@wrongstack/core 0.298.3 → 0.300.0

package/dist/tools/index.js

@@ -46,6 +46,9 @@ var BUILTIN_COUNCIL_PERSONAS = Object.freeze([
     tags: ["users", "usability", "accessibility"]
   })
 ]);
+var BUILTIN_COUNCIL_PERSONA_IDS = Object.freeze(
+  BUILTIN_COUNCIL_PERSONAS.map((persona) => persona.id)
+);
 var CouncilPersonaRegistry = class _CouncilPersonaRegistry {
   byId;
   constructor(personas = []) {
@@ -469,22 +472,29 @@ function buildCouncilJudgeUserPrompt(question, votes, opts = {}) {
     "</council-ballots>"
   ].filter(Boolean).join("\n\n");
 }
-function normalizeOptions(options) {
-  if (!options) return [];
+function validateCouncilOptions(options) {
+  const errors = [];
   const seen = /* @__PURE__ */ new Set();
-  return options.map((option) => {
+  for (const option of options ?? []) {
     const id = option.id.trim();
-    const label = option.label.trim();
-    if (!id) throw new Error("buildCouncilQuestionPrompt: option id must not be empty.");
-    if (!label) throw new Error(`buildCouncilQuestionPrompt: option "${id}" needs a label.`);
-    if (seen.has(id)) throw new Error(`buildCouncilQuestionPrompt: duplicate option id "${id}".`);
+    if (!id) errors.push("Every option must have a non-empty `id`.");
+    if (!option.label.trim()) errors.push(`Option "${id || "<empty>"}" must have a label.`);
+    if (seen.has(id)) errors.push(`Duplicate option id "${id}".`);
     seen.add(id);
-    return {
-      id,
-      label,
-      ...option.consequence?.trim() ? { consequence: option.consequence.trim() } : {}
-    };
-  });
+  }
+  return errors;
+}
+function normalizeOptions(options) {
+  if (!options) return [];
+  const errors = validateCouncilOptions(options);
+  if (errors.length > 0) {
+    throw new Error(`buildCouncilQuestionPrompt: ${errors.join("; ")}`);
+  }
+  return options.map((option) => ({
+    id: option.id.trim(),
+    label: option.label.trim(),
+    ...option.consequence?.trim() ? { consequence: option.consequence.trim() } : {}
+  }));
 }
 function requiredInstruction(path7) {
   const text = readBundledInstructionText(path7);
@@ -592,6 +602,8 @@ function requireFraction(value, label) {
 var COUNCIL_REFUSAL_OPTION_ID = "council_refuse";
 var DEFAULT_COUNCIL_MAX_CONCURRENCY = 3;
 var MAX_COUNCIL_CONCURRENCY = 8;
+var OVERALL_TIMEOUT_REASON = "Council overall timeout exceeded.";
+var CALL_CANCELLED_REASON = "Cancelled.";
 var CouncilOrchestrator = class {
   caller;
   personas;
@@ -602,6 +614,17 @@ var CouncilOrchestrator = class {
   fallbackProfileManager;
   seatCaller;
   judgeCaller;
+  /**
+   * Normalized ad-hoc profiles keyed by the caller's config object identity.
+   * The Brain adapter reuses ONE profile object for every decision, so this
+   * avoids re-validating + re-freezing it on every ask() without caching
+   * string-keyed registry lookups (those are already O(1)).
+   *
+   * Hosts must treat ad-hoc profile configs as IMMUTABLE once passed to
+   * ask(): the cache is keyed by object identity and never invalidated, so
+   * mutating a cached profile would silently serve the first snapshot.
+   */
+  profileCache = /* @__PURE__ */ new WeakMap();
   constructor(opts) {
     if (!opts.caller && !opts.seatCaller && !opts.judgeCaller) {
       throw new Error(
@@ -620,13 +643,33 @@ var CouncilOrchestrator = class {
     this.seatCaller = opts.seatCaller;
     this.judgeCaller = opts.judgeCaller;
   }
-  async ask(question) {
-    const startedAt = Date.now();
-    const profile = resolveCouncilProfile(question.profile, {
+  /**
+   * Resolve the effective profile for a question. String ids and the default
+   * go through the registry (already O(1)); ad-hoc config objects are
+   * normalized once per stable object identity and cached, because hosts such
+   * as the Brain adapter pass the same profile object on every ask().
+   */
+  resolveProfile(profile) {
+    if (typeof profile === "string" || profile === void 0) {
+      return resolveCouncilProfile(profile, {
+        registry: this.profiles,
+        personas: this.personas,
+        defaultProfile: this.defaultProfile
+      });
+    }
+    const cached = this.profileCache.get(profile);
+    if (cached) return cached;
+    const resolved = resolveCouncilProfile(profile, {
       registry: this.profiles,
       personas: this.personas,
       defaultProfile: this.defaultProfile
     });
+    this.profileCache.set(profile, resolved);
+    return resolved;
+  }
+  async ask(question) {
+    const startedAt = Date.now();
+    const profile = this.resolveProfile(question.profile);
     validateRefusalCollision(question, this.refusalOptionId);
     const timeoutSignal = AbortSignal.timeout(profile.overallTimeoutMs);
     const signal = question.signal ? AbortSignal.any([question.signal, timeoutSignal]) : timeoutSignal;
@@ -643,11 +686,16 @@ var CouncilOrchestrator = class {
         try {
           return await this.callSeat(question, profile, seat, i, signal, usage);
         } catch (error) {
+          const timedOut = signal.aborted && !question.signal?.aborted;
           return {
             seatId: seat.id,
             persona: seat.persona,
-            status: signal.aborted ? "cancelled" : "failed",
-            error: errorMessage(error)
+            // Only the caller's own cancel is a "cancelled" vote; the overall
+            // budget expiring is a failure (timeout), matching the envelope.
+            status: question.signal?.aborted ? "cancelled" : "failed",
+            // Canonical text for aborted-by-budget or cancelled seats, so one
+            // event does not surface a different string per code path.
+            error: question.signal?.aborted ? CALL_CANCELLED_REASON : timedOut ? OVERALL_TIMEOUT_REASON : errorMessage(error)
           };
         }
       }
@@ -657,7 +705,7 @@ var CouncilOrchestrator = class {
     if (question.signal?.aborted) {
       return resultEnvelope({
         status: "cancelled",
-        reason: "Council call cancelled.",
+        reason: CALL_CANCELLED_REASON,
         resolution: "none",
         votes,
         profile,
@@ -670,14 +718,17 @@ var CouncilOrchestrator = class {
     if (timeoutSignal.aborted) {
       return resultEnvelope({
         status: "failed",
-        reason: "Council overall timeout exceeded.",
+        reason: OVERALL_TIMEOUT_REASON,
         resolution: "none",
         votes,
         profile,
         usage,
         startedAt,
         warnings,
-        errors: [...errors, "Council overall timeout exceeded."]
+        // Seat-prefixed errors normally carry the canonical timeout text, but
+        // a signal-blind caller can resolve valid votes even after the budget
+        // expired — append the standalone entry only when nothing carries it.
+        errors: errors.some((entry) => entry.includes(OVERALL_TIMEOUT_REASON)) ? errors : [...errors, OVERALL_TIMEOUT_REASON]
       });
     }
     if (!question.options || question.options.length === 0) {
@@ -704,7 +755,17 @@ var CouncilOrchestrator = class {
     );
   }
   async callSeat(question, profile, seat, seatIndex, signal, usage) {
-    if (signal.aborted) return cancelledVote(seat);
+    if (signal.aborted) {
+      return question.signal?.aborted ? cancelledVote(seat) : {
+        seatId: seat.id,
+        persona: seat.persona,
+        status: "failed",
+        ...seat.target?.providerId ? { provider: seat.target.providerId } : {},
+        ...seat.target?.model ? { model: seat.target.model } : {},
+        durationMs: 0,
+        error: OVERALL_TIMEOUT_REASON
+      };
+    }
     let persona;
     try {
       persona = this.personas.require(seat.persona);
@@ -730,12 +791,15 @@ var CouncilOrchestrator = class {
     });
     const metadata = callMetadata(result);
     if (result.error) {
+      const timedOut = signal.aborted && !question.signal?.aborted;
       return {
         seatId: seat.id,
         persona: seat.persona,
-        status: signal.aborted ? "cancelled" : "failed",
+        status: question.signal?.aborted ? "cancelled" : "failed",
         ...metadata,
-        error: result.error
+        // Canonical text for cancelled or aborted-by-budget seats, so one
+        // cancel/timeout event does not surface a raw provider string.
+        error: question.signal?.aborted ? CALL_CANCELLED_REASON : timedOut ? OVERALL_TIMEOUT_REASON : result.error
       };
     }
     const parsed = parseVote(result.text, question, this.refusalOptionId);
@@ -834,9 +898,27 @@ var CouncilOrchestrator = class {
       signal,
       usage
     );
+    if (signal.aborted) {
+      const cancelled = question.signal?.aborted === true;
+      const reason = cancelled ? CALL_CANCELLED_REASON : OVERALL_TIMEOUT_REASON;
+      return resultEnvelope({
+        status: cancelled ? "cancelled" : "failed",
+        reason,
+        resolution: "none",
+        votes,
+        profile,
+        usage,
+        startedAt,
+        warnings,
+        errors: errors.some((entry) => entry.includes(reason)) ? errors : [...errors, reason],
+        judgeUsed: true
+      });
+    }
     if (!judged.ok) {
       return resultEnvelope({
-        status: signal.aborted ? "cancelled" : "abstained",
+        // User cancel -> cancelled; overall budget expired mid-judge -> failed;
+        // otherwise the judge simply failed -> abstained (can't decide).
+        status: question.signal?.aborted ? "cancelled" : signal.aborted ? "failed" : "abstained",
         reason: judged.error,
         resolution: "none",
         votes,
@@ -896,6 +978,19 @@ var CouncilOrchestrator = class {
       });
     }
     if (!profile.judge) {
+      if (divergentStances(valid)) {
+        return resultEnvelope({
+          status: "abstained",
+          reason: "Council produced multiple distinct stances and has no judge to reconcile them.",
+          resolution: "none",
+          votes,
+          profile,
+          usage,
+          startedAt,
+          warnings,
+          errors
+        });
+      }
       const first = valid[0];
       if (!first) {
         return resultEnvelope({
@@ -932,9 +1027,30 @@ var CouncilOrchestrator = class {
       signal,
       usage
     );
+    if (signal.aborted) {
+      const cancelled = question.signal?.aborted === true;
+      const reason = cancelled ? CALL_CANCELLED_REASON : OVERALL_TIMEOUT_REASON;
+      return resultEnvelope({
+        status: cancelled ? "cancelled" : "failed",
+        reason,
+        resolution: "none",
+        votes,
+        profile,
+        usage,
+        startedAt,
+        warnings,
+        errors: errors.some((entry) => entry.includes(reason)) ? errors : [...errors, reason],
+        judgeUsed: true
+      });
+    }
     if (!judged.ok) {
       return resultEnvelope({
-        status: signal.aborted ? "cancelled" : "failed",
+        // User cancel -> cancelled; overall budget expired mid-judge -> failed;
+        // otherwise the judge simply failed -> failed (open questions cannot
+        // abstain for a judge failure — 'abstained' is reserved for quorum
+        // failure and stance divergence; the option path maps this same
+        // plain-judge-failure case to 'abstained' instead).
+        status: question.signal?.aborted ? "cancelled" : "failed",
         reason: judged.error,
         resolution: "none",
         votes,
@@ -973,18 +1089,28 @@ var CouncilOrchestrator = class {
       signal,
       usage
     });
-    if (result.error) return { ok: false, error: result.error };
+    if (result.error) {
+      if (signal.aborted && !question.signal?.aborted) {
+        return { ok: false, error: OVERALL_TIMEOUT_REASON };
+      }
+      if (question.signal?.aborted) {
+        return { ok: false, error: CALL_CANCELLED_REASON };
+      }
+      return { ok: false, error: result.error };
+    }
     return parseJudge(result.text, question, this.refusalOptionId);
   }
   /**
-   * Resolve the effective LLM caller for a call. Voter seats use
-   * `seatCaller(seatIndex)` when wired. Judge seats (seatIndex undefined)
-   * use `judgeCaller` if set, otherwise `seatCaller(0)` if set, otherwise
-   * the shared `caller`.
+   * Resolve the effective LLM caller for a call. Voter seats (defined
+   * seatIndex) use `seatCaller(seatIndex)` when wired, otherwise the shared
+   * `caller` — a seat never falls through to the judge caller. Judge seats
+   * (seatIndex undefined) use `judgeCaller` if set, otherwise `seatCaller(0)`
+   * if set, otherwise the shared `caller`.
    */
   resolveCaller(seatIndex) {
-    if (seatIndex !== void 0 && this.seatCaller) {
-      return this.seatCaller(seatIndex);
+    if (seatIndex !== void 0) {
+      if (this.seatCaller) return this.seatCaller(seatIndex);
+      return this.caller ?? this.judgeCaller;
     }
     if (this.judgeCaller) return this.judgeCaller;
     if (this.seatCaller) return this.seatCaller(0);
@@ -993,6 +1119,7 @@ var CouncilOrchestrator = class {
   async safeCall(input) {
     const effectiveCaller = this.resolveCaller(input.seatIndex);
     const resolvedTarget = this.resolveCouncilTarget(input.target);
+    const startedAt = Date.now();
     try {
       const result = await effectiveCaller.call({
         system: input.system,
@@ -1009,8 +1136,17 @@ var CouncilOrchestrator = class {
       addUsage(input.usage, result);
       return result;
     } catch (error) {
-      input.usage.calls += 1;
-      return emptyCallResult(errorMessage(error));
+      const failed = {
+        text: "",
+        model: resolvedTarget?.model ?? "",
+        provider: resolvedTarget?.providerId ?? "",
+        tokens: { input: 0, output: 0, total: 0 },
+        durationMs: Math.max(0, Date.now() - startedAt),
+        fromFallback: false,
+        error: errorMessage(error)
+      };
+      addUsage(input.usage, failed);
+      return failed;
     }
   }
   /**
@@ -1042,47 +1178,77 @@ var CouncilOrchestrator = class {
     };
   }
 };
-function parseVote(text, question, refusalOptionId) {
+function parseCouncilResponse(text, question, refusalOptionId, opts) {
+  const roleLabel = opts.role === "judge" ? "Judge" : "Voter";
   const parsed = parseObject(text);
   if (!parsed.ok && (!question.options || question.options.length === 0)) {
     const fallback = text.trim();
-    if (fallback) return { ok: true, vote: { stance: fallback } };
-    return { ok: false, error: "Voter returned an empty response." };
+    if (fallback) return { ok: true, value: { [opts.freeTextField]: fallback } };
+    return { ok: false, error: `${roleLabel} returned an empty response.` };
   }
   if (!parsed.ok) return parsed;
   const rationale = optionalString(parsed.value["rationale"]);
   if (question.options && question.options.length > 0) {
     const optionId = optionalString(parsed.value["optionId"]);
-    const allowed = /* @__PURE__ */ new Set([...question.options.map((option) => option.id.trim()), refusalOptionId]);
+    const allowed = /* @__PURE__ */ new Set([
+      ...question.options.map((option) => option.id.trim()),
+      refusalOptionId
+    ]);
     if (!optionId || !allowed.has(optionId)) {
-      return { ok: false, error: "Voter returned an unknown or missing optionId." };
+      return { ok: false, error: `${roleLabel} returned an unknown or missing optionId.` };
     }
-    return { ok: true, vote: { optionId, ...rationale ? { rationale } : {} } };
+    return { ok: true, value: { optionId, ...rationale ? { rationale } : {} } };
+  }
+  const freeText = optionalString(parsed.value[opts.freeTextField]);
+  if (!freeText) {
+    return {
+      ok: false,
+      error: `${roleLabel} returned an empty or missing ${opts.freeTextField}.`
+    };
   }
-  const stance = optionalString(parsed.value["stance"]);
-  if (!stance) return { ok: false, error: "Voter returned an empty or missing stance." };
-  return { ok: true, vote: { stance, ...rationale ? { rationale } : {} } };
+  return { ok: true, value: { [opts.freeTextField]: freeText, ...rationale ? { rationale } : {} } };
 }
-function parseJudge(text, question, refusalOptionId) {
-  const parsed = parseObject(text);
-  if (!parsed.ok && (!question.options || question.options.length === 0)) {
-    const fallback = text.trim();
-    if (fallback) return { ok: true, value: { answer: fallback } };
-    return { ok: false, error: "Judge returned an empty response." };
+function divergentStances(valid) {
+  const seen = /* @__PURE__ */ new Set();
+  for (const vote of valid) {
+    const normalized = vote.stance.trim().replace(/^["'`]+|["'`]+$/g, "").toLowerCase().replace(/[.!?;:,]+$/g, "").replace(/\s+/g, " ").trim();
+    if (!normalized) return true;
+    seen.add(normalized);
+    if (seen.size > 1) return true;
   }
+  return false;
+}
+function parseVote(text, question, refusalOptionId) {
+  const parsed = parseCouncilResponse(text, question, refusalOptionId, {
+    role: "voter",
+    freeTextField: "stance"
+  });
   if (!parsed.ok) return parsed;
-  const rationale = optionalString(parsed.value["rationale"]);
-  if (question.options && question.options.length > 0) {
-    const optionId = optionalString(parsed.value["optionId"]);
-    const allowed = /* @__PURE__ */ new Set([...question.options.map((option) => option.id.trim()), refusalOptionId]);
-    if (!optionId || !allowed.has(optionId)) {
-      return { ok: false, error: "Judge returned an unknown or missing optionId." };
+  const { optionId, stance, rationale } = parsed.value;
+  return {
+    ok: true,
+    vote: {
+      ...optionId ? { optionId } : {},
+      ...stance ? { stance } : {},
+      ...rationale ? { rationale } : {}
     }
-    return { ok: true, value: { optionId, ...rationale ? { rationale } : {} } };
-  }
-  const answer = optionalString(parsed.value["answer"]);
-  if (!answer) return { ok: false, error: "Judge returned an empty or missing answer." };
-  return { ok: true, value: { answer, ...rationale ? { rationale } : {} } };
+  };
+}
+function parseJudge(text, question, refusalOptionId) {
+  const parsed = parseCouncilResponse(text, question, refusalOptionId, {
+    role: "judge",
+    freeTextField: "answer"
+  });
+  if (!parsed.ok) return parsed;
+  const { optionId, answer, rationale } = parsed.value;
+  return {
+    ok: true,
+    value: {
+      ...optionId ? { optionId } : {},
+      ...answer ? { answer } : {},
+      ...rationale ? { rationale } : {}
+    }
+  };
 }
 function parseObject(text) {
   const trimmed = text.trim();
@@ -1126,7 +1292,7 @@ function callMetadata(result) {
   };
 }
 function addUsage(usage, result) {
-  usage.calls += 1;
+  usage.calls += Math.max(1, result.attempts ?? 1);
   usage.inputTokens += result.tokens.input;
   usage.outputTokens += result.tokens.output;
   usage.totalTokens += result.tokens.total;
@@ -1135,21 +1301,40 @@ function usageResult(usage, startedAt) {
   return Object.freeze({ ...usage, durationMs: Math.max(0, Date.now() - startedAt) });
 }
 function cancelledVote(seat) {
-  return { seatId: seat.id, persona: seat.persona, status: "cancelled", error: "Cancelled." };
+  return {
+    seatId: seat.id,
+    persona: seat.persona,
+    status: "cancelled",
+    ...seat.target?.providerId ? { provider: seat.target.providerId } : {},
+    ...seat.target?.model ? { model: seat.target.model } : {},
+    durationMs: 0,
+    error: CALL_CANCELLED_REASON
+  };
 }
 function distinctTargetCount(votes, profile) {
-  const keys = votes.filter((vote) => vote.status === "valid").map(
-    (vote) => profile.distinctness === "provider" ? vote.provider : `${vote.provider ?? ""}/${vote.model ?? ""}`
-  ).filter(Boolean);
-  return new Set(keys).size;
+  return new Set(distinctTargetKeys(votes, profile)).size;
+}
+function distinctTargetKeys(votes, profile) {
+  const keys = [];
+  for (const vote of votes) {
+    if (vote.status !== "valid") continue;
+    const provider = vote.provider?.trim() ?? "";
+    const model = vote.model?.trim() ?? "";
+    if (profile.distinctness === "provider") {
+      if (provider) keys.push(provider);
+    } else if (provider || model) {
+      keys.push(`${provider}/${model}`);
+    }
+  }
+  return keys;
 }
 function distinctnessWarnings(votes, profile) {
   if (profile.distinctness === "none") return [];
-  const valid = votes.filter((vote) => vote.status === "valid");
-  const distinct = distinctTargetCount(valid, profile);
-  if (valid.length > 1 && distinct < valid.length) {
+  const keys = distinctTargetKeys(votes, profile);
+  const distinct = new Set(keys).size;
+  if (keys.length > 1 && distinct < keys.length) {
     return [
-      `Council distinctness policy "${profile.distinctness}" was not met: ${distinct} distinct target(s) served ${valid.length} valid vote(s).`
+      `Council distinctness policy "${profile.distinctness}" was not met: ${distinct} distinct target(s) served ${keys.length} valid vote(s).`
     ];
   }
   return [];
@@ -1185,17 +1370,6 @@ async function mapConcurrent(items, concurrency, worker) {
   await Promise.all(Array.from({ length: Math.min(concurrency, items.length) }, () => run()));
   return results;
 }
-function emptyCallResult(error) {
-  return {
-    text: "",
-    model: "",
-    provider: "",
-    tokens: { input: 0, output: 0, total: 0 },
-    durationMs: 0,
-    fromFallback: false,
-    error
-  };
-}
 function optionalString(value) {
   return typeof value === "string" && value.trim() ? value.trim() : void 0;
 }
@@ -1238,7 +1412,7 @@ var INPUT_SCHEMA = {
     },
     profile: {
       type: "string",
-      description: "Registered Council profile id. Defaults to the host-configured profile."
+      description: 'Registered Council profile id (e.g. "balanced", "fast", "risk-review"). Defaults to the host-configured profile.'
     }
   },
   required: ["question"],
@@ -1249,10 +1423,12 @@ function createCouncilTool(opts) {
     ...opts,
     fallbackProfileManager: opts.fallbackProfileManager
   });
+  const profiles = opts.profiles ?? DEFAULT_COUNCIL_PROFILE_REGISTRY;
+  const profileIds = profiles.list().map((profile) => profile.id);
   return {
     name: COUNCIL_TOOL_NAME,
     description: "Ask an independent, multi-persona Council to evaluate a decision or synthesize an answer. Uses bounded parallel voters, quorum/veto/weighted resolution, optional judging, model routing, fallback chains, and cancellation.",
-    usageHint: "Use for consequential or disputed decisions that benefit from independent lenses. Provide `options` for a vote or omit them for an open answer. Keep context evidence-focused; the Council treats it as untrusted data.",
+    usageHint: `Use for consequential or disputed decisions that benefit from independent lenses. Provide \`options\` for a vote or omit them for an open answer. Keep context evidence-focused; the Council treats it as untrusted data. Available profiles: ${profileIds.join(", ")}.`,
     category: "meta",
     inputSchema: INPUT_SCHEMA,
     permission: "auto",
@@ -1270,11 +1446,17 @@ function createCouncilTool(opts) {
       };
       return orchestrator.ask(question);
     },
-    validate: validateCouncilToolInput
+    validate: (input) => validateCouncilToolInput(input, profileIds)
   };
 }
-function validateCouncilToolInput(input) {
+function validateCouncilToolInput(input, profileIds) {
   const errors = [];
+  if (typeof input.profile === "string" && input.profile.trim()) {
+    const id = input.profile.trim();
+    if (!profileIds.includes(id)) {
+      errors.push(`Unknown \`profile\` "${id}". Available: ${profileIds.join(", ")}.`);
+    }
+  }
   const question = input.question?.trim() ?? "";
   if (!question) errors.push("`question` must not be empty.");
   if (question.length > MAX_COUNCIL_QUESTION_CHARS) {
@@ -1286,14 +1468,7 @@ function validateCouncilToolInput(input) {
   if ((input.options?.length ?? 0) > MAX_COUNCIL_TOOL_OPTIONS) {
     errors.push(`\`options\` must not contain more than ${MAX_COUNCIL_TOOL_OPTIONS} items.`);
   }
-  const ids = /* @__PURE__ */ new Set();
-  for (const option of input.options ?? []) {
-    const id = option.id.trim();
-    if (!id) errors.push("Every option must have a non-empty `id`.");
-    if (!option.label.trim()) errors.push(`Option "${id || "<empty>"}" must have a label.`);
-    if (ids.has(id)) errors.push(`Duplicate option id "${id}".`);
-    ids.add(id);
-  }
+  errors.push(...validateCouncilOptions(input.options));
   return errors;
 }
 
@@ -1418,7 +1593,7 @@ var FsError = class extends WrongStackError {
 var QUOTA_EXHAUSTED_RE = /(?:insufficient|exhausted|depleted|exceeded|no|not enough)[-_\s]*(?:quota|credit|balance)|(?:quota|credit|balance)(?:\s+(?:has|have))?(?:\s+been)?[-_\s]*(?:exhausted|depleted|exceeded|insufficient)|billing[_\s-]*(?:hard[_\s-]*)?limit|payment required|spending limit|plan limit|usage[-_\s]*limit[-_\s]*(?:reached|exceeded)/i;
 
 // src/types/provider.ts
-var CONTEXT_OVERFLOW_RE = /context.length|context.window|maximum context|max.*tokens?.*exceeded|prompt is too long|too long|exceeds the context|\btokens\b.*exceed|too many tokens|reduce the length|resulted in \d+ tokens|input.{0,12}too (?:large|long)|context_length_exceeded/i;
+var CONTEXT_OVERFLOW_RE = /context.length|context.window|maximum context|max.*tokens?.*exceeded|(?:prompt|request|input|messages?).{0,12}too (?:large|long)|exceeds the context|\btokens\b.*exceed|too many tokens|reduce the length|resulted in \d+ tokens|context_length_exceeded/i;
 var CONTENT_FILTER_RE = /content.(filter|policy|moderation)|safety (system|filter)/i;
 var RATE_LIMIT_EXCEEDED_RE = /rate[-_\s]*limit[-_\s]*exceeded/i;
 function classifyProviderError(status, body, message) {
@@ -1428,7 +1603,7 @@ function classifyProviderError(status, body, message) {
   if (status === 408) return "timeout";
   if (status === 599) return "stream_hang";
   if (status === 402 || QUOTA_EXHAUSTED_RE.test(text)) return "quota_exhausted";
-  if (status === 429 && body?.message && RATE_LIMIT_EXCEEDED_RE.test(body.message)) {
+  if (status === 429 && body?.message && body.type !== "rate_limit_exceeded" && RATE_LIMIT_EXCEEDED_RE.test(body.message)) {
     return "quota_exhausted";
   }
   if (type === "rate_limit_error" || status === 429) return "rate_limit";
@@ -1488,7 +1663,7 @@ var ProviderError = class extends WrongStackError {
     const e = err;
     const name = e.name;
     if (typeof name !== "string" || !name.endsWith("Error")) return false;
-    return typeof e.status === "number" && typeof e.retryable === "boolean" && typeof e.kind === "string";
+    return typeof e.status === "number" && typeof e.retryable === "boolean" && typeof e.kind === "string" && typeof e.describe === "function";
   }
   constructor(message, status, retryable, providerId, opts = {}) {
     const kind = opts.kind ?? classifyProviderError(status, opts.body, message);
@@ -2216,7 +2391,9 @@ function safeProfileName(name) {
 function activeProfileName(globalRoot) {
   try {
     const parsed = JSON.parse(fs.readFileSync(path2.join(globalRoot, "config.json"), "utf8"));
-    return safeProfileName(typeof parsed.activeProfile === "string" ? parsed.activeProfile : void 0);
+    return safeProfileName(
+      typeof parsed.activeProfile === "string" ? parsed.activeProfile : void 0
+    );
   } catch {
     return "default";
   }
@@ -2296,6 +2473,7 @@ function resolveWstackPaths(opts) {
     projectPlan: path2.join(projectDir, "plan.json"),
     projectAutophase: path2.join(projectDir, "autophase"),
     projectSddBoards: path2.join(projectDir, "sdd-boards"),
+    projectRequirementIntakes: path2.join(projectDir, "requirement-intakes"),
     syncConfig: path2.join(profileDir, "sync.json"),
     configHistoryDir: path2.join(globalRoot, "config-history"),
     projectStatus: (projectHash2) => path2.join(globalRoot, "projects", projectHash2, "status.json")
@@ -6185,8 +6363,18 @@ var SYSTEM_CONFIG_VIEW_SCHEMA = {
   properties: {
     section: {
       type: "string",
-      enum: ["all", "providers", "models", "fallbacks", "matrix", "agents", "refiner", "doctor"],
-      description: "Which section to show: all (everything), providers (configured providers + keys), models (favorites + leader), fallbacks (chain + profiles + toggles), matrix (per-role assignments), agents (every catalog agent with resolved model), refiner (goal refinement config), doctor (validate config and show issues/warnings). Default: all."
+      enum: [
+        "all",
+        "providers",
+        "models",
+        "fallbacks",
+        "matrix",
+        "agents",
+        "fleet",
+        "refiner",
+        "doctor"
+      ],
+      description: "Which section to show: all (everything), providers (configured providers + keys), models (favorites + leader), fallbacks (chain + profiles + toggles), matrix (per-role assignments), agents (every catalog agent with resolved model), fleet (concurrency + lifetime spawn/token/cost budgets), refiner (goal refinement config), doctor (validate config and show issues/warnings). Default: all."
     }
   },
   additionalProperties: false
@@ -6288,6 +6476,7 @@ ${content}`);
         const profiles = config.fallbackProfiles ?? {};
         const chain = config.fallbackModels ?? [];
         const matrix = config.modelMatrix ?? {};
+        const fleetBudget = config.fleet?.budget;
         const bridge = config.fallbackBridge?.trim();
         if (bridge) {
           const parsed = parseModelRef(bridge);
@@ -6357,6 +6546,26 @@ ${content}`);
             }
           }
         }
+        if (typeof config.maxConcurrent === "number") {
+          if (!Number.isFinite(config.maxConcurrent) || config.maxConcurrent < 0) {
+            issues.push(`maxConcurrent must be a non-negative number (got ${config.maxConcurrent})`);
+          } else if (config.maxConcurrent === 0) {
+            warnings.push("maxConcurrent is 0 \u2014 subagent concurrency effectively disabled");
+          } else {
+            ok.push(`maxConcurrent ${config.maxConcurrent}`);
+          }
+        }
+        if (fleetBudget && typeof fleetBudget === "object") {
+          for (const key of ["maxSpawns", "maxTokens", "maxCostUsd"]) {
+            const v = fleetBudget[key];
+            if (v === void 0) continue;
+            if (typeof v !== "number" || !Number.isFinite(v) || v < 0) {
+              issues.push(`fleet.budget.${key} must be a non-negative number (got ${JSON.stringify(v)})`);
+            } else {
+              ok.push(`fleet.budget.${key} ${v}`);
+            }
+          }
+        }
         for (const [key, entry] of Object.entries(matrix)) {
           const eProvider = entry.provider ?? config.provider;
           const eModel = entry.model;
@@ -6397,6 +6606,27 @@ ${content}`);
         }
         addSection("Configuration Doctor", lines.join("\n"));
       }
+      if (section === "all" || section === "fleet") {
+        const fleet = config.fleet;
+        const budget = fleet?.budget;
+        const lifecycle = fleet?.lifecycle;
+        const fmt = (n, unit = "") => typeof n === "number" && Number.isFinite(n) ? `${n}${unit}` : "(default)";
+        addSection(
+          "Fleet Budgets (configured ceilings)",
+          [
+            `  maxConcurrent: ${typeof config.maxConcurrent === "number" ? config.maxConcurrent : "(default 4)"}`,
+            `  fleet.budget.maxSpawns: ${fmt(budget?.maxSpawns)}  ${typeof budget?.maxSpawns !== "number" ? "\u2192 default 64" : ""}`,
+            `  fleet.budget.maxTokens: ${fmt(budget?.maxTokens)}`,
+            `  fleet.budget.maxCostUsd: ${fmt(budget?.maxCostUsd)}`,
+            `  fleet.lifecycle.idleTimeoutMs: ${fmt(lifecycle?.idleTimeoutMs, "ms")}`,
+            `  fleet.lifecycle.retireOnTaskComplete: ${lifecycle?.retireOnTaskComplete === void 0 ? "(default true)" : String(lifecycle.retireOnTaskComplete)}`,
+            "",
+            "  Live used/remaining spawns are on /fleet status (not static config).",
+            "  Override ceilings: --max-concurrent / WRONGSTACK_MAX_CONCURRENT,",
+            "  --max-spawns / WRONGSTACK_MAX_SPAWNS, or fleet.budget.maxSpawns in profile."
+          ].join("\n")
+        );
+      }
       if (section === "all" || section === "refiner") {
         const ref = config.autonomy;
         addSection(
@@ -7187,6 +7417,38 @@ var sshManagerServer = () => ({
   permission: "confirm",
   requestTimeoutMs: 18e4
 });
+var requirementIntakeServer = () => ({
+  name: "requirement-intake",
+  description: "WrongStack Requirements Intake \u2014 list intake records and file new ones (project-scoped, --writable)",
+  transport: "stdio",
+  command: "wstack-requirement-intake-mcp",
+  args: ["--project-root", ".", "--writable"],
+  permission: "auto"
+});
+var kanbanServer = () => ({
+  name: "kanban",
+  description: "WrongStack Kanban \u2014 inspect and manage project work boards (project-scoped, manage tier, no destructive ops)",
+  transport: "stdio",
+  command: "wstack-kanban-mcp",
+  args: ["--project-root", ".", "--writable"],
+  permission: "confirm"
+});
+var mailboxServer = () => ({
+  name: "mailbox",
+  description: "WrongStack Mailbox \u2014 read and send project agent mail (project-scoped, no admin/credentials)",
+  transport: "stdio",
+  command: "wstack-mailbox-mcp",
+  args: ["--project-root", ".", "--actor", "external-agent", "--writable"],
+  permission: "auto"
+});
+var codebaseIndexServer = () => ({
+  name: "codebase-index",
+  description: "WrongStack Codebase Index \u2014 symbol search and dependency graphs (project-scoped, --writable)",
+  transport: "stdio",
+  command: "wstack-codebase-index-mcp",
+  args: ["--project-root", ".", "--writable"],
+  permission: "auto"
+});
 var allServers = () => ({
   filesystem: { ...filesystemServer(), enabled: false },
   github: { ...githubServer(), enabled: false },
@@ -7201,7 +7463,11 @@ var allServers = () => ({
   "zai-vision": { ...zaiVisionServer(), enabled: false },
   "minimax-vision": { ...miniMaxVisionServer(), enabled: false },
   playwright: { ...playwrightServer(), enabled: false },
-  ssh: { ...sshManagerServer(), enabled: false }
+  ssh: { ...sshManagerServer(), enabled: false },
+  kanban: { ...kanbanServer(), enabled: false },
+  mailbox: { ...mailboxServer(), enabled: false },
+  "codebase-index": { ...codebaseIndexServer(), enabled: false },
+  "requirement-intake": { ...requirementIntakeServer(), enabled: false }
 });
 
 // src/utils/config-json.ts
@@ -7682,6 +7948,7 @@ var OneShotOrchestrator = class {
         tokens: { input: 0, output: 0, total: 0 },
         durationMs: Math.round(performance.now() - startedAt),
         fromFallback: false,
+        attempts: 0,
         error: "No provider or model could be resolved. Check your config."
       };
     }
@@ -7696,6 +7963,7 @@ var OneShotOrchestrator = class {
         tokens: { input: 0, output: 0, total: 0 },
         durationMs: Math.round(performance.now() - startedAt),
         fromFallback: false,
+        attempts: 0,
         error: `Cannot build provider "${target.providerId}": ${err instanceof Error ? err.message : String(err)}`
       };
     }
@@ -7708,11 +7976,13 @@ var OneShotOrchestrator = class {
     let fromFallback = false;
     let lastError;
     let fallbackEligible = false;
+    let attempts = 0;
     if (tracker && !tracker.isAvailable(target.providerId, target.model) || !evaluateModelCalendar(config.modelAvailabilitySchedule, target.providerId, target.model).allowed) {
       this.opts.logger?.debug(
         `one-shot: primary "${target.providerId}/${target.model}" is blocked \u2014 trying fallback`
       );
     } else {
+      attempts += 1;
       const primaryAttempt = await this.tryCall(
         provider,
         request,
@@ -7727,10 +7997,17 @@ var OneShotOrchestrator = class {
         tracker?.recordSuccess(target.providerId, target.model);
         servingProviderId = provider.id;
         servingModel = target.model;
-        return this.buildResult(result, servingProviderId, servingModel, false, startedAt);
+        return this.buildResult(result, servingProviderId, servingModel, false, startedAt, attempts);
       }
       if (!fallbackEligible || chain.length === 0) {
-        return this.buildErrorResult(lastError, target.providerId, target.model, false, startedAt);
+        return this.buildErrorResult(
+          lastError,
+          target.providerId,
+          target.model,
+          false,
+          startedAt,
+          attempts
+        );
       }
     }
     const estimatedTokens = estimateRequestTokens(request.messages, request.system, []).total;
@@ -7758,6 +8035,7 @@ var OneShotOrchestrator = class {
       }
       servingProviderId = fbProvider.id;
       servingModel = entry.model;
+      attempts += 1;
       const attempt = await this.tryCall(
         fbProvider,
         this.buildRequest(input, entry.model),
@@ -7768,7 +8046,14 @@ var OneShotOrchestrator = class {
       if (attempt.response) {
         tracker?.recordSuccess(entry.providerId, entry.model);
         fromFallback = true;
-        return this.buildResult(attempt.response, servingProviderId, servingModel, true, startedAt);
+        return this.buildResult(
+          attempt.response,
+          servingProviderId,
+          servingModel,
+          true,
+          startedAt,
+          attempts
+        );
       }
       lastError = attempt.error;
     }
@@ -7777,7 +8062,8 @@ var OneShotOrchestrator = class {
       servingProviderId,
       servingModel,
       fromFallback,
-      startedAt
+      startedAt,
+      attempts
     );
   }
   // ── Private helpers ─────────────────────────────────────────────
@@ -7788,7 +8074,8 @@ var OneShotOrchestrator = class {
   resolveTarget(input, config) {
     if (input.role && this.opts.modelRouter) {
       const pick = this.opts.modelRouter.pickForTask(input.role, "");
-      if (pick) {
+      const hasExplicitTarget = Boolean(input.providerId || input.model);
+      if (pick && (pick.fromMatrix === true || !hasExplicitTarget)) {
         return { providerId: pick.provider, model: pick.model };
       }
     }
@@ -7900,7 +8187,7 @@ var OneShotOrchestrator = class {
     }
   }
   /** Build a success result from a provider Response. */
-  buildResult(response, servingProviderId, servingModel, fromFallback, startedAt) {
+  buildResult(response, servingProviderId, servingModel, fromFallback, startedAt, attempts) {
     const textBlocks = response.content.filter(isTextBlock);
     const text = textBlocks.map((b) => b.text).join("\n").trim();
     return {
@@ -7914,11 +8201,12 @@ var OneShotOrchestrator = class {
       },
       durationMs: Math.round(performance.now() - startedAt),
       fromFallback,
+      attempts,
       stopReason: response.stopReason
     };
   }
   /** Build a total-failure error result. */
-  buildErrorResult(error, servingProviderId, servingModel, fromFallback, startedAt) {
+  buildErrorResult(error, servingProviderId, servingModel, fromFallback, startedAt, attempts) {
     return {
       text: "",
       model: servingModel,
@@ -7926,6 +8214,7 @@ var OneShotOrchestrator = class {
       tokens: { input: 0, output: 0, total: 0 },
       durationMs: Math.round(performance.now() - startedAt),
       fromFallback,
+      attempts,
       error: error instanceof Error ? error.message : String(error ?? "Unknown error")
     };
   }
@@ -8056,6 +8345,44 @@ function createOneShotLLMTool(opts) {
   };
 }
 
+// src/plugin/config.ts
+function pluginEntryMatchesName(configuredName, name, aliases = []) {
+  for (const candidate of [name, ...aliases]) {
+    if (configuredName === candidate) return true;
+    if (configuredName === `@wrongstack/plugins/${candidate}`) return true;
+  }
+  return false;
+}
+function resolvePluginEnablement(input) {
+  if (input.config?.features?.plugins === false) {
+    return { enabled: false, source: "feature-flag" };
+  }
+  const names = [.../* @__PURE__ */ new Set([input.name, ...input.aliases ?? []])];
+  const matches = input.matches ?? ((configuredName) => pluginEntryMatchesName(configuredName, input.name, input.aliases ?? []));
+  const plugins = input.config?.plugins;
+  if (Array.isArray(plugins)) {
+    for (const candidate of plugins) {
+      if (typeof candidate === "string") {
+        if (matches(candidate)) return { enabled: true, source: "plugin-entry" };
+        continue;
+      }
+      if (!isPluginEntry(candidate) || !matches(candidate.name)) continue;
+      return { enabled: candidate.enabled !== false, source: "plugin-entry" };
+    }
+  }
+  for (const name of names) {
+    const enabled = input.config?.extensions?.[name]?.["enabled"];
+    if (typeof enabled === "boolean") return { enabled, source: "extension" };
+  }
+  return { enabled: input.defaultState === "active", source: "default" };
+}
+function isPluginEntry(value) {
+  return isRecord2(value) && typeof value["name"] === "string";
+}
+function isRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
 // src/utils/json-schema-validate.ts
 function validateAgainstSchema(value, schema) {
   const errors = [];
@@ -8179,6 +8506,12 @@ function deepEqual(a, b) {
 
 // src/tools/plugin-manager.ts
 var PLUGIN_MANAGER_TOOL_NAME = "plugin_manager";
+var PLUGIN_VIEW_STATE_SOURCE = {
+  "feature-flag": "feature_flag",
+  "plugin-entry": "config",
+  extension: "extension",
+  default: "default"
+};
 var INPUT_SCHEMA3 = {
   type: "object",
   properties: {
@@ -8410,10 +8743,14 @@ function buildPluginViews(opts) {
   return catalog.map((entry) => {
     const aliases = [...entry.aliases ?? []];
     const names = /* @__PURE__ */ new Set([entry.name, ...aliases]);
-    const configuredEntry = configured.find((item) => names.has(pluginConfigName(item)));
-    const globallyDisabled = config.features?.plugins === false;
-    const enabled = globallyDisabled ? false : configuredEntry === void 0 ? entry.defaultState === "active" : typeof configuredEntry === "string" || configuredEntry.enabled !== false;
-    const stateSource = globallyDisabled ? "feature_flag" : configuredEntry === void 0 ? "default" : "config";
+    const { enabled, source } = resolvePluginEnablement({
+      name: entry.name,
+      aliases,
+      defaultState: entry.defaultState,
+      config,
+      matches: (spec) => names.has(spec)
+    });
+    const stateSource = PLUGIN_VIEW_STATE_SOURCE[source];
     const tools = pluginTools(opts.toolRegistry, entry.name, aliases);
     const managerControl = isManagerLocked(config, entry.name, aliases) ? "locked" : "allowed";
     return {