@wrongstack/core 0.3.3 → 0.3.7

package/dist/defaults/index.d.ts

@@ -1,35 +1,35 @@
 export { D as DefaultLogger, a as DefaultLoggerOptions } from '../logger-BH6AE0W9.js';
 export { AbandonedSession, AttachmentStoreOptions, ConfigLoaderOptions, ConfigMigration, ConfigMigrationError, ConfigSource, DEFAULT_CONFIG_MIGRATIONS, DefaultAttachmentStore, DefaultConfigLoader, DefaultConfigStore, DefaultMemoryStore, DefaultSessionStore, DirectorStateCheckpoint, DirectorStateSnapshot, DirectorSubagentState, DirectorTaskState, MemoryStoreOptions, MigrationContext, MigrationResult, PersistedQueueItem, PlanFile, PlanItem, QueueStore, RecoveryLock, RecoveryLockOptions, SessionAnalyzer, SessionStoreOptions, TodosCheckpointFile, addPlanItem, attachPlanCheckpoint, attachTodosCheckpoint, clearPlan, emptyPlan, formatPlan, loadDirectorState, loadPlan, loadTodosCheckpoint, removePlanItem, runConfigMigrations, savePlan, saveTodosCheckpoint, setPlanItemStatus } from '../storage/index.js';
-export { D as DefaultSessionReader } from '../session-reader-CcPi4BQ8.js';
-export { D as DefaultSecretScrubber, a as DefaultSecretVault, S as SecretVaultOptions, d as decryptConfigSecrets, e as encryptConfigSecrets, m as migratePlaintextSecrets, r as rewriteConfigEncrypted } from '../secret-scrubber-Cuy5afaQ.js';
+export { D as DefaultSessionReader } from '../session-reader-D-z0AgHs.js';
+export { D as DefaultSecretScrubber, a as DefaultSecretVault, S as SecretVaultOptions, d as decryptConfigSecrets, e as encryptConfigSecrets, m as migratePlaintextSecrets, r as rewriteConfigEncrypted } from '../secret-scrubber-Dyh5LVYL.js';
 export { AutoApprovePermissionPolicy, DefaultPermissionPolicy, PermissionPolicyOptions } from '../security/index.js';
-export { C as CompactorOptions, a as DefaultErrorHandler, b as DefaultRetryPolicy, H as HybridCompactor, T as ToolExecutor } from '../tool-executor-HsBLGRaA.js';
+export { C as CompactorOptions, a as DefaultErrorHandler, b as DefaultRetryPolicy, H as HybridCompactor, T as ToolExecutor } from '../tool-executor-B5bgmEgE.js';
 export { AutoCompactionMiddleware, AutonomousRunner, AutonomousRunnerOptions, DefaultSkillLoader, DoneCheckResult, DoneConditionChecker, IntelligentCompactor, IntelligentCompactorOptions, SelectiveCompactor, SelectiveCompactorOptions, SkillLoaderOptions } from '../execution/index.js';
-import { P as ProviderRunner, R as RunProviderOptions } from '../provider-runner-B39miKRw.js';
-import { j as Response } from '../context-IovtuTf8.js';
+import { P as ProviderRunner, R as RunProviderOptions } from '../provider-runner-CU9gnU2E.js';
+import { j as Response } from '../context-B1kBj1lY.js';
 export { ALL_FLEET_AGENTS, AUDIT_LOG_AGENT, AgentFactory, AgentFactoryResult, AgentRunnerOptions, BUG_HUNTER_AGENT, CreateDelegateToolOptions, DEFAULT_DIRECTOR_PREAMBLE, DEFAULT_SUBAGENT_BASELINE, DefaultMultiAgentCoordinator, DelegateHost, Director, DirectorBudgetError, DirectorPromptParts, DirectorSessionFactory, DirectorSessionFactoryOptions, FLEET_ROSTER, FleetBus, FleetEvent, FleetHandler, FleetUsage, FleetUsageAggregator, MultiAgentCoordinatorOptions, REFACTOR_PLANNER_AGENT, SECURITY_SCANNER_AGENT, SubagentPromptParts, SubagentUsageSnapshot, composeDirectorPrompt, composeSubagentPrompt, createDelegateTool, makeAgentSubagentRunner, makeDirectorSessionFactory, rosterSummaryFromConfigs } from '../coordination/index.js';
-export { n as BudgetExceededError, o as BudgetKind, p as BudgetLimits, q as BudgetUsage, r as SubagentBudget } from '../multi-agent-B9a6sflH.js';
-export { I as InMemoryAgentBridge, a as InMemoryBridgeTransport, c as createMessage } from '../agent-bridge-C3DUGjSb.js';
+export { n as BudgetExceededError, o as BudgetKind, p as BudgetLimits, q as BudgetUsage, r as SubagentBudget } from '../multi-agent-D5m66hzB.js';
+export { I as InMemoryAgentBridge, a as InMemoryBridgeTransport, c as createMessage } from '../agent-bridge-DaOnnHNW.js';
 export { D as DefaultModelsRegistry, a as DefaultModelsRegistryOptions, c as classifyFamily } from '../models-registry-DqzwpBQy.js';
 export { DefaultModeStore, LLMSelector, LLMSelectorOptions, ModeLoaderOptions, loadProjectModes, loadUserModes } from '../models/index.js';
 export { DefaultTaskStore, GeneratedTask, SpecDrivenDev, SpecDrivenDevOptions, SpecParser, TaskFlow, TaskFlowEventMap, TaskFlowEventName, TaskFlowExecutionContext, TaskFlowOptions, TaskFlowPhase, TaskGenerator, TaskGeneratorOptions, TaskStore, TaskTracker, TaskTrackerOptions, TaskTransition } from '../sdd/index.js';
 export { DefaultHealthRegistry, InMemoryMetricsSink, MetricsServerHandle, MetricsServerOptions, NoopMetricsSink, NoopTracer, OTelTracer, OtlpMetricsExporterHandle, OtlpMetricsExporterOptions, OtlpTraceExporterHandle, OtlpTraceExporterOptions, PROMETHEUS_CONTENT_TYPE, buildOtlpMetricsRequest, buildOtlpTracesRequest, renderPrometheus, startMetricsServer, startOtlpMetricsExporter, startOtlpTraceExporter, wireMetricsToEvents } from '../observability/index.js';
-export { C as ContextManagerAction, a as ContextManagerInput, b as ContextManagerResult, c as ContextManagerToolOptions, d as allServers, e as awsServer, f as blockServer, g as braveSearchServer, h as context7Server, i as contextManagerTool, j as createContextManagerTool, k as everArtServer, l as filesystemServer, m as githubServer, n as googleMapsServer, o as miniMaxVisionServer, s as sentinelServer, p as slackServer, z as zaiVisionServer } from '../mcp-servers-C2OopXOn.js';
+export { C as ContextManagerAction, a as ContextManagerInput, b as ContextManagerResult, c as ContextManagerToolOptions, d as allServers, e as awsServer, f as blockServer, g as braveSearchServer, h as context7Server, i as contextManagerTool, j as createContextManagerTool, k as everArtServer, l as filesystemServer, m as githubServer, n as googleMapsServer, o as miniMaxVisionServer, s as sentinelServer, p as slackServer, z as zaiVisionServer } from '../mcp-servers-Cf4-bJnd.js';
 import '../logger-BMQgxvdy.js';
-import '../events-BHIQs4o1.js';
+import '../events-BBaKeMfb.js';
 import '../memory-CEXuo7sz.js';
 import '../wstack-paths-BGu2INTm.js';
-import '../config-D2qvAxVd.js';
+import '../config-RlhKLjme.js';
 import '../models-registry-Y2xbog0E.js';
 import '../secret-vault-DoISxaKO.js';
-import '../secret-scrubber-CgG2tV2B.js';
+import '../secret-scrubber-DyUAWS09.js';
 import '../input-reader-E-ffP2ee.js';
-import '../compactor-DpJBI1YH.js';
-import '../skill-C_7znCIC.js';
-import '../index-hWNybrNZ.js';
-import '../system-prompt-Dk1qm8ey.js';
+import '../compactor-CFky6JKM.js';
+import '../skill-DayhFUBb.js';
+import '../index-meJRuQtc.js';
+import '../system-prompt-DNetCecu.js';
 import '../observability-BhnVLBLS.js';
-import '../selector-wT2fv9Fg.js';
+import '../selector-DBEiwXBk.js';
 import 'node:events';
 import '../mode-CV077NjV.js';
 import '../task-graph-BITvWt4t.js';

package/dist/defaults/index.js

@@ -638,6 +638,7 @@ var QueueStore = class {
     } catch (err) {
       const code = err.code;
       if (code === "ENOENT") return [];
+      console.warn(`[QueueStore] failed to read queue file "${this.file}":`, err instanceof Error ? err.message : String(err));
       return [];
     }
     let parsed;
@@ -737,6 +738,13 @@ var DefaultAttachmentStore = class {
     return mergeAdjacentText(blocks);
   }
   async clear() {
+    if (this.spoolDir) {
+      const toDelete = [];
+      for (const att of this.items.values()) {
+        if (att.path) toDelete.push(att.path);
+      }
+      await Promise.all(toDelete.map((p) => fsp.unlink(p).catch(() => void 0)));
+    }
     this.items.clear();
     this.refs.length = 0;
     this.nextSeq = { text: 0, image: 0, file: 0 };
@@ -1480,6 +1488,42 @@ function defaultIsPidAlive(pid) {
   }
 }
 
+// src/utils/regex-guard.ts
+var MAX_PATTERN_LEN = 512;
+var DANGEROUS_PATTERNS = [
+  /(\([^)]*[+*][^)]*\))[+*]/,
+  // (a+)+, (.*)+, etc
+  /(\(\?:[^)]*[+*][^)]*\))[+*]/
+  // same, with non-capturing group
+];
+function compileUserRegex(pattern, flags) {
+  if (typeof pattern !== "string") {
+    return { ok: false, reason: "pattern must be a string" };
+  }
+  if (pattern.length === 0) {
+    return { ok: false, reason: "pattern is empty" };
+  }
+  if (pattern.length > MAX_PATTERN_LEN) {
+    return { ok: false, reason: `pattern exceeds ${MAX_PATTERN_LEN} characters` };
+  }
+  for (const rx of DANGEROUS_PATTERNS) {
+    if (rx.test(pattern)) {
+      return {
+        ok: false,
+        reason: "pattern looks vulnerable to catastrophic backtracking \u2014 rewrite without nested quantifiers"
+      };
+    }
+  }
+  try {
+    return { ok: true, regex: new RegExp(pattern, flags) };
+  } catch (err) {
+    return {
+      ok: false,
+      reason: err instanceof Error ? err.message : "invalid regex"
+    };
+  }
+}
+
 // src/storage/session-reader.ts
 var DefaultSessionReader = class {
   store;
@@ -1574,7 +1618,11 @@ function buildMatcher(q) {
   const ci = q.caseInsensitive ?? true;
   if (q.regex) {
     const flags = ci ? "i" : "";
-    const re = new RegExp(q.query, flags);
+    const compiled = compileUserRegex(q.query, flags);
+    if (!compiled.ok) {
+      throw new Error(`Invalid search regex "${q.query}": ${compiled.reason}`);
+    }
+    const re = compiled.regex;
     return (text) => {
       const m = re.exec(text);
       return m ? { start: m.index, end: m.index + m[0].length } : null;
@@ -2074,6 +2122,10 @@ var DirectorStateCheckpoint = class {
       this.timer = null;
     }
     await this.persist();
+    if (this.rewriteRequested) {
+      this.rewriteRequested = false;
+      await this.persist();
+    }
   }
   bumpUpdatedAt() {
     this.snapshot = { ...this.snapshot, updatedAt: (/* @__PURE__ */ new Date()).toISOString() };
@@ -2299,7 +2351,7 @@ function walk2(node, vault, transform) {
   if (Array.isArray(node)) {
     return node.map((item) => walk2(item, vault, transform));
   }
-  const out = {};
+  const out = /* @__PURE__ */ Object.create(null);
   for (const [k, v] of Object.entries(node)) {
     if (typeof v === "string" && isSecretField2(k)) {
       out[k] = transform(v, k);
@@ -2410,7 +2462,11 @@ function getCachedGlob(pattern) {
   COMPILED_GLOB_CACHE.set(pattern, re);
   return re;
 }
+var MAX_GLOB_PATTERN_LEN = 1024;
 function compileGlob(pattern) {
+  if (pattern.length > MAX_GLOB_PATTERN_LEN) {
+    throw new Error(`Glob pattern exceeds ${MAX_GLOB_PATTERN_LEN} characters`);
+  }
   let i = 0;
   let re = "^";
   while (i < pattern.length) {
@@ -2469,12 +2525,49 @@ var DefaultPermissionPolicy = class {
   loaded = false;
   trustFile;
   yolo;
+  /**
+   * Session-scoped "soft deny" map. When the user presses 'n' (block once),
+   * the tool+pattern is added here. If the LLM retries in the same session,
+   * we return deny directly without asking again.
+   *
+   * Cleared on reload() since reload = fresh trust file snapshot.
+   */
+  sessionDenied = /* @__PURE__ */ new Map();
+  /**
+   * Session-scoped "soft trust" map. When the user presses 'a' (allow once),
+   * the tool+pattern is added here. If the LLM retries in the same session,
+   * we return auto directly without asking again.
+   *
+   * Cleared on reload().
+   */
+  sessionAllowed = /* @__PURE__ */ new Map();
+  /**
+   * Interactive prompt delegate. When set, `evaluate()` calls it to get a
+   * user decision synchronously (CLI REPL path). When cleared (TUI / WebUI),
+   * `evaluate()` returns `confirm` so the caller can emit
+   * `tool.confirm_needed` for the UI layer to handle.
+   *
+   * Mutable so the host can switch from CLI-prompt to event-driven
+   * confirmation at runtime (e.g. when `--goal` forces TUI mode after
+   * the agent was already constructed).
+   */
   promptDelegate;
+  /** Pre-compiled wildcard patterns — rebuilt on reload for O(1) lookup. */
+  wildcardEntries = [];
   constructor(opts) {
     this.trustFile = opts.trustFile;
     this.yolo = opts.yolo ?? false;
     this.promptDelegate = opts.promptDelegate;
   }
+  /**
+   * Replace (or clear) the interactive prompt delegate at runtime.
+   * Used by the CLI to switch from inline prompts (REPL) to event-driven
+   * confirmation (TUI) when the run mode is determined after the policy
+   * was constructed (e.g. `--goal` auto-flipping to TUI).
+   */
+  setPromptDelegate(delegate) {
+    this.promptDelegate = delegate;
+  }
   async reload() {
     try {
       const raw = await fsp.readFile(this.trustFile, "utf8");
@@ -2483,13 +2576,26 @@ var DefaultPermissionPolicy = class {
     } catch {
       this.policy = {};
     }
+    this.wildcardEntries = [];
+    for (const [key, val] of Object.entries(this.policy)) {
+      if (key.includes("*")) this.wildcardEntries.push({ pattern: key, value: val });
+    }
+    this.sessionDenied.clear();
+    this.sessionAllowed.clear();
     this.loaded = true;
   }
-  async evaluate(tool, input, _ctx) {
+  async evaluate(tool, input, ctx) {
     if (!this.loaded) await this.reload();
     const namespaceEntry = this.findNamespaceEntry(tool.name);
     const entry = this.policy[tool.name] ?? namespaceEntry;
     const subject = this.subjectFor(tool.name, input, tool.subjectKey);
+    const subjectKey = `${tool.name}::${subject ?? tool.name}`;
+    if (this.sessionDenied.has(subjectKey)) {
+      return { permission: "deny", source: "deny", reason: "session soft deny (user pressed no)" };
+    }
+    if (this.sessionAllowed.has(subjectKey)) {
+      return { permission: "auto", source: "trust", reason: "session soft allow (user pressed yes)" };
+    }
     if (entry?.deny && subject && matchAny(entry.deny, subject)) {
       return { permission: "deny", source: "deny", reason: "matched deny pattern" };
     }
@@ -2505,6 +2611,11 @@ var DefaultPermissionPolicy = class {
     if (this.yolo) {
       return { permission: "auto", source: "yolo" };
     }
+    if (tool.name === "write" && subject) {
+      if (ctx.hasRead(subject)) {
+        return { permission: "auto", source: "context", reason: "file already read in this session" };
+      }
+    }
     if (tool.permission === "auto") {
       return { permission: "auto", source: "default" };
     }
@@ -2515,6 +2626,7 @@ var DefaultPermissionPolicy = class {
         return { permission: "auto", source: "user", reason: "user always-allowed" };
       }
       if (decision === "deny") {
+        await this.deny({ tool: tool.name, pattern: subject ?? tool.name });
         return { permission: "deny", source: "user", reason: "user denied" };
       }
       return { permission: decision === "yes" ? "auto" : "deny", source: "user" };
@@ -2537,6 +2649,31 @@ var DefaultPermissionPolicy = class {
       throw err;
     }
   }
+  /** Persist a deny rule — this tool+pattern pair is permanently blocked. */
+  async deny(rule) {
+    if (!this.loaded) await this.reload();
+    const entry = this.policy[rule.tool] ?? {};
+    entry.deny = Array.from(/* @__PURE__ */ new Set([...entry.deny ?? [], rule.pattern]));
+    this.policy[rule.tool] = entry;
+    try {
+      await atomicWrite(this.trustFile, JSON.stringify(this.policy, null, 2));
+    } catch (err) {
+      const existing = this.policy[rule.tool];
+      if (existing?.deny) {
+        const idx = existing.deny.indexOf(rule.pattern);
+        if (idx !== -1) existing.deny.splice(idx, 1);
+      }
+      throw err;
+    }
+  }
+  /** Block this tool+pattern for the rest of this session (no trust file). */
+  denyOnce(rule) {
+    this.sessionDenied.set(`${rule.tool}::${rule.pattern}`, true);
+  }
+  /** Auto-approve this tool+pattern for the rest of this session (no trust file). */
+  allowOnce(rule) {
+    this.sessionAllowed.set(`${rule.tool}::${rule.pattern}`, true);
+  }
   subjectFor(toolName, input, subjectKey) {
     if (!input || typeof input !== "object") return void 0;
     const obj = input;
@@ -2564,10 +2701,8 @@ var DefaultPermissionPolicy = class {
     return void 0;
   }
   findNamespaceEntry(toolName) {
-    for (const key of Object.keys(this.policy)) {
-      if (key.includes("*") && matchGlob(key, toolName)) {
-        return this.policy[key];
-      }
+    for (const { pattern, value } of this.wildcardEntries) {
+      if (matchGlob(pattern, toolName)) return value;
     }
     return void 0;
   }
@@ -2581,6 +2716,12 @@ var AutoApprovePermissionPolicy = class {
   }
   async trust() {
   }
+  async deny() {
+  }
+  denyOnce() {
+  }
+  allowOnce() {
+  }
   async reload() {
   }
 };
@@ -4167,6 +4308,15 @@ var ToolExecutor = class {
   opts;
   serializer;
   iterationTimeoutMs;
+  /**
+   * Clear the interactive confirm awaiter so the executor returns
+   * `ToolConfirmPendingResult` instead of blocking on stdin. Used by
+   * the CLI to switch from inline prompts (REPL) to event-driven
+   * confirmation (TUI) at runtime.
+   */
+  clearConfirmAwaiter() {
+    this.opts.confirmAwaiter = void 0;
+  }
   /**
    * Execute a batch of tool uses using the configured strategy.
    * Returns the execution results and the remaining output budget.
@@ -4419,7 +4569,15 @@ var ToolExecutor = class {
 var DoneConditionChecker = class {
   constructor(condition) {
     this.condition = condition;
-    this.compiledRegex = condition.type === "output_match" && condition.pattern ? new RegExp(condition.pattern) : null;
+    if (condition.type === "output_match" && condition.pattern) {
+      const result = compileUserRegex(condition.pattern, "");
+      this.compiledRegex = result.ok ? result.regex : null;
+      if (!result.ok) {
+        console.warn(`[DoneConditionChecker] Invalid regex pattern "${condition.pattern}": ${result.reason}`);
+      }
+    } else {
+      this.compiledRegex = null;
+    }
   }
   condition;
   compiledRegex;
@@ -4657,6 +4815,13 @@ var InMemoryAgentBridge = class {
         this.pendingRequests.delete(correlationId);
         reject(new Error(`Request ${correlationId} timed out after ${timeout}ms`));
       }, timeout);
+      if (this.stopped) {
+        clearTimeout(timer);
+        this.inflightGuards.delete(correlationId);
+        this.pendingRequests.delete(correlationId);
+        reject(new Error("Bridge stopped"));
+        return;
+      }
       this.pendingRequests.set(correlationId, {
         resolve: resolve2,
         reject,
@@ -5176,8 +5341,8 @@ var DefaultMultiAgentCoordinator = class extends EventEmitter {
   // --- internal dispatching ---------------------------------------------
   tryDispatchNext() {
     while (this.canDispatch()) {
-      const subagentId = this.findIdleSubagent();
-      if (!subagentId) {
+      const dispatchable = this.takeNextDispatchableTask();
+      if (!dispatchable) {
         if (this.pendingTasks.length > 0 && !this.hasLiveSubagent()) {
           this.drainPendingAsAborted(
             "No live subagent available \u2014 all stopped or mid-termination"
@@ -5185,8 +5350,7 @@ var DefaultMultiAgentCoordinator = class extends EventEmitter {
         }
         return;
       }
-      const task = this.pendingTasks.shift();
-      if (!task) return;
+      const { subagentId, task } = dispatchable;
       this.runDispatched(subagentId, task).catch((err) => {
         this.recordCompletion({
           subagentId,
@@ -5204,12 +5368,26 @@ var DefaultMultiAgentCoordinator = class extends EventEmitter {
     const max = this.config.maxConcurrent ?? 4;
     return this.inFlight < max && this.pendingTasks.length > 0;
   }
+  takeNextDispatchableTask() {
+    for (let i = 0; i < this.pendingTasks.length; i++) {
+      const task = this.pendingTasks[i];
+      const subagentId = task.subagentId ? this.isIdleSubagent(task.subagentId) ? task.subagentId : null : this.findIdleSubagent();
+      if (!subagentId) continue;
+      this.pendingTasks.splice(i, 1);
+      return { subagentId, task };
+    }
+    return null;
+  }
   findIdleSubagent() {
     for (const [id, s] of this.subagents) {
       if (s.status === "idle" && !this.terminating.has(id)) return id;
     }
     return null;
   }
+  isIdleSubagent(id) {
+    const subagent = this.subagents.get(id);
+    return !!subagent && subagent.status === "idle" && !this.terminating.has(id);
+  }
   /**
    * Returns true iff at least one spawned subagent could still
    * process a task. A "live" subagent is one that is not stopped
@@ -5394,10 +5572,11 @@ var DefaultMultiAgentCoordinator = class extends EventEmitter {
 };
 function classifySubagentError(err, hints = {}) {
   const cause = err instanceof Error ? { name: err.name, message: err.message, stack: err.stack } : void 0;
-  const baseMessage = err instanceof Error ? err.message : String(err);
   if (err instanceof ProviderError) {
-    return providerErrorToSubagentError(err, baseMessage, cause);
+    const baseMessage2 = err.describe();
+    return providerErrorToSubagentError(err, baseMessage2, cause);
   }
+  const baseMessage = err instanceof Error ? err.message : String(err);
   if (err instanceof BudgetExceededError) {
     const map = {
       iterations: "budget_iterations",
@@ -5514,7 +5693,7 @@ function makeSpawnTool(director, roster) {
       if (role && !base) {
         return { error: `unknown role "${role}". roster has: ${roster ? Object.keys(roster).join(", ") : "(empty)"}` };
       }
-      const cfg = { ...base ?? { name: i.name ?? "subagent" } };
+      const cfg = base ? instantiateRosterConfig(role, base) : { name: i.name ?? "subagent" };
       if (typeof i.name === "string") cfg.name = i.name;
       if (typeof i.provider === "string") cfg.provider = i.provider;
       if (typeof i.model === "string") cfg.model = i.model;
@@ -5534,6 +5713,14 @@ function makeSpawnTool(director, roster) {
     }
   };
 }
+function instantiateRosterConfig(role, base) {
+  return {
+    ...base,
+    // Roster entries are templates. A director may spawn several
+    // workers with the same role, so never reuse the template id.
+    id: `${role}-${randomUUID().slice(0, 8)}`
+  };
+}
 function makeAssignTool(director) {
   const inputSchema = {
     type: "object",
@@ -5851,8 +6038,8 @@ var Director = class {
     if (this.spawnCount >= this.maxSpawns) {
       throw new DirectorBudgetError("max_spawns", this.maxSpawns, this.spawnCount + 1);
     }
-    this.spawnCount += 1;
     const result = await this.coordinator.spawn(config);
+    this.spawnCount += 1;
     this.subagentMeta.set(result.subagentId, {
       provider: config.provider,
       model: config.model
@@ -6295,7 +6482,7 @@ function createDelegateTool(opts) {
             error: `Unknown role "${i.role}". Available: ${rosterIds.join(", ") || "(no roster configured)"}.`
           };
         }
-        cfg = { ...base };
+        cfg = instantiateRosterConfig2(i.role, base);
         if (i.systemPromptOverride) cfg.systemPromptOverride = i.systemPromptOverride;
         if (i.provider) cfg.provider = i.provider;
         if (i.model) cfg.model = i.model;
@@ -6381,6 +6568,14 @@ function createDelegateTool(opts) {
     }
   };
 }
+function instantiateRosterConfig2(role, base) {
+  return {
+    ...base,
+    // Roster entries are templates. Give each spawn a fresh id so
+    // parallel or repeated delegates can use the same role safely.
+    id: `${role}-${randomUUID().slice(0, 8)}`
+  };
+}
 function hintForKind(kind, retryable, backoffMs) {
   if (!kind) return void 0;
   switch (kind) {
@@ -6789,6 +6984,7 @@ var FAMILY_BY_NPM = {
   "@ai-sdk/xai": "openai-compatible",
   "@ai-sdk/cerebras": "openai-compatible",
   "@ai-sdk/togetherai": "openai-compatible",
+  "@ai-sdk/mistral": "openai-compatible",
   "@ai-sdk/perplexity": "openai-compatible",
   "@ai-sdk/deepinfra": "openai-compatible",
   "@openrouter/ai-sdk-provider": "openai-compatible",