@wrongstack/core 0.297.0 → 0.298.1

package/dist/coordination/agents/index.js

@@ -188,6 +188,113 @@ function resolveWstackPaths(opts) {
 import { existsSync as existsSync4, readFileSync as readFileSync6 } from "node:fs";
 import * as path7 from "node:path";
 
+// src/security/capabilities.ts
+var ToolCapabilities = {
+  /** Can execute arbitrary commands in the user's shell (the `bash` tool). */
+  SHELL_ARBITRARY: "shell.arbitrary",
+  /**
+   * Can execute the `exec` tool's allowlisted commands.
+   *
+   * "Restricted" describes the command NAME check, not the resulting power.
+   * Treat this as equivalent to {@link SHELL_ARBITRARY} when deciding what to
+   * grant: the allowlist includes general-purpose interpreters (`node`,
+   * `python`, `perl`, `ruby`) and, on Windows, the platform shells (`cmd`,
+   * `powershell`, `pwsh`) — deliberately, since without them `exec` cannot run
+   * `dir`/`type`/any cmdlet. `node -e …` or `cmd /c …` therefore reaches
+   * arbitrary execution, and per-argument denylisting cannot close that while
+   * the shells remain (blocking `node -e` still leaves `cmd /c node -e`).
+   *
+   * What actually bounds this is downstream, not the name check: the permission
+   * policy reconstructs the full command line and runs it through the
+   * destructive classifier, so destructive calls still require confirmation.
+   *
+   * Granting `shell.restricted` while withholding `shell.arbitrary` therefore
+   * buys no meaningful reduction in blast radius. Documented rather than
+   * silently implied, because the two read as a narrow/wide pair (WS-083).
+   */
+  SHELL_RESTRICTED: "shell.restricted",
+  /** Can run a restricted project formatter/linter-style command. */
+  SHELL_EXEC: "shell.exec",
+  /** Can read files inside the project (and possibly outside via symlinks if not guarded). */
+  FS_READ: "fs.read",
+  /** Can write / modify / delete files inside the project. */
+  FS_WRITE: "fs.write",
+  /** Can write files outside the current project root (very high risk). */
+  FS_WRITE_OUTSIDE_PROJECT: "fs.write.outside-project",
+  /** Can perform outbound network requests. */
+  NET_OUTBOUND: "net.outbound",
+  /** Can mutate in-memory session todos only. */
+  SESSION_TODO: "session.todo",
+  /** Can mutate in-memory session mode only. */
+  SESSION_MODE: "session.mode",
+  /** Can inspect registered tool metadata. */
+  TOOL_META: "tool.meta",
+  /** Can invoke arbitrary registered tools through a meta-tool. */
+  TOOL_MUTATE_ANY: "tool.mutate.any",
+  /** Can read persistent memory. */
+  MEMORY_READ: "memory.read",
+  /** Can write persistent memory. */
+  MEMORY_WRITE: "memory.write",
+  /** Can delete persistent memory. */
+  MEMORY_DELETE: "memory.delete",
+  /** Proxies tools from external MCP servers (unknown capability). */
+  MCP_PROXY: "mcp.proxy",
+  /** Can spawn or manage subagents / multi-agent tasks. */
+  SUBAGENT_SPAWN: "subagent.spawn",
+  /** Can inspect fleet/subagent coordination state without mutating it. */
+  COORDINATION_FLEET_READ: "coordination.fleet.read",
+  /** Can publish attributed, schema-checked events onto the fleet bus. */
+  COORDINATION_FLEET_EMIT: "coordination.fleet.emit",
+  /** Can submit a task-local structured result to the parent Director. */
+  COORDINATION_RESULT_SUBMIT: "coordination.result.submit",
+  /** Can read or write inter-agent mailbox messages. */
+  COORDINATION_MAIL: "coordination.mail",
+  /** Can schedule, inspect, or cancel in-session cron jobs. */
+  COORDINATION_CRON: "coordination.cron",
+  /** Can mutate global or session configuration / trust state. */
+  CONFIG_MUTATE: "config.mutate",
+  /** Can install packages or run package managers with side effects. */
+  PACKAGE_INSTALL: "package.install"
+};
+var DANGEROUS_FOR_SUBAGENTS = [
+  ToolCapabilities.SHELL_ARBITRARY,
+  ToolCapabilities.SHELL_RESTRICTED,
+  ToolCapabilities.SHELL_EXEC,
+  ToolCapabilities.FS_WRITE,
+  ToolCapabilities.FS_WRITE_OUTSIDE_PROJECT,
+  ToolCapabilities.TOOL_MUTATE_ANY,
+  ToolCapabilities.MEMORY_WRITE,
+  ToolCapabilities.MEMORY_DELETE,
+  ToolCapabilities.MCP_PROXY,
+  ToolCapabilities.SUBAGENT_SPAWN,
+  ToolCapabilities.CONFIG_MUTATE,
+  ToolCapabilities.PACKAGE_INSTALL
+];
+var WIDE_SUBAGENT_CAPABILITIES = [
+  ToolCapabilities.FS_READ,
+  ToolCapabilities.FS_WRITE,
+  ToolCapabilities.NET_OUTBOUND,
+  ToolCapabilities.SESSION_TODO,
+  ToolCapabilities.TOOL_META,
+  ToolCapabilities.MEMORY_READ,
+  ToolCapabilities.SHELL_ARBITRARY,
+  ToolCapabilities.SHELL_RESTRICTED,
+  ToolCapabilities.SHELL_EXEC,
+  ToolCapabilities.PACKAGE_INSTALL,
+  // Read-only fleet visibility (fleet_status) — peer awareness has no blast
+  // radius and every fleet worker should coordinate around its peers.
+  ToolCapabilities.COORDINATION_FLEET_READ,
+  ToolCapabilities.COORDINATION_RESULT_SUBMIT
+];
+function clampSubagentCapabilities(requested, ceiling = WIDE_SUBAGENT_CAPABILITIES) {
+  const ceilingSet = new Set(ceiling);
+  const requestedSet = new Set(requested);
+  return {
+    granted: ceiling.filter((capability) => requestedSet.has(capability)),
+    dropped: [...requestedSet].filter((capability) => !ceilingSet.has(capability))
+  };
+}
+
 // src/coordination/agents/project-agent-config-validation.ts
 import * as path2 from "node:path";
 var PROJECT_AGENT_CONFIG_KEYS = /* @__PURE__ */ new Set([
@@ -1261,7 +1368,8 @@ function applyProjectAgentConfig(base, projectConfig, options = {}) {
     };
   }
   if (projectConfig.allowedCapabilities !== void 0) {
-    result.allowedCapabilities = options.protectSystemRole ? base.allowedCapabilities === void 0 ? void 0 : [.../* @__PURE__ */ new Set([...base.allowedCapabilities, ...projectConfig.allowedCapabilities])] : [...projectConfig.allowedCapabilities];
+    const merged = options.protectSystemRole ? base.allowedCapabilities === void 0 ? void 0 : [.../* @__PURE__ */ new Set([...base.allowedCapabilities, ...projectConfig.allowedCapabilities])] : [...projectConfig.allowedCapabilities];
+    result.allowedCapabilities = merged === void 0 ? void 0 : clampSubagentCapabilities(merged).granted;
   }
   if (projectConfig.budget) {
     if (projectConfig.budget.timeoutMs !== void 0)
@@ -4319,6 +4427,32 @@ var WAVE4_ROLE_METAS = {
 var WAVE4_ROLES = new Set(Object.keys(WAVE4_ROLE_METAS));
 
 // src/coordination/agents/role-skills.ts
+var BUNDLED_AGENT_SKILLS = [
+  "api-design",
+  "audit-log",
+  "bug-hunter",
+  "chimera",
+  "data-governance",
+  "docker-deploy",
+  "git-flow",
+  "mnemosyne",
+  "multi-agent",
+  "node-modern",
+  "observability",
+  "output-standards",
+  "plugin-author",
+  "prompt-engineering",
+  "react-modern",
+  "refactor-planner",
+  "research-web",
+  "sdd",
+  "security-scanner",
+  "skill-creator",
+  "tech-stack",
+  "testing",
+  "typescript-strict",
+  "wrongstack-mailbox"
+];
 var skillSet = (...names) => names;
 var ROLE_SKILL_SETS = {
   explore: skillSet("research-web", "node-modern", "typescript-strict"),
@@ -4635,6 +4769,7 @@ export {
   AGENT_CATALOG,
   ALL_AGENT_DEFINITIONS,
   BUILD_AGENTS,
+  BUNDLED_AGENT_SKILLS,
   CAPTURE_COOLDOWN_MS,
   CAPTURE_MAX_PER_SESSION,
   DELIVERY_AGENTS,

package/dist/coordination/agents/role-skills.d.ts

@@ -4,8 +4,10 @@ import type { AgentDefinition } from './types.js';
  *
  * Keeping this list explicit makes role assignments auditable and prevents a
  * typo from silently degrading a worker into its persona-only fallback.
+ * Exported so an integrity test can assert every name resolves to a real
+ * bundled skill (see tests/coordination/role-skills.test.ts).
  */
-declare const BUNDLED_AGENT_SKILLS: readonly ['api-design', 'audit-log', 'bug-hunter', 'chimera', 'data-governance', 'docker-deploy', 'git-flow', 'mnemosyne', 'multi-agent', 'node-modern', 'observability', 'output-standards', 'plugin-author', 'prompt-engineering', 'react-modern', 'refactor-planner', 'research-web', 'sdd', 'security-scanner', 'skill-creator', 'tech-stack', 'testing', 'typescript-strict', 'wrongstack-mailbox'];
+export declare const BUNDLED_AGENT_SKILLS: readonly ['api-design', 'audit-log', 'bug-hunter', 'chimera', 'data-governance', 'docker-deploy', 'git-flow', 'mnemosyne', 'multi-agent', 'node-modern', 'observability', 'output-standards', 'plugin-author', 'prompt-engineering', 'react-modern', 'refactor-planner', 'research-web', 'sdd', 'security-scanner', 'skill-creator', 'tech-stack', 'testing', 'typescript-strict', 'wrongstack-mailbox'];
 export type BundledAgentSkill = (typeof BUNDLED_AGENT_SKILLS)[number];
 /**
  * Curated cross-disciplinary skill sets for every catalog role.
@@ -97,5 +99,4 @@ export type CatalogRoleWithSkills = keyof typeof ROLE_SKILL_SETS;
 export declare const SHADOW_AGENT_SKILLS: ("api-design" | "audit-log" | "bug-hunter" | "chimera" | "data-governance" | "docker-deploy" | "git-flow" | "mnemosyne" | "multi-agent" | "node-modern" | "observability" | "output-standards" | "plugin-author" | "prompt-engineering" | "react-modern" | "refactor-planner" | "research-web" | "sdd" | "security-scanner" | "skill-creator" | "tech-stack" | "testing" | "typescript-strict" | "wrongstack-mailbox")[];
 /** Attach a fresh skill-name array so catalog templates remain mutation-safe. */
 export declare function assignSkillsToAgents(definitions: readonly AgentDefinition[]): AgentDefinition[];
-export {};
 //# sourceMappingURL=role-skills.d.ts.map

package/dist/coordination/brain-trace.d.ts

@@ -25,7 +25,8 @@
  * Trace is DISABLED by default. Enabling it is the opt-in; `content: 'full'`
  * is then the default because a fixture without the question and context
  * cannot be replayed. `content: 'redacted'` keeps the shape and metadata but
- * truncates free text, and `'none'` records metadata only. See
+ * scrubs credentials out of free text and truncates it, and `'none'` records
+ * metadata only. See
  * `docs/competitive-roadmap-2026-2027/21-brain-evaluation-and-replay.md`.
  *
  * @module brain-trace

package/dist/coordination/director/director-task-registry.d.ts

@@ -45,6 +45,18 @@ export declare class DirectorTaskRegistry {
     descriptionFor(taskId: string, fallback: string): string;
     ownerFor(taskId: string): string | undefined;
     removeTasks(taskIds: readonly string[]): void;
+    /**
+     * Remove every task owned by `subagentId` from the descriptions/owners
+     * indexes and return the removed task ids. Director.remove() calls this so
+     * per-task state is reclaimed on the default FleetManager path too, where
+     * the Director's manifestEntries map is never populated (fleet-spawn.ts:289
+     * fills it only when !host.fleetManager) and the manifest-gated removeTasks
+     * call would otherwise be skipped — leaking one description (a full task
+     * brief, KB-scale) plus one owner entry per assigned task for the Director's
+     * lifetime. The owners index is populated on every path (assign/retarget),
+     * so this works with or without a FleetManager. Idempotent with removeTasks.
+     */
+    removeTasksOwnedBy(subagentId: string): string[];
     resolveWaitersOnShutdown(): void;
     /** A task the registry could still settle: completed, currently assigned, or internal. */
     private isKnownTask;

package/dist/coordination/fleet-supervisor.d.ts

@@ -125,6 +125,27 @@ export declare class FleetSupervisor {
     /** Idempotent; also re-arms after a stop() so `/supervisor on` works. */
     start(): void;
     stop(): void;
+    /**
+     * Drop per-subagent observation/rate-limit state when a worker is removed
+     * (wired to the coordinator's `subagent.removed` event in start()). Without
+     * this, lastActivityAt / failStreaks / interventionsBySubagent and the
+     * subagent-keyed lastEngagedAt entries accumulate one entry per distinct
+     * retired subagent for the supervisor's lifetime.
+     *
+     * lastEngagedAt is keyed `${kind}|${subject}` where subject may be a
+     * subagentId or a taskId; only the subagent-keyed entries are pruned here.
+     * The `|${subagentId}` suffix match cannot collide with a task-keyed entry
+     * because neither subagent ids nor task ids contain '|', so a task subject
+     * can never end with `|${subagentId}`.
+     *
+     * retargetedTasks is deliberately NOT pruned: it is keyed by taskId and is
+     * the supervisor's "never bounced twice" guard (the overload retarget path
+     * skips any task already in this set). Retargets are rare and each entry is
+     * a tiny task-id string, so the set is bounded by the count of distinct
+     * tasks ever retargeted — retained by design, consistent with prior
+     * leak-audit rulings on tiny rare-event collections.
+     */
+    private forgetSubagent;
     history(): readonly SupervisorLogEntry[];
     /** True while the evaluation loop is armed. */
     isRunning(): boolean;

package/dist/coordination/index.d.ts

@@ -1,14 +1,14 @@
 export { createMessage, InMemoryAgentBridge, InMemoryBridgeTransport, } from './agent-bridge.js';
-export { assignNickname } from './subagent-nicknames.js';
 export { type AgentFactory, type AgentFactoryResult, type AgentRunnerOptions, makeAgentSubagentRunner, withDisabledToolFiltering, } from './agent-subagent-runner.js';
-export { AGENT_CATALOG, AGENTS_BY_PHASE, type AgentBudgetTier, type AgentCapability, type AgentDefinition, type AgentPhase, ALL_AGENT_DEFINITIONS, BUILD_AGENTS, DELIVERY_AGENTS, DISCOVERY_AGENTS, DOMAIN_AGENTS, getAgentDefinition, HEAVY_BUDGET, KNOWLEDGE_AGENTS, LIGHT_BUDGET, MEDIUM_BUDGET, META_AGENTS, PLANNING_AGENTS, REVIEW_AGENTS, VERIFY_AGENTS, applyProjectAgentConfig, buildProjectContextualizedPrompt, canCaptureNewLearned, CAPTURE_COOLDOWN_MS, CAPTURE_MAX_PER_SESSION, captureLearnedFromAgentOutput, captureLearnedFromAgentOutputDetailed, createProjectAgent, createProjectAgentRoster, detectLearnedConflicts, getProjectAgentLearnStats, hintLearnedNeedsSummarization, LEARNED_SOFT_LIMIT, LEARNED_HARD_LIMIT, loadProjectAgentConsolidated, loadConsolidationMetadata, isConsolidated, saveProjectAgentConsolidated, clearProjectAgentConsolidated, buildConsolidationInstruction, listProjectAgentRoles, listProjectAgentLearnedEntries, loadProjectAgentConfig, loadProjectAgentIdentity, loadProjectAgentLearned, loadProjectAgentLearningPolicy, loadProjectAgentProfile, loadRoleKnowledgeManifest, resetProjectAgentIdentity, refreshProjectAgentIdentity, updateProjectAgentLearned, updateProjectAgentIdentity, updateProjectAgentConfig, updateProjectAgentKnowledge, updateProjectAgentLearningPolicy, assertProjectAgentRole, slugifyProjectAgentRole, validateProjectAgentConfig, type LearnedCaptureResult, type ProjectAgentConfig, type ProjectAgentProfile, type CreateProjectAgentInput, type ProjectAgentLearningPolicy, type ConsolidationMetadata, type RoleKnowledgeManifest, } from './agents/index.js';
+export { AGENT_CATALOG, AGENTS_BY_PHASE, type AgentBudgetTier, type AgentCapability, type AgentDefinition, type AgentPhase, ALL_AGENT_DEFINITIONS, applyProjectAgentConfig, assertProjectAgentRole, BUILD_AGENTS, buildConsolidationInstruction, buildProjectContextualizedPrompt, CAPTURE_COOLDOWN_MS, CAPTURE_MAX_PER_SESSION, type ConsolidationMetadata, type CreateProjectAgentInput, canCaptureNewLearned, captureLearnedFromAgentOutput, captureLearnedFromAgentOutputDetailed, clearProjectAgentConsolidated, createProjectAgent, createProjectAgentRoster, DELIVERY_AGENTS, DISCOVERY_AGENTS, DOMAIN_AGENTS, detectLearnedConflicts, getAgentDefinition, getProjectAgentLearnStats, HEAVY_BUDGET, hintLearnedNeedsSummarization, isConsolidated, KNOWLEDGE_AGENTS, LEARNED_HARD_LIMIT, LEARNED_SOFT_LIMIT, type LearnedCaptureResult, LIGHT_BUDGET, listProjectAgentLearnedEntries, listProjectAgentRoles, loadConsolidationMetadata, loadProjectAgentConfig, loadProjectAgentConsolidated, loadProjectAgentIdentity, loadProjectAgentLearned, loadProjectAgentLearningPolicy, loadProjectAgentProfile, loadRoleKnowledgeManifest, MEDIUM_BUDGET, META_AGENTS, PLANNING_AGENTS, type ProjectAgentConfig, type ProjectAgentLearningPolicy, type ProjectAgentProfile, REVIEW_AGENTS, type RoleKnowledgeManifest, refreshProjectAgentIdentity, resetProjectAgentIdentity, saveProjectAgentConsolidated, slugifyProjectAgentRole, updateProjectAgentConfig, updateProjectAgentIdentity, updateProjectAgentKnowledge, updateProjectAgentLearned, updateProjectAgentLearningPolicy, VERIFY_AGENTS, validateProjectAgentConfig, } from './agents/index.js';
 export { type AutoExtendCeiling, type AutoExtendPolicy, attachAutoExtend, } from './auto-extend.js';
-export { type BrainArbiter, type BrainDecision, type BrainDecisionOption, BrainDecisionQueue, type BrainDecisionRequest, type BrainDecisionSource, type BrainFallback, type BrainRisk, type BrainEscalationMode, DefaultBrainArbiter, type DefaultBrainArbiterOptions, EscalationRoutingBrainArbiter, formatHumanPrompt, HumanEscalatingBrainArbiter, ObservableBrainArbiter, terminalPolicyDecision, } from './brain.js';
-export { brainDecisionKey, BrainDecisionLedger, type BrainDecisionLedgerOptions, type BrainLedgerEntry, createLedgerGuardBrainArbiter, type LedgerGuardBrainArbiterOptions, } from './brain-ledger.js';
+export { type BrainArbiter, type BrainDecision, type BrainDecisionOption, BrainDecisionQueue, type BrainDecisionRequest, type BrainDecisionSource, type BrainEscalationMode, type BrainFallback, type BrainRisk, DefaultBrainArbiter, type DefaultBrainArbiterOptions, EscalationRoutingBrainArbiter, formatHumanPrompt, HumanEscalatingBrainArbiter, ObservableBrainArbiter, terminalPolicyDecision, } from './brain.js';
+export { BrainDecisionLedger, type BrainDecisionLedgerOptions, type BrainLedgerEntry, brainDecisionKey, createLedgerGuardBrainArbiter, type LedgerGuardBrainArbiterOptions, } from './brain-ledger.js';
 export { type BrainInterventionInput, BrainMonitor, type BrainMonitorOptions, } from './brain-monitor.js';
+export { BrainTraceRecorder, type BrainTraceRecorderOptions } from './brain-trace.js';
 export { type BugFinding, type CollabBudgetConfig, type CollabBudgetOverrides, type CollabBudgetWarningPayload, type CollabDebugReport, CollabSession, type CollabSessionOptions, type CriticConcern, type CriticEvaluation, type DirectorAlert, DirectorAlertLevel, type DirectorCancelCollabPayload, type RefactorPhase, type RefactorPlan, type SharedFileEntry, type SharedFileSnapshot, } from './collab-debug.js';
-export { type CreateDelegateToolOptions, createDelegateTool, type DelegateHost, } from './delegate-tool.js';
 export { assessCommitSafety, type CommitSafetyOptions, type CommitSafetyReport, } from './commit-safety.js';
+export { type CreateDelegateToolOptions, createDelegateTool, type DelegateHost, } from './delegate-tool.js';
 export { DEPENDENCY_FILE_PATTERNS, type DependencyWatcherConfig, type DepWatchEntry, makeDependencyWatcherConfig, } from './dep-watcher.js';
 export { attachDepWatcherBridge, type DepWatcherBridgeOptions, } from './dep-watcher-bridge.js';
 export { Director, FleetCostCapError, FleetSpawnBudgetError, FleetTokenCapError, type TaskResultNotification, } from './director.js';
@@ -16,42 +16,42 @@ export { composeDirectorPrompt, composeSubagentPrompt, DEFAULT_DIRECTOR_PREAMBLE
 export { type DirectorSessionFactory, type DirectorSessionFactoryOptions, makeDirectorSessionFactory, } from './director-session.js';
 export { makeAskResultTool, makeAskTool, makeAssignTool, makeAwaitTasksTool, makeCollabDebugTool, makeFleetEmitTool, makeFleetTool, makeKanbanQueueTool, makeQualityGateTool, makeRollUpTool, makeSpawnTool, makeTerminateAllTool, makeTerminateTool, makeWorkCompleteTool, } from './director-tools.js';
 export { DEFAULT_DISPATCH_ROLE, type DispatchCandidate, type DispatchClassifier, type DispatchMethod, type DispatchOptions, type DispatchResult, dispatchAgent, makeLLMClassifier, scoreAgents, } from './dispatcher.js';
+export { type FileAuthorTrackerOptions, recordFileAction } from './file-author-tracker.js';
 export { ACP_AGENTS, ALL_FLEET_AGENTS, AUDIT_LOG_AGENT, applyRosterBudget, BUG_HUNTER_AGENT, FLEET_ROSTER, FLEET_ROSTER_BUDGETS, FLEET_ROSTER_WITHACP, type FleetRosterBudget, GENERIC_AGENT, REFACTOR_PLANNER_AGENT, SECURITY_SCANNER_AGENT, } from './fleet.js';
 export { FleetBus, type FleetEvent, type FleetHandler, type FleetUsage, FleetUsageAggregator, type SubagentUsageSnapshot, } from './fleet-bus.js';
 export { FleetManager, type FleetManagerOptions, } from './fleet-manager.js';
 export { type FleetStatusToolOptions, makeFleetStatusTool } from './fleet-status-tool.js';
 export { FleetSupervisor, type FleetSupervisorActions, type FleetSupervisorConfig, type FleetSupervisorOptions, type FleetSupervisorSource, type SupervisedSubagent, type SupervisorLogEntry, } from './fleet-supervisor.js';
-export { DEFAULT_MAX_FLEET_SPAWNS, HARD_MAX_SPAWN_DEPTH, resolveMaxSpawnDepth, } from './spawn-budget.js';
 export { resolveProjectDir } from './global-mailbox-paths.js';
-export type { MailboxCredentialVerifier } from './mailbox-credential-store.js';
-export { createProjectMailbox, getSharedProjectMailbox, type ProjectMailboxOptions, RemoteMailbox, } from './remote-mailbox.js';
-export { RemoteMailboxCredentialStore } from './remote-mailbox-credential-store.js';
-export { isMailboxProjectServerAvailable, MailboxProjectServerConnection, type MailboxProjectServerConnectionState, } from './mailbox-project-server-client.js';
-export type { MailboxProjectServerInfo, MailboxProjectServerStatus, } from './mailbox-project-server-protocol.js';
-export { MailboxEventEmitter } from './mailbox-events.js';
-export { BrainTraceRecorder, type BrainTraceRecorderOptions } from './brain-trace.js';
-export { type FileAuthorTrackerOptions, recordFileAction } from './file-author-tracker.js';
-export { startTechStackConsumer, type TechStackConsumerOptions, } from './techstack-mailbox-consumer.js';
-export { authorizeMailboxBearerToken, authorizePersistedMailboxCredential, createMailboxHttpRouter, MAILBOX_HTTP_DEFAULT_MAX_AGE_MS, MAILBOX_HTTP_MAX_AGE_CEILING_MS, MAILBOX_HTTP_MAX_BODY_BYTES, MAILBOX_HTTP_RATE_LIMIT_PER_MINUTE, MAILBOX_HTTP_RATE_LIMIT_WINDOW_MS, MailboxHttpRateLimiter, type MailboxHttpAccessDecision, type MailboxHttpRouter, type MailboxHttpRouterOptions, } from './mailbox-http-router.js';
 export type { ICoordinator } from './icoordinator.js';
 export type { IFleetManager } from './ifleet-manager.js';
 export { LargeAnswerStore } from './large-answer-store.js';
-export { formatSubagentStructuredReport, MAX_SUBAGENT_STRUCTURED_REPORT_CHARS, makeSubagentResultTool, normalizeSubagentStructuredReport, readSubagentStructuredReport, SUBAGENT_STRUCTURED_REPORT_META_KEY, } from './subagent-result-tool.js';
 export { type MailToolsOptions, makeMailInboxTool, makeMailSendTool } from './mail-tools.js';
 export type { MailboxActionInput, MailboxActionResult, MailboxMessageAction, } from './mailbox-actions.js';
 export { actionToAckInput } from './mailbox-actions.js';
+export { parseMailboxAckInput, parseMailboxQueryInput, parseMailboxSendInput, } from './mailbox-codecs.js';
+export type { MailboxCredentialVerifier, RedactedMailboxCredential, } from './mailbox-credential-store.js';
+export { redactMailboxCredential } from './mailbox-credential-store.js';
+export { CREDENTIAL_VERIFY_COOLDOWN_MS, CREDENTIAL_VERIFY_MAX_FAILURES, CREDENTIAL_VERIFY_WINDOW_MS, CredentialVerifyThrottle, credentialVerifyThrottle, } from './mailbox-credential-throttle.js';
+export { MailboxEventEmitter } from './mailbox-events.js';
 export { buildDownAlert, buildRecoveryAlert, type DownAlertInput, MAILBOX_HEALTH_DEFAULT_FAILURE_THRESHOLD, MAILBOX_HEALTH_DEFAULT_FROM, MAILBOX_HEALTH_DEFAULT_INTERVAL_MS, MAILBOX_HEALTH_DEFAULT_TIMEOUT_MS, type MailboxHealthEvent, MailboxHealthWatchdog, type MailboxHealthWatchdogOptions, type RecoveryAlertInput, validateWatchdogOptions, type WatchdogConfig, } from './mailbox-health.js';
 export { createMailboxHooks, type MailboxHooksOptions, } from './mailbox-hooks.js';
+export { authorizeMailboxBearerToken, authorizePersistedMailboxCredential, createMailboxHttpRouter, MAILBOX_HTTP_DEFAULT_MAX_AGE_MS, MAILBOX_HTTP_MAX_AGE_CEILING_MS, MAILBOX_HTTP_MAX_BODY_BYTES, MAILBOX_HTTP_RATE_LIMIT_PER_MINUTE, MAILBOX_HTTP_RATE_LIMIT_WINDOW_MS, type MailboxHttpAccessDecision, MailboxHttpRateLimiter, type MailboxHttpRouter, type MailboxHttpRouterOptions, } from './mailbox-http-router.js';
+export { isMailboxProjectServerAvailable, MailboxProjectServerConnection, type MailboxProjectServerConnectionState, } from './mailbox-project-server-client.js';
+export type { MailboxProjectServerInfo, MailboxProjectServerStatus, } from './mailbox-project-server-protocol.js';
 export { applyMailboxSendPolicy, type MailboxResolver, type MailboxToolOptions, mailboxSessionTag, makeMailboxTool, resolveMailboxIdentity, } from './mailbox-tool.js';
 export type { AgentHeartbeatInput, AgentRegistrationInput, ClientHeartbeatInput, ClientRegistrationInput, ClientSource, ClientStatus, Mailbox, MailboxAckBatchInput, MailboxAckInput, MailboxAgentStatus, MailboxAudience, MailboxMessage, MailboxMessageProjection, MailboxMessageType, MailboxQuery, MailboxRecipientState, MailboxSendInput, MailboxTaskContext, PurgeOptions, PurgeResult, ReadReceipts, RegisteredAgent, } from './mailbox-types.js';
 export { isMailboxLeader, isMailboxMessageVisibleTo, MAILBOX_TYPE_PROPERTIES, mailboxIdentityBase, normalizeRecipient, SESSION_RECIPIENT_PREFIX, sessionRecipient, } from './mailbox-types.js';
-export { parseMailboxAckInput, parseMailboxQueryInput, parseMailboxSendInput, } from './mailbox-codecs.js';
 export { isValidMatrixKey, MATRIX_PHASE_KEYS, type MatrixKeyKind, type ModelMatrixResolution, type ModelMatrixResolutionSource, type ModelReference, matrixKeyKind, phaseForRole, type ResolvedModelTarget, type ResolvedSubagentModelTarget, resolveImplementationModelTarget, resolveModelMatrix, resolveModelMatrixResolution, resolveModelTargetFromEntry, resolveSubagentModelTarget, roleNeedsIndependentReviewModel, sameModelReference, } from './model-matrix.js';
 export { DefaultMultiAgentCoordinator, type MultiAgentCoordinatorOptions, } from './multi-agent-coordinator.js';
 export { NULL_FLEET_BUS } from './null-fleet-bus.js';
 export { detectEcosystem, getFullPackageLog, getManifestPackages, getPackageAuthor, getPackagesByAgent, type PackageAuthorEntry, type PackageAuthorLog, type PackageAuthorTrackerOptions, recordPackageAction, updatePackageOutdatedStatus, } from './package-author-tracker.js';
 export { type OutdatedNotifyMessage, type PackageOutdatedEntry, type PackageOutdatedResult, type PackageOutdatedWatcherOptions, startPackageOutdatedWatcher, } from './package-outdated-watcher.js';
+export { type ErrorHistoryEntry, type ProviderModelState, type ProviderModelStatus, ProviderModelStatusTracker, type ProviderStatusSnapshot, type ProviderStatusTrackerConfig, } from './provider-status-tracker.js';
+export { createProjectMailbox, getSharedProjectMailbox, type ProjectMailboxOptions, RemoteMailbox, } from './remote-mailbox.js';
+export { RemoteMailboxCredentialStore } from './remote-mailbox-credential-store.js';
 export { type AcquireOptions, type AcquireResult, acquireOrJoin, finalize, type LiveLockResult, MAILBOX_BRIDGE_LOCK_FILENAME, MAILBOX_BRIDGE_TOKEN_FILENAME, type MailboxBridgeLock, readLiveLock, release, } from './single-instance-mailbox.js';
+export { DEFAULT_MAX_FLEET_SPAWNS, HARD_MAX_SPAWN_DEPTH, resolveMaxSpawnDepth, } from './spawn-budget.js';
 export type { BudgetKind, BudgetLimits, BudgetNegotiationMode, BudgetThresholdDecision, BudgetThresholdHandler, BudgetUsage, } from './subagent-budget.js';
 export { BudgetExceededError, BudgetThresholdSignal, 
 /** 60 000 ms — hard safety net for budget negotiation decisions. Both the
@@ -64,8 +64,11 @@ DECISION_TIMEOUT_MS, SubagentBudget,
  * `coordination/subagent-budget.ts`. Re-exported here so all budget symbols
  * are accessible from one import path. */
 TIMEOUT_PREEMPT_FRACTION, } from './subagent-budget.js';
+export { assignNickname } from './subagent-nicknames.js';
+export { formatSubagentStructuredReport, MAX_SUBAGENT_STRUCTURED_REPORT_CHARS, makeSubagentResultTool, normalizeSubagentStructuredReport, readSubagentStructuredReport, SUBAGENT_STRUCTURED_REPORT_META_KEY, } from './subagent-result-tool.js';
+export { startTechStackConsumer, type TechStackConsumerOptions, } from './techstack-mailbox-consumer.js';
 export { type FleetWorktreePolicy, resolveSubagentWorktreeDecision, subagentNeedsWorktree, WorktreeIntegrationError, type WorktreeIsolationDecision, type WorktreeTaskRunnerOptions, type WorktreeTaskStateUpdate, wrapSubagentRunnerWithWorktrees, } from './worktree-task-runner.js';
-export { ProviderModelStatusTracker, type ErrorHistoryEntry, type ProviderModelState, type ProviderModelStatus, type ProviderStatusSnapshot, type ProviderStatusTrackerConfig, } from './provider-status-tracker.js';
+export { collabInjectMiddleware, collabPauseMiddleware, } from '../middleware/collab-pause.js';
 export { AdaptiveConcurrencyController, type AdaptiveConcurrencyState, } from './adaptive-concurrency.js';
 /** Agent Monitor — virtual chat history, timeline streaming, HQ bridge */
 export { type AgentMonitorOptions, AgentMonitorService, type AgentTimelineEntry, type AgentVirtualSession, createAgentMonitorService, } from './agent-monitor.js';
@@ -77,6 +80,7 @@ export type { AutonomousCoordinatorOptions, CoordinatorEvent, CoordinatorStats,
 export { AutonomousCoordinator } from './autonomous-coordinator.js';
 /** Change manager — autonomous code change lifecycle */
 export { type ApplyResult, type ChangeFile, ChangeManager, type ChangeManagerOptions, type ChangeProposal, DEFAULT_QUALITY_CHECKS, type QualityGateChecks, type RollbackResult, } from './change-manager.js';
+export { type CollabBusState, CollaborationBus, type ConsumedInjectionInfo, } from './collab-bus.js';
 export type { ConsensusOptions, ConsensusResult, QuorumRule, VoterConfig, } from './consensus-protocol.js';
 /** Consensus protocol — agent voting on proposed changes */
 export { ConsensusProtocol } from './consensus-protocol.js';
@@ -89,6 +93,4 @@ export { TaskAuctioneer } from './task-auctioneer.js';
 export type { DAGEdgeEvent, DAGEdgeHandler, DAGNode, DAGNodeStatus, RunnablesHandler, } from './task-dag.js';
 /** Task DAG — dependency graph with fork/join semantics */
 export { TaskDAG } from './task-dag.js';
-export { CollaborationBus, type CollabBusState, type ConsumedInjectionInfo, } from './collab-bus.js';
-export { collabInjectMiddleware, collabPauseMiddleware, } from '../middleware/collab-pause.js';
 //# sourceMappingURL=index.d.ts.map