@wrongstack/core 0.275.1 → 0.276.3

package/dist/sdd/index.js

@@ -24,6 +24,19 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
+// src/utils/assert-never.ts
+function assertNever(x, message) {
+  const err = new Error(
+    `Unhandled case: ${JSON.stringify(x)}`
+  );
+  err.name = "AssertNeverError";
+  throw err;
+}
+var init_assert_never = __esm({
+  "src/utils/assert-never.ts"() {
+  }
+});
+
 // src/utils/atomic-write.ts
 var atomic_write_exports = {};
 __export(atomic_write_exports, {
@@ -108,7 +121,12 @@ async function withFileLock(targetPath, fn, opts = {}) {
         continue;
       }
       if (Date.now() - started >= timeoutMs) {
-        throw new Error(`Timed out waiting for file lock: ${targetPath}`);
+        throw new FsError({
+          message: `Timed out waiting for file lock: ${targetPath}`,
+          code: "FS_ATOMIC_WRITE_FAILED",
+          path: targetPath,
+          context: { timeoutMs }
+        });
       }
       await new Promise((resolve4) => setTimeout(resolve4, 25));
     }
@@ -151,10 +169,303 @@ async function renameWithRetry(from, to) {
 var TRANSIENT_RENAME_CODES;
 var init_atomic_write = __esm({
   "src/utils/atomic-write.ts"() {
+    init_errors();
     TRANSIENT_RENAME_CODES = /* @__PURE__ */ new Set(["EPERM", "EBUSY", "EACCES", "ENOTEMPTY"]);
   }
 });
 
+// src/utils/child-env.ts
+function looksSecret(name) {
+  const upper = name.toUpperCase();
+  for (const p of SECRET_NAME_PARTS) {
+    if (upper.includes(p)) return true;
+  }
+  if (/(?:^|_)KEY(?:$|_|S$)/i.test(upper)) return true;
+  if (/API[_-]?KEY/i.test(upper)) return true;
+  if (/ACCESS[_-]?KEY/i.test(upper)) return true;
+  if (/SESSION[_-]?ID/i.test(upper) === false && /SESSION/i.test(upper)) {
+    return true;
+  }
+  return false;
+}
+function valueHasEmbeddedCredential(value) {
+  return /\b[a-z][a-z0-9+.-]*:\/\/[^/\s:@]*:[^/\s@]+@/i.test(value);
+}
+function sanitizeNodeOptions(value) {
+  const tokens = value.split(/\s+/).filter(Boolean);
+  const kept = [];
+  for (let i = 0; i < tokens.length; i++) {
+    const tok = tokens[i];
+    if (NODE_OPTIONS_INJECTION_FLAG_EQ.test(tok)) continue;
+    if (NODE_OPTIONS_INJECTION_FLAG.test(tok)) {
+      i++;
+      continue;
+    }
+    kept.push(tok);
+  }
+  return kept.join(" ");
+}
+function buildChildEnv(optsOrSessionId) {
+  const opts = {};
+  const hasOwn = Object.hasOwn(process.env, "WRONGSTACK_CHILD_ENV_PASSTHROUGH");
+  const legacyHasOwn = Object.hasOwn(process.env, "WRONGSTACK_BASH_ENV_PASSTHROUGH");
+  const passthrough = hasOwn && process.env["WRONGSTACK_CHILD_ENV_PASSTHROUGH"] === "1" || legacyHasOwn && process.env["WRONGSTACK_BASH_ENV_PASSTHROUGH"] === "1";
+  if (passthrough && !process.env["CI"]) {
+    console.warn(
+      "[agent] WARNING: WRONGSTACK_*_ENV_PASSTHROUGH=1 is active \u2014\n  all parent env vars (including API keys) forwarded to child processes.\n  Do not use on shared or multi-tenant systems."
+    );
+  }
+  const out = {};
+  const nodeEnvDefaulted = process.env["WRONGSTACK_NODE_ENV_DEFAULTED"] === "1";
+  for (const [k, v] of Object.entries(process.env)) {
+    if (v === void 0) continue;
+    if (nodeEnvDefaulted && (k === "NODE_ENV" || k === "WRONGSTACK_NODE_ENV_DEFAULTED")) continue;
+    if (passthrough) {
+      out[k] = v;
+      continue;
+    }
+    const upper = k.toUpperCase();
+    if (valueHasEmbeddedCredential(v)) continue;
+    if (ALLOWED_KEYS.has(upper)) {
+      out[k] = v;
+      continue;
+    }
+    if (looksSecret(upper)) continue;
+    if (upper === "NODE_OPTIONS") {
+      const sanitized = sanitizeNodeOptions(v);
+      if (sanitized) out[k] = sanitized;
+      continue;
+    }
+    if (upper.startsWith("NODE_") || upper.startsWith("NPM_") || upper.startsWith("PNPM_") || upper.startsWith("YARN_") || upper.startsWith("GIT_") || upper.startsWith("CI") || upper.startsWith("XDG_") || // Our own non-secret knobs (WRONGSTACK_HOME, WRONGSTACK_SESSION_ID, …).
+    // Secrets never live in WRONGSTACK_* env vars (they're in the encrypted
+    // vault). Forwarding keeps child wstack processes — e.g. ones spawned
+    // by the test suite — inside the same redirected global root.
+    upper.startsWith("WRONGSTACK_") || upper === "EDITOR" || upper === "VISUAL" || upper === "PAGER") {
+      out[k] = v;
+    }
+  }
+  if (opts.extra) {
+    Object.assign(out, opts.extra);
+  }
+  if (opts.sessionId) out["WRONGSTACK_SESSION_ID"] = opts.sessionId;
+  return out;
+}
+var ALLOWED_KEYS, SECRET_NAME_PARTS, NODE_OPTIONS_INJECTION_FLAG, NODE_OPTIONS_INJECTION_FLAG_EQ;
+var init_child_env = __esm({
+  "src/utils/child-env.ts"() {
+    ALLOWED_KEYS = /* @__PURE__ */ new Set([
+      "PATH",
+      "HOME",
+      "USER",
+      "USERNAME",
+      "LOGNAME",
+      "SHELL",
+      "LANG",
+      "LC_ALL",
+      "LC_CTYPE",
+      "TERM",
+      "TZ",
+      "TMPDIR",
+      "TEMP",
+      "TMP",
+      "PWD",
+      "OLDPWD",
+      "COMSPEC",
+      "SYSTEMROOT",
+      "SYSTEMDRIVE",
+      "WINDIR",
+      "PROGRAMFILES",
+      "PROGRAMFILES(X86)",
+      "PROGRAMDATA",
+      "APPDATA",
+      "LOCALAPPDATA",
+      "USERPROFILE",
+      "PUBLIC",
+      "PATHEXT"
+    ]);
+    SECRET_NAME_PARTS = [
+      "TOKEN",
+      "SECRET",
+      "PASSWORD",
+      "PASSWD",
+      "AUTH",
+      "CRED",
+      "BEARER",
+      "COOKIE",
+      "PRIVATE"
+    ];
+    NODE_OPTIONS_INJECTION_FLAG = /^(?:--require|-r|--import|--loader|--experimental-loader)$/;
+    NODE_OPTIONS_INJECTION_FLAG_EQ = /^(?:--require|-r|--import|--loader|--experimental-loader)=/;
+  }
+});
+
+// src/utils/error.ts
+function toErrorMessage(err) {
+  return err instanceof Error ? err.message : String(err);
+}
+var init_error = __esm({
+  "src/utils/error.ts"() {
+  }
+});
+
+// src/utils/expect-defined.ts
+function expectDefined(value, label) {
+  if (value === null || value === void 0) {
+    const err = new Error("Expected value to be defined");
+    err.name = "ExpectDefinedError";
+    throw err;
+  }
+  return value;
+}
+var init_expect_defined = __esm({
+  "src/utils/expect-defined.ts"() {
+  }
+});
+
+// src/utils/string.ts
+function truncate(s, max) {
+  return s.length <= max ? s : `${s.slice(0, max - 1)}\u2026`;
+}
+var init_string = __esm({
+  "src/utils/string.ts"() {
+  }
+});
+
+// src/types/errors.ts
+function formatContext(ctx) {
+  const parts = Object.entries(ctx).filter(([, v]) => v !== void 0).slice(0, 3).map(([k, v]) => `${k}=${String(v)}`);
+  return parts.length > 0 ? `[${parts.join(" ")}]` : "";
+}
+var ERROR_CODES, WrongStackError, AgentError, SddError, FsError;
+var init_errors = __esm({
+  "src/types/errors.ts"() {
+    ERROR_CODES = {
+      // Provider
+      PROVIDER_RATE_LIMITED: "PROVIDER_RATE_LIMITED",
+      PROVIDER_AUTH_FAILED: "PROVIDER_AUTH_FAILED",
+      PROVIDER_OVERLOADED: "PROVIDER_OVERLOADED",
+      PROVIDER_INVALID_REQUEST: "PROVIDER_INVALID_REQUEST",
+      PROVIDER_SERVER_ERROR: "PROVIDER_SERVER_ERROR",
+      PROVIDER_NETWORK_ERROR: "PROVIDER_NETWORK_ERROR",
+      PROVIDER_CONTEXT_OVERFLOW: "PROVIDER_CONTEXT_OVERFLOW",
+      // Tool
+      TOOL_NOT_FOUND: "TOOL_NOT_FOUND",
+      TOOL_PERMISSION_DENIED: "TOOL_PERMISSION_DENIED",
+      TOOL_EXECUTION_FAILED: "TOOL_EXECUTION_FAILED",
+      TOOL_TIMEOUT: "TOOL_TIMEOUT",
+      TOOL_INPUT_INVALID: "TOOL_INPUT_INVALID",
+      // Config
+      CONFIG_INVALID: "CONFIG_INVALID",
+      CONFIG_NOT_FOUND: "CONFIG_NOT_FOUND",
+      CONFIG_PARSE_FAILED: "CONFIG_PARSE_FAILED",
+      CONFIG_MIGRATION_NEEDED: "CONFIG_MIGRATION_NEEDED",
+      // Plugin
+      PLUGIN_LOAD_FAILED: "PLUGIN_LOAD_FAILED",
+      PLUGIN_API_MISMATCH: "PLUGIN_API_MISMATCH",
+      PLUGIN_MISSING_DEPENDENCY: "PLUGIN_MISSING_DEPENDENCY",
+      // Agent
+      AGENT_ITERATION_LIMIT: "AGENT_ITERATION_LIMIT",
+      AGENT_CONTEXT_OVERFLOW: "AGENT_CONTEXT_OVERFLOW",
+      AGENT_ABORTED: "AGENT_ABORTED",
+      AGENT_RUN_FAILED: "AGENT_RUN_FAILED",
+      // Session
+      SESSION_NOT_FOUND: "SESSION_NOT_FOUND",
+      SESSION_CORRUPTED: "SESSION_CORRUPTED",
+      SESSION_WRITE_FAILED: "SESSION_WRITE_FAILED",
+      // Container / Registry
+      CONTAINER_TOKEN_ALREADY_BOUND: "CONTAINER_TOKEN_ALREADY_BOUND",
+      CONTAINER_TOKEN_NOT_BOUND: "CONTAINER_TOKEN_NOT_BOUND",
+      CONTAINER_CIRCULAR_DEPENDENCY: "CONTAINER_CIRCULAR_DEPENDENCY",
+      REGISTRY_DUPLICATE: "REGISTRY_DUPLICATE",
+      REGISTRY_NOT_FOUND: "REGISTRY_NOT_FOUND",
+      REGISTRY_INVALID: "REGISTRY_INVALID",
+      // File system
+      FS_READ_FAILED: "FS_READ_FAILED",
+      FS_WRITE_FAILED: "FS_WRITE_FAILED",
+      FS_MKDIR_FAILED: "FS_MKDIR_FAILED",
+      FS_DELETE_FAILED: "FS_DELETE_FAILED",
+      FS_ATOMIC_WRITE_FAILED: "FS_ATOMIC_WRITE_FAILED",
+      // SDD (Spec-Driven Development)
+      SDD_VALIDATION_FAILED: "SDD_VALIDATION_FAILED",
+      SDD_PARSE_FAILED: "SDD_PARSE_FAILED",
+      SDD_INVALID_STATE: "SDD_INVALID_STATE",
+      SDD_NOT_READY: "SDD_NOT_READY",
+      // General
+      VALIDATION_ERROR: "VALIDATION_ERROR",
+      PARSE_FAILED: "PARSE_FAILED",
+      UNKNOWN: "UNKNOWN"
+    };
+    WrongStackError = class extends Error {
+      code;
+      subsystem;
+      severity;
+      recoverable;
+      context;
+      constructor(opts) {
+        super(opts.message, { cause: opts.cause });
+        this.name = "WrongStackError";
+        this.code = opts.code;
+        this.subsystem = opts.subsystem;
+        this.severity = opts.severity ?? "error";
+        this.recoverable = opts.recoverable ?? false;
+        this.context = opts.context;
+      }
+      /**
+       * Render a one-line user-facing description.
+       * Subclasses should override for domain-specific formatting.
+       */
+      describe() {
+        const ctx = this.context ? ` ${formatContext(this.context)}` : "";
+        return `${this.code}: ${this.message}${ctx}`;
+      }
+    };
+    AgentError = class extends WrongStackError {
+      constructor(opts) {
+        super({
+          message: opts.message,
+          code: opts.code,
+          subsystem: "agent",
+          severity: opts.code === ERROR_CODES.AGENT_ABORTED ? "warning" : "error",
+          recoverable: opts.recoverable ?? opts.code === ERROR_CODES.AGENT_ITERATION_LIMIT,
+          context: opts.context,
+          cause: opts.cause
+        });
+        this.name = "AgentError";
+      }
+    };
+    SddError = class extends WrongStackError {
+      constructor(opts) {
+        super({
+          message: opts.message,
+          code: opts.code,
+          subsystem: "sdd",
+          severity: opts.code === ERROR_CODES.SDD_PARSE_FAILED ? "warning" : "error",
+          recoverable: opts.code === ERROR_CODES.SDD_NOT_READY,
+          context: opts.context,
+          cause: opts.cause
+        });
+        this.name = "SddError";
+      }
+    };
+    FsError = class extends WrongStackError {
+      path;
+      constructor(opts) {
+        super({
+          message: opts.message,
+          code: opts.code,
+          subsystem: "fs",
+          severity: "error",
+          recoverable: opts.code !== ERROR_CODES.FS_READ_FAILED,
+          context: { path: opts.path, ...opts.context },
+          cause: opts.cause
+        });
+        this.name = "FsError";
+        this.path = opts.path;
+      }
+    };
+  }
+});
+
 // src/sdd/spec-parser.ts
 var SpecParser = class {
   parse(content) {
@@ -657,231 +968,9 @@ function topologicalSort(graph) {
   return result;
 }
 
-// src/utils/assert-never.ts
-function assertNever(x, message) {
-  const err = new Error(
-    `Unhandled case: ${JSON.stringify(x)}`
-  );
-  err.name = "AssertNeverError";
-  throw err;
-}
-
-// src/utils/child-env.ts
-var ALLOWED_KEYS = /* @__PURE__ */ new Set([
-  "PATH",
-  "HOME",
-  "USER",
-  "USERNAME",
-  "LOGNAME",
-  "SHELL",
-  "LANG",
-  "LC_ALL",
-  "LC_CTYPE",
-  "TERM",
-  "TZ",
-  "TMPDIR",
-  "TEMP",
-  "TMP",
-  "PWD",
-  "OLDPWD",
-  "COMSPEC",
-  "SYSTEMROOT",
-  "SYSTEMDRIVE",
-  "WINDIR",
-  "PROGRAMFILES",
-  "PROGRAMFILES(X86)",
-  "PROGRAMDATA",
-  "APPDATA",
-  "LOCALAPPDATA",
-  "USERPROFILE",
-  "PUBLIC",
-  "PATHEXT"
-]);
-var SECRET_NAME_PARTS = [
-  "TOKEN",
-  "SECRET",
-  "PASSWORD",
-  "PASSWD",
-  "AUTH",
-  "CRED",
-  "BEARER",
-  "COOKIE",
-  "PRIVATE"
-];
-function looksSecret(name) {
-  const upper = name.toUpperCase();
-  for (const p of SECRET_NAME_PARTS) {
-    if (upper.includes(p)) return true;
-  }
-  if (/(?:^|_)KEY(?:$|_|S$)/i.test(upper)) return true;
-  if (/API[_-]?KEY/i.test(upper)) return true;
-  if (/ACCESS[_-]?KEY/i.test(upper)) return true;
-  if (/SESSION[_-]?ID/i.test(upper) === false && /SESSION/i.test(upper)) {
-    return true;
-  }
-  return false;
-}
-function valueHasEmbeddedCredential(value) {
-  return /\b[a-z][a-z0-9+.-]*:\/\/[^/\s:@]*:[^/\s@]+@/i.test(value);
-}
-var NODE_OPTIONS_INJECTION_FLAG = /^(?:--require|-r|--import|--loader|--experimental-loader)$/;
-var NODE_OPTIONS_INJECTION_FLAG_EQ = /^(?:--require|-r|--import|--loader|--experimental-loader)=/;
-function sanitizeNodeOptions(value) {
-  const tokens = value.split(/\s+/).filter(Boolean);
-  const kept = [];
-  for (let i = 0; i < tokens.length; i++) {
-    const tok = tokens[i];
-    if (NODE_OPTIONS_INJECTION_FLAG_EQ.test(tok)) continue;
-    if (NODE_OPTIONS_INJECTION_FLAG.test(tok)) {
-      i++;
-      continue;
-    }
-    kept.push(tok);
-  }
-  return kept.join(" ");
-}
-function buildChildEnv(optsOrSessionId) {
-  const opts = {};
-  const hasOwn = Object.hasOwn(process.env, "WRONGSTACK_CHILD_ENV_PASSTHROUGH");
-  const legacyHasOwn = Object.hasOwn(process.env, "WRONGSTACK_BASH_ENV_PASSTHROUGH");
-  const passthrough = hasOwn && process.env["WRONGSTACK_CHILD_ENV_PASSTHROUGH"] === "1" || legacyHasOwn && process.env["WRONGSTACK_BASH_ENV_PASSTHROUGH"] === "1";
-  if (passthrough && !process.env["CI"]) {
-    console.warn(
-      "[agent] WARNING: WRONGSTACK_*_ENV_PASSTHROUGH=1 is active \u2014\n  all parent env vars (including API keys) forwarded to child processes.\n  Do not use on shared or multi-tenant systems."
-    );
-  }
-  const out = {};
-  const nodeEnvDefaulted = process.env["WRONGSTACK_NODE_ENV_DEFAULTED"] === "1";
-  for (const [k, v] of Object.entries(process.env)) {
-    if (v === void 0) continue;
-    if (nodeEnvDefaulted && (k === "NODE_ENV" || k === "WRONGSTACK_NODE_ENV_DEFAULTED")) continue;
-    if (passthrough) {
-      out[k] = v;
-      continue;
-    }
-    const upper = k.toUpperCase();
-    if (valueHasEmbeddedCredential(v)) continue;
-    if (ALLOWED_KEYS.has(upper)) {
-      out[k] = v;
-      continue;
-    }
-    if (looksSecret(upper)) continue;
-    if (upper === "NODE_OPTIONS") {
-      const sanitized = sanitizeNodeOptions(v);
-      if (sanitized) out[k] = sanitized;
-      continue;
-    }
-    if (upper.startsWith("NODE_") || upper.startsWith("NPM_") || upper.startsWith("PNPM_") || upper.startsWith("YARN_") || upper.startsWith("GIT_") || upper.startsWith("CI") || upper.startsWith("XDG_") || // Our own non-secret knobs (WRONGSTACK_HOME, WRONGSTACK_SESSION_ID, …).
-    // Secrets never live in WRONGSTACK_* env vars (they're in the encrypted
-    // vault). Forwarding keeps child wstack processes — e.g. ones spawned
-    // by the test suite — inside the same redirected global root.
-    upper.startsWith("WRONGSTACK_") || upper === "EDITOR" || upper === "VISUAL" || upper === "PAGER") {
-      out[k] = v;
-    }
-  }
-  if (opts.extra) {
-    Object.assign(out, opts.extra);
-  }
-  if (opts.sessionId) out["WRONGSTACK_SESSION_ID"] = opts.sessionId;
-  return out;
-}
-
-// src/utils/error.ts
-function toErrorMessage(err) {
-  return err instanceof Error ? err.message : String(err);
-}
-
-// src/utils/expect-defined.ts
-function expectDefined(value, label) {
-  if (value === null || value === void 0) {
-    const err = new Error("Expected value to be defined");
-    err.name = "ExpectDefinedError";
-    throw err;
-  }
-  return value;
-}
-
-// src/utils/string.ts
-function truncate(s, max) {
-  return s.length <= max ? s : `${s.slice(0, max - 1)}\u2026`;
-}
-
-// src/types/errors.ts
-var ERROR_CODES = {
-  // Provider
-  PROVIDER_RATE_LIMITED: "PROVIDER_RATE_LIMITED",
-  PROVIDER_AUTH_FAILED: "PROVIDER_AUTH_FAILED",
-  PROVIDER_OVERLOADED: "PROVIDER_OVERLOADED",
-  PROVIDER_INVALID_REQUEST: "PROVIDER_INVALID_REQUEST",
-  PROVIDER_SERVER_ERROR: "PROVIDER_SERVER_ERROR",
-  PROVIDER_NETWORK_ERROR: "PROVIDER_NETWORK_ERROR",
-  // Agent
-  AGENT_ITERATION_LIMIT: "AGENT_ITERATION_LIMIT",
-  AGENT_ABORTED: "AGENT_ABORTED",
-  AGENT_RUN_FAILED: "AGENT_RUN_FAILED",
-  // SDD (Spec-Driven Development)
-  SDD_VALIDATION_FAILED: "SDD_VALIDATION_FAILED",
-  SDD_PARSE_FAILED: "SDD_PARSE_FAILED",
-  SDD_INVALID_STATE: "SDD_INVALID_STATE",
-  SDD_NOT_READY: "SDD_NOT_READY"};
-var WrongStackError = class extends Error {
-  code;
-  subsystem;
-  severity;
-  recoverable;
-  context;
-  constructor(opts) {
-    super(opts.message, { cause: opts.cause });
-    this.name = "WrongStackError";
-    this.code = opts.code;
-    this.subsystem = opts.subsystem;
-    this.severity = opts.severity ?? "error";
-    this.recoverable = opts.recoverable ?? false;
-    this.context = opts.context;
-  }
-  /**
-   * Render a one-line user-facing description.
-   * Subclasses should override for domain-specific formatting.
-   */
-  describe() {
-    const ctx = this.context ? ` ${formatContext(this.context)}` : "";
-    return `${this.code}: ${this.message}${ctx}`;
-  }
-};
-function formatContext(ctx) {
-  const parts = Object.entries(ctx).filter(([, v]) => v !== void 0).slice(0, 3).map(([k, v]) => `${k}=${String(v)}`);
-  return parts.length > 0 ? `[${parts.join(" ")}]` : "";
-}
-var AgentError = class extends WrongStackError {
-  constructor(opts) {
-    super({
-      message: opts.message,
-      code: opts.code,
-      subsystem: "agent",
-      severity: opts.code === ERROR_CODES.AGENT_ABORTED ? "warning" : "error",
-      recoverable: opts.recoverable ?? opts.code === ERROR_CODES.AGENT_ITERATION_LIMIT,
-      context: opts.context,
-      cause: opts.cause
-    });
-    this.name = "AgentError";
-  }
-};
-var SddError = class extends WrongStackError {
-  constructor(opts) {
-    super({
-      message: opts.message,
-      code: opts.code,
-      subsystem: "sdd",
-      severity: opts.code === ERROR_CODES.SDD_PARSE_FAILED ? "warning" : "error",
-      recoverable: opts.code === ERROR_CODES.SDD_NOT_READY,
-      context: opts.context,
-      cause: opts.cause
-    });
-    this.name = "SddError";
-  }
-};
-
 // src/sdd/task-tracker.ts
+init_errors();
+init_error();
 var TaskTracker = class {
   constructor(opts) {
     this.opts = opts;
@@ -1239,6 +1328,7 @@ function compareByField(a, b, field) {
 }
 
 // src/sdd/task-flow.ts
+init_errors();
 var TaskFlow = class {
   constructor(opts) {
     this.opts = opts;
@@ -2089,13 +2179,22 @@ var SddBoardProjector = class _SddBoardProjector {
       this.timer = null;
     }
     const snap = this.build();
-    this.o.events.emit("sdd.board.snapshot", { runId: this.o.runId, snapshot: snap });
+    const sessionId = this.currentSessionId();
+    this.o.events.emit("sdd.board.snapshot", {
+      ...sessionId ? { sessionId } : {},
+      runId: this.o.runId,
+      snapshot: snap
+    });
     if (this.o.store) {
       const store = this.o.store;
       this.lastSave = this.lastSave.then(() => store.saveSnapshot(snap)).catch(() => {
       });
     }
   }
+  currentSessionId() {
+    const value = typeof this.o.sessionId === "function" ? this.o.sessionId() : this.o.sessionId;
+    return typeof value === "string" && value.length > 0 ? value : void 0;
+  }
 };
 
 // src/sdd/sdd-run-registry.ts
@@ -2113,6 +2212,9 @@ var SddRunRegistry = class {
 };
 
 // src/sdd/spec-builder.ts
+init_expect_defined();
+init_error();
+init_errors();
 function buildQuestioningPrompt(session, min, max) {
   const answered = session.answers.length;
   const remaining = Math.max(0, min - answered);
@@ -2930,6 +3032,12 @@ function isExplanatoryText(text) {
   return lower.startsWith("i'") || lower.startsWith("i will") || lower.startsWith("let me") || lower.startsWith("here's my") || lower.startsWith("here is my") || lower.startsWith("i'm going to") || lower.startsWith("first, let me") || lower.startsWith("sure") || lower.startsWith("of course") || lower.startsWith("okay") || lower.startsWith("ok,") || lower.startsWith("sounds good") || lower.startsWith("no problem") || text.split("\n").length < 3 && !text.includes(".");
 }
 
+// src/sdd/sdd-parallel-run.ts
+init_expect_defined();
+
+// src/coordination/agent-subagent-runner.ts
+init_errors();
+
 // src/coordination/subagent-budget.ts
 var TIMEOUT_PREEMPT_FRACTION = 0.85;
 var DECISION_TIMEOUT_MS = 6e4;
@@ -3001,6 +3109,7 @@ var SubagentBudget = class _SubagentBudget {
    */
   lastActivityTime = null;
   _onThreshold;
+  _sessionId;
   /**
    * Hard cap on how long `_negotiateExtension` waits for the coordinator to
    * respond before defaulting to 'stop'. Without this fallback an absent
@@ -3069,10 +3178,15 @@ var SubagentBudget = class _SubagentBudget {
   get mode() {
     return this._mode;
   }
-  constructor(limits = {}, mode = "auto") {
+  constructor(limits = {}, mode = "auto", options = {}) {
     this._mode = mode;
+    this._sessionId = options.sessionId;
     this.limits = { ...limits };
   }
+  currentSessionId() {
+    const value = typeof this._sessionId === "function" ? this._sessionId() : this._sessionId;
+    return typeof value === "string" && value.length > 0 ? value : void 0;
+  }
   start() {
     this.startTime = Date.now();
     this.lastActivityTime = this.startTime;
@@ -3240,7 +3354,9 @@ var SubagentBudget = class _SubagentBudget {
         resolve4(d);
       };
       const fallback = setTimeout(() => respond("stop"), _SubagentBudget.DECISION_TIMEOUT_MS);
+      const sessionId = this.currentSessionId();
       bus.emit("budget.threshold_reached", {
+        ...sessionId ? { sessionId } : {},
         kind: entry.kind,
         used: entry.used,
         limit: entry.limit,
@@ -3584,6 +3700,8 @@ function defaultFormatTaskInput(task) {
 }
 
 // src/types/provider.ts
+init_errors();
+init_string();
 var ProviderError = class extends WrongStackError {
   status;
   retryable;
@@ -3653,6 +3771,8 @@ function providerStatusToCode(status, type) {
 }
 
 // src/coordination/coordinator/error-classifier.ts
+init_errors();
+init_error();
 function classifySubagentError(err, hints = {}) {
   if (err instanceof AgentError && err.cause) {
     return classifySubagentError(err.cause, hints);
@@ -5461,6 +5581,7 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
   coordinatorId;
   config;
   runner;
+  sessionId;
   fleetBus;
   subagents = /* @__PURE__ */ new Map();
   /**
@@ -5495,6 +5616,11 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
     this.coordinatorId = config.coordinatorId;
     this.config = config;
     this.runner = options.runner;
+    this.sessionId = options.sessionId;
+  }
+  currentSessionId() {
+    const value = typeof this.sessionId === "function" ? this.sessionId() : this.sessionId;
+    return typeof value === "string" && value.length > 0 ? value : void 0;
   }
   /**
    * Replace the runner after construction. Used when the runner depends
@@ -5653,11 +5779,16 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
       status: s.status,
       assigned: s.context.parentBridge !== null
     }));
+    const sessionId = this.currentSessionId();
     this.fleetBus?.emit({
       subagentId: this.coordinatorId,
       ts: Date.now(),
       type: "coordinator.stats",
-      payload: { ...stats, subagentStatuses }
+      payload: {
+        ...sessionId ? { sessionId } : {},
+        ...stats,
+        subagentStatuses
+      }
     });
   }
   getStatus() {
@@ -5860,16 +5991,20 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
     const rawTimeoutMs = subagent.config.timeoutMs;
     const rawIdleTimeoutMs = subagent.config.idleTimeoutMs;
     const configWithRosterDefaults = applyRosterBudget(subagent.config);
-    const budget = new SubagentBudget({
-      maxIterations: rawMaxIterations ?? this.config.defaultBudget?.maxIterations ?? configWithRosterDefaults.maxIterations,
-      maxToolCalls: rawMaxToolCalls ?? this.config.defaultBudget?.maxToolCalls ?? configWithRosterDefaults.maxToolCalls,
-      maxTokens: rawMaxTokens ?? this.config.defaultBudget?.maxTokens ?? configWithRosterDefaults.maxTokens,
-      maxCostUsd: rawMaxCostUsd ?? this.config.defaultBudget?.maxCostUsd ?? configWithRosterDefaults.maxCostUsd,
-      // Wall-clock cap is opt-in (explicit config / defaultBudget only); the
-      // roster no longer supplies one. Idle is the default reaper.
-      timeoutMs: rawTimeoutMs ?? this.config.defaultBudget?.timeoutMs ?? configWithRosterDefaults.timeoutMs,
-      idleTimeoutMs: rawIdleTimeoutMs ?? this.config.defaultBudget?.idleTimeoutMs ?? configWithRosterDefaults.idleTimeoutMs
-    });
+    const budget = new SubagentBudget(
+      {
+        maxIterations: rawMaxIterations ?? this.config.defaultBudget?.maxIterations ?? configWithRosterDefaults.maxIterations,
+        maxToolCalls: rawMaxToolCalls ?? this.config.defaultBudget?.maxToolCalls ?? configWithRosterDefaults.maxToolCalls,
+        maxTokens: rawMaxTokens ?? this.config.defaultBudget?.maxTokens ?? configWithRosterDefaults.maxTokens,
+        maxCostUsd: rawMaxCostUsd ?? this.config.defaultBudget?.maxCostUsd ?? configWithRosterDefaults.maxCostUsd,
+        // Wall-clock cap is opt-in (explicit config / defaultBudget only); the
+        // roster no longer supplies one. Idle is the default reaper.
+        timeoutMs: rawTimeoutMs ?? this.config.defaultBudget?.timeoutMs ?? configWithRosterDefaults.timeoutMs,
+        idleTimeoutMs: rawIdleTimeoutMs ?? this.config.defaultBudget?.idleTimeoutMs ?? configWithRosterDefaults.idleTimeoutMs
+      },
+      "auto",
+      { sessionId: () => this.currentSessionId() }
+    );
     subagent.activeBudget = budget;
     if (!this.runner) {
       return;
@@ -5972,7 +6107,9 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
                 resolveDecision(d);
               };
               const fallback = setTimeout(() => resolve4("stop"), DECISION_TIMEOUT_MS);
+              const sessionId = this.currentSessionId();
               budget._events?.emit("budget.threshold_reached", {
+                ...sessionId ? { sessionId } : {},
                 kind: "timeout",
                 used,
                 limit,
@@ -6006,7 +6143,9 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
         const wallExceeded = wallLimit !== void 0 && elapsed >= wallLimit;
         const idleExceeded = idleLimit !== void 0 && budget.idleMs() >= idleLimit;
         if (idleExceeded && !wallExceeded) {
+          const sessionId = this.currentSessionId();
           budget._events?.emit("budget.threshold_reached", {
+            ...sessionId ? { sessionId } : {},
             kind: "idle_timeout",
             used: budget.idleMs(),
             limit: idleLimit ?? 0,
@@ -6214,6 +6353,9 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
   }
 };
 
+// src/sdd/sdd-parallel-run.ts
+init_errors();
+
 // src/sdd/sdd-task-decomposer.ts
 var SddTaskDecomposer = class {
   constructor(tracker, _graph, opts = {}) {
@@ -6332,6 +6474,7 @@ var SddParallelRun = class {
     this.maxFailedSweeps = Math.max(0, opts.maxFailedRetrySweeps ?? 2);
     this.runId = opts.runId ?? `sdd-${randomUUID().slice(0, 8)}`;
     this.events = opts.events;
+    this.sessionIdSource = opts.sessionId;
     this.maxTotalWaves = opts.maxTotalWaves ?? opts.graph.nodes.size * (this.maxRetries + 2) + 10;
     this.maxWallClockMs = opts.maxWallClockMs;
     this.maxRecoveryRounds = Math.max(0, opts.maxRecoveryRounds ?? 0);
@@ -6360,6 +6503,7 @@ var SddParallelRun = class {
   retryMap = /* @__PURE__ */ new Map();
   runId;
   events;
+  sessionIdSource;
   maxTotalWaves;
   maxWallClockMs;
   maxRecoveryRounds;
@@ -6392,7 +6536,15 @@ var SddParallelRun = class {
   round = 0;
   /** Type-safe emit on the optional EventBus (no-op when unwired). */
   emit(event, payload) {
-    this.events?.emit(event, payload);
+    const sessionId = this.currentSessionId();
+    this.events?.emit(
+      event,
+      sessionId ? { ...payload, sessionId } : payload
+    );
+  }
+  currentSessionId() {
+    const value = typeof this.sessionIdSource === "function" ? this.sessionIdSource() : this.sessionIdSource;
+    return typeof value === "string" && value.length > 0 ? value : void 0;
   }
   // -------------------------------------------------------------------
   // Public API
@@ -7231,6 +7383,7 @@ function startSddRun(opts) {
     graph: opts.graph,
     agent: opts.agent,
     projectRoot: opts.projectRoot,
+    sessionId: opts.sessionId,
     parallelSlots: opts.parallelSlots,
     taskTimeoutMs: opts.taskTimeoutMs,
     taskIdleTimeoutMs: opts.taskIdleTimeoutMs,
@@ -7253,6 +7406,7 @@ function startSddRun(opts) {
     tracker: opts.tracker,
     events: opts.events,
     store: opts.boardStore,
+    sessionId: opts.sessionId,
     specId: opts.graph.specId,
     defaultModel: opts.defaultModel,
     defaultProvider: opts.defaultProvider,
@@ -7327,10 +7481,15 @@ function startSddRun(opts) {
     stop: () => run.stop()
   };
 }
+
+// src/worktree/worktree-manager.ts
+init_child_env();
+init_error();
 var MAX_SLUG = 40;
 var WorktreeManager = class {
   projectRoot;
   events;
+  sessionIdSource;
   gitBin;
   runGit;
   /** Keyed by ownerId. */
@@ -7339,6 +7498,7 @@ var WorktreeManager = class {
   constructor(opts) {
     this.projectRoot = resolve(opts.projectRoot);
     this.events = opts.events;
+    this.sessionIdSource = opts.sessionId;
     this.gitBin = opts.gitBin ?? "git";
     this.runGit = opts.run ?? ((args, cwd) => this.defaultRun(args, cwd));
   }
@@ -7932,7 +8092,15 @@ ${check.stderr}`);
     if (patch) Object.assign(handle, patch);
   }
   emit(event, payload) {
-    this.events?.emit(event, payload);
+    const sessionId = this.currentSessionId();
+    this.events?.emit(
+      event,
+      sessionId && payload && typeof payload === "object" ? { ...payload, sessionId } : payload
+    );
+  }
+  currentSessionId() {
+    const value = typeof this.sessionIdSource === "function" ? this.sessionIdSource() : this.sessionIdSource;
+    return typeof value === "string" && value.length > 0 ? value : void 0;
   }
   defaultRun(args, cwd) {
     return new Promise((res) => {
@@ -8206,6 +8374,7 @@ function templateToMarkdown(template, title) {
 }
 
 // src/sdd/task-visualizer.ts
+init_string();
 var STATUS_ICON = {
   pending: "\u25CB",
   in_progress: "\u25D0",
@@ -8357,6 +8526,7 @@ function renderSpecAnalysis(spec, analysis) {
 }
 
 // src/sdd/critical-path.ts
+init_expect_defined();
 function analyzeCriticalPath(graph) {
   const nodes = Array.from(graph.nodes.values());
   const topoOrder = topologicalSort(graph);
@@ -8528,6 +8698,7 @@ function computeParallelGroups(graph, blockedByMap) {
 }
 
 // src/sdd/spec-versioning.ts
+init_assert_never();
 var SpecVersioning = class {
   versions = /* @__PURE__ */ new Map();
   /** Record a new version of a spec. */