@wrongstack/core 0.284.1 → 0.285.0

package/dist/defaults/index.js

@@ -1,41 +1,31 @@
-import * as crypto from 'crypto';
-import { randomUUID, createHash, randomInt, randomBytes, createCipheriv, createDecipheriv, scryptSync } from 'crypto';
-import * as fsp9 from 'fs/promises';
-import * as path4 from 'path';
-import { isAbsolute, resolve } from 'path';
-import * as os from 'os';
-import { hostname } from 'os';
-import * as fs11 from 'fs';
-import { readFileSync, statSync, createReadStream, existsSync, openSync, writeSync, fsyncSync, closeSync } from 'fs';
-import { fileURLToPath } from 'url';
-import { EventEmitter } from 'events';
-import { listReadyTasks, claimReadyTask, updateTaskAssignment } from '@wrongstack/kanban';
-import { createInterface } from 'readline';
-import { execFile, spawn } from 'child_process';
-import { promisify, isDeepStrictEqual } from 'util';
-
 // src/coordination/agent-bridge.ts
+import { randomUUID } from "node:crypto";
 
 // src/utils/assert-never.ts
 function assertNever(x, message) {
   const err = new Error(
-    `Unhandled case: ${JSON.stringify(x)}`
+    message ?? `Unhandled case: ${JSON.stringify(x)}`
   );
   err.name = "AssertNeverError";
   throw err;
 }
+
+// src/utils/atomic-write.ts
+import { randomBytes } from "node:crypto";
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
 async function atomicWrite(targetPath, content, opts = {}) {
-  const dir = path4.dirname(targetPath);
-  await fsp9.mkdir(dir, { recursive: true });
-  const tmp = path4.join(dir, `.${path4.basename(targetPath)}.${randomBytes(6).toString("hex")}.tmp`);
+  const dir = path.dirname(targetPath);
+  await fs.mkdir(dir, { recursive: true });
+  const tmp = path.join(dir, `.${path.basename(targetPath)}.${randomBytes(6).toString("hex")}.tmp`);
   try {
     if (typeof content === "string") {
-      await fsp9.writeFile(tmp, content, { flag: "wx", encoding: opts.encoding ?? "utf8" });
+      await fs.writeFile(tmp, content, { flag: "wx", encoding: opts.encoding ?? "utf8" });
     } else {
-      await fsp9.writeFile(tmp, content, { flag: "wx" });
+      await fs.writeFile(tmp, content, { flag: "wx" });
     }
     try {
-      const fh = await fsp9.open(tmp, "r+");
+      const fh = await fs.open(tmp, "r+");
       try {
         await fh.sync();
       } finally {
@@ -45,56 +35,56 @@ async function atomicWrite(targetPath, content, opts = {}) {
     }
     let mode;
     try {
-      const stat13 = await fsp9.stat(targetPath);
+      const stat13 = await fs.stat(targetPath);
       mode = stat13.mode & 511;
     } catch {
       mode = opts.mode;
     }
     if (mode !== void 0) {
-      await fsp9.chmod(tmp, mode);
+      await fs.chmod(tmp, mode);
     }
     await renameWithRetry(tmp, targetPath);
     if (mode !== void 0 && process.platform === "win32") {
       try {
-        await fsp9.chmod(targetPath, mode);
+        await fs.chmod(targetPath, mode);
       } catch {
       }
     }
   } catch (err) {
     try {
-      await fsp9.unlink(tmp);
+      await fs.unlink(tmp);
     } catch {
     }
     throw err;
   }
 }
 async function ensureDir(dir) {
-  await fsp9.mkdir(dir, { recursive: true });
+  await fs.mkdir(dir, { recursive: true });
 }
 async function withFileLock(targetPath, fn, opts = {}) {
-  const dir = path4.dirname(targetPath);
-  await fsp9.mkdir(dir, { recursive: true });
-  const lockPath = path4.join(dir, `.${path4.basename(targetPath)}.lock`);
+  const dir = path.dirname(targetPath);
+  await fs.mkdir(dir, { recursive: true });
+  const lockPath = path.join(dir, `.${path.basename(targetPath)}.lock`);
   const timeoutMs = opts.timeoutMs ?? 5e3;
   const staleMs = opts.staleMs ?? 3e4;
   const started = Date.now();
   let handle;
   for (; ; ) {
     try {
-      handle = await fsp9.open(lockPath, "wx");
+      handle = await fs.open(lockPath, "wx");
       await handle.writeFile(`${process.pid}:${Date.now()}`);
       break;
     } catch (err) {
       const code = err.code;
       if (code === "ENOENT") {
-        await fsp9.mkdir(dir, { recursive: true });
+        await fs.mkdir(dir, { recursive: true });
         continue;
       }
       if (code !== "EEXIST") throw err;
       try {
-        const stat13 = await fsp9.stat(lockPath);
+        const stat13 = await fs.stat(lockPath);
         if (Date.now() - stat13.mtimeMs > staleMs) {
-          await fsp9.unlink(lockPath);
+          await fs.unlink(lockPath);
           continue;
         }
       } catch {
@@ -108,7 +98,7 @@ async function withFileLock(targetPath, fn, opts = {}) {
           context: { timeoutMs }
         });
       }
-      await new Promise((resolve14) => setTimeout(resolve14, 25));
+      await new Promise((resolve12) => setTimeout(resolve12, 25));
     }
   }
   try {
@@ -119,7 +109,7 @@ async function withFileLock(targetPath, fn, opts = {}) {
     } catch {
     }
     try {
-      await fsp9.unlink(lockPath);
+      await fs.unlink(lockPath);
     } catch {
     }
   }
@@ -127,14 +117,14 @@ async function withFileLock(targetPath, fn, opts = {}) {
 var TRANSIENT_RENAME_CODES = /* @__PURE__ */ new Set(["EPERM", "EBUSY", "EACCES", "ENOTEMPTY"]);
 async function renameWithRetry(from, to) {
   if (process.platform !== "win32") {
-    await fsp9.rename(from, to);
+    await fs.rename(from, to);
     return;
   }
   const delays = [10, 25, 60, 120, 250];
   let lastErr;
   for (let i = 0; i <= delays.length; i++) {
     try {
-      await fsp9.rename(from, to);
+      await fs.rename(from, to);
       return;
     } catch (err) {
       lastErr = err;
@@ -142,7 +132,7 @@ async function renameWithRetry(from, to) {
       if (!code || !TRANSIENT_RENAME_CODES.has(code) || i === delays.length) {
         throw err;
       }
-      await new Promise((resolve14) => setTimeout(resolve14, delays[i]));
+      await new Promise((resolve12) => setTimeout(resolve12, delays[i]));
     }
   }
   throw lastErr;
@@ -222,8 +212,9 @@ function sanitizeNodeOptions(value) {
   }
   return kept.join(" ");
 }
+var gitIdentity = null;
 function buildChildEnv(optsOrSessionId) {
-  const opts = {};
+  const opts = typeof optsOrSessionId === "string" ? { sessionId: optsOrSessionId } : optsOrSessionId ?? {};
   const hasOwn = Object.hasOwn(process.env, "WRONGSTACK_CHILD_ENV_PASSTHROUGH");
   const legacyHasOwn = Object.hasOwn(process.env, "WRONGSTACK_BASH_ENV_PASSTHROUGH");
   const passthrough = hasOwn && process.env["WRONGSTACK_CHILD_ENV_PASSTHROUGH"] === "1" || legacyHasOwn && process.env["WRONGSTACK_BASH_ENV_PASSTHROUGH"] === "1";
@@ -261,6 +252,16 @@ function buildChildEnv(optsOrSessionId) {
       out[k] = v;
     }
   }
+  if (gitIdentity) {
+    if (gitIdentity.name) {
+      out["GIT_AUTHOR_NAME"] = gitIdentity.name;
+      out["GIT_COMMITTER_NAME"] = gitIdentity.name;
+    }
+    if (gitIdentity.email) {
+      out["GIT_AUTHOR_EMAIL"] = gitIdentity.email;
+      out["GIT_COMMITTER_EMAIL"] = gitIdentity.email;
+    }
+  }
   if (opts.extra) {
     Object.assign(out, opts.extra);
   }
@@ -273,12 +274,18 @@ var hasStdout = () => typeof process !== "undefined" && !!process.stdout;
 function isStdoutTTY() {
   return hasStdout() && Boolean(process.stdout.isTTY);
 }
+var activeOutputGuard = null;
 function writeTo(s, stream) {
   if (!stream || typeof stream.write !== "function") return false;
-  {
+  const guard = activeOutputGuard;
+  if (!guard) {
     stream.write(s);
     return true;
   }
+  guard.suspend();
+  stream.write(s);
+  guard.resume();
+  return true;
 }
 function writeErr(s, stream = process.stderr) {
   return writeTo(s, stream);
@@ -315,6 +322,8 @@ var color = {
   bgRed: wrap("41", "49"),
   bgGreen: wrap("42", "49")
 };
+
+// src/utils/context-evidence.ts
 var MAX_DIGEST_CHARS = 4e3;
 function createContextEvidenceState() {
   return {
@@ -458,12 +467,16 @@ function toErrorMessage(err) {
 // src/utils/expect-defined.ts
 function expectDefined(value, label) {
   if (value === null || value === void 0) {
-    const err = new Error("Expected value to be defined");
+    const err = new Error(label ? `Expected ${label} to be defined` : "Expected value to be defined");
     err.name = "ExpectDefinedError";
     throw err;
   }
   return value;
 }
+
+// src/utils/glob-expand.ts
+import * as fsp from "node:fs/promises";
+import { isAbsolute, resolve } from "node:path";
 var GLOB_CHARS = /* @__PURE__ */ new Set(["*", "?", "["]);
 var IS_WINDOWS = process.platform === "win32";
 var SEP = IS_WINDOWS ? "\\" : "/";
@@ -529,7 +542,7 @@ async function expandGlob(pattern) {
   async function walk3(dir, pat) {
     let entries;
     try {
-      entries = await fsp9.readdir(dir);
+      entries = await fsp.readdir(dir);
     } catch {
       return;
     }
@@ -551,7 +564,7 @@ async function expandGlob(pattern) {
       for (const e of entries) {
         const full = `${dir}${SEP}${e}`;
         try {
-          const stat13 = await fsp9.stat(full);
+          const stat13 = await fsp.stat(full);
           if (stat13.isDirectory()) await walk3(full, rest);
         } catch {
         }
@@ -569,7 +582,7 @@ async function expandGlob(pattern) {
       if (entries.includes(seg)) {
         const full = `${dir}${SEP}${seg}`;
         try {
-          const stat13 = await fsp9.stat(full);
+          const stat13 = await fsp.stat(full);
           if (stat13.isDirectory()) await walk3(full, rest);
         } catch {
         }
@@ -761,10 +774,10 @@ function validateAgainstSchema(value, schema) {
   return { ok: errors.length === 0, errors };
 }
 var MAX_SCHEMA_DEPTH = 64;
-function walk(value, schema, path31, errors, depth) {
+function walk(value, schema, path29, errors, depth) {
   if (depth > MAX_SCHEMA_DEPTH) {
     errors.push({
-      path: path31 || "<root>",
+      path: path29 || "<root>",
       message: `schema nesting exceeds maximum depth (${MAX_SCHEMA_DEPTH})`
     });
     return;
@@ -772,7 +785,7 @@ function walk(value, schema, path31, errors, depth) {
   if (schema.enum !== void 0) {
     if (!enumIncludes(schema.enum, value)) {
       errors.push({
-        path: path31 || "<root>",
+        path: path29 || "<root>",
         message: `expected one of ${JSON.stringify(schema.enum)}, got ${JSON.stringify(value)}`
       });
       return;
@@ -781,7 +794,7 @@ function walk(value, schema, path31, errors, depth) {
   if (typeof schema.type === "string") {
     if (!checkType(value, schema.type)) {
       errors.push({
-        path: path31 || "<root>",
+        path: path29 || "<root>",
         message: `expected ${schema.type}, got ${describeType(value)} (${previewValue(value)})`
       });
       return;
@@ -793,7 +806,7 @@ function walk(value, schema, path31, errors, depth) {
       if (!(req in obj)) {
         const expected = schema.properties?.[req]?.type;
         errors.push({
-          path: joinPath(path31, req),
+          path: joinPath(path29, req),
           message: `required property missing${typeof expected === "string" ? ` (expected ${expected})` : ""}`
         });
       }
@@ -801,14 +814,14 @@ function walk(value, schema, path31, errors, depth) {
     if (schema.properties) {
       for (const [key, subSchema] of Object.entries(schema.properties)) {
         if (key in obj) {
-          walk(obj[key], subSchema, joinPath(path31, key), errors, depth + 1);
+          walk(obj[key], subSchema, joinPath(path29, key), errors, depth + 1);
         }
       }
     }
   }
   if (schema.type === "array" && Array.isArray(value) && schema.items) {
     for (let i = 0; i < value.length; i++) {
-      walk(value[i], schema.items, `${path31}[${i}]`, errors, depth + 1);
+      walk(value[i], schema.items, `${path29}[${i}]`, errors, depth + 1);
     }
   }
 }
@@ -1164,13 +1177,16 @@ function safeStringify(value, pretty = false) {
     });
   }
 }
+
+// src/utils/session-scoped-path.ts
+import * as path2 from "node:path";
 function sessionScopedPath(dir, sessionId, suffix) {
   if (!sessionId || sessionId.includes("\\") || sessionId.includes("..")) {
     throw invalid(sessionId);
   }
-  const resolved = path4.resolve(dir, `${sessionId}${suffix}`);
-  const rel = path4.relative(path4.resolve(dir), resolved);
-  if (rel.startsWith("..") || path4.isAbsolute(rel)) {
+  const resolved = path2.resolve(dir, `${sessionId}${suffix}`);
+  const rel = path2.relative(path2.resolve(dir), resolved);
+  if (rel.startsWith("..") || path2.isAbsolute(rel)) {
     throw invalid(sessionId);
   }
   return resolved;
@@ -1188,6 +1204,9 @@ function invalid(sessionId) {
 function slugify(name, fallback = "prompt", maxLen = 64) {
   return name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, maxLen).replace(/-+$/g, "") || fallback;
 }
+
+// src/utils/ulid.ts
+import { randomBytes as randomBytes2 } from "node:crypto";
 var ENCODING = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
 var ENCODING_LEN = ENCODING.length;
 var TIME_LEN = 10;
@@ -1203,7 +1222,7 @@ function encodeTime(now, len) {
   return str;
 }
 function encodeRandom(len) {
-  const bytes = randomBytes(len);
+  const bytes = randomBytes2(len);
   let str = "";
   for (let i = 0; i < len; i++) {
     str += ENCODING[bytes[i] % ENCODING_LEN];
@@ -1216,7 +1235,7 @@ function ulid(seedTime = Date.now()) {
 
 // src/utils/sleep.ts
 function sleep(ms) {
-  return new Promise((resolve14) => setTimeout(resolve14, ms));
+  return new Promise((resolve12) => setTimeout(resolve12, ms));
 }
 
 // src/utils/string.ts
@@ -2178,12 +2197,17 @@ function normalizeToolResultRenderMode(value) {
 function resolveToolResultRenderMode(modes, toolName) {
   return normalizeToolResultRenderMode(modes?.[toolName]) ?? DEFAULT_TOOL_RESULT_RENDER_MODE;
 }
+
+// src/utils/wstack-paths.ts
+import { createHash } from "node:crypto";
+import * as os from "node:os";
+import * as path3 from "node:path";
 function projectHash(absRoot) {
-  return createHash("sha256").update(path4.resolve(absRoot)).digest("hex").slice(0, 12);
+  return createHash("sha256").update(path3.resolve(absRoot)).digest("hex").slice(0, 12);
 }
 function projectSlug(absRoot) {
-  const base = slugify2(path4.basename(absRoot));
-  const hash = createHash("sha256").update(path4.resolve(absRoot)).digest("hex").slice(0, 6);
+  const base = slugify2(path3.basename(absRoot));
+  const hash = createHash("sha256").update(path3.resolve(absRoot)).digest("hex").slice(0, 6);
   return `${base}-${hash}`;
 }
 function slugify2(name) {
@@ -2191,61 +2215,61 @@ function slugify2(name) {
 }
 function wstackGlobalRoot() {
   const fromEnv = process.env["WRONGSTACK_HOME"];
-  if (fromEnv && fromEnv.trim().length > 0) return path4.resolve(fromEnv);
-  return path4.join(os.homedir(), ".wrongstack");
+  if (fromEnv && fromEnv.trim().length > 0) return path3.resolve(fromEnv);
+  return path3.join(os.homedir(), ".wrongstack");
 }
 function resolveWstackPaths(opts) {
-  const globalRoot = opts.globalRoot ?? (opts.userHome ? path4.join(opts.userHome, ".wrongstack") : wstackGlobalRoot());
+  const globalRoot = opts.globalRoot ?? (opts.userHome ? path3.join(opts.userHome, ".wrongstack") : wstackGlobalRoot());
   const homeDir = opts.userHome ?? os.homedir();
   const hash = projectHash(opts.projectRoot);
   const slug = projectSlug(opts.projectRoot);
-  const projectDir = path4.join(globalRoot, "projects", slug);
+  const projectDir = path3.join(globalRoot, "projects", slug);
   return {
     globalRoot,
     projectRoot: opts.projectRoot,
     homeDir,
     configDir: globalRoot,
-    globalConfig: path4.join(globalRoot, "config.json"),
-    secretsKey: path4.join(globalRoot, ".key"),
-    globalMemory: path4.join(globalRoot, "memory.md"),
-    globalSkills: path4.join(globalRoot, "skills"),
-    globalClaudeSkills: path4.join(homeDir, ".claude", "skills"),
-    globalDesignKits: path4.join(globalRoot, "design-kits"),
-    globalPrompts: path4.join(globalRoot, "prompts"),
-    globalInstructions: path4.join(globalRoot, "instructions"),
-    promptUsage: path4.join(globalRoot, "prompt-usage.json"),
-    cacheDir: path4.join(globalRoot, "cache"),
-    modelsCache: path4.join(globalRoot, "cache", "models.dev.json"),
-    modelsOverlayCache: path4.join(globalRoot, "cache", "models-overlay.json"),
-    historyFile: path4.join(globalRoot, "history"),
-    logFile: path4.join(globalRoot, "logs", "wrongstack.log"),
+    globalConfig: path3.join(globalRoot, "config.json"),
+    secretsKey: path3.join(globalRoot, ".key"),
+    globalMemory: path3.join(globalRoot, "memory.md"),
+    globalSkills: path3.join(globalRoot, "skills"),
+    globalClaudeSkills: path3.join(homeDir, ".claude", "skills"),
+    globalDesignKits: path3.join(globalRoot, "design-kits"),
+    globalPrompts: path3.join(globalRoot, "prompts"),
+    globalInstructions: path3.join(globalRoot, "instructions"),
+    promptUsage: path3.join(globalRoot, "prompt-usage.json"),
+    cacheDir: path3.join(globalRoot, "cache"),
+    modelsCache: path3.join(globalRoot, "cache", "models.dev.json"),
+    modelsOverlayCache: path3.join(globalRoot, "cache", "models-overlay.json"),
+    historyFile: path3.join(globalRoot, "history"),
+    logFile: path3.join(globalRoot, "logs", "wrongstack.log"),
     projectDir,
-    projectCodebaseIndex: path4.join(projectDir, "codebase-index"),
-    projectMemory: path4.join(projectDir, "memory.md"),
-    projectSessions: path4.join(projectDir, "sessions"),
-    projectTrust: path4.join(projectDir, "trust.json"),
-    projectMeta: path4.join(projectDir, "meta.json"),
-    projectLocalConfig: path4.join(projectDir, "config.local.json"),
-    inProjectConfig: path4.join(opts.projectRoot, ".wrongstack", "config.json"),
-    inProjectAgentsFile: path4.join(opts.projectRoot, ".wrongstack", "AGENTS.md"),
-    inProjectSkills: path4.join(opts.projectRoot, ".wrongstack", "skills"),
-    inProjectClaudeSkills: path4.join(opts.projectRoot, ".claude", "skills"),
-    inProjectPrompts: path4.join(opts.projectRoot, ".wrongstack", "prompts"),
-    inProjectInstructions: path4.join(opts.projectRoot, ".wrongstack", "instructions"),
-    inProjectDesignKits: path4.join(opts.projectRoot, ".wrongstack", "design-kits"),
-    inProjectWorktrees: path4.join(opts.projectRoot, ".wrongstack", "worktrees"),
+    projectCodebaseIndex: path3.join(projectDir, "codebase-index"),
+    projectMemory: path3.join(projectDir, "memory.md"),
+    projectSessions: path3.join(projectDir, "sessions"),
+    projectTrust: path3.join(projectDir, "trust.json"),
+    projectMeta: path3.join(projectDir, "meta.json"),
+    projectLocalConfig: path3.join(projectDir, "config.local.json"),
+    inProjectConfig: path3.join(opts.projectRoot, ".wrongstack", "config.json"),
+    inProjectAgentsFile: path3.join(opts.projectRoot, ".wrongstack", "AGENTS.md"),
+    inProjectSkills: path3.join(opts.projectRoot, ".wrongstack", "skills"),
+    inProjectClaudeSkills: path3.join(opts.projectRoot, ".claude", "skills"),
+    inProjectPrompts: path3.join(opts.projectRoot, ".wrongstack", "prompts"),
+    inProjectInstructions: path3.join(opts.projectRoot, ".wrongstack", "instructions"),
+    inProjectDesignKits: path3.join(opts.projectRoot, ".wrongstack", "design-kits"),
+    inProjectWorktrees: path3.join(opts.projectRoot, ".wrongstack", "worktrees"),
     projectHash: hash,
     projectSlug: slug,
-    projectGoal: path4.join(projectDir, "goal.json"),
-    projectInputHistory: path4.join(projectDir, "input-history.json"),
-    projectSpecs: path4.join(projectDir, "specs"),
-    projectTaskGraphs: path4.join(projectDir, "task-graphs"),
-    projectSddSession: path4.join(projectDir, "sdd-session.json"),
-    projectPlan: path4.join(projectDir, "plan.json"),
-    projectAutophase: path4.join(projectDir, "autophase"),
-    projectSddBoards: path4.join(projectDir, "sdd-boards"),
-    syncConfig: path4.join(globalRoot, "sync.json"),
-    projectStatus: (projectHash2) => path4.join(globalRoot, "projects", projectHash2, "status.json")
+    projectGoal: path3.join(projectDir, "goal.json"),
+    projectInputHistory: path3.join(projectDir, "input-history.json"),
+    projectSpecs: path3.join(projectDir, "specs"),
+    projectTaskGraphs: path3.join(projectDir, "task-graphs"),
+    projectSddSession: path3.join(projectDir, "sdd-session.json"),
+    projectPlan: path3.join(projectDir, "plan.json"),
+    projectAutophase: path3.join(projectDir, "autophase"),
+    projectSddBoards: path3.join(projectDir, "sdd-boards"),
+    syncConfig: path3.join(globalRoot, "sync.json"),
+    projectStatus: (projectHash2) => path3.join(globalRoot, "projects", projectHash2, "status.json")
   };
 }
 
@@ -2538,7 +2562,7 @@ var InMemoryAgentBridge = class {
       });
     }
     this.inflightGuards.add(correlationId);
-    return new Promise((resolve14, reject) => {
+    return new Promise((resolve12, reject) => {
       const timer = setTimeout(() => {
         this.inflightGuards.delete(correlationId);
         this.pendingRequests.delete(correlationId);
@@ -2557,7 +2581,7 @@ var InMemoryAgentBridge = class {
         return;
       }
       this.pendingRequests.set(correlationId, {
-        resolve: resolve14,
+        resolve: resolve12,
         reject,
         timer
       });
@@ -2906,13 +2930,13 @@ var SubagentBudget = class _SubagentBudget {
     if (!bus?.hasListenerFor("budget.threshold_reached")) {
       return Promise.resolve("stop");
     }
-    return new Promise((resolve14) => {
+    return new Promise((resolve12) => {
       let resolved = false;
       const respond = (d) => {
         if (resolved) return;
         resolved = true;
         clearTimeout(fallback);
-        resolve14(d);
+        resolve12(d);
       };
       const fallback = setTimeout(() => respond("stop"), _SubagentBudget.DECISION_TIMEOUT_MS);
       const sessionId = this.currentSessionId();
@@ -3063,8 +3087,16 @@ var ToolCapabilities = {
   FS_WRITE_OUTSIDE_PROJECT: "fs.write.outside-project",
   /** Can perform outbound network requests. */
   NET_OUTBOUND: "net.outbound",
+  /** Can mutate in-memory session todos only. */
+  SESSION_TODO: "session.todo",
+  /** Can mutate in-memory session mode only. */
+  SESSION_MODE: "session.mode",
+  /** Can inspect registered tool metadata. */
+  TOOL_META: "tool.meta",
   /** Can invoke arbitrary registered tools through a meta-tool. */
   TOOL_MUTATE_ANY: "tool.mutate.any",
+  /** Can read persistent memory. */
+  MEMORY_READ: "memory.read",
   /** Can write persistent memory. */
   MEMORY_WRITE: "memory.write",
   /** Can delete persistent memory. */
@@ -3077,6 +3109,12 @@ var ToolCapabilities = {
   COORDINATION_FLEET_READ: "coordination.fleet.read",
   /** Can publish attributed, schema-checked events onto the fleet bus. */
   COORDINATION_FLEET_EMIT: "coordination.fleet.emit",
+  /** Can submit a task-local structured result to the parent Director. */
+  COORDINATION_RESULT_SUBMIT: "coordination.result.submit",
+  /** Can read or write inter-agent mailbox messages. */
+  COORDINATION_MAIL: "coordination.mail",
+  /** Can schedule, inspect, or cancel in-session cron jobs. */
+  COORDINATION_CRON: "coordination.cron",
   /** Can mutate global or session configuration / trust state. */
   CONFIG_MUTATE: "config.mutate",
   /** Can install packages or run package managers with side effects. */
@@ -3096,6 +3134,22 @@ var DANGEROUS_FOR_SUBAGENTS = [
   ToolCapabilities.CONFIG_MUTATE,
   ToolCapabilities.PACKAGE_INSTALL
 ];
+var WIDE_SUBAGENT_CAPABILITIES = [
+  ToolCapabilities.FS_READ,
+  ToolCapabilities.FS_WRITE,
+  ToolCapabilities.NET_OUTBOUND,
+  ToolCapabilities.SESSION_TODO,
+  ToolCapabilities.TOOL_META,
+  ToolCapabilities.MEMORY_READ,
+  ToolCapabilities.SHELL_ARBITRARY,
+  ToolCapabilities.SHELL_RESTRICTED,
+  ToolCapabilities.SHELL_EXEC,
+  ToolCapabilities.PACKAGE_INSTALL,
+  // Read-only fleet visibility (fleet_status) — peer awareness has no blast
+  // radius and every fleet worker should coordinate around its peers.
+  ToolCapabilities.COORDINATION_FLEET_READ,
+  ToolCapabilities.COORDINATION_RESULT_SUBMIT
+];
 function hasDangerousCapabilityForSubagents(toolOrCaps) {
   if (!toolOrCaps) return false;
   const input = toolOrCaps;
@@ -3453,6 +3507,12 @@ var TOOLS = {
   /** Web research. */
   research: ["read", "grep", "glob", "search", "fetch", "mailbox"]
 };
+
+// src/coordination/agents/agent-prompts.ts
+import { readFileSync, statSync } from "node:fs";
+import * as os2 from "node:os";
+import * as path4 from "node:path";
+import { fileURLToPath } from "node:url";
 var promptCache = /* @__PURE__ */ new Map();
 var candidateCache = /* @__PURE__ */ new Map();
 function agentPrompt(id) {
@@ -3473,7 +3533,7 @@ function agentPrompt(id) {
   return resolved;
 }
 function agentPromptDirCandidates(envDir) {
-  const globalRoot = process.env["WRONGSTACK_HOME"] || path4.join(os.homedir(), ".wrongstack");
+  const globalRoot = process.env["WRONGSTACK_HOME"] || path4.join(os2.homedir(), ".wrongstack");
   const candKey = `${envDir}\0${globalRoot}`;
   const cached = candidateCache.get(candKey);
   if (cached !== void 0) return cached;
@@ -5053,6 +5113,11 @@ function attachAutoExtend(events, policy = {}) {
   };
 }
 
+// src/coordination/delegate-tool.ts
+import * as fsp2 from "node:fs/promises";
+import * as path5 from "node:path";
+import { randomUUID as randomUUID2 } from "node:crypto";
+
 // src/coordination/fleet.ts
 var AUDIT_LOG_AGENT = {
   id: "audit-log",
@@ -5201,10 +5266,10 @@ FLEET_ROSTER_BUDGETS["gemini-cli"] = { timeoutMs: 10 * 60 * 60 * 1e3, maxIterati
 FLEET_ROSTER_BUDGETS["copilot"] = { timeoutMs: 10 * 60 * 60 * 1e3, maxIterations: 8e3, maxToolCalls: 2e4 };
 FLEET_ROSTER_BUDGETS["openhands"] = { timeoutMs: 10 * 60 * 60 * 1e3, maxIterations: 8e3, maxToolCalls: 2e4 };
 FLEET_ROSTER_BUDGETS["goose"] = { timeoutMs: 10 * 60 * 60 * 1e3, maxIterations: 8e3, maxToolCalls: 2e4 };
-({
+var FLEET_ROSTER_WITHACP = {
   ...FLEET_ROSTER,
   ...Object.fromEntries(ACP_AGENTS.map((a) => [a.role, a]))
-});
+};
 
 // src/coordination/delegate-tool.ts
 function createDelegateTool(opts) {
@@ -5274,17 +5339,25 @@ function createDelegateTool(opts) {
   return {
     name: "delegate",
     description: "Hand a discrete piece of work to a dedicated subagent and wait for its result. The subagent has its own context, its own LLM call, and its own budget \u2014 use this when a task is self-contained, would otherwise blow up your context, or benefits from a specialized role (bug-hunter, security-scanner, refactor-planner, audit-log). For free-form coding tasks (not tied to a pre-defined role), pass `name` + `task` \u2014 the subagent runs as a general-purpose coding agent with a large default budget. YOU decide how big the budget is: pass `timeoutMs`, `maxIterations`, and `maxToolCalls` sized to the actual work. There is no hidden cap forcing a 3-minute / 80-iteration limit \u2014 if a monorepo audit needs 2 hours and 500 tool calls, ask for that. Call multiple delegates in parallel through the provider's parallel-tool-call surface to fan work out across roles.",
-    usageHint: "Set `task` to a complete instruction. Either pick `role` from the roster (audit-log, bug-hunter, refactor-planner, security-scanner) or pass `name` to run a free-form coding agent. For non-trivial work, also pass `timeoutMs`, `maxIterations`, and `maxToolCalls`. Returns the subagent's `TaskResult` \u2014 including the textual `result`, iteration count, tool count, and duration. Auto-promotes the host into director mode on first call.",
+    usageHint: "Set `task` to a complete instruction. Either pick `role` from the roster (audit-log, bug-hunter, refactor-planner, security-scanner) or pass `name` to run a free-form coding agent. For non-trivial work, also pass `timeoutMs`, `maxIterations`, and `maxToolCalls`. Returns the subagent's `TaskResult` \u2014 including the textual `result`, iteration count, tool count, and duration. Requires Director mode to be active in normal CLI sessions.",
     permission: "auto",
     mutating: false,
     capabilities: [ToolCapabilities.SUBAGENT_SPAWN],
     inputSchema,
-    async execute(input) {
+    async execute(input, _ctx, execOpts) {
       const sessionId = opts.directorRunId;
+      const abortSignal = execOpts?.signal;
       const i = input ?? {};
       if (typeof i.task !== "string" || !i.task.trim()) {
         return { ok: false, error: "`task` is required." };
       }
+      if (abortSignal?.aborted) {
+        return {
+          ok: false,
+          stopReason: "aborted",
+          error: "Delegation cancelled before spawn \u2014 the run was interrupted."
+        };
+      }
       const target = i.role ?? i.name ?? "subagent";
       try {
         let director = await opts.host.ensureDirector();
@@ -5349,14 +5422,16 @@ function createDelegateTool(opts) {
         opts.events?.emit("delegate.started", { sessionId, target, task: i.task });
         const subagentId = await director.spawn(cfg);
         const taskId = await director.assign({
-          id: `${randomUUID()}`,
+          id: `${randomUUID2()}`,
           description: i.task,
           subagentId
         });
         const dir = director;
-        const result = await new Promise((resolve14) => {
+        const result = await new Promise((resolve12) => {
           let settled = false;
           let timer;
+          let offAbort = () => {
+          };
           const finish = (value) => {
             if (settled) return;
             settled = true;
@@ -5364,7 +5439,8 @@ function createDelegateTool(opts) {
             offTool();
             offIter();
             offProgress();
-            resolve14(value);
+            offAbort();
+            resolve12(value);
           };
           const arm = () => {
             if (timer) clearTimeout(timer);
@@ -5376,9 +5452,42 @@ function createDelegateTool(opts) {
           const offTool = dir.fleet.filter("tool.executed", bump);
           const offIter = dir.fleet.filter("iteration.started", bump);
           const offProgress = dir.fleet.filter("tool.progress", bump);
+          if (abortSignal) {
+            const onAbortSignal = () => finish({ __aborted: true });
+            abortSignal.addEventListener("abort", onAbortSignal, { once: true });
+            offAbort = () => abortSignal.removeEventListener("abort", onAbortSignal);
+            if (abortSignal.aborted) onAbortSignal();
+          }
           arm();
           dir.awaitTasks([taskId]).then((r) => finish(r[0] ?? { __emptyResult: true })).catch(() => finish({ __timeout: true }));
         });
+        if ("__aborted" in result) {
+          try {
+            await dir.terminate(subagentId);
+          } catch {
+          }
+          const partial2 = await readSubagentPartial(opts, subagentId);
+          opts.events?.emit("delegate.completed", {
+            sessionId,
+            target,
+            task: i.task,
+            ok: false,
+            status: "aborted",
+            summary: `[${target}] aborted \u2014 the run was interrupted`,
+            durationMs: 0,
+            iterations: partial2?.events ?? 0,
+            toolCalls: partial2?.toolUsesObserved ?? 0,
+            subagentId
+          });
+          return {
+            ok: false,
+            stopReason: "aborted",
+            error: "Delegated task aborted \u2014 the run was interrupted.",
+            subagentId,
+            taskId,
+            partial: partial2
+          };
+        }
         if ("__timeout" in result) {
           const partial2 = await readSubagentPartial(opts, subagentId);
           opts.events?.emit("delegate.completed", {
@@ -5505,7 +5614,7 @@ function instantiateRosterConfig(role, base) {
     ...withBudget,
     // Give each spawn a fresh id so parallel or repeated delegates
     // can use the same role safely.
-    id: `${role}-${randomUUID().slice(0, 8)}`
+    id: `${role}-${randomUUID2().slice(0, 8)}`
   };
 }
 function hintForKind(kind, retryable, backoffMs, partial) {
@@ -5580,13 +5689,13 @@ async function readSubagentPartial(opts, subagentId) {
   if (!opts.sessionsRoot) return void 0;
   const candidates = [];
   if (opts.directorRunId) {
-    candidates.push(path4.join(opts.sessionsRoot, opts.directorRunId, `${subagentId}.jsonl`));
+    candidates.push(path5.join(opts.sessionsRoot, opts.directorRunId, `${subagentId}.jsonl`));
   } else {
     try {
-      const entries = await fsp9.readdir(opts.sessionsRoot, { withFileTypes: true });
+      const entries = await fsp2.readdir(opts.sessionsRoot, { withFileTypes: true });
       for (const entry of entries) {
         if (entry.isDirectory()) {
-          candidates.push(path4.join(opts.sessionsRoot, entry.name, `${subagentId}.jsonl`));
+          candidates.push(path5.join(opts.sessionsRoot, entry.name, `${subagentId}.jsonl`));
         }
       }
     } catch {
@@ -5596,7 +5705,7 @@ async function readSubagentPartial(opts, subagentId) {
   for (const file of candidates) {
     let raw;
     try {
-      raw = await fsp9.readFile(file, "utf8");
+      raw = await fsp2.readFile(file, "utf8");
     } catch {
       continue;
     }
@@ -5629,10 +5738,19 @@ async function readSubagentPartial(opts, subagentId) {
   }
   return void 0;
 }
+
+// src/coordination/director.ts
+import { randomUUID as randomUUID6 } from "node:crypto";
+import * as fsp5 from "node:fs/promises";
+import * as path7 from "node:path";
+
+// src/storage/director-state.ts
+import * as fsp3 from "node:fs/promises";
+import { hostname } from "node:os";
 async function loadDirectorState(filePath) {
   let raw;
   try {
-    raw = await fsp9.readFile(filePath, "utf8");
+    raw = await fsp3.readFile(filePath, "utf8");
   } catch {
     return null;
   }
@@ -5647,7 +5765,7 @@ async function loadDirectorState(filePath) {
 async function acquireDirectorStateLock(lockPath, processId = process.pid) {
   let existing;
   try {
-    existing = await fsp9.readFile(lockPath, "utf8");
+    existing = await fsp3.readFile(lockPath, "utf8");
   } catch {
   }
   if (existing) {
@@ -5671,7 +5789,7 @@ async function acquireDirectorStateLock(lockPath, processId = process.pid) {
 }
 async function releaseDirectorStateLock(lockPath) {
   try {
-    await fsp9.unlink(lockPath);
+    await fsp3.unlink(lockPath);
   } catch {
   }
 }
@@ -5834,6 +5952,11 @@ function resolveMaxSpawnDepth(requested) {
   return Math.max(0, Math.min(HARD_MAX_SPAWN_DEPTH, Math.floor(requested)));
 }
 
+// src/coordination/collab-debug.ts
+import { EventEmitter } from "node:events";
+import * as fsp4 from "node:fs/promises";
+import { randomUUID as randomUUID3 } from "node:crypto";
+
 // src/coordination/fleet-event-validation.ts
 var ROLE_BY_EVENT = {
   "bug.found": "bug-hunter",
@@ -5984,7 +6107,7 @@ var CollabSession = class extends EventEmitter {
   _timeoutTimer;
   constructor(director, fleetBus, options) {
     super();
-    this.sessionId = randomUUID();
+    this.sessionId = randomUUID3();
     this.options = options;
     this.director = director;
     this.fleetBus = fleetBus;
@@ -6046,8 +6169,8 @@ var CollabSession = class extends EventEmitter {
     for (const filePath of allFiles) {
       try {
         const [content, stat13] = await Promise.all([
-          fsp9.readFile(filePath, "utf8"),
-          fsp9.stat(filePath)
+          fsp4.readFile(filePath, "utf8"),
+          fsp4.stat(filePath)
         ]);
         const ext = filePath.split(".").pop() ?? "";
         const language = ext === "ts" || ext === "tsx" ? "typescript" : ext === "js" || ext === "jsx" ? "javascript" : ext === "md" ? "markdown" : ext === "json" ? "json" : void 0;
@@ -6224,7 +6347,7 @@ var CollabSession = class extends EventEmitter {
       timeoutMs: budget.timeoutMs
     };
     const subagentId = await this.director.spawn(cfg);
-    await this.director.assign({ id: randomUUID(), subagentId, description: taskBrief });
+    await this.director.assign({ id: randomUUID3(), subagentId, description: taskBrief });
     return subagentId;
   }
   buildBugHunterTask() {
@@ -6475,7 +6598,7 @@ Emit each evaluation immediately. Do not wait until you have read all reports.`;
     for (const file of this.snapshot.files) {
       if (file.snapshotMtimeMs === void 0 && file.snapshotSizeBytes === void 0) continue;
       try {
-        const stat13 = await fsp9.stat(file.path);
+        const stat13 = await fsp4.stat(file.path);
         const mtimeChanged = file.snapshotMtimeMs !== void 0 && stat13.mtimeMs > file.snapshotMtimeMs + 1;
         const sizeChanged = file.snapshotSizeBytes !== void 0 && stat13.size !== file.snapshotSizeBytes;
         if (mtimeChanged || sizeChanged) {
@@ -6608,6 +6731,11 @@ var FleetContextOverflowError = class extends Error {
     this.observed = observed;
   }
 };
+
+// src/utils/instruction-file.ts
+import { readFileSync as readFileSync2, statSync as statSync2 } from "node:fs";
+import * as path6 from "node:path";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
 var textCache = /* @__PURE__ */ new Map();
 var rootCandidates;
 function readBundledInstructionText(relativePath) {
@@ -6616,7 +6744,7 @@ function readBundledInstructionText(relativePath) {
   let resolved = "";
   for (const root of instructionRootCandidates()) {
     try {
-      resolved = readFileSync(path4.join(root, relativePath), "utf8").trimEnd();
+      resolved = readFileSync2(path6.join(root, relativePath), "utf8").trimEnd();
       break;
     } catch {
     }
@@ -6632,18 +6760,18 @@ function renderInstructionTemplate(template, values) {
 }
 function instructionRootCandidates() {
   if (rootCandidates !== void 0) return rootCandidates;
-  const here = path4.dirname(fileURLToPath(import.meta.url));
+  const here = path6.dirname(fileURLToPath2(import.meta.url));
   const candidates = [
-    path4.resolve(here, "../../instructions"),
-    path4.resolve(here, "../instructions"),
-    path4.resolve(here, "instructions")
+    path6.resolve(here, "../../instructions"),
+    path6.resolve(here, "../instructions"),
+    path6.resolve(here, "instructions")
   ];
   rootCandidates = candidates.sort((a, b) => Number(!isDirectory2(a)) - Number(!isDirectory2(b)));
   return rootCandidates;
 }
 function isDirectory2(candidate) {
   try {
-    return statSync(candidate).isDirectory();
+    return statSync2(candidate).isDirectory();
   } catch {
     return false;
   }
@@ -6710,6 +6838,14 @@ function rosterSummaryFromConfigs(roster) {
   return lines.join("\n");
 }
 
+// src/coordination/director-tools.ts
+import { randomUUID as randomUUID4 } from "node:crypto";
+import {
+  claimReadyTask,
+  listReadyTasks,
+  updateTaskAssignment
+} from "@wrongstack/kanban";
+
 // src/coordination/dispatcher.ts
 var DEFAULT_DISPATCH_ROLE = "executor";
 var FALLBACK_DEFINITION = {
@@ -6969,7 +7105,7 @@ function instantiateRosterConfig2(role, base) {
     ...base,
     // Roster entries are templates. A director may spawn several
     // workers with the same role, so never reuse the template id.
-    id: `${role}-${randomUUID().slice(0, 8)}`
+    id: `${role}-${randomUUID4().slice(0, 8)}`
   };
 }
 function makeQualityGateTool(director, roster) {
@@ -7068,7 +7204,7 @@ function makeQualityGateTool(director, roster) {
             makeQualityGateSubagentConfig("verifier", roster, i.verifierWorktree ?? "auto")
           );
           const taskId = await director.assign({
-            id: randomUUID(),
+            id: randomUUID4(),
             subagentId,
             description: buildVerifierTask(i, {
               attempt,
@@ -7086,7 +7222,7 @@ function makeQualityGateTool(director, roster) {
             makeQualityGateSubagentConfig("reviewer", roster, i.reviewerWorktree ?? "off")
           );
           const taskId = await director.assign({
-            id: randomUUID(),
+            id: randomUUID4(),
             subagentId,
             description: buildReviewerTask(i, {
               attempt,
@@ -7114,7 +7250,7 @@ function makeQualityGateTool(director, roster) {
           };
         }
         const repairTaskId = await director.assign({
-          id: randomUUID(),
+          id: randomUUID4(),
           subagentId: i.repairSubagentId,
           description: buildRepairTask(i, attempts[attempts.length - 1], attempt),
           timeoutMs: i.timeoutMs
@@ -7382,7 +7518,7 @@ function makeAssignTool(director) {
     async execute(input) {
       const i = input;
       const task = {
-        id: randomUUID(),
+        id: randomUUID4(),
         description: i.description,
         subagentId: i.subagentId,
         maxToolCalls: i.maxToolCalls,
@@ -7463,7 +7599,7 @@ function makeKanbanQueueTool(director, roster) {
       const leaseTtlMs = Math.max(1e3, Math.floor(i.leaseTtlMs ?? 5 * 60 * 1e3));
       const claimedAt = nowIso();
       const leaseSeeding = {
-        leaseId: randomUUID(),
+        leaseId: randomUUID4(),
         claimedAt,
         heartbeatAt: claimedAt,
         leaseExpiresAt: new Date(Date.now() + leaseTtlMs).toISOString()
@@ -7517,7 +7653,7 @@ function makeKanbanQueueTool(director, roster) {
           const config = buildKanbanSubagentConfig(claim.task, i, roster);
           subagentId = await director.spawn(config);
           runTaskId = await director.assign({
-            id: randomUUID(),
+            id: randomUUID4(),
             subagentId,
             description: buildKanbanFleetTaskPrompt(claim.board, claim.task, {
               heartbeatIntervalMs: i.heartbeatIntervalMs ?? 6e4,
@@ -8526,6 +8662,9 @@ var KIND_TO_CODE = {
 function kindToCode(kind) {
   return KIND_TO_CODE[kind];
 }
+
+// src/coordination/model-matrix.ts
+var MATRIX_PHASE_KEYS = Object.keys(AGENTS_BY_PHASE);
 var ROLE_TO_PHASE = (() => {
   const map = {};
   for (const [phase, defs] of Object.entries(AGENTS_BY_PHASE)) {
@@ -8552,6 +8691,10 @@ function roleNeedsIndependentReviewModel(role) {
   return role === "reviewer" || phaseForRole(role) === "review";
 }
 
+// src/coordination/multi-agent-coordinator.ts
+import { randomUUID as randomUUID5 } from "node:crypto";
+import { EventEmitter as EventEmitter2 } from "node:events";
+
 // src/coordination/coordinator/error-classifier.ts
 function classifySubagentError(err, hints = {}) {
   if (err instanceof AgentError && err.cause) {
@@ -8746,7 +8889,7 @@ function formatRole(role) {
 }
 
 // src/coordination/multi-agent-coordinator.ts
-var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends EventEmitter {
+var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends EventEmitter2 {
   coordinatorId;
   config;
   runner;
@@ -8839,7 +8982,7 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
     return { ...subagent, name: display };
   }
   async spawn(subagent) {
-    const id = subagent.id || randomUUID();
+    const id = subagent.id || randomUUID5();
     const cfg = this.withNickname(subagent, id);
     if (this.subagents.has(id)) {
       throw new Error(`Subagent id "${id}" already exists \u2014 refusing to overwrite`);
@@ -9013,7 +9156,7 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
       taskIds.map((id) => {
         const cached = this.completedResults.find((r) => r.taskId === id);
         if (cached) return cached;
-        return new Promise((resolve14, reject) => {
+        return new Promise((resolve12, reject) => {
           const timeout = setTimeout(() => {
             this.off("task.completed", handler);
             reject(new Error(`awaitTasks timed out waiting for task "${id}"`));
@@ -9022,7 +9165,7 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
             if (result.taskId === id) {
               clearTimeout(timeout);
               this.off("task.completed", handler);
-              resolve14(result);
+              resolve12(result);
             }
           };
           this.on("task.completed", handler);
@@ -9047,13 +9190,13 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
       const done = new Set(completed.map((r) => r.taskId));
       return { completed, pending: taskIds.filter((id) => !done.has(id)) };
     }
-    return new Promise((resolve14) => {
+    return new Promise((resolve12) => {
       let timer;
       const handler = ({ result }) => {
         if (!ids.has(result.taskId)) return;
         if (timer) clearTimeout(timer);
         this.off("task.completed", handler);
-        resolve14({
+        resolve12({
           completed: [result],
           pending: taskIds.filter((id) => id !== result.taskId)
         });
@@ -9061,7 +9204,7 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
       if (opts?.timeoutMs !== void 0) {
         timer = setTimeout(() => {
           this.off("task.completed", handler);
-          resolve14({ completed: [], pending: [...taskIds], timedOut: true });
+          resolve12({ completed: [], pending: [...taskIds], timedOut: true });
         }, opts.timeoutMs);
       }
       this.on("task.completed", handler);
@@ -9343,12 +9486,12 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
             }
             return new Promise((resolveDecision) => {
               let settled = false;
-              const resolve14 = (d) => {
+              const resolve12 = (d) => {
                 if (settled) return;
                 settled = true;
                 resolveDecision(d);
               };
-              const fallback = setTimeout(() => resolve14("stop"), DECISION_TIMEOUT_MS);
+              const fallback = setTimeout(() => resolve12("stop"), DECISION_TIMEOUT_MS);
               const sessionId = this.currentSessionId();
               budget._events?.emit("budget.threshold_reached", {
                 ...sessionId ? { sessionId } : {},
@@ -9366,11 +9509,11 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
                 // disagreeing, resolves as a stop). Async grants still resolve.
                 extend: (extra) => {
                   clearTimeout(fallback);
-                  queueMicrotask(() => resolve14({ extend: extra }));
+                  queueMicrotask(() => resolve12({ extend: extra }));
                 },
                 deny: () => {
                   clearTimeout(fallback);
-                  resolve14("stop");
+                  resolve12("stop");
                 }
               });
             });
@@ -9506,8 +9649,9 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
     }
     const subagent = this.subagents.get(result.subagentId);
     if (subagent && subagent.status !== "stopped") {
-      result.status === "failed" || result.status === "timeout";
+      const failed = result.status === "failed" || result.status === "timeout";
       subagent.status = "idle";
+      void failed;
       subagent.currentTask = void 0;
       if (subagent.abortController.signal.aborted) {
         subagent.abortController = new AbortController();
@@ -9896,6 +10040,9 @@ var Director = class _Director {
   subagentBaseline;
   /** See {@link DirectorOptions.taskResultNotifier}. */
   taskResultNotifier;
+  subagentIdleTimeoutMs;
+  retireSubagentOnTaskComplete;
+  subagentIdleTimers = /* @__PURE__ */ new Map();
   /** Absolute path to the fleet's shared scratchpad directory, or null
    *  when none was configured. Exposed as a readonly getter for callers
    *  that need to surface the path to the user (e.g. the CLI logging
@@ -9991,13 +10138,15 @@ var Director = class _Director {
   /** Prevents large `ask_subagent` answers from bloating the leader's context window. */
   largeAnswerStore;
   constructor(opts) {
-    this.id = opts.config.coordinatorId || randomUUID();
+    this.id = opts.config.coordinatorId || randomUUID6();
     this.brain = opts.brain;
     this.manifestPath = opts.manifestPath;
     this.roster = opts.roster;
     this.directorPreamble = opts.directorPreamble ?? DEFAULT_DIRECTOR_PREAMBLE;
     this.subagentBaseline = opts.subagentBaseline ?? DEFAULT_SUBAGENT_BASELINE;
     this.taskResultNotifier = opts.taskResultNotifier;
+    this.subagentIdleTimeoutMs = typeof opts.subagentIdleTimeoutMs === "number" && Number.isFinite(opts.subagentIdleTimeoutMs) && opts.subagentIdleTimeoutMs >= 0 ? opts.subagentIdleTimeoutMs : void 0;
+    this.retireSubagentOnTaskComplete = opts.retireSubagentOnTaskComplete ?? false;
     this.sharedScratchpadPath = opts.sharedScratchpadPath ?? null;
     this.maxSpawns = opts.maxSpawns ?? Number.POSITIVE_INFINITY;
     this.maxSpawnDepth = opts.fleetManager?.maxSpawnDepth ?? resolveMaxSpawnDepth(opts.maxSpawnDepth);
@@ -10028,7 +10177,7 @@ var Director = class _Director {
     this.fleetManager = opts.fleetManager;
     this.logger = opts.logger;
     if (this.sharedScratchpadPath) {
-      void fsp9.mkdir(this.sharedScratchpadPath, { recursive: true }).catch((err) => this.logShutdownError("shared_scratchpad_mkdir", err));
+      void fsp5.mkdir(this.sharedScratchpadPath, { recursive: true }).catch((err) => this.logShutdownError("shared_scratchpad_mkdir", err));
     }
     this.transport = new InMemoryBridgeTransport();
     this.bridge = new InMemoryAgentBridge(
@@ -10142,6 +10291,10 @@ var Director = class _Director {
       } else {
         this.scheduleManifest();
       }
+      this.armSubagentIdleRetirement(
+        r.subagentId,
+        this.retireSubagentOnTaskComplete ? 0 : this.subagentIdleTimeoutMs
+      );
     };
     this.coordinator.on("task.completed", this.taskCompletedListener);
     const extendCounts = /* @__PURE__ */ new Map();
@@ -10614,6 +10767,7 @@ var Director = class _Director {
       });
       this.scheduleManifest();
     }
+    this.armSubagentIdleRetirement(result.subagentId, this.subagentIdleTimeoutMs);
     return result.subagentId;
   }
   /**
@@ -10636,7 +10790,7 @@ var Director = class _Director {
       );
     }
     const msg = {
-      id: randomUUID(),
+      id: randomUUID6(),
       type: "task",
       from: this.id,
       to: subagentId,
@@ -10735,7 +10889,7 @@ var Director = class _Director {
       })),
       usage: this.usage.snapshot()
     };
-    await fsp9.mkdir(path4.dirname(this.manifestPath), { recursive: true });
+    await fsp5.mkdir(path7.dirname(this.manifestPath), { recursive: true });
     await atomicWrite(this.manifestPath, JSON.stringify(manifest, null, 2), { mode: 384 });
     return this.manifestPath;
   }
@@ -10762,6 +10916,8 @@ var Director = class _Director {
       this.budgetFilter();
       this.budgetFilter = null;
     }
+    for (const timer of this.subagentIdleTimers.values()) clearTimeout(timer);
+    this.subagentIdleTimers.clear();
     await this.coordinator.stopAll();
     for (const b of this.subagentBridges.values()) {
       await b.stop().catch((err) => this.logShutdownError("subagent_bridge_stop", err));
@@ -10801,7 +10957,7 @@ var Director = class _Director {
    * concurrency limit applies — the task may queue before running.
    */
   async assign(task) {
-    const taskWithId = task.id ? task : { ...task, id: randomUUID() };
+    const taskWithId = task.id ? task : { ...task, id: randomUUID6() };
     if (this.workCompleteFlag) {
       const synthetic = {
         subagentId: taskWithId.subagentId ?? "unassigned",
@@ -10865,7 +11021,7 @@ var Director = class _Director {
    * rollups and persisted fleet task history.
    */
   async assignInternal(task) {
-    const taskWithId = task.id ? task : { ...task, id: randomUUID() };
+    const taskWithId = task.id ? task : { ...task, id: randomUUID6() };
     this.internalTaskIds.add(taskWithId.id);
     try {
       await this.coordinator.assign(taskWithId);
@@ -10889,11 +11045,11 @@ var Director = class _Director {
         if (cached) return cached;
         const existing = this.taskWaiters.get(id);
         if (existing) return existing.promise;
-        let resolve14;
+        let resolve12;
         const promise = new Promise((res) => {
-          resolve14 = res;
+          resolve12 = res;
         });
-        this.taskWaiters.set(id, { promise, resolve: resolve14 });
+        this.taskWaiters.set(id, { promise, resolve: resolve12 });
         return promise;
       })
     );
@@ -10922,10 +11078,10 @@ var Director = class _Director {
         pending: taskIds.filter((id) => !done.has(id))
       });
     }
-    return new Promise((resolve14) => {
+    return new Promise((resolve12) => {
       const entry = {
         ids: new Set(taskIds),
-        resolve: (r) => resolve14({
+        resolve: (r) => resolve12({
           completed: [r],
           pending: taskIds.filter((id) => id !== r.taskId)
         })
@@ -10933,7 +11089,7 @@ var Director = class _Director {
       if (opts?.timeoutMs !== void 0) {
         entry.timer = setTimeout(() => {
           this.anyWaiters.delete(entry);
-          resolve14({ completed: [], pending: [...taskIds], timedOut: true });
+          resolve12({ completed: [], pending: [...taskIds], timedOut: true });
         }, opts.timeoutMs);
       }
       this.anyWaiters.add(entry);
@@ -10984,6 +11140,7 @@ var Director = class _Director {
     await this.coordinator.stopAll();
   }
   async remove(subagentId) {
+    this.clearSubagentIdleRetirement(subagentId);
     await this.coordinator.remove(subagentId);
     const bridge = this.subagentBridges.get(subagentId);
     if (bridge) {
@@ -11004,6 +11161,34 @@ var Director = class _Director {
     this.taskOwners.delete(subagentId);
     this.taskDescriptions.delete(subagentId);
   }
+  clearSubagentIdleRetirement(subagentId) {
+    const timer = this.subagentIdleTimers.get(subagentId);
+    if (!timer) return;
+    clearTimeout(timer);
+    this.subagentIdleTimers.delete(subagentId);
+  }
+  /**
+   * Arm one lifecycle timer per worker. The callback re-checks coordinator
+   * state so a task assigned in the same turn always wins over retirement.
+   */
+  armSubagentIdleRetirement(subagentId, delayMs) {
+    this.clearSubagentIdleRetirement(subagentId);
+    if (delayMs === void 0) return;
+    const timer = setTimeout(() => {
+      this.subagentIdleTimers.delete(subagentId);
+      const entry = this.coordinator.getStatus().subagents.find((a) => a.id === subagentId);
+      if (!entry || entry.status !== "idle") return;
+      if (this.coordinator.listPendingTasks().some((task) => task.subagentId === subagentId)) {
+        this.armSubagentIdleRetirement(subagentId, this.subagentIdleTimeoutMs);
+        return;
+      }
+      void this.remove(subagentId).catch(
+        (err) => this.logShutdownError("subagent_idle_retirement", err)
+      );
+    }, delayMs);
+    if (typeof timer.unref === "function") timer.unref();
+    this.subagentIdleTimers.set(subagentId, timer);
+  }
   status() {
     const base = this.coordinator.getStatus();
     return {
@@ -11055,10 +11240,10 @@ var Director = class _Director {
    */
   async readSession(subagentId, tail) {
     if (!this.sessionsRoot) return null;
-    const filePath = path4.join(this.sessionsRoot, this.directorRunId, `${subagentId}.jsonl`);
+    const filePath = path7.join(this.sessionsRoot, this.directorRunId, `${subagentId}.jsonl`);
     let raw;
     try {
-      raw = await fsp9.readFile(filePath, "utf8");
+      raw = await fsp5.readFile(filePath, "utf8");
     } catch {
       return null;
     }
@@ -11223,6 +11408,21 @@ var Director = class _Director {
   }
 };
 
+// src/coordination/director-session.ts
+import * as path12 from "node:path";
+
+// src/storage/session-store.ts
+import { createHash as createHash4 } from "node:crypto";
+import { createReadStream } from "node:fs";
+import * as fsp9 from "node:fs/promises";
+import * as path11 from "node:path";
+import { createInterface } from "node:readline";
+
+// src/storage/file-session-writer.ts
+import { closeSync, fsyncSync, openSync, writeSync } from "node:fs";
+import * as fsp6 from "node:fs/promises";
+import * as path8 from "node:path";
+
 // src/storage/session-helpers.ts
 function userInputTitle(content) {
   const text = typeof content === "string" ? content : content.filter((b) => b.type === "text").map((b) => b.text).join(" ");
@@ -11238,7 +11438,7 @@ var FileSessionWriter = class _FileSessionWriter {
     this.meta = meta;
     this.events = events;
     this.resumed = opts.resumed ?? false;
-    this.manifestFile = opts.dir ? path4.join(opts.dir, `${path4.basename(id)}.summary.json`) : "";
+    this.manifestFile = opts.dir ? path8.join(opts.dir, `${path8.basename(id)}.summary.json`) : "";
     this.filePath = opts.filePath ?? "";
     this.secretScrubber = opts.secretScrubber;
     this.checkpointCas = opts.checkpointCas;
@@ -11778,7 +11978,7 @@ var FileSessionWriter = class _FileSessionWriter {
     let removedCount = 0;
     let targetCheckpointSeen = false;
     try {
-      fd = await fsp9.open(this.filePath, "r", 384);
+      fd = await fsp6.open(this.filePath, "r", 384);
       while (true) {
         const buf = Buffer.alloc(CHUNK_SIZE);
         const { bytesRead } = await fd.read(buf, 0, CHUNK_SIZE, fileOffset);
@@ -11833,7 +12033,7 @@ var FileSessionWriter = class _FileSessionWriter {
     await this.writeChain;
     await this.handle.close();
     const tmpPath = `${this.filePath}.rewind.tmp`;
-    const src = await fsp9.open(this.filePath, "r", 384);
+    const src = await fsp6.open(this.filePath, "r", 384);
     try {
       const statResult = await src.stat();
       const totalSize = statResult.size;
@@ -11849,7 +12049,7 @@ var FileSessionWriter = class _FileSessionWriter {
       } else {
         newlineAfterCheckpoint = totalSize;
       }
-      const writeFd = await fsp9.open(tmpPath, "w", 384);
+      const writeFd = await fsp6.open(tmpPath, "w", 384);
       try {
         let readOffset = 0;
         while (readOffset < newlineAfterCheckpoint) {
@@ -11897,11 +12097,11 @@ var FileSessionWriter = class _FileSessionWriter {
         await writeFd.close();
       }
       await src.close();
-      await fsp9.rename(tmpPath, this.filePath);
-      this.handle = await fsp9.open(this.filePath, "a", 384);
+      await fsp6.rename(tmpPath, this.filePath);
+      this.handle = await fsp6.open(this.filePath, "a", 384);
     } catch (err) {
-      await fsp9.unlink(tmpPath).catch(() => void 0);
-      this.handle = await fsp9.open(this.filePath, "a", 384).catch(() => this.handle);
+      await fsp6.unlink(tmpPath).catch(() => void 0);
+      this.handle = await fsp6.open(this.filePath, "a", 384).catch(() => this.handle);
       throw err;
     }
     await this.append({
@@ -11936,7 +12136,7 @@ var FileSessionWriter = class _FileSessionWriter {
       provider: this.meta.provider ?? "unknown"
     })}
 `;
-    await fsp9.writeFile(this.filePath, record, "utf8");
+    await fsp6.writeFile(this.filePath, record, "utf8");
     this.activePromptIndex = null;
     this.pendingFileSnapshots = [];
   }
@@ -11981,6 +12181,12 @@ var FileSessionWriter = class _FileSessionWriter {
   }
 };
 
+// src/storage/session-checkpoint-cas.ts
+import { spawn } from "node:child_process";
+import { createHash as createHash2, randomUUID as randomUUID7 } from "node:crypto";
+import * as fsp7 from "node:fs/promises";
+import * as path9 from "node:path";
+
 // src/storage/storage-concurrency.ts
 async function mapWithConcurrency(items, concurrency, mapper) {
   if (items.length === 0) return [];
@@ -12007,32 +12213,32 @@ var MAX_GIT_OUTPUT = 16 * 1024 * 1024;
 var MAX_BLOB_BYTES = 64 * 1024 * 1024;
 var MAX_CHECKPOINT_BYTES = 512 * 1024 * 1024;
 function sha256(content) {
-  return createHash("sha256").update(content).digest("hex");
+  return createHash2("sha256").update(content).digest("hex");
 }
 function isInside(root, target) {
-  const relative6 = path4.relative(root, target);
-  return relative6 === "" || !relative6.startsWith("..") && !path4.isAbsolute(relative6);
+  const relative4 = path9.relative(root, target);
+  return relative4 === "" || !relative4.startsWith("..") && !path9.isAbsolute(relative4);
 }
 function normalizeRelative(input) {
-  if (!input || path4.isAbsolute(input)) return null;
+  if (!input || path9.isAbsolute(input)) return null;
   const normalized = input.replace(/\\/g, "/").replace(/^\.\//, "");
-  const resolved = path4.posix.normalize(normalized);
+  const resolved = path9.posix.normalize(normalized);
   if (!resolved || resolved === "." || resolved === ".." || resolved.startsWith("../")) return null;
   return resolved;
 }
 function parseNulPaths(output) {
   return output.split("\0").map(normalizeRelative).filter((value) => value !== null);
 }
-function isWrongStackWorktreePath(relative6) {
-  return relative6 === ".wrongstack/worktrees" || relative6.startsWith(".wrongstack/worktrees/");
+function isWrongStackWorktreePath(relative4) {
+  return relative4 === ".wrongstack/worktrees" || relative4.startsWith(".wrongstack/worktrees/");
 }
 var SessionCheckpointCas = class {
   rootDir;
   projectRoot;
   runGit;
   constructor(opts) {
-    this.rootDir = path4.resolve(opts.rootDir);
-    this.projectRoot = path4.resolve(opts.projectRoot);
+    this.rootDir = path9.resolve(opts.rootDir);
+    this.projectRoot = path9.resolve(opts.projectRoot);
     this.runGit = opts.runGit ?? defaultRunGit;
   }
   async capture(_sessionId, _promptIndex) {
@@ -12050,60 +12256,60 @@ var SessionCheckpointCas = class {
     }
     const relativePaths = [
       .../* @__PURE__ */ new Set([...parseNulPaths(tracked.stdout), ...parseNulPaths(untracked.stdout)])
-    ].filter((relative6) => !isWrongStackWorktreePath(relative6)).sort();
+    ].filter((relative4) => !isWrongStackWorktreePath(relative4)).sort();
     const unresolved = [];
     let scheduledBytes = 0;
     const captured = await mapWithConcurrency(
       relativePaths,
       CAPTURE_CONCURRENCY,
-      async (relative6) => {
-        const absolute = path4.resolve(this.projectRoot, ...relative6.split("/"));
+      async (relative4) => {
+        const absolute = path9.resolve(this.projectRoot, ...relative4.split("/"));
         if (!isInside(this.projectRoot, absolute)) {
-          unresolved.push({ path: relative6, reason: "path escapes project root" });
+          unresolved.push({ path: relative4, reason: "path escapes project root" });
           return null;
         }
         try {
-          const stat13 = await fsp9.lstat(absolute);
+          const stat13 = await fsp7.lstat(absolute);
           if (stat13.isSymbolicLink()) {
-            const linkTarget = await fsp9.readlink(absolute);
-            const resolvedLink = path4.resolve(path4.dirname(absolute), linkTarget);
-            if (path4.isAbsolute(linkTarget) || !isInside(this.projectRoot, resolvedLink)) {
+            const linkTarget = await fsp7.readlink(absolute);
+            const resolvedLink = path9.resolve(path9.dirname(absolute), linkTarget);
+            if (path9.isAbsolute(linkTarget) || !isInside(this.projectRoot, resolvedLink)) {
               unresolved.push({
-                path: relative6,
+                path: relative4,
                 reason: "symlink target escapes project root"
               });
               return null;
             }
-            return { path: relative6, state: "symlink", linkTarget };
+            return { path: relative4, state: "symlink", linkTarget };
           }
           if (!stat13.isFile()) {
-            unresolved.push({ path: relative6, reason: "changed path is not a regular file" });
+            unresolved.push({ path: relative4, reason: "changed path is not a regular file" });
             return null;
           }
           if (stat13.size > MAX_BLOB_BYTES) {
             unresolved.push({
-              path: relative6,
+              path: relative4,
               reason: `file exceeds ${MAX_BLOB_BYTES}-byte checkpoint blob limit`
             });
             return null;
           }
           if (scheduledBytes + stat13.size > MAX_CHECKPOINT_BYTES) {
             unresolved.push({
-              path: relative6,
+              path: relative4,
               reason: `checkpoint exceeds ${MAX_CHECKPOINT_BYTES}-byte aggregate blob limit`
             });
             return null;
           }
           scheduledBytes += stat13.size;
-          const content = await fsp9.readFile(absolute);
+          const content = await fsp7.readFile(absolute);
           const blobHash = sha256(content);
           await this.putBlob(blobHash, content);
-          return { path: relative6, state: "file", blobHash, mode: stat13.mode & 511 };
+          return { path: relative4, state: "file", blobHash, mode: stat13.mode & 511 };
         } catch (err) {
           if (err.code === "ENOENT") {
-            return { path: relative6, state: "absent" };
+            return { path: relative4, state: "absent" };
           }
-          unresolved.push({ path: relative6, reason: toErrorMessage(err) });
+          unresolved.push({ path: relative4, reason: toErrorMessage(err) });
           return null;
         }
       }
@@ -12129,11 +12335,11 @@ var SessionCheckpointCas = class {
     };
   }
   async materialize(checkpoint, targetRoot) {
-    const target = path4.resolve(targetRoot);
+    const target = path9.resolve(targetRoot);
     if (target === this.projectRoot) {
       throw new Error("Refusing to materialize a workspace checkpoint over the parent project root");
     }
-    const targetStat = await fsp9.stat(target);
+    const targetStat = await fsp7.stat(target);
     if (!targetStat.isDirectory()) throw new Error(`Checkpoint target is not a directory: ${target}`);
     const manifest = await this.loadManifest(checkpoint.manifestHash);
     if (manifest.baseHead !== checkpoint.baseHead.toLowerCase() || manifest.coverage !== checkpoint.coverage || manifest.entries.length !== checkpoint.entryCount || manifest.unresolved.length !== checkpoint.unresolvedCount) {
@@ -12160,7 +12366,7 @@ var SessionCheckpointCas = class {
     if (targetStatus.stdout.length > 0) {
       throw new Error("Checkpoint target must be a clean checkout before materialization");
     }
-    const realTarget = await fsp9.realpath(target);
+    const realTarget = await fsp7.realpath(target);
     const writtenFiles = [];
     const deletedFiles = [];
     const errors = [];
@@ -12169,10 +12375,10 @@ var SessionCheckpointCas = class {
       try {
         const output = await this.safeOutputPath(target, realTarget, entry.path);
         if (entry.state === "symlink") {
-          if (path4.isAbsolute(entry.linkTarget)) {
+          if (path9.isAbsolute(entry.linkTarget)) {
             throw new Error("absolute symlink target refused");
           }
-          const resolvedLink = path4.resolve(path4.dirname(output), entry.linkTarget);
+          const resolvedLink = path9.resolve(path9.dirname(output), entry.linkTarget);
           if (!isInside(target, resolvedLink)) throw new Error("symlink target escapes checkpoint root");
         }
         prepared.push({
@@ -12190,24 +12396,24 @@ var SessionCheckpointCas = class {
     for (const { entry, output, content } of prepared) {
       try {
         if (entry.state === "absent") {
-          await fsp9.unlink(output).catch((err) => {
+          await fsp7.unlink(output).catch((err) => {
             if (err.code !== "ENOENT") throw err;
           });
           deletedFiles.push(entry.path);
           continue;
         }
         if (entry.state === "symlink") {
-          await fsp9.unlink(output).catch((err) => {
+          await fsp7.unlink(output).catch((err) => {
             if (err.code !== "ENOENT") throw err;
           });
-          await fsp9.mkdir(path4.dirname(output), { recursive: true });
-          await fsp9.symlink(entry.linkTarget, output);
+          await fsp7.mkdir(path9.dirname(output), { recursive: true });
+          await fsp7.symlink(entry.linkTarget, output);
           writtenFiles.push(entry.path);
           continue;
         }
         if (!content) throw new Error("CAS blob was not prepared");
         await atomicWrite(output, content, { mode: entry.mode });
-        await fsp9.chmod(output, entry.mode).catch(() => void 0);
+        await fsp7.chmod(output, entry.mode).catch(() => void 0);
         writtenFiles.push(entry.path);
       } catch (err) {
         errors.push(`${entry.path}: ${toErrorMessage(err)}`);
@@ -12217,48 +12423,48 @@ var SessionCheckpointCas = class {
   }
   objectPath(hash) {
     if (!HASH_RE.test(hash)) throw new Error(`Invalid CAS object hash: ${hash}`);
-    return path4.join(this.rootDir, "objects", hash.slice(0, 2), hash.slice(2));
+    return path9.join(this.rootDir, "objects", hash.slice(0, 2), hash.slice(2));
   }
   manifestPath(hash) {
     if (!HASH_RE.test(hash)) throw new Error(`Invalid checkpoint manifest hash: ${hash}`);
-    return path4.join(this.rootDir, "manifests", `${hash}.json`);
+    return path9.join(this.rootDir, "manifests", `${hash}.json`);
   }
   async putBlob(hash, content) {
     const target = this.objectPath(hash);
-    await fsp9.mkdir(path4.dirname(target), { recursive: true });
+    await fsp7.mkdir(path9.dirname(target), { recursive: true });
     try {
-      const existing = await fsp9.readFile(target);
+      const existing = await fsp7.readFile(target);
       if (sha256(existing) !== hash) throw new Error(`Corrupt CAS object collision: ${hash}`);
       return;
     } catch (err) {
       if (err.code !== "ENOENT") throw err;
     }
-    const temp = path4.join(
-      path4.dirname(target),
-      `.${path4.basename(target)}.${process.pid}.${randomUUID()}.tmp`
+    const temp = path9.join(
+      path9.dirname(target),
+      `.${path9.basename(target)}.${process.pid}.${randomUUID7()}.tmp`
     );
     let handle;
     try {
-      handle = await fsp9.open(temp, "wx", 384);
+      handle = await fsp7.open(temp, "wx", 384);
       await handle.writeFile(content);
       await handle.sync();
       await handle.close();
       handle = void 0;
       try {
-        await fsp9.link(temp, target);
+        await fsp7.link(temp, target);
       } catch (err) {
         if (err.code !== "EEXIST") throw err;
-        const existing = await fsp9.readFile(target);
+        const existing = await fsp7.readFile(target);
         if (sha256(existing) !== hash) throw new Error(`Corrupt CAS object collision: ${hash}`);
       }
     } finally {
       await handle?.close().catch(() => void 0);
-      await fsp9.unlink(temp).catch(() => void 0);
+      await fsp7.unlink(temp).catch(() => void 0);
     }
   }
   async putManifest(hash, encoded) {
     const target = this.manifestPath(hash);
-    const existing = await fsp9.readFile(target).catch(() => null);
+    const existing = await fsp7.readFile(target).catch(() => null);
     if (existing) {
       if (sha256(existing) !== hash) throw new Error(`Corrupt checkpoint manifest collision: ${hash}`);
       return;
@@ -12266,12 +12472,12 @@ var SessionCheckpointCas = class {
     await atomicWrite(target, encoded, { mode: 384 });
   }
   async readBlob(hash) {
-    const content = await fsp9.readFile(this.objectPath(hash));
+    const content = await fsp7.readFile(this.objectPath(hash));
     if (sha256(content) !== hash) throw new Error(`CAS blob integrity check failed: ${hash}`);
     return content;
   }
   async loadManifest(hash) {
-    const raw = await fsp9.readFile(this.manifestPath(hash));
+    const raw = await fsp7.readFile(this.manifestPath(hash));
     if (sha256(raw) !== hash) throw new Error(`Checkpoint manifest integrity check failed: ${hash}`);
     const parsed = JSON.parse(raw.toString("utf8"));
     if (parsed.version !== 1 || typeof parsed.baseHead !== "string" || parsed.coverage !== "git-head-plus-dirty" || !Array.isArray(parsed.entries) || !Array.isArray(parsed.unresolved)) {
@@ -12293,20 +12499,20 @@ var SessionCheckpointCas = class {
     }
     return parsed;
   }
-  async safeOutputPath(target, realTarget, relative6) {
-    const normalized = normalizeRelative(relative6);
+  async safeOutputPath(target, realTarget, relative4) {
+    const normalized = normalizeRelative(relative4);
     if (!normalized) throw new Error("invalid relative path");
-    const output = path4.resolve(target, ...normalized.split("/"));
+    const output = path9.resolve(target, ...normalized.split("/"));
     if (!isInside(target, output)) throw new Error("path escapes checkpoint target");
     let probe = output;
     for (; ; ) {
       try {
-        const real = await fsp9.realpath(probe);
+        const real = await fsp7.realpath(probe);
         if (!isInside(realTarget, real)) throw new Error("path resolves through a symlink outside checkpoint target");
         return output;
       } catch (err) {
         if (err.code !== "ENOENT") throw err;
-        const parent = path4.dirname(probe);
+        const parent = path9.dirname(probe);
         if (parent === probe) throw err;
         probe = parent;
       }
@@ -12314,7 +12520,7 @@ var SessionCheckpointCas = class {
   }
 };
 function defaultRunGit(args, cwd) {
-  return new Promise((resolve14) => {
+  return new Promise((resolve12) => {
     const stdoutChunks = [];
     const stderrChunks = [];
     let stdoutBytes = 0;
@@ -12357,16 +12563,21 @@ function defaultRunGit(args, cwd) {
       stdoutTruncated,
       stderrTruncated
     });
-    child.on("error", (err) => resolve14(result(1, err.message)));
-    child.on("close", (code) => resolve14(result(code ?? 1)));
+    child.on("error", (err) => resolve12(result(1, err.message)));
+    child.on("close", (code) => resolve12(result(code ?? 1)));
   });
 }
+
+// src/storage/session-resume-validation.ts
+import { createHash as createHash3 } from "node:crypto";
+import * as fsp8 from "node:fs/promises";
+import * as path10 from "node:path";
 var MAX_REVALIDATE_BYTES = 5 * 1024 * 1024;
 var VALIDATION_CONCURRENCY = 8;
 var NOTICE_PATH_LIMIT = 20;
 function isInside2(root, target) {
-  const relative6 = path4.relative(root, target);
-  return relative6 === "" || !relative6.startsWith("..") && !path4.isAbsolute(relative6);
+  const relative4 = path10.relative(root, target);
+  return relative4 === "" || !relative4.startsWith("..") && !path10.isAbsolute(relative4);
 }
 function errno(err) {
   return err && typeof err === "object" && "code" in err ? String(err.code) : void 0;
@@ -12377,7 +12588,7 @@ function latestObservations(events, projectRoot) {
     if (event.type !== "file_observation" || typeof event.path !== "string" || event.path.length === 0 || typeof event.hash !== "string" || !/^[a-f\d]{64}$/i.test(event.hash)) {
       continue;
     }
-    const normalized = path4.resolve(projectRoot, event.path);
+    const normalized = path10.resolve(projectRoot, event.path);
     latest.set(normalized, {
       path: normalized,
       hash: event.hash.toLowerCase(),
@@ -12401,7 +12612,7 @@ async function validateOne(observation, lexicalRoot, realRoot) {
   }
   let realFile;
   try {
-    realFile = await fsp9.realpath(observation.path);
+    realFile = await fsp8.realpath(observation.path);
   } catch (err) {
     if (errno(err) === "ENOENT") return { ...base, status: "deleted" };
     return { ...base, status: "unreadable", detail: toErrorMessage(err) };
@@ -12414,7 +12625,7 @@ async function validateOne(observation, lexicalRoot, realRoot) {
     };
   }
   try {
-    const stat13 = await fsp9.stat(realFile);
+    const stat13 = await fsp8.stat(realFile);
     if (!stat13.isFile()) {
       return { ...base, status: "unreadable", detail: "Path is no longer a regular file." };
     }
@@ -12425,8 +12636,8 @@ async function validateOne(observation, lexicalRoot, realRoot) {
         detail: `File now exceeds the ${MAX_REVALIDATE_BYTES}-byte validation limit.`
       };
     }
-    const content = await fsp9.readFile(realFile, "utf8");
-    const actualHash = createHash("sha256").update(content, "utf8").digest("hex");
+    const content = await fsp8.readFile(realFile, "utf8");
+    const actualHash = createHash3("sha256").update(content, "utf8").digest("hex");
     if (actualHash === observation.hash) return null;
     return { ...base, status: "modified", actualHash };
   } catch (err) {
@@ -12435,8 +12646,8 @@ async function validateOne(observation, lexicalRoot, realRoot) {
   }
 }
 async function validateResumeFileObservations(events, projectRoot) {
-  const lexicalRoot = path4.resolve(projectRoot);
-  const realRoot = await fsp9.realpath(lexicalRoot).catch(() => lexicalRoot);
+  const lexicalRoot = path10.resolve(projectRoot);
+  const realRoot = await fsp8.realpath(lexicalRoot).catch(() => lexicalRoot);
   const observations = latestObservations(events, lexicalRoot);
   const results = await mapWithConcurrency(
     observations,
@@ -12451,10 +12662,10 @@ async function validateResumeFileObservations(events, projectRoot) {
 }
 function formatResumeValidationNotice(validation, projectRoot) {
   if (validation.staleFiles.length === 0) return null;
-  const root = path4.resolve(projectRoot);
+  const root = path10.resolve(projectRoot);
   const shown = validation.staleFiles.slice(0, NOTICE_PATH_LIMIT).map((entry) => {
-    const relative6 = path4.relative(root, entry.path);
-    const display = isInside2(root, entry.path) ? relative6 || "." : entry.path;
+    const relative4 = path10.relative(root, entry.path);
+    const display = isInside2(root, entry.path) ? relative4 || "." : entry.path;
     return `- ${JSON.stringify(display)} [${entry.status}]`;
   });
   const omitted = validation.staleFiles.length - shown.length;
@@ -12575,9 +12786,9 @@ var DefaultSessionStore = class _DefaultSessionStore {
   static LIST_SCAN_CONCURRENCY = 32;
   constructor(opts) {
     this.dir = opts.dir;
-    this.projectRoot = opts.projectRoot ? path4.resolve(opts.projectRoot) : void 0;
+    this.projectRoot = opts.projectRoot ? path11.resolve(opts.projectRoot) : void 0;
     this.checkpointCas = this.projectRoot ? new SessionCheckpointCas({
-      rootDir: path4.join(this.dir, "_cas"),
+      rootDir: path11.join(this.dir, "_cas"),
       projectRoot: this.projectRoot
     }) : void 0;
     this.events = opts.events;
@@ -12631,17 +12842,17 @@ var DefaultSessionStore = class _DefaultSessionStore {
   }
   /** Absolute path to the session index file. */
   get indexFile() {
-    return path4.join(this.dir, "_index.jsonl");
+    return path11.join(this.dir, "_index.jsonl");
   }
   /** Join session ID to its absolute path within the store directory. */
   sessionPath(id, ext) {
     return sessionScopedPath(this.dir, id, ext);
   }
   shardManifestPath(shardKey) {
-    return shardKey ? path4.join(this.dir, shardKey, "_manifest.json") : path4.join(this.dir, "_manifest.json");
+    return shardKey ? path11.join(this.dir, shardKey, "_manifest.json") : path11.join(this.dir, "_manifest.json");
   }
   shardKeyForSessionId(id) {
-    const dirName = path4.dirname(id);
+    const dirName = path11.dirname(id);
     return dirName === "." ? "" : dirName;
   }
   invalidateShardManifestBySessionId(id) {
@@ -12653,7 +12864,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
    * subdirectory so sessions group naturally by day.
    */
   async ensureShardDir(id) {
-    const dirPath = path4.dirname(sessionScopedPath(this.dir, id, ""));
+    const dirPath = path11.dirname(sessionScopedPath(this.dir, id, ""));
     await ensureDir(dirPath);
     return dirPath;
   }
@@ -12715,7 +12926,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
     }
     const parentPrefix = parent.events.slice(0, boundary + 1);
     const workspaceCheckpoint = targetCheckpoint?.workspaceCheckpoint;
-    const checkpointHash = createHash("sha256").update(parentPrefix.map((event) => JSON.stringify(event)).join("\n") + "\n", "utf8").digest("hex");
+    const checkpointHash = createHash4("sha256").update(parentPrefix.map((event) => JSON.stringify(event)).join("\n") + "\n", "utf8").digest("hex");
     const inherited = parentPrefix.filter(inheritsIntoFork);
     const writer = await this.create({
       id: "",
@@ -12810,7 +13021,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
           // Shard directory (sessions/<date>/) — must match create() so the
           // .summary.json sidecar lands next to the JSONL instead of the
           // sessions root (where summaryFor() would never find it).
-          dir: path4.dirname(file),
+          dir: path11.dirname(file),
           filePath: file,
           secretScrubber: this.secretScrubber,
           checkpointCas: this.checkpointCas,
@@ -13365,7 +13576,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
     return entry;
   }
   async collectSessionFilesInShard(shardKey) {
-    const dir = shardKey ? path4.join(this.dir, shardKey) : this.dir;
+    const dir = shardKey ? path11.join(this.dir, shardKey) : this.dir;
     const entries = await this.collectSessionFiles(dir, shardKey);
     return shardKey ? entries.filter((entry) => entry.id.startsWith(`${shardKey}/`)) : entries.filter((entry) => !entry.id.includes("/"));
   }
@@ -13388,13 +13599,13 @@ var DefaultSessionStore = class _DefaultSessionStore {
         if (entry.name === "_index.jsonl") continue;
         const base = entry.name.replace(/\.jsonl$/, "");
         const id = prefix ? `${prefix}/${base}` : base;
-        files.push({ id, filePath: path4.join(dir, entry.name) });
+        files.push({ id, filePath: path11.join(dir, entry.name) });
       }
     }
     const childFileArrays = await Promise.all(
       dirEntries.map((entry) => {
         const childPrefix = depth === 0 ? entry.name : `${prefix}/${entry.name}`;
-        return this.collectSessionFiles(path4.join(dir, entry.name), childPrefix, depth + 1);
+        return this.collectSessionFiles(path11.join(dir, entry.name), childPrefix, depth + 1);
       })
     );
     return [...childFileArrays.flat(), ...files];
@@ -13427,7 +13638,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
     const childIdArrays = await Promise.all(
       dirEntries.map((entry) => {
         const childPrefix = depth === 0 ? entry.name : `${prefix}/${entry.name}`;
-        return this.collectSessionIds(path4.join(dir, entry.name), childPrefix, depth + 1);
+        return this.collectSessionIds(path11.join(dir, entry.name), childPrefix, depth + 1);
       })
     );
     return [...childIdArrays.flat(), ...fileIds];
@@ -13544,9 +13755,9 @@ var DefaultSessionStore = class _DefaultSessionStore {
   async deleteSession(id) {
     const jsonlPath = this.sessionPath(id, ".jsonl");
     const summaryPath = this.sessionPath(id, ".summary.json");
-    const shardDir = path4.dirname(jsonlPath);
-    const base = path4.basename(id);
-    const sessDir = path4.join(shardDir, base);
+    const shardDir = path11.dirname(jsonlPath);
+    const base = path11.basename(id);
+    const sessDir = path11.join(shardDir, base);
     const deletions = [
       fsp9.unlink(jsonlPath),
       fsp9.unlink(summaryPath),
@@ -13587,7 +13798,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
    */
   async readActiveSessionId() {
     try {
-      const raw = await fsp9.readFile(path4.join(this.dir, "active.json"), "utf8");
+      const raw = await fsp9.readFile(path11.join(this.dir, "active.json"), "utf8");
       const active = JSON.parse(raw);
       return active.sessionId ?? null;
     } catch {
@@ -13650,7 +13861,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
     const activeSessionId = await this.readActiveSessionId();
     const isPrunableJsonl = (name) => name.endsWith(".jsonl") && name !== "_index.jsonl" && name !== "_mailbox.jsonl" && !name.endsWith(".replay.jsonl") && !name.endsWith(".audit.jsonl");
     const pruneFile = async (dir, name, prefix) => {
-      const jsonlPath = path4.join(dir, name);
+      const jsonlPath = path11.join(dir, name);
       try {
         const stat13 = await fsp9.stat(jsonlPath);
         if (stat13.mtimeMs >= cutoff) return;
@@ -13670,7 +13881,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
         continue;
       }
       if (!entry.isDirectory()) continue;
-      const dateDir = path4.join(this.dir, entry.name);
+      const dateDir = path11.join(this.dir, entry.name);
       const files = await fsp9.readdir(dateDir, { withFileTypes: true }).catch(() => []);
       for (const file of files) {
         if (!file.isFile() || !isPrunableJsonl(file.name)) continue;
@@ -13682,7 +13893,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
     }
     for (const entry of entries) {
       if (!entry.isDirectory()) continue;
-      const dateDir = path4.join(this.dir, entry.name);
+      const dateDir = path11.join(this.dir, entry.name);
       try {
         const remaining = await fsp9.readdir(dateDir);
         if (remaining.length === 0) {
@@ -13813,9 +14024,9 @@ function makeDirectorSessionFactory(opts) {
   let dir;
   if (opts.store) {
     store = opts.store;
-    dir = opts.sessionsRoot ? path4.join(opts.sessionsRoot, runId) : "(caller-managed)";
+    dir = opts.sessionsRoot ? path12.join(opts.sessionsRoot, runId) : "(caller-managed)";
   } else if (opts.sessionsRoot) {
-    dir = path4.join(opts.sessionsRoot, runId);
+    dir = path12.join(opts.sessionsRoot, runId);
     store = new DefaultSessionStore({ dir });
   } else {
     throw new Error("makeDirectorSessionFactory requires either `store` or `sessionsRoot`");
@@ -14337,6 +14548,9 @@ var AutonomousRunner = class {
     this.stopped = true;
   }
 };
+
+// src/storage/goal-store.ts
+import * as fsp10 from "node:fs/promises";
 var MAX_JOURNAL_ENTRIES = 500;
 function goalFilePath(projectRoot) {
   return resolveWstackPaths({ projectRoot }).projectGoal;
@@ -14345,7 +14559,7 @@ async function loadGoal(filePath, events) {
   const t0 = Date.now();
   let raw;
   try {
-    raw = await fsp9.readFile(filePath, "utf8");
+    raw = await fsp10.readFile(filePath, "utf8");
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT") {
@@ -15147,6 +15361,12 @@ var DESIGN_STACKS = ["web", "react-native", "flutter", "swiftui", "compose"];
 function isDesignStack(v) {
   return DESIGN_STACKS.includes(v);
 }
+
+// src/execution/design-kit-loader.ts
+import { existsSync } from "node:fs";
+import * as fs2 from "node:fs/promises";
+import * as path13 from "node:path";
+import { fileURLToPath as fileURLToPath3 } from "node:url";
 var KIT_FILE = "KIT.md";
 var TOKENS_FILE = "tokens.json";
 var FOUNDATIONS_ID = "_foundations";
@@ -15253,15 +15473,15 @@ var DefaultDesignKitLoader = class {
     for (const { dir, source } of this.dirs) {
       let entries;
       try {
-        entries = await fsp9.readdir(dir, { withFileTypes: true });
+        entries = await fs2.readdir(dir, { withFileTypes: true });
       } catch {
         continue;
       }
       for (const e of entries) {
         if (!e.isDirectory()) continue;
-        const kitFile = path4.join(dir, e.name, KIT_FILE);
+        const kitFile = path13.join(dir, e.name, KIT_FILE);
         try {
-          const raw = await fsp9.readFile(kitFile, "utf8");
+          const raw = await fs2.readFile(kitFile, "utf8");
           const fm = parseKitFrontmatter(raw);
           const id = fm.id ?? e.name;
           if (!fm.name) continue;
@@ -15322,7 +15542,7 @@ var DefaultDesignKitLoader = class {
     if (cached !== void 0) return cached;
     const m = await this.find(id);
     if (!m) throw new Error(`Design kit "${id}" not found`);
-    const raw = await fsp9.readFile(m.path, "utf8");
+    const raw = await fs2.readFile(m.path, "utf8");
     const body = narrowStackSections(stripFrontmatter(raw), stack);
     this.bodyCache.set(key, body);
     return body;
@@ -15333,9 +15553,9 @@ var DefaultDesignKitLoader = class {
     const m = await this.find(id);
     let tokens;
     if (m) {
-      const tokensPath = path4.join(path4.dirname(m.path), TOKENS_FILE);
+      const tokensPath = path13.join(path13.dirname(m.path), TOKENS_FILE);
       try {
-        const raw = await fsp9.readFile(tokensPath, "utf8");
+        const raw = await fs2.readFile(tokensPath, "utf8");
         const parsed = JSON.parse(raw);
         tokens = parsed;
       } catch {
@@ -15360,12 +15580,12 @@ var DefaultDesignKitLoader = class {
 };
 function resolveBundledDesignKitsDir() {
   try {
-    const here = path4.dirname(fileURLToPath(import.meta.url));
+    const here = path13.dirname(fileURLToPath3(import.meta.url));
     const candidates = [
-      path4.join(here, "design-kits"),
-      path4.join(here, "..", "design-kits"),
-      path4.join(here, "..", "..", "design-kits"),
-      path4.join(here, "..", "..", "..", "design-kits")
+      path13.join(here, "design-kits"),
+      path13.join(here, "..", "design-kits"),
+      path13.join(here, "..", "..", "design-kits"),
+      path13.join(here, "..", "..", "..", "design-kits")
     ];
     for (const c of candidates) {
       if (existsSync(c)) return c;
@@ -15390,9 +15610,14 @@ function getDesignKitLoader(projectRoot) {
 function _resetDesignKitLoaderMemo() {
   loaderMemo.clear();
 }
+
+// src/execution/design-project-store.ts
+import { existsSync as existsSync2 } from "node:fs";
+import * as fs3 from "node:fs/promises";
+import * as path14 from "node:path";
 var DESIGN_DIR = ".design";
 function designProjectDir(projectRoot) {
-  return path4.join(projectRoot, DESIGN_DIR);
+  return path14.join(projectRoot, DESIGN_DIR);
 }
 var RULE_FILES = ["rules.md", "RULES.md", "design.md"];
 var rulesCache = /* @__PURE__ */ new Map();
@@ -15401,7 +15626,7 @@ async function loadProjectDesignRules(projectRoot) {
   let rules;
   for (const name of RULE_FILES) {
     try {
-      const txt = await fsp9.readFile(path4.join(designProjectDir(projectRoot), name), "utf8");
+      const txt = await fs3.readFile(path14.join(designProjectDir(projectRoot), name), "utf8");
       if (txt.trim()) {
         rules = txt.trim();
         break;
@@ -15422,7 +15647,7 @@ function parseOverrides(value) {
 }
 async function loadActiveKit(projectRoot) {
   try {
-    const raw = await fsp9.readFile(path4.join(designProjectDir(projectRoot), "active.json"), "utf8");
+    const raw = await fs3.readFile(path14.join(designProjectDir(projectRoot), "active.json"), "utf8");
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed.kit === "string") {
       return {
@@ -15455,11 +15680,11 @@ function applyTokenOverrides(tokens, overrides) {
 }
 async function ensureDesignDir(projectRoot) {
   const dir = designProjectDir(projectRoot);
-  await fsp9.mkdir(dir, { recursive: true });
-  const gi = path4.join(dir, ".gitignore");
-  if (!existsSync(gi)) {
+  await fs3.mkdir(dir, { recursive: true });
+  const gi = path14.join(dir, ".gitignore");
+  if (!existsSync2(gi)) {
     try {
-      await fsp9.writeFile(gi, "*\n");
+      await fs3.writeFile(gi, "*\n");
     } catch {
     }
   }
@@ -15470,11 +15695,11 @@ async function recordKitChoice(projectRoot, kit, stack, source, isoTime, overrid
     const dir = await ensureDesignDir(projectRoot);
     const record = { kit, stack: stack ?? null };
     if (overrides && Object.keys(overrides).length > 0) record.overrides = overrides;
-    await fsp9.writeFile(path4.join(dir, "active.json"), `${JSON.stringify(record, null, 2)}
+    await fs3.writeFile(path14.join(dir, "active.json"), `${JSON.stringify(record, null, 2)}
 `);
     const line = `- ${isoTime} \xB7 kit=${kit}${stack ? ` stack=${stack}` : ""} \xB7 via=${source}
 `;
-    await fsp9.appendFile(path4.join(dir, "decisions.md"), line);
+    await fs3.appendFile(path14.join(dir, "decisions.md"), line);
   } catch {
   }
 }
@@ -15490,11 +15715,11 @@ async function recordOverrides(projectRoot, patch, isoTime) {
     const dir = await ensureDesignDir(projectRoot);
     const record = { kit: active.kit, stack: active.stack ?? null };
     if (Object.keys(merged).length > 0) record.overrides = merged;
-    await fsp9.writeFile(path4.join(dir, "active.json"), `${JSON.stringify(record, null, 2)}
+    await fs3.writeFile(path14.join(dir, "active.json"), `${JSON.stringify(record, null, 2)}
 `);
     const keys = Object.keys(patch).join(",");
-    await fsp9.appendFile(
-      path4.join(dir, "decisions.md"),
+    await fs3.appendFile(
+      path14.join(dir, "decisions.md"),
       `- ${isoTime} \xB7 kit=${active.kit} \xB7 override=${keys} \xB7 via=set
 `
     );
@@ -15504,7 +15729,7 @@ async function recordOverrides(projectRoot, patch, isoTime) {
 }
 async function clearPersistedActiveKit(projectRoot) {
   try {
-    await fsp9.rm(path4.join(designProjectDir(projectRoot), "active.json"), { force: true });
+    await fs3.rm(path14.join(designProjectDir(projectRoot), "active.json"), { force: true });
   } catch {
   }
 }
@@ -15620,12 +15845,12 @@ function verifyFiles(tokens, files) {
   const violations = [];
   let onPalette = 0;
   let offPalette = 0;
-  for (const { path: path31, text } of files) {
+  for (const { path: path29, text } of files) {
     const lines = text.split("\n");
     lines.forEach((lineText, i) => {
       const lineNo = i + 1;
       const flag = (snippet, reason) => {
-        violations.push({ file: path31, line: lineNo, snippet: snippet.slice(0, 80), reason });
+        violations.push({ file: path29, line: lineNo, snippet: snippet.slice(0, 80), reason });
       };
       for (const re of [HEX_RE, FUNC_COLOR_RE]) {
         re.lastIndex = 0;
@@ -15677,8 +15902,8 @@ var SKIP_DIR = /* @__PURE__ */ new Set([
   ".design"
 ]);
 async function walkUiFiles(root, max = 200) {
-  const { default: fs15 } = await import('fs/promises');
-  const { default: nodePath } = await import('path');
+  const { default: fs15 } = await import("node:fs/promises");
+  const { default: nodePath } = await import("node:path");
   const found = [];
   async function rec(dir, depth) {
     if (found.length >= max || depth > 8) return;
@@ -15702,8 +15927,8 @@ async function walkUiFiles(root, max = 200) {
   return found;
 }
 async function runDesignVerify(projectRoot, tokens, explicitFiles) {
-  const { default: fs15 } = await import('fs/promises');
-  const { default: nodePath } = await import('path');
+  const { default: fs15 } = await import("node:fs/promises");
+  const { default: nodePath } = await import("node:path");
   const abs = explicitFiles && explicitFiles.length > 0 ? explicitFiles.map((f) => nodePath.isAbsolute(f) ? f : nodePath.join(projectRoot, f)) : await walkUiFiles(projectRoot);
   const files = [];
   for (const a of abs) {
@@ -15839,8 +16064,8 @@ function makeDesignVerifyToolCallMiddleware() {
         const p = typeof input?.path === "string" ? input.path : "";
         if (!p || !detectFrontendFile(p)) return out;
         const ctx = out.ctx;
-        const { default: fs15 } = await import('fs/promises');
-        const { default: nodePath } = await import('path');
+        const { default: fs15 } = await import("node:fs/promises");
+        const { default: nodePath } = await import("node:path");
         const abs = nodePath.isAbsolute(p) ? p : nodePath.join(ctx.projectRoot, p);
         const text = await fs15.readFile(abs, "utf8").catch(() => "");
         if (!text) return out;
@@ -16144,14 +16369,75 @@ function buildRecoveryStrategies(opts) {
         if (err.kind !== "overloaded" && err.kind !== "server" && err.kind !== "stream_hang") {
           return null;
         }
-        return null;
+        const registry = opts?.modelsRegistry;
+        if (!registry) return null;
+        try {
+          const providerId = ctx.provider?.id;
+          if (!providerId) return null;
+          const provider = await registry.getProvider(providerId);
+          if (!provider) return null;
+          const currentModel = await registry.getModel(providerId, ctx.model);
+          if (!currentModel) return null;
+          const visibleModels = opts?.getConfig?.().providers?.[providerId]?.models;
+          const candidates = provider.models.filter((m) => {
+            if (visibleModels !== void 0 && !visibleModels.includes(m.id)) return false;
+            const modelCost = m.cost?.input ?? Number.POSITIVE_INFINITY;
+            const currentCost = currentModel.cost?.input ?? Number.POSITIVE_INFINITY;
+            if (modelCost >= currentCost) return false;
+            if (currentModel.capabilities.tools && !m.tool_call) return false;
+            if (currentModel.capabilities.vision && !m.modalities?.input?.includes("image"))
+              return false;
+            return true;
+          });
+          if (candidates.length === 0) return null;
+          const fallback = candidates.reduce(
+            (prev, curr) => (curr.cost?.input ?? Number.POSITIVE_INFINITY) < (prev.cost?.input ?? Number.POSITIVE_INFINITY) ? curr : prev
+          );
+          return {
+            action: "retry",
+            reason: "model_downgrade",
+            model: fallback.id
+          };
+        } catch {
+          return null;
+        }
       }
     },
     {
       label: "content_filter_reroute",
       async attempt(err, ctx) {
         if (!(err instanceof ProviderError) || err.kind !== "content_filter") return null;
-        return null;
+        const registry = opts?.modelsRegistry;
+        if (!registry) return null;
+        try {
+          const providerId = ctx.provider?.id;
+          if (!providerId) return null;
+          const provider = await registry.getProvider(providerId);
+          if (!provider) return null;
+          const currentModel = await registry.getModel(providerId, ctx.model);
+          if (!currentModel) return null;
+          const visibleModels = opts?.getConfig?.().providers?.[providerId]?.models;
+          const candidates = provider.models.filter((m) => {
+            if (m.id === ctx.model) return false;
+            if (visibleModels !== void 0 && !visibleModels.includes(m.id)) return false;
+            if (currentModel.capabilities.tools && !m.tool_call) return false;
+            if (currentModel.capabilities.vision && !m.modalities?.input?.includes("image"))
+              return false;
+            return true;
+          });
+          if (candidates.length === 0) return null;
+          const currentCost = currentModel.cost?.input;
+          const distance = (m) => currentCost === void 0 || m.cost?.input === void 0 ? Number.POSITIVE_INFINITY : Math.abs(m.cost.input - currentCost);
+          const reroute = candidates.reduce((prev, curr) => {
+            const delta = distance(curr) - distance(prev);
+            if (delta < 0) return curr;
+            if (delta === 0 && curr.id < prev.id) return curr;
+            return prev;
+          });
+          return { action: "retry", reason: "content_filter_reroute", model: reroute.id };
+        } catch {
+          return null;
+        }
       }
     }
   ];
@@ -16202,6 +16488,10 @@ var DefaultErrorHandler = class {
   }
 };
 
+// src/execution/eternal-autonomy.ts
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+
 // src/execution/autonomy-brain.ts
 function formatDecisionSummary(decision, request) {
   const question = request.question.length > 80 ? request.question.slice(0, 77) + "\u2026" : request.question;
@@ -16694,8 +16984,8 @@ ${recentJournal}` : "No prior iterations.",
       "   \u2022 When this iteration's Task is finished (real artifact / passing",
       "     test / applied diff / clean output), emit `[done]` on its own line.",
       "   \u2022 Do not stop on the first obstacle \u2014 try at least 3 distinct",
-      "     approaches before giving up. YOLO is active for normal project work;",
-      "     destructive-gated confirmations still belong to the permission flow.",
+      "     approaches before giving up. YOLO is active unless an explicit",
+      "     deny rule blocks the call.",
       "",
       "2. UPDATE TODO STATE (when Source is `todo`)",
       "   \u2022 Mark this todo `in_progress` via the todos tool before tool work.",
@@ -16802,7 +17092,7 @@ ${recentJournal}` : "No prior iterations.",
       await saveGoal(this.goalPath, abandoned, this.opts.events);
     }
     try {
-      const { unlink: unlink12 } = await import('fs/promises');
+      const { unlink: unlink12 } = await import("node:fs/promises");
       await unlink12(this.goalPath);
     } catch {
     }
@@ -17041,6 +17331,9 @@ var IntelligentCompactor = class {
     return [{ type: "text", text: lines.join("\n") }];
   }
 };
+
+// src/execution/parallel-eternal-engine.ts
+import { randomUUID as randomUUID8 } from "node:crypto";
 var GOAL_COMPLETE_MARKER2 = /^\s*\[goal[_\s-]?complete\]\s*$/im;
 var ParallelEternalEngine = class {
   constructor(opts) {
@@ -17099,7 +17392,7 @@ var ParallelEternalEngine = class {
     this.state = "running";
     await this.persistState("running");
     const config = {
-      coordinatorId: `parallel-${randomUUID().slice(0, 8)}`,
+      coordinatorId: `parallel-${randomUUID8().slice(0, 8)}`,
       maxConcurrent: this.slots,
       doneCondition: { type: "all_tasks_done" }
     };
@@ -17153,7 +17446,7 @@ var ParallelEternalEngine = class {
     }
     if (!this.coordinator) {
       const config = {
-        coordinatorId: `parallel-${randomUUID().slice(0, 8)}`,
+        coordinatorId: `parallel-${randomUUID8().slice(0, 8)}`,
         maxConcurrent: this.slots,
         doneCondition: { type: "all_tasks_done" }
       };
@@ -17227,8 +17520,7 @@ ${recentJournal}` : "No prior iterations.",
       "\u2500\u2500 EXECUTION PROTOCOL \u2500\u2500",
       "\u2022 Execute the assigned task end-to-end using multiple tool calls.",
       "\u2022 Emit `[done]` on its own line when the task is complete.",
-      "\u2022 Do not ask before routine in-project tool use \u2014 YOLO is active for normal project work.",
-      "\u2022 If a destructive-gated confirmation appears, wait for the permission flow.",
+      "\u2022 Do not ask before tool use \u2014 YOLO is active unless an explicit deny rule blocks the call.",
       "\u2022 If the overall Mission is accomplished, emit `[GOAL_COMPLETE]` followed by a verification recipe.",
       "\u2022 Keep output concise \u2014 summarize findings, do not transcribe files."
     ].join("\n");
@@ -17240,7 +17532,7 @@ ${recentJournal}` : "No prior iterations.",
       const task = expectDefined(tasks[i]);
       const route = routes[i] ?? null;
       const subagentId = `parallel-${this.iterations}-${i}`;
-      const taskId = randomUUID();
+      const taskId = randomUUID8();
       const personaLine = route ? `Acting agent: ${route.definition.config.name} \u2014 ${route.definition.capability.summary}
 ` : "";
       const spec = {
@@ -17375,8 +17667,8 @@ ${personaLine}Task: ${task}
     return tasks.length > 0 ? tasks.slice(0, this.slots) : null;
   }
   async readGitStatus() {
-    const { execFile: execFile2 } = await import('child_process');
-    const { promisify: promisify2 } = await import('util');
+    const { execFile: execFile2 } = await import("node:child_process");
+    const { promisify: promisify2 } = await import("node:util");
     const execFileP2 = promisify2(execFile2);
     const { stdout } = await execFileP2("git", ["status", "--porcelain"], {
       cwd: this.opts.projectRoot,
@@ -17466,6 +17758,9 @@ ${lastFew}` : "No prior iterations.",
     await saveGoal(this.goalPath, { ...current, engineState: state }, this.opts.events);
   }
 };
+
+// src/core/streaming-response-builder.ts
+import { randomUUID as randomUUID9 } from "node:crypto";
 var STREAM_DRAIN_TIMEOUT_MS = 500;
 function buildResponse(state) {
   const content = [];
@@ -17525,7 +17820,7 @@ function handleContentBlockStart(state, ev) {
     state.textBuffers.push("");
     state.blockOrder.push({ kind: "text", idx: state.currentTextIndex });
   } else if (kind === "tool_use") {
-    const id = ev.id ?? randomUUID();
+    const id = ev.id ?? randomUUID9();
     state.tools.set(id, { name: ev.name ?? "unknown", partial: "" });
     state.blockOrder.push({ kind: "tool", id });
     state.currentTextIndex = -1;
@@ -17540,6 +17835,8 @@ function handleContentBlockStart(state, ev) {
   }
 }
 function handleContentBlockStop(state, ev) {
+  void state;
+  void ev;
 }
 function handleTextDelta(state, text) {
   if (state.currentTextIndex === -1) {
@@ -17732,8 +18029,8 @@ async function streamProviderToResponse(provider, req, signal, ctx, events, logg
         });
         await Promise.race([
           drainPromise,
-          new Promise((resolve14) => {
-            drainTimer = setTimeout(resolve14, STREAM_DRAIN_TIMEOUT_MS);
+          new Promise((resolve12) => {
+            drainTimer = setTimeout(resolve12, STREAM_DRAIN_TIMEOUT_MS);
           })
         ]);
       } finally {
@@ -17844,7 +18141,7 @@ async function runProviderWithRetry(opts) {
           description
         });
       }
-      await new Promise((resolve14, reject) => {
+      await new Promise((resolve12, reject) => {
         let settled = false;
         const cleanup = () => {
           clearTimeout(t);
@@ -17860,7 +18157,7 @@ async function runProviderWithRetry(opts) {
           if (settled) return;
           settled = true;
           cleanup();
-          resolve14();
+          resolve12();
         }, delay);
         if (signal.aborted) {
           onAbort();
@@ -17879,6 +18176,9 @@ var DefaultProviderRunner = class {
     return runProviderWithRetry(opts);
   }
 };
+
+// src/execution/retry-policy.ts
+import { randomInt } from "node:crypto";
 var MAX_RETRY_AFTER_MS = 6e4;
 var MAX_ATTEMPTS_BY_KIND = {
   rate_limit: 5,
@@ -18332,6 +18632,10 @@ Summarize the following message range:`;
   }
 };
 
+// src/execution/skill-loader.ts
+import * as fs4 from "node:fs/promises";
+import * as path15 from "node:path";
+
 // src/skills/foreign-sources.ts
 var FOREIGN_SKILL_TOOLS = [
   { id: "agents", subdir: "skills" },
@@ -18447,6 +18751,56 @@ function isValidSkillNameFormat(name) {
 
 // src/skills/limits.ts
 var SKILL_LIMITS = {
+  /**
+   * Per-skill body cap when injecting a full skill body into the system prompt
+   * (eager mode), and when returning a skill body from the `skill` tool.
+   * ~4k tokens. Oversized bodies are truncated at a paragraph boundary.
+   *
+   * Consumers: `system-prompt-builder.capSkillBody`, `skill` tool body return.
+   */
+  MAX_SKILL_BODY_CHARS: 16e3,
+  /**
+   * Per-resource cap when the `skill` tool loads a bundled file
+   * (`scripts/`, `references/`, `assets/`). ~8k tokens.
+   *
+   * Consumer: `skill` tool `loadResource`.
+   */
+  MAX_RESOURCE_CHARS: 32e3,
+  /**
+   * Maximum number of bundled resource paths the `skill` tool lists in one
+   * response. Caps a pathological skill (huge `assets/` tree) from blowing up
+   * the tool result.
+   *
+   * Consumer: `skill` tool resource listing.
+   */
+  MAX_LISTED_RESOURCES: 100,
+  /**
+   * Max size of a single installed skill file (SKILL.md or a bundled resource).
+   * Guards against a malicious registry skill shipping a multi-MB blob that
+   * then flows into the prompt. 100KB.
+   *
+   * Consumer: `SkillInstaller.install` / `importFromDir`.
+   */
+  MAX_SKILL_FILE_SIZE: 100 * 1024,
+  /**
+   * Max size of a GitHub tarball downloaded by the skill installer. Guards
+   * against a repo accidentally (or maliciously) shipping a giant tarball that
+   * would be extracted into a temp dir. 50MB.
+   *
+   * Consumer: `downloadGitHubTarball`.
+   */
+  MAX_TARBALL_SIZE: 50 * 1024 * 1024,
+  /**
+   * Default total char budget for skill bodies injected in eager mode when
+   * `config.skills.eagerMaxChars` is unset. ~6k tokens. Skills are injected
+   * highest-priority first; once the budget is exhausted the remaining skills
+   * are listed as a manifest the agent loads via the `skill` tool. Set very
+   * high to effectively disable budgeting.
+   *
+   * Consumer: `DefaultSystemPromptBuilder.buildMemoryAndSkills` (default for
+   * `skillEagerMaxChars`).
+   */
+  EAGER_DEFAULT_MAX_CHARS: 24e3,
   /**
    * Auto-compact body limits (the token-saving fallback used when a skill has
    * no hand-crafted `SKILL.save.md`). The Overview and Rules sections are
@@ -18456,7 +18810,24 @@ var SKILL_LIMITS = {
    */
   COMPACT_OVERVIEW_MAX: 200,
   COMPACT_RULES_MAX: 350,
-  COMPACT_TOTAL_MAX: 450};
+  COMPACT_TOTAL_MAX: 450,
+  /**
+   * Max length of a skill name (agentskills.io spec). Enforced by the
+   * frontmatter validator's format regex plus this length bound.
+   *
+   * Consumer: `isValidSkillNameFormat`.
+   */
+  SKILL_NAME_MAX_LEN: 64,
+  /**
+   * Soft line limit for a SKILL.md body, per the bundled `skill-creator` rule.
+   * Not enforced in code (a skill can exceed it) — surfaced by `/skill-gen
+   * validate` and the `skill-creator` skill as guidance to move deep material
+   * into `references/`.
+   *
+   * Consumer: `skill-creator` skill, `/skill-gen validate` advisory.
+   */
+  SKILL_BODY_LINE_LIMIT: 500
+};
 
 // src/execution/skill-loader.ts
 function stripFrontmatter2(raw) {
@@ -18493,7 +18864,7 @@ async function entryIsDirectory(dir, entry) {
   if (entry.isDirectory()) return true;
   if (entry.isSymbolicLink()) {
     try {
-      return (await fsp9.stat(path4.join(dir, entry.name))).isDirectory();
+      return (await fs4.stat(path15.join(dir, entry.name))).isDirectory();
     } catch {
       return false;
     }
@@ -18514,7 +18885,7 @@ var DefaultSkillLoader = class {
       for (const tool of FOREIGN_SKILL_TOOLS) {
         if (!foreignIds.includes(tool.id)) continue;
         dirs.push({
-          dir: path4.join(root, "." + tool.id, tool.subdir),
+          dir: path15.join(root, "." + tool.id, tool.subdir),
           source: "foreign",
           originTool: tool.id
         });
@@ -18536,12 +18907,12 @@ var DefaultSkillLoader = class {
     const seen = /* @__PURE__ */ new Set();
     for (const { dir, source, originTool } of this.dirs) {
       try {
-        const entries = await fsp9.readdir(dir, { withFileTypes: true });
+        const entries = await fs4.readdir(dir, { withFileTypes: true });
         for (const e of entries) {
           if (!await entryIsDirectory(dir, e)) continue;
-          const skillFile = path4.join(dir, e.name, "SKILL.md");
+          const skillFile = path15.join(dir, e.name, "SKILL.md");
           try {
-            const raw = await fsp9.readFile(skillFile, "utf8");
+            const raw = await fs4.readFile(skillFile, "utf8");
             const fm = parseSkillFrontmatter(raw);
             if (!fm.name || !fm.description) continue;
             if (!isValidSkillNameFormat(fm.name)) continue;
@@ -18613,7 +18984,7 @@ var DefaultSkillLoader = class {
     if (cached !== void 0) return cached;
     const m = await this.find(name);
     if (!m) throw new Error(`Skill "${name}" not found`);
-    const body = await fsp9.readFile(m.path, "utf8");
+    const body = await fs4.readFile(m.path, "utf8");
     this.bodyCache.set(key, body);
     return body;
   }
@@ -18623,12 +18994,12 @@ var DefaultSkillLoader = class {
     if (cached !== void 0) return cached;
     const m = await this.find(name);
     if (!m) throw new Error(`Skill "${name}" not found`);
-    const savePath = path4.join(path4.dirname(m.path), "SKILL.save.md");
+    const savePath = path15.join(path15.dirname(m.path), "SKILL.save.md");
     let result;
     try {
-      result = await fsp9.readFile(savePath, "utf8");
+      result = await fs4.readFile(savePath, "utf8");
     } catch {
-      const full = await fsp9.readFile(m.path, "utf8");
+      const full = await fs4.readFile(m.path, "utf8");
       const body = stripFrontmatter2(full);
       const compact = compactSkillBody(body);
       if (compact) {
@@ -18654,6 +19025,14 @@ function parseDescriptionFromText(desc) {
   }
   return { trigger, scope };
 }
+
+// src/execution/prompt-loader.ts
+import * as fs6 from "node:fs/promises";
+import * as path17 from "node:path";
+
+// src/storage/prompt-store.ts
+import * as fs5 from "node:fs/promises";
+import * as path16 from "node:path";
 var SCHEMA_VERSION = 2;
 function migratePromptEntry(raw) {
   if (!raw || typeof raw !== "object") return null;
@@ -18714,12 +19093,12 @@ var DefaultPromptStore = class {
     await ensureDir(this.dir);
     const entries = [];
     try {
-      const files = await fsp9.readdir(this.dir);
+      const files = await fs5.readdir(this.dir);
       for (const file of files) {
         if (!file.endsWith(".json")) continue;
         try {
           const raw = JSON.parse(
-            await fsp9.readFile(path4.join(this.dir, file), "utf8")
+            await fs5.readFile(path16.join(this.dir, file), "utf8")
           );
           const migrated = migratePromptEntry(raw.entry);
           if (migrated) entries.push(migrated);
@@ -18733,9 +19112,9 @@ var DefaultPromptStore = class {
     );
   }
   async get(id) {
-    const file = path4.join(this.dir, `${id}.json`);
+    const file = path16.join(this.dir, `${id}.json`);
     try {
-      const raw = JSON.parse(await fsp9.readFile(file, "utf8"));
+      const raw = JSON.parse(await fs5.readFile(file, "utf8"));
       return migratePromptEntry(raw.entry);
     } catch {
       return null;
@@ -18743,14 +19122,14 @@ var DefaultPromptStore = class {
   }
   async save(entry) {
     await ensureDir(this.dir);
-    const file = path4.join(this.dir, `${entry.id}.json`);
+    const file = path16.join(this.dir, `${entry.id}.json`);
     const raw = { version: SCHEMA_VERSION, entry };
     await atomicWrite(file, JSON.stringify(raw, null, 2));
   }
   async delete(id) {
-    const file = path4.join(this.dir, `${id}.json`);
+    const file = path16.join(this.dir, `${id}.json`);
     try {
-      await fsp9.unlink(file);
+      await fs5.unlink(file);
       return true;
     } catch {
       return false;
@@ -18837,7 +19216,7 @@ var DefaultPromptLoader = class {
   constructor(opts) {
     this.projectStore = typeof opts.paths.inProjectPrompts === "string" ? new DefaultPromptStore(opts.paths.inProjectPrompts) : void 0;
     this.userStore = typeof opts.paths.globalPrompts === "string" ? new DefaultPromptStore(opts.paths.globalPrompts) : void 0;
-    this.builtinDir = opts.bundledDir ? path4.join(opts.bundledDir, "prompts") : void 0;
+    this.builtinDir = opts.bundledDir ? path17.join(opts.bundledDir, "prompts") : void 0;
   }
   async list() {
     if (this.cache) return this.cache;
@@ -18950,7 +19329,7 @@ var DefaultPromptLoader = class {
     const files = await walkJson(dir);
     for (const file of files) {
       try {
-        const parsed = JSON.parse(await fsp9.readFile(file, "utf8"));
+        const parsed = JSON.parse(await fs6.readFile(file, "utf8"));
         const migrated = migratePromptEntry(parsed);
         if (migrated) out.push({ ...migrated, source: "builtin" });
       } catch {
@@ -18964,12 +19343,12 @@ async function walkJson(dir) {
   const out = [];
   let entries;
   try {
-    entries = await fsp9.readdir(dir, { withFileTypes: true });
+    entries = await fs6.readdir(dir, { withFileTypes: true });
   } catch {
     return out;
   }
   for (const e of entries) {
-    const full = path4.join(dir, e.name);
+    const full = path17.join(dir, e.name);
     if (e.isDirectory()) {
       out.push(...await walkJson(full));
     } else if (e.name.endsWith(".json") && e.name !== "index.json" && e.name !== "schema.json") {
@@ -19153,6 +19532,12 @@ function readPolicy(ctx) {
   return candidate;
 }
 
+// src/execution/tool-executor.ts
+import { randomUUID as randomUUID10 } from "node:crypto";
+import { isDeepStrictEqual } from "node:util";
+import * as fs7 from "node:fs/promises";
+import * as path18 from "node:path";
+
 // src/types/tool-markers.ts
 var MALFORMED_ARG_MARKERS = ["__raw", "__raw_arguments", "_raw"];
 
@@ -19372,12 +19757,33 @@ ${errorDetails}`,
       }
       if (effectivePermission === "confirm") {
         if (this.opts.confirmAwaiter) {
-          const choice = await this.opts.confirmAwaiter(tool, use.input, use.id, tool.name);
+          const awaiter = this.opts.confirmAwaiter;
+          const choice = await new Promise(
+            (resolve12, reject) => {
+              const signal = ctx.signal;
+              const onAbort = () => resolve12("abort");
+              if (signal.aborted) {
+                resolve12("abort");
+                return;
+              }
+              signal.addEventListener("abort", onAbort, { once: true });
+              awaiter(tool, use.input, use.id, tool.name).then(
+                (c) => {
+                  signal.removeEventListener("abort", onAbort);
+                  resolve12(c);
+                },
+                (e) => {
+                  signal.removeEventListener("abort", onAbort);
+                  reject(e);
+                }
+              );
+            }
+          );
           if (choice !== "yes" && choice !== "always") {
             const result = {
               type: "tool_result",
               tool_use_id: use.id,
-              content: `Tool "${tool.name}" denied by user.`,
+              content: choice === "abort" ? `Tool "${tool.name}" was not executed \u2014 the run was aborted while awaiting confirmation.` : `Tool "${tool.name}" denied by user.`,
               is_error: true
             };
             budget = this.budgetForString(result.content, budget);
@@ -19483,6 +19889,9 @@ ${post.additionalContext}`;
           is_error: true
         };
         budget = this.budgetForString(result.content, budget);
+        void category;
+        void retryable;
+        void detail;
         return { result, tool, durationMs: 0 };
       }
     };
@@ -19589,15 +19998,33 @@ ${post.additionalContext}`;
     const timeoutSignal = AbortSignal.timeout(timeoutMs);
     const combined = AbortSignal.any([parentSignal, timeoutSignal]);
     let output;
+    const toolPromise = typeof tool.executeStream === "function" ? this.runStreamedTool(tool, input, ctx, combined, toolUseId) : (async () => tool.execute(input, ctx, { signal: combined }))();
+    toolPromise.catch(() => {
+    });
     try {
-      output = typeof tool.executeStream === "function" ? await this.runStreamedTool(tool, input, ctx, combined, toolUseId) : await tool.execute(input, ctx, { signal: combined });
+      output = await new Promise((resolve12, reject) => {
+        const onAbort = () => {
+          setTimeout(() => reject(abortReasonToError(combined.reason)), 0);
+        };
+        combined.addEventListener("abort", onAbort, { once: true });
+        toolPromise.then(
+          (v) => {
+            combined.removeEventListener("abort", onAbort);
+            resolve12(v);
+          },
+          (e) => {
+            combined.removeEventListener("abort", onAbort);
+            reject(e);
+          }
+        );
+      });
     } catch (err) {
       if (combined.aborted) await this.runToolCleanup(tool, input, ctx);
       throw err;
     }
     if (combined.aborted) {
       await this.runToolCleanup(tool, input, ctx);
-      throw combined.reason instanceof Error ? combined.reason : new Error(typeof combined.reason === "string" ? combined.reason : "tool timeout");
+      throw abortReasonToError(combined.reason);
     }
     return output;
   }
@@ -19758,6 +20185,9 @@ function clampTimeoutMs(timeoutMs, maxTimeoutMs) {
   const finiteMax = Number.isFinite(maxTimeoutMs) && maxTimeoutMs > 0 ? maxTimeoutMs : fallback;
   return Math.max(1, Math.min(finiteTimeout, finiteMax));
 }
+function abortReasonToError(reason) {
+  return reason instanceof Error ? reason : new Error(typeof reason === "string" ? reason : "tool timeout");
+}
 function hasMalformedArguments(input) {
   if (!input || typeof input !== "object" || Array.isArray(input)) return false;
   const obj = input;
@@ -19856,12 +20286,12 @@ async function maybePersistLargeToolOutput(toolName, content, budget) {
     return content;
   }
   try {
-    const dir = path4.join(wstackGlobalRoot(), "tool-output");
-    await fsp9.mkdir(dir, { recursive: true });
+    const dir = path18.join(wstackGlobalRoot(), "tool-output");
+    await fs7.mkdir(dir, { recursive: true });
     const safeTool = toolName.replace(/[^a-zA-Z0-9._-]+/g, "_").slice(0, 40) || "tool";
     const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-    const filePath = path4.join(dir, `${stamp}-${safeTool}-${randomUUID()}.log`);
-    await fsp9.writeFile(filePath, content, "utf8");
+    const filePath = path18.join(dir, `${stamp}-${safeTool}-${randomUUID10()}.log`);
+    await fs7.writeFile(filePath, content, "utf8");
     const marker = `[full tool output: ${bytes} bytes at ${filePath}; read/grep that file selectively instead of re-running or requesting more output]`;
     const fixedBytes = Buffer.byteLength(marker + TOOL_OUTPUT_ARTIFACT_OMISSION, "utf8");
     const previewBytes = Math.min(
@@ -20015,7 +20445,7 @@ function createContextManagerTool(opts = {}) {
               notes: "No compactor registered. Use /compact aggressive via slash command instead."
             };
           }
-          const fullEstimate = input.systemPrompt != null && Array.isArray(input.tools) ? estimateRequestTokens(messages, input.systemPrompt, input.tools) : { total: beforeTokens};
+          const fullEstimate = input.systemPrompt != null && Array.isArray(input.tools) ? estimateRequestTokens(messages, input.systemPrompt, input.tools) : { total: beforeTokens, messages: beforeTokens, systemPrompt: 0, tools: 0 };
           const currentTokens = fullEstimate.total;
           const runtimeMaxContext = configuredMaxContext ?? ctx.provider?.capabilities?.maxContext ?? 128e3;
           const runtimeThreshold = minCompactThreshold > 0 ? minCompactThreshold : Math.floor(runtimeMaxContext * compactThresholdFraction);
@@ -20169,6 +20599,10 @@ function createContextManagerTool(opts = {}) {
   };
 }
 var contextManagerTool = createContextManagerTool();
+
+// src/infrastructure/logger.ts
+import * as fsp11 from "node:fs/promises";
+import * as path19 from "node:path";
 var LEVEL_RANK2 = {
   error: 0,
   warn: 1,
@@ -20232,9 +20666,9 @@ var DefaultLogger = class _DefaultLogger {
     this.stderr = opts.stderr !== false;
     this.maxFileBytes = opts.maxFileBytes ?? 10 * 1024 * 1024;
     if (this.file) {
-      const dir = path4.dirname(this.file);
+      const dir = path19.dirname(this.file);
       this._tail = this._tail.then(async () => {
-        await fsp9.mkdir(dir, { recursive: true });
+        await fsp11.mkdir(dir, { recursive: true });
       }).catch(() => void 0);
     }
   }
@@ -20292,14 +20726,14 @@ var DefaultLogger = class _DefaultLogger {
     this._tail = this._tail.then(async () => {
       let st;
       try {
-        st = await fsp9.stat(file);
+        st = await fsp11.stat(file);
       } catch {
         return;
       }
       if (st.size < this.maxFileBytes) return;
       try {
-        await fsp9.rm(`${file}.1`, { force: true });
-        await fsp9.rename(file, `${file}.1`);
+        await fsp11.rm(`${file}.1`, { force: true });
+        await fsp11.rename(file, `${file}.1`);
       } catch {
       }
     }).catch(() => void 0);
@@ -20317,7 +20751,7 @@ var DefaultLogger = class _DefaultLogger {
       this.enqueueRotate(this.file);
       const line = `${JSON.stringify(entry)}
 `;
-      this._tail = this._tail.then(() => fsp9.appendFile(this.file, line)).catch(() => void 0);
+      this._tail = this._tail.then(() => fsp11.appendFile(this.file, line)).catch(() => void 0);
     }
     if (!this.stderr) return;
     if (this.format === "json") {
@@ -20551,27 +20985,36 @@ var BY_ID = new Map(CODEX_MODELS.map((m) => [m.id, m]));
 function codexModelMeta(id) {
   return BY_ID.get(id);
 }
+
+// src/models/mode-store.ts
+import * as fs8 from "node:fs/promises";
+import * as path21 from "node:path";
+
+// src/types/mode-prompts.ts
+import { readFileSync as readFileSync3, statSync as statSync3 } from "node:fs";
+import * as path20 from "node:path";
+import { fileURLToPath as fileURLToPath4 } from "node:url";
 function modePrompt(id) {
   for (const dir of modePromptDirCandidates()) {
     try {
-      return readFileSync(path4.join(dir, `${id}.md`), "utf8").trimEnd();
+      return readFileSync3(path20.join(dir, `${id}.md`), "utf8").trimEnd();
     } catch {
     }
   }
   return "";
 }
 function modePromptDirCandidates() {
-  const here = path4.dirname(fileURLToPath(import.meta.url));
+  const here = path20.dirname(fileURLToPath4(import.meta.url));
   const candidates = [
-    path4.resolve(here, "../../instructions/modes"),
-    path4.resolve(here, "../instructions/modes"),
-    path4.resolve(here, "instructions/modes")
+    path20.resolve(here, "../../instructions/modes"),
+    path20.resolve(here, "../instructions/modes"),
+    path20.resolve(here, "instructions/modes")
   ];
   return candidates.sort((a, b) => Number(!isDirectory3(a)) - Number(!isDirectory3(b)));
 }
 function isDirectory3(candidate) {
   try {
-    return statSync(candidate).isDirectory();
+    return statSync3(candidate).isDirectory();
   } catch {
     return false;
   }
@@ -20797,8 +21240,8 @@ var DefaultModeStore = class {
   }
   async loadActiveMode() {
     try {
-      const configPath = path4.join(this.configDir, "mode.json");
-      const content = await fsp9.readFile(configPath, "utf8");
+      const configPath = path21.join(this.configDir, "mode.json");
+      const content = await fs8.readFile(configPath, "utf8");
       const data = JSON.parse(content);
       this.activeModeId = data.activeMode ?? null;
     } catch {
@@ -20807,8 +21250,8 @@ var DefaultModeStore = class {
   }
   async saveActiveMode() {
     try {
-      await fsp9.mkdir(this.configDir, { recursive: true });
-      const configPath = path4.join(this.configDir, "mode.json");
+      await fs8.mkdir(this.configDir, { recursive: true });
+      const configPath = path21.join(this.configDir, "mode.json");
       await atomicWrite(
         configPath,
         JSON.stringify({ activeMode: this.activeModeId }, null, 2)
@@ -20820,14 +21263,14 @@ var DefaultModeStore = class {
 async function loadProjectModes(modesDir) {
   const modes = [];
   try {
-    const entries = await fsp9.readdir(modesDir);
+    const entries = await fs8.readdir(modesDir);
     for (const entry of entries) {
       if (!entry.endsWith(".md") && !entry.endsWith(".txt")) continue;
-      const filePath = path4.join(modesDir, entry);
-      const stat13 = await fsp9.stat(filePath);
+      const filePath = path21.join(modesDir, entry);
+      const stat13 = await fs8.stat(filePath);
       if (!stat13.isFile()) continue;
-      const content = await fsp9.readFile(filePath, "utf8");
-      const id = path4.basename(entry, path4.extname(entry));
+      const content = await fs8.readFile(filePath, "utf8");
+      const id = path21.basename(entry, path21.extname(entry));
       modes.push({
         id,
         name: id.replace(/[-_]/g, " ").replace(/\b\w/g, (c) => c.toUpperCase()),
@@ -20843,8 +21286,8 @@ async function loadProjectModes(modesDir) {
 async function loadUserModes(modesDir) {
   const modes = [];
   try {
-    const manifestPath = path4.join(modesDir, "modes.json");
-    const content = await fsp9.readFile(manifestPath, "utf8");
+    const manifestPath = path21.join(modesDir, "modes.json");
+    const content = await fs8.readFile(manifestPath, "utf8");
     const manifest = JSON.parse(content);
     for (const mode of manifest.modes) {
       modes.push(mode);
@@ -20853,6 +21296,10 @@ async function loadUserModes(modesDir) {
   }
   return modes;
 }
+
+// src/models/models-registry.ts
+import * as fs9 from "node:fs/promises";
+import * as path22 from "node:path";
 var DEFAULT_URL = "https://models.dev/api.json";
 var ENV_URL_KEY = "WRONGSTACK_MODELS_DEV_URL";
 var DEFAULT_TTL_SECONDS = 24 * 3600;
@@ -20928,7 +21375,7 @@ var DefaultModelsRegistry = class {
     this.overlay = opts.overlay;
     this.overlayUrl = opts.overlayUrl;
     this.overlayFile = opts.overlayFile;
-    this.overlayCacheFile = opts.overlayCacheFile ?? (opts.overlayUrl ? path4.join(path4.dirname(opts.cacheFile), "models-overlay-cache.json") : void 0);
+    this.overlayCacheFile = opts.overlayCacheFile ?? (opts.overlayUrl ? path22.join(path22.dirname(opts.cacheFile), "models-overlay-cache.json") : void 0);
   }
   async load(opts = {}) {
     if (this.payload && !opts.force) return this.payload;
@@ -21093,7 +21540,7 @@ var DefaultModelsRegistry = class {
   async readOverlayFile() {
     if (!this.overlayFile) return void 0;
     try {
-      const raw = await fsp9.readFile(this.overlayFile, "utf8");
+      const raw = await fs9.readFile(this.overlayFile, "utf8");
       return JSON.parse(raw);
     } catch {
       return void 0;
@@ -21172,7 +21619,7 @@ var DefaultModelsRegistry = class {
   }
   async readCacheAt(file) {
     try {
-      const raw = await fsp9.readFile(file, "utf8");
+      const raw = await fs9.readFile(file, "utf8");
       return JSON.parse(raw);
     } catch {
       return void 0;
@@ -21180,7 +21627,7 @@ var DefaultModelsRegistry = class {
   }
   /** Used by `wstack models refresh` to expose where the cache lives. */
   cacheLocation() {
-    return path4.resolve(this.cacheFile);
+    return path22.resolve(this.cacheFile);
   }
 };
 function formatAge(seconds) {
@@ -21215,32 +21662,48 @@ function describeCatalogModel(m) {
     ]
   };
 }
-function resolveProviderModelList(savedModels, catalog, providerHint) {
+function resolveProviderModelList(savedModels, catalog, providerHint, siblingCatalog) {
+  const byId = new Map((catalog?.models ?? []).map((m) => [m.id, m]));
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
   if (savedModels && savedModels.length > 0) {
-    const byId = new Map((catalog?.models ?? []).map((m) => [m.id, m]));
-    return savedModels.map((id) => {
+    for (const id of savedModels) {
+      seen.add(id);
       const codex = codexModelMeta(id);
       const hit = byId.get(id);
       if (hit) {
         const described = describeCatalogModel(hit);
-        return codex ? { ...described, description: codex.description } : described;
+        out.push(codex ? { ...described, description: codex.description } : described);
+      } else if (codex) {
+        out.push({ id, name: codex.name, description: codex.description, capabilities: [] });
+      } else {
+        out.push({ id, name: id, capabilities: [] });
       }
-      if (codex) {
-        return { id, name: codex.name, description: codex.description, capabilities: [] };
+    }
+  }
+  for (const [id, m] of byId) {
+    if (!seen.has(id)) {
+      out.push(describeCatalogModel(m));
+      seen.add(id);
+    }
+  }
+  if (siblingCatalog && siblingCatalog !== catalog) {
+    for (const m of siblingCatalog.models) {
+      if (!seen.has(m.id)) {
+        out.push(describeCatalogModel(m));
+        seen.add(m.id);
       }
-      return { id, name: id, capabilities: [] };
-    });
+    }
   }
-  if (catalog && catalog.models.length > 0) return catalog.models.map(describeCatalogModel);
   if (providerHint === "openai-codex") {
-    return CODEX_MODELS.map((m) => ({
-      id: m.id,
-      name: m.name,
-      description: m.description,
-      capabilities: []
-    }));
+    for (const m of CODEX_MODELS) {
+      if (!seen.has(m.id)) {
+        out.push({ id: m.id, name: m.name, description: m.description, capabilities: [] });
+        seen.add(m.id);
+      }
+    }
   }
-  return [];
+  return out;
 }
 
 // src/observability/metrics.ts
@@ -21402,9 +21865,9 @@ var DefaultHealthRegistry = class {
   }
   async runOne(check) {
     let timer = null;
-    const timeout = new Promise((resolve14) => {
+    const timeout = new Promise((resolve12) => {
       timer = setTimeout(
-        () => resolve14({ status: "unhealthy", detail: `timeout after ${this.timeoutMs}ms` }),
+        () => resolve12({ status: "unhealthy", detail: `timeout after ${this.timeoutMs}ms` }),
         this.timeoutMs
       );
     });
@@ -21587,7 +22050,7 @@ async function startMetricsServer(opts) {
   const tls = opts.tls;
   const useHttps = !!(tls?.cert && tls?.key);
   const host = opts.host ?? "127.0.0.1";
-  const path31 = opts.path ?? "/metrics";
+  const path29 = opts.path ?? "/metrics";
   const healthPath = opts.healthPath ?? "/healthz";
   const healthRegistry = opts.healthRegistry;
   const listener = (req, res) => {
@@ -21597,7 +22060,7 @@ async function startMetricsServer(opts) {
       return;
     }
     const url = req.url.split("?")[0];
-    if (url === path31) {
+    if (url === path29) {
       let body;
       try {
         body = renderPrometheus(opts.sink.snapshot());
@@ -21633,24 +22096,24 @@ async function startMetricsServer(opts) {
   };
   let server;
   if (useHttps && tls) {
-    const { createServer } = await import('https');
-    const { readFileSync: readFileSync5 } = await import('fs');
+    const { createServer } = await import("node:https");
+    const { readFileSync: readFileSync5 } = await import("node:fs");
     server = createServer(
       { cert: readFileSync5(tls.cert), key: readFileSync5(tls.key) },
       listener
     );
   } else {
-    const { createServer } = await import('http');
+    const { createServer } = await import("node:http");
     server = createServer(listener);
   }
-  await new Promise((resolve14, reject) => {
+  await new Promise((resolve12, reject) => {
     const onError = (err) => {
       server.off("listening", onListening);
       reject(err);
     };
     const onListening = () => {
       server.off("error", onError);
-      resolve14();
+      resolve12();
     };
     server.once("error", onError);
     server.once("listening", onListening);
@@ -21661,9 +22124,9 @@ async function startMetricsServer(opts) {
   const protocol = useHttps ? "https" : "http";
   return {
     port: boundPort,
-    url: `${protocol}://${host}:${boundPort}${path31}`,
-    close: () => new Promise((resolve14, reject) => {
-      server.close((err) => err ? reject(err) : resolve14());
+    url: `${protocol}://${host}:${boundPort}${path29}`,
+    close: () => new Promise((resolve12, reject) => {
+      server.close((err) => err ? reject(err) : resolve12());
     })
   };
 }
@@ -21785,6 +22248,9 @@ function startOtlpMetricsExporter(opts) {
     }
   };
 }
+
+// src/observability/otlp-traces.ts
+import * as crypto from "node:crypto";
 var SPAN_STATUS_CODE_UNSET = 0;
 var SPAN_STATUS_CODE_OK = 1;
 var SPAN_STATUS_CODE_ERROR = 2;
@@ -21929,6 +22395,9 @@ function startOtlpTraceExporter(opts) {
   };
 }
 
+// src/security/permission-policy.ts
+import * as fs10 from "node:fs/promises";
+
 // src/utils/lru-cache.ts
 var LruCache = class {
   store = /* @__PURE__ */ new Map();
@@ -21963,253 +22432,13 @@ var LruCache = class {
     return this.store.size;
   }
 };
-var CATASTROPHIC_PATTERNS = [
-  /\b(?:mkfs(?:\.[a-z0-9]+)?|mke2fs|newfs)\b/i,
-  // make a filesystem — wipes a partition
-  /\bformat\s+[A-Za-z]:/i,
-  // format C: — wipes a Windows volume
-  /\bdiskpart\b/i,
-  // Windows partition editor
-  /\bdd\b[^|]*\bof=(?:\/dev\/|\\\\[.?]\\)/i,
-  // dd writing straight to a raw device
-  />\s*\/dev\/(?:sd|hd|nvme|disk|mapper|vd)/i,
-  // redirect into a raw block device
-  /:\(\)\s*\{\s*:\|:&\s*\}\s*;/
-  // classic fork bomb
-];
-var HIGH_IMPACT_PATTERNS = [
-  /\b(?:curl|wget|fetch|httpie|http|irm|iwr|Invoke-WebRequest|Invoke-RestMethod)\b[\s\S]{0,300}\|\s*(?:sudo\s+)?(?:sh|bash|zsh|fish|pwsh|powershell|iex|Invoke-Expression)\b/i,
-  /\b(?:powershell|pwsh)(?:\.exe)?\b[\s\S]{0,120}-(?:enc|encodedcommand)\b/i,
-  /\b(?:shutdown|reboot)\b/i
-];
-var CATASTROPHIC_POSIX_ROOTS = /* @__PURE__ */ new Set([
-  "/etc",
-  "/usr",
-  "/bin",
-  "/sbin",
-  "/lib",
-  "/lib64",
-  "/var",
-  "/boot",
-  "/dev",
-  "/sys",
-  "/proc",
-  "/opt",
-  "/root",
-  "/home",
-  "/srv",
-  "/run",
-  "/system",
-  "/library",
-  "/applications",
-  "/users"
-]);
-var CATASTROPHIC_WIN_SUBDIRS = /* @__PURE__ */ new Set([
-  "windows",
-  "system32",
-  "winnt",
-  "program files",
-  "program files (x86)",
-  "programdata",
-  "users"
-]);
-var SHELL_OPERATORS = /* @__PURE__ */ new Set(["&&", "||", "|", ";", ">", ">>", "<", "2>", "2>>"]);
+
+// src/security/yolo-risk.ts
 function getInputString(input, key) {
   if (!input || typeof input !== "object") return void 0;
   const value = input[key];
   return typeof value === "string" ? value : void 0;
 }
-function pathLooksInsideProject(rawPath, projectRoot) {
-  if (!projectRoot) return false;
-  if (rawPath === "~" || rawPath.startsWith("~/") || rawPath.startsWith("~\\")) return false;
-  const resolved = path4.resolve(projectRoot, rawPath);
-  const relative6 = path4.relative(projectRoot, resolved);
-  return !!relative6 && !relative6.startsWith("..") && !path4.isAbsolute(relative6);
-}
-function tokenizeShell(command) {
-  return command.match(/"[^"]*"|'[^']*'|\S+/g)?.map((token) => token.replace(/^['"]|['"]$/g, "")) ?? [];
-}
-function commandSegment(tokens, start) {
-  const out = [];
-  for (let i = start; i < tokens.length; i++) {
-    const token = tokens[i];
-    if (token === void 0 || SHELL_OPERATORS.has(token)) break;
-    out.push(token);
-  }
-  return out;
-}
-function hasShortFlag(args, letters) {
-  const seen = /* @__PURE__ */ new Set();
-  for (const arg of args) {
-    if (!arg.startsWith("-") || arg.startsWith("--")) continue;
-    for (const ch of arg.replace(/^-+/, "")) seen.add(ch.toLowerCase());
-  }
-  return letters.split("").every((letter) => seen.has(letter));
-}
-function hasRecursiveForceDelete(command, projectRoot) {
-  const tokens = tokenizeShell(command);
-  for (let i = 0; i < tokens.length; i++) {
-    const token = tokens[i]?.toLowerCase();
-    if (!token) continue;
-    if (token === "rm" || token === "rmdir") {
-      const args = commandSegment(tokens, i + 1);
-      const recursiveForce = hasShortFlag(args, "rf") || args.some((arg) => arg === "--recursive") && args.some((arg) => arg === "--force");
-      if (recursiveForce) {
-        const targets = args.filter((arg) => !arg.startsWith("-") && !SHELL_OPERATORS.has(arg));
-        if (targets.length > 0 && targets.every((target) => target.trim().length === 0)) {
-          continue;
-        }
-        if (targets.length === 0) return true;
-        if (targets.some(isCatastrophicDeleteTarget)) return true;
-        if (targets.some((target) => !pathLooksInsideProject(target, projectRoot))) return true;
-      }
-    }
-    if (token === "remove-item" || token === "ri") {
-      const args = commandSegment(tokens, i + 1).map((arg) => arg.toLowerCase());
-      const recurse = args.some((arg) => arg === "-recurse" || arg === "-r");
-      const force = args.some((arg) => arg === "-force" || arg === "-f");
-      if (recurse && force && !args.includes("-whatif")) {
-        const targets = args.filter((arg) => !arg.startsWith("-") && !SHELL_OPERATORS.has(arg));
-        if (targets.length === 0) return true;
-        if (targets.some(isCatastrophicDeleteTarget)) return true;
-        if (targets.some((target) => !pathLooksInsideProject(target, projectRoot))) return true;
-      }
-    }
-    if (token === "rd" || token === "rmdir") {
-      const args = commandSegment(tokens, i + 1).map((arg) => arg.toLowerCase());
-      if (args.includes("/s")) {
-        const targets = args.filter((arg) => !arg.startsWith("-") && !arg.startsWith("/") && !SHELL_OPERATORS.has(arg));
-        if (targets.length === 0) return true;
-        if (targets.some(isCatastrophicDeleteTarget)) return true;
-        if (targets.some((target) => !pathLooksInsideProject(target, projectRoot))) return true;
-      }
-    }
-  }
-  return false;
-}
-function hasGitHistoryRewrite(command) {
-  const tokens = tokenizeShell(command).map((token) => token.toLowerCase());
-  for (let i = 0; i < tokens.length; i++) {
-    if (tokens[i] !== "git") continue;
-    const args = commandSegment(tokens, i + 1);
-    if (args.includes("reset") && args.some((arg) => arg === "--hard" || arg.startsWith("--hard="))) {
-      return true;
-    }
-    const cleanIdx = args.indexOf("clean");
-    if (cleanIdx >= 0) {
-      const cleanArgs = args.slice(cleanIdx + 1);
-      if (cleanArgs.some((arg) => arg === "-f" || arg === "--force" || /^-[a-z]*f[a-z]*$/i.test(arg))) {
-        return true;
-      }
-    }
-    const pushIdx = args.indexOf("push");
-    if (pushIdx >= 0) {
-      const pushArgs = args.slice(pushIdx + 1);
-      if (pushArgs.some(
-        (arg) => arg === "-f" || arg === "--force" || arg === "--force-with-lease" || arg.startsWith("--force=") || arg.startsWith("--force-with-lease=")
-      )) {
-        return true;
-      }
-    }
-  }
-  return false;
-}
-function hasExternalPublish(command) {
-  const tokens = tokenizeShell(command).map((token) => token.toLowerCase());
-  for (let i = 0; i < tokens.length; i++) {
-    const cmd = tokens[i];
-    if (!cmd) continue;
-    const args = commandSegment(tokens, i + 1);
-    if (["npm", "pnpm", "yarn", "bun"].includes(cmd) && (args.includes("publish") || args.includes("deploy"))) {
-      return true;
-    }
-    if (cmd === "cargo" && (args.includes("publish") || args.includes("yank"))) return true;
-    if ((cmd === "docker" || cmd === "podman") && args.includes("push")) return true;
-    if (cmd === "kubectl") {
-      const deleteIdx = args.indexOf("delete");
-      if (deleteIdx >= 0 && (args[deleteIdx + 1] === "namespace" || args[deleteIdx + 1] === "ns")) {
-        return true;
-      }
-      if (args.includes("drain")) return true;
-    }
-  }
-  return false;
-}
-function hasFindExec(command) {
-  const tokens = tokenizeShell(command).map((token) => token.toLowerCase());
-  for (let i = 0; i < tokens.length; i++) {
-    if (tokens[i] !== "find") continue;
-    const args = commandSegment(tokens, i + 1);
-    if (args.some((arg) => arg === "-exec" || arg === "-ok" || arg === "-execdir")) return true;
-  }
-  return false;
-}
-function isCatastrophicDeleteTarget(rawTarget) {
-  const t = rawTarget.replace(/^['"]|['"]$/g, "").trim();
-  if (!t) return false;
-  if (t === "*" || t === "." || t === "./" || t === ".\\" || t === "./*" || t === ".\\*") return true;
-  const s = t.replace(/[\\/]\*+$/, "").replace(/[\\/]+$/, "");
-  if (s === "") return true;
-  if (s === "~" || /^\$HOME$/i.test(s) || /^%USERPROFILE%$/i.test(s)) return true;
-  if (/^[A-Za-z]:$/.test(s)) return true;
-  const norm = s.toLowerCase().replace(/\\/g, "/");
-  if (CATASTROPHIC_POSIX_ROOTS.has(norm)) return true;
-  const win = norm.match(/^[a-z]:\/([^/]+)$/);
-  if (win?.[1] && CATASTROPHIC_WIN_SUBDIRS.has(win[1])) return true;
-  return false;
-}
-function hasCatastrophicDelete(command) {
-  const tokens = tokenizeShell(command);
-  for (let i = 0; i < tokens.length; i++) {
-    const token = tokens[i]?.toLowerCase();
-    if (!token) continue;
-    if (token === "rm") {
-      const args = tokens.slice(i + 1);
-      const recursiveOrForce = args.some(
-        (arg) => /^-[^-]*[rf]/i.test(arg) || arg === "--recursive" || arg === "--force" || arg === "--no-preserve-root"
-      );
-      if (!recursiveOrForce) continue;
-      const targets = args.filter((arg) => !arg.startsWith("-") && !SHELL_OPERATORS.has(arg));
-      if (targets.length === 0) return true;
-      if (targets.some(isCatastrophicDeleteTarget)) return true;
-    }
-    if (token === "remove-item" || token === "ri") {
-      const args = tokens.slice(i + 1);
-      const recursive = args.some((arg) => {
-        const a = arg.toLowerCase();
-        return a === "-recurse" || a === "-force";
-      });
-      if (!recursive) continue;
-      const targets = args.filter((arg) => !arg.startsWith("-") && !SHELL_OPERATORS.has(arg));
-      if (targets.some(isCatastrophicDeleteTarget)) return true;
-    }
-    if (token === "rmdir" || token === "rd") {
-      const args = tokens.slice(i + 1);
-      const recursive = args.some((arg) => arg.toLowerCase() === "/s");
-      if (!recursive) continue;
-      const targets = args.filter((arg) => !arg.startsWith("-") && !arg.startsWith("/") && !SHELL_OPERATORS.has(arg));
-      if (targets.some(isCatastrophicDeleteTarget)) return true;
-    }
-    if (token === "del" || token === "erase") {
-      const args = tokens.slice(i + 1);
-      const targets = args.filter((arg) => !arg.startsWith("-") && !arg.startsWith("/") && !SHELL_OPERATORS.has(arg));
-      if (targets.some(isCatastrophicDeleteTarget)) return true;
-    }
-  }
-  return false;
-}
-function isClearlyDestructiveBashCommand(command, projectRoot) {
-  const trimmed = command.trim();
-  if (!trimmed) return false;
-  if (hasRecursiveForceDelete(trimmed, projectRoot)) return true;
-  if (hasGitHistoryRewrite(trimmed)) return true;
-  if (hasExternalPublish(trimmed)) return true;
-  if (hasFindExec(trimmed)) return true;
-  if (hasCatastrophicDelete(trimmed)) return true;
-  if (CATASTROPHIC_PATTERNS.some((pattern) => pattern.test(trimmed))) return true;
-  if (HIGH_IMPACT_PATTERNS.some((pattern) => pattern.test(trimmed))) return true;
-  return false;
-}
 
 // src/security/permission-policy.ts
 function matchesTrust(patterns, subject) {
@@ -22288,7 +22517,7 @@ var DefaultPermissionPolicy = class {
   trustFile;
   yolo;
   yoloDestructive;
-  /** When true, destructive ops still require confirmation even in YOLO mode. */
+  /** Deprecated compatibility flag; no longer gates YOLO calls. */
   confirmDestructive;
   /**
    * Session-scoped "soft deny" map. When the user presses 'n' (block once),
@@ -22323,7 +22552,7 @@ var DefaultPermissionPolicy = class {
   /**
    * Evaluate-result cache. Keyed by `tool.name::subject` so repeated calls
    * with the same tool+input skip namespace matching, subject computation,
-   * pattern matching (matchAny), and YOLO destructive gating.
+   * and pattern matching (matchAny).
    *
    * Cleared on any state change (reload, trust, deny, yolo toggle) because
    * the result depends on the full policy state. The write-tool smart-bypass
@@ -22341,7 +22570,7 @@ var DefaultPermissionPolicy = class {
     this.trustFile = opts.trustFile;
     this.yolo = opts.yolo ?? false;
     this.yoloDestructive = opts.yoloDestructive ?? opts.forceAllYolo ?? false;
-    this.confirmDestructive = true;
+    this.confirmDestructive = opts.confirmDestructive ?? false;
     this.promptDelegate = opts.promptDelegate;
   }
   /**
@@ -22371,18 +22600,18 @@ var DefaultPermissionPolicy = class {
   getYoloDestructive() {
     return this.yoloDestructive;
   }
-  /** Toggle destructive confirmation gate (only meaningful when yolo is active). */
-  setConfirmDestructive(_enabled) {
-    if (!this.confirmDestructive) this._evalCache.clear();
-    this.confirmDestructive = true;
+  /** Toggle deprecated destructive confirmation compatibility flag. */
+  setConfirmDestructive(enabled) {
+    if (this.confirmDestructive !== enabled) this._evalCache.clear();
+    this.confirmDestructive = enabled;
   }
-  /** Check whether destructive confirmation gate is active. */
+  /** Check deprecated destructive confirmation compatibility flag. */
   getConfirmDestructive() {
     return this.confirmDestructive;
   }
   async reload() {
     try {
-      const raw = await fsp9.readFile(this.trustFile, "utf8");
+      const raw = await fs10.readFile(this.trustFile, "utf8");
       const parsed = safeParse(raw);
       if (parsed.ok && parsed.value) this.policy = parsed.value;
     } catch {
@@ -22431,29 +22660,6 @@ var DefaultPermissionPolicy = class {
       this._evalCache.set(cacheKey, decision);
       return decision;
     }
-    if (this.yolo) {
-      const destructive = this.isDestructiveYoloCall(tool, input, ctx);
-      if (destructive) {
-        if (this.promptDelegate) {
-          const decision = await this.promptDelegate(tool, input, subject ?? tool.name);
-          if (decision === "deny") {
-            await this.deny({ tool: tool.name, pattern: subject ?? tool.name });
-            return { permission: "deny", source: "user", reason: "user denied destructive yolo" };
-          }
-          return {
-            permission: decision === "yes" || decision === "always" ? "auto" : "deny",
-            source: "user",
-            reason: "destructive yolo approved for this call"
-          };
-        }
-        return {
-          permission: "confirm",
-          source: "yolo_destructive",
-          riskTier: "destructive",
-          reason: "destructive tool needs explicit approval in YOLO mode"
-        };
-      }
-    }
     if (entry?.allow && subject && matchesTrust(entry.allow, subject)) {
       const decision = { permission: "auto", source: "trust", reason: "matched allow pattern" };
       this._evalCache.set(cacheKey, decision);
@@ -22535,47 +22741,6 @@ var DefaultPermissionPolicy = class {
     }
     return { permission: "confirm", source: "default" };
   }
-  // Capability-based destructive check (preferred over name-based)
-  isDestructiveByCapability(tool) {
-    const caps = tool.capabilities ?? [];
-    if (caps.includes(ToolCapabilities.SHELL_ARBITRARY)) return true;
-    if (caps.includes(ToolCapabilities.SHELL_RESTRICTED)) return true;
-    if (caps.includes(ToolCapabilities.SHELL_EXEC)) return true;
-    if (caps.includes(ToolCapabilities.FS_WRITE)) return true;
-    if (caps.includes(ToolCapabilities.FS_WRITE_OUTSIDE_PROJECT)) return true;
-    return false;
-  }
-  isDestructiveYoloCall(tool, input, ctx) {
-    if (tool.name === "mcp_control") {
-      const action = getInputString(input, "action");
-      if (action === "list" || action === "search" || action === "activate" || action === "deactivate") {
-        return false;
-      }
-    }
-    if (this.isDestructiveByCapability(tool)) {
-      const caps = tool.capabilities ?? [];
-      if (caps.includes(ToolCapabilities.SHELL_ARBITRARY) || caps.includes(ToolCapabilities.SHELL_RESTRICTED) || caps.includes(ToolCapabilities.SHELL_EXEC)) {
-        const command = shellCommandLineFromInput(input);
-        return command ? isClearlyDestructiveBashCommand(command, ctx.projectRoot) : tool.riskTier === "destructive";
-      }
-      if (caps.includes(ToolCapabilities.FS_WRITE_OUTSIDE_PROJECT)) return true;
-      if (caps.includes(ToolCapabilities.FS_WRITE)) {
-        const targetPath = getInputString(input, "path") ?? getInputString(input, "file");
-        if (!targetPath || !ctx.projectRoot) return false;
-        return !pathLooksInsideProject(targetPath, ctx.projectRoot);
-      }
-    }
-    if (tool.name === "bash" || tool.name === "shell" || tool.name === "exec") {
-      const command = shellCommandLineFromInput(input);
-      return command ? isClearlyDestructiveBashCommand(command, ctx.projectRoot) : tool.riskTier === "destructive";
-    }
-    if (tool.name === "write" || tool.name === "edit" || tool.name === "replace" || tool.name === "patch") {
-      const targetPath = getInputString(input, "path") ?? getInputString(input, "file");
-      if (!targetPath || !ctx.projectRoot) return false;
-      return !pathLooksInsideProject(targetPath, ctx.projectRoot);
-    }
-    return tool.riskTier === "destructive";
-  }
   isSensitiveReadCall(tool, input) {
     const isReadTool = hasCapability(tool, ToolCapabilities.FS_READ) || tool.name === "read" || tool.name === "grep" || tool.name === "glob" || tool.name === "tree";
     if (isReadTool && inputPathLooksSensitive(input)) return true;
@@ -22873,12 +23038,61 @@ var DefaultSecretScrubber = class {
   }
 };
 
+// src/security/secret-vault.ts
+import { createCipheriv, createDecipheriv, randomBytes as randomBytes4, scryptSync } from "node:crypto";
+import * as fs11 from "node:fs";
+import * as fsp12 from "node:fs/promises";
+import * as path23 from "node:path";
+
 // src/types/secret-vault.ts
 var ENCRYPTED_PREFIX_PATTERN = /^enc:v(\d+):/;
 function encryptedPrefixForVersion(version) {
   return `enc:v${version}:`;
 }
 
+// src/security/config-secrets.ts
+function decryptConfigSecrets(cfg, vault, opts) {
+  const warn = opts?.warn ?? ((msg) => console.warn(msg));
+  return walk2(cfg, vault, (v, key) => {
+    try {
+      return vault.decrypt(v);
+    } catch (err) {
+      warn(
+        `[secret-vault] Failed to decrypt "${key}": ${err instanceof Error ? err.message : err}`
+      );
+      return "";
+    }
+  });
+}
+function encryptConfigSecrets(cfg, vault, _opts) {
+  return walk2(cfg, vault, (v) => vault.encrypt(v));
+}
+function walk2(node, vault, transform) {
+  if (node === null || node === void 0) return node;
+  if (typeof node !== "object") return node;
+  if (Array.isArray(node)) {
+    return node.map((item) => walk2(item, vault, transform));
+  }
+  const out = /* @__PURE__ */ Object.create(null);
+  for (const [k, v] of Object.entries(node)) {
+    if (typeof v === "string" && isSecretField(k)) {
+      out[k] = transform(v, k);
+    } else if (typeof v === "object" && v !== null) {
+      out[k] = walk2(v, vault, transform);
+    } else {
+      out[k] = v;
+    }
+  }
+  return out;
+}
+var SECRET_KEY_PATTERN = /(?:apikey|api_key|authtoken|auth_token|bearer|secret|password|passwd|pwd|refreshtoken|refresh_token|sessionkey|session_key|access[_-]?token|private[_-]?key)/i;
+var NON_SECRET_OVERRIDES = /* @__PURE__ */ new Set(["publickey", "public_key"]);
+function isSecretField(name) {
+  const lc = name.toLowerCase();
+  if (NON_SECRET_OVERRIDES.has(lc)) return false;
+  return SECRET_KEY_PATTERN.test(lc);
+}
+
 // src/security/secret-vault.ts
 var KEY_BYTES = 32;
 var IV_BYTES = 12;
@@ -22910,8 +23124,8 @@ function deriveKEK(passphrase, salt) {
   });
 }
 function wrapDataKey(dataKey, keyVersion, passphrase) {
-  const salt = randomBytes(KEK_SALT_BYTES);
-  const iv = randomBytes(IV_BYTES);
+  const salt = randomBytes4(KEK_SALT_BYTES);
+  const iv = randomBytes4(IV_BYTES);
   const kek = deriveKEK(passphrase, salt);
   const cipher = createCipheriv(ALGO, kek, iv);
   const ct = Buffer.concat([cipher.update(dataKey), cipher.final()]);
@@ -23001,7 +23215,7 @@ var DefaultSecretVault = class {
   encrypt(plaintext) {
     if (this.isEncrypted(plaintext)) return plaintext;
     const key = this.loadOrCreateKey();
-    const iv = randomBytes(IV_BYTES);
+    const iv = randomBytes4(IV_BYTES);
     const cipher = createCipheriv(ALGO, key, iv);
     const ct = Buffer.concat([cipher.update(plaintext, "utf8"), cipher.final()]);
     const tag = cipher.getAuthTag();
@@ -23054,9 +23268,9 @@ var DefaultSecretVault = class {
    */
   rotateKey() {
     const oldVersion = this._keyVersion;
-    const newKey = randomBytes(KEY_BYTES);
+    const newKey = randomBytes4(KEY_BYTES);
     const newVersion = oldVersion + 1;
-    fs11.mkdirSync(path4.dirname(this.keyFile), { recursive: true });
+    fs11.mkdirSync(path23.dirname(this.keyFile), { recursive: true });
     const passphrase = getVaultPassphrase();
     if (passphrase) {
       fs11.writeFileSync(this.keyFile, wrapDataKey(newKey, newVersion, passphrase), { mode: 384 });
@@ -23140,8 +23354,8 @@ var DefaultSecretVault = class {
     } catch (err) {
       if (err.code !== "ENOENT") throw err;
     }
-    fs11.mkdirSync(path4.dirname(this.keyFile), { recursive: true });
-    const key = randomBytes(KEY_BYTES);
+    fs11.mkdirSync(path23.dirname(this.keyFile), { recursive: true });
+    const key = randomBytes4(KEY_BYTES);
     const passphrase = getVaultPassphrase();
     const initialBytes = passphrase ? wrapDataKey(key, 1, passphrase) : key;
     try {
@@ -23189,64 +23403,23 @@ var DefaultSecretVault = class {
     return key;
   }
 };
-function decryptConfigSecrets(cfg, vault, opts) {
-  const warn = opts?.warn ?? ((msg) => console.warn(msg));
-  return walk2(cfg, vault, (v, key) => {
-    try {
-      return vault.decrypt(v);
-    } catch (err) {
-      warn(
-        `[secret-vault] Failed to decrypt "${key}": ${err instanceof Error ? err.message : err}`
-      );
-      return "";
-    }
-  });
-}
-function encryptConfigSecrets(cfg, vault, _opts) {
-  return walk2(cfg, vault, (v) => vault.encrypt(v));
-}
-function walk2(node, vault, transform) {
-  if (node === null || node === void 0) return node;
-  if (typeof node !== "object") return node;
-  if (Array.isArray(node)) {
-    return node.map((item) => walk2(item, vault, transform));
-  }
-  const out = /* @__PURE__ */ Object.create(null);
-  for (const [k, v] of Object.entries(node)) {
-    if (typeof v === "string" && isSecretField(k)) {
-      out[k] = transform(v, k);
-    } else if (typeof v === "object" && v !== null) {
-      out[k] = walk2(v, vault, transform);
-    } else {
-      out[k] = v;
-    }
-  }
-  return out;
-}
-var SECRET_KEY_PATTERN = /(?:apikey|api_key|authtoken|auth_token|bearer|secret|password|passwd|pwd|refreshtoken|refresh_token|sessionkey|session_key|access[_-]?token|private[_-]?key)/i;
-var NON_SECRET_OVERRIDES = /* @__PURE__ */ new Set(["publickey", "public_key"]);
-function isSecretField(name) {
-  const lc = name.toLowerCase();
-  if (NON_SECRET_OVERRIDES.has(lc)) return false;
-  return SECRET_KEY_PATTERN.test(lc);
-}
 async function rewriteConfigEncrypted(configPath, vault, patch) {
   let current = {};
   try {
-    const raw = await fsp9.readFile(configPath, "utf8");
+    const raw = await fsp12.readFile(configPath, "utf8");
     current = JSON.parse(raw);
   } catch {
   }
   const merged = deepMerge(current, patch ?? {});
   const encrypted = encryptConfigSecrets(merged, vault);
-  await fsp9.mkdir(path4.dirname(configPath), { recursive: true });
+  await fsp12.mkdir(path23.dirname(configPath), { recursive: true });
   await atomicWrite(configPath, JSON.stringify(encrypted, null, 2), { mode: 384 });
   await restrictFilePermissions(configPath);
 }
 async function migratePlaintextSecrets(configPath, vault, logger) {
   let raw;
   try {
-    raw = await fsp9.readFile(configPath, "utf8");
+    raw = await fsp12.readFile(configPath, "utf8");
   } catch {
     return { migrated: 0, file: configPath };
   }
@@ -23270,8 +23443,8 @@ async function restrictFilePermissions(filePath, opts) {
   const warn = opts?.warn ?? ((msg) => console.warn(msg));
   if (process.platform === "win32") {
     try {
-      const { execFile: execFile2 } = await import('child_process');
-      const { promisify: promisify2 } = await import('util');
+      const { execFile: execFile2 } = await import("node:child_process");
+      const { promisify: promisify2 } = await import("node:util");
       const execFileAsync = promisify2(execFile2);
       const user = windowsAccountName();
       if (!user) {
@@ -23288,7 +23461,7 @@ async function restrictFilePermissions(filePath, opts) {
     }
   } else {
     try {
-      await fsp9.chmod(filePath, 384);
+      await fsp12.chmod(filePath, 384);
     } catch {
     }
   }
@@ -23319,6 +23492,11 @@ function walkCount(node, vault, counter) {
   }
   return out;
 }
+
+// src/storage/attachment-store.ts
+import { randomBytes as randomBytes5 } from "node:crypto";
+import * as fsp13 from "node:fs/promises";
+import * as path24 from "node:path";
 var DEFAULT_SPOOL_THRESHOLD = 256 * 1024;
 var PLACEHOLDER_RE = /\[(pasted|image|file) #(\d+)[^\]]*\]|\[file:([^\]]+)\]/g;
 var DefaultAttachmentStore = class {
@@ -23333,13 +23511,13 @@ var DefaultAttachmentStore = class {
   }
   async add(input) {
     const seq = ++this.nextSeq[input.kind];
-    const id = `${kindPrefix(input.kind)}-${seq}-${randomBytes(3).toString("hex")}`;
+    const id = `${kindPrefix(input.kind)}-${seq}-${randomBytes5(3).toString("hex")}`;
     const bytes = Buffer.byteLength(input.data, input.kind === "image" ? "base64" : "utf8");
     let spooledPath;
     let data = input.data;
     if (this.spoolDir && bytes >= this.spoolThreshold) {
-      await fsp9.mkdir(this.spoolDir, { recursive: true });
-      spooledPath = path4.join(this.spoolDir, `${id}.bin`);
+      await fsp13.mkdir(this.spoolDir, { recursive: true });
+      spooledPath = path24.join(this.spoolDir, `${id}.bin`);
       await atomicWrite(spooledPath, input.data, {
         encoding: input.kind === "image" ? "base64" : "utf8"
       });
@@ -23401,7 +23579,7 @@ var DefaultAttachmentStore = class {
       for (const att of this.items.values()) {
         if (att.path) toDelete.push(att.path);
       }
-      await Promise.all(toDelete.map((p) => fsp9.unlink(p).catch(() => void 0)));
+      await Promise.all(toDelete.map((p) => fsp13.unlink(p).catch(() => void 0)));
     }
     this.items.clear();
     this.refs.length = 0;
@@ -23409,7 +23587,7 @@ var DefaultAttachmentStore = class {
   }
   async toBlock(att) {
     if (att.kind === "image") {
-      const data = att.data ?? (att.path ? await fsp9.readFile(att.path, { encoding: "base64" }) : "");
+      const data = att.data ?? (att.path ? await fsp13.readFile(att.path, { encoding: "base64" }) : "");
       return {
         type: "image",
         source: {
@@ -23419,7 +23597,7 @@ var DefaultAttachmentStore = class {
         }
       };
     }
-    const raw = att.data ?? (att.path ? await fsp9.readFile(att.path, "utf8") : "");
+    const raw = att.data ?? (att.path ? await fsp13.readFile(att.path, "utf8") : "");
     const label = att.meta.filename ? `<file path="${att.meta.filename}">` : "<pasted>";
     const close = att.meta.filename ? "</file>" : "</pasted>";
     return { type: "text", text: `${label}
@@ -23457,6 +23635,10 @@ function mergeAdjacentText(blocks) {
   return out;
 }
 
+// src/storage/config-loader.ts
+import * as fs12 from "node:fs/promises";
+import * as path25 from "node:path";
+
 // src/types/config.ts
 var DEFAULT_TUI_THINKING_WORD = "thinking";
 
@@ -23555,12 +23737,38 @@ var BEHAVIOR_DEFAULTS = {
     tokenSavingMode: "off",
     allowOutsideProjectRoot: true
   },
+  superMemory: {
+    enabled: true,
+    storage: {
+      projectLocal: true,
+      directory: ".wrongstack/memories"
+    },
+    inject: {
+      turnContext: true,
+      toolResults: true,
+      maxHintsPerTool: 4,
+      maxCharsPerTool: 1200,
+      maxTurnMemories: 8,
+      maxCharsPerTurn: 2400,
+      minScore: 0.65,
+      repeatCooldownMs: 30 * 6e4
+    },
+    hygiene: {
+      autoAfterSession: true,
+      autoOnFileChange: true,
+      retentionDays: 90,
+      archiveLowConfidenceAfterDays: 30
+    },
+    embeddings: {
+      enabled: false
+    }
+  },
   skills: { readClaudeSkills: true },
   mcpServers: {},
   fallbackAuto: true,
   maxConcurrent: 4,
-  // YOLO on by default: auto-approve normal project work without a per-call
-  // prompt. Destructive operations still gate through a confirmation. Users
+  // YOLO on by default: auto-approve non-denied tool calls without a per-call
+  // prompt. Users
   // who want the per-call prompts set `yolo: false`. Existing installs whose
   // config lacks this key pick it up via fillMissingDefaults; an explicit
   // `false` is preserved by the deep-merge (opt-out respected).
@@ -23579,8 +23787,8 @@ var BEHAVIOR_DEFAULTS = {
   autonomy: {
     // 'auto' by default: the agent self-drives (picks the top next-step after
     // each turn). This is a startup default, not a runtime flip — the
-    // autoProceedMaxIterations cap + autoProceedDelayMs cooldown + destructive
-    // gate + Ctrl+C / [GOAL_COMPLETE] stops remain in force. Explicit 'off'
+    // autoProceedMaxIterations cap + autoProceedDelayMs cooldown + Ctrl+C /
+    // [GOAL_COMPLETE] stops remain in force. Explicit 'off'
     // in a config file is preserved (opt-out respected).
     defaultMode: "auto",
     autoProceedDelayMs: DEFAULT_AUTONOMY_CONFIG.autoProceedDelayMs,
@@ -23695,6 +23903,7 @@ var IN_PROJECT_ALLOWED_KEYS = /* @__PURE__ */ new Set([
   "context",
   "tools",
   "features",
+  "superMemory",
   "skills",
   "autonomy",
   "indexing",
@@ -23734,6 +23943,10 @@ var KNOWN_DENIED_IN_PROJECT = [
   {
     key: "fleet",
     reason: "Fleet supervision knobs: a repo-committed config could enable autonomous subagent spawning/steering/termination and mailbox traffic on the victim machine."
+  },
+  {
+    key: "git",
+    reason: "Carries git.identity (GIT_AUTHOR_*/GIT_COMMITTER_* injection): a repo-committed config could spoof the author identity written into the victim's commit history (impersonation)."
   }
 ];
 var KNOWN_CONFIG_TOP_LEVEL_KEYS = /* @__PURE__ */ new Set([
@@ -23759,6 +23972,7 @@ var KNOWN_CONFIG_TOP_LEVEL_KEYS = /* @__PURE__ */ new Set([
   "plugins",
   "log",
   "features",
+  "superMemory",
   "skills",
   "yolo",
   "nextPrediction",
@@ -23777,7 +23991,8 @@ var KNOWN_CONFIG_TOP_LEVEL_KEYS = /* @__PURE__ */ new Set([
   "sync",
   "extensions",
   "acp",
-  "fleet"
+  "fleet",
+  "git"
 ]);
 function assertInProjectAllowListComplete() {
   const missingFromBoth = [];
@@ -23870,6 +24085,19 @@ function stripUnsafeInProjectFields(inProject, sourcePath, warn = (msg) => conso
       out["skills"] = clonedSkills;
     }
   }
+  const outSuperMemory = out["superMemory"];
+  if (outSuperMemory && typeof outSuperMemory === "object") {
+    const storage = outSuperMemory["storage"];
+    if (storage && typeof storage === "object" && "directory" in storage) {
+      const clonedStorage = { ...storage };
+      delete clonedStorage["directory"];
+      out["superMemory"] = {
+        ...outSuperMemory,
+        storage: clonedStorage
+      };
+      stripped.push("superMemory.storage.directory");
+    }
+  }
   if (stripped.length > 0) {
     warn(
       JSON.stringify({
@@ -23885,8 +24113,8 @@ function stripUnsafeInProjectFields(inProject, sourcePath, warn = (msg) => conso
   return out;
 }
 function samePath(a, b) {
-  let ra = path4.resolve(a);
-  let rb = path4.resolve(b);
+  let ra = path25.resolve(a);
+  let rb = path25.resolve(b);
   if (process.platform === "win32" || process.platform === "darwin") {
     ra = ra.toLowerCase();
     rb = rb.toLowerCase();
@@ -23988,7 +24216,7 @@ var DefaultConfigLoader = class {
       }
     }
     this.validateBehavior(cfg);
-    if (this.strict) {
+    if (this.strict && !opts.skipIdentityValidation) {
       this.validateIdentity(cfg);
     }
     return Object.freeze(cfg);
@@ -24000,7 +24228,7 @@ var DefaultConfigLoader = class {
       await withFileLock(fp, async () => {
         let parsed;
         try {
-          const raw = await fsp9.readFile(fp, "utf8");
+          const raw = await fs12.readFile(fp, "utf8");
           const result = safeParse(raw);
           if (!result.ok || !isPlainRecord(result.value)) {
             return;
@@ -24119,7 +24347,7 @@ var DefaultConfigLoader = class {
     const fp = this.paths.syncConfig;
     const t0 = Date.now();
     try {
-      const raw = await fsp9.readFile(fp, "utf8");
+      const raw = await fs12.readFile(fp, "utf8");
       const parsed = safeParse(raw);
       if (!parsed.ok || !parsed.value) {
         this.events?.emit("storage.read", {
@@ -24185,7 +24413,7 @@ var DefaultConfigLoader = class {
     const t0 = Date.now();
     let mtimeMs = null;
     try {
-      const stat13 = await fsp9.stat(file);
+      const stat13 = await fs12.stat(file);
       mtimeMs = stat13.mtimeMs;
       const cached = this.jsonCache.get(file);
       if (cached && cached.mtimeMs === mtimeMs) {
@@ -24219,7 +24447,7 @@ var DefaultConfigLoader = class {
     }
     let raw;
     try {
-      raw = await fsp9.readFile(file, "utf8");
+      raw = await fs12.readFile(file, "utf8");
     } catch (err) {
       if (err.code !== "ENOENT") {
         this.events?.emit("storage.read", {
@@ -24458,6 +24686,11 @@ function deepFreeze(obj) {
   return Object.freeze(obj);
 }
 
+// src/storage/memory-backend.ts
+import { randomUUID as randomUUID11 } from "node:crypto";
+import * as fs13 from "node:fs/promises";
+import * as path26 from "node:path";
+
 // src/types/memory.ts
 var MEMORY_TYPE_LABELS = {
   fact: "Fact",
@@ -24623,7 +24856,7 @@ var FileMemoryBackend = class {
   }
   async getMtime(file) {
     try {
-      const stat13 = await fsp9.stat(file);
+      const stat13 = await fs13.stat(file);
       return stat13.mtimeMs;
     } catch {
       return 0;
@@ -24670,13 +24903,13 @@ var FileMemoryBackend = class {
   }
   async remember(scope, entry, filePath) {
     const file = this.resolveFile(filePath, scope);
-    await ensureDir(path4.dirname(file));
+    await ensureDir(path26.dirname(file));
     let existing = "";
     try {
-      existing = await fsp9.readFile(file, "utf8");
+      existing = await fs13.readFile(file, "utf8");
     } catch {
     }
-    const id = `mem_${Date.now()}_${randomUUID().slice(0, 8)}`;
+    const id = `mem_${Date.now()}_${randomUUID11().slice(0, 8)}`;
     const meta = formatMetadata(entry);
     const line = `
 - [${entry.ts}] ${id}${meta} ${entry.text.replace(/\n/g, " ")}
@@ -24691,7 +24924,7 @@ ${line}`;
     return withFileLock(file, async () => {
       let existing;
       try {
-        existing = await fsp9.readFile(file, "utf8");
+        existing = await fs13.readFile(file, "utf8");
       } catch {
         return 0;
       }
@@ -24728,7 +24961,7 @@ ${line}`;
   async readAll(scope, filePath) {
     const file = this.resolveFile(filePath, scope);
     try {
-      return await fsp9.readFile(file, "utf8");
+      return await fs13.readFile(file, "utf8");
     } catch {
       return "";
     }
@@ -24752,7 +24985,7 @@ ${line}`;
     const file = this.resolveFile(filePath, scope);
     let existing;
     try {
-      existing = await fsp9.readFile(file, "utf8");
+      existing = await fs13.readFile(file, "utf8");
     } catch {
       return 0;
     }
@@ -24772,7 +25005,7 @@ ${line}`;
     const next = lines.join("\n");
     const backup = `${file}.bak.${Date.now()}`;
     try {
-      await fsp9.copyFile(file, backup);
+      await fs13.copyFile(file, backup);
       await pruneConsolidateBackups(file);
     } catch {
     }
@@ -24786,14 +25019,14 @@ ${line}`;
   }
 };
 async function pruneConsolidateBackups(file) {
-  const dir = path4.dirname(file);
-  const base = path4.basename(file);
+  const dir = path26.dirname(file);
+  const base = path26.basename(file);
   const prefix = `${base}.bak.`;
-  const backups = (await fsp9.readdir(dir)).filter((name) => name.startsWith(prefix)).sort().reverse();
+  const backups = (await fs13.readdir(dir)).filter((name) => name.startsWith(prefix)).sort().reverse();
   await Promise.all(
     backups.slice(MAX_MEMORY_CONSOLIDATE_BACKUPS).map(async (name) => {
       try {
-        await fsp9.unlink(path4.join(dir, name));
+        await fs13.unlink(path26.join(dir, name));
       } catch {
       }
     })
@@ -25153,6 +25386,10 @@ ${body.trim()}`);
           score += 1;
           reasons.push("preference");
           break;
+        case "reference":
+          break;
+        case "fact":
+          break;
       }
       const ageDays = (now - new Date(entry.ts).getTime()) / (1e3 * 60 * 60 * 24);
       if (ageDays < 1) score += 1;
@@ -25360,7 +25597,7 @@ ${body.trim()}`);
     if (!this.persistBackup || scope === "project-agents") return;
     try {
       const content = await this.backend.readAll(scope, this.files[scope]);
-      const { writeFile: writeFile7, mkdir: mkdir10 } = await import('fs/promises');
+      const { writeFile: writeFile7, mkdir: mkdir10 } = await import("node:fs/promises");
       await mkdir10(this.backupDir, { recursive: true });
       await writeFile7(`${this.backupDir}/${scope}.md`, content, "utf8");
     } catch {
@@ -25377,11 +25614,15 @@ function labelOf(scope) {
       return "User memory";
   }
 }
+
+// src/storage/plan-store.ts
+import * as fsp14 from "node:fs/promises";
+import { randomUUID as randomUUID12 } from "node:crypto";
 async function loadPlan(filePath, events) {
   const t0 = Date.now();
   let raw;
   try {
-    raw = await fsp9.readFile(filePath, "utf8");
+    raw = await fsp14.readFile(filePath, "utf8");
   } catch (err) {
     events?.emit("storage.error", {
       sessionId: "~boot~",
@@ -25470,7 +25711,7 @@ function emptyPlan(sessionId, title) {
 function addPlanItem(plan, title, details) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const item = {
-    id: `plan_${Date.now()}_${randomUUID().slice(0, 6)}`,
+    id: `plan_${Date.now()}_${randomUUID12().slice(0, 6)}`,
     title,
     details,
     status: "open",
@@ -25544,7 +25785,7 @@ function deriveTodosFromPlanItem(plan, idOrIndex, subtasks) {
   if (subtasks && subtasks.length > 0) {
     for (const st of subtasks) {
       todos.push({
-        id: `todo_${Date.now()}_${randomUUID().slice(0, 6)}`,
+        id: `todo_${Date.now()}_${randomUUID12().slice(0, 6)}`,
         content: st,
         status: "pending",
         promotedFromPlan: item.id
@@ -25669,6 +25910,10 @@ ${cat}:`);
   }
   return lines.join("\n");
 }
+
+// src/storage/queue-store.ts
+import * as fsp15 from "node:fs/promises";
+import * as path27 from "node:path";
 var QueueStore = class {
   file;
   // Use `| undefined` (not `?`) so exactOptionalPropertyTypes doesn't
@@ -25676,7 +25921,7 @@ var QueueStore = class {
   events;
   traceId;
   constructor(opts) {
-    this.file = path4.join(opts.dir, "queue.json");
+    this.file = path27.join(opts.dir, "queue.json");
     this.events = opts.events;
     this.traceId = opts.traceId;
   }
@@ -25721,7 +25966,7 @@ var QueueStore = class {
     const t0 = Date.now();
     let raw;
     try {
-      raw = await fsp9.readFile(this.file, "utf8");
+      raw = await fsp15.readFile(this.file, "utf8");
     } catch (err) {
       const code = err.code;
       if (code === "ENOENT") {
@@ -25802,7 +26047,7 @@ var QueueStore = class {
   async clear() {
     const t0 = Date.now();
     try {
-      await fsp9.unlink(this.file);
+      await fsp15.unlink(this.file);
       this.events?.emit("storage.write", {
         sessionId: this.traceId ?? "~boot~",
         store: "queue",
@@ -25840,6 +26085,11 @@ function isPersistedQueueItem(v) {
   const o = v;
   return typeof o["displayText"] === "string" && Array.isArray(o["blocks"]);
 }
+
+// src/storage/recovery-lock.ts
+import * as fsp16 from "node:fs/promises";
+import * as os3 from "node:os";
+import * as path28 from "node:path";
 var LOCK_FILE = "active.json";
 var DEFAULT_MAX_AGE_MS = 24 * 60 * 60 * 1e3;
 var RecoveryLock = class {
@@ -25850,9 +26100,9 @@ var RecoveryLock = class {
   sessionStore;
   probe;
   constructor(opts) {
-    this.file = path4.join(opts.dir, LOCK_FILE);
+    this.file = path28.join(opts.dir, LOCK_FILE);
     this.pid = opts.pid ?? process.pid;
-    this.hostname = opts.hostname ?? os.hostname();
+    this.hostname = opts.hostname ?? os3.hostname();
     this.maxAgeMs = opts.maxAgeMs ?? DEFAULT_MAX_AGE_MS;
     this.sessionStore = opts.sessionStore;
     this.probe = opts.isPidAlive ?? defaultIsPidAlive;
@@ -25911,7 +26161,7 @@ var RecoveryLock = class {
    * null return before calling this.
    */
   async write(sessionId) {
-    await ensureDir(path4.dirname(this.file));
+    await ensureDir(path28.dirname(this.file));
     const lock = {
       v: 1,
       sessionId,
@@ -25920,7 +26170,7 @@ var RecoveryLock = class {
       startedAt: (/* @__PURE__ */ new Date()).toISOString()
     };
     try {
-      await fsp9.writeFile(this.file, JSON.stringify(lock), { flag: "wx", mode: 384 });
+      await fsp16.writeFile(this.file, JSON.stringify(lock), { flag: "wx", mode: 384 });
     } catch (err) {
       const code = err.code;
       if (code === "EEXIST") {
@@ -25936,7 +26186,7 @@ var RecoveryLock = class {
    */
   async clear() {
     try {
-      await fsp9.unlink(this.file);
+      await fsp16.unlink(this.file);
     } catch (err) {
       const code = err.code;
       if (code === "ENOENT") return;
@@ -25946,7 +26196,7 @@ var RecoveryLock = class {
   async readLock() {
     let raw;
     try {
-      raw = await fsp9.readFile(this.file, "utf8");
+      raw = await fsp16.readFile(this.file, "utf8");
     } catch (err) {
       const code = err.code;
       if (code === "ENOENT") return null;
@@ -26196,6 +26446,9 @@ function resolveSessionLoggingConfig(cfg) {
     }
   };
 }
+
+// src/storage/session-reader.ts
+import * as fs14 from "node:fs/promises";
 var DefaultSessionReader = class _DefaultSessionReader {
   store;
   eventCache = /* @__PURE__ */ new Map();
@@ -26213,7 +26466,7 @@ var DefaultSessionReader = class _DefaultSessionReader {
     const sessionPath = sessionScopedPath(rootDir, sessionId, ".jsonl");
     let mtimeMs = null;
     try {
-      const stat13 = await fsp9.stat(sessionPath);
+      const stat13 = await fs14.stat(sessionPath);
       mtimeMs = stat13.mtimeMs;
     } catch {
       this.eventCache.delete(sessionId);
@@ -26533,6 +26786,8 @@ function renderMarkdown(meta, events) {
         lines.push("");
         break;
       }
+      default:
+        break;
     }
   }
   return lines.join("\n");
@@ -26566,15 +26821,20 @@ function renderPlainText(meta, events) {
       case "error":
         lines.push(`[${e.ts}] ERROR (${e.phase}): ${e.message}`);
         break;
+      default:
+        break;
     }
   }
   return lines.join("\n");
 }
+
+// src/storage/todos-checkpoint.ts
+import * as fsp17 from "node:fs/promises";
 async function loadTodosCheckpoint(filePath, events, traceId) {
   const t0 = Date.now();
   let raw;
   try {
-    raw = await fsp9.readFile(filePath, "utf8");
+    raw = await fsp17.readFile(filePath, "utf8");
   } catch (err) {
     events?.emit("storage.error", {
       sessionId: traceId ?? "~boot~",
@@ -26709,7 +26969,185 @@ function attachTodosCheckpoint(state, filePath, sessionId, events, traceId) {
     }
   };
 }
-
-export { AGENTS_BY_PHASE, AGENT_CATALOG, ALL_AGENT_DEFINITIONS, ALL_FLEET_AGENTS, AUDIT_LOG_AGENT, AutoApprovePermissionPolicy, AutoCompactionMiddleware, AutonomousRunner, BUG_HUNTER_AGENT, BudgetExceededError, CODEX_MODELS, ConfigMigrationError, DEFAULT_AUTONOMY_CONFIG, DEFAULT_CONFIG_MIGRATIONS, DEFAULT_CONTEXT_CONFIG, DEFAULT_DIRECTOR_PREAMBLE, DEFAULT_DISPATCH_ROLE, DEFAULT_SUBAGENT_BASELINE, DEFAULT_TOOLS_CONFIG, DefaultAttachmentStore, DefaultConfigLoader, DefaultConfigStore, DefaultDesignKitLoader, DefaultErrorHandler, DefaultHealthRegistry, DefaultLogger, DefaultMemoryStore, DefaultModeStore, DefaultModelsRegistry, DefaultMultiAgentCoordinator, DefaultPermissionPolicy, DefaultPromptLoader, DefaultProviderRunner, DefaultRetryPolicy, DefaultSecretScrubber, DefaultSecretVault, DefaultSessionReader, DefaultSessionStore, DefaultSkillLoader, Director, DirectorStateCheckpoint, DoneConditionChecker, EternalAutonomyEngine, FLEET_ROSTER, FLEET_ROSTER_BUDGETS, FleetBus, FleetSpawnBudgetError, FleetUsageAggregator, HybridCompactor, InMemoryAgentBridge, InMemoryBridgeTransport, InMemoryMetricsSink, IntelligentCompactor, LLMSelector, NULL_FLEET_BUS, NoopMetricsSink, NoopTracer, OTelTracer, PROMETHEUS_CONTENT_TYPE, ParallelEternalEngine, QueueStore, REFACTOR_PLANNER_AGENT, RecoveryLock, SECURITY_SCANNER_AGENT, SelectiveCompactor, SessionAnalyzer, SubagentBudget, ToolExecutor, _resetDesignKitLoaderMemo, _resetDesignRulesCache, activateDesign, addPlanItem, allServers, applyRosterBudget, applyTokenOverrides, attachAutoExtend, attachPlanCheckpoint, attachTodosCheckpoint, awsServer, blockServer, braveSearchServer, buildGoalPreamble, buildOtlpMetricsRequest, buildOtlpTracesRequest, classifyFamily, clearActiveKit, clearPersistedActiveKit, clearPlan, codexModelMeta, colorToHex, composeDirectorPrompt, composeSubagentPrompt, context7Server, contextManagerTool, createContextManagerTool, createDelegateTool, createMessage, createSessionEventBridge, createStrategyCompactor, decryptConfigSecrets, deriveTodosFromPlanItem, describeCatalogModel, designProjectDir, detectFrontendFile, detectFrontendIntent, dispatchAgent, emptyPlan, encryptConfigSecrets, everArtServer, filesystemServer, formatPlan, formatPlanTemplates, getAgentDefinition, getDesignKitLoader, getDesignState, getPlanTemplate, githubServer, googleMapsServer, installDesignStudioMiddleware, isColorToken, listPlanTemplates, loadActiveKit, loadDirectorState, loadPlan, loadProjectDesignRules, loadProjectModes, loadTodosCheckpoint, loadUserModes, makeAgentSubagentRunner, makeAskTool, makeAssignTool, makeAutonomyPromptContributor, makeAwaitTasksTool, makeCollabDebugTool, makeDesignDetectToolCallMiddleware, makeDesignDetectUserInputMiddleware, makeDesignStudioRequestMiddleware, makeDesignVerifyToolCallMiddleware, makeDirectorSessionFactory, makeFleetEmitTool, makeFleetTool, makeLLMClassifier, makeRollUpTool, makeSpawnTool, makeTerminateTool, materializeTokens, migratePlaintextSecrets, miniMaxVisionServer, oklchToHex, parseOklch, playwrightServer, recordKitChoice, recordOverrides, removePlanItem, renderPrometheus, renderPrompt, resolveAuditLevel, resolveBundledDesignKitsDir, resolveProviderModelList, resolveSessionLoggingConfig, rewriteConfigEncrypted, rosterSummaryFromConfigs, runConfigMigrations, runDesignVerify, savePlan, saveTodosCheckpoint, scoreAgents, sentinelServer, setActiveKit, setDesignOverrides, setPlanItemStatus, slackServer, sshManagerServer, startMetricsServer, startOtlpMetricsExporter, startOtlpTraceExporter, verifyFiles, wireMetricsToEvents, zaiVisionServer };
+export {
+  AGENTS_BY_PHASE,
+  AGENT_CATALOG,
+  ALL_AGENT_DEFINITIONS,
+  ALL_FLEET_AGENTS,
+  AUDIT_LOG_AGENT,
+  AutoApprovePermissionPolicy,
+  AutoCompactionMiddleware,
+  AutonomousRunner,
+  BUG_HUNTER_AGENT,
+  BudgetExceededError,
+  CODEX_MODELS,
+  ConfigMigrationError,
+  DEFAULT_AUTONOMY_CONFIG,
+  DEFAULT_CONFIG_MIGRATIONS,
+  DEFAULT_CONTEXT_CONFIG,
+  DEFAULT_DIRECTOR_PREAMBLE,
+  DEFAULT_DISPATCH_ROLE,
+  DEFAULT_SUBAGENT_BASELINE,
+  DEFAULT_TOOLS_CONFIG,
+  DefaultAttachmentStore,
+  DefaultConfigLoader,
+  DefaultConfigStore,
+  DefaultDesignKitLoader,
+  DefaultErrorHandler,
+  DefaultHealthRegistry,
+  DefaultLogger,
+  DefaultMemoryStore,
+  DefaultModeStore,
+  DefaultModelsRegistry,
+  DefaultMultiAgentCoordinator,
+  DefaultPermissionPolicy,
+  DefaultPromptLoader,
+  DefaultProviderRunner,
+  DefaultRetryPolicy,
+  DefaultSecretScrubber,
+  DefaultSecretVault,
+  DefaultSessionReader,
+  DefaultSessionStore,
+  DefaultSkillLoader,
+  Director,
+  DirectorStateCheckpoint,
+  DoneConditionChecker,
+  EternalAutonomyEngine,
+  FLEET_ROSTER,
+  FLEET_ROSTER_BUDGETS,
+  FleetBus,
+  FleetSpawnBudgetError,
+  FleetUsageAggregator,
+  HybridCompactor,
+  InMemoryAgentBridge,
+  InMemoryBridgeTransport,
+  InMemoryMetricsSink,
+  IntelligentCompactor,
+  LLMSelector,
+  NULL_FLEET_BUS,
+  NoopMetricsSink,
+  NoopTracer,
+  OTelTracer,
+  PROMETHEUS_CONTENT_TYPE,
+  ParallelEternalEngine,
+  QueueStore,
+  REFACTOR_PLANNER_AGENT,
+  RecoveryLock,
+  SECURITY_SCANNER_AGENT,
+  SelectiveCompactor,
+  SessionAnalyzer,
+  SubagentBudget,
+  ToolExecutor,
+  _resetDesignKitLoaderMemo,
+  _resetDesignRulesCache,
+  activateDesign,
+  addPlanItem,
+  allServers,
+  applyRosterBudget,
+  applyTokenOverrides,
+  attachAutoExtend,
+  attachPlanCheckpoint,
+  attachTodosCheckpoint,
+  awsServer,
+  blockServer,
+  braveSearchServer,
+  buildGoalPreamble,
+  buildOtlpMetricsRequest,
+  buildOtlpTracesRequest,
+  classifyFamily,
+  clearActiveKit,
+  clearPersistedActiveKit,
+  clearPlan,
+  codexModelMeta,
+  colorToHex,
+  composeDirectorPrompt,
+  composeSubagentPrompt,
+  context7Server,
+  contextManagerTool,
+  createContextManagerTool,
+  createDelegateTool,
+  createMessage,
+  createSessionEventBridge,
+  createStrategyCompactor,
+  decryptConfigSecrets,
+  deriveTodosFromPlanItem,
+  describeCatalogModel,
+  designProjectDir,
+  detectFrontendFile,
+  detectFrontendIntent,
+  dispatchAgent,
+  emptyPlan,
+  encryptConfigSecrets,
+  everArtServer,
+  filesystemServer,
+  formatPlan,
+  formatPlanTemplates,
+  getAgentDefinition,
+  getDesignKitLoader,
+  getDesignState,
+  getPlanTemplate,
+  githubServer,
+  googleMapsServer,
+  installDesignStudioMiddleware,
+  isColorToken,
+  listPlanTemplates,
+  loadActiveKit,
+  loadDirectorState,
+  loadPlan,
+  loadProjectDesignRules,
+  loadProjectModes,
+  loadTodosCheckpoint,
+  loadUserModes,
+  makeAgentSubagentRunner,
+  makeAskTool,
+  makeAssignTool,
+  makeAutonomyPromptContributor,
+  makeAwaitTasksTool,
+  makeCollabDebugTool,
+  makeDesignDetectToolCallMiddleware,
+  makeDesignDetectUserInputMiddleware,
+  makeDesignStudioRequestMiddleware,
+  makeDesignVerifyToolCallMiddleware,
+  makeDirectorSessionFactory,
+  makeFleetEmitTool,
+  makeFleetTool,
+  makeLLMClassifier,
+  makeRollUpTool,
+  makeSpawnTool,
+  makeTerminateTool,
+  materializeTokens,
+  migratePlaintextSecrets,
+  miniMaxVisionServer,
+  oklchToHex,
+  parseOklch,
+  playwrightServer,
+  recordKitChoice,
+  recordOverrides,
+  removePlanItem,
+  renderPrometheus,
+  renderPrompt,
+  resolveAuditLevel,
+  resolveBundledDesignKitsDir,
+  resolveProviderModelList,
+  resolveSessionLoggingConfig,
+  rewriteConfigEncrypted,
+  rosterSummaryFromConfigs,
+  runConfigMigrations,
+  runDesignVerify,
+  savePlan,
+  saveTodosCheckpoint,
+  scoreAgents,
+  sentinelServer,
+  setActiveKit,
+  setDesignOverrides,
+  setPlanItemStatus,
+  slackServer,
+  sshManagerServer,
+  startMetricsServer,
+  startOtlpMetricsExporter,
+  startOtlpTraceExporter,
+  verifyFiles,
+  wireMetricsToEvents,
+  zaiVisionServer
+};
 //# sourceMappingURL=index.js.map
-//# sourceMappingURL=index.js.map