@wrongstack/core 0.284.0 → 0.285.0

package/dist/coordination/index.js

@@ -1,29 +1,22 @@
-import { randomUUID, createHash, randomBytes } from 'crypto';
-import * as fsp9 from 'fs/promises';
-import * as path9 from 'path';
-import { isAbsolute, resolve } from 'path';
-import * as os from 'os';
-import { hostname } from 'os';
-import { readFileSync, statSync, createReadStream, openSync, writeSync, fsyncSync, closeSync } from 'fs';
-import { fileURLToPath } from 'url';
-import { EventEmitter } from 'events';
-import { listReadyTasks, claimReadyTask, updateTaskAssignment } from '@wrongstack/kanban';
-import { createInterface } from 'readline';
-import { execFileSync, spawn } from 'child_process';
-
 // src/coordination/agent-bridge.ts
+import { randomUUID } from "node:crypto";
+
+// src/utils/atomic-write.ts
+import { randomBytes } from "node:crypto";
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
 async function atomicWrite(targetPath, content, opts = {}) {
-  const dir = path9.dirname(targetPath);
-  await fsp9.mkdir(dir, { recursive: true });
-  const tmp = path9.join(dir, `.${path9.basename(targetPath)}.${randomBytes(6).toString("hex")}.tmp`);
+  const dir = path.dirname(targetPath);
+  await fs.mkdir(dir, { recursive: true });
+  const tmp = path.join(dir, `.${path.basename(targetPath)}.${randomBytes(6).toString("hex")}.tmp`);
   try {
     if (typeof content === "string") {
-      await fsp9.writeFile(tmp, content, { flag: "wx", encoding: opts.encoding ?? "utf8" });
+      await fs.writeFile(tmp, content, { flag: "wx", encoding: opts.encoding ?? "utf8" });
     } else {
-      await fsp9.writeFile(tmp, content, { flag: "wx" });
+      await fs.writeFile(tmp, content, { flag: "wx" });
     }
     try {
-      const fh = await fsp9.open(tmp, "r+");
+      const fh = await fs.open(tmp, "r+");
       try {
         await fh.sync();
       } finally {
@@ -33,56 +26,56 @@ async function atomicWrite(targetPath, content, opts = {}) {
     }
     let mode;
     try {
-      const stat9 = await fsp9.stat(targetPath);
+      const stat9 = await fs.stat(targetPath);
       mode = stat9.mode & 511;
     } catch {
       mode = opts.mode;
     }
     if (mode !== void 0) {
-      await fsp9.chmod(tmp, mode);
+      await fs.chmod(tmp, mode);
     }
     await renameWithRetry(tmp, targetPath);
     if (mode !== void 0 && process.platform === "win32") {
       try {
-        await fsp9.chmod(targetPath, mode);
+        await fs.chmod(targetPath, mode);
       } catch {
       }
     }
   } catch (err) {
     try {
-      await fsp9.unlink(tmp);
+      await fs.unlink(tmp);
     } catch {
     }
     throw err;
   }
 }
 async function ensureDir(dir) {
-  await fsp9.mkdir(dir, { recursive: true });
+  await fs.mkdir(dir, { recursive: true });
 }
 async function withFileLock(targetPath, fn, opts = {}) {
-  const dir = path9.dirname(targetPath);
-  await fsp9.mkdir(dir, { recursive: true });
-  const lockPath = path9.join(dir, `.${path9.basename(targetPath)}.lock`);
+  const dir = path.dirname(targetPath);
+  await fs.mkdir(dir, { recursive: true });
+  const lockPath = path.join(dir, `.${path.basename(targetPath)}.lock`);
   const timeoutMs = opts.timeoutMs ?? 5e3;
   const staleMs = opts.staleMs ?? 3e4;
   const started = Date.now();
   let handle;
   for (; ; ) {
     try {
-      handle = await fsp9.open(lockPath, "wx");
+      handle = await fs.open(lockPath, "wx");
       await handle.writeFile(`${process.pid}:${Date.now()}`);
       break;
     } catch (err) {
       const code = err.code;
       if (code === "ENOENT") {
-        await fsp9.mkdir(dir, { recursive: true });
+        await fs.mkdir(dir, { recursive: true });
         continue;
       }
       if (code !== "EEXIST") throw err;
       try {
-        const stat9 = await fsp9.stat(lockPath);
+        const stat9 = await fs.stat(lockPath);
         if (Date.now() - stat9.mtimeMs > staleMs) {
-          await fsp9.unlink(lockPath);
+          await fs.unlink(lockPath);
           continue;
         }
       } catch {
@@ -107,7 +100,7 @@ async function withFileLock(targetPath, fn, opts = {}) {
     } catch {
     }
     try {
-      await fsp9.unlink(lockPath);
+      await fs.unlink(lockPath);
     } catch {
     }
   }
@@ -115,14 +108,14 @@ async function withFileLock(targetPath, fn, opts = {}) {
 var TRANSIENT_RENAME_CODES = /* @__PURE__ */ new Set(["EPERM", "EBUSY", "EACCES", "ENOTEMPTY"]);
 async function renameWithRetry(from, to) {
   if (process.platform !== "win32") {
-    await fsp9.rename(from, to);
+    await fs.rename(from, to);
     return;
   }
   const delays = [10, 25, 60, 120, 250];
   let lastErr;
   for (let i = 0; i <= delays.length; i++) {
     try {
-      await fsp9.rename(from, to);
+      await fs.rename(from, to);
       return;
     } catch (err) {
       lastErr = err;
@@ -210,8 +203,9 @@ function sanitizeNodeOptions(value) {
   }
   return kept.join(" ");
 }
+var gitIdentity = null;
 function buildChildEnv(optsOrSessionId) {
-  const opts = {};
+  const opts = typeof optsOrSessionId === "string" ? { sessionId: optsOrSessionId } : optsOrSessionId ?? {};
   const hasOwn = Object.hasOwn(process.env, "WRONGSTACK_CHILD_ENV_PASSTHROUGH");
   const legacyHasOwn = Object.hasOwn(process.env, "WRONGSTACK_BASH_ENV_PASSTHROUGH");
   const passthrough = hasOwn && process.env["WRONGSTACK_CHILD_ENV_PASSTHROUGH"] === "1" || legacyHasOwn && process.env["WRONGSTACK_BASH_ENV_PASSTHROUGH"] === "1";
@@ -249,6 +243,16 @@ function buildChildEnv(optsOrSessionId) {
       out[k] = v;
     }
   }
+  if (gitIdentity) {
+    if (gitIdentity.name) {
+      out["GIT_AUTHOR_NAME"] = gitIdentity.name;
+      out["GIT_COMMITTER_NAME"] = gitIdentity.name;
+    }
+    if (gitIdentity.email) {
+      out["GIT_AUTHOR_EMAIL"] = gitIdentity.email;
+      out["GIT_COMMITTER_EMAIL"] = gitIdentity.email;
+    }
+  }
   if (opts.extra) {
     Object.assign(out, opts.extra);
   }
@@ -264,12 +268,16 @@ function toErrorMessage(err) {
 // src/utils/expect-defined.ts
 function expectDefined(value, label) {
   if (value === null || value === void 0) {
-    const err = new Error("Expected value to be defined");
+    const err = new Error(label ? `Expected ${label} to be defined` : "Expected value to be defined");
     err.name = "ExpectDefinedError";
     throw err;
   }
   return value;
 }
+
+// src/utils/glob-expand.ts
+import * as fsp from "node:fs/promises";
+import { isAbsolute, resolve } from "node:path";
 var GLOB_CHARS = /* @__PURE__ */ new Set(["*", "?", "["]);
 var IS_WINDOWS = process.platform === "win32";
 var SEP = IS_WINDOWS ? "\\" : "/";
@@ -335,7 +343,7 @@ async function expandGlob(pattern) {
   async function walk(dir, pat) {
     let entries;
     try {
-      entries = await fsp9.readdir(dir);
+      entries = await fsp.readdir(dir);
     } catch {
       return;
     }
@@ -357,7 +365,7 @@ async function expandGlob(pattern) {
       for (const e of entries) {
         const full = `${dir}${SEP}${e}`;
         try {
-          const stat9 = await fsp9.stat(full);
+          const stat9 = await fsp.stat(full);
           if (stat9.isDirectory()) await walk(full, rest);
         } catch {
         }
@@ -375,7 +383,7 @@ async function expandGlob(pattern) {
       if (entries.includes(seg)) {
         const full = `${dir}${SEP}${seg}`;
         try {
-          const stat9 = await fsp9.stat(full);
+          const stat9 = await fsp.stat(full);
           if (stat9.isDirectory()) await walk(full, rest);
         } catch {
         }
@@ -513,13 +521,16 @@ function safeStringify(value, pretty = false) {
     });
   }
 }
+
+// src/utils/session-scoped-path.ts
+import * as path2 from "node:path";
 function sessionScopedPath(dir, sessionId, suffix) {
   if (!sessionId || sessionId.includes("\\") || sessionId.includes("..")) {
     throw invalid(sessionId);
   }
-  const resolved = path9.resolve(dir, `${sessionId}${suffix}`);
-  const rel = path9.relative(path9.resolve(dir), resolved);
-  if (rel.startsWith("..") || path9.isAbsolute(rel)) {
+  const resolved = path2.resolve(dir, `${sessionId}${suffix}`);
+  const rel = path2.relative(path2.resolve(dir), resolved);
+  if (rel.startsWith("..") || path2.isAbsolute(rel)) {
     throw invalid(sessionId);
   }
   return resolved;
@@ -532,6 +543,9 @@ function invalid(sessionId) {
     context: { reason: "path_traversal" }
   });
 }
+
+// src/utils/ulid.ts
+import { randomBytes as randomBytes2 } from "node:crypto";
 var ENCODING = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
 var ENCODING_LEN = ENCODING.length;
 var TIME_LEN = 10;
@@ -547,7 +561,7 @@ function encodeTime(now, len) {
   return str;
 }
 function encodeRandom(len) {
-  const bytes = randomBytes(len);
+  const bytes = randomBytes2(len);
   let str = "";
   for (let i = 0; i < len; i++) {
     str += ENCODING[bytes[i] % ENCODING_LEN];
@@ -562,9 +576,14 @@ function ulid(seedTime = Date.now()) {
 function truncate(s, max) {
   return s.length <= max ? s : `${s.slice(0, max - 1)}\u2026`;
 }
+
+// src/utils/wstack-paths.ts
+import { createHash } from "node:crypto";
+import * as os from "node:os";
+import * as path3 from "node:path";
 function projectSlug(absRoot) {
-  const base = slugify(path9.basename(absRoot));
-  const hash = createHash("sha256").update(path9.resolve(absRoot)).digest("hex").slice(0, 6);
+  const base = slugify(path3.basename(absRoot));
+  const hash = createHash("sha256").update(path3.resolve(absRoot)).digest("hex").slice(0, 6);
   return `${base}-${hash}`;
 }
 function slugify(name) {
@@ -572,8 +591,8 @@ function slugify(name) {
 }
 function wstackGlobalRoot() {
   const fromEnv = process.env["WRONGSTACK_HOME"];
-  if (fromEnv && fromEnv.trim().length > 0) return path9.resolve(fromEnv);
-  return path9.join(os.homedir(), ".wrongstack");
+  if (fromEnv && fromEnv.trim().length > 0) return path3.resolve(fromEnv);
+  return path3.join(os.homedir(), ".wrongstack");
 }
 
 // src/types/errors.ts
@@ -586,13 +605,53 @@ var ERROR_CODES = {
   PROVIDER_SERVER_ERROR: "PROVIDER_SERVER_ERROR",
   PROVIDER_NETWORK_ERROR: "PROVIDER_NETWORK_ERROR",
   PROVIDER_CONTEXT_OVERFLOW: "PROVIDER_CONTEXT_OVERFLOW",
+  // Tool
+  TOOL_NOT_FOUND: "TOOL_NOT_FOUND",
+  TOOL_PERMISSION_DENIED: "TOOL_PERMISSION_DENIED",
+  TOOL_EXECUTION_FAILED: "TOOL_EXECUTION_FAILED",
+  TOOL_TIMEOUT: "TOOL_TIMEOUT",
+  TOOL_INPUT_INVALID: "TOOL_INPUT_INVALID",
+  // Config
+  CONFIG_INVALID: "CONFIG_INVALID",
+  CONFIG_NOT_FOUND: "CONFIG_NOT_FOUND",
+  CONFIG_PARSE_FAILED: "CONFIG_PARSE_FAILED",
+  CONFIG_MIGRATION_NEEDED: "CONFIG_MIGRATION_NEEDED",
+  // Plugin
+  PLUGIN_LOAD_FAILED: "PLUGIN_LOAD_FAILED",
+  PLUGIN_API_MISMATCH: "PLUGIN_API_MISMATCH",
+  PLUGIN_MISSING_DEPENDENCY: "PLUGIN_MISSING_DEPENDENCY",
   // Agent
   AGENT_ITERATION_LIMIT: "AGENT_ITERATION_LIMIT",
+  AGENT_CONTEXT_OVERFLOW: "AGENT_CONTEXT_OVERFLOW",
   AGENT_ABORTED: "AGENT_ABORTED",
   AGENT_RUN_FAILED: "AGENT_RUN_FAILED",
+  // Session
+  SESSION_NOT_FOUND: "SESSION_NOT_FOUND",
+  SESSION_CORRUPTED: "SESSION_CORRUPTED",
+  SESSION_WRITE_FAILED: "SESSION_WRITE_FAILED",
+  // Container / Registry
+  CONTAINER_TOKEN_ALREADY_BOUND: "CONTAINER_TOKEN_ALREADY_BOUND",
+  CONTAINER_TOKEN_NOT_BOUND: "CONTAINER_TOKEN_NOT_BOUND",
+  CONTAINER_CIRCULAR_DEPENDENCY: "CONTAINER_CIRCULAR_DEPENDENCY",
+  REGISTRY_DUPLICATE: "REGISTRY_DUPLICATE",
+  REGISTRY_NOT_FOUND: "REGISTRY_NOT_FOUND",
+  REGISTRY_INVALID: "REGISTRY_INVALID",
   // File system
   FS_READ_FAILED: "FS_READ_FAILED",
-  FS_DELETE_FAILED: "FS_DELETE_FAILED"};
+  FS_WRITE_FAILED: "FS_WRITE_FAILED",
+  FS_MKDIR_FAILED: "FS_MKDIR_FAILED",
+  FS_DELETE_FAILED: "FS_DELETE_FAILED",
+  FS_ATOMIC_WRITE_FAILED: "FS_ATOMIC_WRITE_FAILED",
+  // SDD (Spec-Driven Development)
+  SDD_VALIDATION_FAILED: "SDD_VALIDATION_FAILED",
+  SDD_PARSE_FAILED: "SDD_PARSE_FAILED",
+  SDD_INVALID_STATE: "SDD_INVALID_STATE",
+  SDD_NOT_READY: "SDD_NOT_READY",
+  // General
+  VALIDATION_ERROR: "VALIDATION_ERROR",
+  PARSE_FAILED: "PARSE_FAILED",
+  UNKNOWN: "UNKNOWN"
+};
 var WrongStackError = class extends Error {
   code;
   subsystem;
@@ -1271,10 +1330,30 @@ var ToolCapabilities = {
   SHELL_RESTRICTED: "shell.restricted",
   /** Can run a restricted project formatter/linter-style command. */
   SHELL_EXEC: "shell.exec",
+  /** Can read files inside the project (and possibly outside via symlinks if not guarded). */
+  FS_READ: "fs.read",
   /** Can write / modify / delete files inside the project. */
   FS_WRITE: "fs.write",
   /** Can write files outside the current project root (very high risk). */
   FS_WRITE_OUTSIDE_PROJECT: "fs.write.outside-project",
+  /** Can perform outbound network requests. */
+  NET_OUTBOUND: "net.outbound",
+  /** Can mutate in-memory session todos only. */
+  SESSION_TODO: "session.todo",
+  /** Can mutate in-memory session mode only. */
+  SESSION_MODE: "session.mode",
+  /** Can inspect registered tool metadata. */
+  TOOL_META: "tool.meta",
+  /** Can invoke arbitrary registered tools through a meta-tool. */
+  TOOL_MUTATE_ANY: "tool.mutate.any",
+  /** Can read persistent memory. */
+  MEMORY_READ: "memory.read",
+  /** Can write persistent memory. */
+  MEMORY_WRITE: "memory.write",
+  /** Can delete persistent memory. */
+  MEMORY_DELETE: "memory.delete",
+  /** Proxies tools from external MCP servers (unknown capability). */
+  MCP_PROXY: "mcp.proxy",
   /** Can spawn or manage subagents / multi-agent tasks. */
   SUBAGENT_SPAWN: "subagent.spawn",
   /** Can inspect fleet/subagent coordination state without mutating it. */
@@ -1285,9 +1364,43 @@ var ToolCapabilities = {
   COORDINATION_RESULT_SUBMIT: "coordination.result.submit",
   /** Can read or write inter-agent mailbox messages. */
   COORDINATION_MAIL: "coordination.mail",
+  /** Can schedule, inspect, or cancel in-session cron jobs. */
+  COORDINATION_CRON: "coordination.cron",
+  /** Can mutate global or session configuration / trust state. */
+  CONFIG_MUTATE: "config.mutate",
   /** Can install packages or run package managers with side effects. */
   PACKAGE_INSTALL: "package.install"
 };
+var DANGEROUS_FOR_SUBAGENTS = [
+  ToolCapabilities.SHELL_ARBITRARY,
+  ToolCapabilities.SHELL_RESTRICTED,
+  ToolCapabilities.SHELL_EXEC,
+  ToolCapabilities.FS_WRITE,
+  ToolCapabilities.FS_WRITE_OUTSIDE_PROJECT,
+  ToolCapabilities.TOOL_MUTATE_ANY,
+  ToolCapabilities.MEMORY_WRITE,
+  ToolCapabilities.MEMORY_DELETE,
+  ToolCapabilities.MCP_PROXY,
+  ToolCapabilities.SUBAGENT_SPAWN,
+  ToolCapabilities.CONFIG_MUTATE,
+  ToolCapabilities.PACKAGE_INSTALL
+];
+var WIDE_SUBAGENT_CAPABILITIES = [
+  ToolCapabilities.FS_READ,
+  ToolCapabilities.FS_WRITE,
+  ToolCapabilities.NET_OUTBOUND,
+  ToolCapabilities.SESSION_TODO,
+  ToolCapabilities.TOOL_META,
+  ToolCapabilities.MEMORY_READ,
+  ToolCapabilities.SHELL_ARBITRARY,
+  ToolCapabilities.SHELL_RESTRICTED,
+  ToolCapabilities.SHELL_EXEC,
+  ToolCapabilities.PACKAGE_INSTALL,
+  // Read-only fleet visibility (fleet_status) — peer awareness has no blast
+  // radius and every fleet worker should coordinate around its peers.
+  ToolCapabilities.COORDINATION_FLEET_READ,
+  ToolCapabilities.COORDINATION_RESULT_SUBMIT
+];
 
 // src/coordination/subagent-result-tool.ts
 var SUBAGENT_STRUCTURED_REPORT_META_KEY = "subagentStructuredReport";
@@ -1685,6 +1798,12 @@ var TOOLS = {
   /** Web research. */
   research: ["read", "grep", "glob", "search", "fetch", "mailbox"]
 };
+
+// src/coordination/agents/agent-prompts.ts
+import { readFileSync, statSync } from "node:fs";
+import * as os2 from "node:os";
+import * as path4 from "node:path";
+import { fileURLToPath } from "node:url";
 var promptCache = /* @__PURE__ */ new Map();
 var candidateCache = /* @__PURE__ */ new Map();
 function agentPrompt(id) {
@@ -1696,7 +1815,7 @@ function agentPrompt(id) {
   let resolved = "";
   for (const dir of agentPromptDirCandidates(envDir)) {
     try {
-      resolved = readFileSync(path9.join(dir, fileName), "utf8").trimEnd();
+      resolved = readFileSync(path4.join(dir, fileName), "utf8").trimEnd();
       break;
     } catch {
     }
@@ -1705,20 +1824,20 @@ function agentPrompt(id) {
   return resolved;
 }
 function agentPromptDirCandidates(envDir) {
-  const globalRoot = process.env["WRONGSTACK_HOME"] || path9.join(os.homedir(), ".wrongstack");
+  const globalRoot = process.env["WRONGSTACK_HOME"] || path4.join(os2.homedir(), ".wrongstack");
   const candKey = `${envDir}\0${globalRoot}`;
   const cached = candidateCache.get(candKey);
   if (cached !== void 0) return cached;
-  const here = path9.dirname(fileURLToPath(import.meta.url));
+  const here = path4.dirname(fileURLToPath(import.meta.url));
   const explicitDir = envDir || void 0;
   const candidates = [
-    ...explicitDir ? [path9.resolve(explicitDir)] : [],
-    path9.join(globalRoot, "instructions", "agents"),
-    path9.resolve(here, "../../../../instructions/agents"),
-    path9.resolve(here, "../../../instructions/agents"),
-    path9.resolve(here, "../../instructions/agents"),
-    path9.resolve(here, "../instructions/agents"),
-    path9.resolve(here, "instructions/agents")
+    ...explicitDir ? [path4.resolve(explicitDir)] : [],
+    path4.join(globalRoot, "instructions", "agents"),
+    path4.resolve(here, "../../../../instructions/agents"),
+    path4.resolve(here, "../../../instructions/agents"),
+    path4.resolve(here, "../../instructions/agents"),
+    path4.resolve(here, "../instructions/agents"),
+    path4.resolve(here, "instructions/agents")
   ];
   const ordered = candidates.sort((a, b) => Number(!isDirectory(a)) - Number(!isDirectory(b)));
   candidateCache.set(candKey, ordered);
@@ -3430,6 +3549,9 @@ function formatHumanPrompt(request) {
   lines.push("", `Risk: ${request.risk}`);
   return lines.join("\n");
 }
+
+// src/coordination/brain-monitor.ts
+import { randomUUID as randomUUID2 } from "node:crypto";
 var BrainMonitor = class {
   constructor(opts) {
     this.opts = opts;
@@ -3502,7 +3624,7 @@ var BrainMonitor = class {
     this.lastEngagedAt.set(kind, Date.now());
     try {
       const request = {
-        id: `brainmon-${randomUUID()}`,
+        id: `brainmon-${randomUUID2()}`,
         sessionId: this.opts.sessionId?.(),
         source: "system",
         question: input.question,
@@ -3565,6 +3687,11 @@ var BrainMonitor = class {
   }
 };
 
+// src/coordination/collab-debug.ts
+import { EventEmitter } from "node:events";
+import * as fsp2 from "node:fs/promises";
+import { randomUUID as randomUUID3 } from "node:crypto";
+
 // src/coordination/fleet-event-validation.ts
 var ROLE_BY_EVENT = {
   "bug.found": "bug-hunter",
@@ -3721,7 +3848,7 @@ var CollabSession = class extends EventEmitter {
   _timeoutTimer;
   constructor(director, fleetBus, options) {
     super();
-    this.sessionId = randomUUID();
+    this.sessionId = randomUUID3();
     this.options = options;
     this.director = director;
     this.fleetBus = fleetBus;
@@ -3783,8 +3910,8 @@ var CollabSession = class extends EventEmitter {
     for (const filePath of allFiles) {
       try {
         const [content, stat9] = await Promise.all([
-          fsp9.readFile(filePath, "utf8"),
-          fsp9.stat(filePath)
+          fsp2.readFile(filePath, "utf8"),
+          fsp2.stat(filePath)
         ]);
         const ext = filePath.split(".").pop() ?? "";
         const language = ext === "ts" || ext === "tsx" ? "typescript" : ext === "js" || ext === "jsx" ? "javascript" : ext === "md" ? "markdown" : ext === "json" ? "json" : void 0;
@@ -3961,7 +4088,7 @@ var CollabSession = class extends EventEmitter {
       timeoutMs: budget.timeoutMs
     };
     const subagentId = await this.director.spawn(cfg);
-    await this.director.assign({ id: randomUUID(), subagentId, description: taskBrief });
+    await this.director.assign({ id: randomUUID3(), subagentId, description: taskBrief });
     return subagentId;
   }
   buildBugHunterTask() {
@@ -4212,7 +4339,7 @@ Emit each evaluation immediately. Do not wait until you have read all reports.`;
     for (const file of this.snapshot.files) {
       if (file.snapshotMtimeMs === void 0 && file.snapshotSizeBytes === void 0) continue;
       try {
-        const stat9 = await fsp9.stat(file.path);
+        const stat9 = await fsp2.stat(file.path);
         const mtimeChanged = file.snapshotMtimeMs !== void 0 && stat9.mtimeMs > file.snapshotMtimeMs + 1;
         const sizeChanged = file.snapshotSizeBytes !== void 0 && stat9.size !== file.snapshotSizeBytes;
         if (mtimeChanged || sizeChanged) {
@@ -4289,6 +4416,11 @@ Emit each evaluation immediately. Do not wait until you have read all reports.`;
   }
 };
 
+// src/coordination/delegate-tool.ts
+import * as fsp3 from "node:fs/promises";
+import * as path5 from "node:path";
+import { randomUUID as randomUUID4 } from "node:crypto";
+
 // src/coordination/fleet.ts
 var AUDIT_LOG_AGENT = {
   id: "audit-log",
@@ -4510,17 +4642,25 @@ function createDelegateTool(opts) {
   return {
     name: "delegate",
     description: "Hand a discrete piece of work to a dedicated subagent and wait for its result. The subagent has its own context, its own LLM call, and its own budget \u2014 use this when a task is self-contained, would otherwise blow up your context, or benefits from a specialized role (bug-hunter, security-scanner, refactor-planner, audit-log). For free-form coding tasks (not tied to a pre-defined role), pass `name` + `task` \u2014 the subagent runs as a general-purpose coding agent with a large default budget. YOU decide how big the budget is: pass `timeoutMs`, `maxIterations`, and `maxToolCalls` sized to the actual work. There is no hidden cap forcing a 3-minute / 80-iteration limit \u2014 if a monorepo audit needs 2 hours and 500 tool calls, ask for that. Call multiple delegates in parallel through the provider's parallel-tool-call surface to fan work out across roles.",
-    usageHint: "Set `task` to a complete instruction. Either pick `role` from the roster (audit-log, bug-hunter, refactor-planner, security-scanner) or pass `name` to run a free-form coding agent. For non-trivial work, also pass `timeoutMs`, `maxIterations`, and `maxToolCalls`. Returns the subagent's `TaskResult` \u2014 including the textual `result`, iteration count, tool count, and duration. Auto-promotes the host into director mode on first call.",
+    usageHint: "Set `task` to a complete instruction. Either pick `role` from the roster (audit-log, bug-hunter, refactor-planner, security-scanner) or pass `name` to run a free-form coding agent. For non-trivial work, also pass `timeoutMs`, `maxIterations`, and `maxToolCalls`. Returns the subagent's `TaskResult` \u2014 including the textual `result`, iteration count, tool count, and duration. Requires Director mode to be active in normal CLI sessions.",
     permission: "auto",
     mutating: false,
     capabilities: [ToolCapabilities.SUBAGENT_SPAWN],
     inputSchema,
-    async execute(input) {
+    async execute(input, _ctx, execOpts) {
       const sessionId = opts.directorRunId;
+      const abortSignal = execOpts?.signal;
       const i = input ?? {};
       if (typeof i.task !== "string" || !i.task.trim()) {
         return { ok: false, error: "`task` is required." };
       }
+      if (abortSignal?.aborted) {
+        return {
+          ok: false,
+          stopReason: "aborted",
+          error: "Delegation cancelled before spawn \u2014 the run was interrupted."
+        };
+      }
       const target = i.role ?? i.name ?? "subagent";
       try {
         let director = await opts.host.ensureDirector();
@@ -4585,7 +4725,7 @@ function createDelegateTool(opts) {
         opts.events?.emit("delegate.started", { sessionId, target, task: i.task });
         const subagentId = await director.spawn(cfg);
         const taskId = await director.assign({
-          id: `${randomUUID()}`,
+          id: `${randomUUID4()}`,
           description: i.task,
           subagentId
         });
@@ -4593,6 +4733,8 @@ function createDelegateTool(opts) {
         const result = await new Promise((resolve9) => {
           let settled = false;
           let timer;
+          let offAbort = () => {
+          };
           const finish = (value) => {
             if (settled) return;
             settled = true;
@@ -4600,6 +4742,7 @@ function createDelegateTool(opts) {
             offTool();
             offIter();
             offProgress();
+            offAbort();
             resolve9(value);
           };
           const arm = () => {
@@ -4612,9 +4755,42 @@ function createDelegateTool(opts) {
           const offTool = dir.fleet.filter("tool.executed", bump);
           const offIter = dir.fleet.filter("iteration.started", bump);
           const offProgress = dir.fleet.filter("tool.progress", bump);
+          if (abortSignal) {
+            const onAbortSignal = () => finish({ __aborted: true });
+            abortSignal.addEventListener("abort", onAbortSignal, { once: true });
+            offAbort = () => abortSignal.removeEventListener("abort", onAbortSignal);
+            if (abortSignal.aborted) onAbortSignal();
+          }
           arm();
           dir.awaitTasks([taskId]).then((r) => finish(r[0] ?? { __emptyResult: true })).catch(() => finish({ __timeout: true }));
         });
+        if ("__aborted" in result) {
+          try {
+            await dir.terminate(subagentId);
+          } catch {
+          }
+          const partial2 = await readSubagentPartial(opts, subagentId);
+          opts.events?.emit("delegate.completed", {
+            sessionId,
+            target,
+            task: i.task,
+            ok: false,
+            status: "aborted",
+            summary: `[${target}] aborted \u2014 the run was interrupted`,
+            durationMs: 0,
+            iterations: partial2?.events ?? 0,
+            toolCalls: partial2?.toolUsesObserved ?? 0,
+            subagentId
+          });
+          return {
+            ok: false,
+            stopReason: "aborted",
+            error: "Delegated task aborted \u2014 the run was interrupted.",
+            subagentId,
+            taskId,
+            partial: partial2
+          };
+        }
         if ("__timeout" in result) {
           const partial2 = await readSubagentPartial(opts, subagentId);
           opts.events?.emit("delegate.completed", {
@@ -4741,7 +4917,7 @@ function instantiateRosterConfig(role, base) {
     ...withBudget,
     // Give each spawn a fresh id so parallel or repeated delegates
     // can use the same role safely.
-    id: `${role}-${randomUUID().slice(0, 8)}`
+    id: `${role}-${randomUUID4().slice(0, 8)}`
   };
 }
 function hintForKind(kind, retryable, backoffMs, partial) {
@@ -4816,13 +4992,13 @@ async function readSubagentPartial(opts, subagentId) {
   if (!opts.sessionsRoot) return void 0;
   const candidates = [];
   if (opts.directorRunId) {
-    candidates.push(path9.join(opts.sessionsRoot, opts.directorRunId, `${subagentId}.jsonl`));
+    candidates.push(path5.join(opts.sessionsRoot, opts.directorRunId, `${subagentId}.jsonl`));
   } else {
     try {
-      const entries = await fsp9.readdir(opts.sessionsRoot, { withFileTypes: true });
+      const entries = await fsp3.readdir(opts.sessionsRoot, { withFileTypes: true });
       for (const entry of entries) {
         if (entry.isDirectory()) {
-          candidates.push(path9.join(opts.sessionsRoot, entry.name, `${subagentId}.jsonl`));
+          candidates.push(path5.join(opts.sessionsRoot, entry.name, `${subagentId}.jsonl`));
         }
       }
     } catch {
@@ -4832,7 +5008,7 @@ async function readSubagentPartial(opts, subagentId) {
   for (const file of candidates) {
     let raw;
     try {
-      raw = await fsp9.readFile(file, "utf8");
+      raw = await fsp3.readFile(file, "utf8");
     } catch {
       continue;
     }
@@ -5013,10 +5189,19 @@ function attachDepWatcherBridge(opts) {
     unsub();
   };
 }
+
+// src/coordination/director.ts
+import { randomUUID as randomUUID7 } from "node:crypto";
+import * as fsp5 from "node:fs/promises";
+import * as path7 from "node:path";
+
+// src/storage/director-state.ts
+import * as fsp4 from "node:fs/promises";
+import { hostname } from "node:os";
 async function acquireDirectorStateLock(lockPath, processId = process.pid) {
   let existing;
   try {
-    existing = await fsp9.readFile(lockPath, "utf8");
+    existing = await fsp4.readFile(lockPath, "utf8");
   } catch {
   }
   if (existing) {
@@ -5040,7 +5225,7 @@ async function acquireDirectorStateLock(lockPath, processId = process.pid) {
 }
 async function releaseDirectorStateLock(lockPath) {
   try {
-    await fsp9.unlink(lockPath);
+    await fsp4.unlink(lockPath);
   } catch {
   }
 }
@@ -5260,6 +5445,11 @@ var FleetContextOverflowError = class extends Error {
     this.observed = observed;
   }
 };
+
+// src/utils/instruction-file.ts
+import { readFileSync as readFileSync2, statSync as statSync2 } from "node:fs";
+import * as path6 from "node:path";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
 var textCache = /* @__PURE__ */ new Map();
 var rootCandidates;
 function readBundledInstructionText(relativePath) {
@@ -5268,7 +5458,7 @@ function readBundledInstructionText(relativePath) {
   let resolved = "";
   for (const root of instructionRootCandidates()) {
     try {
-      resolved = readFileSync(path9.join(root, relativePath), "utf8").trimEnd();
+      resolved = readFileSync2(path6.join(root, relativePath), "utf8").trimEnd();
       break;
     } catch {
     }
@@ -5284,18 +5474,18 @@ function renderInstructionTemplate(template, values) {
 }
 function instructionRootCandidates() {
   if (rootCandidates !== void 0) return rootCandidates;
-  const here = path9.dirname(fileURLToPath(import.meta.url));
+  const here = path6.dirname(fileURLToPath2(import.meta.url));
   const candidates = [
-    path9.resolve(here, "../../instructions"),
-    path9.resolve(here, "../instructions"),
-    path9.resolve(here, "instructions")
+    path6.resolve(here, "../../instructions"),
+    path6.resolve(here, "../instructions"),
+    path6.resolve(here, "instructions")
   ];
   rootCandidates = candidates.sort((a, b) => Number(!isDirectory2(a)) - Number(!isDirectory2(b)));
   return rootCandidates;
 }
 function isDirectory2(candidate) {
   try {
-    return statSync(candidate).isDirectory();
+    return statSync2(candidate).isDirectory();
   } catch {
     return false;
   }
@@ -5362,6 +5552,14 @@ function rosterSummaryFromConfigs(roster) {
   return lines.join("\n");
 }
 
+// src/coordination/director-tools.ts
+import { randomUUID as randomUUID5 } from "node:crypto";
+import {
+  claimReadyTask,
+  listReadyTasks,
+  updateTaskAssignment
+} from "@wrongstack/kanban";
+
 // src/coordination/dispatcher.ts
 var DEFAULT_DISPATCH_ROLE = "executor";
 var FALLBACK_DEFINITION = {
@@ -5621,7 +5819,7 @@ function instantiateRosterConfig2(role, base) {
     ...base,
     // Roster entries are templates. A director may spawn several
     // workers with the same role, so never reuse the template id.
-    id: `${role}-${randomUUID().slice(0, 8)}`
+    id: `${role}-${randomUUID5().slice(0, 8)}`
   };
 }
 function makeQualityGateTool(director, roster) {
@@ -5720,7 +5918,7 @@ function makeQualityGateTool(director, roster) {
             makeQualityGateSubagentConfig("verifier", roster, i.verifierWorktree ?? "auto")
           );
           const taskId = await director.assign({
-            id: randomUUID(),
+            id: randomUUID5(),
             subagentId,
             description: buildVerifierTask(i, {
               attempt,
@@ -5738,7 +5936,7 @@ function makeQualityGateTool(director, roster) {
             makeQualityGateSubagentConfig("reviewer", roster, i.reviewerWorktree ?? "off")
           );
           const taskId = await director.assign({
-            id: randomUUID(),
+            id: randomUUID5(),
             subagentId,
             description: buildReviewerTask(i, {
               attempt,
@@ -5766,7 +5964,7 @@ function makeQualityGateTool(director, roster) {
           };
         }
         const repairTaskId = await director.assign({
-          id: randomUUID(),
+          id: randomUUID5(),
           subagentId: i.repairSubagentId,
           description: buildRepairTask(i, attempts[attempts.length - 1], attempt),
           timeoutMs: i.timeoutMs
@@ -6034,7 +6232,7 @@ function makeAssignTool(director) {
     async execute(input) {
       const i = input;
       const task = {
-        id: randomUUID(),
+        id: randomUUID5(),
         description: i.description,
         subagentId: i.subagentId,
         maxToolCalls: i.maxToolCalls,
@@ -6115,7 +6313,7 @@ function makeKanbanQueueTool(director, roster) {
       const leaseTtlMs = Math.max(1e3, Math.floor(i.leaseTtlMs ?? 5 * 60 * 1e3));
       const claimedAt = nowIso();
       const leaseSeeding = {
-        leaseId: randomUUID(),
+        leaseId: randomUUID5(),
         claimedAt,
         heartbeatAt: claimedAt,
         leaseExpiresAt: new Date(Date.now() + leaseTtlMs).toISOString()
@@ -6169,7 +6367,7 @@ function makeKanbanQueueTool(director, roster) {
           const config = buildKanbanSubagentConfig(claim.task, i, roster);
           subagentId = await director.spawn(config);
           runTaskId = await director.assign({
-            id: randomUUID(),
+            id: randomUUID5(),
             subagentId,
             description: buildKanbanFleetTaskPrompt(claim.board, claim.task, {
               heartbeatIntervalMs: i.heartbeatIntervalMs ?? 6e4,
@@ -7184,6 +7382,7 @@ function fallbackProfileChain(config, profileName) {
   const chain = config.fallbackProfiles?.[profileName];
   return Array.isArray(chain) ? chain.filter((ref) => parseModelRef(ref).model) : [];
 }
+var DEFAULT_PRIMARY_COOLDOWN_MAX_MS = 10 * 6e4;
 
 // src/coordination/model-matrix.ts
 var MATRIX_PHASE_KEYS = Object.keys(AGENTS_BY_PHASE);
@@ -7357,6 +7556,10 @@ function isValidMatrixKey(key) {
   return matrixKeyKind(key) !== "unknown";
 }
 
+// src/coordination/multi-agent-coordinator.ts
+import { randomUUID as randomUUID6 } from "node:crypto";
+import { EventEmitter as EventEmitter2 } from "node:events";
+
 // src/coordination/coordinator/error-classifier.ts
 function classifySubagentError(err, hints = {}) {
   if (err instanceof AgentError && err.cause) {
@@ -7551,7 +7754,7 @@ function formatRole(role) {
 }
 
 // src/coordination/multi-agent-coordinator.ts
-var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends EventEmitter {
+var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends EventEmitter2 {
   coordinatorId;
   config;
   runner;
@@ -7644,7 +7847,7 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
     return { ...subagent, name: display };
   }
   async spawn(subagent) {
-    const id = subagent.id || randomUUID();
+    const id = subagent.id || randomUUID6();
     const cfg = this.withNickname(subagent, id);
     if (this.subagents.has(id)) {
       throw new Error(`Subagent id "${id}" already exists \u2014 refusing to overwrite`);
@@ -8311,8 +8514,9 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
     }
     const subagent = this.subagents.get(result.subagentId);
     if (subagent && subagent.status !== "stopped") {
-      result.status === "failed" || result.status === "timeout";
+      const failed = result.status === "failed" || result.status === "timeout";
       subagent.status = "idle";
+      void failed;
       subagent.currentTask = void 0;
       if (subagent.abortController.signal.aborted) {
         subagent.abortController = new AbortController();
@@ -8701,6 +8905,9 @@ var Director = class _Director {
   subagentBaseline;
   /** See {@link DirectorOptions.taskResultNotifier}. */
   taskResultNotifier;
+  subagentIdleTimeoutMs;
+  retireSubagentOnTaskComplete;
+  subagentIdleTimers = /* @__PURE__ */ new Map();
   /** Absolute path to the fleet's shared scratchpad directory, or null
    *  when none was configured. Exposed as a readonly getter for callers
    *  that need to surface the path to the user (e.g. the CLI logging
@@ -8796,13 +9003,15 @@ var Director = class _Director {
   /** Prevents large `ask_subagent` answers from bloating the leader's context window. */
   largeAnswerStore;
   constructor(opts) {
-    this.id = opts.config.coordinatorId || randomUUID();
+    this.id = opts.config.coordinatorId || randomUUID7();
     this.brain = opts.brain;
     this.manifestPath = opts.manifestPath;
     this.roster = opts.roster;
     this.directorPreamble = opts.directorPreamble ?? DEFAULT_DIRECTOR_PREAMBLE;
     this.subagentBaseline = opts.subagentBaseline ?? DEFAULT_SUBAGENT_BASELINE;
     this.taskResultNotifier = opts.taskResultNotifier;
+    this.subagentIdleTimeoutMs = typeof opts.subagentIdleTimeoutMs === "number" && Number.isFinite(opts.subagentIdleTimeoutMs) && opts.subagentIdleTimeoutMs >= 0 ? opts.subagentIdleTimeoutMs : void 0;
+    this.retireSubagentOnTaskComplete = opts.retireSubagentOnTaskComplete ?? false;
     this.sharedScratchpadPath = opts.sharedScratchpadPath ?? null;
     this.maxSpawns = opts.maxSpawns ?? Number.POSITIVE_INFINITY;
     this.maxSpawnDepth = opts.fleetManager?.maxSpawnDepth ?? resolveMaxSpawnDepth(opts.maxSpawnDepth);
@@ -8833,7 +9042,7 @@ var Director = class _Director {
     this.fleetManager = opts.fleetManager;
     this.logger = opts.logger;
     if (this.sharedScratchpadPath) {
-      void fsp9.mkdir(this.sharedScratchpadPath, { recursive: true }).catch((err) => this.logShutdownError("shared_scratchpad_mkdir", err));
+      void fsp5.mkdir(this.sharedScratchpadPath, { recursive: true }).catch((err) => this.logShutdownError("shared_scratchpad_mkdir", err));
     }
     this.transport = new InMemoryBridgeTransport();
     this.bridge = new InMemoryAgentBridge(
@@ -8947,6 +9156,10 @@ var Director = class _Director {
       } else {
         this.scheduleManifest();
       }
+      this.armSubagentIdleRetirement(
+        r.subagentId,
+        this.retireSubagentOnTaskComplete ? 0 : this.subagentIdleTimeoutMs
+      );
     };
     this.coordinator.on("task.completed", this.taskCompletedListener);
     const extendCounts = /* @__PURE__ */ new Map();
@@ -9419,6 +9632,7 @@ var Director = class _Director {
       });
       this.scheduleManifest();
     }
+    this.armSubagentIdleRetirement(result.subagentId, this.subagentIdleTimeoutMs);
     return result.subagentId;
   }
   /**
@@ -9441,7 +9655,7 @@ var Director = class _Director {
       );
     }
     const msg = {
-      id: randomUUID(),
+      id: randomUUID7(),
       type: "task",
       from: this.id,
       to: subagentId,
@@ -9540,7 +9754,7 @@ var Director = class _Director {
       })),
       usage: this.usage.snapshot()
     };
-    await fsp9.mkdir(path9.dirname(this.manifestPath), { recursive: true });
+    await fsp5.mkdir(path7.dirname(this.manifestPath), { recursive: true });
     await atomicWrite(this.manifestPath, JSON.stringify(manifest, null, 2), { mode: 384 });
     return this.manifestPath;
   }
@@ -9567,6 +9781,8 @@ var Director = class _Director {
       this.budgetFilter();
       this.budgetFilter = null;
     }
+    for (const timer of this.subagentIdleTimers.values()) clearTimeout(timer);
+    this.subagentIdleTimers.clear();
     await this.coordinator.stopAll();
     for (const b of this.subagentBridges.values()) {
       await b.stop().catch((err) => this.logShutdownError("subagent_bridge_stop", err));
@@ -9606,7 +9822,7 @@ var Director = class _Director {
    * concurrency limit applies — the task may queue before running.
    */
   async assign(task) {
-    const taskWithId = task.id ? task : { ...task, id: randomUUID() };
+    const taskWithId = task.id ? task : { ...task, id: randomUUID7() };
     if (this.workCompleteFlag) {
       const synthetic = {
         subagentId: taskWithId.subagentId ?? "unassigned",
@@ -9670,7 +9886,7 @@ var Director = class _Director {
    * rollups and persisted fleet task history.
    */
   async assignInternal(task) {
-    const taskWithId = task.id ? task : { ...task, id: randomUUID() };
+    const taskWithId = task.id ? task : { ...task, id: randomUUID7() };
     this.internalTaskIds.add(taskWithId.id);
     try {
       await this.coordinator.assign(taskWithId);
@@ -9789,6 +10005,7 @@ var Director = class _Director {
     await this.coordinator.stopAll();
   }
   async remove(subagentId) {
+    this.clearSubagentIdleRetirement(subagentId);
     await this.coordinator.remove(subagentId);
     const bridge = this.subagentBridges.get(subagentId);
     if (bridge) {
@@ -9809,6 +10026,34 @@ var Director = class _Director {
     this.taskOwners.delete(subagentId);
     this.taskDescriptions.delete(subagentId);
   }
+  clearSubagentIdleRetirement(subagentId) {
+    const timer = this.subagentIdleTimers.get(subagentId);
+    if (!timer) return;
+    clearTimeout(timer);
+    this.subagentIdleTimers.delete(subagentId);
+  }
+  /**
+   * Arm one lifecycle timer per worker. The callback re-checks coordinator
+   * state so a task assigned in the same turn always wins over retirement.
+   */
+  armSubagentIdleRetirement(subagentId, delayMs) {
+    this.clearSubagentIdleRetirement(subagentId);
+    if (delayMs === void 0) return;
+    const timer = setTimeout(() => {
+      this.subagentIdleTimers.delete(subagentId);
+      const entry = this.coordinator.getStatus().subagents.find((a) => a.id === subagentId);
+      if (!entry || entry.status !== "idle") return;
+      if (this.coordinator.listPendingTasks().some((task) => task.subagentId === subagentId)) {
+        this.armSubagentIdleRetirement(subagentId, this.subagentIdleTimeoutMs);
+        return;
+      }
+      void this.remove(subagentId).catch(
+        (err) => this.logShutdownError("subagent_idle_retirement", err)
+      );
+    }, delayMs);
+    if (typeof timer.unref === "function") timer.unref();
+    this.subagentIdleTimers.set(subagentId, timer);
+  }
   status() {
     const base = this.coordinator.getStatus();
     return {
@@ -9860,10 +10105,10 @@ var Director = class _Director {
    */
   async readSession(subagentId, tail) {
     if (!this.sessionsRoot) return null;
-    const filePath = path9.join(this.sessionsRoot, this.directorRunId, `${subagentId}.jsonl`);
+    const filePath = path7.join(this.sessionsRoot, this.directorRunId, `${subagentId}.jsonl`);
     let raw;
     try {
-      raw = await fsp9.readFile(filePath, "utf8");
+      raw = await fsp5.readFile(filePath, "utf8");
     } catch {
       return null;
     }
@@ -10028,6 +10273,21 @@ var Director = class _Director {
   }
 };
 
+// src/coordination/director-session.ts
+import * as path12 from "node:path";
+
+// src/storage/session-store.ts
+import { createHash as createHash4 } from "node:crypto";
+import { createReadStream } from "node:fs";
+import * as fsp9 from "node:fs/promises";
+import * as path11 from "node:path";
+import { createInterface } from "node:readline";
+
+// src/storage/file-session-writer.ts
+import { closeSync, fsyncSync, openSync, writeSync } from "node:fs";
+import * as fsp6 from "node:fs/promises";
+import * as path8 from "node:path";
+
 // src/storage/session-helpers.ts
 function userInputTitle(content) {
   const text = typeof content === "string" ? content : content.filter((b) => b.type === "text").map((b) => b.text).join(" ");
@@ -10043,7 +10303,7 @@ var FileSessionWriter = class _FileSessionWriter {
     this.meta = meta;
     this.events = events;
     this.resumed = opts.resumed ?? false;
-    this.manifestFile = opts.dir ? path9.join(opts.dir, `${path9.basename(id)}.summary.json`) : "";
+    this.manifestFile = opts.dir ? path8.join(opts.dir, `${path8.basename(id)}.summary.json`) : "";
     this.filePath = opts.filePath ?? "";
     this.secretScrubber = opts.secretScrubber;
     this.checkpointCas = opts.checkpointCas;
@@ -10583,7 +10843,7 @@ var FileSessionWriter = class _FileSessionWriter {
     let removedCount = 0;
     let targetCheckpointSeen = false;
     try {
-      fd = await fsp9.open(this.filePath, "r", 384);
+      fd = await fsp6.open(this.filePath, "r", 384);
       while (true) {
         const buf = Buffer.alloc(CHUNK_SIZE);
         const { bytesRead } = await fd.read(buf, 0, CHUNK_SIZE, fileOffset);
@@ -10638,7 +10898,7 @@ var FileSessionWriter = class _FileSessionWriter {
     await this.writeChain;
     await this.handle.close();
     const tmpPath = `${this.filePath}.rewind.tmp`;
-    const src = await fsp9.open(this.filePath, "r", 384);
+    const src = await fsp6.open(this.filePath, "r", 384);
     try {
       const statResult = await src.stat();
       const totalSize = statResult.size;
@@ -10654,7 +10914,7 @@ var FileSessionWriter = class _FileSessionWriter {
       } else {
         newlineAfterCheckpoint = totalSize;
       }
-      const writeFd = await fsp9.open(tmpPath, "w", 384);
+      const writeFd = await fsp6.open(tmpPath, "w", 384);
       try {
         let readOffset = 0;
         while (readOffset < newlineAfterCheckpoint) {
@@ -10702,11 +10962,11 @@ var FileSessionWriter = class _FileSessionWriter {
         await writeFd.close();
       }
       await src.close();
-      await fsp9.rename(tmpPath, this.filePath);
-      this.handle = await fsp9.open(this.filePath, "a", 384);
+      await fsp6.rename(tmpPath, this.filePath);
+      this.handle = await fsp6.open(this.filePath, "a", 384);
     } catch (err) {
-      await fsp9.unlink(tmpPath).catch(() => void 0);
-      this.handle = await fsp9.open(this.filePath, "a", 384).catch(() => this.handle);
+      await fsp6.unlink(tmpPath).catch(() => void 0);
+      this.handle = await fsp6.open(this.filePath, "a", 384).catch(() => this.handle);
       throw err;
     }
     await this.append({
@@ -10741,7 +11001,7 @@ var FileSessionWriter = class _FileSessionWriter {
       provider: this.meta.provider ?? "unknown"
     })}
 `;
-    await fsp9.writeFile(this.filePath, record, "utf8");
+    await fsp6.writeFile(this.filePath, record, "utf8");
     this.activePromptIndex = null;
     this.pendingFileSnapshots = [];
   }
@@ -10786,6 +11046,12 @@ var FileSessionWriter = class _FileSessionWriter {
   }
 };
 
+// src/storage/session-checkpoint-cas.ts
+import { spawn } from "node:child_process";
+import { createHash as createHash2, randomUUID as randomUUID8 } from "node:crypto";
+import * as fsp7 from "node:fs/promises";
+import * as path9 from "node:path";
+
 // src/storage/storage-concurrency.ts
 async function mapWithConcurrency(items, concurrency, mapper) {
   if (items.length === 0) return [];
@@ -10812,7 +11078,7 @@ var MAX_GIT_OUTPUT = 16 * 1024 * 1024;
 var MAX_BLOB_BYTES = 64 * 1024 * 1024;
 var MAX_CHECKPOINT_BYTES = 512 * 1024 * 1024;
 function sha256(content) {
-  return createHash("sha256").update(content).digest("hex");
+  return createHash2("sha256").update(content).digest("hex");
 }
 function isInside(root, target) {
   const relative4 = path9.relative(root, target);
@@ -10868,9 +11134,9 @@ var SessionCheckpointCas = class {
           return null;
         }
         try {
-          const stat9 = await fsp9.lstat(absolute);
+          const stat9 = await fsp7.lstat(absolute);
           if (stat9.isSymbolicLink()) {
-            const linkTarget = await fsp9.readlink(absolute);
+            const linkTarget = await fsp7.readlink(absolute);
             const resolvedLink = path9.resolve(path9.dirname(absolute), linkTarget);
             if (path9.isAbsolute(linkTarget) || !isInside(this.projectRoot, resolvedLink)) {
               unresolved.push({
@@ -10900,7 +11166,7 @@ var SessionCheckpointCas = class {
             return null;
           }
           scheduledBytes += stat9.size;
-          const content = await fsp9.readFile(absolute);
+          const content = await fsp7.readFile(absolute);
           const blobHash = sha256(content);
           await this.putBlob(blobHash, content);
           return { path: relative4, state: "file", blobHash, mode: stat9.mode & 511 };
@@ -10938,7 +11204,7 @@ var SessionCheckpointCas = class {
     if (target === this.projectRoot) {
       throw new Error("Refusing to materialize a workspace checkpoint over the parent project root");
     }
-    const targetStat = await fsp9.stat(target);
+    const targetStat = await fsp7.stat(target);
     if (!targetStat.isDirectory()) throw new Error(`Checkpoint target is not a directory: ${target}`);
     const manifest = await this.loadManifest(checkpoint.manifestHash);
     if (manifest.baseHead !== checkpoint.baseHead.toLowerCase() || manifest.coverage !== checkpoint.coverage || manifest.entries.length !== checkpoint.entryCount || manifest.unresolved.length !== checkpoint.unresolvedCount) {
@@ -10965,7 +11231,7 @@ var SessionCheckpointCas = class {
     if (targetStatus.stdout.length > 0) {
       throw new Error("Checkpoint target must be a clean checkout before materialization");
     }
-    const realTarget = await fsp9.realpath(target);
+    const realTarget = await fsp7.realpath(target);
     const writtenFiles = [];
     const deletedFiles = [];
     const errors = [];
@@ -10995,24 +11261,24 @@ var SessionCheckpointCas = class {
     for (const { entry, output, content } of prepared) {
       try {
         if (entry.state === "absent") {
-          await fsp9.unlink(output).catch((err) => {
+          await fsp7.unlink(output).catch((err) => {
             if (err.code !== "ENOENT") throw err;
           });
           deletedFiles.push(entry.path);
           continue;
         }
         if (entry.state === "symlink") {
-          await fsp9.unlink(output).catch((err) => {
+          await fsp7.unlink(output).catch((err) => {
             if (err.code !== "ENOENT") throw err;
           });
-          await fsp9.mkdir(path9.dirname(output), { recursive: true });
-          await fsp9.symlink(entry.linkTarget, output);
+          await fsp7.mkdir(path9.dirname(output), { recursive: true });
+          await fsp7.symlink(entry.linkTarget, output);
           writtenFiles.push(entry.path);
           continue;
         }
         if (!content) throw new Error("CAS blob was not prepared");
         await atomicWrite(output, content, { mode: entry.mode });
-        await fsp9.chmod(output, entry.mode).catch(() => void 0);
+        await fsp7.chmod(output, entry.mode).catch(() => void 0);
         writtenFiles.push(entry.path);
       } catch (err) {
         errors.push(`${entry.path}: ${toErrorMessage(err)}`);
@@ -11030,9 +11296,9 @@ var SessionCheckpointCas = class {
   }
   async putBlob(hash, content) {
     const target = this.objectPath(hash);
-    await fsp9.mkdir(path9.dirname(target), { recursive: true });
+    await fsp7.mkdir(path9.dirname(target), { recursive: true });
     try {
-      const existing = await fsp9.readFile(target);
+      const existing = await fsp7.readFile(target);
       if (sha256(existing) !== hash) throw new Error(`Corrupt CAS object collision: ${hash}`);
       return;
     } catch (err) {
@@ -11040,30 +11306,30 @@ var SessionCheckpointCas = class {
     }
     const temp = path9.join(
       path9.dirname(target),
-      `.${path9.basename(target)}.${process.pid}.${randomUUID()}.tmp`
+      `.${path9.basename(target)}.${process.pid}.${randomUUID8()}.tmp`
     );
     let handle;
     try {
-      handle = await fsp9.open(temp, "wx", 384);
+      handle = await fsp7.open(temp, "wx", 384);
       await handle.writeFile(content);
       await handle.sync();
       await handle.close();
       handle = void 0;
       try {
-        await fsp9.link(temp, target);
+        await fsp7.link(temp, target);
       } catch (err) {
         if (err.code !== "EEXIST") throw err;
-        const existing = await fsp9.readFile(target);
+        const existing = await fsp7.readFile(target);
         if (sha256(existing) !== hash) throw new Error(`Corrupt CAS object collision: ${hash}`);
       }
     } finally {
       await handle?.close().catch(() => void 0);
-      await fsp9.unlink(temp).catch(() => void 0);
+      await fsp7.unlink(temp).catch(() => void 0);
     }
   }
   async putManifest(hash, encoded) {
     const target = this.manifestPath(hash);
-    const existing = await fsp9.readFile(target).catch(() => null);
+    const existing = await fsp7.readFile(target).catch(() => null);
     if (existing) {
       if (sha256(existing) !== hash) throw new Error(`Corrupt checkpoint manifest collision: ${hash}`);
       return;
@@ -11071,12 +11337,12 @@ var SessionCheckpointCas = class {
     await atomicWrite(target, encoded, { mode: 384 });
   }
   async readBlob(hash) {
-    const content = await fsp9.readFile(this.objectPath(hash));
+    const content = await fsp7.readFile(this.objectPath(hash));
     if (sha256(content) !== hash) throw new Error(`CAS blob integrity check failed: ${hash}`);
     return content;
   }
   async loadManifest(hash) {
-    const raw = await fsp9.readFile(this.manifestPath(hash));
+    const raw = await fsp7.readFile(this.manifestPath(hash));
     if (sha256(raw) !== hash) throw new Error(`Checkpoint manifest integrity check failed: ${hash}`);
     const parsed = JSON.parse(raw.toString("utf8"));
     if (parsed.version !== 1 || typeof parsed.baseHead !== "string" || parsed.coverage !== "git-head-plus-dirty" || !Array.isArray(parsed.entries) || !Array.isArray(parsed.unresolved)) {
@@ -11106,7 +11372,7 @@ var SessionCheckpointCas = class {
     let probe = output;
     for (; ; ) {
       try {
-        const real = await fsp9.realpath(probe);
+        const real = await fsp7.realpath(probe);
         if (!isInside(realTarget, real)) throw new Error("path resolves through a symlink outside checkpoint target");
         return output;
       } catch (err) {
@@ -11166,12 +11432,17 @@ function defaultRunGit(args, cwd) {
     child.on("close", (code) => resolve9(result(code ?? 1)));
   });
 }
+
+// src/storage/session-resume-validation.ts
+import { createHash as createHash3 } from "node:crypto";
+import * as fsp8 from "node:fs/promises";
+import * as path10 from "node:path";
 var MAX_REVALIDATE_BYTES = 5 * 1024 * 1024;
 var VALIDATION_CONCURRENCY = 8;
 var NOTICE_PATH_LIMIT = 20;
 function isInside2(root, target) {
-  const relative4 = path9.relative(root, target);
-  return relative4 === "" || !relative4.startsWith("..") && !path9.isAbsolute(relative4);
+  const relative4 = path10.relative(root, target);
+  return relative4 === "" || !relative4.startsWith("..") && !path10.isAbsolute(relative4);
 }
 function errno(err) {
   return err && typeof err === "object" && "code" in err ? String(err.code) : void 0;
@@ -11182,7 +11453,7 @@ function latestObservations(events, projectRoot) {
     if (event.type !== "file_observation" || typeof event.path !== "string" || event.path.length === 0 || typeof event.hash !== "string" || !/^[a-f\d]{64}$/i.test(event.hash)) {
       continue;
     }
-    const normalized = path9.resolve(projectRoot, event.path);
+    const normalized = path10.resolve(projectRoot, event.path);
     latest.set(normalized, {
       path: normalized,
       hash: event.hash.toLowerCase(),
@@ -11206,7 +11477,7 @@ async function validateOne(observation, lexicalRoot, realRoot) {
   }
   let realFile;
   try {
-    realFile = await fsp9.realpath(observation.path);
+    realFile = await fsp8.realpath(observation.path);
   } catch (err) {
     if (errno(err) === "ENOENT") return { ...base, status: "deleted" };
     return { ...base, status: "unreadable", detail: toErrorMessage(err) };
@@ -11219,7 +11490,7 @@ async function validateOne(observation, lexicalRoot, realRoot) {
     };
   }
   try {
-    const stat9 = await fsp9.stat(realFile);
+    const stat9 = await fsp8.stat(realFile);
     if (!stat9.isFile()) {
       return { ...base, status: "unreadable", detail: "Path is no longer a regular file." };
     }
@@ -11230,8 +11501,8 @@ async function validateOne(observation, lexicalRoot, realRoot) {
         detail: `File now exceeds the ${MAX_REVALIDATE_BYTES}-byte validation limit.`
       };
     }
-    const content = await fsp9.readFile(realFile, "utf8");
-    const actualHash = createHash("sha256").update(content, "utf8").digest("hex");
+    const content = await fsp8.readFile(realFile, "utf8");
+    const actualHash = createHash3("sha256").update(content, "utf8").digest("hex");
     if (actualHash === observation.hash) return null;
     return { ...base, status: "modified", actualHash };
   } catch (err) {
@@ -11240,8 +11511,8 @@ async function validateOne(observation, lexicalRoot, realRoot) {
   }
 }
 async function validateResumeFileObservations(events, projectRoot) {
-  const lexicalRoot = path9.resolve(projectRoot);
-  const realRoot = await fsp9.realpath(lexicalRoot).catch(() => lexicalRoot);
+  const lexicalRoot = path10.resolve(projectRoot);
+  const realRoot = await fsp8.realpath(lexicalRoot).catch(() => lexicalRoot);
   const observations = latestObservations(events, lexicalRoot);
   const results = await mapWithConcurrency(
     observations,
@@ -11256,9 +11527,9 @@ async function validateResumeFileObservations(events, projectRoot) {
 }
 function formatResumeValidationNotice(validation, projectRoot) {
   if (validation.staleFiles.length === 0) return null;
-  const root = path9.resolve(projectRoot);
+  const root = path10.resolve(projectRoot);
   const shown = validation.staleFiles.slice(0, NOTICE_PATH_LIMIT).map((entry) => {
-    const relative4 = path9.relative(root, entry.path);
+    const relative4 = path10.relative(root, entry.path);
     const display = isInside2(root, entry.path) ? relative4 || "." : entry.path;
     return `- ${JSON.stringify(display)} [${entry.status}]`;
   });
@@ -11380,9 +11651,9 @@ var DefaultSessionStore = class _DefaultSessionStore {
   static LIST_SCAN_CONCURRENCY = 32;
   constructor(opts) {
     this.dir = opts.dir;
-    this.projectRoot = opts.projectRoot ? path9.resolve(opts.projectRoot) : void 0;
+    this.projectRoot = opts.projectRoot ? path11.resolve(opts.projectRoot) : void 0;
     this.checkpointCas = this.projectRoot ? new SessionCheckpointCas({
-      rootDir: path9.join(this.dir, "_cas"),
+      rootDir: path11.join(this.dir, "_cas"),
       projectRoot: this.projectRoot
     }) : void 0;
     this.events = opts.events;
@@ -11436,17 +11707,17 @@ var DefaultSessionStore = class _DefaultSessionStore {
   }
   /** Absolute path to the session index file. */
   get indexFile() {
-    return path9.join(this.dir, "_index.jsonl");
+    return path11.join(this.dir, "_index.jsonl");
   }
   /** Join session ID to its absolute path within the store directory. */
   sessionPath(id, ext) {
     return sessionScopedPath(this.dir, id, ext);
   }
   shardManifestPath(shardKey) {
-    return shardKey ? path9.join(this.dir, shardKey, "_manifest.json") : path9.join(this.dir, "_manifest.json");
+    return shardKey ? path11.join(this.dir, shardKey, "_manifest.json") : path11.join(this.dir, "_manifest.json");
   }
   shardKeyForSessionId(id) {
-    const dirName = path9.dirname(id);
+    const dirName = path11.dirname(id);
     return dirName === "." ? "" : dirName;
   }
   invalidateShardManifestBySessionId(id) {
@@ -11458,7 +11729,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
    * subdirectory so sessions group naturally by day.
    */
   async ensureShardDir(id) {
-    const dirPath = path9.dirname(sessionScopedPath(this.dir, id, ""));
+    const dirPath = path11.dirname(sessionScopedPath(this.dir, id, ""));
     await ensureDir(dirPath);
     return dirPath;
   }
@@ -11520,7 +11791,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
     }
     const parentPrefix = parent.events.slice(0, boundary + 1);
     const workspaceCheckpoint = targetCheckpoint?.workspaceCheckpoint;
-    const checkpointHash = createHash("sha256").update(parentPrefix.map((event) => JSON.stringify(event)).join("\n") + "\n", "utf8").digest("hex");
+    const checkpointHash = createHash4("sha256").update(parentPrefix.map((event) => JSON.stringify(event)).join("\n") + "\n", "utf8").digest("hex");
     const inherited = parentPrefix.filter(inheritsIntoFork);
     const writer = await this.create({
       id: "",
@@ -11615,7 +11886,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
           // Shard directory (sessions/<date>/) — must match create() so the
           // .summary.json sidecar lands next to the JSONL instead of the
           // sessions root (where summaryFor() would never find it).
-          dir: path9.dirname(file),
+          dir: path11.dirname(file),
           filePath: file,
           secretScrubber: this.secretScrubber,
           checkpointCas: this.checkpointCas,
@@ -12170,7 +12441,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
     return entry;
   }
   async collectSessionFilesInShard(shardKey) {
-    const dir = shardKey ? path9.join(this.dir, shardKey) : this.dir;
+    const dir = shardKey ? path11.join(this.dir, shardKey) : this.dir;
     const entries = await this.collectSessionFiles(dir, shardKey);
     return shardKey ? entries.filter((entry) => entry.id.startsWith(`${shardKey}/`)) : entries.filter((entry) => !entry.id.includes("/"));
   }
@@ -12193,13 +12464,13 @@ var DefaultSessionStore = class _DefaultSessionStore {
         if (entry.name === "_index.jsonl") continue;
         const base = entry.name.replace(/\.jsonl$/, "");
         const id = prefix ? `${prefix}/${base}` : base;
-        files.push({ id, filePath: path9.join(dir, entry.name) });
+        files.push({ id, filePath: path11.join(dir, entry.name) });
       }
     }
     const childFileArrays = await Promise.all(
       dirEntries.map((entry) => {
         const childPrefix = depth === 0 ? entry.name : `${prefix}/${entry.name}`;
-        return this.collectSessionFiles(path9.join(dir, entry.name), childPrefix, depth + 1);
+        return this.collectSessionFiles(path11.join(dir, entry.name), childPrefix, depth + 1);
       })
     );
     return [...childFileArrays.flat(), ...files];
@@ -12232,7 +12503,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
     const childIdArrays = await Promise.all(
       dirEntries.map((entry) => {
         const childPrefix = depth === 0 ? entry.name : `${prefix}/${entry.name}`;
-        return this.collectSessionIds(path9.join(dir, entry.name), childPrefix, depth + 1);
+        return this.collectSessionIds(path11.join(dir, entry.name), childPrefix, depth + 1);
       })
     );
     return [...childIdArrays.flat(), ...fileIds];
@@ -12349,9 +12620,9 @@ var DefaultSessionStore = class _DefaultSessionStore {
   async deleteSession(id) {
     const jsonlPath = this.sessionPath(id, ".jsonl");
     const summaryPath = this.sessionPath(id, ".summary.json");
-    const shardDir = path9.dirname(jsonlPath);
-    const base = path9.basename(id);
-    const sessDir = path9.join(shardDir, base);
+    const shardDir = path11.dirname(jsonlPath);
+    const base = path11.basename(id);
+    const sessDir = path11.join(shardDir, base);
     const deletions = [
       fsp9.unlink(jsonlPath),
       fsp9.unlink(summaryPath),
@@ -12392,7 +12663,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
    */
   async readActiveSessionId() {
     try {
-      const raw = await fsp9.readFile(path9.join(this.dir, "active.json"), "utf8");
+      const raw = await fsp9.readFile(path11.join(this.dir, "active.json"), "utf8");
       const active = JSON.parse(raw);
       return active.sessionId ?? null;
     } catch {
@@ -12455,7 +12726,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
     const activeSessionId = await this.readActiveSessionId();
     const isPrunableJsonl = (name) => name.endsWith(".jsonl") && name !== "_index.jsonl" && name !== "_mailbox.jsonl" && !name.endsWith(".replay.jsonl") && !name.endsWith(".audit.jsonl");
     const pruneFile = async (dir, name, prefix) => {
-      const jsonlPath = path9.join(dir, name);
+      const jsonlPath = path11.join(dir, name);
       try {
         const stat9 = await fsp9.stat(jsonlPath);
         if (stat9.mtimeMs >= cutoff) return;
@@ -12475,7 +12746,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
         continue;
       }
       if (!entry.isDirectory()) continue;
-      const dateDir = path9.join(this.dir, entry.name);
+      const dateDir = path11.join(this.dir, entry.name);
       const files = await fsp9.readdir(dateDir, { withFileTypes: true }).catch(() => []);
       for (const file of files) {
         if (!file.isFile() || !isPrunableJsonl(file.name)) continue;
@@ -12487,7 +12758,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
     }
     for (const entry of entries) {
       if (!entry.isDirectory()) continue;
-      const dateDir = path9.join(this.dir, entry.name);
+      const dateDir = path11.join(this.dir, entry.name);
       try {
         const remaining = await fsp9.readdir(dateDir);
         if (remaining.length === 0) {
@@ -12618,9 +12889,9 @@ function makeDirectorSessionFactory(opts) {
   let dir;
   if (opts.store) {
     store = opts.store;
-    dir = opts.sessionsRoot ? path9.join(opts.sessionsRoot, runId) : "(caller-managed)";
+    dir = opts.sessionsRoot ? path12.join(opts.sessionsRoot, runId) : "(caller-managed)";
   } else if (opts.sessionsRoot) {
-    dir = path9.join(opts.sessionsRoot, runId);
+    dir = path12.join(opts.sessionsRoot, runId);
     store = new DefaultSessionStore({ dir });
   } else {
     throw new Error("makeDirectorSessionFactory requires either `store` or `sessionsRoot`");
@@ -12642,6 +12913,11 @@ function makeDirectorSessionFactory(opts) {
     }
   };
 }
+
+// src/coordination/fleet-manager.ts
+import { randomUUID as randomUUID9 } from "node:crypto";
+import * as fsp10 from "node:fs/promises";
+import * as path13 from "node:path";
 var FleetManager = class {
   /** The fleet-wide event bus. */
   fleet;
@@ -12687,7 +12963,7 @@ var FleetManager = class {
   maxContext;
   constructor(opts = {}) {
     this.manifestPath = opts.manifestPath;
-    this.directorRunId = opts.directorRunId ?? randomUUID();
+    this.directorRunId = opts.directorRunId ?? randomUUID9();
     this.maxSpawns = opts.maxSpawns ?? Number.POSITIVE_INFINITY;
     this.maxSpawnDepth = resolveMaxSpawnDepth(opts.maxSpawnDepth);
     this.spawnDepth = opts.spawnDepth ?? 0;
@@ -12902,7 +13178,7 @@ var FleetManager = class {
       })),
       usage: this.usage.snapshot()
     };
-    await fsp9.mkdir(path9.dirname(this.manifestPath), { recursive: true });
+    await fsp10.mkdir(path13.dirname(this.manifestPath), { recursive: true });
     await atomicWrite(this.manifestPath, JSON.stringify(manifest, null, 2), { mode: 384 });
     return this.manifestPath;
   }
@@ -13039,6 +13315,11 @@ var FleetManager = class {
   }
 };
 
+// src/coordination/global-mailbox.ts
+import { randomUUID as randomUUID10 } from "node:crypto";
+import * as fsp11 from "node:fs/promises";
+import * as path14 from "node:path";
+
 // src/coordination/mailbox-types.ts
 function normalizeRecipient(to) {
   return to.trim().toLowerCase() === "all" ? "*" : to.trim();
@@ -13055,7 +13336,7 @@ var REGISTRY_CACHE_TTL_MS = 2e3;
 var LINE_SEPARATOR = "\n";
 var MESSAGE_CACHE_MAX_ENTRIES = 1e4;
 function resolveProjectDir(projectRoot, globalRoot) {
-  return path9.join(globalRoot, "projects", projectSlug(projectRoot));
+  return path14.join(globalRoot, "projects", projectSlug(projectRoot));
 }
 var GlobalMailbox = class {
   /** Path to the JSONL message file. */
@@ -13119,14 +13400,14 @@ var GlobalMailbox = class {
    * @param hqPublisher — optional HQ publisher, or getter, for cross-project telemetry
    */
   constructor(projectDir, events, hqPublisher) {
-    this.messagePath = path9.join(projectDir, MAILBOX_FILE);
-    this.registryPath = path9.join(projectDir, "_mailbox.registry.json");
-    this.clientRegistryPath = path9.join(projectDir, CLIENT_REGISTRY_FILE);
+    this.messagePath = path14.join(projectDir, MAILBOX_FILE);
+    this.registryPath = path14.join(projectDir, "_mailbox.registry.json");
+    this.clientRegistryPath = path14.join(projectDir, CLIENT_REGISTRY_FILE);
     this._events = events;
     this._hqPublisher = hqPublisher;
   }
   get hqMailboxId() {
-    return `${path9.basename(path9.dirname(this.messagePath))}:mailbox`;
+    return `${path14.basename(path14.dirname(this.messagePath))}:mailbox`;
   }
   get hqPublisher() {
     return typeof this._hqPublisher === "function" ? this._hqPublisher() : this._hqPublisher;
@@ -13147,7 +13428,7 @@ var GlobalMailbox = class {
   async send(input) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const msg = {
-      id: randomUUID(),
+      id: randomUUID10(),
       from: input.from,
       // "all" is an accepted spelling of the broadcast address — canonical
       // form on disk is '*' so every query/checker matches it.
@@ -13163,9 +13444,9 @@ var GlobalMailbox = class {
       taskContext: input.taskContext
     };
     const line = JSON.stringify(msg) + LINE_SEPARATOR;
-    await fsp9.mkdir(path9.dirname(this.messagePath), { recursive: true });
+    await fsp11.mkdir(path14.dirname(this.messagePath), { recursive: true });
     await withFileLock(this.messagePath, async () => {
-      await fsp9.appendFile(this.messagePath, line, "utf8");
+      await fsp11.appendFile(this.messagePath, line, "utf8");
       const { mtimeMs, size } = await this._statMessageFile();
       this._pushToCache(msg, mtimeMs, size);
     });
@@ -13236,7 +13517,7 @@ var GlobalMailbox = class {
       }
       if (changed) {
         const serialized = all.map((m) => JSON.stringify(m)).join(LINE_SEPARATOR) + LINE_SEPARATOR;
-        await fsp9.writeFile(this.messagePath, serialized, "utf8");
+        await fsp11.writeFile(this.messagePath, serialized, "utf8");
       }
       const { mtimeMs, size } = await this._statMessageFile();
       this._setMessageCache(all, mtimeMs, size);
@@ -13278,7 +13559,7 @@ var GlobalMailbox = class {
         updated = m;
       }
       const serialized = all.map((m) => JSON.stringify(m)).join(LINE_SEPARATOR) + LINE_SEPARATOR;
-      await fsp9.writeFile(this.messagePath, serialized, "utf8");
+      await fsp11.writeFile(this.messagePath, serialized, "utf8");
       const { mtimeMs, size } = await this._statMessageFile();
       this._setMessageCache(all, mtimeMs, size);
     });
@@ -13303,7 +13584,7 @@ var GlobalMailbox = class {
         updated = m;
       }
       const serialized = all.map((m) => JSON.stringify(m)).join(LINE_SEPARATOR) + LINE_SEPARATOR;
-      await fsp9.writeFile(this.messagePath, serialized, "utf8");
+      await fsp11.writeFile(this.messagePath, serialized, "utf8");
       const { mtimeMs, size } = await this._statMessageFile();
       this._setMessageCache(all, mtimeMs, size);
     });
@@ -13550,7 +13831,7 @@ var GlobalMailbox = class {
   }
   async clearAll() {
     await withFileLock(this.messagePath, async () => {
-      await fsp9.writeFile(this.messagePath, "", "utf8");
+      await fsp11.writeFile(this.messagePath, "", "utf8");
       const { mtimeMs, size } = await this._statMessageFile();
       this._setMessageCache([], mtimeMs, size);
     });
@@ -13583,7 +13864,7 @@ var GlobalMailbox = class {
       remaining = kept.length;
       if (kept.length < all.length) {
         const content = kept.map((m) => JSON.stringify(m)).join(LINE_SEPARATOR) + LINE_SEPARATOR;
-        await fsp9.writeFile(this.messagePath, content, "utf8");
+        await fsp11.writeFile(this.messagePath, content, "utf8");
       }
       const { mtimeMs, size } = await this._statMessageFile();
       this._setMessageCache(kept, mtimeMs, size);
@@ -13604,7 +13885,7 @@ var GlobalMailbox = class {
    */
   async _readMessages() {
     try {
-      const raw = await fsp9.readFile(this.messagePath, "utf8");
+      const raw = await fsp11.readFile(this.messagePath, "utf8");
       return this._parseLines(raw);
     } catch (err) {
       if (err.code === "ENOENT") return [];
@@ -13697,7 +13978,7 @@ var GlobalMailbox = class {
    */
   async _statMessageFile() {
     try {
-      const st = await fsp9.stat(this.messagePath);
+      const st = await fsp11.stat(this.messagePath);
       return { mtimeMs: st.mtimeMs, size: st.size };
     } catch (err) {
       if (err.code === "ENOENT") {
@@ -13743,12 +14024,12 @@ var GlobalMailbox = class {
    */
   async _readMessagesCachedWork() {
     try {
-      const st = await fsp9.stat(this.messagePath);
+      const st = await fsp11.stat(this.messagePath);
       if (this._messageCache !== null && this._messageCacheMtime === st.mtimeMs && this._messageCacheSize === st.size) {
         return this._messageCache;
       }
       if (this._messageCache !== null && this._messageCacheSize >= 0 && st.size > this._messageCacheSize) {
-        const fd = await fsp9.open(this.messagePath, "r");
+        const fd = await fsp11.open(this.messagePath, "r");
         try {
           const updated = await this._readNewMessagesOnly(fd, this._messageCacheSize, st.size);
           this._messageCacheMtime = st.mtimeMs;
@@ -13824,14 +14105,14 @@ var GlobalMailbox = class {
     this._messageCacheSize = size;
   }
   async _ensureRegistry() {
-    await fsp9.mkdir(path9.dirname(this.registryPath), { recursive: true });
+    await fsp11.mkdir(path14.dirname(this.registryPath), { recursive: true });
   }
   async _readRegistry(opts) {
     if (!opts?.fresh && this._registryCache && Date.now() - this._registryCacheAt < REGISTRY_CACHE_TTL_MS) {
       return new Map(this._registryCache);
     }
     try {
-      const raw = await fsp9.readFile(this.registryPath, "utf8");
+      const raw = await fsp11.readFile(this.registryPath, "utf8");
       const data = JSON.parse(raw);
       const map = /* @__PURE__ */ new Map();
       for (const [id, agent] of Object.entries(data)) {
@@ -13873,20 +14154,20 @@ var GlobalMailbox = class {
     for (const [id, agent] of registry) {
       obj[id] = agent;
     }
-    const tmp = `${this.registryPath}.${randomUUID().slice(0, 8)}.tmp`;
-    await fsp9.writeFile(tmp, JSON.stringify(obj), "utf8");
-    await fsp9.rename(tmp, this.registryPath);
+    const tmp = `${this.registryPath}.${randomUUID10().slice(0, 8)}.tmp`;
+    await fsp11.writeFile(tmp, JSON.stringify(obj), "utf8");
+    await fsp11.rename(tmp, this.registryPath);
   }
   // ── Client registry internals ───────────────────────────────────────────
   async _ensureClientRegistry() {
-    await fsp9.mkdir(path9.dirname(this.clientRegistryPath), { recursive: true });
+    await fsp11.mkdir(path14.dirname(this.clientRegistryPath), { recursive: true });
   }
   async _readClientRegistry(opts) {
     if (!opts?.fresh && this._clientRegistryCache && Date.now() - this._clientRegistryCacheAt < REGISTRY_CACHE_TTL_MS) {
       return new Map(this._clientRegistryCache);
     }
     try {
-      const raw = await fsp9.readFile(this.clientRegistryPath, "utf8");
+      const raw = await fsp11.readFile(this.clientRegistryPath, "utf8");
       const data = JSON.parse(raw);
       const map = /* @__PURE__ */ new Map();
       for (const [id, client] of Object.entries(data)) {
@@ -13918,16 +14199,19 @@ var GlobalMailbox = class {
     for (const [id, client] of registry) {
       obj[id] = client;
     }
-    const tmp = `${this.clientRegistryPath}.${randomUUID().slice(0, 8)}.tmp`;
-    await fsp9.writeFile(tmp, JSON.stringify(obj), "utf8");
-    await fsp9.rename(tmp, this.clientRegistryPath);
+    const tmp = `${this.clientRegistryPath}.${randomUUID10().slice(0, 8)}.tmp`;
+    await fsp11.writeFile(tmp, JSON.stringify(obj), "utf8");
+    await fsp11.rename(tmp, this.clientRegistryPath);
   }
 };
+
+// src/coordination/mailbox-tool.ts
+import { createHash as createHash5 } from "node:crypto";
 function defaultResolveProjectDir(ctx) {
   return resolveProjectDir(ctx.projectRoot, wstackGlobalRoot());
 }
 function mailboxSessionTag(sessionId) {
-  return createHash("sha256").update(sessionId).digest("hex").slice(0, 8);
+  return createHash5("sha256").update(sessionId).digest("hex").slice(0, 8);
 }
 function resolveMailboxIdentity(ctx, fallbackBase = "leader") {
   const fieldId = ctx.agentId && ctx.agentId !== "unknown" ? ctx.agentId : void 0;
@@ -14273,6 +14557,9 @@ function makeFleetStatusTool(opts = {}) {
     }
   };
 }
+
+// src/coordination/fleet-supervisor.ts
+import { randomUUID as randomUUID11 } from "node:crypto";
 var COLLAB_ID_PREFIXES = ["bug-hunter-", "refactor-planner-", "critic-"];
 var DEFAULTS = {
   intervalMs: 2e4,
@@ -14514,7 +14801,7 @@ var FleetSupervisor = class {
    */
   async decide(question, context, options, risk) {
     const request = {
-      id: `fleetsup-${randomUUID()}`,
+      id: `fleetsup-${randomUUID11()}`,
       sessionId: this.opts.sessionId?.(),
       source: "system",
       question,
@@ -15002,6 +15289,11 @@ function makeMailInboxTool(opts = {}) {
     }
   };
 }
+
+// src/coordination/mailbox.ts
+import { randomUUID as randomUUID12 } from "node:crypto";
+import * as fsp12 from "node:fs/promises";
+import * as path15 from "node:path";
 var MAILBOX_FILE2 = "_mailbox.jsonl";
 var LINE_SEPARATOR2 = "\n";
 var MESSAGE_CACHE_MAX_ENTRIES2 = 1e4;
@@ -15017,7 +15309,7 @@ var DefaultMailbox = class {
   /** Counts malformed JSONL lines skipped during parsing for observability. */
   _corruptionCount = 0;
   constructor(sessionDir) {
-    this.filePath = path9.join(sessionDir, MAILBOX_FILE2);
+    this.filePath = path15.join(sessionDir, MAILBOX_FILE2);
   }
   get mailboxPath() {
     return this.filePath;
@@ -15030,7 +15322,7 @@ var DefaultMailbox = class {
   async send(input) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const msg = {
-      id: randomUUID(),
+      id: randomUUID12(),
       from: input.from,
       // "all" is an accepted spelling of the broadcast address — canonical
       // form on disk is '*' so every query/checker matches it.
@@ -15046,9 +15338,9 @@ var DefaultMailbox = class {
       taskContext: input.taskContext
     };
     const line = JSON.stringify(msg) + LINE_SEPARATOR2;
-    await fsp9.mkdir(path9.dirname(this.filePath), { recursive: true });
+    await fsp12.mkdir(path15.dirname(this.filePath), { recursive: true });
     await withFileLock(this.filePath, async () => {
-      await fsp9.appendFile(this.filePath, line, "utf8");
+      await fsp12.appendFile(this.filePath, line, "utf8");
       this._pushToCache(msg);
       const { mtime, size } = await this._statUnderLockOrAbsent();
       this._messageCacheMtime = mtime;
@@ -15148,7 +15440,7 @@ var DefaultMailbox = class {
       }
       if (changed) {
         const serialized = all.map((m) => JSON.stringify(m)).join(LINE_SEPARATOR2) + LINE_SEPARATOR2;
-        await fsp9.writeFile(this.filePath, serialized, "utf8");
+        await fsp12.writeFile(this.filePath, serialized, "utf8");
       }
       const { mtime, size } = await this._statUnderLockOrAbsent();
       this._setMessageCache(all, mtime, size);
@@ -15209,7 +15501,7 @@ var DefaultMailbox = class {
   }
   async clearAll() {
     await withFileLock(this.filePath, async () => {
-      await fsp9.writeFile(this.filePath, "", "utf8");
+      await fsp12.writeFile(this.filePath, "", "utf8");
       const { mtime, size } = await this._statUnderLockOrAbsent();
       this._setMessageCache([], mtime, size);
     });
@@ -15242,7 +15534,7 @@ var DefaultMailbox = class {
       remaining = kept.length;
       if (kept.length < all.length) {
         const content = kept.map((m) => JSON.stringify(m)).join(LINE_SEPARATOR2) + LINE_SEPARATOR2;
-        await fsp9.writeFile(this.filePath, content, "utf8");
+        await fsp12.writeFile(this.filePath, content, "utf8");
       }
       const { mtime, size } = await this._statUnderLockOrAbsent();
       this._setMessageCache(kept, mtime, size);
@@ -15265,7 +15557,7 @@ var DefaultMailbox = class {
   // ── Internal ──────────────────────────────────────────────────────────
   async _readAll() {
     try {
-      const raw = await fsp9.readFile(this.filePath, "utf8");
+      const raw = await fsp12.readFile(this.filePath, "utf8");
       return this._parseLines(raw);
     } catch (err) {
       if (err.code === "ENOENT") return [];
@@ -15340,7 +15632,7 @@ var DefaultMailbox = class {
    */
   async _statUnderLockOrAbsent() {
     try {
-      const st = await fsp9.stat(this.filePath);
+      const st = await fsp12.stat(this.filePath);
       return { mtime: st.mtimeMs, size: st.size };
     } catch (err) {
       if (err.code === "ENOENT") {
@@ -15351,12 +15643,12 @@ var DefaultMailbox = class {
   }
   async _readAllCached() {
     try {
-      const st = await fsp9.stat(this.filePath);
+      const st = await fsp12.stat(this.filePath);
       if (this._messageCache !== null && this._messageCacheMtime === st.mtimeMs && this._messageCacheSize === st.size) {
         return this._messageCache;
       }
       if (this._messageCache !== null && this._messageCacheSize >= 0 && st.size > this._messageCacheSize) {
-        const fd = await fsp9.open(this.filePath, "r");
+        const fd = await fsp12.open(this.filePath, "r");
         try {
           const updated = await this._readNewMessagesOnly(fd, this._messageCacheSize, st.size);
           this._messageCacheMtime = st.mtimeMs;
@@ -15695,14 +15987,18 @@ function createMailboxHooks(opts) {
 
 // src/coordination/null-fleet-bus.ts
 var NULL_FLEET_BUS = new FleetBus();
+
+// src/coordination/package-author-tracker.ts
+import * as fs2 from "node:fs/promises";
+import * as path16 from "node:path";
 var DEFAULT_MAX_ENTRIES = 1e4;
 var LOG_FILENAME = "package-authors.json";
 function logPath(storageDir) {
-  return path9.join(storageDir, LOG_FILENAME);
+  return path16.join(storageDir, LOG_FILENAME);
 }
 async function loadLog(storageDir, projectRoot) {
   try {
-    const raw = await fsp9.readFile(logPath(storageDir), "utf-8");
+    const raw = await fs2.readFile(logPath(storageDir), "utf-8");
     const parsed = JSON.parse(raw);
     if (!parsed.entries || !Array.isArray(parsed.entries)) {
       return { projectRoot, entries: [] };
@@ -15716,13 +16012,13 @@ async function loadLog(storageDir, projectRoot) {
   }
 }
 async function saveLog(storageDir, log) {
-  await fsp9.mkdir(storageDir, { recursive: true });
+  await fs2.mkdir(storageDir, { recursive: true });
   const tmp = `${logPath(storageDir)}.tmp.${Date.now()}`;
-  await fsp9.writeFile(tmp, JSON.stringify(log, null, 2) + "\n", "utf-8");
-  await fsp9.rename(tmp, logPath(storageDir));
+  await fs2.writeFile(tmp, JSON.stringify(log, null, 2) + "\n", "utf-8");
+  await fs2.rename(tmp, logPath(storageDir));
 }
 function detectEcosystem(manifestPath) {
-  const name = path9.basename(manifestPath).toLowerCase();
+  const name = path16.basename(manifestPath).toLowerCase();
   if (name === "package.json") return "npm";
   if (name === "go.mod") return "go";
   if (name === "cargo.toml") return "cargo";
@@ -15967,11 +16263,18 @@ mvn versions:use-latest-versions`;
       return `# Update ${entry.name} to ${entry.latestVersion} using your package manager`;
   }
 }
+
+// src/coordination/single-instance-mailbox.ts
+import { randomBytes as randomBytes3 } from "node:crypto";
+import * as fsp13 from "node:fs/promises";
+import { execFileSync } from "node:child_process";
+import * as os3 from "node:os";
+import * as path17 from "node:path";
 var MAILBOX_BRIDGE_LOCK_FILENAME = ".mailbox-bridge.lock";
 var MAILBOX_BRIDGE_TOKEN_FILENAME = ".mailbox.token";
 async function acquireOrJoin(opts) {
-  const lockPath = path9.join(opts.projectDir, MAILBOX_BRIDGE_LOCK_FILENAME);
-  const tokenPath = path9.join(opts.projectDir, MAILBOX_BRIDGE_TOKEN_FILENAME);
+  const lockPath = path17.join(opts.projectDir, MAILBOX_BRIDGE_LOCK_FILENAME);
+  const tokenPath = path17.join(opts.projectDir, MAILBOX_BRIDGE_TOKEN_FILENAME);
   const inspected = await readLockForInspection(lockPath);
   if (inspected.kind === "live") {
     const existing = inspected.lock;
@@ -15981,10 +16284,10 @@ async function acquireOrJoin(opts) {
     return { kind: "joined", lock: existing, tokenPath };
   }
   if (inspected.kind === "stale") {
-    await fsp9.unlink(lockPath).catch(() => void 0);
+    await fsp13.unlink(lockPath).catch(() => void 0);
   }
   const generation = inspected.kind === "stale" ? inspected.lock.generation + 1 : 1;
-  const token = randomBytes(32).toString("hex");
+  const token = randomBytes3(32).toString("hex");
   const tentative = {
     pid: process.pid,
     host: opts.host,
@@ -15999,34 +16302,34 @@ async function acquireOrJoin(opts) {
   return { kind: "acquired", lock: tentative, tokenPath };
 }
 async function finalize(projectDir, tentative, boundPort) {
-  const lockPath = path9.join(projectDir, MAILBOX_BRIDGE_LOCK_FILENAME);
-  const tokenPath = path9.join(projectDir, MAILBOX_BRIDGE_TOKEN_FILENAME);
+  const lockPath = path17.join(projectDir, MAILBOX_BRIDGE_LOCK_FILENAME);
+  const tokenPath = path17.join(projectDir, MAILBOX_BRIDGE_TOKEN_FILENAME);
   const finalized = {
     ...tentative,
     port: boundPort,
     url: `http://${tentative.host}:${boundPort}`
   };
   await atomicWriteJson(lockPath, finalized);
-  await fsp9.writeFile(tokenPath, finalized.token, { mode: 384 });
+  await fsp13.writeFile(tokenPath, finalized.token, { mode: 384 });
   return finalized;
 }
 async function release(projectDir, generation) {
-  const lockPath = path9.join(projectDir, MAILBOX_BRIDGE_LOCK_FILENAME);
-  const tokenPath = path9.join(projectDir, MAILBOX_BRIDGE_TOKEN_FILENAME);
+  const lockPath = path17.join(projectDir, MAILBOX_BRIDGE_LOCK_FILENAME);
+  const tokenPath = path17.join(projectDir, MAILBOX_BRIDGE_TOKEN_FILENAME);
   try {
-    const raw = await fsp9.readFile(lockPath, "utf-8");
+    const raw = await fsp13.readFile(lockPath, "utf-8");
     const parsed = JSON.parse(raw);
     if (parsed.generation !== generation) return;
     if (parsed.pid !== process.pid) return;
-    await fsp9.unlink(lockPath).catch(() => void 0);
-    await fsp9.unlink(tokenPath).catch(() => void 0);
+    await fsp13.unlink(lockPath).catch(() => void 0);
+    await fsp13.unlink(tokenPath).catch(() => void 0);
   } catch {
   }
 }
 async function readLockForInspection(lockPath) {
   let raw;
   try {
-    raw = await fsp9.readFile(lockPath, "utf-8");
+    raw = await fsp13.readFile(lockPath, "utf-8");
   } catch {
     return { kind: "absent" };
   }
@@ -16034,7 +16337,7 @@ async function readLockForInspection(lockPath) {
   try {
     parsed = JSON.parse(raw);
   } catch {
-    await fsp9.unlink(lockPath).catch(() => void 0);
+    await fsp13.unlink(lockPath).catch(() => void 0);
     return { kind: "absent" };
   }
   if (!isProcessAlive(parsed.pid)) {
@@ -16046,7 +16349,7 @@ async function readLockForInspection(lockPath) {
   return { kind: "live", lock: parsed };
 }
 async function readLiveLock(projectDir) {
-  const lockPath = path9.join(projectDir, MAILBOX_BRIDGE_LOCK_FILENAME);
+  const lockPath = path17.join(projectDir, MAILBOX_BRIDGE_LOCK_FILENAME);
   const result = await readLockForInspection(lockPath);
   if (result.kind === "live") {
     return { kind: "live", lock: result.lock };
@@ -16057,22 +16360,22 @@ async function readLiveLock(projectDir) {
   return { kind: "absent" };
 }
 async function atomicWriteJson(targetPath, value) {
-  const dir = path9.dirname(targetPath);
-  await fsp9.mkdir(dir, { recursive: true });
-  const tmp = `${targetPath}.tmp.${process.pid}.${randomBytes(4).toString("hex")}`;
+  const dir = path17.dirname(targetPath);
+  await fsp13.mkdir(dir, { recursive: true });
+  const tmp = `${targetPath}.tmp.${process.pid}.${randomBytes3(4).toString("hex")}`;
   const body = JSON.stringify(value, null, 2) + "\n";
-  await fsp9.writeFile(tmp, body, { mode: 384 });
+  await fsp13.writeFile(tmp, body, { mode: 384 });
   try {
-    await fsp9.rename(tmp, targetPath);
+    await fsp13.rename(tmp, targetPath);
   } catch (err) {
-    await fsp9.unlink(tmp).catch(() => void 0);
+    await fsp13.unlink(tmp).catch(() => void 0);
     throw err;
   }
 }
 function isProcessAlive(pid) {
   if (!Number.isInteger(pid) || pid <= 0) return false;
   if (pid === process.pid) return true;
-  if (os.platform() === "win32") {
+  if (os3.platform() === "win32") {
     try {
       const out = execFileSync("tasklist", ["/FI", `PID eq ${pid}`, "/NH", "/FO", "CSV"], {
         encoding: "utf-8",
@@ -16279,6 +16582,10 @@ var AdaptiveConcurrencyController = class {
     };
   }
 };
+
+// src/coordination/agent-monitor.ts
+import * as fs3 from "node:fs/promises";
+import * as path18 from "node:path";
 var AgentMonitorService = class {
   _fleetBus;
   _events;
@@ -16417,6 +16724,13 @@ var AgentMonitorService = class {
       task: session.task
     });
   }
+  /** Drop a retired subagent from every live in-memory monitor surface. */
+  removeSubagent(subagentId) {
+    this._sessions.delete(subagentId);
+    const dispose = this._subscriptions.get(subagentId);
+    if (dispose) dispose();
+    this._subscriptions.delete(subagentId);
+  }
   // ── Internal ───────────────────────────────────────────────────────
   _routeEvent(subagentId, type, payload) {
     const session = this._sessions.get(subagentId);
@@ -16529,11 +16843,11 @@ var AgentMonitorService = class {
     this._onEntry?.(entry);
   }
   async _appendToFile(subagentId, entry) {
-    const dir = path9.join(this._transcriptsDir, subagentId);
-    await fsp9.mkdir(dir, { recursive: true });
-    const filePath = path9.join(dir, "transcript.jsonl");
+    const dir = path18.join(this._transcriptsDir, subagentId);
+    await fs3.mkdir(dir, { recursive: true });
+    const filePath = path18.join(dir, "transcript.jsonl");
     const line = JSON.stringify(entry) + "\n";
-    await fsp9.appendFile(filePath, line, { encoding: "utf8" });
+    await fs3.appendFile(filePath, line, { encoding: "utf8" });
   }
   _uid() {
     return `${Date.now().toString(36)}${Math.random().toString(36).slice(2, 8)}`;
@@ -16568,6 +16882,9 @@ ${output}${suffix}`;
 function createAgentMonitorService(opts) {
   return new AgentMonitorService(opts);
 }
+
+// src/coordination/autonomous-brain.ts
+import { randomUUID as randomUUID13 } from "node:crypto";
 var AutonomousBrain = class {
   graph;
   // Fleet bus for emitting decisions — null-safe, no-op if not provided
@@ -16675,7 +16992,7 @@ var AutonomousBrain = class {
       consequence: i === 0 ? `Spawn the most appropriate agent for: ${taskDescription.slice(0, 80)}` : `Spawn an alternative agent for the same task`
     }));
     return this.decideAuto({
-      id: randomUUID(),
+      id: randomUUID13(),
       source,
       decisionType: "spawn",
       question: `Should we spawn a subagent for this task?`,
@@ -16718,7 +17035,7 @@ var AutonomousBrain = class {
       }
     ];
     return this.decideAuto({
-      id: randomUUID(),
+      id: randomUUID13(),
       source,
       decisionType: "approve_change",
       question: `Should we approve the change "${change.title}"?`,
@@ -16777,7 +17094,7 @@ var AutonomousBrain = class {
       consequence: "Break the task into smaller sub-tasks"
     });
     return this.decideAuto({
-      id: randomUUID(),
+      id: randomUUID13(),
       source,
       decisionType: "escalate_task",
       question: `Task failed: ${error.slice(0, 100)}. How should we proceed?`,
@@ -16910,6 +17227,14 @@ ${ctx.error}`);
     return "low";
   }
 };
+
+// src/coordination/autonomous-coordinator.ts
+import { randomUUID as randomUUID16 } from "node:crypto";
+
+// src/coordination/knowledge-graph.ts
+import { randomUUID as randomUUID14 } from "node:crypto";
+import * as fsp14 from "node:fs/promises";
+import * as path19 from "node:path";
 var KnowledgeGraph = class {
   nodes = /* @__PURE__ */ new Map();
   index = /* @__PURE__ */ new Map();
@@ -16937,8 +17262,8 @@ var KnowledgeGraph = class {
     return this.index;
   }
   constructor(sessionDir) {
-    this.filePath = path9.join(sessionDir, "_knowledge_graph");
-    this.graphFilePath = path9.join(this.filePath, "graph.jsonl");
+    this.filePath = path19.join(sessionDir, "_knowledge_graph");
+    this.graphFilePath = path19.join(this.filePath, "graph.jsonl");
   }
   // ── Write ──────────────────────────────────────────────────────────────
   /**
@@ -16946,7 +17271,7 @@ var KnowledgeGraph = class {
    * Returns the node with its assigned id.
    */
   async add(node) {
-    const full = { id: randomUUID(), ...node };
+    const full = { id: randomUUID14(), ...node };
     this.nodes.set(full.id, full);
     this._trackSeq(full.id);
     this._addToIndex(full, this._indexKeys(full));
@@ -17029,8 +17354,8 @@ var KnowledgeGraph = class {
    * used to poll for new nodes since the last check.
    */
   subscribe(agentId, filter) {
-    const channel = randomUUID();
-    const sub = { id: randomUUID(), agentId, filter, channel };
+    const channel = randomUUID14();
+    const sub = { id: randomUUID14(), agentId, filter, channel };
     this.subs.set(channel, sub);
     this.pendingDeliveries.set(channel, []);
     return channel;
@@ -17120,7 +17445,8 @@ var KnowledgeGraph = class {
       const nodeTags = node.tags ?? node.tags ?? [];
       if (!f.tags.some((t) => nodeTags.includes(t))) return false;
     }
-    if (f.since && node.id > f.since) ;
+    if (f.since && node.id > f.since) {
+    }
     return true;
   }
   _deliver(node) {
@@ -17132,23 +17458,23 @@ var KnowledgeGraph = class {
     }
   }
   async _persist(node) {
-    await fsp9.mkdir(this.filePath, { recursive: true });
+    await fsp14.mkdir(this.filePath, { recursive: true });
     const line = JSON.stringify(node) + "\n";
     await withFileLock(this.graphFilePath, async () => {
-      await fsp9.appendFile(this.graphFilePath, line, "utf8");
+      await fsp14.appendFile(this.graphFilePath, line, "utf8");
     });
   }
   async _append(node) {
-    await fsp9.mkdir(this.filePath, { recursive: true });
+    await fsp14.mkdir(this.filePath, { recursive: true });
     const line = JSON.stringify({ op: "update", node }) + "\n";
     await withFileLock(this.graphFilePath, async () => {
-      await fsp9.appendFile(this.graphFilePath, line, "utf8");
+      await fsp14.appendFile(this.graphFilePath, line, "utf8");
     });
   }
   /** Rebuild in-memory state from the log file. Call on startup. */
   async load() {
     try {
-      const content = await fsp9.readFile(this.graphFilePath, "utf8");
+      const content = await fsp14.readFile(this.graphFilePath, "utf8");
       const lines = content.split("\n").filter(Boolean);
       for (const line of lines) {
         try {
@@ -17470,6 +17796,9 @@ var TaskDAG = class {
     return false;
   }
 };
+
+// src/coordination/task-auctioneer.ts
+import { randomUUID as randomUUID15 } from "node:crypto";
 var TaskAuctioneer = class {
   graph;
   fleet;
@@ -17589,7 +17918,7 @@ var TaskAuctioneer = class {
     const score = dispatchResult.confidence * (dispatchResult.role === agent.agentRole ? 1.2 : 1);
     if (score < this.minConfidence) return false;
     const bid = {
-      id: randomUUID(),
+      id: randomUUID15(),
       taskId,
       agentId: agent.agentId,
       agentName: agent.agentName,
@@ -18515,7 +18844,7 @@ var AutonomousCoordinator = class _AutonomousCoordinator {
           break;
         }
         const decision = await this.brain.decideAuto({
-          id: randomUUID(),
+          id: randomUUID16(),
           source: "system",
           decisionType: "prioritize_goals",
           question: `What should we work on next? Open goals: ${dispatchable.map((g) => g.title).join(", ")}`,
@@ -19010,7 +19339,163 @@ ${input.detail}`
     this.onCoordinatorEvent?.(event);
   }
 };
-
-export { ACP_AGENTS, AGENTS_BY_PHASE, AGENT_CATALOG, TOOLS as AGENT_TOOL_PRESETS, ALL_AGENT_DEFINITIONS, ALL_FLEET_AGENTS, AUDIT_LOG_AGENT, AdaptiveConcurrencyController, AgentMonitorService, AutonomousBrain, AutonomousCoordinator, BUG_HUNTER_AGENT, BUILD_AGENTS, BrainDecisionQueue, BrainMonitor, BudgetExceededError, BudgetThresholdSignal, ChangeManager, CollabSession, ConsensusProtocol, DECISION_TIMEOUT_MS, DEFAULT_DIRECTOR_PREAMBLE, DEFAULT_DISPATCH_ROLE, DEFAULT_MAX_FLEET_SPAWNS, DEFAULT_QUALITY_CHECKS, DEFAULT_SUBAGENT_BASELINE, DELIVERY_AGENTS, DEPENDENCY_FILE_PATTERNS, DISCOVERY_AGENTS, DOMAIN_AGENTS, DefaultBrainArbiter, DefaultMailbox, DefaultMultiAgentCoordinator, Director, DirectorAlertLevel, FLEET_ROSTER, FLEET_ROSTER_BUDGETS, FLEET_ROSTER_WITHACP, FleetBus, FleetCostCapError, FleetManager, FleetSpawnBudgetError, FleetSupervisor, FleetTokenCapError, FleetUsageAggregator, GlobalMailbox, HARD_MAX_SPAWN_DEPTH, HEAVY_BUDGET, HumanEscalatingBrainArbiter, InMemoryAgentBridge, InMemoryBridgeTransport, KNOWLEDGE_AGENTS, KnowledgeGraph, LIGHT_BUDGET, LargeAnswerStore, MAILBOX_BRIDGE_LOCK_FILENAME, MAILBOX_BRIDGE_TOKEN_FILENAME, MAILBOX_HEALTH_DEFAULT_FAILURE_THRESHOLD, MAILBOX_HEALTH_DEFAULT_FROM, MAILBOX_HEALTH_DEFAULT_INTERVAL_MS, MAILBOX_HEALTH_DEFAULT_TIMEOUT_MS, MATRIX_PHASE_KEYS, MAX_SUBAGENT_STRUCTURED_REPORT_CHARS, MEDIUM_BUDGET, META_AGENTS, MailboxHealthWatchdog, NULL_FLEET_BUS, ObservableBrainArbiter, PLANNING_AGENTS, REFACTOR_PLANNER_AGENT, REVIEW_AGENTS, SECURITY_SCANNER_AGENT, SUBAGENT_STRUCTURED_REPORT_META_KEY, SubagentBudget, TIMEOUT_PREEMPT_FRACTION, TaskAuctioneer, TaskDAG, VERIFY_AGENTS, WorktreeIntegrationError, acquireOrJoin, actionToAckInput, applyRosterBudget, attachAutoExtend, attachDepWatcherBridge, buildDownAlert, buildRecoveryAlert, composeDirectorPrompt, composeSubagentPrompt, createAgentMonitorService, createDelegateTool, createMailboxHooks, createMessage, detectEcosystem, dispatchAgent, finalize, formatHumanPrompt, formatSubagentStructuredReport, getAgentDefinition, getFullPackageLog, getManifestPackages, getPackageAuthor, getPackagesByAgent, isValidMatrixKey, mailboxSessionTag, makeAgentSubagentRunner, makeAskResultTool, makeAskTool, makeAssignTool, makeAwaitTasksTool, makeCollabDebugTool, makeDependencyWatcherConfig, makeDirectorSessionFactory, makeFleetEmitTool, makeFleetTool as makeFleetHealthTool, makeFleetTool as makeFleetSessionTool, makeFleetStatusTool, makeFleetTool, makeFleetTool as makeFleetUsageTool, makeKanbanQueueTool, makeLLMClassifier, makeMailInboxTool, makeMailSendTool, makeMailboxTool, makeQualityGateTool, makeRollUpTool, makeSpawnTool, makeSubagentResultTool, makeTerminateAllTool, makeTerminateTool, makeWorkCompleteTool, matrixKeyKind, normalizeRecipient, normalizeSubagentStructuredReport, phaseForRole, readLiveLock, readSubagentStructuredReport, recordPackageAction, release, resolveImplementationModelTarget, resolveMailboxIdentity, resolveMaxSpawnDepth, resolveModelMatrix, resolveModelMatrixResolution, resolveModelTargetFromEntry, resolveProjectDir, resolveSubagentModelTarget, resolveSubagentWorktreeDecision, roleNeedsIndependentReviewModel, rosterSummaryFromConfigs, sameModelReference, scoreAgents, startPackageOutdatedWatcher, subagentNeedsWorktree, updatePackageOutdatedStatus, validateWatchdogOptions, withDisabledToolFiltering, wrapSubagentRunnerWithWorktrees };
+export {
+  ACP_AGENTS,
+  AGENTS_BY_PHASE,
+  AGENT_CATALOG,
+  TOOLS as AGENT_TOOL_PRESETS,
+  ALL_AGENT_DEFINITIONS,
+  ALL_FLEET_AGENTS,
+  AUDIT_LOG_AGENT,
+  AdaptiveConcurrencyController,
+  AgentMonitorService,
+  AutonomousBrain,
+  AutonomousCoordinator,
+  BUG_HUNTER_AGENT,
+  BUILD_AGENTS,
+  BrainDecisionQueue,
+  BrainMonitor,
+  BudgetExceededError,
+  BudgetThresholdSignal,
+  ChangeManager,
+  CollabSession,
+  ConsensusProtocol,
+  DECISION_TIMEOUT_MS,
+  DEFAULT_DIRECTOR_PREAMBLE,
+  DEFAULT_DISPATCH_ROLE,
+  DEFAULT_MAX_FLEET_SPAWNS,
+  DEFAULT_QUALITY_CHECKS,
+  DEFAULT_SUBAGENT_BASELINE,
+  DELIVERY_AGENTS,
+  DEPENDENCY_FILE_PATTERNS,
+  DISCOVERY_AGENTS,
+  DOMAIN_AGENTS,
+  DefaultBrainArbiter,
+  DefaultMailbox,
+  DefaultMultiAgentCoordinator,
+  Director,
+  DirectorAlertLevel,
+  FLEET_ROSTER,
+  FLEET_ROSTER_BUDGETS,
+  FLEET_ROSTER_WITHACP,
+  FleetBus,
+  FleetCostCapError,
+  FleetManager,
+  FleetSpawnBudgetError,
+  FleetSupervisor,
+  FleetTokenCapError,
+  FleetUsageAggregator,
+  GlobalMailbox,
+  HARD_MAX_SPAWN_DEPTH,
+  HEAVY_BUDGET,
+  HumanEscalatingBrainArbiter,
+  InMemoryAgentBridge,
+  InMemoryBridgeTransport,
+  KNOWLEDGE_AGENTS,
+  KnowledgeGraph,
+  LIGHT_BUDGET,
+  LargeAnswerStore,
+  MAILBOX_BRIDGE_LOCK_FILENAME,
+  MAILBOX_BRIDGE_TOKEN_FILENAME,
+  MAILBOX_HEALTH_DEFAULT_FAILURE_THRESHOLD,
+  MAILBOX_HEALTH_DEFAULT_FROM,
+  MAILBOX_HEALTH_DEFAULT_INTERVAL_MS,
+  MAILBOX_HEALTH_DEFAULT_TIMEOUT_MS,
+  MATRIX_PHASE_KEYS,
+  MAX_SUBAGENT_STRUCTURED_REPORT_CHARS,
+  MEDIUM_BUDGET,
+  META_AGENTS,
+  MailboxHealthWatchdog,
+  NULL_FLEET_BUS,
+  ObservableBrainArbiter,
+  PLANNING_AGENTS,
+  REFACTOR_PLANNER_AGENT,
+  REVIEW_AGENTS,
+  SECURITY_SCANNER_AGENT,
+  SUBAGENT_STRUCTURED_REPORT_META_KEY,
+  SubagentBudget,
+  TIMEOUT_PREEMPT_FRACTION,
+  TaskAuctioneer,
+  TaskDAG,
+  VERIFY_AGENTS,
+  WorktreeIntegrationError,
+  acquireOrJoin,
+  actionToAckInput,
+  applyRosterBudget,
+  attachAutoExtend,
+  attachDepWatcherBridge,
+  buildDownAlert,
+  buildRecoveryAlert,
+  composeDirectorPrompt,
+  composeSubagentPrompt,
+  createAgentMonitorService,
+  createDelegateTool,
+  createMailboxHooks,
+  createMessage,
+  detectEcosystem,
+  dispatchAgent,
+  finalize,
+  formatHumanPrompt,
+  formatSubagentStructuredReport,
+  getAgentDefinition,
+  getFullPackageLog,
+  getManifestPackages,
+  getPackageAuthor,
+  getPackagesByAgent,
+  isValidMatrixKey,
+  mailboxSessionTag,
+  makeAgentSubagentRunner,
+  makeAskResultTool,
+  makeAskTool,
+  makeAssignTool,
+  makeAwaitTasksTool,
+  makeCollabDebugTool,
+  makeDependencyWatcherConfig,
+  makeDirectorSessionFactory,
+  makeFleetEmitTool,
+  makeFleetTool as makeFleetHealthTool,
+  makeFleetTool as makeFleetSessionTool,
+  makeFleetStatusTool,
+  makeFleetTool,
+  makeFleetTool as makeFleetUsageTool,
+  makeKanbanQueueTool,
+  makeLLMClassifier,
+  makeMailInboxTool,
+  makeMailSendTool,
+  makeMailboxTool,
+  makeQualityGateTool,
+  makeRollUpTool,
+  makeSpawnTool,
+  makeSubagentResultTool,
+  makeTerminateAllTool,
+  makeTerminateTool,
+  makeWorkCompleteTool,
+  matrixKeyKind,
+  normalizeRecipient,
+  normalizeSubagentStructuredReport,
+  phaseForRole,
+  readLiveLock,
+  readSubagentStructuredReport,
+  recordPackageAction,
+  release,
+  resolveImplementationModelTarget,
+  resolveMailboxIdentity,
+  resolveMaxSpawnDepth,
+  resolveModelMatrix,
+  resolveModelMatrixResolution,
+  resolveModelTargetFromEntry,
+  resolveProjectDir,
+  resolveSubagentModelTarget,
+  resolveSubagentWorktreeDecision,
+  roleNeedsIndependentReviewModel,
+  rosterSummaryFromConfigs,
+  sameModelReference,
+  scoreAgents,
+  startPackageOutdatedWatcher,
+  subagentNeedsWorktree,
+  updatePackageOutdatedStatus,
+  validateWatchdogOptions,
+  withDisabledToolFiltering,
+  wrapSubagentRunnerWithWorktrees
+};
 //# sourceMappingURL=index.js.map
-//# sourceMappingURL=index.js.map