@wrongstack/core 0.300.0 → 0.302.0

package/dist/tools/index.js

@@ -627,9 +627,7 @@ var CouncilOrchestrator = class {
   profileCache = /* @__PURE__ */ new WeakMap();
   constructor(opts) {
     if (!opts.caller && !opts.seatCaller && !opts.judgeCaller) {
-      throw new Error(
-        "CouncilOrchestrator: provide `caller`, `seatCaller`, or `judgeCaller`."
-      );
+      throw new Error("CouncilOrchestrator: provide `caller`, `seatCaller`, or `judgeCaller`.");
     }
     this.caller = opts.caller;
     this.personas = opts.personas ?? DEFAULT_COUNCIL_PERSONA_REGISTRY;
@@ -809,7 +807,7 @@ var CouncilOrchestrator = class {
         persona: seat.persona,
         status: "invalid",
         ...metadata,
-        error: parsed.error
+        error: withTruncationNote(parsed.error, result, profile.voterMaxTokens)
       };
     }
     return {
@@ -1098,7 +1096,14 @@ var CouncilOrchestrator = class {
       }
       return { ok: false, error: result.error };
     }
-    return parseJudge(result.text, question, this.refusalOptionId);
+    const judged = parseJudge(result.text, question, this.refusalOptionId);
+    if (!judged.ok) {
+      return {
+        ok: false,
+        error: withTruncationNote(judged.error, result, profile.judgeMaxTokens)
+      };
+    }
+    return judged;
   }
   /**
    * Resolve the effective LLM caller for a call. Voter seats (defined
@@ -1206,7 +1211,10 @@ function parseCouncilResponse(text, question, refusalOptionId, opts) {
       error: `${roleLabel} returned an empty or missing ${opts.freeTextField}.`
     };
   }
-  return { ok: true, value: { [opts.freeTextField]: freeText, ...rationale ? { rationale } : {} } };
+  return {
+    ok: true,
+    value: { [opts.freeTextField]: freeText, ...rationale ? { rationale } : {} }
+  };
 }
 function divergentStances(valid) {
   const seen = /* @__PURE__ */ new Set();
@@ -1250,6 +1258,10 @@ function parseJudge(text, question, refusalOptionId) {
     }
   };
 }
+function withTruncationNote(error, result, maxTokens) {
+  if (result.stopReason !== "max_tokens") return error;
+  return `${error} (response truncated at maxTokens=${maxTokens} \u2014 reasoning models may need a larger budget)`;
+}
 function parseObject(text) {
   const trimmed = text.trim();
   const first = trimmed.indexOf("{");
@@ -2291,59 +2303,6 @@ function fallbackProfileChain(config, profileName) {
 }
 var DEFAULT_PRIMARY_COOLDOWN_MAX_MS = 10 * 6e4;
 
-// src/coordination/agents/types.ts
-var HOUR = 60 * 60 * 1e3;
-var LIGHT_BUDGET = {
-  timeoutMs: 3 * HOUR,
-  maxIterations: 3e3,
-  maxToolCalls: 8e3
-};
-var MEDIUM_BUDGET = {
-  timeoutMs: 5 * HOUR,
-  maxIterations: 5e3,
-  maxToolCalls: 14e3
-};
-var HEAVY_BUDGET = {
-  timeoutMs: 10 * HOUR,
-  maxIterations: 8e3,
-  maxToolCalls: 2e4
-};
-var TOOLS = {
-  /** Pure read/inspect — safe for analysis and review agents. */
-  read: ["read", "grep", "glob", "search", "tree", "mailbox"],
-  /** Read + structured inspection (logs, diffs, json, dependency audit). */
-  inspect: ["read", "grep", "glob", "search", "tree", "json", "diff", "logs", "audit", "mailbox"],
-  /** Read + edit (no shell). For agents that write code/docs but don't run it. */
-  write: ["read", "grep", "glob", "search", "tree", "write", "edit", "replace", "patch", "mailbox"],
-  /** Full build loop: edit + run (lint/format/typecheck/test/bash). */
-  build: [
-    "read",
-    "grep",
-    "glob",
-    "search",
-    "tree",
-    "write",
-    "edit",
-    "replace",
-    "patch",
-    "bash",
-    "exec",
-    "lint",
-    "format",
-    "typecheck",
-    "test",
-    "mailbox"
-  ],
-  /** Version control. */
-  vcs: ["read", "grep", "glob", "git", "diff"],
-  /** Dependency management + CVE audit. */
-  deps: ["read", "grep", "glob", "install", "outdated", "audit", "json", "mailbox"],
-  /** Documentation authoring. */
-  docs: ["read", "grep", "glob", "search", "tree", "write", "edit", "document", "mailbox"],
-  /** Web research. */
-  research: ["read", "grep", "glob", "search", "fetch", "mailbox"]
-};
-
 // src/coordination/agents/agent-prompts.ts
 import { readFileSync as readFileSync6, statSync as statSync3 } from "node:fs";
 import * as path6 from "node:path";
@@ -2366,6 +2325,9 @@ function canonicalProjectRoot(absRoot) {
     const commonDirFile = path2.join(gitDir, "commondir");
     if (!fs.statSync(commonDirFile).isFile()) return checkoutRoot;
     const commonDir = path2.resolve(gitDir, fs.readFileSync(commonDirFile, "utf8").trim());
+    const worktreesDir = path2.dirname(gitDir);
+    if (path2.basename(worktreesDir).toLowerCase() !== "worktrees") return checkoutRoot;
+    if (path2.resolve(worktreesDir, "..") !== commonDir) return checkoutRoot;
     if (path2.basename(commonDir).toLowerCase() !== ".git") return checkoutRoot;
     return path2.dirname(commonDir);
   } catch {
@@ -2388,7 +2350,7 @@ function safeProfileName(name) {
   const safe = (name ?? "").replace(/[/\\:]/g, "_").replace(/\.\./g, "_").trim();
   return safe || "default";
 }
-function activeProfileName(globalRoot) {
+function bootstrapProfileName(globalRoot) {
   try {
     const parsed = JSON.parse(fs.readFileSync(path2.join(globalRoot, "config.json"), "utf8"));
     return safeProfileName(
@@ -2406,7 +2368,7 @@ function wstackGlobalRoot() {
 function resolveWstackPaths(opts) {
   const globalRoot = opts.globalRoot ?? (opts.userHome ? path2.join(opts.userHome, ".wrongstack") : wstackGlobalRoot());
   const homeDir = opts.userHome ?? os.homedir();
-  const profileName = safeProfileName(opts.profileName ?? activeProfileName(globalRoot));
+  const profileName = safeProfileName(opts.profileName ?? bootstrapProfileName(globalRoot));
   const profileDir = path2.join(globalRoot, "profiles", profileName);
   const hash = projectHash(opts.projectRoot);
   const slug = projectSlug(opts.projectRoot);
@@ -2476,7 +2438,12 @@ function resolveWstackPaths(opts) {
     projectRequirementIntakes: path2.join(projectDir, "requirement-intakes"),
     syncConfig: path2.join(profileDir, "sync.json"),
     configHistoryDir: path2.join(globalRoot, "config-history"),
-    projectStatus: (projectHash2) => path2.join(globalRoot, "projects", projectHash2, "status.json")
+    projectStatus: (statusProjectSlug) => {
+      if (!/^[a-z0-9](?:[a-z0-9-]{0,39})-[a-f0-9]{6}$/.test(statusProjectSlug)) {
+        throw new Error(`Invalid project slug: ${statusProjectSlug}`);
+      }
+      return path2.join(globalRoot, "projects", statusProjectSlug, "status.json");
+    }
   };
 }
 
@@ -2521,6 +2488,8 @@ var ToolCapabilities = {
   NET_OUTBOUND: "net.outbound",
   /** Can mutate in-memory session todos only. */
   SESSION_TODO: "session.todo",
+  /** Can park after-task `<nextsteps>` suggestions for the current turn. */
+  SESSION_NEXTSTEPS: "session.nextsteps",
   /** Can mutate in-memory session mode only. */
   SESSION_MODE: "session.mode",
   /** Can inspect registered tool metadata. */
@@ -2582,6 +2551,334 @@ var WIDE_SUBAGENT_CAPABILITIES = [
   ToolCapabilities.COORDINATION_FLEET_READ,
   ToolCapabilities.COORDINATION_RESULT_SUBMIT
 ];
+function getDangerousCapabilities(toolOrCaps) {
+  if (!toolOrCaps) return [];
+  const input = toolOrCaps;
+  const caps = Array.isArray(toolOrCaps) ? toolOrCaps : input.capabilities ?? [];
+  return caps.filter(
+    (c) => DANGEROUS_FOR_SUBAGENTS.includes(c)
+  );
+}
+
+// src/types/runtime-capability-manifest.ts
+var PLAYWRIGHT_ALIASES = {
+  playwright_navigate: "browser_navigate",
+  playwright_screenshot: "browser_screenshot",
+  playwright_click: "browser_click",
+  playwright_type: "browser_type",
+  playwright_evaluate: "browser_evaluate",
+  playwright_select_option: "browser_select",
+  playwright_hover: "browser_hover",
+  playwright_fill_form: "browser_type",
+  playwright_wait_for: "browser_wait",
+  playwright_press_key: "browser_press",
+  playwright_drag: "browser_drag"
+};
+var RUNTIME_CAPABILITY_MANIFEST = [
+  {
+    id: "filesystem.read",
+    pack: "core",
+    exposure: "direct",
+    tools: ["read", "grep", "glob", "tree"]
+  },
+  {
+    id: "code.inspect",
+    pack: "core",
+    exposure: "direct",
+    tools: [
+      "codebase-stats",
+      "codebase-search",
+      "codebase-incoming-calls",
+      "codebase-outgoing-calls",
+      "codebase-index",
+      "dead-code-scan",
+      "diff",
+      "json",
+      "logs"
+    ]
+  },
+  {
+    id: "filesystem.write",
+    pack: "development",
+    exposure: "direct",
+    tools: ["write", "edit", "replace", "patch"]
+  },
+  {
+    id: "execution.shell",
+    pack: "development",
+    exposure: "direct",
+    tools: ["bash", "exec", "language", "language_info", "language_package"]
+  },
+  {
+    id: "verification.run",
+    pack: "development",
+    exposure: "direct",
+    tools: ["lint", "format", "typecheck", "test", "e2e_plan"]
+  },
+  {
+    id: "version-control.manage",
+    pack: "development",
+    exposure: "direct",
+    tools: ["git"]
+  },
+  {
+    id: "dependencies.manage",
+    pack: "development",
+    exposure: "on-demand",
+    tools: ["install", "outdated", "audit"]
+  },
+  {
+    id: "documentation.author",
+    pack: "development",
+    exposure: "on-demand",
+    tools: ["document", "design", "scaffold"]
+  },
+  {
+    id: "web.research",
+    pack: "core",
+    exposure: "direct",
+    tools: ["search", "fetch"]
+  },
+  {
+    id: "work.plan",
+    pack: "core",
+    exposure: "direct",
+    tools: ["todo", "plan", "task", "kanban", "nextsteps"]
+  },
+  {
+    id: "coordination.mailbox",
+    pack: "fleet",
+    exposure: "direct",
+    tools: ["mailbox", "mail_send", "mail_inbox", "fleet_status"]
+  },
+  {
+    id: "fleet.delegate",
+    pack: "fleet",
+    exposure: "on-demand",
+    tools: [
+      "delegate",
+      "spawn_subagent",
+      "assign_task",
+      "kanban_queue",
+      "await_tasks",
+      "ask_subagent",
+      "ask_result",
+      "roll_up",
+      "quality_gate",
+      "terminate_subagent",
+      "terminate_all",
+      "work_complete",
+      "collab_debug",
+      "fleet_emit",
+      "fleet"
+    ]
+  },
+  {
+    id: "reasoning.oneshot",
+    pack: "core",
+    exposure: "on-demand",
+    tools: ["llm", "council"]
+  },
+  {
+    id: "memory.manage",
+    pack: "memory",
+    exposure: "on-demand",
+    tools: ["remember", "search_memory", "find_related_memories", "forget"]
+  },
+  {
+    id: "memory.curate",
+    pack: "memory",
+    exposure: "on-demand",
+    tools: [
+      "memory_candidates",
+      "memory_update",
+      "memory_delete",
+      "memory_recover",
+      "memory_backfill_recoverable",
+      "memory_for_file",
+      "memory_for_path",
+      "memory_search",
+      "memory_graph",
+      "memory_gather_batch",
+      "memory_verify",
+      "memory_hygiene"
+    ]
+  },
+  {
+    id: "browser.interact",
+    pack: "browser",
+    exposure: "on-demand",
+    tools: [
+      "browser_open",
+      "browser_status",
+      "browser_list",
+      "browser_navigate",
+      "browser_snapshot",
+      "browser_screenshot",
+      "browser_click",
+      "browser_type",
+      "browser_select",
+      "browser_press",
+      "browser_hover",
+      "browser_drag",
+      "browser_wait",
+      "browser_evaluate",
+      "browser_upload",
+      "browser_close"
+    ],
+    aliases: PLAYWRIGHT_ALIASES
+  },
+  {
+    id: "mcp.dynamic",
+    pack: "mcp",
+    exposure: "on-demand",
+    tools: ["mcp_use"]
+  },
+  {
+    id: "automation.manage",
+    pack: "admin",
+    exposure: "on-demand",
+    tools: ["cron_schedule", "cron_list", "cron_cancel", "watch_start", "watch_list", "watch_stop"]
+  },
+  {
+    id: "context.pin",
+    pack: "admin",
+    exposure: "on-demand",
+    tools: ["pin_add", "pin_list", "pin_remove"]
+  },
+  {
+    id: "quality.analyze",
+    pack: "development",
+    exposure: "on-demand",
+    tools: ["dead_code_scan", "detect_duplicate_code", "secret_scanner_test", "error_lens_history"]
+  },
+  {
+    id: "release.manage",
+    pack: "development",
+    exposure: "on-demand",
+    tools: ["git_autocommit", "semver_current", "semver_bump", "semver_changelog"]
+  },
+  {
+    id: "messaging.telegram",
+    pack: "fleet",
+    exposure: "on-demand",
+    tools: ["telegram_send", "telegram_read", "telegram_approve"]
+  },
+  {
+    id: "tools.discover",
+    pack: "admin",
+    exposure: "direct",
+    tools: ["tool_search", "tool_use", "tool_help", "batch_tool_use"]
+  },
+  {
+    id: "runtime.admin",
+    pack: "admin",
+    exposure: "internal",
+    tools: ["set_working_dir", "context_manager", "mode", "skill", "mcp_control"]
+  }
+];
+var CAPABILITY_BY_ID = new Map(
+  RUNTIME_CAPABILITY_MANIFEST.map((definition) => [definition.id, definition])
+);
+var CAPABILITY_BY_TOOL = /* @__PURE__ */ new Map();
+var TOOL_ALIASES = /* @__PURE__ */ new Map();
+for (const definition of RUNTIME_CAPABILITY_MANIFEST) {
+  for (const tool of definition.tools) {
+    CAPABILITY_BY_TOOL.set(tool, definition.id);
+  }
+  for (const [alias, tool] of Object.entries(definition.aliases ?? {})) {
+    TOOL_ALIASES.set(alias, tool);
+  }
+}
+function toolsForRuntimeCapabilities(capabilityIds) {
+  return [
+    ...new Set(
+      capabilityIds.flatMap((id) => {
+        const definition = CAPABILITY_BY_ID.get(id);
+        if (!definition) throw new Error(`Unknown runtime capability: "${id}"`);
+        return definition.tools;
+      })
+    )
+  ];
+}
+function normalizeRuntimeToolName(name) {
+  return TOOL_ALIASES.get(name) ?? name;
+}
+function runtimeCapabilityForTool(name) {
+  return CAPABILITY_BY_TOOL.get(normalizeRuntimeToolName(name));
+}
+function inferRuntimeCapabilities(toolNames) {
+  const ids = /* @__PURE__ */ new Set();
+  for (const rawName of toolNames) {
+    const id = runtimeCapabilityForTool(rawName);
+    if (id) ids.add(id);
+  }
+  return [...ids];
+}
+
+// src/coordination/agents/project-agent-consolidation.ts
+import {
+  existsSync,
+  mkdirSync,
+  readFileSync as readFileSync3,
+  rmSync
+} from "node:fs";
+import * as path4 from "node:path";
+
+// src/coordination/agents/project-agent-learning-entries.ts
+function splitLearnedEntries(body) {
+  return body.split(/\n---\n+/).map((entry) => entry.trim()).map(
+    (entry) => entry.replace(/^# Learned wisdom for .+$/im, "").replace(/<!--[\s\S]*?-->/g, "").trim()
+  ).filter(Boolean);
+}
+
+// src/coordination/agents/project-agent-paths.ts
+import * as path3 from "node:path";
+var AGENT_ROLE_PATTERN = /^[a-z0-9][a-z0-9._-]{0,95}$/i;
+function assertProjectAgentRole(role) {
+  const normalized = role.trim();
+  if (!AGENT_ROLE_PATTERN.test(normalized) || normalized === "." || normalized === ".." || normalized.includes("/") || normalized.includes("\\")) {
+    throw new Error(`Invalid project agent role: "${role}".`);
+  }
+  return normalized;
+}
+function agentsDir(projectRoot) {
+  const root = projectRoot ?? process.cwd();
+  return path3.join(root, ".wrongstack", "agents");
+}
+function roleDir(role, projectRoot) {
+  return path3.join(agentsDir(projectRoot), assertProjectAgentRole(role));
+}
+function learningPolicyPath(role, projectRoot) {
+  return path3.join(roleDir(role, projectRoot), "learning.json");
+}
+
+// src/coordination/agents/project-agent-consolidation.ts
+function consolidationPath(role, projectRoot) {
+  return path4.join(roleDir(role, projectRoot), "consolidated.md");
+}
+function consolidationMetaPath(role, projectRoot) {
+  return path4.join(roleDir(role, projectRoot), "consolidation.json");
+}
+function loadProjectAgentConsolidated(role, projectRoot) {
+  try {
+    return readFileSync3(consolidationPath(role, projectRoot), "utf8").trim();
+  } catch {
+    return "";
+  }
+}
+function loadConsolidationMetadata(role, projectRoot) {
+  try {
+    const raw = readFileSync3(consolidationMetaPath(role, projectRoot), "utf8");
+    const parsed = JSON.parse(raw);
+    if (typeof parsed === "object" && parsed !== null && typeof parsed.consolidatedAt === "string" && typeof parsed.sourceEntryCount === "number") {
+      return parsed;
+    }
+    return void 0;
+  } catch {
+    return void 0;
+  }
+}
 
 // src/coordination/agents/project-agent-knowledge-manifests.ts
 var BUILT_IN_KNOWLEDGE_MANIFESTS = {
@@ -2649,30 +2946,7 @@ var BUILT_IN_KNOWLEDGE_MANIFESTS = {
 };
 
 // src/coordination/agents/project-agent-learning-policy.ts
-import { readFileSync as readFileSync3 } from "node:fs";
-
-// src/coordination/agents/project-agent-paths.ts
-import * as path3 from "node:path";
-var AGENT_ROLE_PATTERN = /^[a-z0-9][a-z0-9._-]{0,95}$/i;
-function assertProjectAgentRole(role) {
-  const normalized = role.trim();
-  if (!AGENT_ROLE_PATTERN.test(normalized) || normalized === "." || normalized === ".." || normalized.includes("/") || normalized.includes("\\")) {
-    throw new Error(`Invalid project agent role: "${role}".`);
-  }
-  return normalized;
-}
-function agentsDir(projectRoot) {
-  const root = projectRoot ?? process.cwd();
-  return path3.join(root, ".wrongstack", "agents");
-}
-function roleDir(role, projectRoot) {
-  return path3.join(agentsDir(projectRoot), assertProjectAgentRole(role));
-}
-function learningPolicyPath(role, projectRoot) {
-  return path3.join(roleDir(role, projectRoot), "learning.json");
-}
-
-// src/coordination/agents/project-agent-learning-policy.ts
+import { readFileSync as readFileSync4 } from "node:fs";
 var DEFAULT_LEARNING_POLICY = {
   enabled: true,
   lifetimeCaptureCount: 0
@@ -2680,7 +2954,7 @@ var DEFAULT_LEARNING_POLICY = {
 function loadProjectAgentLearningPolicy(role, projectRoot) {
   try {
     const parsed = JSON.parse(
-      readFileSync3(learningPolicyPath(role, projectRoot), "utf8")
+      readFileSync4(learningPolicyPath(role, projectRoot), "utf8")
     );
     return {
       enabled: parsed.enabled !== false,
@@ -2693,47 +2967,6 @@ function loadProjectAgentLearningPolicy(role, projectRoot) {
   }
 }
 
-// src/coordination/agents/project-agent-learning-entries.ts
-function splitLearnedEntries(body) {
-  return body.split(/\n---\n+/).map((entry) => entry.trim()).map(
-    (entry) => entry.replace(/^# Learned wisdom for .+$/im, "").replace(/<!--[\s\S]*?-->/g, "").trim()
-  ).filter(Boolean);
-}
-
-// src/coordination/agents/project-agent-consolidation.ts
-import {
-  existsSync,
-  mkdirSync,
-  readFileSync as readFileSync4,
-  rmSync
-} from "node:fs";
-import * as path4 from "node:path";
-function consolidationPath(role, projectRoot) {
-  return path4.join(roleDir(role, projectRoot), "consolidated.md");
-}
-function consolidationMetaPath(role, projectRoot) {
-  return path4.join(roleDir(role, projectRoot), "consolidation.json");
-}
-function loadProjectAgentConsolidated(role, projectRoot) {
-  try {
-    return readFileSync4(consolidationPath(role, projectRoot), "utf8").trim();
-  } catch {
-    return "";
-  }
-}
-function loadConsolidationMetadata(role, projectRoot) {
-  try {
-    const raw = readFileSync4(consolidationMetaPath(role, projectRoot), "utf8");
-    const parsed = JSON.parse(raw);
-    if (typeof parsed === "object" && parsed !== null && typeof parsed.consolidatedAt === "string" && typeof parsed.sourceEntryCount === "number") {
-      return parsed;
-    }
-    return void 0;
-  } catch {
-    return void 0;
-  }
-}
-
 // src/coordination/agents/project-agent-identity.ts
 function loadProjectAgentIdentity(role, projectRoot) {
   const identityPath = path5.join(roleDir(role, projectRoot), "identity.md");
@@ -3062,6 +3295,64 @@ function isDirectory2(candidate) {
   }
 }
 
+// src/coordination/agents/types.ts
+var HOUR = 60 * 60 * 1e3;
+var LIGHT_BUDGET = {
+  timeoutMs: 3 * HOUR,
+  maxIterations: 3e3,
+  maxToolCalls: 8e3
+};
+var MEDIUM_BUDGET = {
+  timeoutMs: 5 * HOUR,
+  maxIterations: 5e3,
+  maxToolCalls: 14e3
+};
+var HEAVY_BUDGET = {
+  timeoutMs: 10 * HOUR,
+  maxIterations: 8e3,
+  maxToolCalls: 2e4
+};
+var TOOLS = {
+  /** Pure read/inspect — safe for analysis and review agents. */
+  read: ["read", "grep", "glob", "search", "tree", "mailbox"],
+  /** Read + structured inspection (logs, diffs, json, dependency audit). */
+  inspect: ["read", "grep", "glob", "search", "tree", "json", "diff", "logs", "audit", "mailbox"],
+  /** Read + edit (no shell). For agents that write code/docs but don't run it. */
+  write: ["read", "grep", "glob", "search", "tree", "write", "edit", "replace", "patch", "mailbox"],
+  /** Full build loop: edit + run (lint/format/typecheck/test/bash). */
+  build: [
+    "read",
+    "grep",
+    "glob",
+    "search",
+    "tree",
+    "write",
+    "edit",
+    "replace",
+    "patch",
+    "bash",
+    "exec",
+    "lint",
+    "format",
+    "typecheck",
+    "test",
+    "mailbox"
+  ],
+  /** Version control. */
+  vcs: ["read", "grep", "glob", "git", "diff"],
+  /** Dependency management + CVE audit. */
+  deps: ["read", "grep", "glob", "install", "outdated", "audit", "json", "mailbox"],
+  /** Documentation authoring. */
+  docs: ["read", "grep", "glob", "search", "tree", "write", "edit", "document", "mailbox"],
+  /** Web research. */
+  research: ["read", "grep", "glob", "search", "fetch", "mailbox"]
+};
+var SPECIALIST_TOOLS = {
+  browser: toolsForRuntimeCapabilities(["browser.interact"]),
+  memory: toolsForRuntimeCapabilities(["memory.manage"]),
+  mcp: toolsForRuntimeCapabilities(["mcp.dynamic"])
+};
+
 // src/coordination/agents/phase1-discovery.ts
 var DISCOVERY_AGENTS = [
   {
@@ -3097,7 +3388,7 @@ var DISCOVERY_AGENTS = [
       id: "search",
       name: "Search",
       role: "search",
-      tools: [...TOOLS.read],
+      tools: [...TOOLS.read, "codebase-search"],
       prompt: agentPrompt("search")
     },
     budget: MEDIUM_BUDGET,
@@ -3559,14 +3850,7 @@ var WAVE1_AGENTS = [
     capability: {
       phase: "domain",
       summary: "Android platform specialist: Kotlin, Jetpack Compose, Android SDK, lifecycle and Play Store delivery.",
-      keywords: [
-        ...ANDROID_META.signals,
-        "android",
-        "kotlin",
-        "compose",
-        "gradle",
-        "playstore"
-      ]
+      keywords: [...ANDROID_META.signals, "android", "kotlin", "compose", "gradle", "playstore"]
     }
   },
   {
@@ -3581,14 +3865,7 @@ var WAVE1_AGENTS = [
     capability: {
       phase: "domain",
       summary: "Desktop application specialist: Electron or Tauri, native packaging, IPC and OS integration.",
-      keywords: [
-        ...DESKTOP_META.signals,
-        "desktop",
-        "electron",
-        "tauri",
-        "ipc",
-        "tray"
-      ]
+      keywords: [...DESKTOP_META.signals, "desktop", "electron", "tauri", "ipc", "tray"]
     }
   },
   {
@@ -3664,7 +3941,7 @@ var WAVE1_AGENTS = [
       id: "platform-engineer",
       name: "Platform Engineer",
       role: "platform-engineer",
-      tools: [...TOOLS.build, "install", "git", "node-modern"],
+      tools: [...TOOLS.build, "install", "git"],
       prompt: agentPrompt("platform-engineer")
     },
     budget: MEDIUM_BUDGET,
@@ -3908,8 +4185,7 @@ var WAVE2_AGENTS = [
       id: "resilience-engineer",
       name: "Resilience Engineer",
       role: "resilience-engineer",
-      tools: [...TOOLS.build, "logs", "observability"],
-      // uniqueness guaranteed by 'observability' vs chaos-engineer's 'test'
+      tools: [...TOOLS.build, "logs"],
       prompt: agentPrompt("resilience-engineer")
     },
     budget: MEDIUM_BUDGET,
@@ -3932,8 +4208,7 @@ var WAVE2_AGENTS = [
       id: "chaos-engineer",
       name: "Chaos Engineer",
       role: "chaos-engineer",
-      tools: [...TOOLS.build, "logs", "observability"],
-      // uniqueness guaranteed by 'observability' vs chaos-engineer's 'test'
+      tools: [...TOOLS.build, "logs"],
       prompt: agentPrompt("chaos-engineer")
     },
     budget: MEDIUM_BUDGET,
@@ -4074,21 +4349,7 @@ var VERIFY_AGENTS = [
       id: "e2e",
       name: "E2E",
       role: "e2e",
-      tools: [
-        ...TOOLS.build,
-        "fetch",
-        "playwright_navigate",
-        "playwright_screenshot",
-        "playwright_click",
-        "playwright_type",
-        "playwright_evaluate",
-        "playwright_select_option",
-        "playwright_hover",
-        "playwright_fill_form",
-        "playwright_wait_for",
-        "playwright_press_key",
-        "playwright_drag"
-      ],
+      tools: [...TOOLS.build, "fetch", ...SPECIALIST_TOOLS.browser],
       prompt: agentPrompt("e2e")
     },
     budget: HEAVY_BUDGET,
@@ -4123,21 +4384,7 @@ var VERIFY_AGENTS = [
       id: "browser",
       name: "Browser",
       role: "browser",
-      tools: [
-        ...TOOLS.read,
-        "fetch",
-        "playwright_navigate",
-        "playwright_screenshot",
-        "playwright_click",
-        "playwright_type",
-        "playwright_evaluate",
-        "playwright_select_option",
-        "playwright_hover",
-        "playwright_fill_form",
-        "playwright_wait_for",
-        "playwright_press_key",
-        "playwright_drag"
-      ],
+      tools: [...TOOLS.read, "fetch", ...SPECIALIST_TOOLS.browser],
       prompt: agentPrompt("browser")
     },
     budget: MEDIUM_BUDGET,
@@ -4838,27 +5085,7 @@ var DELIVERY_AGENTS = [
       id: "devops",
       name: "DevOps",
       role: "devops",
-      tools: [
-        ...TOOLS.build,
-        "mcp__ssh__ssh_list_servers",
-        "mcp__ssh__ssh_connection_status",
-        "mcp__ssh__ssh_execute",
-        "mcp__ssh__ssh_execute_sudo",
-        "mcp__ssh__ssh_upload",
-        "mcp__ssh__ssh_download",
-        "mcp__ssh__ssh_sync",
-        "mcp__ssh__ssh_deploy",
-        "mcp__ssh__ssh_health_check",
-        "mcp__ssh__ssh_service_status",
-        "mcp__ssh__ssh_process_manager",
-        "mcp__ssh__ssh_tunnel",
-        "mcp__ssh__ssh_backup_create",
-        "mcp__ssh__ssh_backup_list",
-        "mcp__ssh__ssh_backup_restore",
-        "mcp__ssh__ssh_db_list",
-        "mcp__ssh__ssh_db_query",
-        "mcp__ssh__ssh_profile"
-      ],
+      tools: [...TOOLS.build, ...SPECIALIST_TOOLS.mcp],
       prompt: agentPrompt("devops")
     },
     budget: MEDIUM_BUDGET,
@@ -5059,7 +5286,7 @@ var WAVE3_AGENTS = [
       id: "messaging",
       name: "Messaging",
       role: "messaging",
-      tools: [...TOOLS.build, "logs", "observability"],
+      tools: [...TOOLS.build, "logs"],
       prompt: agentPrompt("messaging")
     },
     budget: HEAVY_BUDGET,
@@ -5500,7 +5727,7 @@ var WAVE4_AGENTS = [
       id: "memory-curator",
       name: "Memory Curator",
       role: "memory-curator",
-      tools: [...TOOLS.read, "memory"],
+      tools: [...TOOLS.read, ...SPECIALIST_TOOLS.memory],
       prompt: agentPrompt("memory-curator")
     },
     budget: LIGHT_BUDGET,
@@ -5522,7 +5749,7 @@ var WAVE4_AGENTS = [
       id: "fleet-coordinator",
       name: "Fleet Coordinator",
       role: "fleet-coordinator",
-      tools: [...TOOLS.read, "plan", "multi-agent"],
+      tools: [...TOOLS.read, "plan"],
       prompt: agentPrompt("fleet-coordinator")
     },
     budget: MEDIUM_BUDGET,
@@ -5622,8 +5849,20 @@ var ROLE_SKILL_SETS = {
   cost: skillSet("audit-log", "tech-stack", "observability", "research-web"),
   "tech-stack": skillSet("tech-stack", "research-web", "security-scanner", "node-modern"),
   // ── Wave 1: Platform and systems engineering ──────────────────────────
-  android: skillSet("react-modern", "typescript-strict", "testing", "security-scanner", "tech-stack"),
-  desktop: skillSet("node-modern", "typescript-strict", "testing", "security-scanner", "tech-stack"),
+  android: skillSet(
+    "react-modern",
+    "typescript-strict",
+    "testing",
+    "security-scanner",
+    "tech-stack"
+  ),
+  desktop: skillSet(
+    "node-modern",
+    "typescript-strict",
+    "testing",
+    "security-scanner",
+    "tech-stack"
+  ),
   realtime: skillSet(
     "api-design",
     "observability",
@@ -5727,26 +5966,9 @@ var ROLE_SKILL_SETS = {
     "security-scanner",
     "tech-stack"
   ),
-  "benchmark-engineer": skillSet(
-    "observability",
-    "testing",
-    "output-standards",
-    "tech-stack"
-  ),
-  "memory-curator": skillSet(
-    "mnemosyne",
-    "audit-log",
-    "testing",
-    "output-standards",
-    "tech-stack"
-  ),
-  "fleet-coordinator": skillSet(
-    "multi-agent",
-    "sdd",
-    "output-standards",
-    "testing",
-    "tech-stack"
-  ),
+  "benchmark-engineer": skillSet("observability", "testing", "output-standards", "tech-stack"),
+  "memory-curator": skillSet("mnemosyne", "audit-log", "testing", "output-standards", "tech-stack"),
+  "fleet-coordinator": skillSet("multi-agent", "sdd", "output-standards", "testing", "tech-stack"),
   // ── Wave 2: Security, resilience, governance and agent platform ────────
   "threat-modeler": skillSet(
     "security-scanner",
@@ -5798,6 +6020,7 @@ var SHADOW_AGENT_SKILLS = skillSet(
   "observability",
   "security-scanner"
 );
+var MAX_EAGER_ROSTER_SKILLS = 3;
 function assignSkillsToAgents(definitions) {
   return definitions.map((definition) => {
     const role = definition.config.role;
@@ -5811,7 +6034,8 @@ function assignSkillsToAgents(definitions) {
       ...definition,
       config: {
         ...definition.config,
-        skillNames: [...skills]
+        capabilities: inferRuntimeCapabilities(definition.config.tools ?? []),
+        skillNames: skills.slice(0, MAX_EAGER_ROSTER_SKILLS)
       }
     };
   });
@@ -8165,10 +8389,9 @@ var OneShotOrchestrator = class {
   /** Attempt a provider call while preserving the actual failure for callers. */
   async tryCall(provider, request, signal, providerId, model) {
     try {
-      return {
-        response: await provider.complete(request, { signal }),
-        fallbackEligible: false
-      };
+      const direct = (req) => provider.complete(req, { signal });
+      const response = this.opts.wrapProviderCall ? await this.opts.wrapProviderCall(request, direct) : await direct(request);
+      return { response, fallbackEligible: false };
     } catch (err) {
       if (err instanceof ProviderError && providerId && model) {
         this.opts.statusTracker?.recordFailure(
@@ -8182,7 +8405,12 @@ var OneShotOrchestrator = class {
       }
       return {
         error: err,
-        fallbackEligible: !signal.aborted && (!(err instanceof ProviderError) || isFallbackWorthy(err.kind))
+        // Provider failures retain their normal fallback policy. A plain error
+        // thrown by the host wrapper is a local refusal (for example,
+        // prompt-firewall block mode), not evidence that another provider may
+        // succeed; retrying would only replay the same blocked request and
+        // misattribute the final error to the last fallback.
+        fallbackEligible: !signal.aborted && (err instanceof ProviderError ? isFallbackWorthy(err.kind) : this.opts.wrapProviderCall === void 0)
       };
     }
   }
@@ -8313,7 +8541,8 @@ function createOneShotLLMTool(opts) {
     getConfig: opts.getConfig,
     fallbackProfileManager: opts.fallbackProfileManager,
     modelRouter: opts.modelRouter,
-    logger: opts.logger
+    logger: opts.logger,
+    wrapProviderCall: opts.wrapProviderCall
   });
   return {
     name: ONE_SHOT_LLM_TOOL_NAME,
@@ -8383,6 +8612,25 @@ function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
+// src/security/readonly-permission-policy.ts
+var MUTATION_CAPABILITIES = /* @__PURE__ */ new Set([
+  ToolCapabilities.FS_WRITE,
+  ToolCapabilities.FS_WRITE_OUTSIDE_PROJECT,
+  ToolCapabilities.MEMORY_WRITE,
+  ToolCapabilities.MEMORY_DELETE,
+  ToolCapabilities.SHELL_ARBITRARY,
+  ToolCapabilities.SHELL_RESTRICTED,
+  ToolCapabilities.SHELL_EXEC,
+  ToolCapabilities.TOOL_MUTATE_ANY,
+  ToolCapabilities.CONFIG_MUTATE,
+  ToolCapabilities.PACKAGE_INSTALL,
+  ToolCapabilities.SUBAGENT_SPAWN
+]);
+function toolMutates(tool) {
+  if (tool.mutating === true) return true;
+  return (tool.capabilities ?? []).some((c) => MUTATION_CAPABILITIES.has(c));
+}
+
 // src/utils/json-schema-validate.ts
 function validateAgainstSchema(value, schema) {
   const errors = [];
@@ -8698,7 +8946,36 @@ function createPluginManagerTool(opts) {
           directCall: { tool: tool.name, input: input.input ?? {}, inputSchema: tool.inputSchema }
         };
       }
-      const nestedInput = input.input ?? {};
+      const dangerousCaps = getDangerousCapabilities(tool);
+      if (dangerousCaps.length > 0) {
+        return {
+          status: "needs_direct_call",
+          message: `Tool "${tool.name}" declares dangerous capabilities (${dangerousCaps.join(", ")}); the permission pipeline must rule on it. Call it directly.`,
+          directCall: { tool: tool.name, input: input.input ?? {}, inputSchema: tool.inputSchema }
+        };
+      }
+      if (ctx.meta["readOnly"] === true && toolMutates(tool)) {
+        return {
+          status: "needs_direct_call",
+          message: `Session is in read-only mode and "${tool.name}" mutates. Call it directly so read-only mode can rule on it.`,
+          directCall: { tool: tool.name, input: input.input ?? {}, inputSchema: tool.inputSchema }
+        };
+      }
+      let nestedInput = input.input ?? {};
+      const hooks = opts.getHookRunner?.();
+      if (hooks) {
+        const pre = await hooks.preToolUse(tool.name, nestedInput, ctx, {
+          capabilities: tool.capabilities,
+          mutating: tool.mutating
+        });
+        if (pre.block) {
+          return {
+            status: "error",
+            message: `A policy hook blocked "${tool.name}"` + (pre.reason ? `: ${pre.reason}` : ".")
+          };
+        }
+        if (pre.input) nestedInput = pre.input;
+      }
       const validation = validateAgainstSchema(nestedInput, tool.inputSchema);
       if (!validation.ok) {
         return {