@wrongstack/core 0.284.0 → 0.285.0

package/dist/execution/index.js

@@ -1,25 +1,20 @@
-import { randomUUID, randomInt, createHash, randomBytes } from 'crypto';
-import * as fs from 'fs/promises';
-import * as path3 from 'path';
-import * as os from 'os';
-import { readFileSync, statSync, existsSync } from 'fs';
-import { fileURLToPath } from 'url';
-import { execFile } from 'child_process';
-import { promisify, isDeepStrictEqual } from 'util';
-import { EventEmitter } from 'events';
-
 // src/utils/assert-never.ts
 function assertNever(x, message) {
   const err = new Error(
-    `Unhandled case: ${JSON.stringify(x)}`
+    message ?? `Unhandled case: ${JSON.stringify(x)}`
   );
   err.name = "AssertNeverError";
   throw err;
 }
+
+// src/utils/atomic-write.ts
+import { randomBytes } from "node:crypto";
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
 async function atomicWrite(targetPath, content, opts = {}) {
-  const dir = path3.dirname(targetPath);
+  const dir = path.dirname(targetPath);
   await fs.mkdir(dir, { recursive: true });
-  const tmp = path3.join(dir, `.${path3.basename(targetPath)}.${randomBytes(6).toString("hex")}.tmp`);
+  const tmp = path.join(dir, `.${path.basename(targetPath)}.${randomBytes(6).toString("hex")}.tmp`);
   try {
     if (typeof content === "string") {
       await fs.writeFile(tmp, content, { flag: "wx", encoding: opts.encoding ?? "utf8" });
@@ -81,11 +76,13 @@ async function renameWithRetry(from, to) {
       if (!code || !TRANSIENT_RENAME_CODES.has(code) || i === delays.length) {
         throw err;
       }
-      await new Promise((resolve5) => setTimeout(resolve5, delays[i]));
+      await new Promise((resolve4) => setTimeout(resolve4, delays[i]));
     }
   }
   throw lastErr;
 }
+
+// src/utils/context-evidence.ts
 var MAX_DIGEST_CHARS = 4e3;
 function createContextEvidenceState() {
   return {
@@ -170,7 +167,7 @@ function toErrorMessage(err) {
 // src/utils/expect-defined.ts
 function expectDefined(value, label) {
   if (value === null || value === void 0) {
-    const err = new Error("Expected value to be defined");
+    const err = new Error(label ? `Expected ${label} to be defined` : "Expected value to be defined");
     err.name = "ExpectDefinedError";
     throw err;
   }
@@ -184,10 +181,10 @@ function validateAgainstSchema(value, schema) {
   return { ok: errors.length === 0, errors };
 }
 var MAX_SCHEMA_DEPTH = 64;
-function walk(value, schema, path12, errors, depth) {
+function walk(value, schema, path11, errors, depth) {
   if (depth > MAX_SCHEMA_DEPTH) {
     errors.push({
-      path: path12 || "<root>",
+      path: path11 || "<root>",
       message: `schema nesting exceeds maximum depth (${MAX_SCHEMA_DEPTH})`
     });
     return;
@@ -195,7 +192,7 @@ function walk(value, schema, path12, errors, depth) {
   if (schema.enum !== void 0) {
     if (!enumIncludes(schema.enum, value)) {
       errors.push({
-        path: path12 || "<root>",
+        path: path11 || "<root>",
         message: `expected one of ${JSON.stringify(schema.enum)}, got ${JSON.stringify(value)}`
       });
       return;
@@ -204,7 +201,7 @@ function walk(value, schema, path12, errors, depth) {
   if (typeof schema.type === "string") {
     if (!checkType(value, schema.type)) {
       errors.push({
-        path: path12 || "<root>",
+        path: path11 || "<root>",
         message: `expected ${schema.type}, got ${describeType(value)} (${previewValue(value)})`
       });
       return;
@@ -216,7 +213,7 @@ function walk(value, schema, path12, errors, depth) {
       if (!(req in obj)) {
         const expected = schema.properties?.[req]?.type;
         errors.push({
-          path: joinPath(path12, req),
+          path: joinPath(path11, req),
           message: `required property missing${typeof expected === "string" ? ` (expected ${expected})` : ""}`
         });
       }
@@ -224,14 +221,14 @@ function walk(value, schema, path12, errors, depth) {
     if (schema.properties) {
       for (const [key, subSchema] of Object.entries(schema.properties)) {
         if (key in obj) {
-          walk(obj[key], subSchema, joinPath(path12, key), errors, depth + 1);
+          walk(obj[key], subSchema, joinPath(path11, key), errors, depth + 1);
         }
       }
     }
   }
   if (schema.type === "array" && Array.isArray(value) && schema.items) {
     for (let i = 0; i < value.length; i++) {
-      walk(value[i], schema.items, `${path12}[${i}]`, errors, depth + 1);
+      walk(value[i], schema.items, `${path11}[${i}]`, errors, depth + 1);
     }
   }
 }
@@ -508,6 +505,9 @@ function safeParse(input, maxBytes = 5e6) {
 function slugify(name, fallback = "prompt", maxLen = 64) {
   return name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, maxLen).replace(/-+$/g, "") || fallback;
 }
+
+// src/utils/ulid.ts
+import { randomBytes as randomBytes2 } from "node:crypto";
 var ENCODING = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
 var ENCODING_LEN = ENCODING.length;
 var TIME_LEN = 10;
@@ -523,7 +523,7 @@ function encodeTime(now, len) {
   return str;
 }
 function encodeRandom(len) {
-  const bytes = randomBytes(len);
+  const bytes = randomBytes2(len);
   let str = "";
   for (let i = 0; i < len; i++) {
     str += ENCODING[bytes[i] % ENCODING_LEN];
@@ -536,7 +536,7 @@ function ulid(seedTime = Date.now()) {
 
 // src/utils/sleep.ts
 function sleep(ms) {
-  return new Promise((resolve5) => setTimeout(resolve5, ms));
+  return new Promise((resolve4) => setTimeout(resolve4, ms));
 }
 
 // src/utils/string.ts
@@ -1498,12 +1498,17 @@ function normalizeToolResultRenderMode(value) {
 function resolveToolResultRenderMode(modes, toolName) {
   return normalizeToolResultRenderMode(modes?.[toolName]) ?? DEFAULT_TOOL_RESULT_RENDER_MODE;
 }
+
+// src/utils/wstack-paths.ts
+import { createHash } from "node:crypto";
+import * as os from "node:os";
+import * as path2 from "node:path";
 function projectHash(absRoot) {
-  return createHash("sha256").update(path3.resolve(absRoot)).digest("hex").slice(0, 12);
+  return createHash("sha256").update(path2.resolve(absRoot)).digest("hex").slice(0, 12);
 }
 function projectSlug(absRoot) {
-  const base = slugify2(path3.basename(absRoot));
-  const hash = createHash("sha256").update(path3.resolve(absRoot)).digest("hex").slice(0, 6);
+  const base = slugify2(path2.basename(absRoot));
+  const hash = createHash("sha256").update(path2.resolve(absRoot)).digest("hex").slice(0, 6);
   return `${base}-${hash}`;
 }
 function slugify2(name) {
@@ -1511,61 +1516,61 @@ function slugify2(name) {
 }
 function wstackGlobalRoot() {
   const fromEnv = process.env["WRONGSTACK_HOME"];
-  if (fromEnv && fromEnv.trim().length > 0) return path3.resolve(fromEnv);
-  return path3.join(os.homedir(), ".wrongstack");
+  if (fromEnv && fromEnv.trim().length > 0) return path2.resolve(fromEnv);
+  return path2.join(os.homedir(), ".wrongstack");
 }
 function resolveWstackPaths(opts) {
-  const globalRoot = opts.globalRoot ?? (opts.userHome ? path3.join(opts.userHome, ".wrongstack") : wstackGlobalRoot());
+  const globalRoot = opts.globalRoot ?? (opts.userHome ? path2.join(opts.userHome, ".wrongstack") : wstackGlobalRoot());
   const homeDir = opts.userHome ?? os.homedir();
   const hash = projectHash(opts.projectRoot);
   const slug = projectSlug(opts.projectRoot);
-  const projectDir = path3.join(globalRoot, "projects", slug);
+  const projectDir = path2.join(globalRoot, "projects", slug);
   return {
     globalRoot,
     projectRoot: opts.projectRoot,
     homeDir,
     configDir: globalRoot,
-    globalConfig: path3.join(globalRoot, "config.json"),
-    secretsKey: path3.join(globalRoot, ".key"),
-    globalMemory: path3.join(globalRoot, "memory.md"),
-    globalSkills: path3.join(globalRoot, "skills"),
-    globalClaudeSkills: path3.join(homeDir, ".claude", "skills"),
-    globalDesignKits: path3.join(globalRoot, "design-kits"),
-    globalPrompts: path3.join(globalRoot, "prompts"),
-    globalInstructions: path3.join(globalRoot, "instructions"),
-    promptUsage: path3.join(globalRoot, "prompt-usage.json"),
-    cacheDir: path3.join(globalRoot, "cache"),
-    modelsCache: path3.join(globalRoot, "cache", "models.dev.json"),
-    modelsOverlayCache: path3.join(globalRoot, "cache", "models-overlay.json"),
-    historyFile: path3.join(globalRoot, "history"),
-    logFile: path3.join(globalRoot, "logs", "wrongstack.log"),
+    globalConfig: path2.join(globalRoot, "config.json"),
+    secretsKey: path2.join(globalRoot, ".key"),
+    globalMemory: path2.join(globalRoot, "memory.md"),
+    globalSkills: path2.join(globalRoot, "skills"),
+    globalClaudeSkills: path2.join(homeDir, ".claude", "skills"),
+    globalDesignKits: path2.join(globalRoot, "design-kits"),
+    globalPrompts: path2.join(globalRoot, "prompts"),
+    globalInstructions: path2.join(globalRoot, "instructions"),
+    promptUsage: path2.join(globalRoot, "prompt-usage.json"),
+    cacheDir: path2.join(globalRoot, "cache"),
+    modelsCache: path2.join(globalRoot, "cache", "models.dev.json"),
+    modelsOverlayCache: path2.join(globalRoot, "cache", "models-overlay.json"),
+    historyFile: path2.join(globalRoot, "history"),
+    logFile: path2.join(globalRoot, "logs", "wrongstack.log"),
     projectDir,
-    projectCodebaseIndex: path3.join(projectDir, "codebase-index"),
-    projectMemory: path3.join(projectDir, "memory.md"),
-    projectSessions: path3.join(projectDir, "sessions"),
-    projectTrust: path3.join(projectDir, "trust.json"),
-    projectMeta: path3.join(projectDir, "meta.json"),
-    projectLocalConfig: path3.join(projectDir, "config.local.json"),
-    inProjectConfig: path3.join(opts.projectRoot, ".wrongstack", "config.json"),
-    inProjectAgentsFile: path3.join(opts.projectRoot, ".wrongstack", "AGENTS.md"),
-    inProjectSkills: path3.join(opts.projectRoot, ".wrongstack", "skills"),
-    inProjectClaudeSkills: path3.join(opts.projectRoot, ".claude", "skills"),
-    inProjectPrompts: path3.join(opts.projectRoot, ".wrongstack", "prompts"),
-    inProjectInstructions: path3.join(opts.projectRoot, ".wrongstack", "instructions"),
-    inProjectDesignKits: path3.join(opts.projectRoot, ".wrongstack", "design-kits"),
-    inProjectWorktrees: path3.join(opts.projectRoot, ".wrongstack", "worktrees"),
+    projectCodebaseIndex: path2.join(projectDir, "codebase-index"),
+    projectMemory: path2.join(projectDir, "memory.md"),
+    projectSessions: path2.join(projectDir, "sessions"),
+    projectTrust: path2.join(projectDir, "trust.json"),
+    projectMeta: path2.join(projectDir, "meta.json"),
+    projectLocalConfig: path2.join(projectDir, "config.local.json"),
+    inProjectConfig: path2.join(opts.projectRoot, ".wrongstack", "config.json"),
+    inProjectAgentsFile: path2.join(opts.projectRoot, ".wrongstack", "AGENTS.md"),
+    inProjectSkills: path2.join(opts.projectRoot, ".wrongstack", "skills"),
+    inProjectClaudeSkills: path2.join(opts.projectRoot, ".claude", "skills"),
+    inProjectPrompts: path2.join(opts.projectRoot, ".wrongstack", "prompts"),
+    inProjectInstructions: path2.join(opts.projectRoot, ".wrongstack", "instructions"),
+    inProjectDesignKits: path2.join(opts.projectRoot, ".wrongstack", "design-kits"),
+    inProjectWorktrees: path2.join(opts.projectRoot, ".wrongstack", "worktrees"),
     projectHash: hash,
     projectSlug: slug,
-    projectGoal: path3.join(projectDir, "goal.json"),
-    projectInputHistory: path3.join(projectDir, "input-history.json"),
-    projectSpecs: path3.join(projectDir, "specs"),
-    projectTaskGraphs: path3.join(projectDir, "task-graphs"),
-    projectSddSession: path3.join(projectDir, "sdd-session.json"),
-    projectPlan: path3.join(projectDir, "plan.json"),
-    projectAutophase: path3.join(projectDir, "autophase"),
-    projectSddBoards: path3.join(projectDir, "sdd-boards"),
-    syncConfig: path3.join(globalRoot, "sync.json"),
-    projectStatus: (projectHash2) => path3.join(globalRoot, "projects", projectHash2, "status.json")
+    projectGoal: path2.join(projectDir, "goal.json"),
+    projectInputHistory: path2.join(projectDir, "input-history.json"),
+    projectSpecs: path2.join(projectDir, "specs"),
+    projectTaskGraphs: path2.join(projectDir, "task-graphs"),
+    projectSddSession: path2.join(projectDir, "sdd-session.json"),
+    projectPlan: path2.join(projectDir, "plan.json"),
+    projectAutophase: path2.join(projectDir, "autophase"),
+    projectSddBoards: path2.join(projectDir, "sdd-boards"),
+    syncConfig: path2.join(globalRoot, "sync.json"),
+    projectStatus: (projectHash2) => path2.join(globalRoot, "projects", projectHash2, "status.json")
   };
 }
 
@@ -2238,6 +2243,11 @@ var AutonomousRunner = class {
     this.stopped = true;
   }
 };
+
+// src/utils/instruction-file.ts
+import { readFileSync, statSync } from "node:fs";
+import * as path3 from "node:path";
+import { fileURLToPath } from "node:url";
 var textCache = /* @__PURE__ */ new Map();
 var rootCandidates;
 function readBundledInstructionText(relativePath) {
@@ -2461,6 +2471,9 @@ function extractText(result) {
   }
   return typeof r.text === "string" ? r.text : "";
 }
+
+// src/storage/goal-store.ts
+import * as fsp from "node:fs/promises";
 var MAX_JOURNAL_ENTRIES = 500;
 function goalFilePath(projectRoot) {
   return resolveWstackPaths({ projectRoot }).projectGoal;
@@ -2469,7 +2482,7 @@ async function loadGoal(filePath, events) {
   const t0 = Date.now();
   let raw;
   try {
-    raw = await fs.readFile(filePath, "utf8");
+    raw = await fsp.readFile(filePath, "utf8");
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT") {
@@ -3231,6 +3244,12 @@ var DESIGN_STACKS = ["web", "react-native", "flutter", "swiftui", "compose"];
 function isDesignStack(v) {
   return DESIGN_STACKS.includes(v);
 }
+
+// src/execution/design-kit-loader.ts
+import { existsSync } from "node:fs";
+import * as fs2 from "node:fs/promises";
+import * as path4 from "node:path";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
 var KIT_FILE = "KIT.md";
 var TOKENS_FILE = "tokens.json";
 var FOUNDATIONS_ID = "_foundations";
@@ -3337,15 +3356,15 @@ var DefaultDesignKitLoader = class {
     for (const { dir, source } of this.dirs) {
       let entries;
       try {
-        entries = await fs.readdir(dir, { withFileTypes: true });
+        entries = await fs2.readdir(dir, { withFileTypes: true });
       } catch {
         continue;
       }
       for (const e of entries) {
         if (!e.isDirectory()) continue;
-        const kitFile = path3.join(dir, e.name, KIT_FILE);
+        const kitFile = path4.join(dir, e.name, KIT_FILE);
         try {
-          const raw = await fs.readFile(kitFile, "utf8");
+          const raw = await fs2.readFile(kitFile, "utf8");
           const fm = parseKitFrontmatter(raw);
           const id = fm.id ?? e.name;
           if (!fm.name) continue;
@@ -3406,7 +3425,7 @@ var DefaultDesignKitLoader = class {
     if (cached !== void 0) return cached;
     const m = await this.find(id);
     if (!m) throw new Error(`Design kit "${id}" not found`);
-    const raw = await fs.readFile(m.path, "utf8");
+    const raw = await fs2.readFile(m.path, "utf8");
     const body = narrowStackSections(stripFrontmatter(raw), stack);
     this.bodyCache.set(key, body);
     return body;
@@ -3417,9 +3436,9 @@ var DefaultDesignKitLoader = class {
     const m = await this.find(id);
     let tokens;
     if (m) {
-      const tokensPath = path3.join(path3.dirname(m.path), TOKENS_FILE);
+      const tokensPath = path4.join(path4.dirname(m.path), TOKENS_FILE);
       try {
-        const raw = await fs.readFile(tokensPath, "utf8");
+        const raw = await fs2.readFile(tokensPath, "utf8");
         const parsed = JSON.parse(raw);
         tokens = parsed;
       } catch {
@@ -3444,12 +3463,12 @@ var DefaultDesignKitLoader = class {
 };
 function resolveBundledDesignKitsDir() {
   try {
-    const here = path3.dirname(fileURLToPath(import.meta.url));
+    const here = path4.dirname(fileURLToPath2(import.meta.url));
     const candidates = [
-      path3.join(here, "design-kits"),
-      path3.join(here, "..", "design-kits"),
-      path3.join(here, "..", "..", "design-kits"),
-      path3.join(here, "..", "..", "..", "design-kits")
+      path4.join(here, "design-kits"),
+      path4.join(here, "..", "design-kits"),
+      path4.join(here, "..", "..", "design-kits"),
+      path4.join(here, "..", "..", "..", "design-kits")
     ];
     for (const c of candidates) {
       if (existsSync(c)) return c;
@@ -3474,9 +3493,14 @@ function getDesignKitLoader(projectRoot) {
 function _resetDesignKitLoaderMemo() {
   loaderMemo.clear();
 }
+
+// src/execution/design-project-store.ts
+import { existsSync as existsSync2 } from "node:fs";
+import * as fs3 from "node:fs/promises";
+import * as path5 from "node:path";
 var DESIGN_DIR = ".design";
 function designProjectDir(projectRoot) {
-  return path3.join(projectRoot, DESIGN_DIR);
+  return path5.join(projectRoot, DESIGN_DIR);
 }
 var RULE_FILES = ["rules.md", "RULES.md", "design.md"];
 var rulesCache = /* @__PURE__ */ new Map();
@@ -3485,7 +3509,7 @@ async function loadProjectDesignRules(projectRoot) {
   let rules;
   for (const name of RULE_FILES) {
     try {
-      const txt = await fs.readFile(path3.join(designProjectDir(projectRoot), name), "utf8");
+      const txt = await fs3.readFile(path5.join(designProjectDir(projectRoot), name), "utf8");
       if (txt.trim()) {
         rules = txt.trim();
         break;
@@ -3506,7 +3530,7 @@ function parseOverrides(value) {
 }
 async function loadActiveKit(projectRoot) {
   try {
-    const raw = await fs.readFile(path3.join(designProjectDir(projectRoot), "active.json"), "utf8");
+    const raw = await fs3.readFile(path5.join(designProjectDir(projectRoot), "active.json"), "utf8");
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed.kit === "string") {
       return {
@@ -3539,11 +3563,11 @@ function applyTokenOverrides(tokens, overrides) {
 }
 async function ensureDesignDir(projectRoot) {
   const dir = designProjectDir(projectRoot);
-  await fs.mkdir(dir, { recursive: true });
-  const gi = path3.join(dir, ".gitignore");
-  if (!existsSync(gi)) {
+  await fs3.mkdir(dir, { recursive: true });
+  const gi = path5.join(dir, ".gitignore");
+  if (!existsSync2(gi)) {
     try {
-      await fs.writeFile(gi, "*\n");
+      await fs3.writeFile(gi, "*\n");
     } catch {
     }
   }
@@ -3554,17 +3578,17 @@ async function recordKitChoice(projectRoot, kit, stack, source, isoTime, overrid
     const dir = await ensureDesignDir(projectRoot);
     const record = { kit, stack: stack ?? null };
     if (overrides && Object.keys(overrides).length > 0) record.overrides = overrides;
-    await fs.writeFile(path3.join(dir, "active.json"), `${JSON.stringify(record, null, 2)}
+    await fs3.writeFile(path5.join(dir, "active.json"), `${JSON.stringify(record, null, 2)}
 `);
     const line = `- ${isoTime} \xB7 kit=${kit}${stack ? ` stack=${stack}` : ""} \xB7 via=${source}
 `;
-    await fs.appendFile(path3.join(dir, "decisions.md"), line);
+    await fs3.appendFile(path5.join(dir, "decisions.md"), line);
   } catch {
   }
 }
 async function clearPersistedActiveKit(projectRoot) {
   try {
-    await fs.rm(path3.join(designProjectDir(projectRoot), "active.json"), { force: true });
+    await fs3.rm(path5.join(designProjectDir(projectRoot), "active.json"), { force: true });
   } catch {
   }
 }
@@ -3680,12 +3704,12 @@ function verifyFiles(tokens, files) {
   const violations = [];
   let onPalette = 0;
   let offPalette = 0;
-  for (const { path: path12, text } of files) {
+  for (const { path: path11, text } of files) {
     const lines = text.split("\n");
     lines.forEach((lineText, i) => {
       const lineNo = i + 1;
       const flag = (snippet, reason) => {
-        violations.push({ file: path12, line: lineNo, snippet: snippet.slice(0, 80), reason });
+        violations.push({ file: path11, line: lineNo, snippet: snippet.slice(0, 80), reason });
       };
       for (const re of [HEX_RE, FUNC_COLOR_RE]) {
         re.lastIndex = 0;
@@ -3845,8 +3869,8 @@ function makeDesignVerifyToolCallMiddleware() {
         const p = typeof input?.path === "string" ? input.path : "";
         if (!p || !detectFrontendFile(p)) return out;
         const ctx = out.ctx;
-        const { default: fs8 } = await import('fs/promises');
-        const { default: nodePath } = await import('path');
+        const { default: fs8 } = await import("node:fs/promises");
+        const { default: nodePath } = await import("node:path");
         const abs = nodePath.isAbsolute(p) ? p : nodePath.join(ctx.projectRoot, p);
         const text = await fs8.readFile(abs, "utf8").catch(() => "");
         if (!text) return out;
@@ -4219,6 +4243,10 @@ var DefaultErrorHandler = class {
     return null;
   }
 };
+
+// src/execution/eternal-autonomy.ts
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
 var execFileP = promisify(execFile);
 var BRAINSTORM_DONE = /* @__PURE__ */ Symbol("brainstorm-done");
 var GOAL_COMPLETE_MARKER = /^\s*\[goal[_\s-]*complete\]\s*$/im;
@@ -4697,8 +4725,8 @@ ${recentJournal}` : "No prior iterations.",
       "   \u2022 When this iteration's Task is finished (real artifact / passing",
       "     test / applied diff / clean output), emit `[done]` on its own line.",
       "   \u2022 Do not stop on the first obstacle \u2014 try at least 3 distinct",
-      "     approaches before giving up. YOLO is active for normal project work;",
-      "     destructive-gated confirmations still belong to the permission flow.",
+      "     approaches before giving up. YOLO is active unless an explicit",
+      "     deny rule blocks the call.",
       "",
       "2. UPDATE TODO STATE (when Source is `todo`)",
       "   \u2022 Mark this todo `in_progress` via the todos tool before tool work.",
@@ -4805,7 +4833,7 @@ ${recentJournal}` : "No prior iterations.",
       await saveGoal(this.goalPath, abandoned, this.opts.events);
     }
     try {
-      const { unlink: unlink4 } = await import('fs/promises');
+      const { unlink: unlink4 } = await import("node:fs/promises");
       await unlink4(this.goalPath);
     } catch {
     }
@@ -5063,8 +5091,8 @@ function resolveModelRuntime(settings, reasoning, capabilities) {
     return { reasoning: void 0, cache: void 0, parameters: void 0, warnings };
   }
   const reasoningField = resolveReasoningForRequest(settings, reasoning, warnings);
-  const cacheField = resolveCacheForRequest(settings);
-  const paramsField = resolveParametersForRequest(settings.parameters, capabilities);
+  const cacheField = resolveCacheForRequest(settings, warnings);
+  const paramsField = resolveParametersForRequest(settings.parameters, capabilities, warnings);
   return {
     reasoning: reasoningField,
     cache: cacheField,
@@ -5089,7 +5117,8 @@ function resolveReasoningForRequest(settings, rc, warnings) {
       warnings.push('reasoning "off" requested, but this model does not support disabling thinking; the setting was omitted.');
     }
   } else if (cfg.mode === "on") {
-    if (!capKnown) ; else if (!supportsReasoning && rc?.default === "disabled") {
+    if (!capKnown) {
+    } else if (!supportsReasoning && rc?.default === "disabled") {
       warnings.push('reasoning "on" requested, but this model has reasoning disabled by default and does not advertise support; the setting was omitted.');
     } else {
       out.enabled = true;
@@ -5168,6 +5197,9 @@ function applyModelRuntime(req, opts) {
   return next;
 }
 
+// src/execution/parallel-eternal-engine.ts
+import { randomUUID as randomUUID2 } from "node:crypto";
+
 // src/coordination/subagent-budget.ts
 var TIMEOUT_PREEMPT_FRACTION = 0.85;
 var DECISION_TIMEOUT_MS = 6e4;
@@ -5475,13 +5507,13 @@ var SubagentBudget = class _SubagentBudget {
     if (!bus?.hasListenerFor("budget.threshold_reached")) {
       return Promise.resolve("stop");
     }
-    return new Promise((resolve5) => {
+    return new Promise((resolve4) => {
       let resolved = false;
       const respond = (d) => {
         if (resolved) return;
         resolved = true;
         clearTimeout(fallback);
-        resolve5(d);
+        resolve4(d);
       };
       const fallback = setTimeout(() => respond("stop"), _SubagentBudget.DECISION_TIMEOUT_MS);
       const sessionId = this.currentSessionId();
@@ -5624,12 +5656,24 @@ var ToolCapabilities = {
   SHELL_RESTRICTED: "shell.restricted",
   /** Can run a restricted project formatter/linter-style command. */
   SHELL_EXEC: "shell.exec",
+  /** Can read files inside the project (and possibly outside via symlinks if not guarded). */
+  FS_READ: "fs.read",
   /** Can write / modify / delete files inside the project. */
   FS_WRITE: "fs.write",
   /** Can write files outside the current project root (very high risk). */
   FS_WRITE_OUTSIDE_PROJECT: "fs.write.outside-project",
+  /** Can perform outbound network requests. */
+  NET_OUTBOUND: "net.outbound",
+  /** Can mutate in-memory session todos only. */
+  SESSION_TODO: "session.todo",
+  /** Can mutate in-memory session mode only. */
+  SESSION_MODE: "session.mode",
+  /** Can inspect registered tool metadata. */
+  TOOL_META: "tool.meta",
   /** Can invoke arbitrary registered tools through a meta-tool. */
   TOOL_MUTATE_ANY: "tool.mutate.any",
+  /** Can read persistent memory. */
+  MEMORY_READ: "memory.read",
   /** Can write persistent memory. */
   MEMORY_WRITE: "memory.write",
   /** Can delete persistent memory. */
@@ -5638,6 +5682,16 @@ var ToolCapabilities = {
   MCP_PROXY: "mcp.proxy",
   /** Can spawn or manage subagents / multi-agent tasks. */
   SUBAGENT_SPAWN: "subagent.spawn",
+  /** Can inspect fleet/subagent coordination state without mutating it. */
+  COORDINATION_FLEET_READ: "coordination.fleet.read",
+  /** Can publish attributed, schema-checked events onto the fleet bus. */
+  COORDINATION_FLEET_EMIT: "coordination.fleet.emit",
+  /** Can submit a task-local structured result to the parent Director. */
+  COORDINATION_RESULT_SUBMIT: "coordination.result.submit",
+  /** Can read or write inter-agent mailbox messages. */
+  COORDINATION_MAIL: "coordination.mail",
+  /** Can schedule, inspect, or cancel in-session cron jobs. */
+  COORDINATION_CRON: "coordination.cron",
   /** Can mutate global or session configuration / trust state. */
   CONFIG_MUTATE: "config.mutate",
   /** Can install packages or run package managers with side effects. */
@@ -5657,6 +5711,22 @@ var DANGEROUS_FOR_SUBAGENTS = [
   ToolCapabilities.CONFIG_MUTATE,
   ToolCapabilities.PACKAGE_INSTALL
 ];
+var WIDE_SUBAGENT_CAPABILITIES = [
+  ToolCapabilities.FS_READ,
+  ToolCapabilities.FS_WRITE,
+  ToolCapabilities.NET_OUTBOUND,
+  ToolCapabilities.SESSION_TODO,
+  ToolCapabilities.TOOL_META,
+  ToolCapabilities.MEMORY_READ,
+  ToolCapabilities.SHELL_ARBITRARY,
+  ToolCapabilities.SHELL_RESTRICTED,
+  ToolCapabilities.SHELL_EXEC,
+  ToolCapabilities.PACKAGE_INSTALL,
+  // Read-only fleet visibility (fleet_status) — peer awareness has no blast
+  // radius and every fleet worker should coordinate around its peers.
+  ToolCapabilities.COORDINATION_FLEET_READ,
+  ToolCapabilities.COORDINATION_RESULT_SUBMIT
+];
 function hasDangerousCapabilityForSubagents(toolOrCaps) {
   if (!toolOrCaps) return false;
   const input = toolOrCaps;
@@ -5990,6 +6060,12 @@ var TOOLS = {
   /** Web research. */
   research: ["read", "grep", "glob", "search", "fetch", "mailbox"]
 };
+
+// src/coordination/agents/agent-prompts.ts
+import { readFileSync as readFileSync2, statSync as statSync2 } from "node:fs";
+import * as os2 from "node:os";
+import * as path6 from "node:path";
+import { fileURLToPath as fileURLToPath3 } from "node:url";
 var promptCache = /* @__PURE__ */ new Map();
 var candidateCache = /* @__PURE__ */ new Map();
 function agentPrompt(id) {
@@ -6001,7 +6077,7 @@ function agentPrompt(id) {
   let resolved = "";
   for (const dir of agentPromptDirCandidates(envDir)) {
     try {
-      resolved = readFileSync(path3.join(dir, fileName), "utf8").trimEnd();
+      resolved = readFileSync2(path6.join(dir, fileName), "utf8").trimEnd();
       break;
     } catch {
     }
@@ -6010,20 +6086,20 @@ function agentPrompt(id) {
   return resolved;
 }
 function agentPromptDirCandidates(envDir) {
-  const globalRoot = process.env["WRONGSTACK_HOME"] || path3.join(os.homedir(), ".wrongstack");
+  const globalRoot = process.env["WRONGSTACK_HOME"] || path6.join(os2.homedir(), ".wrongstack");
   const candKey = `${envDir}\0${globalRoot}`;
   const cached = candidateCache.get(candKey);
   if (cached !== void 0) return cached;
-  const here = path3.dirname(fileURLToPath(import.meta.url));
+  const here = path6.dirname(fileURLToPath3(import.meta.url));
   const explicitDir = envDir || void 0;
   const candidates = [
-    ...explicitDir ? [path3.resolve(explicitDir)] : [],
-    path3.join(globalRoot, "instructions", "agents"),
-    path3.resolve(here, "../../../../instructions/agents"),
-    path3.resolve(here, "../../../instructions/agents"),
-    path3.resolve(here, "../../instructions/agents"),
-    path3.resolve(here, "../instructions/agents"),
-    path3.resolve(here, "instructions/agents")
+    ...explicitDir ? [path6.resolve(explicitDir)] : [],
+    path6.join(globalRoot, "instructions", "agents"),
+    path6.resolve(here, "../../../../instructions/agents"),
+    path6.resolve(here, "../../../instructions/agents"),
+    path6.resolve(here, "../../instructions/agents"),
+    path6.resolve(here, "../instructions/agents"),
+    path6.resolve(here, "instructions/agents")
   ];
   const ordered = candidates.sort((a, b) => Number(!isDirectory2(a)) - Number(!isDirectory2(b)));
   candidateCache.set(candKey, ordered);
@@ -6031,7 +6107,7 @@ function agentPromptDirCandidates(envDir) {
 }
 function isDirectory2(candidate) {
   try {
-    return statSync(candidate).isDirectory();
+    return statSync2(candidate).isDirectory();
   } catch {
     return false;
   }
@@ -7609,6 +7685,10 @@ async function dispatchAgent(task, opts = {}) {
   };
 }
 
+// src/coordination/multi-agent-coordinator.ts
+import { randomUUID } from "node:crypto";
+import { EventEmitter } from "node:events";
+
 // src/coordination/coordinator/error-classifier.ts
 function classifySubagentError(err, hints = {}) {
   if (err instanceof AgentError && err.cause) {
@@ -7689,39 +7769,63 @@ function providerErrorToSubagentError(err, message, cause) {
 }
 
 // src/coordination/fleet.ts
-({
+var AUDIT_LOG_AGENT = {
+  id: "audit-log",
+  name: "Audit Log",
+  role: "audit-log",
   prompt: agentPrompt("audit-log")
   // No hardcoded budgets — the orchestrator (delegate tool or
   // spawn_subagent) decides per-task how much room a subagent gets.
   // A monorepo audit needs hours; a single-file lint check needs
   // seconds. Pinning a number here forces the orchestrator to fight
   // the role's default instead of just asking for what it needs.
-});
-({
+};
+var BUG_HUNTER_AGENT = {
+  id: "bug-hunter",
+  name: "Bug Hunter",
+  role: "bug-hunter",
   prompt: agentPrompt("bug-hunter")
   // Budgets are set by the orchestrator per task — see fleet.ts header.
-});
-({
+};
+var REFACTOR_PLANNER_AGENT = {
+  id: "refactor-planner",
+  name: "Refactor Planner",
+  role: "refactor-planner",
   prompt: agentPrompt("refactor-planner")
   // Budgets are set by the orchestrator per task — see fleet.ts header.
-});
-({
+};
+var SECURITY_SCANNER_AGENT = {
+  id: "security-scanner",
+  name: "Security Scanner",
+  role: "security-scanner",
   prompt: agentPrompt("security-scanner")
   // Budgets are set by the orchestrator per task — see fleet.ts header.
-});
-({
+};
+var SHADOW_AGENT = {
+  id: "shadow-agent",
+  name: "Shadow",
+  role: "shadow-agent",
   prompt: agentPrompt("shadow-agent")
   // Budgets are set by the orchestrator per task — see fleet.ts header.
-});
-({
+};
+var CRITIC_AGENT = {
+  id: "critic",
+  name: "Critic",
+  role: "critic",
   prompt: agentPrompt("critic")
   // Budgets are set by the orchestrator per task — see fleet.ts header.
-});
-({
+};
+var FLEET_ROSTER = {
+  "audit-log": AUDIT_LOG_AGENT,
+  "bug-hunter": BUG_HUNTER_AGENT,
+  "refactor-planner": REFACTOR_PLANNER_AGENT,
+  "security-scanner": SECURITY_SCANNER_AGENT,
+  "critic": CRITIC_AGENT,
+  "shadow-agent": SHADOW_AGENT,
   ...Object.fromEntries(
     ALL_AGENT_DEFINITIONS.map((d) => [d.config.role, d.config])
   )
-});
+};
 var DEFAULT_IDLE_TIMEOUT_MS = 15 * 60 * 1e3;
 var FLEET_ROSTER_BUDGETS = {
   "audit-log": { timeoutMs: 7.5 * 60 * 60 * 1e3, maxIterations: 5e3, maxToolCalls: 15e3 },
@@ -7764,6 +7868,7 @@ function applyRosterBudget(cfg) {
     maxCostUsd: cfg.maxCostUsd ?? defaultBudget.maxCostUsd
   };
 }
+var ALL_FLEET_AGENTS = Object.values(FLEET_ROSTER);
 var CLINE_AGENT = {
   id: "cline",
   name: "Cline",
@@ -7811,9 +7916,10 @@ FLEET_ROSTER_BUDGETS["gemini-cli"] = { timeoutMs: 10 * 60 * 60 * 1e3, maxIterati
 FLEET_ROSTER_BUDGETS["copilot"] = { timeoutMs: 10 * 60 * 60 * 1e3, maxIterations: 8e3, maxToolCalls: 2e4 };
 FLEET_ROSTER_BUDGETS["openhands"] = { timeoutMs: 10 * 60 * 60 * 1e3, maxIterations: 8e3, maxToolCalls: 2e4 };
 FLEET_ROSTER_BUDGETS["goose"] = { timeoutMs: 10 * 60 * 60 * 1e3, maxIterations: 8e3, maxToolCalls: 2e4 };
-({
+var FLEET_ROSTER_WITHACP = {
+  ...FLEET_ROSTER,
   ...Object.fromEntries(ACP_AGENTS.map((a) => [a.role, a]))
-});
+};
 
 // src/coordination/subagent-nicknames.ts
 var NICKNAME_POOL = {
@@ -7872,7 +7978,7 @@ var NICKNAME_POOL = {
   "mendeleev": { name: "Mendeleev", domain: "chemistry" }
 };
 var ALL_NICKNAMES = Object.entries(NICKNAME_POOL);
-Object.fromEntries(
+var NAME_TO_KEY = Object.fromEntries(
   ALL_NICKNAMES.map(([key, entry]) => [entry.name, key])
 );
 var DOMAIN_PREFERENCES = {
@@ -8190,7 +8296,7 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
       taskIds.map((id) => {
         const cached = this.completedResults.find((r) => r.taskId === id);
         if (cached) return cached;
-        return new Promise((resolve5, reject) => {
+        return new Promise((resolve4, reject) => {
           const timeout = setTimeout(() => {
             this.off("task.completed", handler);
             reject(new Error(`awaitTasks timed out waiting for task "${id}"`));
@@ -8199,7 +8305,7 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
             if (result.taskId === id) {
               clearTimeout(timeout);
               this.off("task.completed", handler);
-              resolve5(result);
+              resolve4(result);
             }
           };
           this.on("task.completed", handler);
@@ -8224,13 +8330,13 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
       const done = new Set(completed.map((r) => r.taskId));
       return { completed, pending: taskIds.filter((id) => !done.has(id)) };
     }
-    return new Promise((resolve5) => {
+    return new Promise((resolve4) => {
       let timer;
       const handler = ({ result }) => {
         if (!ids.has(result.taskId)) return;
         if (timer) clearTimeout(timer);
         this.off("task.completed", handler);
-        resolve5({
+        resolve4({
           completed: [result],
           pending: taskIds.filter((id) => id !== result.taskId)
         });
@@ -8238,7 +8344,7 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
       if (opts?.timeoutMs !== void 0) {
         timer = setTimeout(() => {
           this.off("task.completed", handler);
-          resolve5({ completed: [], pending: [...taskIds], timedOut: true });
+          resolve4({ completed: [], pending: [...taskIds], timedOut: true });
         }, opts.timeoutMs);
       }
       this.on("task.completed", handler);
@@ -8520,12 +8626,12 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
             }
             return new Promise((resolveDecision) => {
               let settled = false;
-              const resolve5 = (d) => {
+              const resolve4 = (d) => {
                 if (settled) return;
                 settled = true;
                 resolveDecision(d);
               };
-              const fallback = setTimeout(() => resolve5("stop"), DECISION_TIMEOUT_MS);
+              const fallback = setTimeout(() => resolve4("stop"), DECISION_TIMEOUT_MS);
               const sessionId = this.currentSessionId();
               budget._events?.emit("budget.threshold_reached", {
                 ...sessionId ? { sessionId } : {},
@@ -8543,11 +8649,11 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
                 // disagreeing, resolves as a stop). Async grants still resolve.
                 extend: (extra) => {
                   clearTimeout(fallback);
-                  queueMicrotask(() => resolve5({ extend: extra }));
+                  queueMicrotask(() => resolve4({ extend: extra }));
                 },
                 deny: () => {
                   clearTimeout(fallback);
-                  resolve5("stop");
+                  resolve4("stop");
                 }
               });
             });
@@ -8683,8 +8789,9 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
     }
     const subagent = this.subagents.get(result.subagentId);
     if (subagent && subagent.status !== "stopped") {
-      result.status === "failed" || result.status === "timeout";
+      const failed = result.status === "failed" || result.status === "timeout";
       subagent.status = "idle";
+      void failed;
       subagent.currentTask = void 0;
       if (subagent.abortController.signal.aborted) {
         subagent.abortController = new AbortController();
@@ -8833,7 +8940,7 @@ var ParallelEternalEngine = class {
     this.state = "running";
     await this.persistState("running");
     const config = {
-      coordinatorId: `parallel-${randomUUID().slice(0, 8)}`,
+      coordinatorId: `parallel-${randomUUID2().slice(0, 8)}`,
       maxConcurrent: this.slots,
       doneCondition: { type: "all_tasks_done" }
     };
@@ -8887,7 +8994,7 @@ var ParallelEternalEngine = class {
     }
     if (!this.coordinator) {
       const config = {
-        coordinatorId: `parallel-${randomUUID().slice(0, 8)}`,
+        coordinatorId: `parallel-${randomUUID2().slice(0, 8)}`,
         maxConcurrent: this.slots,
         doneCondition: { type: "all_tasks_done" }
       };
@@ -8961,8 +9068,7 @@ ${recentJournal}` : "No prior iterations.",
       "\u2500\u2500 EXECUTION PROTOCOL \u2500\u2500",
       "\u2022 Execute the assigned task end-to-end using multiple tool calls.",
       "\u2022 Emit `[done]` on its own line when the task is complete.",
-      "\u2022 Do not ask before routine in-project tool use \u2014 YOLO is active for normal project work.",
-      "\u2022 If a destructive-gated confirmation appears, wait for the permission flow.",
+      "\u2022 Do not ask before tool use \u2014 YOLO is active unless an explicit deny rule blocks the call.",
       "\u2022 If the overall Mission is accomplished, emit `[GOAL_COMPLETE]` followed by a verification recipe.",
       "\u2022 Keep output concise \u2014 summarize findings, do not transcribe files."
     ].join("\n");
@@ -8974,7 +9080,7 @@ ${recentJournal}` : "No prior iterations.",
       const task = expectDefined(tasks[i]);
       const route = routes[i] ?? null;
       const subagentId = `parallel-${this.iterations}-${i}`;
-      const taskId = randomUUID();
+      const taskId = randomUUID2();
       const personaLine = route ? `Acting agent: ${route.definition.config.name} \u2014 ${route.definition.capability.summary}
 ` : "";
       const spec = {
@@ -9109,8 +9215,8 @@ ${personaLine}Task: ${task}
     return tasks.length > 0 ? tasks.slice(0, this.slots) : null;
   }
   async readGitStatus() {
-    const { execFile: execFile2 } = await import('child_process');
-    const { promisify: promisify2 } = await import('util');
+    const { execFile: execFile2 } = await import("node:child_process");
+    const { promisify: promisify2 } = await import("node:util");
     const execFileP2 = promisify2(execFile2);
     const { stdout } = await execFileP2("git", ["status", "--porcelain"], {
       cwd: this.opts.projectRoot,
@@ -9200,6 +9306,9 @@ ${lastFew}` : "No prior iterations.",
     await saveGoal(this.goalPath, { ...current, engineState: state }, this.opts.events);
   }
 };
+
+// src/execution/retry-policy.ts
+import { randomInt } from "node:crypto";
 var MAX_RETRY_AFTER_MS = 6e4;
 var MAX_ATTEMPTS_BY_KIND = {
   rate_limit: 5,
@@ -9653,6 +9762,10 @@ Summarize the following message range:`;
   }
 };
 
+// src/execution/skill-loader.ts
+import * as fs4 from "node:fs/promises";
+import * as path7 from "node:path";
+
 // src/skills/foreign-sources.ts
 var FOREIGN_SKILL_TOOLS = [
   { id: "agents", subdir: "skills" },
@@ -9768,6 +9881,56 @@ function isValidSkillNameFormat(name) {
 
 // src/skills/limits.ts
 var SKILL_LIMITS = {
+  /**
+   * Per-skill body cap when injecting a full skill body into the system prompt
+   * (eager mode), and when returning a skill body from the `skill` tool.
+   * ~4k tokens. Oversized bodies are truncated at a paragraph boundary.
+   *
+   * Consumers: `system-prompt-builder.capSkillBody`, `skill` tool body return.
+   */
+  MAX_SKILL_BODY_CHARS: 16e3,
+  /**
+   * Per-resource cap when the `skill` tool loads a bundled file
+   * (`scripts/`, `references/`, `assets/`). ~8k tokens.
+   *
+   * Consumer: `skill` tool `loadResource`.
+   */
+  MAX_RESOURCE_CHARS: 32e3,
+  /**
+   * Maximum number of bundled resource paths the `skill` tool lists in one
+   * response. Caps a pathological skill (huge `assets/` tree) from blowing up
+   * the tool result.
+   *
+   * Consumer: `skill` tool resource listing.
+   */
+  MAX_LISTED_RESOURCES: 100,
+  /**
+   * Max size of a single installed skill file (SKILL.md or a bundled resource).
+   * Guards against a malicious registry skill shipping a multi-MB blob that
+   * then flows into the prompt. 100KB.
+   *
+   * Consumer: `SkillInstaller.install` / `importFromDir`.
+   */
+  MAX_SKILL_FILE_SIZE: 100 * 1024,
+  /**
+   * Max size of a GitHub tarball downloaded by the skill installer. Guards
+   * against a repo accidentally (or maliciously) shipping a giant tarball that
+   * would be extracted into a temp dir. 50MB.
+   *
+   * Consumer: `downloadGitHubTarball`.
+   */
+  MAX_TARBALL_SIZE: 50 * 1024 * 1024,
+  /**
+   * Default total char budget for skill bodies injected in eager mode when
+   * `config.skills.eagerMaxChars` is unset. ~6k tokens. Skills are injected
+   * highest-priority first; once the budget is exhausted the remaining skills
+   * are listed as a manifest the agent loads via the `skill` tool. Set very
+   * high to effectively disable budgeting.
+   *
+   * Consumer: `DefaultSystemPromptBuilder.buildMemoryAndSkills` (default for
+   * `skillEagerMaxChars`).
+   */
+  EAGER_DEFAULT_MAX_CHARS: 24e3,
   /**
    * Auto-compact body limits (the token-saving fallback used when a skill has
    * no hand-crafted `SKILL.save.md`). The Overview and Rules sections are
@@ -9777,7 +9940,24 @@ var SKILL_LIMITS = {
    */
   COMPACT_OVERVIEW_MAX: 200,
   COMPACT_RULES_MAX: 350,
-  COMPACT_TOTAL_MAX: 450};
+  COMPACT_TOTAL_MAX: 450,
+  /**
+   * Max length of a skill name (agentskills.io spec). Enforced by the
+   * frontmatter validator's format regex plus this length bound.
+   *
+   * Consumer: `isValidSkillNameFormat`.
+   */
+  SKILL_NAME_MAX_LEN: 64,
+  /**
+   * Soft line limit for a SKILL.md body, per the bundled `skill-creator` rule.
+   * Not enforced in code (a skill can exceed it) — surfaced by `/skill-gen
+   * validate` and the `skill-creator` skill as guidance to move deep material
+   * into `references/`.
+   *
+   * Consumer: `skill-creator` skill, `/skill-gen validate` advisory.
+   */
+  SKILL_BODY_LINE_LIMIT: 500
+};
 
 // src/execution/skill-loader.ts
 function stripFrontmatter2(raw) {
@@ -9814,7 +9994,7 @@ async function entryIsDirectory(dir, entry) {
   if (entry.isDirectory()) return true;
   if (entry.isSymbolicLink()) {
     try {
-      return (await fs.stat(path3.join(dir, entry.name))).isDirectory();
+      return (await fs4.stat(path7.join(dir, entry.name))).isDirectory();
     } catch {
       return false;
     }
@@ -9835,7 +10015,7 @@ var DefaultSkillLoader = class {
       for (const tool of FOREIGN_SKILL_TOOLS) {
         if (!foreignIds.includes(tool.id)) continue;
         dirs.push({
-          dir: path3.join(root, "." + tool.id, tool.subdir),
+          dir: path7.join(root, "." + tool.id, tool.subdir),
           source: "foreign",
           originTool: tool.id
         });
@@ -9857,12 +10037,12 @@ var DefaultSkillLoader = class {
     const seen = /* @__PURE__ */ new Set();
     for (const { dir, source, originTool } of this.dirs) {
       try {
-        const entries = await fs.readdir(dir, { withFileTypes: true });
+        const entries = await fs4.readdir(dir, { withFileTypes: true });
         for (const e of entries) {
           if (!await entryIsDirectory(dir, e)) continue;
-          const skillFile = path3.join(dir, e.name, "SKILL.md");
+          const skillFile = path7.join(dir, e.name, "SKILL.md");
           try {
-            const raw = await fs.readFile(skillFile, "utf8");
+            const raw = await fs4.readFile(skillFile, "utf8");
             const fm = parseSkillFrontmatter(raw);
             if (!fm.name || !fm.description) continue;
             if (!isValidSkillNameFormat(fm.name)) continue;
@@ -9934,7 +10114,7 @@ var DefaultSkillLoader = class {
     if (cached !== void 0) return cached;
     const m = await this.find(name);
     if (!m) throw new Error(`Skill "${name}" not found`);
-    const body = await fs.readFile(m.path, "utf8");
+    const body = await fs4.readFile(m.path, "utf8");
     this.bodyCache.set(key, body);
     return body;
   }
@@ -9944,12 +10124,12 @@ var DefaultSkillLoader = class {
     if (cached !== void 0) return cached;
     const m = await this.find(name);
     if (!m) throw new Error(`Skill "${name}" not found`);
-    const savePath = path3.join(path3.dirname(m.path), "SKILL.save.md");
+    const savePath = path7.join(path7.dirname(m.path), "SKILL.save.md");
     let result;
     try {
-      result = await fs.readFile(savePath, "utf8");
+      result = await fs4.readFile(savePath, "utf8");
     } catch {
-      const full = await fs.readFile(m.path, "utf8");
+      const full = await fs4.readFile(m.path, "utf8");
       const body = stripFrontmatter2(full);
       const compact = compactSkillBody(body);
       if (compact) {
@@ -9975,6 +10155,14 @@ function parseDescriptionFromText(desc) {
   }
   return { trigger, scope };
 }
+
+// src/execution/prompt-loader.ts
+import * as fs6 from "node:fs/promises";
+import * as path9 from "node:path";
+
+// src/storage/prompt-store.ts
+import * as fs5 from "node:fs/promises";
+import * as path8 from "node:path";
 var SCHEMA_VERSION = 2;
 function migratePromptEntry(raw) {
   if (!raw || typeof raw !== "object") return null;
@@ -10035,12 +10223,12 @@ var DefaultPromptStore = class {
     await ensureDir(this.dir);
     const entries = [];
     try {
-      const files = await fs.readdir(this.dir);
+      const files = await fs5.readdir(this.dir);
       for (const file of files) {
         if (!file.endsWith(".json")) continue;
         try {
           const raw = JSON.parse(
-            await fs.readFile(path3.join(this.dir, file), "utf8")
+            await fs5.readFile(path8.join(this.dir, file), "utf8")
           );
           const migrated = migratePromptEntry(raw.entry);
           if (migrated) entries.push(migrated);
@@ -10054,9 +10242,9 @@ var DefaultPromptStore = class {
     );
   }
   async get(id) {
-    const file = path3.join(this.dir, `${id}.json`);
+    const file = path8.join(this.dir, `${id}.json`);
     try {
-      const raw = JSON.parse(await fs.readFile(file, "utf8"));
+      const raw = JSON.parse(await fs5.readFile(file, "utf8"));
       return migratePromptEntry(raw.entry);
     } catch {
       return null;
@@ -10064,14 +10252,14 @@ var DefaultPromptStore = class {
   }
   async save(entry) {
     await ensureDir(this.dir);
-    const file = path3.join(this.dir, `${entry.id}.json`);
+    const file = path8.join(this.dir, `${entry.id}.json`);
     const raw = { version: SCHEMA_VERSION, entry };
     await atomicWrite(file, JSON.stringify(raw, null, 2));
   }
   async delete(id) {
-    const file = path3.join(this.dir, `${id}.json`);
+    const file = path8.join(this.dir, `${id}.json`);
     try {
-      await fs.unlink(file);
+      await fs5.unlink(file);
       return true;
     } catch {
       return false;
@@ -10158,7 +10346,7 @@ var DefaultPromptLoader = class {
   constructor(opts) {
     this.projectStore = typeof opts.paths.inProjectPrompts === "string" ? new DefaultPromptStore(opts.paths.inProjectPrompts) : void 0;
     this.userStore = typeof opts.paths.globalPrompts === "string" ? new DefaultPromptStore(opts.paths.globalPrompts) : void 0;
-    this.builtinDir = opts.bundledDir ? path3.join(opts.bundledDir, "prompts") : void 0;
+    this.builtinDir = opts.bundledDir ? path9.join(opts.bundledDir, "prompts") : void 0;
   }
   async list() {
     if (this.cache) return this.cache;
@@ -10271,7 +10459,7 @@ var DefaultPromptLoader = class {
     const files = await walkJson(dir);
     for (const file of files) {
       try {
-        const parsed = JSON.parse(await fs.readFile(file, "utf8"));
+        const parsed = JSON.parse(await fs6.readFile(file, "utf8"));
         const migrated = migratePromptEntry(parsed);
         if (migrated) out.push({ ...migrated, source: "builtin" });
       } catch {
@@ -10285,12 +10473,12 @@ async function walkJson(dir) {
   const out = [];
   let entries;
   try {
-    entries = await fs.readdir(dir, { withFileTypes: true });
+    entries = await fs6.readdir(dir, { withFileTypes: true });
   } catch {
     return out;
   }
   for (const e of entries) {
-    const full = path3.join(dir, e.name);
+    const full = path9.join(dir, e.name);
     if (e.isDirectory()) {
       out.push(...await walkJson(full));
     } else if (e.name.endsWith(".json") && e.name !== "index.json" && e.name !== "schema.json") {
@@ -10474,6 +10662,12 @@ function readPolicy(ctx) {
   return candidate;
 }
 
+// src/execution/tool-executor.ts
+import { randomUUID as randomUUID3 } from "node:crypto";
+import { isDeepStrictEqual } from "node:util";
+import * as fs7 from "node:fs/promises";
+import * as path10 from "node:path";
+
 // src/types/tool-markers.ts
 var MALFORMED_ARG_MARKERS = ["__raw", "__raw_arguments", "_raw"];
 
@@ -10693,12 +10887,33 @@ ${errorDetails}`,
       }
       if (effectivePermission === "confirm") {
         if (this.opts.confirmAwaiter) {
-          const choice = await this.opts.confirmAwaiter(tool, use.input, use.id, tool.name);
+          const awaiter = this.opts.confirmAwaiter;
+          const choice = await new Promise(
+            (resolve4, reject) => {
+              const signal = ctx.signal;
+              const onAbort = () => resolve4("abort");
+              if (signal.aborted) {
+                resolve4("abort");
+                return;
+              }
+              signal.addEventListener("abort", onAbort, { once: true });
+              awaiter(tool, use.input, use.id, tool.name).then(
+                (c) => {
+                  signal.removeEventListener("abort", onAbort);
+                  resolve4(c);
+                },
+                (e) => {
+                  signal.removeEventListener("abort", onAbort);
+                  reject(e);
+                }
+              );
+            }
+          );
           if (choice !== "yes" && choice !== "always") {
             const result = {
               type: "tool_result",
               tool_use_id: use.id,
-              content: `Tool "${tool.name}" denied by user.`,
+              content: choice === "abort" ? `Tool "${tool.name}" was not executed \u2014 the run was aborted while awaiting confirmation.` : `Tool "${tool.name}" denied by user.`,
               is_error: true
             };
             budget = this.budgetForString(result.content, budget);
@@ -10804,6 +11019,9 @@ ${post.additionalContext}`;
           is_error: true
         };
         budget = this.budgetForString(result.content, budget);
+        void category;
+        void retryable;
+        void detail;
         return { result, tool, durationMs: 0 };
       }
     };
@@ -10910,15 +11128,33 @@ ${post.additionalContext}`;
     const timeoutSignal = AbortSignal.timeout(timeoutMs);
     const combined = AbortSignal.any([parentSignal, timeoutSignal]);
     let output;
+    const toolPromise = typeof tool.executeStream === "function" ? this.runStreamedTool(tool, input, ctx, combined, toolUseId) : (async () => tool.execute(input, ctx, { signal: combined }))();
+    toolPromise.catch(() => {
+    });
     try {
-      output = typeof tool.executeStream === "function" ? await this.runStreamedTool(tool, input, ctx, combined, toolUseId) : await tool.execute(input, ctx, { signal: combined });
+      output = await new Promise((resolve4, reject) => {
+        const onAbort = () => {
+          setTimeout(() => reject(abortReasonToError(combined.reason)), 0);
+        };
+        combined.addEventListener("abort", onAbort, { once: true });
+        toolPromise.then(
+          (v) => {
+            combined.removeEventListener("abort", onAbort);
+            resolve4(v);
+          },
+          (e) => {
+            combined.removeEventListener("abort", onAbort);
+            reject(e);
+          }
+        );
+      });
     } catch (err) {
       if (combined.aborted) await this.runToolCleanup(tool, input, ctx);
       throw err;
     }
     if (combined.aborted) {
       await this.runToolCleanup(tool, input, ctx);
-      throw combined.reason instanceof Error ? combined.reason : new Error(typeof combined.reason === "string" ? combined.reason : "tool timeout");
+      throw abortReasonToError(combined.reason);
     }
     return output;
   }
@@ -11079,6 +11315,9 @@ function clampTimeoutMs(timeoutMs, maxTimeoutMs) {
   const finiteMax = Number.isFinite(maxTimeoutMs) && maxTimeoutMs > 0 ? maxTimeoutMs : fallback;
   return Math.max(1, Math.min(finiteTimeout, finiteMax));
 }
+function abortReasonToError(reason) {
+  return reason instanceof Error ? reason : new Error(typeof reason === "string" ? reason : "tool timeout");
+}
 function hasMalformedArguments(input) {
   if (!input || typeof input !== "object" || Array.isArray(input)) return false;
   const obj = input;
@@ -11177,12 +11416,12 @@ async function maybePersistLargeToolOutput(toolName, content, budget) {
     return content;
   }
   try {
-    const dir = path3.join(wstackGlobalRoot(), "tool-output");
-    await fs.mkdir(dir, { recursive: true });
+    const dir = path10.join(wstackGlobalRoot(), "tool-output");
+    await fs7.mkdir(dir, { recursive: true });
     const safeTool = toolName.replace(/[^a-zA-Z0-9._-]+/g, "_").slice(0, 40) || "tool";
     const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-    const filePath = path3.join(dir, `${stamp}-${safeTool}-${randomUUID()}.log`);
-    await fs.writeFile(filePath, content, "utf8");
+    const filePath = path10.join(dir, `${stamp}-${safeTool}-${randomUUID3()}.log`);
+    await fs7.writeFile(filePath, content, "utf8");
     const marker = `[full tool output: ${bytes} bytes at ${filePath}; read/grep that file selectively instead of re-running or requesting more output]`;
     const fixedBytes = Buffer.byteLength(marker + TOOL_OUTPUT_ARTIFACT_OMISSION, "utf8");
     const previewBytes = Math.min(
@@ -11230,7 +11469,53 @@ function sliceUtf8Suffix(text, maxBytes) {
   if (first >= 56320 && first <= 57343) start++;
   return text.slice(start);
 }
-
-export { AutoCompactionMiddleware, AutonomousRunner, DEFAULT_RECOVERY_STRATEGIES, DefaultDesignKitLoader, DefaultErrorHandler, DefaultPromptLoader, DefaultRetryPolicy, DefaultSkillLoader, DoneConditionChecker, EternalAutonomyEngine, HybridCompactor, IntelligentCompactor, ParallelEternalEngine, SelectiveCompactor, ToolExecutor, _resetDesignKitLoaderMemo, _resetDesignRulesCache, activateDesign, applyModelRuntime, buildGoalPreamble, buildRecoveryStrategies, clearActiveKit, clearPersistedActiveKit, createAutonomyBrain, createStrategyCompactor, createTieredBrainArbiter, designProjectDir, detectFrontendFile, detectFrontendIntent, formatDecisionSummary, getDesignKitLoader, getDesignState, installDesignStudioMiddleware, loadActiveKit, loadProjectDesignRules, makeAutonomyPromptContributor, makeDesignDetectToolCallMiddleware, makeDesignDetectUserInputMiddleware, makeDesignStudioRequestMiddleware, mergeModelRuntime, recordKitChoice, renderPrompt, resolveBundledDesignKitsDir, resolveCacheForRequest, resolveModelRuntime, resolveReasoningForRequest, setActiveKit };
+export {
+  AutoCompactionMiddleware,
+  AutonomousRunner,
+  DEFAULT_RECOVERY_STRATEGIES,
+  DefaultDesignKitLoader,
+  DefaultErrorHandler,
+  DefaultPromptLoader,
+  DefaultRetryPolicy,
+  DefaultSkillLoader,
+  DoneConditionChecker,
+  EternalAutonomyEngine,
+  HybridCompactor,
+  IntelligentCompactor,
+  ParallelEternalEngine,
+  SelectiveCompactor,
+  ToolExecutor,
+  _resetDesignKitLoaderMemo,
+  _resetDesignRulesCache,
+  activateDesign,
+  applyModelRuntime,
+  buildGoalPreamble,
+  buildRecoveryStrategies,
+  clearActiveKit,
+  clearPersistedActiveKit,
+  createAutonomyBrain,
+  createStrategyCompactor,
+  createTieredBrainArbiter,
+  designProjectDir,
+  detectFrontendFile,
+  detectFrontendIntent,
+  formatDecisionSummary,
+  getDesignKitLoader,
+  getDesignState,
+  installDesignStudioMiddleware,
+  loadActiveKit,
+  loadProjectDesignRules,
+  makeAutonomyPromptContributor,
+  makeDesignDetectToolCallMiddleware,
+  makeDesignDetectUserInputMiddleware,
+  makeDesignStudioRequestMiddleware,
+  mergeModelRuntime,
+  recordKitChoice,
+  renderPrompt,
+  resolveBundledDesignKitsDir,
+  resolveCacheForRequest,
+  resolveModelRuntime,
+  resolveReasoningForRequest,
+  setActiveKit
+};
 //# sourceMappingURL=index.js.map
-//# sourceMappingURL=index.js.map