@wrongstack/core 0.299.0 → 0.301.0

package/dist/tools/index.js

@@ -472,22 +472,29 @@ function buildCouncilJudgeUserPrompt(question, votes, opts = {}) {
     "</council-ballots>"
   ].filter(Boolean).join("\n\n");
 }
-function normalizeOptions(options) {
-  if (!options) return [];
+function validateCouncilOptions(options) {
+  const errors = [];
   const seen = /* @__PURE__ */ new Set();
-  return options.map((option) => {
+  for (const option of options ?? []) {
     const id = option.id.trim();
-    const label = option.label.trim();
-    if (!id) throw new Error("buildCouncilQuestionPrompt: option id must not be empty.");
-    if (!label) throw new Error(`buildCouncilQuestionPrompt: option "${id}" needs a label.`);
-    if (seen.has(id)) throw new Error(`buildCouncilQuestionPrompt: duplicate option id "${id}".`);
+    if (!id) errors.push("Every option must have a non-empty `id`.");
+    if (!option.label.trim()) errors.push(`Option "${id || "<empty>"}" must have a label.`);
+    if (seen.has(id)) errors.push(`Duplicate option id "${id}".`);
     seen.add(id);
-    return {
-      id,
-      label,
-      ...option.consequence?.trim() ? { consequence: option.consequence.trim() } : {}
-    };
-  });
+  }
+  return errors;
+}
+function normalizeOptions(options) {
+  if (!options) return [];
+  const errors = validateCouncilOptions(options);
+  if (errors.length > 0) {
+    throw new Error(`buildCouncilQuestionPrompt: ${errors.join("; ")}`);
+  }
+  return options.map((option) => ({
+    id: option.id.trim(),
+    label: option.label.trim(),
+    ...option.consequence?.trim() ? { consequence: option.consequence.trim() } : {}
+  }));
 }
 function requiredInstruction(path7) {
   const text = readBundledInstructionText(path7);
@@ -595,6 +602,8 @@ function requireFraction(value, label) {
 var COUNCIL_REFUSAL_OPTION_ID = "council_refuse";
 var DEFAULT_COUNCIL_MAX_CONCURRENCY = 3;
 var MAX_COUNCIL_CONCURRENCY = 8;
+var OVERALL_TIMEOUT_REASON = "Council overall timeout exceeded.";
+var CALL_CANCELLED_REASON = "Cancelled.";
 var CouncilOrchestrator = class {
   caller;
   personas;
@@ -605,11 +614,20 @@ var CouncilOrchestrator = class {
   fallbackProfileManager;
   seatCaller;
   judgeCaller;
+  /**
+   * Normalized ad-hoc profiles keyed by the caller's config object identity.
+   * The Brain adapter reuses ONE profile object for every decision, so this
+   * avoids re-validating + re-freezing it on every ask() without caching
+   * string-keyed registry lookups (those are already O(1)).
+   *
+   * Hosts must treat ad-hoc profile configs as IMMUTABLE once passed to
+   * ask(): the cache is keyed by object identity and never invalidated, so
+   * mutating a cached profile would silently serve the first snapshot.
+   */
+  profileCache = /* @__PURE__ */ new WeakMap();
   constructor(opts) {
     if (!opts.caller && !opts.seatCaller && !opts.judgeCaller) {
-      throw new Error(
-        "CouncilOrchestrator: provide `caller`, `seatCaller`, or `judgeCaller`."
-      );
+      throw new Error("CouncilOrchestrator: provide `caller`, `seatCaller`, or `judgeCaller`.");
     }
     this.caller = opts.caller;
     this.personas = opts.personas ?? DEFAULT_COUNCIL_PERSONA_REGISTRY;
@@ -623,13 +641,33 @@ var CouncilOrchestrator = class {
     this.seatCaller = opts.seatCaller;
     this.judgeCaller = opts.judgeCaller;
   }
-  async ask(question) {
-    const startedAt = Date.now();
-    const profile = resolveCouncilProfile(question.profile, {
+  /**
+   * Resolve the effective profile for a question. String ids and the default
+   * go through the registry (already O(1)); ad-hoc config objects are
+   * normalized once per stable object identity and cached, because hosts such
+   * as the Brain adapter pass the same profile object on every ask().
+   */
+  resolveProfile(profile) {
+    if (typeof profile === "string" || profile === void 0) {
+      return resolveCouncilProfile(profile, {
+        registry: this.profiles,
+        personas: this.personas,
+        defaultProfile: this.defaultProfile
+      });
+    }
+    const cached = this.profileCache.get(profile);
+    if (cached) return cached;
+    const resolved = resolveCouncilProfile(profile, {
       registry: this.profiles,
       personas: this.personas,
       defaultProfile: this.defaultProfile
     });
+    this.profileCache.set(profile, resolved);
+    return resolved;
+  }
+  async ask(question) {
+    const startedAt = Date.now();
+    const profile = this.resolveProfile(question.profile);
     validateRefusalCollision(question, this.refusalOptionId);
     const timeoutSignal = AbortSignal.timeout(profile.overallTimeoutMs);
     const signal = question.signal ? AbortSignal.any([question.signal, timeoutSignal]) : timeoutSignal;
@@ -646,11 +684,16 @@ var CouncilOrchestrator = class {
         try {
           return await this.callSeat(question, profile, seat, i, signal, usage);
         } catch (error) {
+          const timedOut = signal.aborted && !question.signal?.aborted;
           return {
             seatId: seat.id,
             persona: seat.persona,
-            status: signal.aborted ? "cancelled" : "failed",
-            error: errorMessage(error)
+            // Only the caller's own cancel is a "cancelled" vote; the overall
+            // budget expiring is a failure (timeout), matching the envelope.
+            status: question.signal?.aborted ? "cancelled" : "failed",
+            // Canonical text for aborted-by-budget or cancelled seats, so one
+            // event does not surface a different string per code path.
+            error: question.signal?.aborted ? CALL_CANCELLED_REASON : timedOut ? OVERALL_TIMEOUT_REASON : errorMessage(error)
           };
         }
       }
@@ -660,7 +703,7 @@ var CouncilOrchestrator = class {
     if (question.signal?.aborted) {
       return resultEnvelope({
         status: "cancelled",
-        reason: "Council call cancelled.",
+        reason: CALL_CANCELLED_REASON,
         resolution: "none",
         votes,
         profile,
@@ -673,14 +716,17 @@ var CouncilOrchestrator = class {
     if (timeoutSignal.aborted) {
       return resultEnvelope({
         status: "failed",
-        reason: "Council overall timeout exceeded.",
+        reason: OVERALL_TIMEOUT_REASON,
         resolution: "none",
         votes,
         profile,
         usage,
         startedAt,
         warnings,
-        errors: [...errors, "Council overall timeout exceeded."]
+        // Seat-prefixed errors normally carry the canonical timeout text, but
+        // a signal-blind caller can resolve valid votes even after the budget
+        // expired — append the standalone entry only when nothing carries it.
+        errors: errors.some((entry) => entry.includes(OVERALL_TIMEOUT_REASON)) ? errors : [...errors, OVERALL_TIMEOUT_REASON]
       });
     }
     if (!question.options || question.options.length === 0) {
@@ -707,7 +753,17 @@ var CouncilOrchestrator = class {
     );
   }
   async callSeat(question, profile, seat, seatIndex, signal, usage) {
-    if (signal.aborted) return cancelledVote(seat);
+    if (signal.aborted) {
+      return question.signal?.aborted ? cancelledVote(seat) : {
+        seatId: seat.id,
+        persona: seat.persona,
+        status: "failed",
+        ...seat.target?.providerId ? { provider: seat.target.providerId } : {},
+        ...seat.target?.model ? { model: seat.target.model } : {},
+        durationMs: 0,
+        error: OVERALL_TIMEOUT_REASON
+      };
+    }
     let persona;
     try {
       persona = this.personas.require(seat.persona);
@@ -733,12 +789,15 @@ var CouncilOrchestrator = class {
     });
     const metadata = callMetadata(result);
     if (result.error) {
+      const timedOut = signal.aborted && !question.signal?.aborted;
       return {
         seatId: seat.id,
         persona: seat.persona,
-        status: signal.aborted ? "cancelled" : "failed",
+        status: question.signal?.aborted ? "cancelled" : "failed",
         ...metadata,
-        error: result.error
+        // Canonical text for cancelled or aborted-by-budget seats, so one
+        // cancel/timeout event does not surface a raw provider string.
+        error: question.signal?.aborted ? CALL_CANCELLED_REASON : timedOut ? OVERALL_TIMEOUT_REASON : result.error
       };
     }
     const parsed = parseVote(result.text, question, this.refusalOptionId);
@@ -748,7 +807,7 @@ var CouncilOrchestrator = class {
         persona: seat.persona,
         status: "invalid",
         ...metadata,
-        error: parsed.error
+        error: withTruncationNote(parsed.error, result, profile.voterMaxTokens)
       };
     }
     return {
@@ -837,9 +896,27 @@ var CouncilOrchestrator = class {
       signal,
       usage
     );
+    if (signal.aborted) {
+      const cancelled = question.signal?.aborted === true;
+      const reason = cancelled ? CALL_CANCELLED_REASON : OVERALL_TIMEOUT_REASON;
+      return resultEnvelope({
+        status: cancelled ? "cancelled" : "failed",
+        reason,
+        resolution: "none",
+        votes,
+        profile,
+        usage,
+        startedAt,
+        warnings,
+        errors: errors.some((entry) => entry.includes(reason)) ? errors : [...errors, reason],
+        judgeUsed: true
+      });
+    }
     if (!judged.ok) {
       return resultEnvelope({
-        status: signal.aborted ? "cancelled" : "abstained",
+        // User cancel -> cancelled; overall budget expired mid-judge -> failed;
+        // otherwise the judge simply failed -> abstained (can't decide).
+        status: question.signal?.aborted ? "cancelled" : signal.aborted ? "failed" : "abstained",
         reason: judged.error,
         resolution: "none",
         votes,
@@ -899,6 +976,19 @@ var CouncilOrchestrator = class {
       });
     }
     if (!profile.judge) {
+      if (divergentStances(valid)) {
+        return resultEnvelope({
+          status: "abstained",
+          reason: "Council produced multiple distinct stances and has no judge to reconcile them.",
+          resolution: "none",
+          votes,
+          profile,
+          usage,
+          startedAt,
+          warnings,
+          errors
+        });
+      }
       const first = valid[0];
       if (!first) {
         return resultEnvelope({
@@ -935,9 +1025,30 @@ var CouncilOrchestrator = class {
       signal,
       usage
     );
+    if (signal.aborted) {
+      const cancelled = question.signal?.aborted === true;
+      const reason = cancelled ? CALL_CANCELLED_REASON : OVERALL_TIMEOUT_REASON;
+      return resultEnvelope({
+        status: cancelled ? "cancelled" : "failed",
+        reason,
+        resolution: "none",
+        votes,
+        profile,
+        usage,
+        startedAt,
+        warnings,
+        errors: errors.some((entry) => entry.includes(reason)) ? errors : [...errors, reason],
+        judgeUsed: true
+      });
+    }
     if (!judged.ok) {
       return resultEnvelope({
-        status: signal.aborted ? "cancelled" : "failed",
+        // User cancel -> cancelled; overall budget expired mid-judge -> failed;
+        // otherwise the judge simply failed -> failed (open questions cannot
+        // abstain for a judge failure — 'abstained' is reserved for quorum
+        // failure and stance divergence; the option path maps this same
+        // plain-judge-failure case to 'abstained' instead).
+        status: question.signal?.aborted ? "cancelled" : "failed",
         reason: judged.error,
         resolution: "none",
         votes,
@@ -976,18 +1087,35 @@ var CouncilOrchestrator = class {
       signal,
       usage
     });
-    if (result.error) return { ok: false, error: result.error };
-    return parseJudge(result.text, question, this.refusalOptionId);
+    if (result.error) {
+      if (signal.aborted && !question.signal?.aborted) {
+        return { ok: false, error: OVERALL_TIMEOUT_REASON };
+      }
+      if (question.signal?.aborted) {
+        return { ok: false, error: CALL_CANCELLED_REASON };
+      }
+      return { ok: false, error: result.error };
+    }
+    const judged = parseJudge(result.text, question, this.refusalOptionId);
+    if (!judged.ok) {
+      return {
+        ok: false,
+        error: withTruncationNote(judged.error, result, profile.judgeMaxTokens)
+      };
+    }
+    return judged;
   }
   /**
-   * Resolve the effective LLM caller for a call. Voter seats use
-   * `seatCaller(seatIndex)` when wired. Judge seats (seatIndex undefined)
-   * use `judgeCaller` if set, otherwise `seatCaller(0)` if set, otherwise
-   * the shared `caller`.
+   * Resolve the effective LLM caller for a call. Voter seats (defined
+   * seatIndex) use `seatCaller(seatIndex)` when wired, otherwise the shared
+   * `caller` — a seat never falls through to the judge caller. Judge seats
+   * (seatIndex undefined) use `judgeCaller` if set, otherwise `seatCaller(0)`
+   * if set, otherwise the shared `caller`.
    */
   resolveCaller(seatIndex) {
-    if (seatIndex !== void 0 && this.seatCaller) {
-      return this.seatCaller(seatIndex);
+    if (seatIndex !== void 0) {
+      if (this.seatCaller) return this.seatCaller(seatIndex);
+      return this.caller ?? this.judgeCaller;
     }
     if (this.judgeCaller) return this.judgeCaller;
     if (this.seatCaller) return this.seatCaller(0);
@@ -996,6 +1124,7 @@ var CouncilOrchestrator = class {
   async safeCall(input) {
     const effectiveCaller = this.resolveCaller(input.seatIndex);
     const resolvedTarget = this.resolveCouncilTarget(input.target);
+    const startedAt = Date.now();
     try {
       const result = await effectiveCaller.call({
         system: input.system,
@@ -1012,8 +1141,17 @@ var CouncilOrchestrator = class {
       addUsage(input.usage, result);
       return result;
     } catch (error) {
-      input.usage.calls += 1;
-      return emptyCallResult(errorMessage(error));
+      const failed = {
+        text: "",
+        model: resolvedTarget?.model ?? "",
+        provider: resolvedTarget?.providerId ?? "",
+        tokens: { input: 0, output: 0, total: 0 },
+        durationMs: Math.max(0, Date.now() - startedAt),
+        fromFallback: false,
+        error: errorMessage(error)
+      };
+      addUsage(input.usage, failed);
+      return failed;
     }
   }
   /**
@@ -1045,47 +1183,84 @@ var CouncilOrchestrator = class {
     };
   }
 };
-function parseVote(text, question, refusalOptionId) {
+function parseCouncilResponse(text, question, refusalOptionId, opts) {
+  const roleLabel = opts.role === "judge" ? "Judge" : "Voter";
   const parsed = parseObject(text);
   if (!parsed.ok && (!question.options || question.options.length === 0)) {
     const fallback = text.trim();
-    if (fallback) return { ok: true, vote: { stance: fallback } };
-    return { ok: false, error: "Voter returned an empty response." };
+    if (fallback) return { ok: true, value: { [opts.freeTextField]: fallback } };
+    return { ok: false, error: `${roleLabel} returned an empty response.` };
   }
   if (!parsed.ok) return parsed;
   const rationale = optionalString(parsed.value["rationale"]);
   if (question.options && question.options.length > 0) {
     const optionId = optionalString(parsed.value["optionId"]);
-    const allowed = /* @__PURE__ */ new Set([...question.options.map((option) => option.id.trim()), refusalOptionId]);
+    const allowed = /* @__PURE__ */ new Set([
+      ...question.options.map((option) => option.id.trim()),
+      refusalOptionId
+    ]);
     if (!optionId || !allowed.has(optionId)) {
-      return { ok: false, error: "Voter returned an unknown or missing optionId." };
+      return { ok: false, error: `${roleLabel} returned an unknown or missing optionId.` };
     }
-    return { ok: true, vote: { optionId, ...rationale ? { rationale } : {} } };
+    return { ok: true, value: { optionId, ...rationale ? { rationale } : {} } };
+  }
+  const freeText = optionalString(parsed.value[opts.freeTextField]);
+  if (!freeText) {
+    return {
+      ok: false,
+      error: `${roleLabel} returned an empty or missing ${opts.freeTextField}.`
+    };
   }
-  const stance = optionalString(parsed.value["stance"]);
-  if (!stance) return { ok: false, error: "Voter returned an empty or missing stance." };
-  return { ok: true, vote: { stance, ...rationale ? { rationale } : {} } };
+  return {
+    ok: true,
+    value: { [opts.freeTextField]: freeText, ...rationale ? { rationale } : {} }
+  };
 }
-function parseJudge(text, question, refusalOptionId) {
-  const parsed = parseObject(text);
-  if (!parsed.ok && (!question.options || question.options.length === 0)) {
-    const fallback = text.trim();
-    if (fallback) return { ok: true, value: { answer: fallback } };
-    return { ok: false, error: "Judge returned an empty response." };
+function divergentStances(valid) {
+  const seen = /* @__PURE__ */ new Set();
+  for (const vote of valid) {
+    const normalized = vote.stance.trim().replace(/^["'`]+|["'`]+$/g, "").toLowerCase().replace(/[.!?;:,]+$/g, "").replace(/\s+/g, " ").trim();
+    if (!normalized) return true;
+    seen.add(normalized);
+    if (seen.size > 1) return true;
   }
+  return false;
+}
+function parseVote(text, question, refusalOptionId) {
+  const parsed = parseCouncilResponse(text, question, refusalOptionId, {
+    role: "voter",
+    freeTextField: "stance"
+  });
   if (!parsed.ok) return parsed;
-  const rationale = optionalString(parsed.value["rationale"]);
-  if (question.options && question.options.length > 0) {
-    const optionId = optionalString(parsed.value["optionId"]);
-    const allowed = /* @__PURE__ */ new Set([...question.options.map((option) => option.id.trim()), refusalOptionId]);
-    if (!optionId || !allowed.has(optionId)) {
-      return { ok: false, error: "Judge returned an unknown or missing optionId." };
+  const { optionId, stance, rationale } = parsed.value;
+  return {
+    ok: true,
+    vote: {
+      ...optionId ? { optionId } : {},
+      ...stance ? { stance } : {},
+      ...rationale ? { rationale } : {}
     }
-    return { ok: true, value: { optionId, ...rationale ? { rationale } : {} } };
-  }
-  const answer = optionalString(parsed.value["answer"]);
-  if (!answer) return { ok: false, error: "Judge returned an empty or missing answer." };
-  return { ok: true, value: { answer, ...rationale ? { rationale } : {} } };
+  };
+}
+function parseJudge(text, question, refusalOptionId) {
+  const parsed = parseCouncilResponse(text, question, refusalOptionId, {
+    role: "judge",
+    freeTextField: "answer"
+  });
+  if (!parsed.ok) return parsed;
+  const { optionId, answer, rationale } = parsed.value;
+  return {
+    ok: true,
+    value: {
+      ...optionId ? { optionId } : {},
+      ...answer ? { answer } : {},
+      ...rationale ? { rationale } : {}
+    }
+  };
+}
+function withTruncationNote(error, result, maxTokens) {
+  if (result.stopReason !== "max_tokens") return error;
+  return `${error} (response truncated at maxTokens=${maxTokens} \u2014 reasoning models may need a larger budget)`;
 }
 function parseObject(text) {
   const trimmed = text.trim();
@@ -1129,7 +1304,7 @@ function callMetadata(result) {
   };
 }
 function addUsage(usage, result) {
-  usage.calls += 1;
+  usage.calls += Math.max(1, result.attempts ?? 1);
   usage.inputTokens += result.tokens.input;
   usage.outputTokens += result.tokens.output;
   usage.totalTokens += result.tokens.total;
@@ -1138,21 +1313,40 @@ function usageResult(usage, startedAt) {
   return Object.freeze({ ...usage, durationMs: Math.max(0, Date.now() - startedAt) });
 }
 function cancelledVote(seat) {
-  return { seatId: seat.id, persona: seat.persona, status: "cancelled", error: "Cancelled." };
+  return {
+    seatId: seat.id,
+    persona: seat.persona,
+    status: "cancelled",
+    ...seat.target?.providerId ? { provider: seat.target.providerId } : {},
+    ...seat.target?.model ? { model: seat.target.model } : {},
+    durationMs: 0,
+    error: CALL_CANCELLED_REASON
+  };
 }
 function distinctTargetCount(votes, profile) {
-  const keys = votes.filter((vote) => vote.status === "valid").map(
-    (vote) => profile.distinctness === "provider" ? vote.provider : `${vote.provider ?? ""}/${vote.model ?? ""}`
-  ).filter(Boolean);
-  return new Set(keys).size;
+  return new Set(distinctTargetKeys(votes, profile)).size;
+}
+function distinctTargetKeys(votes, profile) {
+  const keys = [];
+  for (const vote of votes) {
+    if (vote.status !== "valid") continue;
+    const provider = vote.provider?.trim() ?? "";
+    const model = vote.model?.trim() ?? "";
+    if (profile.distinctness === "provider") {
+      if (provider) keys.push(provider);
+    } else if (provider || model) {
+      keys.push(`${provider}/${model}`);
+    }
+  }
+  return keys;
 }
 function distinctnessWarnings(votes, profile) {
   if (profile.distinctness === "none") return [];
-  const valid = votes.filter((vote) => vote.status === "valid");
-  const distinct = distinctTargetCount(valid, profile);
-  if (valid.length > 1 && distinct < valid.length) {
+  const keys = distinctTargetKeys(votes, profile);
+  const distinct = new Set(keys).size;
+  if (keys.length > 1 && distinct < keys.length) {
     return [
-      `Council distinctness policy "${profile.distinctness}" was not met: ${distinct} distinct target(s) served ${valid.length} valid vote(s).`
+      `Council distinctness policy "${profile.distinctness}" was not met: ${distinct} distinct target(s) served ${keys.length} valid vote(s).`
     ];
   }
   return [];
@@ -1188,17 +1382,6 @@ async function mapConcurrent(items, concurrency, worker) {
   await Promise.all(Array.from({ length: Math.min(concurrency, items.length) }, () => run()));
   return results;
 }
-function emptyCallResult(error) {
-  return {
-    text: "",
-    model: "",
-    provider: "",
-    tokens: { input: 0, output: 0, total: 0 },
-    durationMs: 0,
-    fromFallback: false,
-    error
-  };
-}
 function optionalString(value) {
   return typeof value === "string" && value.trim() ? value.trim() : void 0;
 }
@@ -1297,14 +1480,7 @@ function validateCouncilToolInput(input, profileIds) {
   if ((input.options?.length ?? 0) > MAX_COUNCIL_TOOL_OPTIONS) {
     errors.push(`\`options\` must not contain more than ${MAX_COUNCIL_TOOL_OPTIONS} items.`);
   }
-  const ids = /* @__PURE__ */ new Set();
-  for (const option of input.options ?? []) {
-    const id = option.id.trim();
-    if (!id) errors.push("Every option must have a non-empty `id`.");
-    if (!option.label.trim()) errors.push(`Option "${id || "<empty>"}" must have a label.`);
-    if (ids.has(id)) errors.push(`Duplicate option id "${id}".`);
-    ids.add(id);
-  }
+  errors.push(...validateCouncilOptions(input.options));
   return errors;
 }
 
@@ -2127,59 +2303,6 @@ function fallbackProfileChain(config, profileName) {
 }
 var DEFAULT_PRIMARY_COOLDOWN_MAX_MS = 10 * 6e4;
 
-// src/coordination/agents/types.ts
-var HOUR = 60 * 60 * 1e3;
-var LIGHT_BUDGET = {
-  timeoutMs: 3 * HOUR,
-  maxIterations: 3e3,
-  maxToolCalls: 8e3
-};
-var MEDIUM_BUDGET = {
-  timeoutMs: 5 * HOUR,
-  maxIterations: 5e3,
-  maxToolCalls: 14e3
-};
-var HEAVY_BUDGET = {
-  timeoutMs: 10 * HOUR,
-  maxIterations: 8e3,
-  maxToolCalls: 2e4
-};
-var TOOLS = {
-  /** Pure read/inspect — safe for analysis and review agents. */
-  read: ["read", "grep", "glob", "search", "tree", "mailbox"],
-  /** Read + structured inspection (logs, diffs, json, dependency audit). */
-  inspect: ["read", "grep", "glob", "search", "tree", "json", "diff", "logs", "audit", "mailbox"],
-  /** Read + edit (no shell). For agents that write code/docs but don't run it. */
-  write: ["read", "grep", "glob", "search", "tree", "write", "edit", "replace", "patch", "mailbox"],
-  /** Full build loop: edit + run (lint/format/typecheck/test/bash). */
-  build: [
-    "read",
-    "grep",
-    "glob",
-    "search",
-    "tree",
-    "write",
-    "edit",
-    "replace",
-    "patch",
-    "bash",
-    "exec",
-    "lint",
-    "format",
-    "typecheck",
-    "test",
-    "mailbox"
-  ],
-  /** Version control. */
-  vcs: ["read", "grep", "glob", "git", "diff"],
-  /** Dependency management + CVE audit. */
-  deps: ["read", "grep", "glob", "install", "outdated", "audit", "json", "mailbox"],
-  /** Documentation authoring. */
-  docs: ["read", "grep", "glob", "search", "tree", "write", "edit", "document", "mailbox"],
-  /** Web research. */
-  research: ["read", "grep", "glob", "search", "fetch", "mailbox"]
-};
-
 // src/coordination/agents/agent-prompts.ts
 import { readFileSync as readFileSync6, statSync as statSync3 } from "node:fs";
 import * as path6 from "node:path";
@@ -2202,6 +2325,9 @@ function canonicalProjectRoot(absRoot) {
     const commonDirFile = path2.join(gitDir, "commondir");
     if (!fs.statSync(commonDirFile).isFile()) return checkoutRoot;
     const commonDir = path2.resolve(gitDir, fs.readFileSync(commonDirFile, "utf8").trim());
+    const worktreesDir = path2.dirname(gitDir);
+    if (path2.basename(worktreesDir).toLowerCase() !== "worktrees") return checkoutRoot;
+    if (path2.resolve(worktreesDir, "..") !== commonDir) return checkoutRoot;
     if (path2.basename(commonDir).toLowerCase() !== ".git") return checkoutRoot;
     return path2.dirname(commonDir);
   } catch {
@@ -2224,7 +2350,7 @@ function safeProfileName(name) {
   const safe = (name ?? "").replace(/[/\\:]/g, "_").replace(/\.\./g, "_").trim();
   return safe || "default";
 }
-function activeProfileName(globalRoot) {
+function bootstrapProfileName(globalRoot) {
   try {
     const parsed = JSON.parse(fs.readFileSync(path2.join(globalRoot, "config.json"), "utf8"));
     return safeProfileName(
@@ -2242,7 +2368,7 @@ function wstackGlobalRoot() {
 function resolveWstackPaths(opts) {
   const globalRoot = opts.globalRoot ?? (opts.userHome ? path2.join(opts.userHome, ".wrongstack") : wstackGlobalRoot());
   const homeDir = opts.userHome ?? os.homedir();
-  const profileName = safeProfileName(opts.profileName ?? activeProfileName(globalRoot));
+  const profileName = safeProfileName(opts.profileName ?? bootstrapProfileName(globalRoot));
   const profileDir = path2.join(globalRoot, "profiles", profileName);
   const hash = projectHash(opts.projectRoot);
   const slug = projectSlug(opts.projectRoot);
@@ -2312,7 +2438,12 @@ function resolveWstackPaths(opts) {
     projectRequirementIntakes: path2.join(projectDir, "requirement-intakes"),
     syncConfig: path2.join(profileDir, "sync.json"),
     configHistoryDir: path2.join(globalRoot, "config-history"),
-    projectStatus: (projectHash2) => path2.join(globalRoot, "projects", projectHash2, "status.json")
+    projectStatus: (statusProjectSlug) => {
+      if (!/^[a-z0-9](?:[a-z0-9-]{0,39})-[a-f0-9]{6}$/.test(statusProjectSlug)) {
+        throw new Error(`Invalid project slug: ${statusProjectSlug}`);
+      }
+      return path2.join(globalRoot, "projects", statusProjectSlug, "status.json");
+    }
   };
 }
 
@@ -2357,6 +2488,8 @@ var ToolCapabilities = {
   NET_OUTBOUND: "net.outbound",
   /** Can mutate in-memory session todos only. */
   SESSION_TODO: "session.todo",
+  /** Can park after-task `<nextsteps>` suggestions for the current turn. */
+  SESSION_NEXTSTEPS: "session.nextsteps",
   /** Can mutate in-memory session mode only. */
   SESSION_MODE: "session.mode",
   /** Can inspect registered tool metadata. */
@@ -2418,6 +2551,334 @@ var WIDE_SUBAGENT_CAPABILITIES = [
   ToolCapabilities.COORDINATION_FLEET_READ,
   ToolCapabilities.COORDINATION_RESULT_SUBMIT
 ];
+function getDangerousCapabilities(toolOrCaps) {
+  if (!toolOrCaps) return [];
+  const input = toolOrCaps;
+  const caps = Array.isArray(toolOrCaps) ? toolOrCaps : input.capabilities ?? [];
+  return caps.filter(
+    (c) => DANGEROUS_FOR_SUBAGENTS.includes(c)
+  );
+}
+
+// src/types/runtime-capability-manifest.ts
+var PLAYWRIGHT_ALIASES = {
+  playwright_navigate: "browser_navigate",
+  playwright_screenshot: "browser_screenshot",
+  playwright_click: "browser_click",
+  playwright_type: "browser_type",
+  playwright_evaluate: "browser_evaluate",
+  playwright_select_option: "browser_select",
+  playwright_hover: "browser_hover",
+  playwright_fill_form: "browser_type",
+  playwright_wait_for: "browser_wait",
+  playwright_press_key: "browser_press",
+  playwright_drag: "browser_drag"
+};
+var RUNTIME_CAPABILITY_MANIFEST = [
+  {
+    id: "filesystem.read",
+    pack: "core",
+    exposure: "direct",
+    tools: ["read", "grep", "glob", "tree"]
+  },
+  {
+    id: "code.inspect",
+    pack: "core",
+    exposure: "direct",
+    tools: [
+      "codebase-stats",
+      "codebase-search",
+      "codebase-incoming-calls",
+      "codebase-outgoing-calls",
+      "codebase-index",
+      "dead-code-scan",
+      "diff",
+      "json",
+      "logs"
+    ]
+  },
+  {
+    id: "filesystem.write",
+    pack: "development",
+    exposure: "direct",
+    tools: ["write", "edit", "replace", "patch"]
+  },
+  {
+    id: "execution.shell",
+    pack: "development",
+    exposure: "direct",
+    tools: ["bash", "exec", "language", "language_info", "language_package"]
+  },
+  {
+    id: "verification.run",
+    pack: "development",
+    exposure: "direct",
+    tools: ["lint", "format", "typecheck", "test", "e2e_plan"]
+  },
+  {
+    id: "version-control.manage",
+    pack: "development",
+    exposure: "direct",
+    tools: ["git"]
+  },
+  {
+    id: "dependencies.manage",
+    pack: "development",
+    exposure: "on-demand",
+    tools: ["install", "outdated", "audit"]
+  },
+  {
+    id: "documentation.author",
+    pack: "development",
+    exposure: "on-demand",
+    tools: ["document", "design", "scaffold"]
+  },
+  {
+    id: "web.research",
+    pack: "core",
+    exposure: "direct",
+    tools: ["search", "fetch"]
+  },
+  {
+    id: "work.plan",
+    pack: "core",
+    exposure: "direct",
+    tools: ["todo", "plan", "task", "kanban", "nextsteps"]
+  },
+  {
+    id: "coordination.mailbox",
+    pack: "fleet",
+    exposure: "direct",
+    tools: ["mailbox", "mail_send", "mail_inbox", "fleet_status"]
+  },
+  {
+    id: "fleet.delegate",
+    pack: "fleet",
+    exposure: "on-demand",
+    tools: [
+      "delegate",
+      "spawn_subagent",
+      "assign_task",
+      "kanban_queue",
+      "await_tasks",
+      "ask_subagent",
+      "ask_result",
+      "roll_up",
+      "quality_gate",
+      "terminate_subagent",
+      "terminate_all",
+      "work_complete",
+      "collab_debug",
+      "fleet_emit",
+      "fleet"
+    ]
+  },
+  {
+    id: "reasoning.oneshot",
+    pack: "core",
+    exposure: "on-demand",
+    tools: ["llm", "council"]
+  },
+  {
+    id: "memory.manage",
+    pack: "memory",
+    exposure: "on-demand",
+    tools: ["remember", "search_memory", "find_related_memories", "forget"]
+  },
+  {
+    id: "memory.curate",
+    pack: "memory",
+    exposure: "on-demand",
+    tools: [
+      "memory_candidates",
+      "memory_update",
+      "memory_delete",
+      "memory_recover",
+      "memory_backfill_recoverable",
+      "memory_for_file",
+      "memory_for_path",
+      "memory_search",
+      "memory_graph",
+      "memory_gather_batch",
+      "memory_verify",
+      "memory_hygiene"
+    ]
+  },
+  {
+    id: "browser.interact",
+    pack: "browser",
+    exposure: "on-demand",
+    tools: [
+      "browser_open",
+      "browser_status",
+      "browser_list",
+      "browser_navigate",
+      "browser_snapshot",
+      "browser_screenshot",
+      "browser_click",
+      "browser_type",
+      "browser_select",
+      "browser_press",
+      "browser_hover",
+      "browser_drag",
+      "browser_wait",
+      "browser_evaluate",
+      "browser_upload",
+      "browser_close"
+    ],
+    aliases: PLAYWRIGHT_ALIASES
+  },
+  {
+    id: "mcp.dynamic",
+    pack: "mcp",
+    exposure: "on-demand",
+    tools: ["mcp_use"]
+  },
+  {
+    id: "automation.manage",
+    pack: "admin",
+    exposure: "on-demand",
+    tools: ["cron_schedule", "cron_list", "cron_cancel", "watch_start", "watch_list", "watch_stop"]
+  },
+  {
+    id: "context.pin",
+    pack: "admin",
+    exposure: "on-demand",
+    tools: ["pin_add", "pin_list", "pin_remove"]
+  },
+  {
+    id: "quality.analyze",
+    pack: "development",
+    exposure: "on-demand",
+    tools: ["dead_code_scan", "detect_duplicate_code", "secret_scanner_test", "error_lens_history"]
+  },
+  {
+    id: "release.manage",
+    pack: "development",
+    exposure: "on-demand",
+    tools: ["git_autocommit", "semver_current", "semver_bump", "semver_changelog"]
+  },
+  {
+    id: "messaging.telegram",
+    pack: "fleet",
+    exposure: "on-demand",
+    tools: ["telegram_send", "telegram_read", "telegram_approve"]
+  },
+  {
+    id: "tools.discover",
+    pack: "admin",
+    exposure: "direct",
+    tools: ["tool_search", "tool_use", "tool_help", "batch_tool_use"]
+  },
+  {
+    id: "runtime.admin",
+    pack: "admin",
+    exposure: "internal",
+    tools: ["set_working_dir", "context_manager", "mode", "skill", "mcp_control"]
+  }
+];
+var CAPABILITY_BY_ID = new Map(
+  RUNTIME_CAPABILITY_MANIFEST.map((definition) => [definition.id, definition])
+);
+var CAPABILITY_BY_TOOL = /* @__PURE__ */ new Map();
+var TOOL_ALIASES = /* @__PURE__ */ new Map();
+for (const definition of RUNTIME_CAPABILITY_MANIFEST) {
+  for (const tool of definition.tools) {
+    CAPABILITY_BY_TOOL.set(tool, definition.id);
+  }
+  for (const [alias, tool] of Object.entries(definition.aliases ?? {})) {
+    TOOL_ALIASES.set(alias, tool);
+  }
+}
+function toolsForRuntimeCapabilities(capabilityIds) {
+  return [
+    ...new Set(
+      capabilityIds.flatMap((id) => {
+        const definition = CAPABILITY_BY_ID.get(id);
+        if (!definition) throw new Error(`Unknown runtime capability: "${id}"`);
+        return definition.tools;
+      })
+    )
+  ];
+}
+function normalizeRuntimeToolName(name) {
+  return TOOL_ALIASES.get(name) ?? name;
+}
+function runtimeCapabilityForTool(name) {
+  return CAPABILITY_BY_TOOL.get(normalizeRuntimeToolName(name));
+}
+function inferRuntimeCapabilities(toolNames) {
+  const ids = /* @__PURE__ */ new Set();
+  for (const rawName of toolNames) {
+    const id = runtimeCapabilityForTool(rawName);
+    if (id) ids.add(id);
+  }
+  return [...ids];
+}
+
+// src/coordination/agents/project-agent-consolidation.ts
+import {
+  existsSync,
+  mkdirSync,
+  readFileSync as readFileSync3,
+  rmSync
+} from "node:fs";
+import * as path4 from "node:path";
+
+// src/coordination/agents/project-agent-learning-entries.ts
+function splitLearnedEntries(body) {
+  return body.split(/\n---\n+/).map((entry) => entry.trim()).map(
+    (entry) => entry.replace(/^# Learned wisdom for .+$/im, "").replace(/<!--[\s\S]*?-->/g, "").trim()
+  ).filter(Boolean);
+}
+
+// src/coordination/agents/project-agent-paths.ts
+import * as path3 from "node:path";
+var AGENT_ROLE_PATTERN = /^[a-z0-9][a-z0-9._-]{0,95}$/i;
+function assertProjectAgentRole(role) {
+  const normalized = role.trim();
+  if (!AGENT_ROLE_PATTERN.test(normalized) || normalized === "." || normalized === ".." || normalized.includes("/") || normalized.includes("\\")) {
+    throw new Error(`Invalid project agent role: "${role}".`);
+  }
+  return normalized;
+}
+function agentsDir(projectRoot) {
+  const root = projectRoot ?? process.cwd();
+  return path3.join(root, ".wrongstack", "agents");
+}
+function roleDir(role, projectRoot) {
+  return path3.join(agentsDir(projectRoot), assertProjectAgentRole(role));
+}
+function learningPolicyPath(role, projectRoot) {
+  return path3.join(roleDir(role, projectRoot), "learning.json");
+}
+
+// src/coordination/agents/project-agent-consolidation.ts
+function consolidationPath(role, projectRoot) {
+  return path4.join(roleDir(role, projectRoot), "consolidated.md");
+}
+function consolidationMetaPath(role, projectRoot) {
+  return path4.join(roleDir(role, projectRoot), "consolidation.json");
+}
+function loadProjectAgentConsolidated(role, projectRoot) {
+  try {
+    return readFileSync3(consolidationPath(role, projectRoot), "utf8").trim();
+  } catch {
+    return "";
+  }
+}
+function loadConsolidationMetadata(role, projectRoot) {
+  try {
+    const raw = readFileSync3(consolidationMetaPath(role, projectRoot), "utf8");
+    const parsed = JSON.parse(raw);
+    if (typeof parsed === "object" && parsed !== null && typeof parsed.consolidatedAt === "string" && typeof parsed.sourceEntryCount === "number") {
+      return parsed;
+    }
+    return void 0;
+  } catch {
+    return void 0;
+  }
+}
 
 // src/coordination/agents/project-agent-knowledge-manifests.ts
 var BUILT_IN_KNOWLEDGE_MANIFESTS = {
@@ -2485,30 +2946,7 @@ var BUILT_IN_KNOWLEDGE_MANIFESTS = {
 };
 
 // src/coordination/agents/project-agent-learning-policy.ts
-import { readFileSync as readFileSync3 } from "node:fs";
-
-// src/coordination/agents/project-agent-paths.ts
-import * as path3 from "node:path";
-var AGENT_ROLE_PATTERN = /^[a-z0-9][a-z0-9._-]{0,95}$/i;
-function assertProjectAgentRole(role) {
-  const normalized = role.trim();
-  if (!AGENT_ROLE_PATTERN.test(normalized) || normalized === "." || normalized === ".." || normalized.includes("/") || normalized.includes("\\")) {
-    throw new Error(`Invalid project agent role: "${role}".`);
-  }
-  return normalized;
-}
-function agentsDir(projectRoot) {
-  const root = projectRoot ?? process.cwd();
-  return path3.join(root, ".wrongstack", "agents");
-}
-function roleDir(role, projectRoot) {
-  return path3.join(agentsDir(projectRoot), assertProjectAgentRole(role));
-}
-function learningPolicyPath(role, projectRoot) {
-  return path3.join(roleDir(role, projectRoot), "learning.json");
-}
-
-// src/coordination/agents/project-agent-learning-policy.ts
+import { readFileSync as readFileSync4 } from "node:fs";
 var DEFAULT_LEARNING_POLICY = {
   enabled: true,
   lifetimeCaptureCount: 0
@@ -2516,7 +2954,7 @@ var DEFAULT_LEARNING_POLICY = {
 function loadProjectAgentLearningPolicy(role, projectRoot) {
   try {
     const parsed = JSON.parse(
-      readFileSync3(learningPolicyPath(role, projectRoot), "utf8")
+      readFileSync4(learningPolicyPath(role, projectRoot), "utf8")
     );
     return {
       enabled: parsed.enabled !== false,
@@ -2529,47 +2967,6 @@ function loadProjectAgentLearningPolicy(role, projectRoot) {
   }
 }
 
-// src/coordination/agents/project-agent-learning-entries.ts
-function splitLearnedEntries(body) {
-  return body.split(/\n---\n+/).map((entry) => entry.trim()).map(
-    (entry) => entry.replace(/^# Learned wisdom for .+$/im, "").replace(/<!--[\s\S]*?-->/g, "").trim()
-  ).filter(Boolean);
-}
-
-// src/coordination/agents/project-agent-consolidation.ts
-import {
-  existsSync,
-  mkdirSync,
-  readFileSync as readFileSync4,
-  rmSync
-} from "node:fs";
-import * as path4 from "node:path";
-function consolidationPath(role, projectRoot) {
-  return path4.join(roleDir(role, projectRoot), "consolidated.md");
-}
-function consolidationMetaPath(role, projectRoot) {
-  return path4.join(roleDir(role, projectRoot), "consolidation.json");
-}
-function loadProjectAgentConsolidated(role, projectRoot) {
-  try {
-    return readFileSync4(consolidationPath(role, projectRoot), "utf8").trim();
-  } catch {
-    return "";
-  }
-}
-function loadConsolidationMetadata(role, projectRoot) {
-  try {
-    const raw = readFileSync4(consolidationMetaPath(role, projectRoot), "utf8");
-    const parsed = JSON.parse(raw);
-    if (typeof parsed === "object" && parsed !== null && typeof parsed.consolidatedAt === "string" && typeof parsed.sourceEntryCount === "number") {
-      return parsed;
-    }
-    return void 0;
-  } catch {
-    return void 0;
-  }
-}
-
 // src/coordination/agents/project-agent-identity.ts
 function loadProjectAgentIdentity(role, projectRoot) {
   const identityPath = path5.join(roleDir(role, projectRoot), "identity.md");
@@ -2898,6 +3295,64 @@ function isDirectory2(candidate) {
   }
 }
 
+// src/coordination/agents/types.ts
+var HOUR = 60 * 60 * 1e3;
+var LIGHT_BUDGET = {
+  timeoutMs: 3 * HOUR,
+  maxIterations: 3e3,
+  maxToolCalls: 8e3
+};
+var MEDIUM_BUDGET = {
+  timeoutMs: 5 * HOUR,
+  maxIterations: 5e3,
+  maxToolCalls: 14e3
+};
+var HEAVY_BUDGET = {
+  timeoutMs: 10 * HOUR,
+  maxIterations: 8e3,
+  maxToolCalls: 2e4
+};
+var TOOLS = {
+  /** Pure read/inspect — safe for analysis and review agents. */
+  read: ["read", "grep", "glob", "search", "tree", "mailbox"],
+  /** Read + structured inspection (logs, diffs, json, dependency audit). */
+  inspect: ["read", "grep", "glob", "search", "tree", "json", "diff", "logs", "audit", "mailbox"],
+  /** Read + edit (no shell). For agents that write code/docs but don't run it. */
+  write: ["read", "grep", "glob", "search", "tree", "write", "edit", "replace", "patch", "mailbox"],
+  /** Full build loop: edit + run (lint/format/typecheck/test/bash). */
+  build: [
+    "read",
+    "grep",
+    "glob",
+    "search",
+    "tree",
+    "write",
+    "edit",
+    "replace",
+    "patch",
+    "bash",
+    "exec",
+    "lint",
+    "format",
+    "typecheck",
+    "test",
+    "mailbox"
+  ],
+  /** Version control. */
+  vcs: ["read", "grep", "glob", "git", "diff"],
+  /** Dependency management + CVE audit. */
+  deps: ["read", "grep", "glob", "install", "outdated", "audit", "json", "mailbox"],
+  /** Documentation authoring. */
+  docs: ["read", "grep", "glob", "search", "tree", "write", "edit", "document", "mailbox"],
+  /** Web research. */
+  research: ["read", "grep", "glob", "search", "fetch", "mailbox"]
+};
+var SPECIALIST_TOOLS = {
+  browser: toolsForRuntimeCapabilities(["browser.interact"]),
+  memory: toolsForRuntimeCapabilities(["memory.manage"]),
+  mcp: toolsForRuntimeCapabilities(["mcp.dynamic"])
+};
+
 // src/coordination/agents/phase1-discovery.ts
 var DISCOVERY_AGENTS = [
   {
@@ -2933,7 +3388,7 @@ var DISCOVERY_AGENTS = [
       id: "search",
       name: "Search",
       role: "search",
-      tools: [...TOOLS.read],
+      tools: [...TOOLS.read, "codebase-search"],
       prompt: agentPrompt("search")
     },
     budget: MEDIUM_BUDGET,
@@ -3395,14 +3850,7 @@ var WAVE1_AGENTS = [
     capability: {
       phase: "domain",
       summary: "Android platform specialist: Kotlin, Jetpack Compose, Android SDK, lifecycle and Play Store delivery.",
-      keywords: [
-        ...ANDROID_META.signals,
-        "android",
-        "kotlin",
-        "compose",
-        "gradle",
-        "playstore"
-      ]
+      keywords: [...ANDROID_META.signals, "android", "kotlin", "compose", "gradle", "playstore"]
     }
   },
   {
@@ -3417,14 +3865,7 @@ var WAVE1_AGENTS = [
     capability: {
       phase: "domain",
       summary: "Desktop application specialist: Electron or Tauri, native packaging, IPC and OS integration.",
-      keywords: [
-        ...DESKTOP_META.signals,
-        "desktop",
-        "electron",
-        "tauri",
-        "ipc",
-        "tray"
-      ]
+      keywords: [...DESKTOP_META.signals, "desktop", "electron", "tauri", "ipc", "tray"]
     }
   },
   {
@@ -3500,7 +3941,7 @@ var WAVE1_AGENTS = [
       id: "platform-engineer",
       name: "Platform Engineer",
       role: "platform-engineer",
-      tools: [...TOOLS.build, "install", "git", "node-modern"],
+      tools: [...TOOLS.build, "install", "git"],
       prompt: agentPrompt("platform-engineer")
     },
     budget: MEDIUM_BUDGET,
@@ -3744,8 +4185,7 @@ var WAVE2_AGENTS = [
       id: "resilience-engineer",
       name: "Resilience Engineer",
       role: "resilience-engineer",
-      tools: [...TOOLS.build, "logs", "observability"],
-      // uniqueness guaranteed by 'observability' vs chaos-engineer's 'test'
+      tools: [...TOOLS.build, "logs"],
       prompt: agentPrompt("resilience-engineer")
     },
     budget: MEDIUM_BUDGET,
@@ -3768,8 +4208,7 @@ var WAVE2_AGENTS = [
       id: "chaos-engineer",
       name: "Chaos Engineer",
       role: "chaos-engineer",
-      tools: [...TOOLS.build, "logs", "observability"],
-      // uniqueness guaranteed by 'observability' vs chaos-engineer's 'test'
+      tools: [...TOOLS.build, "logs"],
       prompt: agentPrompt("chaos-engineer")
     },
     budget: MEDIUM_BUDGET,
@@ -3910,21 +4349,7 @@ var VERIFY_AGENTS = [
       id: "e2e",
       name: "E2E",
       role: "e2e",
-      tools: [
-        ...TOOLS.build,
-        "fetch",
-        "playwright_navigate",
-        "playwright_screenshot",
-        "playwright_click",
-        "playwright_type",
-        "playwright_evaluate",
-        "playwright_select_option",
-        "playwright_hover",
-        "playwright_fill_form",
-        "playwright_wait_for",
-        "playwright_press_key",
-        "playwright_drag"
-      ],
+      tools: [...TOOLS.build, "fetch", ...SPECIALIST_TOOLS.browser],
       prompt: agentPrompt("e2e")
     },
     budget: HEAVY_BUDGET,
@@ -3959,21 +4384,7 @@ var VERIFY_AGENTS = [
       id: "browser",
       name: "Browser",
       role: "browser",
-      tools: [
-        ...TOOLS.read,
-        "fetch",
-        "playwright_navigate",
-        "playwright_screenshot",
-        "playwright_click",
-        "playwright_type",
-        "playwright_evaluate",
-        "playwright_select_option",
-        "playwright_hover",
-        "playwright_fill_form",
-        "playwright_wait_for",
-        "playwright_press_key",
-        "playwright_drag"
-      ],
+      tools: [...TOOLS.read, "fetch", ...SPECIALIST_TOOLS.browser],
       prompt: agentPrompt("browser")
     },
     budget: MEDIUM_BUDGET,
@@ -4674,27 +5085,7 @@ var DELIVERY_AGENTS = [
       id: "devops",
       name: "DevOps",
       role: "devops",
-      tools: [
-        ...TOOLS.build,
-        "mcp__ssh__ssh_list_servers",
-        "mcp__ssh__ssh_connection_status",
-        "mcp__ssh__ssh_execute",
-        "mcp__ssh__ssh_execute_sudo",
-        "mcp__ssh__ssh_upload",
-        "mcp__ssh__ssh_download",
-        "mcp__ssh__ssh_sync",
-        "mcp__ssh__ssh_deploy",
-        "mcp__ssh__ssh_health_check",
-        "mcp__ssh__ssh_service_status",
-        "mcp__ssh__ssh_process_manager",
-        "mcp__ssh__ssh_tunnel",
-        "mcp__ssh__ssh_backup_create",
-        "mcp__ssh__ssh_backup_list",
-        "mcp__ssh__ssh_backup_restore",
-        "mcp__ssh__ssh_db_list",
-        "mcp__ssh__ssh_db_query",
-        "mcp__ssh__ssh_profile"
-      ],
+      tools: [...TOOLS.build, ...SPECIALIST_TOOLS.mcp],
       prompt: agentPrompt("devops")
     },
     budget: MEDIUM_BUDGET,
@@ -4895,7 +5286,7 @@ var WAVE3_AGENTS = [
       id: "messaging",
       name: "Messaging",
       role: "messaging",
-      tools: [...TOOLS.build, "logs", "observability"],
+      tools: [...TOOLS.build, "logs"],
       prompt: agentPrompt("messaging")
     },
     budget: HEAVY_BUDGET,
@@ -5336,7 +5727,7 @@ var WAVE4_AGENTS = [
       id: "memory-curator",
       name: "Memory Curator",
       role: "memory-curator",
-      tools: [...TOOLS.read, "memory"],
+      tools: [...TOOLS.read, ...SPECIALIST_TOOLS.memory],
       prompt: agentPrompt("memory-curator")
     },
     budget: LIGHT_BUDGET,
@@ -5358,7 +5749,7 @@ var WAVE4_AGENTS = [
       id: "fleet-coordinator",
       name: "Fleet Coordinator",
       role: "fleet-coordinator",
-      tools: [...TOOLS.read, "plan", "multi-agent"],
+      tools: [...TOOLS.read, "plan"],
       prompt: agentPrompt("fleet-coordinator")
     },
     budget: MEDIUM_BUDGET,
@@ -5458,8 +5849,20 @@ var ROLE_SKILL_SETS = {
   cost: skillSet("audit-log", "tech-stack", "observability", "research-web"),
   "tech-stack": skillSet("tech-stack", "research-web", "security-scanner", "node-modern"),
   // ── Wave 1: Platform and systems engineering ──────────────────────────
-  android: skillSet("react-modern", "typescript-strict", "testing", "security-scanner", "tech-stack"),
-  desktop: skillSet("node-modern", "typescript-strict", "testing", "security-scanner", "tech-stack"),
+  android: skillSet(
+    "react-modern",
+    "typescript-strict",
+    "testing",
+    "security-scanner",
+    "tech-stack"
+  ),
+  desktop: skillSet(
+    "node-modern",
+    "typescript-strict",
+    "testing",
+    "security-scanner",
+    "tech-stack"
+  ),
   realtime: skillSet(
     "api-design",
     "observability",
@@ -5563,26 +5966,9 @@ var ROLE_SKILL_SETS = {
     "security-scanner",
     "tech-stack"
   ),
-  "benchmark-engineer": skillSet(
-    "observability",
-    "testing",
-    "output-standards",
-    "tech-stack"
-  ),
-  "memory-curator": skillSet(
-    "mnemosyne",
-    "audit-log",
-    "testing",
-    "output-standards",
-    "tech-stack"
-  ),
-  "fleet-coordinator": skillSet(
-    "multi-agent",
-    "sdd",
-    "output-standards",
-    "testing",
-    "tech-stack"
-  ),
+  "benchmark-engineer": skillSet("observability", "testing", "output-standards", "tech-stack"),
+  "memory-curator": skillSet("mnemosyne", "audit-log", "testing", "output-standards", "tech-stack"),
+  "fleet-coordinator": skillSet("multi-agent", "sdd", "output-standards", "testing", "tech-stack"),
   // ── Wave 2: Security, resilience, governance and agent platform ────────
   "threat-modeler": skillSet(
     "security-scanner",
@@ -5634,6 +6020,7 @@ var SHADOW_AGENT_SKILLS = skillSet(
   "observability",
   "security-scanner"
 );
+var MAX_EAGER_ROSTER_SKILLS = 3;
 function assignSkillsToAgents(definitions) {
   return definitions.map((definition) => {
     const role = definition.config.role;
@@ -5647,7 +6034,8 @@ function assignSkillsToAgents(definitions) {
       ...definition,
       config: {
         ...definition.config,
-        skillNames: [...skills]
+        capabilities: inferRuntimeCapabilities(definition.config.tools ?? []),
+        skillNames: skills.slice(0, MAX_EAGER_ROSTER_SKILLS)
       }
     };
   });
@@ -6199,8 +6587,18 @@ var SYSTEM_CONFIG_VIEW_SCHEMA = {
   properties: {
     section: {
       type: "string",
-      enum: ["all", "providers", "models", "fallbacks", "matrix", "agents", "refiner", "doctor"],
-      description: "Which section to show: all (everything), providers (configured providers + keys), models (favorites + leader), fallbacks (chain + profiles + toggles), matrix (per-role assignments), agents (every catalog agent with resolved model), refiner (goal refinement config), doctor (validate config and show issues/warnings). Default: all."
+      enum: [
+        "all",
+        "providers",
+        "models",
+        "fallbacks",
+        "matrix",
+        "agents",
+        "fleet",
+        "refiner",
+        "doctor"
+      ],
+      description: "Which section to show: all (everything), providers (configured providers + keys), models (favorites + leader), fallbacks (chain + profiles + toggles), matrix (per-role assignments), agents (every catalog agent with resolved model), fleet (concurrency + lifetime spawn/token/cost budgets), refiner (goal refinement config), doctor (validate config and show issues/warnings). Default: all."
     }
   },
   additionalProperties: false
@@ -6302,6 +6700,7 @@ ${content}`);
         const profiles = config.fallbackProfiles ?? {};
         const chain = config.fallbackModels ?? [];
         const matrix = config.modelMatrix ?? {};
+        const fleetBudget = config.fleet?.budget;
         const bridge = config.fallbackBridge?.trim();
         if (bridge) {
           const parsed = parseModelRef(bridge);
@@ -6371,6 +6770,26 @@ ${content}`);
             }
           }
         }
+        if (typeof config.maxConcurrent === "number") {
+          if (!Number.isFinite(config.maxConcurrent) || config.maxConcurrent < 0) {
+            issues.push(`maxConcurrent must be a non-negative number (got ${config.maxConcurrent})`);
+          } else if (config.maxConcurrent === 0) {
+            warnings.push("maxConcurrent is 0 \u2014 subagent concurrency effectively disabled");
+          } else {
+            ok.push(`maxConcurrent ${config.maxConcurrent}`);
+          }
+        }
+        if (fleetBudget && typeof fleetBudget === "object") {
+          for (const key of ["maxSpawns", "maxTokens", "maxCostUsd"]) {
+            const v = fleetBudget[key];
+            if (v === void 0) continue;
+            if (typeof v !== "number" || !Number.isFinite(v) || v < 0) {
+              issues.push(`fleet.budget.${key} must be a non-negative number (got ${JSON.stringify(v)})`);
+            } else {
+              ok.push(`fleet.budget.${key} ${v}`);
+            }
+          }
+        }
         for (const [key, entry] of Object.entries(matrix)) {
           const eProvider = entry.provider ?? config.provider;
           const eModel = entry.model;
@@ -6411,6 +6830,27 @@ ${content}`);
         }
         addSection("Configuration Doctor", lines.join("\n"));
       }
+      if (section === "all" || section === "fleet") {
+        const fleet = config.fleet;
+        const budget = fleet?.budget;
+        const lifecycle = fleet?.lifecycle;
+        const fmt = (n, unit = "") => typeof n === "number" && Number.isFinite(n) ? `${n}${unit}` : "(default)";
+        addSection(
+          "Fleet Budgets (configured ceilings)",
+          [
+            `  maxConcurrent: ${typeof config.maxConcurrent === "number" ? config.maxConcurrent : "(default 4)"}`,
+            `  fleet.budget.maxSpawns: ${fmt(budget?.maxSpawns)}  ${typeof budget?.maxSpawns !== "number" ? "\u2192 default 64" : ""}`,
+            `  fleet.budget.maxTokens: ${fmt(budget?.maxTokens)}`,
+            `  fleet.budget.maxCostUsd: ${fmt(budget?.maxCostUsd)}`,
+            `  fleet.lifecycle.idleTimeoutMs: ${fmt(lifecycle?.idleTimeoutMs, "ms")}`,
+            `  fleet.lifecycle.retireOnTaskComplete: ${lifecycle?.retireOnTaskComplete === void 0 ? "(default true)" : String(lifecycle.retireOnTaskComplete)}`,
+            "",
+            "  Live used/remaining spawns are on /fleet status (not static config).",
+            "  Override ceilings: --max-concurrent / WRONGSTACK_MAX_CONCURRENT,",
+            "  --max-spawns / WRONGSTACK_MAX_SPAWNS, or fleet.budget.maxSpawns in profile."
+          ].join("\n")
+        );
+      }
       if (section === "all" || section === "refiner") {
         const ref = config.autonomy;
         addSection(
@@ -7732,6 +8172,7 @@ var OneShotOrchestrator = class {
         tokens: { input: 0, output: 0, total: 0 },
         durationMs: Math.round(performance.now() - startedAt),
         fromFallback: false,
+        attempts: 0,
         error: "No provider or model could be resolved. Check your config."
       };
     }
@@ -7746,6 +8187,7 @@ var OneShotOrchestrator = class {
         tokens: { input: 0, output: 0, total: 0 },
         durationMs: Math.round(performance.now() - startedAt),
         fromFallback: false,
+        attempts: 0,
         error: `Cannot build provider "${target.providerId}": ${err instanceof Error ? err.message : String(err)}`
       };
     }
@@ -7758,11 +8200,13 @@ var OneShotOrchestrator = class {
     let fromFallback = false;
     let lastError;
     let fallbackEligible = false;
+    let attempts = 0;
     if (tracker && !tracker.isAvailable(target.providerId, target.model) || !evaluateModelCalendar(config.modelAvailabilitySchedule, target.providerId, target.model).allowed) {
       this.opts.logger?.debug(
         `one-shot: primary "${target.providerId}/${target.model}" is blocked \u2014 trying fallback`
       );
     } else {
+      attempts += 1;
       const primaryAttempt = await this.tryCall(
         provider,
         request,
@@ -7777,10 +8221,17 @@ var OneShotOrchestrator = class {
         tracker?.recordSuccess(target.providerId, target.model);
         servingProviderId = provider.id;
         servingModel = target.model;
-        return this.buildResult(result, servingProviderId, servingModel, false, startedAt);
+        return this.buildResult(result, servingProviderId, servingModel, false, startedAt, attempts);
       }
       if (!fallbackEligible || chain.length === 0) {
-        return this.buildErrorResult(lastError, target.providerId, target.model, false, startedAt);
+        return this.buildErrorResult(
+          lastError,
+          target.providerId,
+          target.model,
+          false,
+          startedAt,
+          attempts
+        );
       }
     }
     const estimatedTokens = estimateRequestTokens(request.messages, request.system, []).total;
@@ -7808,6 +8259,7 @@ var OneShotOrchestrator = class {
       }
       servingProviderId = fbProvider.id;
       servingModel = entry.model;
+      attempts += 1;
       const attempt = await this.tryCall(
         fbProvider,
         this.buildRequest(input, entry.model),
@@ -7818,7 +8270,14 @@ var OneShotOrchestrator = class {
       if (attempt.response) {
         tracker?.recordSuccess(entry.providerId, entry.model);
         fromFallback = true;
-        return this.buildResult(attempt.response, servingProviderId, servingModel, true, startedAt);
+        return this.buildResult(
+          attempt.response,
+          servingProviderId,
+          servingModel,
+          true,
+          startedAt,
+          attempts
+        );
       }
       lastError = attempt.error;
     }
@@ -7827,7 +8286,8 @@ var OneShotOrchestrator = class {
       servingProviderId,
       servingModel,
       fromFallback,
-      startedAt
+      startedAt,
+      attempts
     );
   }
   // ── Private helpers ─────────────────────────────────────────────
@@ -7929,10 +8389,9 @@ var OneShotOrchestrator = class {
   /** Attempt a provider call while preserving the actual failure for callers. */
   async tryCall(provider, request, signal, providerId, model) {
     try {
-      return {
-        response: await provider.complete(request, { signal }),
-        fallbackEligible: false
-      };
+      const direct = (req) => provider.complete(req, { signal });
+      const response = this.opts.wrapProviderCall ? await this.opts.wrapProviderCall(request, direct) : await direct(request);
+      return { response, fallbackEligible: false };
     } catch (err) {
       if (err instanceof ProviderError && providerId && model) {
         this.opts.statusTracker?.recordFailure(
@@ -7946,12 +8405,17 @@ var OneShotOrchestrator = class {
       }
       return {
         error: err,
-        fallbackEligible: !signal.aborted && (!(err instanceof ProviderError) || isFallbackWorthy(err.kind))
+        // Provider failures retain their normal fallback policy. A plain error
+        // thrown by the host wrapper is a local refusal (for example,
+        // prompt-firewall block mode), not evidence that another provider may
+        // succeed; retrying would only replay the same blocked request and
+        // misattribute the final error to the last fallback.
+        fallbackEligible: !signal.aborted && (err instanceof ProviderError ? isFallbackWorthy(err.kind) : this.opts.wrapProviderCall === void 0)
       };
     }
   }
   /** Build a success result from a provider Response. */
-  buildResult(response, servingProviderId, servingModel, fromFallback, startedAt) {
+  buildResult(response, servingProviderId, servingModel, fromFallback, startedAt, attempts) {
     const textBlocks = response.content.filter(isTextBlock);
     const text = textBlocks.map((b) => b.text).join("\n").trim();
     return {
@@ -7965,11 +8429,12 @@ var OneShotOrchestrator = class {
       },
       durationMs: Math.round(performance.now() - startedAt),
       fromFallback,
+      attempts,
       stopReason: response.stopReason
     };
   }
   /** Build a total-failure error result. */
-  buildErrorResult(error, servingProviderId, servingModel, fromFallback, startedAt) {
+  buildErrorResult(error, servingProviderId, servingModel, fromFallback, startedAt, attempts) {
     return {
       text: "",
       model: servingModel,
@@ -7977,6 +8442,7 @@ var OneShotOrchestrator = class {
       tokens: { input: 0, output: 0, total: 0 },
       durationMs: Math.round(performance.now() - startedAt),
       fromFallback,
+      attempts,
       error: error instanceof Error ? error.message : String(error ?? "Unknown error")
     };
   }
@@ -8075,7 +8541,8 @@ function createOneShotLLMTool(opts) {
     getConfig: opts.getConfig,
     fallbackProfileManager: opts.fallbackProfileManager,
     modelRouter: opts.modelRouter,
-    logger: opts.logger
+    logger: opts.logger,
+    wrapProviderCall: opts.wrapProviderCall
   });
   return {
     name: ONE_SHOT_LLM_TOOL_NAME,
@@ -8107,6 +8574,63 @@ function createOneShotLLMTool(opts) {
   };
 }
 
+// src/plugin/config.ts
+function pluginEntryMatchesName(configuredName, name, aliases = []) {
+  for (const candidate of [name, ...aliases]) {
+    if (configuredName === candidate) return true;
+    if (configuredName === `@wrongstack/plugins/${candidate}`) return true;
+  }
+  return false;
+}
+function resolvePluginEnablement(input) {
+  if (input.config?.features?.plugins === false) {
+    return { enabled: false, source: "feature-flag" };
+  }
+  const names = [.../* @__PURE__ */ new Set([input.name, ...input.aliases ?? []])];
+  const matches = input.matches ?? ((configuredName) => pluginEntryMatchesName(configuredName, input.name, input.aliases ?? []));
+  const plugins = input.config?.plugins;
+  if (Array.isArray(plugins)) {
+    for (const candidate of plugins) {
+      if (typeof candidate === "string") {
+        if (matches(candidate)) return { enabled: true, source: "plugin-entry" };
+        continue;
+      }
+      if (!isPluginEntry(candidate) || !matches(candidate.name)) continue;
+      return { enabled: candidate.enabled !== false, source: "plugin-entry" };
+    }
+  }
+  for (const name of names) {
+    const enabled = input.config?.extensions?.[name]?.["enabled"];
+    if (typeof enabled === "boolean") return { enabled, source: "extension" };
+  }
+  return { enabled: input.defaultState === "active", source: "default" };
+}
+function isPluginEntry(value) {
+  return isRecord2(value) && typeof value["name"] === "string";
+}
+function isRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+// src/security/readonly-permission-policy.ts
+var MUTATION_CAPABILITIES = /* @__PURE__ */ new Set([
+  ToolCapabilities.FS_WRITE,
+  ToolCapabilities.FS_WRITE_OUTSIDE_PROJECT,
+  ToolCapabilities.MEMORY_WRITE,
+  ToolCapabilities.MEMORY_DELETE,
+  ToolCapabilities.SHELL_ARBITRARY,
+  ToolCapabilities.SHELL_RESTRICTED,
+  ToolCapabilities.SHELL_EXEC,
+  ToolCapabilities.TOOL_MUTATE_ANY,
+  ToolCapabilities.CONFIG_MUTATE,
+  ToolCapabilities.PACKAGE_INSTALL,
+  ToolCapabilities.SUBAGENT_SPAWN
+]);
+function toolMutates(tool) {
+  if (tool.mutating === true) return true;
+  return (tool.capabilities ?? []).some((c) => MUTATION_CAPABILITIES.has(c));
+}
+
 // src/utils/json-schema-validate.ts
 function validateAgainstSchema(value, schema) {
   const errors = [];
@@ -8230,6 +8754,12 @@ function deepEqual(a, b) {
 
 // src/tools/plugin-manager.ts
 var PLUGIN_MANAGER_TOOL_NAME = "plugin_manager";
+var PLUGIN_VIEW_STATE_SOURCE = {
+  "feature-flag": "feature_flag",
+  "plugin-entry": "config",
+  extension: "extension",
+  default: "default"
+};
 var INPUT_SCHEMA3 = {
   type: "object",
   properties: {
@@ -8416,7 +8946,36 @@ function createPluginManagerTool(opts) {
           directCall: { tool: tool.name, input: input.input ?? {}, inputSchema: tool.inputSchema }
         };
       }
-      const nestedInput = input.input ?? {};
+      const dangerousCaps = getDangerousCapabilities(tool);
+      if (dangerousCaps.length > 0) {
+        return {
+          status: "needs_direct_call",
+          message: `Tool "${tool.name}" declares dangerous capabilities (${dangerousCaps.join(", ")}); the permission pipeline must rule on it. Call it directly.`,
+          directCall: { tool: tool.name, input: input.input ?? {}, inputSchema: tool.inputSchema }
+        };
+      }
+      if (ctx.meta["readOnly"] === true && toolMutates(tool)) {
+        return {
+          status: "needs_direct_call",
+          message: `Session is in read-only mode and "${tool.name}" mutates. Call it directly so read-only mode can rule on it.`,
+          directCall: { tool: tool.name, input: input.input ?? {}, inputSchema: tool.inputSchema }
+        };
+      }
+      let nestedInput = input.input ?? {};
+      const hooks = opts.getHookRunner?.();
+      if (hooks) {
+        const pre = await hooks.preToolUse(tool.name, nestedInput, ctx, {
+          capabilities: tool.capabilities,
+          mutating: tool.mutating
+        });
+        if (pre.block) {
+          return {
+            status: "error",
+            message: `A policy hook blocked "${tool.name}"` + (pre.reason ? `: ${pre.reason}` : ".")
+          };
+        }
+        if (pre.input) nestedInput = pre.input;
+      }
       const validation = validateAgainstSchema(nestedInput, tool.inputSchema);
       if (!validation.ok) {
         return {
@@ -8461,10 +9020,14 @@ function buildPluginViews(opts) {
   return catalog.map((entry) => {
     const aliases = [...entry.aliases ?? []];
     const names = /* @__PURE__ */ new Set([entry.name, ...aliases]);
-    const configuredEntry = configured.find((item) => names.has(pluginConfigName(item)));
-    const globallyDisabled = config.features?.plugins === false;
-    const enabled = globallyDisabled ? false : configuredEntry === void 0 ? entry.defaultState === "active" : typeof configuredEntry === "string" || configuredEntry.enabled !== false;
-    const stateSource = globallyDisabled ? "feature_flag" : configuredEntry === void 0 ? "default" : "config";
+    const { enabled, source } = resolvePluginEnablement({
+      name: entry.name,
+      aliases,
+      defaultState: entry.defaultState,
+      config,
+      matches: (spec) => names.has(spec)
+    });
+    const stateSource = PLUGIN_VIEW_STATE_SOURCE[source];
     const tools = pluginTools(opts.toolRegistry, entry.name, aliases);
     const managerControl = isManagerLocked(config, entry.name, aliases) ? "locked" : "allowed";
     return {