@wrongstack/core 0.273.0 → 0.274.0

package/dist/{agent-bridge-BZ2enORi.d.ts → agent-bridge-DFo21wmY.d.ts}

@@ -1,4 +1,4 @@
-import { B as BridgeTransport, a as BridgeMessage, A as AgentBridge, b as AgentBridgeConfig } from './agent-subagent-runner-ehb4xGvd.js';
+import { B as BridgeTransport, a as BridgeMessage, A as AgentBridge, b as AgentBridgeConfig } from './agent-subagent-runner-BwmkIDEd.js';
 
 /**
  * In-memory pub/sub transport for agent-to-agent messaging.

package/dist/{agent-subagent-runner-ehb4xGvd.d.ts → agent-subagent-runner-BwmkIDEd.d.ts}

@@ -1,12 +1,12 @@
-import { c as ToolCallPipelinePayload, d as ToolWrapper, E as ExtensionRegistry, S as SystemPromptContributor, e as ToolRegistry, P as ProviderRegistry, A as AgentPipelines, f as ToolExecutorLike, g as AgentInit, h as AgentInput, R as RunResult } from './index-B7fHDt0B.js';
-import { C as Container, R as ReadonlyPipeline, a as Renderer } from './pipeline-CNVKuQDQ.js';
-import { E as EventBus, a as EventName, L as Listener } from './brain-BxN2k2HP.js';
-import { R as RetryPolicy, E as ErrorHandler } from './retry-policy-BV7nzeAd.js';
+import { c as ToolCallPipelinePayload, d as ToolWrapper, E as ExtensionRegistry, S as SystemPromptContributor, e as ToolRegistry, P as ProviderRegistry, A as AgentPipelines, f as ToolExecutorLike, g as AgentInit, h as AgentInput, R as RunResult } from './index-00KPKAlm.js';
+import { C as Container, R as ReadonlyPipeline, a as Renderer } from './pipeline-B-dpCFYS.js';
+import { E as EventBus, a as EventName, L as Listener } from './brain-gfZX3the.js';
+import { R as RetryPolicy, E as ErrorHandler } from './retry-policy-hYxsm10a.js';
 import { L as Logger } from './logger-B63L5bTg.js';
 import { T as Tracer } from './observability-D-HZN_mF.js';
-import { P as PermissionPolicy } from './permission-CC7XFYWG.js';
-import { U as Usage, C as Context, J as JSONSchema, c as Request, d as Response, i as ContentBlock, q as TextBlock, T as Tool, P as Provider, t as RunOptions } from './context-Dw55zZ_Q.js';
-import { W as WireFamily, H as HookEvent, f as HookMatcher, I as InProcessHook, C as Config } from './config-C8IYxlO8.js';
+import { P as PermissionPolicy } from './permission-Dgs3v-Xq.js';
+import { U as Usage, C as Context, J as JSONSchema, c as Request, d as Response, i as ContentBlock, q as TextBlock, T as Tool, P as Provider, t as RunOptions } from './context-DERiLofu.js';
+import { W as WireFamily, H as HookEvent, f as HookMatcher, I as InProcessHook, C as Config } from './config-BxcrDzri.js';
 
 /**
  * Single fleet-wide event with subagent attribution. Whatever a child

package/dist/{brain-BxN2k2HP.d.ts → brain-gfZX3the.d.ts}

@@ -1,4 +1,4 @@
-import { U as Usage, C as Context, l as ToolProgressEvent, T as Tool, m as ToolOutputMetadata } from './context-Dw55zZ_Q.js';
+import { U as Usage, C as Context, l as ToolProgressEvent, T as Tool, m as ToolOutputMetadata } from './context-DERiLofu.js';
 
 type MemoryScope = 'project-agents' | 'project-memory' | 'user-memory';
 type MemoryType = 'fact' | 'decision' | 'convention' | 'preference' | 'reference' | 'anti_pattern';
@@ -503,13 +503,16 @@ interface EventMap {
     };
     /**
      * Fired on every `iteration.completed`. UIs subscribe to render a live
-     * context-window fill bar per agent (e.g. "67% ████████░░"). The
-     * `load` fraction matches the threshold levels: 0–0.6 green, 0.6–0.75
-     * yellow, 0.75+ red.
+     * context-window fill bar per agent (e.g. "67% ████████░░"). `load` is
+     * clamped to 0..1 so every live surface renders at most 100%; diagnostics
+     * can still detect over-budget states from `tokens > maxContext` or
+     * `rawLoad`.
      */
     'ctx.pct': {
-        /** Fraction of maxContext currently in use (0–1+. Can exceed 1 when over budget). */
+        /** Fraction of maxContext currently in use, clamped to 0..1 for display. */
         load: number;
+        /** Unclamped fraction when available. Can exceed 1 when over budget. */
+        rawLoad?: number | undefined;
         /** Estimated total tokens (system + tools + messages). */
         tokens: number;
         /** Provider's max context window. */
@@ -781,7 +784,10 @@ interface EventMap {
      */
     'subagent.ctx_pct': {
         subagentId: string;
+        /** Fraction of maxContext currently in use, clamped to 0..1 for display. */
         load: number;
+        /** Unclamped fraction when available. Can exceed 1 when over budget. */
+        rawLoad?: number | undefined;
         tokens: number;
         maxContext: number;
     };

package/dist/{provider-model-resolve-DFd3IPpw.d.ts → codex-catalog-CooZ6mOl.d.ts}

@@ -1,7 +1,7 @@
 import { M as ModeStore, a as ModeConfig, b as Mode } from './mode-CZlO9iU1.js';
-import { P as Provider, M as Message } from './context-Dw55zZ_Q.js';
-import { M as MessageSelector, S as SelectorResult } from './selector-C4ORTOid.js';
-import { e as ModelsDevModel, R as ResolvedProvider } from './config-C8IYxlO8.js';
+import { P as Provider, M as Message } from './context-DERiLofu.js';
+import { M as MessageSelector, S as SelectorResult } from './selector-D21RjDIg.js';
+import { e as ModelsDevModel, R as ResolvedProvider } from './config-BxcrDzri.js';
 
 declare class DefaultModeStore implements ModeStore {
     private activeModeId;
@@ -76,6 +76,8 @@ declare class LLMSelector implements MessageSelector {
 interface ProviderModelDescriptor {
     id: string;
     name: string;
+    /** One-line capability blurb, when known (e.g. the Codex subscription models). */
+    description?: string | undefined;
     releaseDate?: string | undefined;
     contextWindow?: number | undefined;
     inputCost?: number | undefined;
@@ -104,4 +106,45 @@ declare function describeCatalogModel(m: ModelsDevModel): ProviderModelDescripto
  */
 declare function resolveProviderModelList(savedModels: string[] | undefined, catalog: ResolvedProvider | undefined): ProviderModelDescriptor[];
 
-export { DefaultModeStore as D, LLMSelector as L, type ModeLoaderOptions as M, type ProviderModelDescriptor as P, type LLMSelectorOptions as a, loadUserModes as b, describeCatalogModel as d, loadProjectModes as l, resolveProviderModelList as r };
+/**
+ * Offline **floor** for the ChatGPT "Sign in with ChatGPT" (`openai-codex`)
+ * models, mirroring what the official Codex CLI / ChatGPT model picker shows.
+ *
+ * Source-of-truth precedence (live path wins):
+ *  1. The curated overlay `packages/cli/data/providers.json` — provider
+ *     `openai-codex` — which is **synced from raw GitHub** + cached + bundled
+ *     offline by `DefaultModelsRegistry` (overlayUrl/overlayFile). Editing that
+ *     JSON and pushing updates every client without a code release; this is the
+ *     authoritative list whenever the registry overlay is wired (the CLI path).
+ *  2. This hardcoded table — the last-resort floor used where no overlay is
+ *     available (a standalone registry without the bundled file) and by the CLI
+ *     auth-menu login flow, which needs a synchronous id list.
+ *
+ * Keep this in lockstep with the `openai-codex` block in `providers.json`; the
+ * drift-guard test `packages/cli/tests/codex-catalog-overlay-sync.test.ts`
+ * asserts they agree.
+ *
+ * Layer note: this lives in `core` (not the CLI auth-menu) so the model-list
+ * resolver can read it without `core` depending on `cli`. The CLI's
+ * `FALLBACK_CODEX_MODELS` is derived from this list.
+ */
+interface CodexModelMeta {
+    /** The wire id sent to the backend and stored in config (e.g. `gpt-5.5`). */
+    id: string;
+    /** Human-readable display name shown in pickers. */
+    name: string;
+    /** One-line capability blurb, matching the official Codex picker copy. */
+    description: string;
+    /** The recommended / latest model — tagged "(current)" in the official UI. */
+    current?: boolean;
+}
+/**
+ * Current ChatGPT sign-in models, newest first. The first entry is the
+ * recommended default (`current`). Order is significant: callers that need a
+ * default model id use `CODEX_MODELS[0]`.
+ */
+declare const CODEX_MODELS: ReadonlyArray<CodexModelMeta>;
+/** Look up the canonical metadata for a Codex model id, or `undefined`. */
+declare function codexModelMeta(id: string): CodexModelMeta | undefined;
+
+export { CODEX_MODELS as C, DefaultModeStore as D, LLMSelector as L, type ModeLoaderOptions as M, type ProviderModelDescriptor as P, type CodexModelMeta as a, type LLMSelectorOptions as b, codexModelMeta as c, describeCatalogModel as d, loadUserModes as e, loadProjectModes as l, resolveProviderModelList as r };

package/dist/{compactor-72ug-ZRB.d.ts → compactor-riTOds0f.d.ts}

@@ -1,4 +1,4 @@
-import { C as Context } from './context-Dw55zZ_Q.js';
+import { C as Context } from './context-DERiLofu.js';
 
 interface CompactRepairReport {
     removedToolUses: string[];

package/dist/{config-C8IYxlO8.d.ts → config-BxcrDzri.d.ts}

@@ -1,4 +1,4 @@
-import { a as ReasoningConfig, n as Capabilities, h as Permission, o as ReasoningEffort, p as CacheTtl } from './context-Dw55zZ_Q.js';
+import { a as ReasoningConfig, n as Capabilities, h as Permission, o as ReasoningEffort, p as CacheTtl } from './context-DERiLofu.js';
 
 type ContextWindowModeId = 'balanced' | 'frugal' | 'deep' | 'archival';
 type ContextWindowAggressiveOn = 'hard' | 'soft' | 'warn';
@@ -139,6 +139,12 @@ interface ModelsDevModel {
     id: string;
     name: string;
     family?: string | undefined;
+    /**
+     * One-line capability blurb. Not part of the upstream models.dev schema —
+     * carried by our curated overlay (`packages/cli/data/providers.json`, synced
+     * from raw GitHub) for subscription models like openai-codex.
+     */
+    description?: string | undefined;
     attachment?: boolean | undefined;
     reasoning?: boolean | undefined;
     reasoningConfig?: ReasoningConfig | undefined;
@@ -448,6 +454,30 @@ interface ToolsConfig {
      * `/settings` ("Filesystem access").
      */
     restrictToProjectRoot?: boolean | undefined;
+    /**
+     * Per-command policy for the `exec` tool's allowlist. The tool ships a
+     * curated default allowlist of dev/build commands; this extends or trims it.
+     *
+     * SECURITY: `allow` EXPANDS what the agent may execute, so it is honored only
+     * from TRUSTED config (`~/.wrongstack/config.json`) — the config loader
+     * strips `tools.exec.allow` from the untrusted, repo-committed
+     * `<project>/.wrongstack/config.json`. `deny` only ever REMOVES commands, so
+     * it is honored from any source.
+     */
+    exec?: ExecToolConfig | undefined;
+}
+/** Allow/deny extension of the `exec` tool's built-in command allowlist. */
+interface ExecToolConfig {
+    /**
+     * Extra command names to add to the allowlist (e.g. `["make", "dotnet"]`).
+     * Trusted sources only — stripped from in-project repo config.
+     */
+    allow?: string[] | undefined;
+    /**
+     * Command names to remove from the allowlist. Honored from any source —
+     * removing a command can only narrow what runs, so it is always safe.
+     */
+    deny?: string[] | undefined;
 }
 type ToolDescriptionMode = 'extend' | 'simple';
 type ToolDescriptionModeConfig = Record<string, ToolDescriptionMode | undefined>;
@@ -640,8 +670,34 @@ interface FeaturesConfig {
     allowOutsideProjectRoot?: boolean | undefined;
 }
 interface AutonomyConfig {
+    /** Default autonomy mode at startup. Default: "off". */
+    defaultMode?: 'off' | 'suggest' | 'auto' | undefined;
     /** ms to wait before auto-proceeding in 'auto' mode. Default: 45000. */
     autoProceedDelayMs?: number | undefined;
+    /** Maximum consecutive auto-proceed turns before pausing. 0 = unlimited. Default: 50. */
+    autoProceedMaxIterations?: number | undefined;
+    /** Template used for YOLO+auto suggestions. Must include {{suggestion}}. */
+    autonomyNextPrompt?: string | undefined;
+    /** Animate the terminal/window title while the agent is active. Default: true. */
+    terminalTitleAnimation?: boolean | undefined;
+    /** Persisted YOLO preference mirrored into top-level config.yolo at runtime. Default: false. */
+    yolo?: boolean | undefined;
+    /** Stream fleet/subagent output into the main TUI chat. Default: true. */
+    streamFleet?: boolean | undefined;
+    /** Ring terminal bell when an agent run completes. Default: false. */
+    chime?: boolean | undefined;
+    /** Ask for confirmation before interrupt/exit. Default: true. */
+    confirmExit?: boolean | undefined;
+    /** Terminal mouse tracking preference. Default: false. */
+    mouseMode?: boolean | undefined;
+    /** Enable prompt refinement before sending. Default: true. */
+    enhance?: boolean | undefined;
+    /** Prompt-refinement preview countdown in ms. Default: 60000. */
+    enhanceDelayMs?: number | undefined;
+    /** Prompt-refinement language mode. Default: "original". */
+    enhanceLanguage?: 'original' | 'english' | undefined;
+    /** TUI statusline density. Default: "detailed". */
+    statuslineMode?: 'minimum' | 'detailed' | undefined;
     /** Single short word shown in the TUI rainbow working-state chip. Default: "thinking". */
     thinkingWord?: string | undefined;
 }
@@ -809,8 +865,8 @@ interface Config {
     debugStream?: boolean | undefined;
     /**
      * Where settings are persisted. 'global' → ~/.wrongstack/config.json
-     * (default). 'project' → ~/.wrongstack/projects/<slug>/config.local.json.
-     * When 'project', provider/model/autonomy/ux settings are saved per-project.
+     * (default). 'project' → <project>/.wrongstack/config.json.
+     * When 'project', safe settings are saved per-project.
      */
     configScope?: 'global' | 'project' | undefined;
     /** Automatic codebase symbol-index maintenance (session-start + live updates). */
@@ -903,4 +959,4 @@ interface ConfigStore {
     watch(cb: (next: Readonly<Config>, prev: Readonly<Config>) => void): () => void;
 }
 
-export { formatContextWindowModeList as $, type AdaptiveConcurrencyConfig as A, type LogConfig as B, type Config as C, DEFAULT_CONTEXT_WINDOW_MODE_ID as D, MAX_TUI_THINKING_WORD_LENGTH as E, type FeaturesConfig as F, type ModelRuntimeCacheConfig as G, type HookEvent as H, type InProcessHook as I, type ModelRuntimeConfig as J, type ModelRuntimeParametersConfig as K, type LaunchConfig as L, type ModelsRegistry as M, type ModelRuntimeReasoningConfig as N, type ModelsDevProvider as O, type ProviderConfig as P, type PluginConfig as Q, type ResolvedProvider as R, type ShellHook as S, type TokenSavingTier as T, type ProviderApiKey as U, type SessionLoggingConfig as V, type WireFamily as W, type SyncCategory as X, type ToolDescriptionMode as Y, type ToolDescriptionModeConfig as Z, type ToolsConfig as _, type ModelsDevPayload as a, getContextWindowMode as a0, isContextWindowModeId as a1, listContextWindowModes as a2, normalizeTokenSavingTier as a3, normalizeTuiThinkingWord as a4, resolveContextWindowPolicy as a5, type ResolvedModel as b, type MCPServerConfig as c, type ModelMatrixEntry as d, type ModelsDevModel as e, type HookMatcher as f, type HookEntry as g, type ContextWindowAggressiveOn as h, type ContextWindowPolicy as i, type ConfigStore as j, type ConfigLoader as k, type SyncConfig as l, type HookInput as m, type HookOutcome as n, type AutonomyConfig as o, CONTEXT_WINDOW_MODES as p, type CircuitBreakerRuntimeConfig as q, type ContextConfig as r, type ContextWindowConfigLike as s, type ContextWindowMode as t, type ContextWindowModeId as u, type ContextWindowThresholds as v, type CustomModelDefinition as w, DEFAULT_TUI_THINKING_WORD as x, type HqClientConfig as y, type IndexingConfig as z };
+export { type ToolsConfig as $, type AdaptiveConcurrencyConfig as A, type LogConfig as B, type Config as C, DEFAULT_CONTEXT_WINDOW_MODE_ID as D, type ExecToolConfig as E, type FeaturesConfig as F, MAX_TUI_THINKING_WORD_LENGTH as G, type HookEvent as H, type InProcessHook as I, type ModelRuntimeCacheConfig as J, type ModelRuntimeConfig as K, type LaunchConfig as L, type ModelsRegistry as M, type ModelRuntimeParametersConfig as N, type ModelRuntimeReasoningConfig as O, type ProviderConfig as P, type ModelsDevProvider as Q, type ResolvedProvider as R, type ShellHook as S, type TokenSavingTier as T, type PluginConfig as U, type ProviderApiKey as V, type WireFamily as W, type SessionLoggingConfig as X, type SyncCategory as Y, type ToolDescriptionMode as Z, type ToolDescriptionModeConfig as _, type ModelsDevPayload as a, formatContextWindowModeList as a0, getContextWindowMode as a1, isContextWindowModeId as a2, listContextWindowModes as a3, normalizeTokenSavingTier as a4, normalizeTuiThinkingWord as a5, resolveContextWindowPolicy as a6, type ResolvedModel as b, type MCPServerConfig as c, type ModelMatrixEntry as d, type ModelsDevModel as e, type HookMatcher as f, type HookEntry as g, type ContextWindowAggressiveOn as h, type ContextWindowPolicy as i, type ConfigStore as j, type ConfigLoader as k, type SyncConfig as l, type HookInput as m, type HookOutcome as n, type AutonomyConfig as o, CONTEXT_WINDOW_MODES as p, type CircuitBreakerRuntimeConfig as q, type ContextConfig as r, type ContextWindowConfigLike as s, type ContextWindowMode as t, type ContextWindowModeId as u, type ContextWindowThresholds as v, type CustomModelDefinition as w, DEFAULT_TUI_THINKING_WORD as x, type HqClientConfig as y, type IndexingConfig as z };

package/dist/{context-Dw55zZ_Q.d.ts → context-DERiLofu.d.ts}

@@ -606,6 +606,15 @@ interface Capabilities {
     jsonMode: boolean;
     reasoning: boolean;
     maxContext: number;
+    /**
+     * Maximum output tokens the model can produce in a single response.
+     * Used as the default for `Request.maxTokens` when the caller doesn't
+     * supply an explicit value — letting subagents run up to the model's
+     * native ceiling instead of a fixed 8192 cap. Omit (undefined) to fall
+     * back to a conservative default; populate per family in
+     * `family-capabilities.ts` once you know the spec.
+     */
+    maxOutput?: number | undefined;
     cacheControl: 'native' | 'auto' | 'none';
     /** Model accepts `top_k` / `topK` sampling parameter. */
     topK?: boolean | undefined;
@@ -633,7 +642,16 @@ interface Request {
     system?: TextBlock[] | undefined;
     messages: Message[];
     tools?: Tool[] | undefined;
-    maxTokens: number;
+    /**
+     * Cap on output tokens for this single response. Optional — when
+     * omitted, the provider adapter falls back to its own
+     * `capabilities.maxOutput` (which the catalog populates from
+     * `ModelsDevModel.limit.output`). If neither is available, the
+     * adapter applies a conservative 8192 safety net. Letting this stay
+     * undefined at the call site means callers like Chimera can hand the
+     * model its native output ceiling without hard-coding a number.
+     */
+    maxTokens?: number | undefined;
     temperature?: number | undefined;
     topP?: number | undefined;
     topK?: number | undefined;
@@ -1190,6 +1208,30 @@ interface SessionStore {
      * number of sessions indexed.
      */
     rebuildIndex?(): Promise<number>;
+    /**
+     * Streaming event-level search. Walks the JSONL once without buffering
+     * the whole file, calling `predicate(event, eventIndex, ts)` for each
+     * parsed event. Stops as soon as `limit` matches are collected (when
+     * provided) and yields only the matching events back to the caller.
+     *
+     * Implementations that don't support streaming MUST omit this method;
+     * the SessionReader fallback path will then call `load()` instead. The
+     * method is intentionally non-throwing for missing files — a missing
+     * session yields an empty array, matching `load()` semantics for ENOENT.
+     *
+     * @param id  Session id (with or without the `.jsonl` suffix).
+     * @param predicate  Returns true to keep the event in the result set.
+     * @param opts.limit  Maximum number of hits to keep. Omit for unbounded.
+     * @param opts.signal  Optional AbortSignal for early termination.
+     */
+    searchEvents?(id: string, predicate: (event: SessionEvent, eventIndex: number, ts: string) => boolean, opts?: {
+        limit?: number | undefined;
+        signal?: AbortSignal | undefined;
+    }): Promise<Array<{
+        event: SessionEvent;
+        eventIndex: number;
+        ts: string;
+    }>>;
 }
 interface SessionWriter {
     readonly id: string;
@@ -1383,6 +1425,10 @@ type StateChange = {
 } | {
     kind: 'messages_replaced';
     messages: readonly Message[];
+} | {
+    kind: 'message_updated';
+    index: number;
+    message: Message;
 } | {
     kind: 'todos_replaced';
     todos: readonly TodoItem[];
@@ -1421,6 +1467,19 @@ declare class ConversationState {
      */
     snapshot(): ReadonlyConversationState;
     appendMessage(message: Message): void;
+    /**
+     * Append a content block to the trailing user message's content array.
+     * Mutates only that one message (a single indexed assignment) — avoids
+     * the O(n) array copy + token-cache re-walk that `replaceMessages()`
+     * would do for a single-message edit. Used by the agent loop to fold
+     * btw-notes / queued-mailbox blocks into the conversation.
+     *
+     * The block is folded only into a *user* message (preserves
+     * user/assistant alternation between tool batches). Returns false when
+     * there is no trailing user message to fold into — callers should
+     * `appendMessage({ role: 'user', content: [block] })` instead.
+     */
+    appendBlockToLastUserMessage(block: ContentBlock): boolean;
     replaceMessages(messages: Message[]): void;
     replaceTodos(todos: TodoItem[]): void;
     setMeta(key: string, value: unknown): void;

package/dist/coordination/index.d.ts

@@ -1,25 +1,25 @@
-import { E as EventBus, B as BrainArbiter, f as BrainDecisionOption, k as BrainRisk, h as BrainDecisionRequest, e as BrainDecision, i as BrainDecisionSource } from '../brain-BxN2k2HP.js';
-export { g as BrainDecisionQueue, j as BrainFallback, D as DefaultBrainArbiter, l as DefaultBrainArbiterOptions, H as HumanEscalatingBrainArbiter, O as ObservableBrainArbiter, w as formatHumanPrompt } from '../brain-BxN2k2HP.js';
-import { H as FleetManager, s as Director } from '../null-fleet-bus-C9rrgQwc.js';
-export { A as ACP_AGENTS, a as AGENTS_BY_PHASE, b as AGENT_CATALOG, c as ALL_AGENT_DEFINITIONS, d as ALL_FLEET_AGENTS, e as AUDIT_LOG_AGENT, f as AutoExtendCeiling, g as AutoExtendPolicy, B as BUG_HUNTER_AGENT, h as BugFinding, C as CollabBudgetConfig, i as CollabBudgetOverrides, j as CollabBudgetWarningPayload, k as CollabDebugReport, l as CollabSession, m as CollabSessionOptions, n as CreateDelegateToolOptions, o as CriticConcern, p as CriticEvaluation, D as DEFAULT_DIRECTOR_PREAMBLE, q as DEFAULT_SUBAGENT_BASELINE, r as DelegateHost, t as DirectorAlert, u as DirectorAlertLevel, v as DirectorCancelCollabPayload, w as DirectorPromptParts, x as DirectorSessionFactory, y as DirectorSessionFactoryOptions, F as FLEET_ROSTER, z as FLEET_ROSTER_BUDGETS, E as FLEET_ROSTER_WITHACP, G as FleetCostCapError, I as FleetManagerOptions, J as FleetRosterBudget, K as FleetSpawnBudgetError, L as ICoordinator, M as IFleetManager, N as LargeAnswerStore, O as NULL_FLEET_BUS, R as REFACTOR_PLANNER_AGENT, P as RefactorPhase, Q as RefactorPlan, S as SECURITY_SCANNER_AGENT, T as SharedFileEntry, U as SharedFileSnapshot, V as SubagentPromptParts, W as applyRosterBudget, X as attachAutoExtend, Y as composeDirectorPrompt, Z as composeSubagentPrompt, _ as createDelegateTool, $ as getAgentDefinition, a0 as makeAskResultTool, a1 as makeAskTool, a2 as makeAssignTool, a3 as makeAwaitTasksTool, a4 as makeCollabDebugTool, a5 as makeDirectorSessionFactory, a6 as makeFleetEmitTool, a7 as makeFleetHealthTool, a8 as makeFleetSessionTool, a9 as makeFleetStatusTool, aa as makeFleetUsageTool, ab as makeRollUpTool, ac as makeSpawnTool, ad as makeTerminateTool, ae as makeWorkCompleteTool, af as rosterSummaryFromConfigs } from '../null-fleet-bus-C9rrgQwc.js';
-import { b as AgentDefinition } from '../multi-agent-coordinator-q1skFeNP.js';
-export { T as AGENT_TOOL_PRESETS, c as AgentBudgetTier, d as AgentCapability, A as AgentPhase, e as DEFAULT_DISPATCH_ROLE, a as DefaultMultiAgentCoordinator, f as DispatchCandidate, D as DispatchClassifier, g as DispatchMethod, h as DispatchOptions, i as DispatchResult, H as HEAVY_BUDGET, L as LIGHT_BUDGET, M as MEDIUM_BUDGET, j as MultiAgentCoordinatorOptions, k as dispatchAgent, m as makeLLMClassifier, s as scoreAgents } from '../multi-agent-coordinator-q1skFeNP.js';
-import { F as FleetBus } from '../agent-subagent-runner-ehb4xGvd.js';
-export { h as AgentFactory, v as AgentFactoryResult, w as AgentRunnerOptions, x as BudgetExceededError, y as BudgetKind, z as BudgetLimits, E as BudgetNegotiationMode, G as BudgetThresholdDecision, H as BudgetThresholdHandler, I as BudgetThresholdSignal, J as BudgetUsage, L as DECISION_TIMEOUT_MS, N as FleetEvent, O as FleetHandler, i as FleetUsage, j as FleetUsageAggregator, Q as SubagentBudget, Y as SubagentUsageSnapshot, Z as TIMEOUT_PREEMPT_FRACTION, $ as makeAgentSubagentRunner, a0 as withDisabledToolFiltering } from '../agent-subagent-runner-ehb4xGvd.js';
-export { I as InMemoryAgentBridge, a as InMemoryBridgeTransport, c as createMessage } from '../agent-bridge-BZ2enORi.js';
+import { E as EventBus, B as BrainArbiter, f as BrainDecisionOption, k as BrainRisk, h as BrainDecisionRequest, e as BrainDecision, i as BrainDecisionSource } from '../brain-gfZX3the.js';
+export { g as BrainDecisionQueue, j as BrainFallback, D as DefaultBrainArbiter, l as DefaultBrainArbiterOptions, H as HumanEscalatingBrainArbiter, O as ObservableBrainArbiter, w as formatHumanPrompt } from '../brain-gfZX3the.js';
+import { H as FleetManager, s as Director } from '../null-fleet-bus-B4ZUJYL6.js';
+export { A as ACP_AGENTS, a as AGENTS_BY_PHASE, b as AGENT_CATALOG, c as ALL_AGENT_DEFINITIONS, d as ALL_FLEET_AGENTS, e as AUDIT_LOG_AGENT, f as AutoExtendCeiling, g as AutoExtendPolicy, B as BUG_HUNTER_AGENT, h as BugFinding, C as CollabBudgetConfig, i as CollabBudgetOverrides, j as CollabBudgetWarningPayload, k as CollabDebugReport, l as CollabSession, m as CollabSessionOptions, n as CreateDelegateToolOptions, o as CriticConcern, p as CriticEvaluation, D as DEFAULT_DIRECTOR_PREAMBLE, q as DEFAULT_SUBAGENT_BASELINE, r as DelegateHost, t as DirectorAlert, u as DirectorAlertLevel, v as DirectorCancelCollabPayload, w as DirectorPromptParts, x as DirectorSessionFactory, y as DirectorSessionFactoryOptions, F as FLEET_ROSTER, z as FLEET_ROSTER_BUDGETS, E as FLEET_ROSTER_WITHACP, G as FleetCostCapError, I as FleetManagerOptions, J as FleetRosterBudget, K as FleetSpawnBudgetError, L as ICoordinator, M as IFleetManager, N as LargeAnswerStore, O as NULL_FLEET_BUS, R as REFACTOR_PLANNER_AGENT, P as RefactorPhase, Q as RefactorPlan, S as SECURITY_SCANNER_AGENT, T as SharedFileEntry, U as SharedFileSnapshot, V as SubagentPromptParts, W as applyRosterBudget, X as attachAutoExtend, Y as composeDirectorPrompt, Z as composeSubagentPrompt, _ as createDelegateTool, $ as getAgentDefinition, a0 as makeAskResultTool, a1 as makeAskTool, a2 as makeAssignTool, a3 as makeAwaitTasksTool, a4 as makeCollabDebugTool, a5 as makeDirectorSessionFactory, a6 as makeFleetEmitTool, a7 as makeFleetHealthTool, a8 as makeFleetSessionTool, a9 as makeFleetStatusTool, aa as makeFleetUsageTool, ab as makeRollUpTool, ac as makeSpawnTool, ad as makeTerminateTool, ae as makeWorkCompleteTool, af as rosterSummaryFromConfigs } from '../null-fleet-bus-B4ZUJYL6.js';
+import { b as AgentDefinition } from '../multi-agent-coordinator-CNx48Zoz.js';
+export { T as AGENT_TOOL_PRESETS, c as AgentBudgetTier, d as AgentCapability, A as AgentPhase, e as DEFAULT_DISPATCH_ROLE, a as DefaultMultiAgentCoordinator, f as DispatchCandidate, D as DispatchClassifier, g as DispatchMethod, h as DispatchOptions, i as DispatchResult, H as HEAVY_BUDGET, L as LIGHT_BUDGET, M as MEDIUM_BUDGET, j as MultiAgentCoordinatorOptions, k as dispatchAgent, m as makeLLMClassifier, s as scoreAgents } from '../multi-agent-coordinator-CNx48Zoz.js';
+import { F as FleetBus } from '../agent-subagent-runner-BwmkIDEd.js';
+export { h as AgentFactory, v as AgentFactoryResult, w as AgentRunnerOptions, x as BudgetExceededError, y as BudgetKind, z as BudgetLimits, E as BudgetNegotiationMode, G as BudgetThresholdDecision, H as BudgetThresholdHandler, I as BudgetThresholdSignal, J as BudgetUsage, L as DECISION_TIMEOUT_MS, N as FleetEvent, O as FleetHandler, i as FleetUsage, j as FleetUsageAggregator, Q as SubagentBudget, Y as SubagentUsageSnapshot, Z as TIMEOUT_PREEMPT_FRACTION, $ as makeAgentSubagentRunner, a0 as withDisabledToolFiltering } from '../agent-subagent-runner-BwmkIDEd.js';
+export { I as InMemoryAgentBridge, a as InMemoryBridgeTransport, c as createMessage } from '../agent-bridge-DFo21wmY.js';
 import { b as Mailbox, c as MailboxSendInput, M as MailboxMessage, d as MailboxQuery, e as MailboxAckInput, f as MailboxAckBatchInput, a as MailboxAgentStatus, A as AgentRegistrationInput, g as AgentHeartbeatInput, P as PurgeOptions, j as PurgeResult, C as ClientRegistrationInput, h as ClientHeartbeatInput, i as ClientStatus } from '../mailbox-types-Ct2hJq0P.js';
 export { k as MailboxMessageType, l as MailboxTaskContext, R as ReadReceipts, m as RegisteredAgent, n as normalizeRecipient } from '../mailbox-types-Ct2hJq0P.js';
-export { G as GlobalMailbox, aw as resolveProjectDir } from '../global-mailbox-C9dsc9Y_.js';
-import { C as Context, T as Tool } from '../context-Dw55zZ_Q.js';
-import { A as AdaptiveConcurrencyConfig } from '../config-C8IYxlO8.js';
+export { G as GlobalMailbox, aw as resolveProjectDir } from '../global-mailbox-Cr8TW4t_.js';
+import { C as Context, T as Tool } from '../context-DERiLofu.js';
+import { A as AdaptiveConcurrencyConfig } from '../config-BxcrDzri.js';
 import 'node:events';
 import '../logger-B63L5bTg.js';
 import '../director-state-BfeCUbmk.js';
-import '../index-B7fHDt0B.js';
-import '../pipeline-CNVKuQDQ.js';
+import '../index-00KPKAlm.js';
+import '../pipeline-B-dpCFYS.js';
 import '../observability-D-HZN_mF.js';
-import '../permission-CC7XFYWG.js';
-import '../retry-policy-BV7nzeAd.js';
+import '../permission-Dgs3v-Xq.js';
+import '../retry-policy-hYxsm10a.js';
 
 /** Phase 1 · Discovery — map the territory before any work begins. */
 declare const DISCOVERY_AGENTS: AgentDefinition[];
@@ -69,8 +69,12 @@ declare class DefaultMailbox implements Mailbox {
     private _byTo;
     /** Secondary index: sender → Set of messages (points into _messageCache). */
     private _byFrom;
+    /** Counts malformed JSONL lines skipped during parsing for observability. */
+    private _corruptionCount;
     constructor(sessionDir: string);
     get mailboxPath(): string;
+    /** Returns the count of malformed JSONL lines encountered during reads. */
+    get corruptionCount(): number;
     send(input: MailboxSendInput): Promise<MailboxMessage>;
     query(q: MailboxQuery): Promise<MailboxMessage[]>;
     ack(input: MailboxAckInput): Promise<MailboxMessage | null>;
@@ -94,6 +98,13 @@ declare class DefaultMailbox implements Mailbox {
     private _readNewMessagesOnly;
     /** Parse a JSONL string into MailboxMessage[], including migration. */
     private _parseLines;
+    /**
+     * Stat the mailbox file under the assumption that we are holding the
+     * file lock, and that a write to the file has just completed. Returns
+     * the (mtimeMs, size) pair, or (-1, -1) if the file does not exist
+     * (e.g. ackMany/purgeStale on a session that has never sent a message).
+     */
+    private _statUnderLockOrAbsent;
     private _readAllCached;
     private _setMessageCache;
     private _pushToCache;