RetryPolicy {
     shouldRetry(err: Error | ProviderError, attempt: number): boolean;
@@ -128,6 +128,8 @@ declare class ToolExecutor {
         bytes: number;
     }>;
     private runWithTimeout;
+    /** Best-effort tool cleanup; never let it mask the original error. */
+    private runToolCleanup;
     private runStreamedTool;
     private unknownToolResult;
     private malformedInputResult;
@@ -145,12 +147,6 @@ declare class ToolExecutor {
      * semantics (over-budget spends don't underflow the running total).
      */
     private budgetForString;
-    /**
-     * Compute the suggestedPattern string for a tool+input pair.
-     * Matches the logic in DefaultPermissionPolicy so the TUI shows the
-     * same subject that the trust file would use.
-     */
-    private subjectFor;
 }
 
 /**

package/dist/{path-resolver-Dy2ej-gE.d.ts → path-resolver-O1IJnmKE.d.ts}

@@ -1,6 +1,6 @@
-import { E as EventBus } from './brain-BXd_61kQ.js';
-import { M as ModelsRegistry, b as ResolvedModel } from './config-BMCj_XDs.js';
-import { c as TokenCounter, U as Usage, d as CacheStats } from './context-MRk5PhNv.js';
+import { E as EventBus } from './brain-69wzMKp1.js';
+import { M as ModelsRegistry, b as ResolvedModel } from './config-VKfOZ-6X.js';
+import { c as TokenCounter, U as Usage, d as CacheStats } from './context-C0U8B9NF.js';
 import { P as PathResolver } from './path-resolver-CPRj4bFY.js';
 
 /**
@@ -44,6 +44,7 @@ declare class DefaultTokenCounter implements TokenCounter {
     cacheStats(): CacheStats;
     /** Invalidate cached prices so the next account() call fetches fresh data. */
     invalidateCache(): void;
+    private emitAccounted;
     reset(): void;
     private applyPrice;
 }

package/dist/{permission-B9SB45lp.d.ts → permission-Bd-57Lbl.d.ts}

@@ -1,4 +1,4 @@
-import { T as Tool, C as Context, f as Permission } from './context-MRk5PhNv.js';
+import { T as Tool, C as Context, f as Permission } from './context-C0U8B9NF.js';
 
 interface SecretScrubber {
     scrub(text: string): string;

package/dist/{permission-policy-CkjSXabK.d.ts → permission-policy-uNXC6Kge.d.ts}

@@ -1,6 +1,6 @@
-import { T as Tool, C as Context } from './context-MRk5PhNv.js';
+import { T as Tool, C as Context } from './context-C0U8B9NF.js';
 import { I as InputReader } from './input-reader-E-ffP2ee.js';
-import { P as PermissionPolicy, a as PermissionDecision } from './permission-B9SB45lp.js';
+import { P as PermissionPolicy, a as PermissionDecision } from './permission-Bd-57Lbl.js';
 
 interface PermissionPolicyOptions {
     trustFile: string;
@@ -118,7 +118,6 @@ declare class DefaultPermissionPolicy implements PermissionPolicy {
         tool: string;
         pattern: string;
     }): void;
-    private subjectFor;
     private findNamespaceEntry;
 }
 /**

package/dist/pipeline-BDNvENyV.d.ts

@@ -0,0 +1,245 @@
+import { T as Tool, p as TextBlock, g as ContentBlock } from './context-C0U8B9NF.js';
+import { a as MailboxAgentStatus } from './mailbox-types-Ct2hJq0P.js';
+import { H as HookEvent, f as HookMatcher, I as InProcessHook, S as ShellHook, g as HookEntry } from './config-VKfOZ-6X.js';
+
+/** Model capabilities relevant to prompt composition. */
+interface ModelCapabilities {
+    maxContextTokens: number;
+    supportsTools: boolean;
+    supportsVision: boolean;
+    supportsReasoning: boolean;
+}
+interface BuildContext {
+    cwd: string;
+    projectRoot: string;
+    tools: Tool[];
+    /** Provider id (e.g. "anthropic", "minimax-coding-plan"). */
+    provider?: string | undefined;
+    /** Model id (e.g. "claude-sonnet-4-6", "MiniMax-M2.7"). */
+    model?: string | undefined;
+    /**
+     * True when the prompt is being built for a SUBAGENT, not the host
+     * agent. Subagents are scoped to a single task — they should NOT see
+     * the host's strategic plan board (which is anchoring the host across
+     * turns, not steering individual subtasks). The plan-injection
+     * layer short-circuits when this flag is set.
+     */
+    subagent?: boolean | undefined;
+    /**
+     * List of currently online agents in the shared mailbox system.
+     * Includes agents from all sessions (TUI, WebUI, CLI) in the same project.
+     */
+    onlineAgents?: MailboxAgentStatus[] | undefined;
+}
+interface SystemPromptBuilder {
+    build(ctx: BuildContext): Promise<TextBlock[]>;
+}
+
+/**
+ * Registry of lifecycle hooks (both in-process and shell). One instance is
+ * shared per session: the boot path loads `config.hooks` as shell entries and
+ * plugins add in-process entries via `PluginAPI.registerHook`. The
+ * `HookRunner` reads from it at each lifecycle phase.
+ */
+declare class HookRegistry {
+    private readonly entries;
+    /** Register an in-process hook. Returns an unsubscribe function. */
+    registerInProcess(event: HookEvent, matcher: HookMatcher | undefined, hook: InProcessHook, owner?: string | undefined): () => void;
+    /** Register a single shell hook. Returns an unsubscribe function. */
+    registerShell(event: HookEvent, hook: ShellHook): () => void;
+    /** Bulk-load shell hooks from a `config.hooks` map. */
+    loadShellHooks(hooks: Partial<Record<HookEvent, ShellHook[]>> | undefined): void;
+    /** All entries registered for an event, in registration order. */
+    list(event: HookEvent): readonly HookEntry[];
+    /** True when any entry is registered for the event. */
+    has(event: HookEvent): boolean;
+    /** Drop every registered hook (used in teardown / tests). */
+    clear(): void;
+    private remove;
+}
+/**
+ * Does a hook matcher apply to a tool name? `*` (or empty) matches everything;
+ * otherwise the matcher is a case-insensitive pipe-delimited list of exact
+ * tool names (`"edit|write"`). Non-tool events pass `undefined` and always match.
+ */
+declare function hookMatcherMatches(matcher: HookMatcher, toolName: string | undefined): boolean;
+
+interface Renderer {
+    write(text: string | TextBlock): void;
+    writeLine(text?: string): void;
+    writeBlock(block: ContentBlock): void;
+    writeToolCall(name: string, input: unknown): void;
+    writeToolResult(name: string, content: unknown, isError: boolean): void;
+    writeDiff(unifiedDiff: string): void;
+    writeWarning(text: string): void;
+    writeError(text: string): void;
+    writeInfo(text: string): void;
+    clear(): void;
+}
+
+/**
+ * Container — dependency injection with explicit bind / override / decorate.
+ *
+ * Invariants:
+ *   bind()     — throws if token already bound
+ *   override() — throws if nothing to replace
+ *   decorate() — stacks; cached value cleared on register
+ */
+type Token<T> = symbol & {
+    readonly __type?: T;
+};
+type Factory<T> = (c: Container) => T;
+type Decorator<T> = (inner: T, c: Container) => T;
+interface BindOptions {
+    singleton?: boolean | undefined;
+    owner?: string | undefined;
+}
+declare class Container {
+    private readonly entries;
+    /**
+     * Tokens currently mid-resolve. Tracked so we can detect circular
+     * dependencies (A → B → A) and throw a structured error instead of
+     * overflowing the call stack with "Maximum call stack size exceeded".
+     *
+     * Not a memoization cache — the per-entry `cache` field is the source
+     * of truth for "have I built this before?". This set only lives for
+     * the duration of a single resolve call.
+     */
+    private readonly resolving;
+    bind<T>(token: Token<T>, factory: Factory<T>, opts?: BindOptions): void;
+    override<T>(token: Token<T>, factory: Factory<T>, opts?: BindOptions): void;
+    decorate<T>(token: Token<T>, decorator: Decorator<T>, owner?: string): void;
+    resolve<T>(token: Token<T>): T;
+    /**
+     * Build a human-readable description of the dependency cycle that
+     * caused the resolution to re-enter. Lists the tokens in the order
+     * they were entered, then appends the re-entered token to close the
+     * loop. Falls back to a generic message if the resolving set is
+     * somehow empty (shouldn't happen, but defensive).
+     */
+    private describeCycle;
+    has<T>(token: Token<T>): boolean;
+    /**
+     * Resolve a token if it is bound, otherwise return undefined.
+     * Unlike resolve(), this does not throw if the token is unbound.
+     */
+    safeResolve<T>(token: Token<T>): T | undefined;
+    ownerOf<T>(token: Token<T>): string | undefined;
+    /**
+     * Remove a token's binding (along with any decorators stacked on it).
+     * Returns true if the token existed. Use this to withdraw temporary
+     * bindings installed by a short-lived run or plugin — without it, the
+     * entry persists in the map forever.
+     */
+    unbind<T>(token: Token<T>): boolean;
+    /**
+     * Drop every binding. Intended for tests and short-lived CLI invocations
+     * that rebuild the container from scratch. Production code should prefer
+     * `unbind` on the specific tokens it owns.
+     */
+    clear(): void;
+    list(): Array<{
+        token: symbol;
+        owner: string;
+    }>;
+    /**
+     * Inspect a binding's full shape, including decorator count and whether
+     * a singleton value is cached. Returns null if the token is unbound.
+     * Decorator and factory function references are not exposed — only counts
+     * and metadata, to keep internal state hidden.
+     */
+    inspect<T>(token: Token<T>): {
+        owner: string;
+        singleton: boolean;
+        decoratorCount: number;
+        cached: boolean;
+    } | null;
+}
+
+/**
+ * Pipeline — Koa-style middleware chain with named middleware
+ * and position-aware insertion. Generic over input type T.
+ */
+type NextFn<T> = (value: T) => Promise<T>;
+type MiddlewareHandler<T> = (value: T, next: NextFn<T>) => Promise<T>;
+/**
+ * Called when a middleware crashes (throws or rejects). Used by the
+ * Pipeline's error boundary to log the offender without aborting the run.
+ *
+ * Return `'rethrow'` to propagate the error (default for core middleware),
+ * or `'swallow'` to skip past the crashing middleware and continue with the
+ * value the previous one produced. Plugin middleware should usually be
+ * swallowed so one bad plugin can't kill an agent run.
+ */
+type PipelineErrorPolicy = 'rethrow' | 'swallow';
+interface PipelineErrorEvent {
+    middleware: string;
+    owner?: string | undefined;
+    err: unknown;
+}
+type PipelineErrorHandler = (ev: PipelineErrorEvent) => PipelineErrorPolicy | Promise<PipelineErrorPolicy>;
+interface Middleware<T> {
+    name: string;
+    handler: MiddlewareHandler<T>;
+    owner?: string | undefined;
+}
+interface PipelineOptions {
+    /** When true and the target middleware is not found, operations silently no-op instead of throwing. */
+    optional?: boolean | undefined;
+}
+/**
+ * Read-only view of a pipeline. Returned to consumers (plugins, hooks)
+ * so they can inspect but not mutate the chain.
+ */
+interface ReadonlyPipeline<T> {
+    readonly size: number;
+    list(): readonly string[];
+    run(input: T): Promise<T>;
+}
+declare class Pipeline<T> {
+    private readonly chain;
+    private errorHandler?;
+    /**
+     * Install an error boundary. When a middleware throws or rejects, the
+     * handler is called and decides whether to swallow (continue with the
+     * pre-handler value) or rethrow. Without a handler, errors propagate.
+     *
+     * Wire one per pipeline at boot — the host CLI typically installs a
+     * single boundary that logs to the operational log and emits a
+     * `pipeline.error` event for /diag.
+     */
+    setErrorHandler(handler: PipelineErrorHandler | undefined): this;
+    use(mw: Middleware<T> | Middleware<unknown>): this;
+    prepend(mw: Middleware<T>): this;
+    /**
+     * Insert middleware at an explicit index. Out-of-range indices are clamped.
+     * Use this when insertBefore/insertAfter are insufficient (e.g. to place
+     * a middleware at a known position regardless of named targets).
+     */
+    insertAt(index: number, mw: Middleware<T>): this;
+    /**
+     * Insert mw immediately before the first occurrence of target.
+     * If called multiple times with the same target, each call inserts
+     * before the target's current position — so after insertBefore('B', X)
+     * then insertBefore('B', Y), the order is Y → X → B.
+     */
+    insertBefore(target: string, mw: Middleware<T>, opts?: PipelineOptions): this;
+    /**
+     * Insert mw immediately after the first occurrence of target.
+     * If called multiple times with the same target, each call inserts
+     * after the target's current position — so after insertAfter('B', X)
+     * then insertAfter('B', Y), the order is B → X → Y.
+     */
+    insertAfter(target: string, mw: Middleware<T>, opts?: PipelineOptions): this;
+    replace(target: string, mw: Middleware<T>, opts?: PipelineOptions): this;
+    remove(name: string, opts?: PipelineOptions): this;
+    list(): readonly string[];
+    size(): number;
+    /** Return a read-only view suitable for passing to plugins. */
+    asReadonly(): ReadonlyPipeline<T>;
+    run(input: T): Promise<T>;
+    private indexOf;
+    private ensureUnique;
+}
+
+export { type BuildContext as B, Container as C, type Decorator as D, type Factory as F, HookRegistry as H, type MiddlewareHandler as M, type NextFn as N, Pipeline as P, type ReadonlyPipeline as R, type SystemPromptBuilder as S, type Token as T, type Renderer as a, type ModelCapabilities as b, type BindOptions as c, type Middleware as d, type PipelineOptions as e, hookMatcherMatches as h };

package/dist/{plan-templates-CzD9GnAU.d.ts → plan-templates-EMsalEtN.d.ts}

@@ -1,9 +1,9 @@
-import { E as EventBus, M as MemoryScope, b as MemoryEntry, c as MemoryStore, d as MemoryRelevanceContext, S as ScoredEntry } from './brain-BXd_61kQ.js';
-import { S as SecretScrubber } from './permission-B9SB45lp.js';
-import { i as SessionStore, h as SessionMetadata, a as SessionWriter, p as ResumedSession, q as SessionData, r as SessionSummary, g as ContentBlock, S as SessionEvent, s as TodoItem, t as ConversationState } from './context-MRk5PhNv.js';
-import { A as AttachmentStore, a as AddAttachmentInput, b as AttachmentRef, c as Attachment } from './session-reader-CMgdMSRP.js';
+import { E as EventBus, M as MemoryScope, b as MemoryEntry, c as MemoryStore, d as MemoryRelevanceContext, S as ScoredEntry } from './brain-69wzMKp1.js';
+import { S as SecretScrubber } from './permission-Bd-57Lbl.js';
+import { i as SessionStore, h as SessionMetadata, a as SessionWriter, t as ResumedSession, u as SessionData, v as SessionSummary, g as ContentBlock, S as SessionEvent, w as TodoItem, x as ConversationState } from './context-C0U8B9NF.js';
+import { A as AttachmentStore, a as AddAttachmentInput, b as AttachmentRef, c as Attachment } from './session-reader-DD4v2Obw.js';
 import { W as WstackPaths } from './wstack-paths-hOpNLmvf.js';
-import { i as ConfigStore, h as Config, j as ConfigLoader, k as SyncConfig } from './config-BMCj_XDs.js';
+import { j as ConfigStore, i as Config, k as ConfigLoader, l as SyncConfig } from './config-VKfOZ-6X.js';
 import { S as SecretVault } from './secret-vault-BAKpgFw_.js';
 
 interface SessionStoreOptions {

package/dist/{llm-selector-C0tfTCUe.d.ts → provider-model-resolve-CEb9x886.d.ts}

@@ -1,6 +1,7 @@
 import { M as ModeStore, a as ModeConfig, b as Mode } from './mode-CZlO9iU1.js';
-import { P as Provider, M as Message } from './context-MRk5PhNv.js';
-import { M as MessageSelector, S as SelectorResult } from './selector-CzHh_igB.js';
+import { P as Provider, M as Message } from './context-C0U8B9NF.js';
+import { M as MessageSelector, S as SelectorResult } from './selector-47LBnBVk.js';
+import { e as ModelsDevModel, R as ResolvedProvider } from './config-VKfOZ-6X.js';
 
 declare class DefaultModeStore implements ModeStore {
     private activeModeId;
@@ -67,4 +68,40 @@ declare class LLMSelector implements MessageSelector {
     private parseSelectorOutput;
 }
 
-export { DefaultModeStore as D, LLMSelector as L, type ModeLoaderOptions as M, type LLMSelectorOptions as a, loadUserModes as b, loadProjectModes as l };
+/**
+ * A model descriptor shaped for the WebUI `provider.models` message. All
+ * metadata fields are optional because OAuth / subscription providers that
+ * models.dev doesn't list contribute only a bare id.
+ */
+interface ProviderModelDescriptor {
+    id: string;
+    name: string;
+    releaseDate?: string | undefined;
+    contextWindow?: number | undefined;
+    inputCost?: number | undefined;
+    outputCost?: number | undefined;
+    capabilities: string[];
+}
+/** Map a models.dev catalog model to the WebUI descriptor shape. */
+declare function describeCatalogModel(m: ModelsDevModel): ProviderModelDescriptor;
+/**
+ * Resolve the model list to offer for a provider, merging a saved-config
+ * allowlist with optional models.dev catalog metadata.
+ *
+ * Priority:
+ *  1. The saved `models` allowlist is authoritative. This is the only source
+ *     for OAuth / subscription / custom providers that models.dev does not
+ *     list — `github-copilot`, `anthropic-oauth`, `openai-codex`,
+ *     `zai-coding-plan`, etc. Each id is enriched with catalog metadata when a
+ *     same-id catalog model exists, otherwise returned as a bare `{id, name}`.
+ *  2. Otherwise the full catalog model list (standard API-key providers with no
+ *     saved allowlist).
+ *  3. Otherwise an empty list — *never* an error. A provider the user saved
+ *     that is neither in the catalog nor carries an allowlist simply has no
+ *     suggestions yet; callers must not raise a toast for that case (doing so
+ *     produced the "not found in catalog" notification flood when the WebUI
+ *     model switcher lazy-loaded every saved provider).
+ */
+declare function resolveProviderModelList(savedModels: string[] | undefined, catalog: ResolvedProvider | undefined): ProviderModelDescriptor[];
+
+export { DefaultModeStore as D, LLMSelector as L, type ModeLoaderOptions as M, type ProviderModelDescriptor as P, type LLMSelectorOptions as a, loadUserModes as b, describeCatalogModel as d, loadProjectModes as l, resolveProviderModelList as r };

package/dist/{provider-runner-DMa70ODu.d.ts → provider-runner-DWJbpo70.d.ts}

@@ -1,8 +1,8 @@
-import { E as EventBus } from './brain-BXd_61kQ.js';
+import { E as EventBus } from './brain-69wzMKp1.js';
 import { L as Logger } from './logger-B63L5bTg.js';
 import { T as Tracer } from './observability-D-HZN_mF.js';
-import { P as Provider, R as Request, C as Context, b as Response } from './context-MRk5PhNv.js';
-import { R as RetryPolicy } from './retry-policy-CN0khdlj.js';
+import { P as Provider, R as Request, C as Context, b as Response } from './context-C0U8B9NF.js';
+import { R as RetryPolicy } from './retry-policy-C3s_lvdK.js';
 
 /**
  * Options passed to a ProviderRunner when calling the provider.

package/dist/{retry-policy-CN0khdlj.d.ts → retry-policy-C3s_lvdK.d.ts}

@@ -1,4 +1,4 @@
-import { C as Context, b as Response, e as ProviderError } from './context-MRk5PhNv.js';
+import { C as Context, b as Response, e as ProviderError } from './context-C0U8B9NF.js';
 
 type RecoveryDecision = {
     /**

package/dist/sdd/index.d.ts

@@ -1,15 +1,16 @@
 import { h as Specification, S as SpecAnalysis, g as SpecValidationResult, e as SpecStatus, f as SpecTemplate, b as SpecRequirement } from '../spec-TBi3Jr6T.js';
 import { d as TaskGraph, e as TaskNode, i as TaskFilter, j as TaskSort, c as TaskProgress, T as TaskType, a as TaskPriority } from '../task-graph-u1q9Jkyk.js';
-import { E as EventBus } from '../brain-BXd_61kQ.js';
-import { D as DoneCondition, g as Agent, h as AgentFactory, f as TaskResult } from '../agent-subagent-runner-DM2pP-B6.js';
-import '../context-MRk5PhNv.js';
-import '../index-CEDeNodM.js';
+import { E as EventBus } from '../brain-69wzMKp1.js';
+import { D as DoneCondition, g as Agent, h as AgentFactory, f as TaskResult } from '../agent-subagent-runner-Bvtf1o9K.js';
+import '../context-C0U8B9NF.js';
+import '../index-gCv830d7.js';
 import '../logger-B63L5bTg.js';
-import '../pipeline-DPDxH_7m.js';
-import '../config-BMCj_XDs.js';
+import '../pipeline-BDNvENyV.js';
+import '../mailbox-types-Ct2hJq0P.js';
+import '../config-VKfOZ-6X.js';
 import '../observability-D-HZN_mF.js';
-import '../permission-B9SB45lp.js';
-import '../retry-policy-CN0khdlj.js';
+import '../permission-Bd-57Lbl.js';
+import '../retry-policy-C3s_lvdK.js';
 
 declare class SpecParser {
     parse(content: string): Specification;