@wrongstack/core 0.267.0 → 0.268.0

package/dist/{models-registry-BqGZNJQ-.d.ts → models-registry-Bvcl3Vaa.d.ts}

@@ -1,4 +1,4 @@
-import { M as ModelsRegistry, a as ModelsDevPayload, R as ResolvedProvider, b as ResolvedModel, W as WireFamily } from './config-Du3pYYln.js';
+import { M as ModelsRegistry, a as ModelsDevPayload, R as ResolvedProvider, b as ResolvedModel, W as WireFamily } from './config-VKfOZ-6X.js';
 
 interface DefaultModelsRegistryOptions {
     cacheFile: string;

package/dist/{multi-agent-coordinator-B8R43uPz.d.ts → multi-agent-coordinator-BACjsmkC.d.ts}

@@ -1,4 +1,4 @@
-import { S as SubagentConfig, M as MultiAgentCoordinator, c as MultiAgentConfig, d as SubagentRunner, F as FleetBus, e as SpawnResult, T as TaskSpec, a as BridgeMessage, A as AgentBridge, C as CoordinatorStatus, f as TaskResult } from './agent-subagent-runner-CzPGP3jA.js';
+import { S as SubagentConfig, M as MultiAgentCoordinator, c as MultiAgentConfig, d as SubagentRunner, F as FleetBus, e as SpawnResult, T as TaskSpec, a as BridgeMessage, A as AgentBridge, C as CoordinatorStatus, f as TaskResult } from './agent-subagent-runner-Bvtf1o9K.js';
 import { EventEmitter } from 'node:events';
 
 /**

package/dist/{null-fleet-bus-CnXa5oTH.d.ts → null-fleet-bus-DA7fvhUg.d.ts}

@@ -1,12 +1,12 @@
-import { A as AgentPhase, b as AgentDefinition, a as DefaultMultiAgentCoordinator, D as DispatchClassifier } from './multi-agent-coordinator-B8R43uPz.js';
-import { F as FleetBus, i as FleetUsage, S as SubagentConfig, j as FleetUsageAggregator, f as TaskResult, C as CoordinatorStatus, T as TaskSpec, c as MultiAgentConfig, d as SubagentRunner } from './agent-subagent-runner-CzPGP3jA.js';
-import { a as SessionWriter, T as Tool, i as SessionStore } from './context-dT5Ueund.js';
-import { B as BrainArbiter, E as EventBus } from './brain-Cdg77tVN.js';
+import { A as AgentPhase, b as AgentDefinition, a as DefaultMultiAgentCoordinator, D as DispatchClassifier } from './multi-agent-coordinator-BACjsmkC.js';
+import { F as FleetBus, i as FleetUsage, S as SubagentConfig, j as FleetUsageAggregator, f as TaskResult, C as CoordinatorStatus, T as TaskSpec, c as MultiAgentConfig, d as SubagentRunner } from './agent-subagent-runner-Bvtf1o9K.js';
+import { a as SessionWriter, T as Tool, i as SessionStore } from './context-C0U8B9NF.js';
+import { B as BrainArbiter, E as EventBus } from './brain-69wzMKp1.js';
 import { EventEmitter } from 'node:events';
 import { L as Logger } from './logger-B63L5bTg.js';
 import { D as DirectorStateSnapshot } from './director-state-BfeCUbmk.js';
-import { d as ModelMatrixEntry } from './config-Du3pYYln.js';
-import { I as InMemoryAgentBridge } from './agent-bridge-STJ3JwwK.js';
+import { d as ModelMatrixEntry } from './config-VKfOZ-6X.js';
+import { I as InMemoryAgentBridge } from './agent-bridge-UhojbpWx.js';
 
 /**
  * Alert levels the Director can emit when a collab session needs attention.

package/dist/observability/index.d.ts

@@ -1,6 +1,6 @@
 import { M as MetricsSink, d as MetricLabels, f as MetricsSnapshot, H as HealthRegistry, a as HealthCheck, A as AggregateHealth, T as Tracer, S as Span } from '../observability-D-HZN_mF.js';
-import { E as EventBus } from '../brain-Cdg77tVN.js';
-import '../context-dT5Ueund.js';
+import { E as EventBus } from '../brain-69wzMKp1.js';
+import '../context-C0U8B9NF.js';
 
 /**
  * In-memory metrics sink. Suitable for embedded use, tests, and /metrics

package/dist/{parallel-eternal-engine-DdNnw9BQ.d.ts → parallel-eternal-engine-Ci71gYu_.d.ts}

@@ -1,12 +1,12 @@
-import { e as ProviderError, C as Context, T as Tool, m as ToolUseBlock, n as ToolResultBlock } from './context-dT5Ueund.js';
-import { R as RetryPolicy, E as ErrorHandler, a as RecoveryDecision } from './retry-policy-BilV1ujH.js';
-import { C as Compactor, a as CompactReport } from './compactor-iMZ84CXq.js';
-import { M as ModelsRegistry } from './config-Du3pYYln.js';
-import { T as ToolExecutorOptions, a as ToolExecutorStrategy, b as ToolBatchResult } from './index-Bms0m4oy.js';
-import { g as Agent, h as AgentFactory } from './agent-subagent-runner-CzPGP3jA.js';
-import { B as BrainArbiter, E as EventBus } from './brain-Cdg77tVN.js';
-import { J as JournalEntry } from './goal-store-CABDwdFE.js';
-import { D as DispatchClassifier, a as DefaultMultiAgentCoordinator } from './multi-agent-coordinator-B8R43uPz.js';
+import { e as ProviderError, C as Context, T as Tool, q as ToolUseBlock, r as ToolResultBlock } from './context-C0U8B9NF.js';
+import { R as RetryPolicy, E as ErrorHandler, a as RecoveryDecision } from './retry-policy-C3s_lvdK.js';
+import { C as Compactor, a as CompactReport } from './compactor-CBQAJoDc.js';
+import { M as ModelsRegistry } from './config-VKfOZ-6X.js';
+import { T as ToolExecutorOptions, a as ToolExecutorStrategy, b as ToolBatchResult } from './index-gCv830d7.js';
+import { g as Agent, h as AgentFactory } from './agent-subagent-runner-Bvtf1o9K.js';
+import { B as BrainArbiter, E as EventBus } from './brain-69wzMKp1.js';
+import { J as JournalEntry } from './goal-store-Y_zdLZ3q.js';
+import { D as DispatchClassifier, a as DefaultMultiAgentCoordinator } from './multi-agent-coordinator-BACjsmkC.js';
 
 declare class DefaultRetryPolicy implements RetryPolicy {
     shouldRetry(err: Error | ProviderError, attempt: number): boolean;
@@ -147,12 +147,6 @@ declare class ToolExecutor {
      * semantics (over-budget spends don't underflow the running total).
      */
     private budgetForString;
-    /**
-     * Compute the suggestedPattern string for a tool+input pair.
-     * Matches the logic in DefaultPermissionPolicy so the TUI shows the
-     * same subject that the trust file would use.
-     */
-    private subjectFor;
 }
 
 /**

package/dist/{path-resolver-COIMLCQL.d.ts → path-resolver-O1IJnmKE.d.ts}

@@ -1,6 +1,6 @@
-import { E as EventBus } from './brain-Cdg77tVN.js';
-import { M as ModelsRegistry, b as ResolvedModel } from './config-Du3pYYln.js';
-import { c as TokenCounter, U as Usage, d as CacheStats } from './context-dT5Ueund.js';
+import { E as EventBus } from './brain-69wzMKp1.js';
+import { M as ModelsRegistry, b as ResolvedModel } from './config-VKfOZ-6X.js';
+import { c as TokenCounter, U as Usage, d as CacheStats } from './context-C0U8B9NF.js';
 import { P as PathResolver } from './path-resolver-CPRj4bFY.js';
 
 /**
@@ -44,6 +44,7 @@ declare class DefaultTokenCounter implements TokenCounter {
     cacheStats(): CacheStats;
     /** Invalidate cached prices so the next account() call fetches fresh data. */
     invalidateCache(): void;
+    private emitAccounted;
     reset(): void;
     private applyPrice;
 }

package/dist/{permission-B75JAi3-.d.ts → permission-Bd-57Lbl.d.ts}

@@ -1,4 +1,4 @@
-import { T as Tool, C as Context, f as Permission } from './context-dT5Ueund.js';
+import { T as Tool, C as Context, f as Permission } from './context-C0U8B9NF.js';
 
 interface SecretScrubber {
     scrub(text: string): string;

package/dist/{permission-policy-DlR9eJAM.d.ts → permission-policy-uNXC6Kge.d.ts}

@@ -1,6 +1,6 @@
-import { T as Tool, C as Context } from './context-dT5Ueund.js';
+import { T as Tool, C as Context } from './context-C0U8B9NF.js';
 import { I as InputReader } from './input-reader-E-ffP2ee.js';
-import { P as PermissionPolicy, a as PermissionDecision } from './permission-B75JAi3-.js';
+import { P as PermissionPolicy, a as PermissionDecision } from './permission-Bd-57Lbl.js';
 
 interface PermissionPolicyOptions {
     trustFile: string;
@@ -118,7 +118,6 @@ declare class DefaultPermissionPolicy implements PermissionPolicy {
         tool: string;
         pattern: string;
     }): void;
-    private subjectFor;
     private findNamespaceEntry;
 }
 /**

package/dist/pipeline-BDNvENyV.d.ts

@@ -0,0 +1,245 @@
+import { T as Tool, p as TextBlock, g as ContentBlock } from './context-C0U8B9NF.js';
+import { a as MailboxAgentStatus } from './mailbox-types-Ct2hJq0P.js';
+import { H as HookEvent, f as HookMatcher, I as InProcessHook, S as ShellHook, g as HookEntry } from './config-VKfOZ-6X.js';
+
+/** Model capabilities relevant to prompt composition. */
+interface ModelCapabilities {
+    maxContextTokens: number;
+    supportsTools: boolean;
+    supportsVision: boolean;
+    supportsReasoning: boolean;
+}
+interface BuildContext {
+    cwd: string;
+    projectRoot: string;
+    tools: Tool[];
+    /** Provider id (e.g. "anthropic", "minimax-coding-plan"). */
+    provider?: string | undefined;
+    /** Model id (e.g. "claude-sonnet-4-6", "MiniMax-M2.7"). */
+    model?: string | undefined;
+    /**
+     * True when the prompt is being built for a SUBAGENT, not the host
+     * agent. Subagents are scoped to a single task — they should NOT see
+     * the host's strategic plan board (which is anchoring the host across
+     * turns, not steering individual subtasks). The plan-injection
+     * layer short-circuits when this flag is set.
+     */
+    subagent?: boolean | undefined;
+    /**
+     * List of currently online agents in the shared mailbox system.
+     * Includes agents from all sessions (TUI, WebUI, CLI) in the same project.
+     */
+    onlineAgents?: MailboxAgentStatus[] | undefined;
+}
+interface SystemPromptBuilder {
+    build(ctx: BuildContext): Promise<TextBlock[]>;
+}
+
+/**
+ * Registry of lifecycle hooks (both in-process and shell). One instance is
+ * shared per session: the boot path loads `config.hooks` as shell entries and
+ * plugins add in-process entries via `PluginAPI.registerHook`. The
+ * `HookRunner` reads from it at each lifecycle phase.
+ */
+declare class HookRegistry {
+    private readonly entries;
+    /** Register an in-process hook. Returns an unsubscribe function. */
+    registerInProcess(event: HookEvent, matcher: HookMatcher | undefined, hook: InProcessHook, owner?: string | undefined): () => void;
+    /** Register a single shell hook. Returns an unsubscribe function. */
+    registerShell(event: HookEvent, hook: ShellHook): () => void;
+    /** Bulk-load shell hooks from a `config.hooks` map. */
+    loadShellHooks(hooks: Partial<Record<HookEvent, ShellHook[]>> | undefined): void;
+    /** All entries registered for an event, in registration order. */
+    list(event: HookEvent): readonly HookEntry[];
+    /** True when any entry is registered for the event. */
+    has(event: HookEvent): boolean;
+    /** Drop every registered hook (used in teardown / tests). */
+    clear(): void;
+    private remove;
+}
+/**
+ * Does a hook matcher apply to a tool name? `*` (or empty) matches everything;
+ * otherwise the matcher is a case-insensitive pipe-delimited list of exact
+ * tool names (`"edit|write"`). Non-tool events pass `undefined` and always match.
+ */
+declare function hookMatcherMatches(matcher: HookMatcher, toolName: string | undefined): boolean;
+
+interface Renderer {
+    write(text: string | TextBlock): void;
+    writeLine(text?: string): void;
+    writeBlock(block: ContentBlock): void;
+    writeToolCall(name: string, input: unknown): void;
+    writeToolResult(name: string, content: unknown, isError: boolean): void;
+    writeDiff(unifiedDiff: string): void;
+    writeWarning(text: string): void;
+    writeError(text: string): void;
+    writeInfo(text: string): void;
+    clear(): void;
+}
+
+/**
+ * Container — dependency injection with explicit bind / override / decorate.
+ *
+ * Invariants:
+ *   bind()     — throws if token already bound
+ *   override() — throws if nothing to replace
+ *   decorate() — stacks; cached value cleared on register
+ */
+type Token<T> = symbol & {
+    readonly __type?: T;
+};
+type Factory<T> = (c: Container) => T;
+type Decorator<T> = (inner: T, c: Container) => T;
+interface BindOptions {
+    singleton?: boolean | undefined;
+    owner?: string | undefined;
+}
+declare class Container {
+    private readonly entries;
+    /**
+     * Tokens currently mid-resolve. Tracked so we can detect circular
+     * dependencies (A → B → A) and throw a structured error instead of
+     * overflowing the call stack with "Maximum call stack size exceeded".
+     *
+     * Not a memoization cache — the per-entry `cache` field is the source
+     * of truth for "have I built this before?". This set only lives for
+     * the duration of a single resolve call.
+     */
+    private readonly resolving;
+    bind<T>(token: Token<T>, factory: Factory<T>, opts?: BindOptions): void;
+    override<T>(token: Token<T>, factory: Factory<T>, opts?: BindOptions): void;
+    decorate<T>(token: Token<T>, decorator: Decorator<T>, owner?: string): void;
+    resolve<T>(token: Token<T>): T;
+    /**
+     * Build a human-readable description of the dependency cycle that
+     * caused the resolution to re-enter. Lists the tokens in the order
+     * they were entered, then appends the re-entered token to close the
+     * loop. Falls back to a generic message if the resolving set is
+     * somehow empty (shouldn't happen, but defensive).
+     */
+    private describeCycle;
+    has<T>(token: Token<T>): boolean;
+    /**
+     * Resolve a token if it is bound, otherwise return undefined.
+     * Unlike resolve(), this does not throw if the token is unbound.
+     */
+    safeResolve<T>(token: Token<T>): T | undefined;
+    ownerOf<T>(token: Token<T>): string | undefined;
+    /**
+     * Remove a token's binding (along with any decorators stacked on it).
+     * Returns true if the token existed. Use this to withdraw temporary
+     * bindings installed by a short-lived run or plugin — without it, the
+     * entry persists in the map forever.
+     */
+    unbind<T>(token: Token<T>): boolean;
+    /**
+     * Drop every binding. Intended for tests and short-lived CLI invocations
+     * that rebuild the container from scratch. Production code should prefer
+     * `unbind` on the specific tokens it owns.
+     */
+    clear(): void;
+    list(): Array<{
+        token: symbol;
+        owner: string;
+    }>;
+    /**
+     * Inspect a binding's full shape, including decorator count and whether
+     * a singleton value is cached. Returns null if the token is unbound.
+     * Decorator and factory function references are not exposed — only counts
+     * and metadata, to keep internal state hidden.
+     */
+    inspect<T>(token: Token<T>): {
+        owner: string;
+        singleton: boolean;
+        decoratorCount: number;
+        cached: boolean;
+    } | null;
+}
+
+/**
+ * Pipeline — Koa-style middleware chain with named middleware
+ * and position-aware insertion. Generic over input type T.
+ */
+type NextFn<T> = (value: T) => Promise<T>;
+type MiddlewareHandler<T> = (value: T, next: NextFn<T>) => Promise<T>;
+/**
+ * Called when a middleware crashes (throws or rejects). Used by the
+ * Pipeline's error boundary to log the offender without aborting the run.
+ *
+ * Return `'rethrow'` to propagate the error (default for core middleware),
+ * or `'swallow'` to skip past the crashing middleware and continue with the
+ * value the previous one produced. Plugin middleware should usually be
+ * swallowed so one bad plugin can't kill an agent run.
+ */
+type PipelineErrorPolicy = 'rethrow' | 'swallow';
+interface PipelineErrorEvent {
+    middleware: string;
+    owner?: string | undefined;
+    err: unknown;
+}
+type PipelineErrorHandler = (ev: PipelineErrorEvent) => PipelineErrorPolicy | Promise<PipelineErrorPolicy>;
+interface Middleware<T> {
+    name: string;
+    handler: MiddlewareHandler<T>;
+    owner?: string | undefined;
+}
+interface PipelineOptions {
+    /** When true and the target middleware is not found, operations silently no-op instead of throwing. */
+    optional?: boolean | undefined;
+}
+/**
+ * Read-only view of a pipeline. Returned to consumers (plugins, hooks)
+ * so they can inspect but not mutate the chain.
+ */
+interface ReadonlyPipeline<T> {
+    readonly size: number;
+    list(): readonly string[];
+    run(input: T): Promise<T>;
+}
+declare class Pipeline<T> {
+    private readonly chain;
+    private errorHandler?;
+    /**
+     * Install an error boundary. When a middleware throws or rejects, the
+     * handler is called and decides whether to swallow (continue with the
+     * pre-handler value) or rethrow. Without a handler, errors propagate.
+     *
+     * Wire one per pipeline at boot — the host CLI typically installs a
+     * single boundary that logs to the operational log and emits a
+     * `pipeline.error` event for /diag.
+     */
+    setErrorHandler(handler: PipelineErrorHandler | undefined): this;
+    use(mw: Middleware<T> | Middleware<unknown>): this;
+    prepend(mw: Middleware<T>): this;
+    /**
+     * Insert middleware at an explicit index. Out-of-range indices are clamped.
+     * Use this when insertBefore/insertAfter are insufficient (e.g. to place
+     * a middleware at a known position regardless of named targets).
+     */
+    insertAt(index: number, mw: Middleware<T>): this;
+    /**
+     * Insert mw immediately before the first occurrence of target.
+     * If called multiple times with the same target, each call inserts
+     * before the target's current position — so after insertBefore('B', X)
+     * then insertBefore('B', Y), the order is Y → X → B.
+     */
+    insertBefore(target: string, mw: Middleware<T>, opts?: PipelineOptions): this;
+    /**
+     * Insert mw immediately after the first occurrence of target.
+     * If called multiple times with the same target, each call inserts
+     * after the target's current position — so after insertAfter('B', X)
+     * then insertAfter('B', Y), the order is B → X → Y.
+     */
+    insertAfter(target: string, mw: Middleware<T>, opts?: PipelineOptions): this;
+    replace(target: string, mw: Middleware<T>, opts?: PipelineOptions): this;
+    remove(name: string, opts?: PipelineOptions): this;
+    list(): readonly string[];
+    size(): number;
+    /** Return a read-only view suitable for passing to plugins. */
+    asReadonly(): ReadonlyPipeline<T>;
+    run(input: T): Promise<T>;
+    private indexOf;
+    private ensureUnique;
+}
+
+export { type BuildContext as B, Container as C, type Decorator as D, type Factory as F, HookRegistry as H, type MiddlewareHandler as M, type NextFn as N, Pipeline as P, type ReadonlyPipeline as R, type SystemPromptBuilder as S, type Token as T, type Renderer as a, type ModelCapabilities as b, type BindOptions as c, type Middleware as d, type PipelineOptions as e, hookMatcherMatches as h };

package/dist/{plan-templates-DSIKCXZN.d.ts → plan-templates-EMsalEtN.d.ts}

@@ -1,9 +1,9 @@
-import { E as EventBus, M as MemoryScope, b as MemoryEntry, c as MemoryStore, d as MemoryRelevanceContext, S as ScoredEntry } from './brain-Cdg77tVN.js';
-import { S as SecretScrubber } from './permission-B75JAi3-.js';
-import { i as SessionStore, h as SessionMetadata, a as SessionWriter, q as ResumedSession, r as SessionData, s as SessionSummary, g as ContentBlock, S as SessionEvent, t as TodoItem, u as ConversationState } from './context-dT5Ueund.js';
-import { A as AttachmentStore, a as AddAttachmentInput, b as AttachmentRef, c as Attachment } from './session-reader-D7Dapswh.js';
+import { E as EventBus, M as MemoryScope, b as MemoryEntry, c as MemoryStore, d as MemoryRelevanceContext, S as ScoredEntry } from './brain-69wzMKp1.js';
+import { S as SecretScrubber } from './permission-Bd-57Lbl.js';
+import { i as SessionStore, h as SessionMetadata, a as SessionWriter, t as ResumedSession, u as SessionData, v as SessionSummary, g as ContentBlock, S as SessionEvent, w as TodoItem, x as ConversationState } from './context-C0U8B9NF.js';
+import { A as AttachmentStore, a as AddAttachmentInput, b as AttachmentRef, c as Attachment } from './session-reader-DD4v2Obw.js';
 import { W as WstackPaths } from './wstack-paths-hOpNLmvf.js';
-import { j as ConfigStore, i as Config, k as ConfigLoader, l as SyncConfig } from './config-Du3pYYln.js';
+import { j as ConfigStore, i as Config, k as ConfigLoader, l as SyncConfig } from './config-VKfOZ-6X.js';
 import { S as SecretVault } from './secret-vault-BAKpgFw_.js';
 
 interface SessionStoreOptions {

package/dist/{provider-model-resolve-BNRsNuJx.d.ts → provider-model-resolve-CEb9x886.d.ts}

@@ -1,7 +1,7 @@
 import { M as ModeStore, a as ModeConfig, b as Mode } from './mode-CZlO9iU1.js';
-import { P as Provider, M as Message } from './context-dT5Ueund.js';
-import { M as MessageSelector, S as SelectorResult } from './selector-Bc7eWtT3.js';
-import { e as ModelsDevModel, R as ResolvedProvider } from './config-Du3pYYln.js';
+import { P as Provider, M as Message } from './context-C0U8B9NF.js';
+import { M as MessageSelector, S as SelectorResult } from './selector-47LBnBVk.js';
+import { e as ModelsDevModel, R as ResolvedProvider } from './config-VKfOZ-6X.js';
 
 declare class DefaultModeStore implements ModeStore {
     private activeModeId;

package/dist/{provider-runner-CX7iIvox.d.ts → provider-runner-DWJbpo70.d.ts}

@@ -1,8 +1,8 @@
-import { E as EventBus } from './brain-Cdg77tVN.js';
+import { E as EventBus } from './brain-69wzMKp1.js';
 import { L as Logger } from './logger-B63L5bTg.js';
 import { T as Tracer } from './observability-D-HZN_mF.js';
-import { P as Provider, R as Request, C as Context, b as Response } from './context-dT5Ueund.js';
-import { R as RetryPolicy } from './retry-policy-BilV1ujH.js';
+import { P as Provider, R as Request, C as Context, b as Response } from './context-C0U8B9NF.js';
+import { R as RetryPolicy } from './retry-policy-C3s_lvdK.js';
 
 /**
  * Options passed to a ProviderRunner when calling the provider.

package/dist/{retry-policy-BilV1ujH.d.ts → retry-policy-C3s_lvdK.d.ts}

@@ -1,4 +1,4 @@
-import { C as Context, b as Response, e as ProviderError } from './context-dT5Ueund.js';
+import { C as Context, b as Response, e as ProviderError } from './context-C0U8B9NF.js';
 
 type RecoveryDecision = {
     /**

package/dist/sdd/index.d.ts

@@ -1,15 +1,16 @@
 import { h as Specification, S as SpecAnalysis, g as SpecValidationResult, e as SpecStatus, f as SpecTemplate, b as SpecRequirement } from '../spec-TBi3Jr6T.js';
 import { d as TaskGraph, e as TaskNode, i as TaskFilter, j as TaskSort, c as TaskProgress, T as TaskType, a as TaskPriority } from '../task-graph-u1q9Jkyk.js';
-import { E as EventBus } from '../brain-Cdg77tVN.js';
-import { D as DoneCondition, g as Agent, h as AgentFactory, f as TaskResult } from '../agent-subagent-runner-CzPGP3jA.js';
-import '../context-dT5Ueund.js';
-import '../index-Bms0m4oy.js';
+import { E as EventBus } from '../brain-69wzMKp1.js';
+import { D as DoneCondition, g as Agent, h as AgentFactory, f as TaskResult } from '../agent-subagent-runner-Bvtf1o9K.js';
+import '../context-C0U8B9NF.js';
+import '../index-gCv830d7.js';
 import '../logger-B63L5bTg.js';
-import '../pipeline-BfD2k1rT.js';
-import '../config-Du3pYYln.js';
+import '../pipeline-BDNvENyV.js';
+import '../mailbox-types-Ct2hJq0P.js';
+import '../config-VKfOZ-6X.js';
 import '../observability-D-HZN_mF.js';
-import '../permission-B75JAi3-.js';
-import '../retry-policy-BilV1ujH.js';
+import '../permission-Bd-57Lbl.js';
+import '../retry-policy-C3s_lvdK.js';
 
 declare class SpecParser {
     parse(content: string): Specification;

package/dist/sdd/index.js

@@ -5697,7 +5697,27 @@ Working rules:
       id: "devops",
       name: "DevOps",
       role: "devops",
-      tools: [...TOOLS.build],
+      tools: [
+        ...TOOLS.build,
+        "mcp__ssh__ssh_list_servers",
+        "mcp__ssh__ssh_connection_status",
+        "mcp__ssh__ssh_execute",
+        "mcp__ssh__ssh_execute_sudo",
+        "mcp__ssh__ssh_upload",
+        "mcp__ssh__ssh_download",
+        "mcp__ssh__ssh_sync",
+        "mcp__ssh__ssh_deploy",
+        "mcp__ssh__ssh_health_check",
+        "mcp__ssh__ssh_service_status",
+        "mcp__ssh__ssh_process_manager",
+        "mcp__ssh__ssh_tunnel",
+        "mcp__ssh__ssh_backup_create",
+        "mcp__ssh__ssh_backup_list",
+        "mcp__ssh__ssh_backup_restore",
+        "mcp__ssh__ssh_db_list",
+        "mcp__ssh__ssh_db_query",
+        "mcp__ssh__ssh_profile"
+      ],
       prompt: `You are the DevOps agent. Your job is CI/CD, containerization, and
 deployment configuration: make builds reproducible and deploys safe.
 
@@ -5706,6 +5726,7 @@ Scope:
 - Write Dockerfiles/compose and optimize image size and layer caching
 - Configure deployment (env, secrets handling, health checks, rollback)
 - Diagnose flaky/broken pipelines
+- Use optional SSH MCP tools for remote hosts when the 'ssh' MCP server is enabled: list servers, run health checks, inspect services, transfer/deploy files, and open tunnels
 
 Input format you accept:
 { "task": "ci | container | deploy | fix-pipeline", "platform": "github-actions | gitlab | docker | k8s", "target": "<what>" }
@@ -5720,7 +5741,8 @@ Working rules:
 - Never hardcode secrets in config; reference the secret store
 - Pin versions for reproducible builds; avoid floating :latest
 - Every deploy path needs a rollback and a health check
-- Treat CI/CD changes as high-risk \u2014 explain blast radius before applying`
+- Treat CI/CD changes as high-risk \u2014 explain blast radius before applying
+- For remote SSH work, start with ssh_list_servers / ssh_connection_status, prefer read-only checks first, and do not run destructive commands without explicit user approval`
     },
     budget: MEDIUM_BUDGET,
     capability: {
@@ -5737,6 +5759,13 @@ Working rules:
         "kubernetes",
         "k8s",
         "deploy",
+        "ssh",
+        "remote ssh",
+        "remote server",
+        "sftp",
+        "tunnel",
+        "bastion",
+        "jump host",
         "github actions",
         "container"
       ]
@@ -7083,6 +7112,7 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
         subagentId: result.subagentId,
         taskId: result.taskId,
         status: result.status,
+        result: result.result,
         iterations: result.iterations,
         toolCalls: result.toolCalls,
         durationMs: result.durationMs