@wrongstack/core 0.41.0 → 0.54.1

package/dist/index.js

@@ -5,7 +5,7 @@ import { readFile, readdir, stat, mkdir } from 'fs/promises';
 import * as path6 from 'path';
 import { join, extname, relative, isAbsolute, resolve, sep } from 'path';
 import * as fs2 from 'fs';
-import * as os5 from 'os';
+import * as os6 from 'os';
 import { execFile, spawn } from 'child_process';
 import { promisify } from 'util';
 import { EventEmitter } from 'events';
@@ -93,7 +93,7 @@ async function renameWithRetry(from, to) {
       if (!code || !TRANSIENT_RENAME_CODES.has(code) || i === delays.length) {
         throw err;
       }
-      await new Promise((resolve10) => setTimeout(resolve10, delays[i]));
+      await new Promise((resolve12) => setTimeout(resolve12, delays[i]));
     }
   }
   throw lastErr;
@@ -882,7 +882,9 @@ var TOKENS = {
   /** Replaces the entire provider call layer — retry, streaming, tracing. */
   ProviderRunner: t("ProviderRunner"),
   /** Optional git-worktree lifecycle manager (per-phase isolation in AutoPhase). */
-  WorktreeManager: t("WorktreeManager")
+  WorktreeManager: t("WorktreeManager"),
+  /** Optional global Brain arbiter for policy/decision escalation. */
+  BrainArbiter: t("BrainArbiter")
 };
 
 // src/kernel/run-controller.ts
@@ -2367,6 +2369,7 @@ function stripUndefined(obj) {
 // src/models/models-registry.ts
 var DEFAULT_URL = "https://models.dev/api.json";
 var DEFAULT_TTL_SECONDS = 24 * 3600;
+var DEFAULT_REFRESH_TIMEOUT_MS = 15e3;
 var FAMILY_BY_NPM = {
   "@ai-sdk/anthropic": "anthropic",
   "@ai-sdk/google-vertex/anthropic": "anthropic",
@@ -2403,6 +2406,7 @@ var DefaultModelsRegistry = class {
   fetchImpl;
   seed;
   maxStaleAgeMs;
+  refreshTimeoutMs;
   overlay;
   overlayUrl;
   overlayFile;
@@ -2415,6 +2419,7 @@ var DefaultModelsRegistry = class {
     this.seed = opts.seed;
     const maxStaleSeconds = opts.maxStaleAgeSeconds ?? 7 * 24 * 3600;
     this.maxStaleAgeMs = maxStaleSeconds * 1e3;
+    this.refreshTimeoutMs = opts.refreshTimeoutMs ?? DEFAULT_REFRESH_TIMEOUT_MS;
     this.overlay = opts.overlay;
     this.overlayUrl = opts.overlayUrl;
     this.overlayFile = opts.overlayFile;
@@ -2466,22 +2471,34 @@ var DefaultModelsRegistry = class {
   }
   /** Fetch + cache the models.dev base. Throws on failure (used by `refresh`). */
   async refreshBase() {
-    const res = await this.fetchImpl(this.url, {
-      method: "GET",
-      headers: { accept: "application/json" }
-    });
-    if (!res.ok) {
-      throw new Error(`ModelsRegistry: HTTP ${res.status} fetching ${this.url}`);
-    }
-    const json = await res.json();
-    this.fetchedAt = /* @__PURE__ */ new Date();
-    const envelope = {
-      fetchedAt: this.fetchedAt.toISOString(),
-      url: this.url,
-      payload: json
-    };
-    await atomicWrite(this.cacheFile, JSON.stringify(envelope));
-    return json;
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), this.refreshTimeoutMs);
+    try {
+      const res = await this.fetchImpl(this.url, {
+        method: "GET",
+        headers: { accept: "application/json" },
+        signal: controller.signal
+      });
+      clearTimeout(timeout);
+      if (!res.ok) {
+        throw new Error(`ModelsRegistry: HTTP ${res.status} fetching ${this.url}`);
+      }
+      const json = await res.json();
+      this.fetchedAt = /* @__PURE__ */ new Date();
+      const envelope = {
+        fetchedAt: this.fetchedAt.toISOString(),
+        url: this.url,
+        payload: json
+      };
+      await atomicWrite(this.cacheFile, JSON.stringify(envelope));
+      return json;
+    } catch (err) {
+      clearTimeout(timeout);
+      if (err instanceof Error && err.name === "AbortError") {
+        throw new Error(`ModelsRegistry: fetch timed out after ${this.refreshTimeoutMs}ms`);
+      }
+      throw err;
+    }
   }
   /**
    * Resolve the curated overlay, memoised. Order: in-memory `overlay` →
@@ -2490,12 +2507,12 @@ var DefaultModelsRegistry = class {
    */
   async loadOverlay(opts = {}) {
     if (this.overlayPayload && !opts.force) return this.overlayPayload;
-    if (this.overlay) {
+    if (hasEntries(this.overlay)) {
       this.overlayPayload = this.overlay;
       return this.overlayPayload;
     }
     const fetched = await this.loadOverlayFromUrl(opts);
-    if (fetched) {
+    if (hasEntries(fetched)) {
       this.overlayPayload = fetched;
       return fetched;
     }
@@ -2622,6 +2639,9 @@ var DefaultModelsRegistry = class {
     return path6.resolve(this.cacheFile);
   }
 };
+function hasEntries(payload) {
+  return payload !== void 0 && Object.keys(payload).length > 0;
+}
 
 // src/types/mode.ts
 var DEFAULT_MODES = [
@@ -3029,7 +3049,7 @@ var InMemoryAgentBridge = class {
       );
     }
     this.inflightGuards.add(correlationId);
-    return new Promise((resolve10, reject) => {
+    return new Promise((resolve12, reject) => {
       const timer = setTimeout(() => {
         this.inflightGuards.delete(correlationId);
         this.pendingRequests.delete(correlationId);
@@ -3041,7 +3061,7 @@ var InMemoryAgentBridge = class {
         return;
       }
       this.pendingRequests.set(correlationId, {
-        resolve: resolve10,
+        resolve: resolve12,
         reject,
         timer
       });
@@ -3234,11 +3254,11 @@ function validateAgainstSchema(value, schema) {
   walk2(value, schema, "", errors);
   return { ok: errors.length === 0, errors };
 }
-function walk2(value, schema, path35, errors) {
+function walk2(value, schema, path36, errors) {
   if (schema.enum !== void 0) {
     if (!schema.enum.some((e) => deepEqual(e, value))) {
       errors.push({
-        path: path35 || "<root>",
+        path: path36 || "<root>",
         message: `expected one of ${JSON.stringify(schema.enum)}, got ${JSON.stringify(value)}`
       });
       return;
@@ -3247,7 +3267,7 @@ function walk2(value, schema, path35, errors) {
   if (typeof schema.type === "string") {
     if (!checkType(value, schema.type)) {
       errors.push({
-        path: path35 || "<root>",
+        path: path36 || "<root>",
         message: `expected ${schema.type}, got ${describeType(value)}`
       });
       return;
@@ -3257,19 +3277,19 @@ function walk2(value, schema, path35, errors) {
     const obj = value;
     for (const req of schema.required ?? []) {
       if (!(req in obj)) {
-        errors.push({ path: joinPath(path35, req), message: "required property missing" });
+        errors.push({ path: joinPath(path36, req), message: "required property missing" });
       }
     }
     if (schema.properties) {
       for (const [key, subSchema] of Object.entries(schema.properties)) {
         if (key in obj) {
-          walk2(obj[key], subSchema, joinPath(path35, key), errors);
+          walk2(obj[key], subSchema, joinPath(path36, key), errors);
         }
       }
     }
   }
   if (schema.type === "array" && Array.isArray(value) && schema.items) {
-    value.forEach((item, i) => walk2(item, schema.items, `${path35}[${i}]`, errors));
+    value.forEach((item, i) => walk2(item, schema.items, `${path36}[${i}]`, errors));
   }
 }
 function checkType(value, type) {
@@ -4417,7 +4437,7 @@ function projectHash(absRoot) {
   return createHash("sha256").update(path6.resolve(absRoot)).digest("hex").slice(0, 12);
 }
 function resolveWstackPaths(opts) {
-  const home = opts.userHome ?? os5.homedir();
+  const home = opts.userHome ?? os6.homedir();
   const globalRoot = opts.globalRoot ?? path6.join(home, ".wrongstack");
   const hash = projectHash(opts.projectRoot);
   const projectDir = path6.join(globalRoot, "projects", hash);
@@ -4747,6 +4767,23 @@ function tryParse(s) {
   }
 }
 
+// src/utils/merge-custom-models.ts
+function mergeCustomModelDefs(providerCustomModels, configModels) {
+  const out = {};
+  if (providerCustomModels) {
+    for (const [id, def] of Object.entries(providerCustomModels)) {
+      out[id] = { ...def };
+    }
+  }
+  if (configModels) {
+    for (const [id, def] of Object.entries(configModels)) {
+      out[id] = { ...def };
+    }
+  }
+  if (Object.keys(out).length === 0) return void 0;
+  return out;
+}
+
 // src/storage/session-store.ts
 init_atomic_write();
 var DefaultSessionStore = class {
@@ -6092,7 +6129,7 @@ var RecoveryLock = class {
   constructor(opts) {
     this.file = path6.join(opts.dir, LOCK_FILE);
     this.pid = opts.pid ?? process.pid;
-    this.hostname = opts.hostname ?? os5.hostname();
+    this.hostname = opts.hostname ?? os6.hostname();
     this.maxAgeMs = opts.maxAgeMs ?? DEFAULT_MAX_AGE_MS;
     this.sessionStore = opts.sessionStore;
     this.probe = opts.isPidAlive ?? defaultIsPidAlive;
@@ -7529,8 +7566,8 @@ async function streamProviderToResponse(provider, req, signal, ctx, events) {
       try {
         await Promise.race([
           Promise.resolve(iter.return?.()),
-          new Promise((resolve10) => {
-            drainTimer = setTimeout(resolve10, 500);
+          new Promise((resolve12) => {
+            drainTimer = setTimeout(resolve12, 500);
           })
         ]);
       } finally {
@@ -7591,7 +7628,7 @@ async function runProviderWithRetry(opts) {
           description
         });
       }
-      await new Promise((resolve10, reject) => {
+      await new Promise((resolve12, reject) => {
         let settled = false;
         const onAbort = () => {
           if (settled) return;
@@ -7604,7 +7641,7 @@ async function runProviderWithRetry(opts) {
           settled = true;
           clearTimeout(t2);
           signal.removeEventListener("abort", onAbort);
-          resolve10();
+          resolve12();
         }, delay);
         if (signal.aborted) {
           onAbort();
@@ -8611,7 +8648,7 @@ init_atomic_write();
 var MAX_JOURNAL_ENTRIES = 500;
 function goalFilePath(projectRoot) {
   const hash = createHash("sha256").update(path6.resolve(projectRoot)).digest("hex").slice(0, 12);
-  return path6.join(os5.homedir(), ".wrongstack", "projects", hash, "goal.json");
+  return path6.join(os6.homedir(), ".wrongstack", "projects", hash, "goal.json");
 }
 async function loadGoal(filePath) {
   let raw;
@@ -9283,7 +9320,7 @@ ${recentJournal}` : "No prior iterations.",
   }
 };
 function sleep(ms) {
-  return new Promise((resolve10) => setTimeout(resolve10, ms));
+  return new Promise((resolve12) => setTimeout(resolve12, ms));
 }
 
 // src/coordination/subagent-budget.ts
@@ -9499,12 +9536,12 @@ var SubagentBudget = class _SubagentBudget {
           if (!bus || !bus.hasListenerFor("budget.threshold_reached")) {
             return Promise.resolve("stop");
           }
-          return new Promise((resolve10) => {
+          return new Promise((resolve12) => {
             let resolved = false;
             const respond = (d) => {
               if (resolved) return;
               resolved = true;
-              resolve10(d);
+              resolve12(d);
             };
             const fallback = setTimeout(
               () => respond("stop"),
@@ -12731,7 +12768,7 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
       taskIds.map((id) => {
         const cached = this.completedResults.find((r) => r.taskId === id);
         if (cached) return cached;
-        return new Promise((resolve10, reject) => {
+        return new Promise((resolve12, reject) => {
           const timeout = setTimeout(() => {
             this.off("task.completed", handler);
             reject(new Error(`awaitTasks timed out waiting for task "${id}"`));
@@ -12740,7 +12777,7 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
             if (result.taskId === id) {
               clearTimeout(timeout);
               this.off("task.completed", handler);
-              resolve10(result);
+              resolve12(result);
             }
           };
           this.on("task.completed", handler);
@@ -13243,7 +13280,7 @@ function providerErrorToSubagentError(err, message, cause) {
 
 // src/execution/parallel-eternal-engine.ts
 function sleep2(ms) {
-  return new Promise((resolve10) => setTimeout(resolve10, ms));
+  return new Promise((resolve12) => setTimeout(resolve12, ms));
 }
 var GOAL_COMPLETE_MARKER2 = /^\s*\[goal[_\s-]?complete\]\s*$/im;
 var ParallelEternalEngine = class {
@@ -13309,8 +13346,14 @@ var ParallelEternalEngine = class {
           await this.runOneIteration();
         } catch (err) {
           this.consecutiveFailures++;
-          this.opts.onError?.(err instanceof Error ? err : new Error(String(err)), this.consecutiveFailures);
-          await this.appendFailure("engine error", err instanceof Error ? err.message : String(err));
+          this.opts.onError?.(
+            err instanceof Error ? err : new Error(String(err)),
+            this.consecutiveFailures
+          );
+          await this.appendFailure(
+            "engine error",
+            err instanceof Error ? err.message : String(err)
+          );
         }
         if (this.stopRequested) break;
         await sleep2(2e3);
@@ -13326,14 +13369,19 @@ var ParallelEternalEngine = class {
    * Called by the REPL in its main loop (REPL drives, engine is stateless per tick).
    */
   async runOneIteration() {
+    const emit = (stage) => {
+      this.opts.onStage?.(stage);
+    };
     this.iterations++;
     const goal = await loadGoal(this.goalPath);
     if (!goal) {
       this.stopRequested = true;
+      emit({ phase: "stopped" });
       return false;
     }
     if (goal.goalState !== "active") {
       this.stopRequested = true;
+      emit({ phase: "stopped" });
       return false;
     }
     if (!this.coordinator) {
@@ -13346,10 +13394,13 @@ var ParallelEternalEngine = class {
       const runner = makeAgentSubagentRunner({ factory: this.agentFactory });
       this.coordinator.setRunner?.(runner);
     }
+    emit({ phase: "decompose" });
     const tasks = await this.decomposeGoal(goal);
     if (!tasks || tasks.length === 0) {
+      emit({ phase: "sleep", ms: 2e3 });
       return false;
     }
+    emit({ phase: "fanout", slots: Math.min(this.slots, tasks.length) });
     const fanOut = await this.fanOut(goal, tasks);
     this.iterationsSinceCompact++;
     const successCount = fanOut.results.filter((r) => r.status === "success").length;
@@ -13366,12 +13417,20 @@ var ParallelEternalEngine = class {
       status,
       note
     });
+    emit({
+      phase: "aggregate",
+      successCount,
+      total: fanOut.results.length,
+      goalComplete: fanOut.goalComplete
+    });
     if (fanOut.goalComplete) {
       this.stopRequested = true;
       this.state = "stopped";
+      emit({ phase: "stopped" });
       return true;
     }
     await this.maybeCompact();
+    emit({ phase: "sleep", ms: 2e3 });
     return fanOut.allSuccessful;
   }
   // -------------------------------------------------------------------------
@@ -13385,7 +13444,9 @@ var ParallelEternalEngine = class {
         (t2) => dispatchAgent(t2, { classifier: this.dispatchClassifier }).catch(() => null)
       )
     ) : [];
-    const recentJournal = goal.journal.slice(-5).map((e) => `  #${e.iteration} [${e.status}] ${e.task}${e.note ? ` \u2014 ${e.note.slice(0, 80)}` : ""}`).join("\n");
+    const recentJournal = goal.journal.slice(-5).map(
+      (e) => `  #${e.iteration} [${e.status}] ${e.task}${e.note ? ` \u2014 ${e.note.slice(0, 80)}` : ""}`
+    ).join("\n");
     const directivePreamble = [
       "\u2550\u2550\u2550 ETERNAL AUTONOMY \u2014 parallel task slot \u2550\u2550\u2550",
       "",
@@ -13428,35 +13489,44 @@ ${personaLine}Task: ${task}
         role: route?.role ?? "generic",
         method: route?.method ?? "none"
       });
-      spawnPromises.push((async () => {
-        try {
-          await coordinator.spawn(
-            route ? {
-              id: subagentId,
-              name: route.definition.config.name,
-              role: route.role,
-              tools: route.definition.config.tools,
-              systemPromptOverride: route.definition.config.prompt,
-              timeoutMs: this.timeoutMs
-            } : {
-              id: subagentId,
-              name: `slot-${subagentId.slice(-6)}`,
-              // Let the coordinator apply its default budget (roster or generic).
-              // Hardcoding low limits here defeats the x10 budget improvement.
-              timeoutMs: this.timeoutMs
-            }
-          );
-          subagentIds.push(subagentId);
-          taskIds.push(taskId);
-          await coordinator.assign(spec);
-        } catch {
-        }
-      })());
+      spawnPromises.push(
+        (async () => {
+          try {
+            await coordinator.spawn(
+              route ? {
+                id: subagentId,
+                name: route.definition.config.name,
+                role: route.role,
+                tools: route.definition.config.tools,
+                systemPromptOverride: route.definition.config.prompt,
+                timeoutMs: this.timeoutMs
+              } : {
+                id: subagentId,
+                name: `slot-${subagentId.slice(-6)}`,
+                // Let the coordinator apply its default budget (roster or generic).
+                // Hardcoding low limits here defeats the x10 budget improvement.
+                timeoutMs: this.timeoutMs
+              }
+            );
+            subagentIds.push(subagentId);
+            taskIds.push(taskId);
+            await coordinator.assign(spec);
+          } catch {
+          }
+        })()
+      );
     }
     await Promise.all(spawnPromises);
     if (taskIds.length === 0) {
-      return { results: [], allSuccessful: false, goalComplete: false, partialOutput: "", routes: routeInfo };
+      return {
+        results: [],
+        allSuccessful: false,
+        goalComplete: false,
+        partialOutput: "",
+        routes: routeInfo
+      };
     }
+    this.opts.onStage?.({ phase: "await", taskIds: [...taskIds] });
     let results = [];
     try {
       const ctrl = new AbortController();
@@ -15158,6 +15228,12 @@ var Director = class _Director {
   getLeaderContextPressure() {
     return this.leaderContextPressure;
   }
+  resolveMaxContext() {
+    const resolved = typeof this.maxContext === "function" ? this.maxContext() : this.maxContext;
+    return resolved && resolved > 0 ? resolved : 128e3;
+  }
+  /** Optional Brain arbiter for director-level policy decisions. */
+  brain;
   /**
    * Optional fleet-level policy container. When provided the Director
    * delegates spawn budgeting, manifest entries, and checkpointing to it
@@ -15249,7 +15325,7 @@ var Director = class _Director {
   leaderContextPressure = 0;
   /** Maximum context load fraction before spawn is refused. */
   maxLeaderContextLoad;
-  /** Provider's max context window in tokens. */
+  /** Provider's max context window in tokens, or a live resolver for runtime model switches. */
   maxContext;
   /** Per-task model matrix (static record or live getter); resolved
    *  per-spawn when no explicit model is set. */
@@ -15269,6 +15345,7 @@ var Director = class _Director {
   largeAnswerStore;
   constructor(opts) {
     this.id = opts.config.coordinatorId || randomUUID();
+    this.brain = opts.brain;
     this.manifestPath = opts.manifestPath;
     this.roster = opts.roster;
     this.directorPreamble = opts.directorPreamble ?? DEFAULT_DIRECTOR_PREAMBLE;
@@ -15413,33 +15490,81 @@ var Director = class _Director {
           return;
         }
       }
-      extendCounts.set(guardKey, prior + 1);
-      setImmediate(() => {
-        const extra = {};
-        const base = Math.max(payload.limit, payload.used);
-        const grow = (ceiling) => Math.min(Math.ceil(base * 1.5), ceiling);
-        let newLimit = base;
-        switch (payload.kind) {
-          case "iterations":
-            newLimit = grow(5e4);
-            extra.maxIterations = newLimit;
-            break;
-          case "tool_calls":
-            newLimit = grow(1e5);
-            extra.maxToolCalls = newLimit;
-            break;
-          case "tokens":
-            newLimit = grow(5e6);
-            extra.maxTokens = newLimit;
-            break;
-          case "cost":
-            newLimit = Math.min(base * 1.5, 100);
-            extra.maxCostUsd = newLimit;
-            break;
-        }
-        this.recordExtension(e.subagentId, e.taskId, payload.kind, newLimit);
-        payload.extend(extra);
-      });
+      const grantExtension = () => {
+        setImmediate(() => {
+          const extra = {};
+          const base = Math.max(payload.limit, payload.used);
+          const grow = (ceiling) => Math.min(Math.ceil(base * 1.5), ceiling);
+          let newLimit = base;
+          switch (payload.kind) {
+            case "iterations":
+              newLimit = grow(5e4);
+              extra.maxIterations = newLimit;
+              break;
+            case "tool_calls":
+              newLimit = grow(1e5);
+              extra.maxToolCalls = newLimit;
+              break;
+            case "tokens":
+              newLimit = grow(5e6);
+              extra.maxTokens = newLimit;
+              break;
+            case "cost":
+              newLimit = Math.min(base * 1.5, 100);
+              extra.maxCostUsd = newLimit;
+              break;
+          }
+          extendCounts.set(guardKey, prior + 1);
+          this.recordExtension(e.subagentId, e.taskId, payload.kind, newLimit);
+          payload.extend(extra);
+        });
+      };
+      if (this.brain) {
+        void this.brain.decide({
+          id: `director-budget-${e.subagentId}-${payload.kind}`,
+          source: "director",
+          question: `Should the director extend the ${payload.kind} budget for subagent ${e.subagentId}?`,
+          context: [
+            e.taskId ? `Task id: ${e.taskId}` : void 0,
+            `Used: ${payload.used}`,
+            `Limit: ${payload.limit}`,
+            `Prior extensions for this kind: ${prior}`
+          ].filter(Boolean).join("\n"),
+          risk: payload.kind === "cost" ? "high" : "medium",
+          fallback: "continue",
+          options: [
+            {
+              id: "extend",
+              label: "Grant the director default budget extension",
+              consequence: "The subagent continues with a larger per-kind budget.",
+              risk: payload.kind === "cost" ? "high" : "medium",
+              recommended: true
+            },
+            {
+              id: "stop",
+              label: "Stop this subagent at the current budget limit",
+              consequence: "The current task will fail or stop due to budget pressure.",
+              risk: "low"
+            }
+          ]
+        }).then((decision) => {
+          if (decision.type === "deny") {
+            payload.deny();
+            return;
+          }
+          if (decision.type === "ask_human") {
+            payload.deny();
+            return;
+          }
+          if (decision.optionId === "stop" || /\bstop\b/i.test(decision.text)) {
+            payload.deny();
+            return;
+          }
+          grantExtension();
+        }).catch(() => payload.deny());
+        return;
+      }
+      grantExtension();
     });
     this.largeAnswerStore = new LargeAnswerStore(2e3);
   }
@@ -15649,7 +15774,8 @@ var Director = class _Director {
         }
       }
       if (this.maxLeaderContextLoad < 1) {
-        const threshold = this.maxContext * this.maxLeaderContextLoad;
+        const maxContext = this.resolveMaxContext();
+        const threshold = maxContext * this.maxLeaderContextLoad;
         if (this.leaderContextPressure >= threshold) {
           throw new FleetContextOverflowError(threshold, this.leaderContextPressure);
         }
@@ -15959,11 +16085,11 @@ var Director = class _Director {
         if (cached) return cached;
         const existing = this.taskWaiters.get(id);
         if (existing) return existing.promise;
-        let resolve10;
+        let resolve12;
         const promise = new Promise((res) => {
-          resolve10 = res;
+          resolve12 = res;
         });
-        this.taskWaiters.set(id, { promise, resolve: resolve10 });
+        this.taskWaiters.set(id, { promise, resolve: resolve12 });
         return promise;
       })
     );
@@ -16348,7 +16474,7 @@ function createDelegateTool(opts) {
           subagentId
         });
         const dir = director;
-        const result = await new Promise((resolve10) => {
+        const result = await new Promise((resolve12) => {
           let settled = false;
           let timer;
           const finish = (value) => {
@@ -16358,7 +16484,7 @@ function createDelegateTool(opts) {
             offTool();
             offIter();
             offProgress();
-            resolve10(value);
+            resolve12(value);
           };
           const arm = () => {
             if (timer) clearTimeout(timer);
@@ -17988,9 +18114,9 @@ var AISpecBuilder = class {
     if (!this.sessionPath) return;
     try {
       const fsp20 = await import('fs/promises');
-      const path35 = await import('path');
+      const path36 = await import('path');
       const { atomicWrite: atomicWrite2 } = await Promise.resolve().then(() => (init_atomic_write(), atomic_write_exports));
-      await fsp20.mkdir(path35.dirname(this.sessionPath), { recursive: true });
+      await fsp20.mkdir(path36.dirname(this.sessionPath), { recursive: true });
       await atomicWrite2(this.sessionPath, JSON.stringify(this.session, null, 2));
     } catch {
     }
@@ -18700,15 +18826,15 @@ function computeCriticalPath(graph, _topoOrder, blockedByMap) {
       maxId = id;
     }
   }
-  const path35 = [];
+  const path36 = [];
   let current = maxId;
   const visited = /* @__PURE__ */ new Set();
   while (current && !visited.has(current)) {
     visited.add(current);
-    path35.unshift(current);
+    path36.unshift(current);
     current = prev.get(current) ?? null;
   }
-  return path35;
+  return path36;
 }
 function computeParallelGroups(graph, blockedByMap) {
   const groups = [];
@@ -19501,9 +19627,9 @@ var DefaultHealthRegistry = class {
   }
   async runOne(check) {
     let timer = null;
-    const timeout = new Promise((resolve10) => {
+    const timeout = new Promise((resolve12) => {
       timer = setTimeout(
-        () => resolve10({ status: "unhealthy", detail: `timeout after ${this.timeoutMs}ms` }),
+        () => resolve12({ status: "unhealthy", detail: `timeout after ${this.timeoutMs}ms` }),
         this.timeoutMs
       );
     });
@@ -19686,7 +19812,7 @@ async function startMetricsServer(opts) {
   const tls = opts.tls;
   const useHttps = !!(tls?.cert && tls?.key);
   const host = opts.host ?? "127.0.0.1";
-  const path35 = opts.path ?? "/metrics";
+  const path36 = opts.path ?? "/metrics";
   const healthPath = opts.healthPath ?? "/healthz";
   const healthRegistry = opts.healthRegistry;
   const listener = (req, res) => {
@@ -19696,7 +19822,7 @@ async function startMetricsServer(opts) {
       return;
     }
     const url = req.url.split("?")[0];
-    if (url === path35) {
+    if (url === path36) {
       let body;
       try {
         body = renderPrometheus(opts.sink.snapshot());
@@ -19742,14 +19868,14 @@ async function startMetricsServer(opts) {
     const { createServer } = await import('http');
     server = createServer(listener);
   }
-  await new Promise((resolve10, reject) => {
+  await new Promise((resolve12, reject) => {
     const onError = (err) => {
       server.off("listening", onListening);
       reject(err);
     };
     const onListening = () => {
       server.off("error", onError);
-      resolve10();
+      resolve12();
     };
     server.once("error", onError);
     server.once("listening", onListening);
@@ -19760,9 +19886,9 @@ async function startMetricsServer(opts) {
   const protocol = useHttps ? "https" : "http";
   return {
     port: boundPort,
-    url: `${protocol}://${host}:${boundPort}${path35}`,
-    close: () => new Promise((resolve10, reject) => {
-      server.close((err) => err ? reject(err) : resolve10());
+    url: `${protocol}://${host}:${boundPort}${path36}`,
+    close: () => new Promise((resolve12, reject) => {
+      server.close((err) => err ? reject(err) : resolve12());
     })
   };
 }
@@ -20462,7 +20588,7 @@ async function downloadGitHubTarball(parsed) {
       `Tarball too large (${(Number.parseInt(contentLength, 10) / 1024 / 1024).toFixed(1)}MB). Max: ${MAX_TARBALL_SIZE / 1024 / 1024}MB`
     );
   }
-  const tempDir = await fsp3.mkdtemp(path6.join(os5.tmpdir(), "wskill-"));
+  const tempDir = await fsp3.mkdtemp(path6.join(os6.tmpdir(), "wskill-"));
   try {
     if (!response.body) {
       throw new Error("Empty response body from GitHub API");
@@ -21901,7 +22027,7 @@ var CloudSync = class {
       const localPath = this.categoryToPath(cat);
       if (!localPath) continue;
       const rel = segments.slice(2).join("/");
-      const destPath = rel ? path6.join(localPath, rel) : localPath;
+      const destPath = resolvePulledCategoryPath(cat, localPath, rel, entry.path);
       const blobData = await this.getBlob(token, owner, repoName, entry.sha);
       await fsp3.mkdir(path6.dirname(destPath), { recursive: true });
       await fsp3.writeFile(destPath, Buffer.from(blobData, "base64"));
@@ -22075,6 +22201,26 @@ var CloudSync = class {
     return results;
   }
 };
+function resolvePulledCategoryPath(cat, localPath, rel, remotePath) {
+  const directoryBacked = cat === "skills" || cat === "prompts";
+  if (!directoryBacked) {
+    if (rel) throw new Error(`Refusing nested CloudSync path for file category: ${remotePath}`);
+    return localPath;
+  }
+  if (!rel) return localPath;
+  const normalizedRel = path6.normalize(rel);
+  const traversesUp = normalizedRel === ".." || normalizedRel.startsWith(`..${path6.sep}`);
+  if (path6.isAbsolute(normalizedRel) || traversesUp) {
+    throw new Error(`Refusing CloudSync path traversal: ${remotePath}`);
+  }
+  const dest = path6.resolve(localPath, normalizedRel);
+  const root = path6.resolve(localPath);
+  const relative7 = path6.relative(root, dest);
+  if (relative7.startsWith("..") || path6.isAbsolute(relative7)) {
+    throw new Error(`Refusing CloudSync path outside category root: ${remotePath}`);
+  }
+  return dest;
+}
 function timeAgo(iso) {
   const diff = Date.now() - new Date(iso).getTime();
   const mins = Math.floor(diff / 6e4);
@@ -22962,8 +23108,8 @@ var ReportGenerator = class {
     try {
       await stat(this.options.outputDir);
     } catch {
-      const { mkdir: mkdir15 } = await import('fs/promises');
-      await mkdir15(this.options.outputDir, { recursive: true });
+      const { mkdir: mkdir16 } = await import('fs/promises');
+      await mkdir16(this.options.outputDir, { recursive: true });
     }
   }
   generateMarkdown(result) {
@@ -23243,7 +23389,7 @@ var SecurityScannerOrchestrator = class {
       const delay = Math.round(policy.delayMs(attempt));
       const status = isProviderErr ? err.status : 0;
       console.warn(`[SecurityScanner] retry ${attempt + 1} after ${delay}ms (status=${status}) \u2014 ${errAsErr.message}`);
-      await new Promise((resolve10) => setTimeout(resolve10, delay));
+      await new Promise((resolve12) => setTimeout(resolve12, delay));
       return this.completeWithRetry(provider, request, abortController, attempt + 1);
     }
   }
@@ -23988,7 +24134,7 @@ var FleetManager = class {
   leaderContextPressure = 0;
   /** Maximum context load fraction before spawn is refused. */
   maxLeaderContextLoad;
-  /** Provider's max context window in tokens. */
+  /** Provider's max context window in tokens, or a live resolver for runtime model switches. */
   maxContext;
   constructor(opts = {}) {
     this.manifestPath = opts.manifestPath;
@@ -24068,7 +24214,8 @@ var FleetManager = class {
       }
     }
     if (this.maxLeaderContextLoad < 1) {
-      const threshold = this.maxContext * this.maxLeaderContextLoad;
+      const maxContext = this.resolveMaxContext();
+      const threshold = maxContext * this.maxLeaderContextLoad;
       if (this.leaderContextPressure >= threshold) {
         return {
           kind: "max_context_load",
@@ -24082,6 +24229,10 @@ var FleetManager = class {
   setLeaderContextPressure(tokens) {
     this.leaderContextPressure = tokens;
   }
+  resolveMaxContext() {
+    const resolved = typeof this.maxContext === "function" ? this.maxContext() : this.maxContext;
+    return resolved && resolved > 0 ? resolved : 128e3;
+  }
   /**
    * Assign a memorable nickname (e.g. "Einstein (Bug Hunter)") to the config,
    * record it so the same name is never reused, then record the spawn.
@@ -24814,12 +24965,12 @@ function makeContinueToNextIterationTool() {
 // src/core/iteration-limit.ts
 function requestLimitExtension(opts) {
   const { events, currentIterations, currentLimit, autoExtend, timeoutMs = 3e4 } = opts;
-  return new Promise((resolve10) => {
+  return new Promise((resolve12) => {
     let resolved = false;
     const timerFired = () => {
       if (!resolved) {
         resolved = true;
-        resolve10(0);
+        resolve12(0);
       }
     };
     const timer = setTimeout(timerFired, timeoutMs);
@@ -24828,14 +24979,14 @@ function requestLimitExtension(opts) {
       if (!resolved) {
         resolved = true;
         clearTimeout(timer);
-        resolve10(0);
+        resolve12(0);
       }
     };
     const grant = (extra) => {
       if (!resolved) {
         resolved = true;
         clearTimeout(timer);
-        resolve10(Math.max(0, extra));
+        resolve12(Math.max(0, extra));
       }
     };
     events.emit("iteration.limit_reached", {
@@ -24849,7 +25000,7 @@ function requestLimitExtension(opts) {
         if (!resolved) {
           resolved = true;
           clearTimeout(timer);
-          resolve10(100);
+          resolve12(100);
         }
       });
     }
@@ -25441,13 +25592,13 @@ var Agent = class {
     }
   }
   waitForConfirm(info) {
-    return new Promise((resolve10) => {
+    return new Promise((resolve12) => {
       this.events.emit("tool.confirm_needed", {
         tool: info.tool,
         input: info.input,
         toolUseId: info.toolUseId,
         suggestedPattern: info.suggestedPattern,
-        resolve: resolve10
+        resolve: resolve12
       });
     });
   }
@@ -25521,6 +25672,85 @@ function sizeSignals(toolName, content) {
   }
   return { outputBytes, outputTokens, outputLines };
 }
+async function bootConfig(options = {}) {
+  const { flags = {}, appLabel = "wstack", loadSyncConfig = true } = options;
+  const cwd = typeof flags["cwd"] === "string" ? path6.resolve(flags["cwd"]) : process.cwd();
+  const pathResolver = new DefaultPathResolver(cwd);
+  const projectRoot = pathResolver.projectRoot;
+  const userHome = os6.homedir();
+  const wpaths = resolveWstackPaths({ projectRoot, userHome });
+  await fsp3.mkdir(wpaths.globalRoot, { recursive: true });
+  await fsp3.mkdir(wpaths.projectDir, { recursive: true });
+  await fsp3.mkdir(wpaths.projectSessions, { recursive: true });
+  await writeProjectMeta(wpaths, projectRoot);
+  const vault = new DefaultSecretVault({ keyFile: wpaths.secretsKey });
+  for (const file of [wpaths.globalConfig, wpaths.projectLocalConfig]) {
+    try {
+      const { migrated } = await migratePlaintextSecrets(file, vault);
+      if (migrated > 0) {
+        writeErr(`[${appLabel}] Encrypted ${migrated} plaintext secret(s) in ${file}
+`);
+      }
+    } catch {
+    }
+  }
+  const configLoader = new DefaultConfigLoader({ paths: wpaths, vault });
+  let config = await configLoader.load({ cliFlags: flagsToConfigPatch(flags) });
+  if (loadSyncConfig) {
+    const syncConfig = await configLoader.loadSyncConfig();
+    if (syncConfig) {
+      config = Object.freeze({ ...config, sync: syncConfig });
+    }
+  }
+  const logger = new DefaultLogger({ level: config.log?.level ?? "info", file: wpaths.logFile });
+  return {
+    cwd,
+    projectRoot,
+    userHome,
+    wpaths,
+    pathResolver,
+    config,
+    vault,
+    logger,
+    globalConfigPath: wpaths.globalConfig
+  };
+}
+function flagsToConfigPatch(flags) {
+  const patch = {};
+  if (typeof flags["provider"] === "string") patch.provider = flags["provider"];
+  if (typeof flags["model"] === "string") patch.model = flags["model"];
+  if (typeof flags["cwd"] === "string") patch.cwd = flags["cwd"];
+  if (typeof flags["log-level"] === "string") {
+    patch.log = { level: flags["log-level"] };
+  } else if (flags["verbose"]) {
+    patch.log = { level: "debug" };
+  } else if (flags["trace"]) {
+    patch.log = { level: "trace" };
+  }
+  if (flags["yolo"]) patch.yolo = true;
+  if (flags["no-features"]) {
+    patch.features = {
+      mcp: false,
+      plugins: false,
+      memory: false,
+      modelsRegistry: false,
+      skills: false
+    };
+  }
+  return patch;
+}
+async function writeProjectMeta(paths, projectRoot) {
+  try {
+    await fsp3.mkdir(paths.projectDir, { recursive: true });
+    const meta = {
+      hash: paths.projectHash,
+      root: projectRoot,
+      lastSeen: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    await fsp3.writeFile(paths.projectMeta, JSON.stringify(meta, null, 2));
+  } catch {
+  }
+}
 
 // src/core/conversation-state.ts
 var ConversationState = class {
@@ -25820,8 +26050,8 @@ var InputBuilder = class {
   async registerFile(input) {
     const ref = await this.store.add({ ...input, kind: "file" });
     this.refs.push(ref);
-    const path35 = ref.meta.filename ?? ref.meta.label ?? String(ref.seq);
-    return `[file:${path35}]`;
+    const path36 = ref.meta.filename ?? ref.meta.label ?? String(ref.seq);
+    return `[file:${path36}]`;
   }
   /**
    * Whether `appendPaste(text)` would collapse the text to a placeholder
@@ -26152,7 +26382,7 @@ summarize it, and let the tool result hold only the summary.`);
     const cached = this.envCacheByRoot.get(ctx.projectRoot);
     if (cached) return cached;
     const today = this.opts.todayIso ?? (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-    const platform2 = `${os5.platform()} ${os5.release()}`;
+    const platform2 = `${os6.platform()} ${os6.release()}`;
     const shell = process.env.SHELL ?? process.env.ComSpec ?? "unknown";
     const node = process.version;
     const isGit = await this.dirExists(path6.join(ctx.projectRoot, ".git"));
@@ -26221,12 +26451,12 @@ ${mem}`);
     }
   }
   async gitStatus(root) {
-    return new Promise((resolve10) => {
+    return new Promise((resolve12) => {
       let settled = false;
       const finish = (s) => {
         if (settled) return;
         settled = true;
-        resolve10(s);
+        resolve12(s);
       };
       let proc;
       const timer = setTimeout(() => {
@@ -27183,11 +27413,15 @@ var PhaseOrchestrator = class {
     this.graph.updatedAt = Date.now();
     let readyPhases = this.getReadyPhases();
     while (readyPhases.length > 0 && !this.stopped) {
+      await this.waitWhilePaused();
+      if (this.stopped) break;
       const batch = readyPhases.slice(0, this.opts.maxConcurrentPhases);
       await Promise.all(batch.map((p) => this.startPhase(p)));
       if (this.opts.phaseDelayMs > 0) {
         await this.delay(this.opts.phaseDelayMs);
       }
+      await this.waitWhilePaused();
+      if (this.stopped) break;
       readyPhases = this.getReadyPhases().filter(
         (p) => !this.runningPhases.has(p.id) && p.status !== "completed" && p.status !== "failed"
       );
@@ -27428,7 +27662,9 @@ var PhaseOrchestrator = class {
   async mergeOne(phase, handle) {
     if (!this.worktrees) return;
     try {
-      const resolve10 = this.ctx.resolveConflict ? async (info) => {
+      const resolve12 = this.ctx.resolveConflict ? async (info) => {
+        const shouldResolve = await this.shouldAttemptConflictResolution(phase, info);
+        if (!shouldResolve) return false;
         this.emit("phase.conflictResolving", {
           phaseId: phase.id,
           name: phase.name,
@@ -27436,12 +27672,22 @@ var PhaseOrchestrator = class {
         });
         return this.ctx.resolveConflict(phase, info);
       } : void 0;
-      const result = await this.worktrees.merge(handle, { squash: true, resolve: resolve10 });
+      const result = await this.worktrees.merge(handle, { squash: true, resolve: resolve12 });
       if (result.resolved) {
         this.emit("phase.conflictResolved", { phaseId: phase.id, name: phase.name });
       }
+      this.setIntegrationMetadata(phase, result.ok ? "merged" : "needs_review", {
+        branch: handle.branch,
+        worktreeDir: handle.dir,
+        conflictFiles: result.conflictFiles
+      });
       await this.worktrees.release(handle, { keep: !result.ok });
     } catch (err) {
+      this.setIntegrationMetadata(phase, "merge_failed", {
+        branch: handle.branch,
+        worktreeDir: handle.dir,
+        error: err instanceof Error ? err.message : String(err)
+      });
       this.emit("phase.failed", {
         phaseId: phase.id,
         name: phase.name,
@@ -27449,6 +27695,56 @@ var PhaseOrchestrator = class {
       });
     }
   }
+  async shouldAttemptConflictResolution(phase, info) {
+    if (!this.ctx.brain) return true;
+    const decision = await this.ctx.brain.decide({
+      id: `autophase-conflict-${phase.id}`,
+      source: "autophase",
+      question: `Should AutoPhase try to resolve merge conflicts for phase "${phase.name}" automatically?`,
+      context: [
+        `Phase id: ${phase.id}`,
+        `Conflicted files: ${info.conflictFiles.join(", ") || "(unknown)"}`,
+        `Base working tree: ${info.cwd}`
+      ].join("\n"),
+      risk: "high",
+      fallback: "ask_human",
+      options: [
+        {
+          id: "resolve",
+          label: "Try the configured conflict resolver",
+          consequence: "A resolver agent may edit conflicted files in the base working tree.",
+          risk: "medium"
+        },
+        {
+          id: "review",
+          label: "Keep the worktree for human review",
+          consequence: "No automatic conflict resolution is attempted.",
+          risk: "low",
+          recommended: true
+        }
+      ]
+    });
+    phase.metadata = {
+      ...phase.metadata,
+      brainConflictDecision: decision.type,
+      brainConflictDecisionAt: Date.now()
+    };
+    if (decision.type !== "answer") return false;
+    return decision.optionId === "resolve" || /\bresolve\b/i.test(decision.text);
+  }
+  setIntegrationMetadata(phase, status, details = {}) {
+    phase.metadata = {
+      ...phase.metadata,
+      integrationStatus: status,
+      integrationBranch: details.branch,
+      integrationWorktreeDir: details.worktreeDir,
+      integrationConflictFiles: details.conflictFiles,
+      integrationError: details.error,
+      integrationUpdatedAt: Date.now()
+    };
+    phase.updatedAt = Date.now();
+    this.graph.updatedAt = Date.now();
+  }
   /** A failed phase keeps its worktree on disk for inspection (no merge). */
   async keepWorktreeForReview(phase) {
     const handle = this.phaseWorktrees.get(phase.id);
@@ -27457,6 +27753,10 @@ var PhaseOrchestrator = class {
       await this.worktrees.commitAll(handle, `autophase(${phase.name}) [failed]: ${phase.id}`);
     } catch {
     }
+    this.setIntegrationMetadata(phase, "not_merged_failed_phase", {
+      branch: handle.branch,
+      worktreeDir: handle.dir
+    });
     await this.worktrees.release(handle, { keep: true }).catch(() => {
     });
   }
@@ -27716,8 +28016,13 @@ var PhaseOrchestrator = class {
       }
     };
   }
+  async waitWhilePaused() {
+    while (this.paused && !this.stopped) {
+      await this.delay(100);
+    }
+  }
   delay(ms) {
-    return new Promise((resolve10) => setTimeout(resolve10, ms));
+    return new Promise((resolve12) => setTimeout(resolve12, ms));
   }
 };
 
@@ -27761,6 +28066,10 @@ var AutoPhaseRunner = class {
     this.graph = await builder.build();
     const ctx = {
       executeTask: this.opts.executeTask,
+      verifyPhase: this.opts.verifyPhase,
+      repairPhase: this.opts.repairPhase,
+      resolveConflict: this.opts.resolveConflict,
+      brain: this.opts.brain,
       onPhaseComplete: (phase) => {
         this.opts.onPhaseComplete?.(phase);
       },
@@ -27777,10 +28086,12 @@ var AutoPhaseRunner = class {
       maxConcurrentPhases: this.opts.maxConcurrentPhases,
       maxConcurrentTasks: this.opts.maxConcurrentTasks,
       maxRetries: this.opts.maxRetries,
+      maxVerifyAttempts: this.opts.maxVerifyAttempts,
       autonomous: this.opts.autonomous,
       phaseDelayMs: this.opts.phaseDelayMs,
       stopOnFailure: this.opts.stopOnFailure,
-      events: this.opts.events
+      events: this.opts.events,
+      worktrees: this.opts.worktrees
     });
     if (this.opts.onProgress) {
       this.progressInterval = setInterval(() => {
@@ -28699,6 +29010,147 @@ function assertSafePath(dir, projectRoot) {
   }
 }
 
+// src/coordination/brain.ts
+var ObservableBrainArbiter = class {
+  constructor(inner, events) {
+    this.inner = inner;
+    this.events = events;
+  }
+  inner;
+  events;
+  async decide(request) {
+    this.events.emit("brain.decision_requested", { request, at: Date.now() });
+    const decision = await this.inner.decide(request);
+    const event = decision.type === "ask_human" ? "brain.decision_ask_human" : decision.type === "deny" ? "brain.decision_denied" : "brain.decision_answered";
+    this.events.emit(event, { request, decision, at: Date.now() });
+    return decision;
+  }
+};
+var BrainDecisionQueue = class {
+  constructor(events, opts = {}) {
+    this.events = events;
+    this.opts = opts;
+    this.offAnswer = this.events.on("brain.human_answered", (answer) => {
+      const pending = this.pending.get(answer.id);
+      if (!pending) return;
+      this.pending.delete(answer.id);
+      if (pending.timer) clearTimeout(pending.timer);
+      if (answer.deny) {
+        pending.resolve({ type: "deny", reason: answer.text ?? "Denied by human." });
+        return;
+      }
+      const option = pending.request.options?.find((o) => o.id === answer.optionId);
+      pending.resolve({
+        type: "answer",
+        optionId: answer.optionId,
+        text: answer.text ?? option?.label ?? answer.optionId ?? "Human answered.",
+        rationale: "Human answered a Brain escalation prompt."
+      });
+    });
+  }
+  events;
+  opts;
+  pending = /* @__PURE__ */ new Map();
+  offAnswer;
+  async requestHumanDecision(request) {
+    const ask = {
+      type: "ask_human",
+      prompt: formatHumanPrompt(request),
+      options: request.options,
+      rationale: "Decision escalated to human authority."
+    };
+    const pending = new Promise((resolve12) => {
+      const entry = { request, resolve: resolve12 };
+      if (this.opts.timeoutMs && this.opts.timeoutMs > 0) {
+        entry.timer = setTimeout(() => {
+          this.pending.delete(request.id);
+          resolve12({ type: "deny", reason: "Brain human decision timed out." });
+        }, this.opts.timeoutMs);
+      }
+      this.pending.set(request.id, entry);
+    });
+    this.events.emit("brain.decision_ask_human", { request, decision: ask, at: Date.now() });
+    return pending;
+  }
+  dispose() {
+    this.offAnswer();
+    for (const [id, pending] of this.pending) {
+      if (pending.timer) clearTimeout(pending.timer);
+      pending.resolve({ type: "deny", reason: "Brain decision queue disposed." });
+      this.pending.delete(id);
+    }
+  }
+};
+var HumanEscalatingBrainArbiter = class {
+  constructor(inner, queue) {
+    this.inner = inner;
+    this.queue = queue;
+  }
+  inner;
+  queue;
+  async decide(request) {
+    const decision = await this.inner.decide(request);
+    if (decision.type !== "ask_human") return decision;
+    return this.queue.requestHumanDecision(request);
+  }
+};
+var DefaultBrainArbiter = class {
+  allowLowRiskAutoAnswer;
+  constructor(opts = {}) {
+    this.allowLowRiskAutoAnswer = opts.allowLowRiskAutoAnswer ?? true;
+  }
+  async decide(request) {
+    const recommended = request.options?.find((option) => option.recommended);
+    if (this.allowLowRiskAutoAnswer && request.risk === "low" && recommended) {
+      return {
+        type: "answer",
+        optionId: recommended.id,
+        text: recommended.label,
+        rationale: "Low-risk request with an explicit recommended option."
+      };
+    }
+    switch (request.fallback) {
+      case "deny":
+        return {
+          type: "deny",
+          reason: `Brain could not safely decide: ${request.question}`
+        };
+      case "continue":
+        return {
+          type: "answer",
+          text: "Continue with the caller default.",
+          rationale: "No safe Brain decision was available; request fallback is continue."
+        };
+      case "ask_human":
+        return {
+          type: "ask_human",
+          prompt: formatHumanPrompt(request),
+          options: request.options,
+          rationale: "Decision requires human authority or lacks a safe automatic option."
+        };
+    }
+  }
+};
+function formatHumanPrompt(request) {
+  const lines = [
+    `Brain requires human decision for ${request.source}:`,
+    `Question: ${request.question}`
+  ];
+  if (request.context?.trim()) {
+    lines.push("", "Context:", request.context.trim());
+  }
+  if (request.options?.length) {
+    lines.push("", "Options:");
+    for (const option of request.options) {
+      const risk = option.risk ? ` [risk: ${option.risk}]` : "";
+      const consequence = option.consequence ? ` \u2014 ${option.consequence}` : "";
+      lines.push(`- ${option.id}: ${option.label}${risk}${consequence}`);
+    }
+  }
+  lines.push("", `Risk: ${request.risk}`);
+  return lines.join("\n");
+}
+
 // src/coordination/collab-bus.ts
 var CollaborationBus = class {
   pausePromise = null;
@@ -28727,8 +29179,8 @@ var CollaborationBus = class {
     if (this.isPaused()) return false;
     this.pausedAtMs = Date.now();
     this.pausedBy = byParticipant;
-    this.pausePromise = new Promise((resolve10) => {
-      this.pauseResolve = resolve10;
+    this.pausePromise = new Promise((resolve12) => {
+      this.pauseResolve = resolve12;
     });
     return true;
   }
@@ -28764,8 +29216,8 @@ var CollaborationBus = class {
       return true;
     }
     let timer;
-    const timeoutPromise = new Promise((resolve10) => {
-      timer = setTimeout(() => resolve10("timeout"), timeoutMs);
+    const timeoutPromise = new Promise((resolve12) => {
+      timer = setTimeout(() => resolve12("timeout"), timeoutMs);
     });
     const resumedPromise = this.pausePromise.then(() => "resumed");
     const winner = await Promise.race([resumedPromise, timeoutPromise]);
@@ -29256,7 +29708,7 @@ function createGitPlugin() {
 }
 async function runGit(args, cwd) {
   try {
-    return await new Promise((resolve10, reject) => {
+    return await new Promise((resolve12, reject) => {
       const child = spawn("git", args, { cwd, stdio: ["ignore", "pipe", "pipe"] });
       let stdout = "";
       let stderr = "";
@@ -29277,7 +29729,7 @@ async function runGit(args, cwd) {
           })
         );
       });
-      child.on("close", (code) => resolve10({ stdout, stderr, code: code ?? 0 }));
+      child.on("close", (code) => resolve12({ stdout, stderr, code: code ?? 0 }));
     });
   } catch (err) {
     if (err instanceof WrongStackError) throw err;
@@ -29602,7 +30054,7 @@ function createSkillsPlugin(opts) {
   };
 }
 function makeInstaller(skillLoader, projectRoot) {
-  const globalRoot = path6.join(os5.homedir(), ".wrongstack");
+  const globalRoot = path6.join(os6.homedir(), ".wrongstack");
   return new SkillInstaller({
     manifestPath: path6.join(globalRoot, "installed-skills.json"),
     projectSkillsDir: path6.join(projectRoot, ".wrongstack", "skills"),
@@ -29953,6 +30405,6 @@ ${formatPlan(updated)}`
   };
 }
 
-export { ACP_AGENTS, AGENTS_BY_PHASE, AGENT_CATALOG, AISpecBuilder, ALL_AGENT_DEFINITIONS, ALL_FLEET_AGENTS, ALL_SYNC_CATEGORIES, AUDIT_LOG_AGENT, Agent, AgentError, AnnotationsStore, AutoApprovePermissionPolicy, AutoCompactionMiddleware, AutoExecutor, AutoPhasePlanner, AutoPhaseRunner, AutonomousRunner, BUG_HUNTER_AGENT, BudgetExceededError, CONTEXT_WINDOW_MODES, CORE_RECONSTRUCT_EVENTS, CheckpointManager, CloudSync, CollaborationBus, ConfigError, ConfigMigrationError, Container, Context, ConversationState, DEFAULT_AUTONOMY_CONFIG, DEFAULT_CONFIG_MIGRATIONS, DEFAULT_CONTEXT_CONFIG, DEFAULT_CONTEXT_WINDOW_MODE_ID, DEFAULT_DIRECTOR_PREAMBLE, DEFAULT_DISPATCH_ROLE, DEFAULT_MAX_ITERATIONS, DEFAULT_MODES, DEFAULT_RECOVERY_STRATEGIES, DEFAULT_SESSION_LOGGING_CONFIG, DEFAULT_SPEC_TEMPLATE, DEFAULT_SUBAGENT_BASELINE, DEFAULT_TOOLS_CONFIG, DefaultAttachmentStore, DefaultConfigLoader, DefaultConfigStore, DefaultErrorHandler, DefaultHealthRegistry, DefaultLogger, DefaultMemoryStore, DefaultModeStore, DefaultModelsRegistry, DefaultMultiAgentCoordinator, DefaultPathResolver, DefaultPermissionPolicy, DefaultPluginAPI, DefaultPromptStore, DefaultProviderRunner, DefaultRetryPolicy, DefaultSecretScrubber, DefaultSecretVault, DefaultSessionReader, DefaultSessionRewinder, DefaultSessionStore, DefaultSkillLoader, DefaultSystemPromptBuilder, DefaultTaskStore, DefaultTokenCounter, Director, DirectorStateCheckpoint, DoneConditionChecker, ERROR_CODES, EternalAutonomyEngine, EventBus, ExtensionRegistry, FLEET_ROSTER, FLEET_ROSTER_BUDGETS, FLEET_ROSTER_WITHACP, FleetBus, FleetCostCapError, FleetManager, FleetSpawnBudgetError, FleetUsageAggregator, FsError, GitignoreUpdater, HybridCompactor, InMemoryAgentBridge, InMemoryBridgeTransport, InMemoryMetricsSink, InputBuilder, IntelligentCompactor, KERNEL_API_VERSION, LAYER_1_IDENTITY, LLMSelector, MATRIX_PHASE_KEYS, MAX_JOURNAL_ENTRIES, NULL_FLEET_BUS, NoopMetricsSink, NoopTracer, OTelTracer, PROMETHEUS_CONTENT_TYPE, ParallelEternalEngine, PhaseGraphBuilder, PhaseOrchestrator, PhaseStore, Pipeline, PluginError, ProviderError, ProviderRegistry, QueueStore, REFACTOR_PLANNER_AGENT, RecoveryLock, ReplayLogStore, ReplayProviderRunner, ReportGenerator, RunController, SECURITY_SCANNER_AGENT, SPEC_TEMPLATES, STANDARD_AUDIT_EVENTS, ScopedEventBus, SddParallelRun, SddTaskDecomposer, SecurityScanner, SecurityScannerOrchestrator, SelectiveCompactor, SessionAnalyzer, SessionError, SessionRecovery, SkillGenerator, SkillInstaller, SkillManifestStore, SlashCommandRegistry, SpecDrivenDev, SpecParser, SpecStore, SpecVersioning, SubagentBudget, TOKENS, TaskFlow, TaskGenerator, TaskGraphStore, TaskTracker, TechStackDetector, ToolAuditLog, ToolError, ToolExecutor, ToolRegistry, WorktreeManager, WrongStackError, addPlanItem, allServers, analyzeCriticalPath, appendJournal, applyRosterBudget, asBlocks, asText, assertSafePath, atomicWrite, attachAutoExtend, attachPlanCheckpoint, attachTodosCheckpoint, awsServer, blockServer, braveSearchServer, buildBtwBlock, buildChildEnv, buildGoalPreamble, buildOtlpMetricsRequest, buildOtlpTracesRequest, buildRecoveryStrategies, classifyFamily, clearPlan, collabInjectMiddleware, collabPauseMiddleware, color, compileGlob, compileUserRegex, completePartialObject, composeDirectorPrompt, composeSubagentPrompt, computeTaskProgress, consumeBtwNotes, context7Server, contextManagerTool, createAutoExecutor, createAutoPhaseFromTaskGraph, createContextManagerTool, createDefaultPipelines, createDelegateTool, createGitPlugin, createMcpControlTool, createMessage, createObservabilityPlugin, createPlanPlugin, createPromptsPlugin, createSecurityPlugin, createSecuritySlashCommand, createSessionEventBridge, createSkillsPlugin, createSyncPlugin, createToolOutputSerializer, decryptConfigSecrets, defaultGitignoreUpdater, defaultOrchestrator, defaultReportGenerator, defaultSecurityScanner, defaultSkillGenerator, defaultTechStackDetector, deriveTodosFromPlanItem, detectNewlineStyle, dispatchAgent, downloadGitHubTarball, emptyGoal, emptyPlan, encryptConfigSecrets, ensureDir, estimateRequestTokens, estimateRequestTokensCalibrated, estimateTextTokens, estimateToolDefTokens, estimateToolInputTokens, estimateToolResultTokens, everArtServer, expandGlob, extractRunEnv, filesystemServer, findCriticalPath, formatContextWindowModeList, formatGoal, formatPlan, formatPlanTemplates, formatTodosList, getAgentDefinition, getCalibrationState, getContextWindowMode, getPlanTemplate, getTemplate, getTermSize, githubServer, goalFilePath, googleMapsServer, hashRequest, isAgentError, isConfigError, isContextWindowModeId, isFsError, isImageBlock, isInteractive, isPluginError, isSessionError, isStdinTTY, isStdoutTTY, isTextBlock, isThinkingBlock, isToolError, isToolResultBlock, isToolUseBlock, isValidMatrixKey, isWrongStackError, listContextWindowModes, listPlanTemplates, listTemplates, loadDirectorState, loadGoal, loadPlan, loadPlugins, loadProjectModes, loadTodosCheckpoint, loadUserModes, makeAgentSubagentRunner, makeAskTool, makeAssignTool, makeAutonomyPromptContributor, makeAwaitTasksTool, makeCollabDebugTool, makeContinueToNextIterationTool, makeDirectorSessionFactory, makeFleetEmitTool, makeFleetHealthTool, makeFleetSessionTool, makeFleetStatusTool, makeFleetUsageTool, makeLLMClassifier, makeRollUpTool, makeSpawnTool, makeTerminateTool, matchAny, matchGlob, matrixKeyKind, mergeModelsPayload, migratePlaintextSecrets, miniMaxVisionServer, normalizeToLf, onResize, parseContinueDirective, parseSkillRef, pendingBtwCount, phaseForRole, projectHash, recordActualUsage, removePlanItem, renderProgress, renderPrometheus, renderSpecAnalysis, renderTaskGraph, renderTaskList, repairToolUseAdjacency, resetCalibration, resolveAuditLevel, resolveContextWindowPolicy, resolveModelMatrix, resolveSessionLoggingConfig, resolveWstackPaths, rewriteConfigEncrypted, rosterSummaryFromConfigs, runConfigMigrations, runProviderWithRetry, safeParse, safeStringify, sanitizeJsonString, saveGoal, savePlan, saveTodosCheckpoint, scoreAgents, securitySlashCommand, sentinelServer, setBtwNote, setPlanItemStatus, setRawMode, slackServer, stableStringify, startMetricsServer, startOtlpMetricsExporter, startOtlpTraceExporter, stripAnsi, summarizeUsage, templateToMarkdown, toStyle, toWrongStackError, topologicalSort, unifiedDiff, unloadPlugins, validateAgainstSchema, wireMetricsToEvents, wrapAsState, writeErr, writeOut, zaiVisionServer };
+export { ACP_AGENTS, AGENTS_BY_PHASE, AGENT_CATALOG, AISpecBuilder, ALL_AGENT_DEFINITIONS, ALL_FLEET_AGENTS, ALL_SYNC_CATEGORIES, AUDIT_LOG_AGENT, Agent, AgentError, AnnotationsStore, AutoApprovePermissionPolicy, AutoCompactionMiddleware, AutoExecutor, AutoPhasePlanner, AutoPhaseRunner, AutonomousRunner, BUG_HUNTER_AGENT, BrainDecisionQueue, BudgetExceededError, CONTEXT_WINDOW_MODES, CORE_RECONSTRUCT_EVENTS, CheckpointManager, CloudSync, CollaborationBus, ConfigError, ConfigMigrationError, Container, Context, ConversationState, DEFAULT_AUTONOMY_CONFIG, DEFAULT_CONFIG_MIGRATIONS, DEFAULT_CONTEXT_CONFIG, DEFAULT_CONTEXT_WINDOW_MODE_ID, DEFAULT_DIRECTOR_PREAMBLE, DEFAULT_DISPATCH_ROLE, DEFAULT_MAX_ITERATIONS, DEFAULT_MODES, DEFAULT_RECOVERY_STRATEGIES, DEFAULT_SESSION_LOGGING_CONFIG, DEFAULT_SPEC_TEMPLATE, DEFAULT_SUBAGENT_BASELINE, DEFAULT_TOOLS_CONFIG, DefaultAttachmentStore, DefaultBrainArbiter, DefaultConfigLoader, DefaultConfigStore, DefaultErrorHandler, DefaultHealthRegistry, DefaultLogger, DefaultMemoryStore, DefaultModeStore, DefaultModelsRegistry, DefaultMultiAgentCoordinator, DefaultPathResolver, DefaultPermissionPolicy, DefaultPluginAPI, DefaultPromptStore, DefaultProviderRunner, DefaultRetryPolicy, DefaultSecretScrubber, DefaultSecretVault, DefaultSessionReader, DefaultSessionRewinder, DefaultSessionStore, DefaultSkillLoader, DefaultSystemPromptBuilder, DefaultTaskStore, DefaultTokenCounter, Director, DirectorStateCheckpoint, DoneConditionChecker, ERROR_CODES, EternalAutonomyEngine, EventBus, ExtensionRegistry, FLEET_ROSTER, FLEET_ROSTER_BUDGETS, FLEET_ROSTER_WITHACP, FleetBus, FleetCostCapError, FleetManager, FleetSpawnBudgetError, FleetUsageAggregator, FsError, GitignoreUpdater, HumanEscalatingBrainArbiter, HybridCompactor, InMemoryAgentBridge, InMemoryBridgeTransport, InMemoryMetricsSink, InputBuilder, IntelligentCompactor, KERNEL_API_VERSION, LAYER_1_IDENTITY, LLMSelector, MATRIX_PHASE_KEYS, MAX_JOURNAL_ENTRIES, NULL_FLEET_BUS, NoopMetricsSink, NoopTracer, OTelTracer, ObservableBrainArbiter, PROMETHEUS_CONTENT_TYPE, ParallelEternalEngine, PhaseGraphBuilder, PhaseOrchestrator, PhaseStore, Pipeline, PluginError, ProviderError, ProviderRegistry, QueueStore, REFACTOR_PLANNER_AGENT, RecoveryLock, ReplayLogStore, ReplayProviderRunner, ReportGenerator, RunController, SECURITY_SCANNER_AGENT, SPEC_TEMPLATES, STANDARD_AUDIT_EVENTS, ScopedEventBus, SddParallelRun, SddTaskDecomposer, SecurityScanner, SecurityScannerOrchestrator, SelectiveCompactor, SessionAnalyzer, SessionError, SessionRecovery, SkillGenerator, SkillInstaller, SkillManifestStore, SlashCommandRegistry, SpecDrivenDev, SpecParser, SpecStore, SpecVersioning, SubagentBudget, TOKENS, TaskFlow, TaskGenerator, TaskGraphStore, TaskTracker, TechStackDetector, ToolAuditLog, ToolError, ToolExecutor, ToolRegistry, WorktreeManager, WrongStackError, addPlanItem, allServers, analyzeCriticalPath, appendJournal, applyRosterBudget, asBlocks, asText, assertSafePath, atomicWrite, attachAutoExtend, attachPlanCheckpoint, attachTodosCheckpoint, awsServer, blockServer, bootConfig, braveSearchServer, buildBtwBlock, buildChildEnv, buildGoalPreamble, buildOtlpMetricsRequest, buildOtlpTracesRequest, buildRecoveryStrategies, classifyFamily, clearPlan, collabInjectMiddleware, collabPauseMiddleware, color, compileGlob, compileUserRegex, completePartialObject, composeDirectorPrompt, composeSubagentPrompt, computeTaskProgress, consumeBtwNotes, context7Server, contextManagerTool, createAutoExecutor, createAutoPhaseFromTaskGraph, createContextManagerTool, createDefaultPipelines, createDelegateTool, createGitPlugin, createMcpControlTool, createMessage, createObservabilityPlugin, createPlanPlugin, createPromptsPlugin, createSecurityPlugin, createSecuritySlashCommand, createSessionEventBridge, createSkillsPlugin, createSyncPlugin, createToolOutputSerializer, decryptConfigSecrets, defaultGitignoreUpdater, defaultOrchestrator, defaultReportGenerator, defaultSecurityScanner, defaultSkillGenerator, defaultTechStackDetector, deriveTodosFromPlanItem, detectNewlineStyle, dispatchAgent, downloadGitHubTarball, emptyGoal, emptyPlan, encryptConfigSecrets, ensureDir, estimateRequestTokens, estimateRequestTokensCalibrated, estimateTextTokens, estimateToolDefTokens, estimateToolInputTokens, estimateToolResultTokens, everArtServer, expandGlob, extractRunEnv, filesystemServer, findCriticalPath, flagsToConfigPatch, formatContextWindowModeList, formatGoal, formatHumanPrompt, formatPlan, formatPlanTemplates, formatTodosList, getAgentDefinition, getCalibrationState, getContextWindowMode, getPlanTemplate, getTemplate, getTermSize, githubServer, goalFilePath, googleMapsServer, hashRequest, isAgentError, isConfigError, isContextWindowModeId, isFsError, isImageBlock, isInteractive, isPluginError, isSessionError, isStdinTTY, isStdoutTTY, isTextBlock, isThinkingBlock, isToolError, isToolResultBlock, isToolUseBlock, isValidMatrixKey, isWrongStackError, listContextWindowModes, listPlanTemplates, listTemplates, loadDirectorState, loadGoal, loadPlan, loadPlugins, loadProjectModes, loadTodosCheckpoint, loadUserModes, makeAgentSubagentRunner, makeAskTool, makeAssignTool, makeAutonomyPromptContributor, makeAwaitTasksTool, makeCollabDebugTool, makeContinueToNextIterationTool, makeDirectorSessionFactory, makeFleetEmitTool, makeFleetHealthTool, makeFleetSessionTool, makeFleetStatusTool, makeFleetUsageTool, makeLLMClassifier, makeRollUpTool, makeSpawnTool, makeTerminateTool, matchAny, matchGlob, matrixKeyKind, mergeCustomModelDefs, mergeModelsPayload, migratePlaintextSecrets, miniMaxVisionServer, normalizeToLf, onResize, parseContinueDirective, parseSkillRef, pendingBtwCount, phaseForRole, projectHash, recordActualUsage, removePlanItem, renderProgress, renderPrometheus, renderSpecAnalysis, renderTaskGraph, renderTaskList, repairToolUseAdjacency, resetCalibration, resolveAuditLevel, resolveContextWindowPolicy, resolveModelMatrix, resolveSessionLoggingConfig, resolveWstackPaths, rewriteConfigEncrypted, rosterSummaryFromConfigs, runConfigMigrations, runProviderWithRetry, safeParse, safeStringify, sanitizeJsonString, saveGoal, savePlan, saveTodosCheckpoint, scoreAgents, securitySlashCommand, sentinelServer, setBtwNote, setPlanItemStatus, setRawMode, slackServer, stableStringify, startMetricsServer, startOtlpMetricsExporter, startOtlpTraceExporter, stripAnsi, summarizeUsage, templateToMarkdown, toStyle, toWrongStackError, topologicalSort, unifiedDiff, unloadPlugins, validateAgainstSchema, wireMetricsToEvents, wrapAsState, writeErr, writeOut, zaiVisionServer };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map