@wrongstack/core 0.272.1 → 0.273.0

package/dist/{agent-bridge-DFQYEeXf.d.ts → agent-bridge-BZ2enORi.d.ts}

@@ -1,4 +1,4 @@
-import { B as BridgeTransport, a as BridgeMessage, A as AgentBridge, b as AgentBridgeConfig } from './agent-subagent-runner-BZa_IEcd.js';
+import { B as BridgeTransport, a as BridgeMessage, A as AgentBridge, b as AgentBridgeConfig } from './agent-subagent-runner-ehb4xGvd.js';
 
 /**
  * In-memory pub/sub transport for agent-to-agent messaging.

package/dist/{agent-subagent-runner-BZa_IEcd.d.ts → agent-subagent-runner-ehb4xGvd.d.ts}

@@ -1,12 +1,12 @@
-import { c as ToolCallPipelinePayload, d as ToolWrapper, E as ExtensionRegistry, S as SystemPromptContributor, e as ToolRegistry, P as ProviderRegistry, A as AgentPipelines, f as ToolExecutorLike, g as AgentInit, h as AgentInput, R as RunResult } from './index-DWm_PE9L.js';
-import { C as Container, R as ReadonlyPipeline, a as Renderer } from './pipeline-Ckkn3AOA.js';
-import { E as EventBus, a as EventName, L as Listener } from './brain-etbcbRwV.js';
+import { c as ToolCallPipelinePayload, d as ToolWrapper, E as ExtensionRegistry, S as SystemPromptContributor, e as ToolRegistry, P as ProviderRegistry, A as AgentPipelines, f as ToolExecutorLike, g as AgentInit, h as AgentInput, R as RunResult } from './index-B7fHDt0B.js';
+import { C as Container, R as ReadonlyPipeline, a as Renderer } from './pipeline-CNVKuQDQ.js';
+import { E as EventBus, a as EventName, L as Listener } from './brain-BxN2k2HP.js';
 import { R as RetryPolicy, E as ErrorHandler } from './retry-policy-BV7nzeAd.js';
 import { L as Logger } from './logger-B63L5bTg.js';
 import { T as Tracer } from './observability-D-HZN_mF.js';
 import { P as PermissionPolicy } from './permission-CC7XFYWG.js';
 import { U as Usage, C as Context, J as JSONSchema, c as Request, d as Response, i as ContentBlock, q as TextBlock, T as Tool, P as Provider, t as RunOptions } from './context-Dw55zZ_Q.js';
-import { W as WireFamily, H as HookEvent, f as HookMatcher, I as InProcessHook, i as Config } from './config-rRS8yorV.js';
+import { W as WireFamily, H as HookEvent, f as HookMatcher, I as InProcessHook, C as Config } from './config-C8IYxlO8.js';
 
 /**
  * Single fleet-wide event with subagent attribution. Whatever a child
@@ -539,6 +539,13 @@ interface SubagentConfig {
      * single-provider behavior.
      */
     provider?: string | undefined;
+    /**
+     * Ordered fallback model chain for THIS subagent (entries: `model` or
+     * `provider/model`). When the subagent's primary model 429s or stream-hangs,
+     * the factory's fallback extension rotates to the next entry. Empty/undefined
+     * → the factory's own default fallback behavior (usually the leader's config).
+     */
+    fallbackModels?: string[] | undefined;
     /**
      * Per-subagent session JSONL path. When omitted the orchestrator-
      * supplied factory derives a path under `<sessionRoot>/<runId>/`.

package/dist/{brain-etbcbRwV.d.ts → brain-BxN2k2HP.d.ts}

@@ -785,6 +785,107 @@ interface EventMap {
         tokens: number;
         maxContext: number;
     };
+    /** A parallel SDD run started. */
+    'sdd.run.started': {
+        runId: string;
+        graphId: string;
+        specId?: string | undefined;
+        total: number;
+        /** Base branch the run's squash commits will land on (worktree runs only). */
+        baseBranch?: string | undefined;
+    };
+    /** A parallel SDD run reached a terminal state. */
+    'sdd.run.finished': {
+        runId: string;
+        deadlocked: boolean;
+        completed: number;
+        failed: number;
+        stopped: boolean;
+    };
+    /** A task began executing on a worker (carries who + which worktree). */
+    'sdd.task.started': {
+        runId: string;
+        taskId: string;
+        subagentId: string;
+        agentName: string;
+        worktreeBranch?: string | undefined;
+    };
+    /** A task finished successfully. */
+    'sdd.task.completed': {
+        runId: string;
+        taskId: string;
+        subagentId: string;
+        durationMs: number;
+    };
+    /** A task failed terminally (retries exhausted). */
+    'sdd.task.failed': {
+        runId: string;
+        taskId: string;
+        subagentId: string;
+        error: string;
+    };
+    /** A failed task was requeued for another attempt. */
+    'sdd.task.retrying': {
+        runId: string;
+        taskId: string;
+        attempt: number;
+        maxRetries: number;
+    };
+    /** A task's worker reported success but the post-task verification gate rejected it. */
+    'sdd.task.verification_failed': {
+        runId: string;
+        taskId: string;
+        reason: string;
+    };
+    /** A completed task's worktree could not be merged back into the base branch. */
+    'sdd.task.conflict': {
+        runId: string;
+        taskId: string;
+        conflictFiles: string[];
+    };
+    /** A completed task's worktree was squash-merged onto the base branch (sha = the run commit). */
+    'sdd.task.merged': {
+        runId: string;
+        taskId: string;
+        sha: string;
+    };
+    /** A task was split into sub-tasks (the parent becomes a completed container). */
+    'sdd.task.split': {
+        runId: string;
+        taskId: string;
+        subtaskIds: string[];
+    };
+    /** The supervisor made a decision about a failing/stuck task. */
+    'sdd.supervisor.decision': {
+        runId: string;
+        taskId: string;
+        action: 'retry' | 'reassign' | 'split' | 'fail';
+        rationale?: string | undefined;
+    };
+    /** A new wave of dependency-ready tasks began. */
+    'sdd.wave': {
+        runId: string;
+        wave: number;
+        batchSize: number;
+    };
+    /** No runnable tasks remain but some are still blocked — with the blocking chains. */
+    'sdd.deadlock': {
+        runId: string;
+        chains: Array<{
+            blocked: string;
+            blockedBy: string[];
+        }>;
+    };
+    /**
+     * Throttled full board snapshot composed by SddBoardProjector. `snapshot` is
+     * an `SddBoardSnapshot` (sdd/board-types) — typed `unknown` here so the kernel
+     * layer never imports from the higher `sdd/` layer (it sits below it in the
+     * DAG); consumers cast it back. The producer (SddBoardProjector) is typed.
+     */
+    'sdd.board.snapshot': {
+        runId: string;
+        snapshot: unknown;
+    };
     'mcp.server.connected': {
         name: string;
         toolCount: number;

package/dist/{config-rRS8yorV.d.ts → config-C8IYxlO8.d.ts}

@@ -430,6 +430,11 @@ interface ToolsConfig {
     iterationTimeoutMs: number;
     sessionTimeoutMs: number;
     perIterationOutputCapBytes: number;
+    /**
+     * Per-tool prose budget for the tool's top-level description and usage hint.
+     * Missing entries default to "extend".
+     */
+    descriptionMode?: ToolDescriptionModeConfig | undefined;
     /**
      * When true (default), the agent automatically extends its iteration
      * limit by 100 when hit. Set to false to require user confirmation.
@@ -444,6 +449,8 @@ interface ToolsConfig {
      */
     restrictToProjectRoot?: boolean | undefined;
 }
+type ToolDescriptionMode = 'extend' | 'simple';
+type ToolDescriptionModeConfig = Record<string, ToolDescriptionMode | undefined>;
 interface ProviderApiKey {
     /** Short human-readable label (e.g. "personal", "work", "rate-limit-backup"). */
     label: string;
@@ -896,4 +903,4 @@ interface ConfigStore {
     watch(cb: (next: Readonly<Config>, prev: Readonly<Config>) => void): () => void;
 }
 
-export { isContextWindowModeId as $, type AdaptiveConcurrencyConfig as A, type LogConfig as B, type ContextWindowAggressiveOn as C, DEFAULT_CONTEXT_WINDOW_MODE_ID as D, MAX_TUI_THINKING_WORD_LENGTH as E, type FeaturesConfig as F, type ModelRuntimeCacheConfig as G, type HookEvent as H, type InProcessHook as I, type ModelRuntimeConfig as J, type ModelRuntimeParametersConfig as K, type LaunchConfig as L, type ModelsRegistry as M, type ModelRuntimeReasoningConfig as N, type ModelsDevProvider as O, type ProviderConfig as P, type PluginConfig as Q, type ResolvedProvider as R, type ShellHook as S, type TokenSavingTier as T, type ProviderApiKey as U, type SessionLoggingConfig as V, type WireFamily as W, type SyncCategory as X, type ToolsConfig as Y, formatContextWindowModeList as Z, getContextWindowMode as _, type ModelsDevPayload as a, listContextWindowModes as a0, normalizeTokenSavingTier as a1, normalizeTuiThinkingWord as a2, resolveContextWindowPolicy as a3, type ResolvedModel as b, type MCPServerConfig as c, type ModelMatrixEntry as d, type ModelsDevModel as e, type HookMatcher as f, type HookEntry as g, type ContextWindowPolicy as h, type Config as i, type ConfigStore as j, type ConfigLoader as k, type SyncConfig as l, type HookInput as m, type HookOutcome as n, type AutonomyConfig as o, CONTEXT_WINDOW_MODES as p, type CircuitBreakerRuntimeConfig as q, type ContextConfig as r, type ContextWindowConfigLike as s, type ContextWindowMode as t, type ContextWindowModeId as u, type ContextWindowThresholds as v, type CustomModelDefinition as w, DEFAULT_TUI_THINKING_WORD as x, type HqClientConfig as y, type IndexingConfig as z };
+export { formatContextWindowModeList as $, type AdaptiveConcurrencyConfig as A, type LogConfig as B, type Config as C, DEFAULT_CONTEXT_WINDOW_MODE_ID as D, MAX_TUI_THINKING_WORD_LENGTH as E, type FeaturesConfig as F, type ModelRuntimeCacheConfig as G, type HookEvent as H, type InProcessHook as I, type ModelRuntimeConfig as J, type ModelRuntimeParametersConfig as K, type LaunchConfig as L, type ModelsRegistry as M, type ModelRuntimeReasoningConfig as N, type ModelsDevProvider as O, type ProviderConfig as P, type PluginConfig as Q, type ResolvedProvider as R, type ShellHook as S, type TokenSavingTier as T, type ProviderApiKey as U, type SessionLoggingConfig as V, type WireFamily as W, type SyncCategory as X, type ToolDescriptionMode as Y, type ToolDescriptionModeConfig as Z, type ToolsConfig as _, type ModelsDevPayload as a, getContextWindowMode as a0, isContextWindowModeId as a1, listContextWindowModes as a2, normalizeTokenSavingTier as a3, normalizeTuiThinkingWord as a4, resolveContextWindowPolicy as a5, type ResolvedModel as b, type MCPServerConfig as c, type ModelMatrixEntry as d, type ModelsDevModel as e, type HookMatcher as f, type HookEntry as g, type ContextWindowAggressiveOn as h, type ContextWindowPolicy as i, type ConfigStore as j, type ConfigLoader as k, type SyncConfig as l, type HookInput as m, type HookOutcome as n, type AutonomyConfig as o, CONTEXT_WINDOW_MODES as p, type CircuitBreakerRuntimeConfig as q, type ContextConfig as r, type ContextWindowConfigLike as s, type ContextWindowMode as t, type ContextWindowModeId as u, type ContextWindowThresholds as v, type CustomModelDefinition as w, DEFAULT_TUI_THINKING_WORD as x, type HqClientConfig as y, type IndexingConfig as z };

package/dist/coordination/index.d.ts

@@ -1,22 +1,22 @@
-import { E as EventBus, B as BrainArbiter, f as BrainDecisionOption, k as BrainRisk, h as BrainDecisionRequest, e as BrainDecision, i as BrainDecisionSource } from '../brain-etbcbRwV.js';
-export { g as BrainDecisionQueue, j as BrainFallback, D as DefaultBrainArbiter, l as DefaultBrainArbiterOptions, H as HumanEscalatingBrainArbiter, O as ObservableBrainArbiter, w as formatHumanPrompt } from '../brain-etbcbRwV.js';
-import { H as FleetManager, s as Director } from '../null-fleet-bus-DOGQcvrY.js';
-export { A as ACP_AGENTS, a as AGENTS_BY_PHASE, b as AGENT_CATALOG, c as ALL_AGENT_DEFINITIONS, d as ALL_FLEET_AGENTS, e as AUDIT_LOG_AGENT, f as AutoExtendCeiling, g as AutoExtendPolicy, B as BUG_HUNTER_AGENT, h as BugFinding, C as CollabBudgetConfig, i as CollabBudgetOverrides, j as CollabBudgetWarningPayload, k as CollabDebugReport, l as CollabSession, m as CollabSessionOptions, n as CreateDelegateToolOptions, o as CriticConcern, p as CriticEvaluation, D as DEFAULT_DIRECTOR_PREAMBLE, q as DEFAULT_SUBAGENT_BASELINE, r as DelegateHost, t as DirectorAlert, u as DirectorAlertLevel, v as DirectorCancelCollabPayload, w as DirectorPromptParts, x as DirectorSessionFactory, y as DirectorSessionFactoryOptions, F as FLEET_ROSTER, z as FLEET_ROSTER_BUDGETS, E as FLEET_ROSTER_WITHACP, G as FleetCostCapError, I as FleetManagerOptions, J as FleetRosterBudget, K as FleetSpawnBudgetError, L as ICoordinator, M as IFleetManager, N as LargeAnswerStore, O as NULL_FLEET_BUS, R as REFACTOR_PLANNER_AGENT, P as RefactorPhase, Q as RefactorPlan, S as SECURITY_SCANNER_AGENT, T as SharedFileEntry, U as SharedFileSnapshot, V as SubagentPromptParts, W as applyRosterBudget, X as attachAutoExtend, Y as composeDirectorPrompt, Z as composeSubagentPrompt, _ as createDelegateTool, $ as getAgentDefinition, a0 as makeAskResultTool, a1 as makeAskTool, a2 as makeAssignTool, a3 as makeAwaitTasksTool, a4 as makeCollabDebugTool, a5 as makeDirectorSessionFactory, a6 as makeFleetEmitTool, a7 as makeFleetHealthTool, a8 as makeFleetSessionTool, a9 as makeFleetStatusTool, aa as makeFleetUsageTool, ab as makeRollUpTool, ac as makeSpawnTool, ad as makeTerminateTool, ae as makeWorkCompleteTool, af as rosterSummaryFromConfigs } from '../null-fleet-bus-DOGQcvrY.js';
-import { b as AgentDefinition } from '../multi-agent-coordinator-jyimfo7D.js';
-export { T as AGENT_TOOL_PRESETS, c as AgentBudgetTier, d as AgentCapability, A as AgentPhase, e as DEFAULT_DISPATCH_ROLE, a as DefaultMultiAgentCoordinator, f as DispatchCandidate, D as DispatchClassifier, g as DispatchMethod, h as DispatchOptions, i as DispatchResult, H as HEAVY_BUDGET, L as LIGHT_BUDGET, M as MEDIUM_BUDGET, j as MultiAgentCoordinatorOptions, k as dispatchAgent, m as makeLLMClassifier, s as scoreAgents } from '../multi-agent-coordinator-jyimfo7D.js';
-import { F as FleetBus } from '../agent-subagent-runner-BZa_IEcd.js';
-export { h as AgentFactory, v as AgentFactoryResult, w as AgentRunnerOptions, x as BudgetExceededError, y as BudgetKind, z as BudgetLimits, E as BudgetNegotiationMode, G as BudgetThresholdDecision, H as BudgetThresholdHandler, I as BudgetThresholdSignal, J as BudgetUsage, L as DECISION_TIMEOUT_MS, N as FleetEvent, O as FleetHandler, i as FleetUsage, j as FleetUsageAggregator, Q as SubagentBudget, Y as SubagentUsageSnapshot, Z as TIMEOUT_PREEMPT_FRACTION, $ as makeAgentSubagentRunner, a0 as withDisabledToolFiltering } from '../agent-subagent-runner-BZa_IEcd.js';
-export { I as InMemoryAgentBridge, a as InMemoryBridgeTransport, c as createMessage } from '../agent-bridge-DFQYEeXf.js';
+import { E as EventBus, B as BrainArbiter, f as BrainDecisionOption, k as BrainRisk, h as BrainDecisionRequest, e as BrainDecision, i as BrainDecisionSource } from '../brain-BxN2k2HP.js';
+export { g as BrainDecisionQueue, j as BrainFallback, D as DefaultBrainArbiter, l as DefaultBrainArbiterOptions, H as HumanEscalatingBrainArbiter, O as ObservableBrainArbiter, w as formatHumanPrompt } from '../brain-BxN2k2HP.js';
+import { H as FleetManager, s as Director } from '../null-fleet-bus-C9rrgQwc.js';
+export { A as ACP_AGENTS, a as AGENTS_BY_PHASE, b as AGENT_CATALOG, c as ALL_AGENT_DEFINITIONS, d as ALL_FLEET_AGENTS, e as AUDIT_LOG_AGENT, f as AutoExtendCeiling, g as AutoExtendPolicy, B as BUG_HUNTER_AGENT, h as BugFinding, C as CollabBudgetConfig, i as CollabBudgetOverrides, j as CollabBudgetWarningPayload, k as CollabDebugReport, l as CollabSession, m as CollabSessionOptions, n as CreateDelegateToolOptions, o as CriticConcern, p as CriticEvaluation, D as DEFAULT_DIRECTOR_PREAMBLE, q as DEFAULT_SUBAGENT_BASELINE, r as DelegateHost, t as DirectorAlert, u as DirectorAlertLevel, v as DirectorCancelCollabPayload, w as DirectorPromptParts, x as DirectorSessionFactory, y as DirectorSessionFactoryOptions, F as FLEET_ROSTER, z as FLEET_ROSTER_BUDGETS, E as FLEET_ROSTER_WITHACP, G as FleetCostCapError, I as FleetManagerOptions, J as FleetRosterBudget, K as FleetSpawnBudgetError, L as ICoordinator, M as IFleetManager, N as LargeAnswerStore, O as NULL_FLEET_BUS, R as REFACTOR_PLANNER_AGENT, P as RefactorPhase, Q as RefactorPlan, S as SECURITY_SCANNER_AGENT, T as SharedFileEntry, U as SharedFileSnapshot, V as SubagentPromptParts, W as applyRosterBudget, X as attachAutoExtend, Y as composeDirectorPrompt, Z as composeSubagentPrompt, _ as createDelegateTool, $ as getAgentDefinition, a0 as makeAskResultTool, a1 as makeAskTool, a2 as makeAssignTool, a3 as makeAwaitTasksTool, a4 as makeCollabDebugTool, a5 as makeDirectorSessionFactory, a6 as makeFleetEmitTool, a7 as makeFleetHealthTool, a8 as makeFleetSessionTool, a9 as makeFleetStatusTool, aa as makeFleetUsageTool, ab as makeRollUpTool, ac as makeSpawnTool, ad as makeTerminateTool, ae as makeWorkCompleteTool, af as rosterSummaryFromConfigs } from '../null-fleet-bus-C9rrgQwc.js';
+import { b as AgentDefinition } from '../multi-agent-coordinator-q1skFeNP.js';
+export { T as AGENT_TOOL_PRESETS, c as AgentBudgetTier, d as AgentCapability, A as AgentPhase, e as DEFAULT_DISPATCH_ROLE, a as DefaultMultiAgentCoordinator, f as DispatchCandidate, D as DispatchClassifier, g as DispatchMethod, h as DispatchOptions, i as DispatchResult, H as HEAVY_BUDGET, L as LIGHT_BUDGET, M as MEDIUM_BUDGET, j as MultiAgentCoordinatorOptions, k as dispatchAgent, m as makeLLMClassifier, s as scoreAgents } from '../multi-agent-coordinator-q1skFeNP.js';
+import { F as FleetBus } from '../agent-subagent-runner-ehb4xGvd.js';
+export { h as AgentFactory, v as AgentFactoryResult, w as AgentRunnerOptions, x as BudgetExceededError, y as BudgetKind, z as BudgetLimits, E as BudgetNegotiationMode, G as BudgetThresholdDecision, H as BudgetThresholdHandler, I as BudgetThresholdSignal, J as BudgetUsage, L as DECISION_TIMEOUT_MS, N as FleetEvent, O as FleetHandler, i as FleetUsage, j as FleetUsageAggregator, Q as SubagentBudget, Y as SubagentUsageSnapshot, Z as TIMEOUT_PREEMPT_FRACTION, $ as makeAgentSubagentRunner, a0 as withDisabledToolFiltering } from '../agent-subagent-runner-ehb4xGvd.js';
+export { I as InMemoryAgentBridge, a as InMemoryBridgeTransport, c as createMessage } from '../agent-bridge-BZ2enORi.js';
 import { b as Mailbox, c as MailboxSendInput, M as MailboxMessage, d as MailboxQuery, e as MailboxAckInput, f as MailboxAckBatchInput, a as MailboxAgentStatus, A as AgentRegistrationInput, g as AgentHeartbeatInput, P as PurgeOptions, j as PurgeResult, C as ClientRegistrationInput, h as ClientHeartbeatInput, i as ClientStatus } from '../mailbox-types-Ct2hJq0P.js';
 export { k as MailboxMessageType, l as MailboxTaskContext, R as ReadReceipts, m as RegisteredAgent, n as normalizeRecipient } from '../mailbox-types-Ct2hJq0P.js';
-export { G as GlobalMailbox, aw as resolveProjectDir } from '../global-mailbox-DJ4EoRr0.js';
+export { G as GlobalMailbox, aw as resolveProjectDir } from '../global-mailbox-C9dsc9Y_.js';
 import { C as Context, T as Tool } from '../context-Dw55zZ_Q.js';
-import { A as AdaptiveConcurrencyConfig } from '../config-rRS8yorV.js';
+import { A as AdaptiveConcurrencyConfig } from '../config-C8IYxlO8.js';
 import 'node:events';
 import '../logger-B63L5bTg.js';
 import '../director-state-BfeCUbmk.js';
-import '../index-DWm_PE9L.js';
-import '../pipeline-Ckkn3AOA.js';
+import '../index-B7fHDt0B.js';
+import '../pipeline-CNVKuQDQ.js';
 import '../observability-D-HZN_mF.js';
 import '../permission-CC7XFYWG.js';
 import '../retry-policy-BV7nzeAd.js';

package/dist/coordination/index.js

@@ -4421,6 +4421,15 @@ Do not add prose, markdown, or code fences.`;
   };
 }
 
+// src/security/capabilities.ts
+var ToolCapabilities = {
+  /** Can spawn or manage subagents / multi-agent tasks. */
+  SUBAGENT_SPAWN: "subagent.spawn",
+  /** Can inspect fleet/subagent coordination state without mutating it. */
+  COORDINATION_FLEET_READ: "coordination.fleet.read",
+  /** Can read or write inter-agent mailbox messages. */
+  COORDINATION_MAIL: "coordination.mail"};
+
 // src/coordination/director-tools.ts
 function makeSpawnTool(director, roster) {
   const inputSchema = {
@@ -4447,6 +4456,7 @@ function makeSpawnTool(director, roster) {
     usageHint: "Pass `role` (matches the roster), `description` (smart dispatch to best agent), or `name` + `provider`/`model`. Returns `{ subagentId }`.",
     permission: "auto",
     mutating: false,
+    capabilities: [ToolCapabilities.SUBAGENT_SPAWN],
     inputSchema,
     async execute(input) {
       const i = input ?? {};
@@ -4525,6 +4535,7 @@ function makeAssignTool(director) {
     description: "Hand a task to a previously spawned subagent. Returns the task id.",
     permission: "auto",
     mutating: false,
+    capabilities: [ToolCapabilities.SUBAGENT_SPAWN],
     inputSchema,
     async execute(input) {
       const i = input;
@@ -4540,6 +4551,7 @@ function makeAwaitTasksTool(director) {
     description: "Block until every named task completes. Returns the array of TaskResult.",
     permission: "auto",
     mutating: false,
+    capabilities: [ToolCapabilities.COORDINATION_FLEET_READ],
     inputSchema: { type: "object", properties: { taskIds: { type: "array", items: { type: "string" }, description: "One or more task ids returned by `assign_task`." } }, required: ["taskIds"] },
     async execute(input) {
       const i = input;
@@ -4554,6 +4566,7 @@ function makeAskTool(director) {
     description: "Synchronously ask a subagent a question. Blocks until the subagent replies via the bridge.",
     permission: "auto",
     mutating: false,
+    capabilities: [ToolCapabilities.COORDINATION_FLEET_READ],
     inputSchema: {
       type: "object",
       properties: {
@@ -4589,6 +4602,7 @@ function makeAskResultTool(director) {
     description: "Retrieve a large `ask_subagent` response that was stored out-of-context (>2K chars). Returns the full stored value.",
     permission: "auto",
     mutating: false,
+    capabilities: [ToolCapabilities.COORDINATION_FLEET_READ],
     inputSchema: {
       type: "object",
       properties: {
@@ -4616,6 +4630,7 @@ function makeRollUpTool(director) {
     description: "Aggregate completed task results into a single formatted summary.",
     permission: "auto",
     mutating: false,
+    capabilities: [ToolCapabilities.COORDINATION_FLEET_READ],
     inputSchema: {
       type: "object",
       properties: {
@@ -4637,6 +4652,7 @@ function makeTerminateTool(director) {
     description: 'Forcibly abort a subagent. The subagent finishes its current iteration then exits with status "stopped".',
     permission: "auto",
     mutating: true,
+    capabilities: [ToolCapabilities.SUBAGENT_SPAWN],
     inputSchema: { type: "object", properties: { subagentId: { type: "string", description: "Subagent to abort." } }, required: ["subagentId"] },
     async execute(input) {
       const i = input;
@@ -4651,6 +4667,7 @@ function makeTerminateAllTool(director) {
     description: 'Forcibly stop every subagent in the fleet and drain the pending task queue. In-flight tasks are terminated mid-execution; pending tasks receive "aborted_by_parent" completion immediately. Use this when the fleet is wedged, looping, or you need a clean slate. Compare: work_complete stops spawning but lets running agents finish naturally.',
     permission: "auto",
     mutating: true,
+    capabilities: [ToolCapabilities.SUBAGENT_SPAWN],
     inputSchema: { type: "object", properties: {}, required: [] },
     async execute() {
       await director.terminateAll();
@@ -4664,6 +4681,7 @@ function makeFleetStatusTool(director) {
     description: "Snapshot of the fleet \u2014 every subagent's current status, coordinator counts (total/running/idle/stopped), pending task descriptions, and usage rollup.",
     permission: "auto",
     mutating: false,
+    capabilities: [ToolCapabilities.COORDINATION_FLEET_READ],
     inputSchema: { type: "object", properties: {}, required: [] },
     async execute() {
       const base = director.status();
@@ -4685,6 +4703,7 @@ function makeFleetUsageTool(director) {
     description: "Token + cost breakdown across the fleet, per-subagent and totals.",
     permission: "auto",
     mutating: false,
+    capabilities: [ToolCapabilities.COORDINATION_FLEET_READ],
     inputSchema: { type: "object", properties: {}, required: [] },
     async execute() {
       return director.snapshot();
@@ -4697,6 +4716,7 @@ function makeFleetSessionTool(director) {
     description: "Read a subagent's JSONL transcript and extract its last assistant text, stop reason, and tool-use count. Use this to see what a running or timed-out subagent actually produced.",
     permission: "auto",
     mutating: false,
+    capabilities: [ToolCapabilities.COORDINATION_FLEET_READ],
     inputSchema: {
       type: "object",
       properties: {
@@ -4723,6 +4743,7 @@ function makeFleetHealthTool(director) {
     description: "Per-subagent health report: budget pressure (pct of limits consumed), last activity timestamp, and current status. Use to decide whether to assign more work to a subagent or spawn a fresh one.",
     permission: "auto",
     mutating: false,
+    capabilities: [ToolCapabilities.COORDINATION_FLEET_READ],
     inputSchema: { type: "object", properties: {}, required: [] },
     async execute() {
       const status = director.status();
@@ -4753,6 +4774,7 @@ function makeCollabDebugTool(director) {
     description: "Start a collaborative debugging session: BugHunter, RefactorPlanner, and Critic run in parallel on the same target files. BugHunter finds bugs and emits bug.found events. RefactorPlanner listens for bug.found and emits refactor.plan events. Critic evaluates both and emits critic.evaluation events. Returns a structured report with overall verdict (approve / needs_revision / reject).",
     permission: "auto",
     mutating: false,
+    capabilities: [ToolCapabilities.SUBAGENT_SPAWN],
     inputSchema: {
       type: "object",
       properties: {
@@ -4816,6 +4838,7 @@ function makeFleetEmitTool(director) {
     description: "Emit a structured event on the FleetBus. Any subagent can emit any event type; the Director routes it to all listeners. Use it to stream findings, progress updates, or final results to other agents in real time.",
     permission: "auto",
     mutating: false,
+    capabilities: [ToolCapabilities.COORDINATION_FLEET_READ],
     inputSchema: {
       type: "object",
       properties: {
@@ -4848,6 +4871,7 @@ function makeWorkCompleteTool(director) {
     description: "Signal that the director is satisfied with the results and the fleet should wind down. After calling this, spawn_subagent will refuse with a budget error and assign_task will instantly complete any queued tasks as aborted. Running subagents finish naturally. Call terminate_subagent separately to stop specific subagents immediately.",
     permission: "auto",
     mutating: false,
+    capabilities: [ToolCapabilities.SUBAGENT_SPAWN],
     inputSchema: { type: "object", properties: {}, required: [] },
     async execute() {
       director.workComplete();
@@ -5883,14 +5907,15 @@ var SHADOW_AGENT = {
   id: "shadow-agent",
   name: "Shadow",
   role: "shadow-agent",
-  prompt: `You are the Shadow Agent \u2014 a silent background monitor for the WrongStack fleet.
+  prompt: `You are the Shadow Agent \u2014 a quiet, one-shot monitor for the WrongStack fleet.
 
-Your job is to observe, detect anomalies, and be ready to intervene \u2014 but only when commanded.
+Your job is to inspect the fleet when the host explicitly assigns a Shadow pass, detect anomalies, and be ready to intervene \u2014 but only when commanded.
 
 ## Core Responsibilities
 
-1. **Fleet Monitoring** (every 30s)
-   - Call \`fleet_status\` + \`fleet_health\` on each heartbeat
+1. **Fleet Monitoring** (host-assigned one-shot checks)
+   - The host assigns one-shot check tasks; it does not expect routine heartbeats
+   - On each assigned check, call \`fleet_status\` + \`fleet_health\`
    - Track what each agent is doing (task descriptions)
    - Detect stuck agents (>5min no events), idle agents, crashed agents
 
@@ -5914,31 +5939,30 @@ Your job is to observe, detect anomalies, and be ready to intervene \u2014 but o
    - \`hoop <agentId>\` \u2014 terminate specific agent
    - \`hoop all\` \u2014 terminate all running agents
    - \`shadow status\` \u2014 report current fleet snapshot
-   - \`shadow mute\` \u2014 pause heartbeat monitoring
-   - \`shadow resume\` \u2014 resume heartbeat monitoring
-   - \`shadow interval <ms>\` \u2014 change heartbeat interval
+   - \`shadow mute\` \u2014 pause anomaly reporting
+   - \`shadow resume\` \u2014 resume anomaly reporting
+   - \`shadow interval <ms>\` \u2014 update the legacy interval setting
    - \`shadow model <model-id>\` \u2014 change analysis model
 
 ## Operating Rules
 
-- **Silent by default**: Use DEBUG level logging unless anomaly detected
+- **Silent by default**: Do not send mail or status reports for healthy checks
 - **Deterministic**: Same state always produces same actions \u2014 no randomness
-- **Report on anomaly**: When anomaly detected, use \`mail_send\` to broadcast warning
+- **Report only when needed**: Use \`mail_send\` only for high/critical anomalies or explicit control replies
 - **Never auto-intervene**: Always report unless explicitly commanded
 - **Minimal footprint**: Small state, efficient snapshots
+- **One-shot lifecycle**: Finish the assigned check and stop; do not schedule follow-up work
 
 ## Startup Sequence
 
-1. Send broadcast: \`shadow:started { intervalMs, model, startTime }\`
-2. Subscribe to FleetBus for all relevant events
-3. Schedule heartbeat cron job at configured interval
-4. Wait for commands or anomalies
+1. Run one fleet snapshot with \`fleet_status\` + \`fleet_health\`
+2. Check \`mail_inbox\` for explicit control messages
+3. If healthy, do not send mail; final answer may be exactly \`shadow: quiet\`
 
 ## Shutdown Sequence
 
-1. Cancel all cron jobs (\`cron_cancel\`)
-2. Send broadcast: \`shadow:stopped { reason, finalState }\`
-3. Clean up FleetBus subscriptions`
+1. Return only anomalies, command results, or \`shadow: quiet\`
+2. The host stops this Shadow Agent after the assigned pass`
   // Budgets are set by the orchestrator per task — see fleet.ts header.
 };
 var CRITIC_AGENT = {
@@ -5993,8 +6017,13 @@ var FLEET_ROSTER_BUDGETS = {
   "refactor-planner": { timeoutMs: 7.5 * 60 * 60 * 1e3, maxIterations: 6e3, maxToolCalls: 18e3 },
   "security-scanner": { timeoutMs: 10 * 60 * 60 * 1e3, maxIterations: 8e3, maxToolCalls: 2e4 },
   "critic": { timeoutMs: 5 * 60 * 60 * 1e3, maxIterations: 4e3, maxToolCalls: 12e3 },
-  "shadow-agent": { timeoutMs: 24 * 60 * 60 * 1e3, maxIterations: 1e4, maxToolCalls: 5e3 },
-  // Long-running background monitor
+  "shadow-agent": {
+    idleTimeoutMs: DEFAULT_IDLE_TIMEOUT_MS,
+    maxIterations: 2e3,
+    maxToolCalls: 5e3,
+    maxTokens: 6e4,
+    maxCostUsd: 1
+  },
   ...Object.fromEntries(
     ALL_AGENT_DEFINITIONS.map((d) => [d.config.role, d.budget])
   )
@@ -7119,6 +7148,9 @@ var Director = class _Director {
   /** Snapshot of which subagent owns each task — drives state-checkpoint
    *  status updates without re-walking the manifest. */
   taskOwners = /* @__PURE__ */ new Map();
+  /** Infrastructure-owned task ids that should not appear in user-visible
+   *  manifest/session/checkpoint/rollup state. */
+  internalTaskIds = /* @__PURE__ */ new Set();
   /** Cumulative auto-extension grants per subagent (all budget kinds). Lets
    *  /fleet render "⚡ extended ×N" without replaying the event stream. */
   extendTotals = /* @__PURE__ */ new Map();
@@ -7232,17 +7264,21 @@ var Director = class _Director {
     this.fleetManager?.setCoordinator(this.coordinator);
     this.taskCompletedListener = (payload) => {
       const r = payload.result;
-      this.completed.set(r.taskId, r);
-      if (this.completed.size > _Director.MAX_COMPLETED) {
-        const toDelete = this.completed.size - _Director.MAX_COMPLETED;
-        const keys = [...this.completed.keys()].slice(0, toDelete);
-        for (const k of keys) this.completed.delete(k);
+      const internalTask = this.internalTaskIds.delete(r.taskId);
+      if (!internalTask) {
+        this.completed.set(r.taskId, r);
+        if (this.completed.size > _Director.MAX_COMPLETED) {
+          const toDelete = this.completed.size - _Director.MAX_COMPLETED;
+          const keys = [...this.completed.keys()].slice(0, toDelete);
+          for (const k of keys) this.completed.delete(k);
+        }
       }
       const waiter = this.taskWaiters.get(r.taskId);
       if (waiter) {
         waiter.resolve(r);
         this.taskWaiters.delete(r.taskId);
       }
+      if (internalTask) return;
       const title = this.taskDescriptions.get(r.taskId) ?? payload.task.description ?? r.taskId;
       const failed = r.status !== "success";
       const errorString = r.error ? `${r.error.kind}: ${r.error.message}` : void 0;
@@ -7912,6 +7948,23 @@ var Director = class _Director {
     this.scheduleManifest();
     return taskWithId.id;
   }
+  /**
+   * Assign infrastructure-owned work directly to the coordinator without
+   * manifest/session/checkpoint bookkeeping. The task still uses the normal
+   * subagent runner, budget, and completion events, but it is excluded from
+   * rollups and persisted fleet task history.
+   */
+  async assignInternal(task) {
+    const taskWithId = task.id ? task : { ...task, id: randomUUID() };
+    this.internalTaskIds.add(taskWithId.id);
+    try {
+      await this.coordinator.assign(taskWithId);
+    } catch (err) {
+      this.internalTaskIds.delete(taskWithId.id);
+      throw err;
+    }
+    return taskWithId.id;
+  }
   /**
    * Block until every task id resolves. Returns results in the same
    * order as the input. If any task hasn't completed by the time this
@@ -10151,7 +10204,6 @@ var FileSessionWriter = class _FileSessionWriter {
       }
       const writeFd = await fsp6.open(tmpPath, "w", 384);
       try {
-        let copied = 0;
         let readOffset = 0;
         while (readOffset < newlineAfterCheckpoint) {
           const toCopy = Math.min(CHUNK_SIZE, newlineAfterCheckpoint - readOffset);
@@ -10160,7 +10212,6 @@ var FileSessionWriter = class _FileSessionWriter {
           if (r === 0) break;
           await writeFd.write(copyBuf, 0, r);
           readOffset += r;
-          copied += r;
         }
         const raw = await fsp6.readFile(this.filePath);
         const tail = raw.subarray(newlineAfterCheckpoint).toString("utf8");
@@ -11968,6 +12019,7 @@ function makeMailboxTool(opts = {}) {
     category: "coordination",
     permission: "auto",
     mutating: true,
+    capabilities: [ToolCapabilities.COORDINATION_MAIL],
     inputSchema: {
       type: "object",
       properties: {
@@ -12231,6 +12283,7 @@ function makeMailSendTool(opts = {}) {
     category: "coordination",
     permission: "auto",
     mutating: true,
+    capabilities: [ToolCapabilities.COORDINATION_MAIL],
     inputSchema: {
       type: "object",
       properties: {
@@ -12290,6 +12343,7 @@ function makeMailInboxTool(opts = {}) {
     category: "coordination",
     permission: "auto",
     mutating: false,
+    capabilities: [ToolCapabilities.COORDINATION_MAIL],
     inputSchema: {
       type: "object",
       properties: {