@wrongstack/core 0.5.3 → 0.5.6

package/dist/defaults/index.js

@@ -6,7 +6,12 @@ import * as fsp from 'fs/promises';
 import * as os from 'os';
 import { EventEmitter } from 'events';
 
-// src/infrastructure/logger.ts
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
 
 // src/utils/color.ts
 var isColorTty = () => {
@@ -1052,6 +1057,16 @@ function labelOf(scope) {
 }
 
 // src/storage/config-store.ts
+function stripEphemeralFields(cfg) {
+  const env = cfg._envSource;
+  if (!env?.size) return cfg;
+  const out = { ...cfg };
+  for (const field of env) {
+    delete out[field];
+  }
+  delete out._envSource;
+  return out;
+}
 var DefaultConfigStore = class {
   current;
   watchers = /* @__PURE__ */ new Set();
@@ -1069,7 +1084,8 @@ var DefaultConfigStore = class {
     return ext ? ext : FROZEN_EMPTY;
   }
   update(partial) {
-    const next = deepFreeze(structuredClone({ ...this.current, ...partial }));
+    const scrubbed = stripEphemeralFields(partial);
+    const next = deepFreeze(structuredClone({ ...this.current, ...scrubbed }));
     if (next.version !== 1) {
       throw new Error(`ConfigStore.update: version must remain 1, got ${String(next.version)}`);
     }
@@ -1240,15 +1256,19 @@ var BEHAVIOR_DEFAULTS = {
 var ENV_MAP = {
   WRONGSTACK_PROVIDER: (c, v) => {
     c.provider = v;
+    (c._envSource ??= /* @__PURE__ */ new Set()).add("provider");
   },
   WRONGSTACK_MODEL: (c, v) => {
     c.model = v;
+    (c._envSource ??= /* @__PURE__ */ new Set()).add("model");
   },
   WRONGSTACK_API_KEY: (c, v) => {
     c.apiKey = v;
+    (c._envSource ??= /* @__PURE__ */ new Set()).add("apiKey");
   },
   WRONGSTACK_BASE_URL: (c, v) => {
     c.baseUrl = v;
+    (c._envSource ??= /* @__PURE__ */ new Set()).add("baseUrl");
   },
   WRONGSTACK_LOG_LEVEL: (c, v) => {
     if (!c.log) c.log = { level: "info" };
@@ -2138,9 +2158,149 @@ function matchIndex(plan, idOrIndex) {
   const lower = idOrIndex.toLowerCase();
   return plan.items.findIndex((it) => it.title.toLowerCase().includes(lower));
 }
+function deriveTodosFromPlanItem(plan, idOrIndex, subtasks) {
+  const idx = matchIndex(plan, idOrIndex);
+  if (idx === -1) return null;
+  const item = plan.items[idx];
+  if (!item) return null;
+  let updatedPlan = plan;
+  if (item.status !== "done") {
+    updatedPlan = setPlanItemStatus(plan, idOrIndex, "in_progress");
+  }
+  const todos = [];
+  todos.push({
+    id: `todo_${Date.now()}_plan`,
+    content: item.title,
+    status: "in_progress",
+    activeForm: item.title
+  });
+  if (subtasks && subtasks.length > 0) {
+    for (const st of subtasks) {
+      todos.push({
+        id: `todo_${Date.now()}_${randomUUID().slice(0, 6)}`,
+        content: st,
+        status: "pending"
+      });
+    }
+  }
+  return { plan: updatedPlan, todos };
+}
 function attachPlanCheckpoint(_state, _filePath, _sessionId) {
   return () => void 0;
 }
+
+// src/storage/plan-templates.ts
+var templates = {
+  "new-feature": {
+    name: "new-feature",
+    description: "Standard workflow for adding a new feature",
+    category: "development",
+    items: [
+      { title: "Write specification / design doc", details: "Define scope, acceptance criteria, edge cases" },
+      { title: "Set up feature branch", details: "git checkout -b feature/..." },
+      { title: "Implement core logic", details: "TDD preferred \u2014 write tests first" },
+      { title: "Add unit tests", details: ">= 80% coverage for new code" },
+      { title: "Add integration tests", details: "End-to-end happy path + error paths" },
+      { title: "Update documentation", details: "README, API docs, changelog" },
+      { title: "Code review", details: "Self-review before requesting review" },
+      { title: "Merge and deploy", details: "CI green, tag release" }
+    ]
+  },
+  "bug-fix": {
+    name: "bug-fix",
+    description: "Systematic approach to fixing bugs",
+    category: "maintenance",
+    items: [
+      { title: "Reproduce the bug", details: "Minimal reproduction case" },
+      { title: "Root cause analysis", details: "Trace through logs, debugger" },
+      { title: "Write failing test", details: "Test must fail before fix" },
+      { title: "Implement fix", details: "Smallest possible change" },
+      { title: "Verify fix", details: "Test passes, reproduction no longer fails" },
+      { title: "Regression test", details: "Ensure no related tests broken" },
+      { title: "Document in changelog", details: "Brief description + issue link" }
+    ]
+  },
+  "refactor": {
+    name: "refactor",
+    description: "Safe refactoring workflow",
+    category: "maintenance",
+    items: [
+      { title: "Identify refactoring target", details: "Code smell, performance bottleneck, or tech debt" },
+      { title: "Ensure test coverage", details: "Existing tests must pass before and after" },
+      { title: "Write characterization tests", details: "Capture current behavior if tests weak" },
+      { title: "Apply refactoring", details: "Small steps, frequent commits" },
+      { title: "Run full test suite", details: "All tests must pass" },
+      { title: "Performance check", details: "Ensure no regression" },
+      { title: "Code review", details: "Explain the why, not just the what" }
+    ]
+  },
+  "release": {
+    name: "release",
+    description: "Preparing a new release",
+    category: "release",
+    items: [
+      { title: "Version bump", details: "package.json, lockfiles, tags" },
+      { title: "Update changelog", details: "All changes since last release" },
+      { title: "Run full test suite", details: "Unit + integration + e2e" },
+      { title: "Build artifacts", details: "Docker images, bundles, binaries" },
+      { title: "Staging smoke tests", details: "Deploy to staging, verify" },
+      { title: "Production deploy", details: "Blue-green or canary" },
+      { title: "Post-deploy verification", details: "Health checks, error rates" },
+      { title: "Announce release", details: "Slack, email, GitHub release notes" }
+    ]
+  },
+  "security-audit": {
+    name: "security-audit",
+    description: "Security review and hardening",
+    category: "infrastructure",
+    items: [
+      { title: "Dependency audit", details: "npm audit, Snyk, Dependabot alerts" },
+      { title: "Secret scan", details: "git-secrets, truffleHog, manual review" },
+      { title: "Access control review", details: "IAM, roles, least privilege" },
+      { title: "Input validation audit", details: "SQL injection, XSS, path traversal" },
+      { title: "Authentication review", details: "Session management, MFA, password policy" },
+      { title: "Logging and monitoring", details: "PII in logs, audit trails" },
+      { title: "Incident response plan", details: "Runbooks, contacts, escalation" }
+    ]
+  },
+  "onboarding": {
+    name: "onboarding",
+    description: "New developer onboarding checklist",
+    category: "infrastructure",
+    items: [
+      { title: "Repository access", details: "GitHub/GitLab permissions" },
+      { title: "Local environment setup", details: "Docker, dependencies, env files" },
+      { title: "Run tests locally", details: "Verify green suite" },
+      { title: "Read architecture docs", details: "ADR, README, onboarding guide" },
+      { title: "First commit", details: "Docs fix or small improvement" },
+      { title: "Pair programming session", details: "Walk through codebase with buddy" },
+      { title: "Deploy to staging", details: "Verify CI/CD access" }
+    ]
+  }
+};
+function listPlanTemplates() {
+  return Object.values(templates);
+}
+function getPlanTemplate(name) {
+  return templates[name];
+}
+function formatPlanTemplates() {
+  const cats = /* @__PURE__ */ new Map();
+  for (const t of Object.values(templates)) {
+    const arr = cats.get(t.category) ?? [];
+    arr.push(t);
+    cats.set(t.category, arr);
+  }
+  const lines = ["Available plan templates:"];
+  for (const [cat, items] of cats) {
+    lines.push(`
+${cat}:`);
+    for (const t of items) {
+      lines.push(`  ${t.name.padEnd(18)} \u2014 ${t.description}`);
+    }
+  }
+  return lines.join("\n");
+}
 async function loadDirectorState(filePath) {
   let raw;
   try {
@@ -2156,15 +2316,48 @@ async function loadDirectorState(filePath) {
     return null;
   }
 }
+async function acquireDirectorStateLock(lockPath, processId = process.pid) {
+  let existing;
+  try {
+    existing = await fsp.readFile(lockPath, "utf8");
+  } catch {
+  }
+  if (existing) {
+    try {
+      const lock2 = JSON.parse(existing);
+      try {
+        process.kill(lock2.pid, 0);
+        return false;
+      } catch {
+      }
+    } catch {
+    }
+  }
+  const lock = {
+    pid: processId,
+    hostname: __require("os").hostname(),
+    startedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  await atomicWrite(lockPath, JSON.stringify(lock), { mode: 384 });
+  return true;
+}
+async function releaseDirectorStateLock(lockPath) {
+  try {
+    await fsp.unlink(lockPath);
+  } catch {
+  }
+}
 var DirectorStateCheckpoint = class {
   snapshot;
   filePath;
+  lockPath;
   timer = null;
   debounceMs;
   writing = false;
   rewriteRequested = false;
   constructor(filePath, init, debounceMs = 250) {
     this.filePath = filePath;
+    this.lockPath = `${filePath}.lock`;
     this.debounceMs = debounceMs;
     this.snapshot = {
       version: 1,
@@ -2174,10 +2367,36 @@ var DirectorStateCheckpoint = class {
       maxSpawns: init.maxSpawns,
       spawnDepth: init.spawnDepth,
       maxSpawnDepth: init.maxSpawnDepth,
+      directorBudget: init.directorBudget,
       subagents: [],
       tasks: []
     };
   }
+  /**
+   * Attempt to acquire the lock for this checkpoint. Call this before
+   * resuming a crashed director run. If it returns false, another
+   * director process is still running this fleet — do not resume.
+   */
+  async acquireLock() {
+    return acquireDirectorStateLock(this.lockPath);
+  }
+  /**
+   * Release the lock on graceful shutdown. Call `flush()` first to ensure
+   * the final checkpoint state is on disk before removing the lock.
+   * Without this, the next resume will see a stale-lock and refuse.
+   */
+  async releaseLock() {
+    return releaseDirectorStateLock(this.lockPath);
+  }
+  /**
+   * Resume from a snapshot previously loaded via `loadDirectorState()`.
+   * Use this when `--resume <runId>` is triggered — the snapshot has
+   * the full fleet state (subagents, tasks) from before the crash; the
+   * checkpoint continues from there.
+   */
+  resume(snapshot) {
+    this.snapshot = snapshot;
+  }
   current() {
     return this.snapshot;
   }
@@ -2279,7 +2498,15 @@ var PATTERNS = [
     type: "stripe_key",
     regex: /(?<![A-Za-z0-9])sk_(?:live|test)_[A-Za-z0-9]{24,}(?![A-Za-z0-9])/g
   },
-  { type: "twilio_sid", regex: /(?<![A-Za-z0-9])AC[a-f0-9]{32}(?![A-Za-z0-9])/g },
+  {
+    type: "twilio_sid",
+    regex: /(?<![A-Za-z0-9])AC[a-f0-9]{32}(?![A-Za-z0-9])/g
+  },
+  {
+    type: "telegram_bot_token",
+    // Telegram tokens are of the form  bot<digits>:<alphanum>  in URL paths
+    regex: /\/bot\d+:[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g
+  },
   {
     type: "jwt",
     // Anchored: look for literal "eyJ" which is unambiguous for JWT header
@@ -2635,6 +2862,7 @@ var DefaultPermissionPolicy = class {
   loaded = false;
   trustFile;
   yolo;
+  forceAllYolo;
   /**
    * Session-scoped "soft deny" map. When the user presses 'n' (block once),
    * the tool+pattern is added here. If the LLM retries in the same session,
@@ -2667,6 +2895,7 @@ var DefaultPermissionPolicy = class {
   constructor(opts) {
     this.trustFile = opts.trustFile;
     this.yolo = opts.yolo ?? false;
+    this.forceAllYolo = opts.forceAllYolo ?? false;
     this.promptDelegate = opts.promptDelegate;
   }
   /**
@@ -2686,6 +2915,14 @@ var DefaultPermissionPolicy = class {
   getYolo() {
     return this.yolo;
   }
+  /** Toggle force-all-YOLO at runtime. */
+  setForceAllYolo(enabled) {
+    this.forceAllYolo = enabled;
+  }
+  /** Check whether force-all-YOLO is active. */
+  getForceAllYolo() {
+    return this.forceAllYolo;
+  }
   async reload() {
     try {
       const raw = await fsp.readFile(this.trustFile, "utf8");
@@ -2727,6 +2964,21 @@ var DefaultPermissionPolicy = class {
       return { permission: "auto", source: "trust" };
     }
     if (this.yolo) {
+      if (tool.riskTier === "destructive" && !this.forceAllYolo) {
+        if (this.promptDelegate) {
+          const decision = await this.promptDelegate(tool, input, subject ?? tool.name);
+          if (decision === "always") {
+            await this.trust({ tool: tool.name, pattern: subject ?? tool.name });
+            return { permission: "auto", source: "user", reason: "destructive yolo always-allowed" };
+          }
+          if (decision === "deny") {
+            await this.deny({ tool: tool.name, pattern: subject ?? tool.name });
+            return { permission: "deny", source: "user", reason: "user denied destructive yolo" };
+          }
+          return { permission: decision === "yes" ? "auto" : "deny", source: "user" };
+        }
+        return { permission: "confirm", source: "yolo_destructive", riskTier: "destructive", reason: "destructive tool needs explicit approval even in yolo mode" };
+      }
       return { permission: "auto", source: "yolo" };
     }
     if (tool.name === "write" && subject) {
@@ -6182,6 +6434,9 @@ function makeSpawnTool(director, roster) {
         if (err instanceof DirectorBudgetError) {
           return { error: err.message, kind: err.kind, limit: err.limit, observed: err.observed };
         }
+        if (err instanceof DirectorCostCapError) {
+          return { error: err.message, kind: err.kind, limit: err.limit, observed: err.observed };
+        }
         return { error: err instanceof Error ? err.message : String(err) };
       }
     }
@@ -6319,6 +6574,65 @@ function makeFleetUsageTool(director) {
     }
   };
 }
+function makeFleetSessionTool(director) {
+  return {
+    name: "fleet_session",
+    description: "Read a subagent's JSONL transcript and extract its last assistant text, stop reason, and tool-use count. Use this to see what a running or timed-out subagent actually produced.",
+    permission: "auto",
+    mutating: false,
+    inputSchema: {
+      type: "object",
+      properties: {
+        subagentId: { type: "string", description: "Subagent id to read the transcript of." },
+        /** Number of trailing lines to return (last N JSONL lines). Default: all. */
+        tail: { type: "number", description: "Number of trailing JSONL lines to return. Omit for the full transcript." }
+      },
+      required: ["subagentId"]
+    },
+    async execute(input) {
+      const i = input;
+      const result = await director.readSession(i.subagentId, i.tail);
+      if (!result) {
+        return {
+          error: `fleet_session: transcript unavailable for "${i.subagentId}". Is sessionsRoot configured?`
+        };
+      }
+      return result;
+    }
+  };
+}
+function makeFleetHealthTool(director) {
+  return {
+    name: "fleet_health",
+    description: "Per-subagent health report: budget pressure (pct of limits consumed), last activity timestamp, and current status. Use to decide whether to assign more work to a subagent or spawn a fresh one.",
+    permission: "auto",
+    mutating: false,
+    inputSchema: { type: "object", properties: {}, required: [] },
+    async execute() {
+      const status = director.status();
+      const snapshot = director.snapshot();
+      const subagents = status.subagents ?? [];
+      const perSubagent = snapshot.perSubagent ?? {};
+      return {
+        subagents: subagents.map((s) => {
+          const usage = perSubagent[s.id];
+          return {
+            id: s.id,
+            status: s.status,
+            lastEventAt: usage?.lastEventAt,
+            // Budget pressure: fraction of each limit consumed if we have it.
+            // BudgetWarning events carry used/limit ratios; surface them here.
+            budgetPressure: {
+              iterations: usage?.iterations,
+              toolCalls: usage?.toolCalls,
+              costUsd: usage?.cost
+            }
+          };
+        })
+      };
+    }
+  };
+}
 
 // src/coordination/director.ts
 var DirectorBudgetError = class extends Error {
@@ -6335,6 +6649,20 @@ var DirectorBudgetError = class extends Error {
     this.observed = observed;
   }
 };
+var DirectorCostCapError = class extends Error {
+  kind;
+  limit;
+  observed;
+  constructor(limit, observed) {
+    super(
+      `Director cost cap exceeded: total fleet spend ${observed.toFixed(4)} exceeds maxCostUsd ${limit.toFixed(4)}`
+    );
+    this.name = "DirectorCostCapError";
+    this.kind = "max_cost_usd";
+    this.limit = limit;
+    this.observed = observed;
+  }
+};
 var Director = class {
   id;
   fleet;
@@ -6389,6 +6717,14 @@ var Director = class {
   /** Debounce timer for periodic manifest writes. */
   manifestTimer = null;
   manifestDebounceMs;
+  /** Fleet-wide cost cap. Infinity means no cap. */
+  maxCostUsd;
+  /** Max auto-extensions per subagent per budget kind before denying. */
+  maxBudgetExtensions;
+  /** Sessions root for direct subagent JSONL reads (fleet_session tool). */
+  sessionsRoot;
+  /** Director run id for JSONL path resolution. */
+  directorRunId;
   /** Resolves task descriptions back from `assign()` so completion events
    *  can also carry a human-readable title. */
   taskDescriptions = /* @__PURE__ */ new Map();
@@ -6415,12 +6751,17 @@ var Director = class {
     this.spawnDepth = opts.spawnDepth ?? 0;
     this.sessionWriter = opts.sessionWriter ?? null;
     this.manifestDebounceMs = opts.manifestDebounceMs ?? 2e3;
+    this.maxCostUsd = opts.directorBudget?.maxCostUsd ?? Number.POSITIVE_INFINITY;
+    this.maxBudgetExtensions = opts.maxBudgetExtensions ?? 2;
+    this.sessionsRoot = opts.sessionsRoot;
+    this.directorRunId = opts.directorRunId ?? this.id;
     this.stateCheckpoint = opts.stateCheckpointPath ? new DirectorStateCheckpoint(opts.stateCheckpointPath, {
       directorRunId: this.id,
       maxSpawns: opts.maxSpawns,
       spawnDepth: this.spawnDepth,
-      maxSpawnDepth: this.maxSpawnDepth
-    }) : null;
+      maxSpawnDepth: this.maxSpawnDepth,
+      directorBudget: opts.directorBudget
+    }, opts.checkpointDebounceMs ?? 250) : null;
     if (this.sharedScratchpadPath) {
       void fsp.mkdir(this.sharedScratchpadPath, { recursive: true }).catch(() => void 0);
     }
@@ -6481,7 +6822,7 @@ var Director = class {
       const payload = e.payload;
       const guardKey = `${e.subagentId}:${payload.kind}`;
       const prior = extendCounts.get(guardKey) ?? 0;
-      if (prior >= 2) {
+      if (prior >= this.maxBudgetExtensions) {
         payload.deny();
         extendCounts.delete(guardKey);
         return;
@@ -6542,6 +6883,12 @@ var Director = class {
     if (this.spawnCount >= this.maxSpawns) {
       throw new DirectorBudgetError("max_spawns", this.maxSpawns, this.spawnCount + 1);
     }
+    if (this.maxCostUsd < Number.POSITIVE_INFINITY) {
+      const totalCost = this.usage.snapshot().total?.cost ?? 0;
+      if (totalCost >= this.maxCostUsd) {
+        throw new DirectorCostCapError(this.maxCostUsd, totalCost);
+      }
+    }
     const result = await this.coordinator.spawn(config);
     this.spawnCount += 1;
     this.subagentMeta.set(result.subagentId, {
@@ -6721,6 +7068,7 @@ var Director = class {
     if (this.stateCheckpoint) {
       this.stateCheckpoint.setUsage(this.usage.snapshot());
       await this.stateCheckpoint.flush().catch((err) => this.logShutdownError("state_checkpoint_flush", err));
+      await this.stateCheckpoint.releaseLock().catch((err) => this.logShutdownError("state_checkpoint_lock_release", err));
     }
   }
   /**
@@ -6824,6 +7172,58 @@ var Director = class {
   completedResults() {
     return Array.from(this.completed.values());
   }
+  /**
+   * Inject a previously-saved checkpoint snapshot. Call this right after
+   * constructing a Director during a `--resume` run so the in-memory state
+   * (subagents, tasks, waiters) reflects the pre-crash reality instead of
+   * starting from a blank slate. The director then resumes from there —
+   * completing any in-flight tasks and ignoring tasks that already reached
+   * a terminal state in the prior run.
+   */
+  setCheckpointState(snapshot) {
+    this.stateCheckpoint?.resume(snapshot);
+  }
+  /**
+   * Read a subagent's JSONL transcript directly from disk (no bridge
+   * round-trip needed). Returns the last assistant text, stop reason,
+   * tool-use count, and line count — or null if the file is unavailable.
+   * Requires `sessionsRoot` to be set on construction.
+   */
+  async readSession(subagentId, tail) {
+    if (!this.sessionsRoot) return null;
+    const filePath = path3.join(this.sessionsRoot, this.directorRunId, `${subagentId}.jsonl`);
+    let raw;
+    try {
+      raw = await fsp.readFile(filePath, "utf8");
+    } catch {
+      return null;
+    }
+    const lines = raw.split("\n").filter((l) => l.trim());
+    const targetLines = tail ? lines.slice(-tail) : lines;
+    let lastAssistantText;
+    let lastStopReason;
+    let toolUses = 0;
+    for (const line of targetLines) {
+      try {
+        const ev = JSON.parse(line);
+        if (ev.type === "assistant" && typeof ev.text === "string") {
+          lastAssistantText = ev.text;
+        } else if (ev.type === "stop" && ev.stopReason) {
+          lastStopReason = ev.stopReason;
+        } else if (ev.type === "tool_use") {
+          toolUses++;
+        }
+      } catch {
+      }
+    }
+    return {
+      lastAssistantText,
+      lastStopReason,
+      toolUsesObserved: toolUses,
+      events: targetLines.length,
+      path: filePath
+    };
+  }
   snapshot() {
     return this.usage.snapshot();
   }
@@ -6902,10 +7302,28 @@ var Director = class {
       makeRollUpTool(this),
       makeTerminateTool(this),
       makeFleetStatusTool(this),
-      makeFleetUsageTool(this)
+      makeFleetUsageTool(this),
+      makeFleetSessionTool(this),
+      makeFleetHealthTool(this)
     ];
     return t;
   }
+  /**
+   * Attempt to acquire the checkpoint lock. Must be called before
+   * resuming — if another director process is alive, this returns
+   * false and the caller should not proceed with the resume.
+   */
+  async acquireCheckpointLock() {
+    return this.stateCheckpoint ? this.stateCheckpoint.acquireLock() : true;
+  }
+  /**
+   * Resume from a prior checkpoint snapshot (loaded via
+   * `loadDirectorState()`). Re-attach to the fleet mid-flight so
+   * subsequent spawn/assign calls update the checkpoint normally.
+   */
+  resumeFromCheckpoint(snapshot) {
+    this.stateCheckpoint?.resume(snapshot);
+  }
 };
 function createDelegateTool(opts) {
   const defaultTimeoutMs = opts.defaultTimeoutMs ?? 4 * 60 * 60 * 1e3;
@@ -7011,7 +7429,7 @@ function createDelegateTool(opts) {
         if (typeof i.maxToolCalls === "number" && i.maxToolCalls > 0) {
           cfg.maxToolCalls = i.maxToolCalls;
         }
-        const SUBAGENT_TIMEOUT_BUFFER_MS = 3e4;
+        const SUBAGENT_TIMEOUT_BUFFER_MS = opts.subagentTimeoutBufferMs ?? 3e4;
         const desiredSubTimeout = Math.max(3e4, timeoutMs - SUBAGENT_TIMEOUT_BUFFER_MS);
         if (!cfg.timeoutMs || cfg.timeoutMs > desiredSubTimeout) {
           cfg.timeoutMs = desiredSubTimeout;
@@ -7063,7 +7481,7 @@ function createDelegateTool(opts) {
           toolCalls: result.toolCalls,
           durationMs: result.durationMs,
           ...partial ? { partial } : {},
-          ...hintForKind(errorKind, retryable, backoffMs) ? { hint: hintForKind(errorKind, retryable, backoffMs) } : {}
+          ...hintForKind(errorKind, retryable, backoffMs, partial) ? { hint: hintForKind(errorKind, retryable, backoffMs, partial) } : {}
         };
       } catch (err) {
         return {
@@ -7083,7 +7501,7 @@ function instantiateRosterConfig2(role, base) {
     id: `${role}-${randomUUID().slice(0, 8)}`
   };
 }
-function hintForKind(kind, retryable, backoffMs) {
+function hintForKind(kind, retryable, backoffMs, partial) {
   if (!kind) return void 0;
   switch (kind) {
     case "provider_rate_limit":
@@ -7099,16 +7517,40 @@ function hintForKind(kind, retryable, backoffMs) {
     case "budget_iterations":
     case "budget_tool_calls":
     case "budget_tokens":
-    case "budget_cost":
-      return "Subagent exhausted its budget. The coordinator may auto-extend; otherwise raise the matching `max*` field (e.g. maxToolCalls: 600) on the next delegate, or split the task.";
-    case "budget_timeout":
-      return "Subagent hit its wall-clock budget. Raise `timeoutMs` on the next delegate or split the task.";
+    case "budget_cost": {
+      const base = "Subagent exhausted its budget. The coordinator may auto-extend; otherwise raise the matching `max*` field (e.g. maxToolCalls: 600) on the next delegate, or split the task.";
+      if (partial?.lastAssistantText) {
+        return `${base}
+
+Partial output produced before budget hit:
+${partial.lastAssistantText}`;
+      }
+      return base;
+    }
+    case "budget_timeout": {
+      const base = "Subagent hit its wall-clock budget. Raise `timeoutMs` on the next delegate or split the task.";
+      if (partial?.lastAssistantText) {
+        return `${base}
+
+Partial output produced before timeout:
+${partial.lastAssistantText}`;
+      }
+      return base;
+    }
     case "aborted_by_parent":
       return "Subagent was aborted (user Ctrl+C, parent unwound, or sibling failure cascade). Not retryable until the abort condition is resolved.";
     case "empty_response":
       return "Subagent ended its turn with no text and no tool calls. Almost always a prompt / config issue \u2014 clarify the task or check the model.";
-    case "tool_failed":
-      return "A tool inside the subagent returned ok:false. Inspect `partial.lastAssistantText` for the agent reasoning, then retry with corrected inputs.";
+    case "tool_failed": {
+      const base = "A tool inside the subagent returned ok:false. Retry with corrected inputs.";
+      if (partial?.lastAssistantText) {
+        return `${base}
+
+Agent reasoning before failure:
+${partial.lastAssistantText}`;
+      }
+      return base;
+    }
     case "bridge_failed":
       return "Parent-child bridge transport failed. This is rare \u2014 restart the session and retry.";
     default:
@@ -11238,6 +11680,6 @@ var allServers = () => ({
   "minimax-vision": { ...miniMaxVisionServer(), enabled: false }
 });
 
-export { AISpecBuilder, ALL_FLEET_AGENTS, AUDIT_LOG_AGENT, AutoApprovePermissionPolicy, AutoCompactionMiddleware, AutoExecutor, AutonomousRunner, BUG_HUNTER_AGENT, BudgetExceededError, ConfigMigrationError, DEFAULT_CONFIG_MIGRATIONS, DEFAULT_DIRECTOR_PREAMBLE, DEFAULT_SUBAGENT_BASELINE, DefaultAttachmentStore, DefaultConfigLoader, DefaultConfigStore, DefaultErrorHandler, DefaultHealthRegistry, DefaultLogger, DefaultMemoryStore, DefaultModeStore, DefaultModelsRegistry, DefaultMultiAgentCoordinator, DefaultPermissionPolicy, DefaultProviderRunner, DefaultRetryPolicy, DefaultSecretScrubber, DefaultSecretVault, DefaultSessionReader, DefaultSessionStore, DefaultSkillLoader, DefaultTaskStore, Director, DirectorBudgetError, DirectorStateCheckpoint, DoneConditionChecker, FLEET_ROSTER, FLEET_ROSTER_BUDGETS, FleetBus, FleetUsageAggregator, HybridCompactor, InMemoryAgentBridge, InMemoryBridgeTransport, InMemoryMetricsSink, IntelligentCompactor, LLMSelector, NoopMetricsSink, NoopTracer, OTelTracer, PROMETHEUS_CONTENT_TYPE, QueueStore, REFACTOR_PLANNER_AGENT, RecoveryLock, SECURITY_SCANNER_AGENT, SPEC_TEMPLATES, SelectiveCompactor, SessionAnalyzer, SpecDrivenDev, SpecParser, SpecStore, SpecVersioning, SubagentBudget, TaskFlow, TaskGenerator, TaskGraphStore, TaskTracker, ToolExecutor, addPlanItem, allServers, analyzeCriticalPath, applyRosterBudget, attachPlanCheckpoint, attachTodosCheckpoint, awsServer, blockServer, braveSearchServer, buildOtlpMetricsRequest, buildOtlpTracesRequest, classifyFamily, clearPlan, composeDirectorPrompt, composeSubagentPrompt, context7Server, contextManagerTool, createAutoExecutor, createContextManagerTool, createDelegateTool, createMessage, decryptConfigSecrets2 as decryptConfigSecrets, emptyPlan, encryptConfigSecrets, everArtServer, filesystemServer, formatPlan, getTemplate, githubServer, googleMapsServer, listTemplates, loadDirectorState, loadPlan, loadProjectModes, loadTodosCheckpoint, loadUserModes, makeAgentSubagentRunner, makeDirectorSessionFactory, migratePlaintextSecrets, miniMaxVisionServer, removePlanItem, renderProgress, renderPrometheus, renderSpecAnalysis, renderTaskGraph, renderTaskList, rewriteConfigEncrypted, rosterSummaryFromConfigs, runConfigMigrations, savePlan, saveTodosCheckpoint, sentinelServer, setPlanItemStatus, slackServer, startMetricsServer, startOtlpMetricsExporter, startOtlpTraceExporter, templateToMarkdown, wireMetricsToEvents, zaiVisionServer };
+export { AISpecBuilder, ALL_FLEET_AGENTS, AUDIT_LOG_AGENT, AutoApprovePermissionPolicy, AutoCompactionMiddleware, AutoExecutor, AutonomousRunner, BUG_HUNTER_AGENT, BudgetExceededError, ConfigMigrationError, DEFAULT_CONFIG_MIGRATIONS, DEFAULT_DIRECTOR_PREAMBLE, DEFAULT_SUBAGENT_BASELINE, DefaultAttachmentStore, DefaultConfigLoader, DefaultConfigStore, DefaultErrorHandler, DefaultHealthRegistry, DefaultLogger, DefaultMemoryStore, DefaultModeStore, DefaultModelsRegistry, DefaultMultiAgentCoordinator, DefaultPermissionPolicy, DefaultProviderRunner, DefaultRetryPolicy, DefaultSecretScrubber, DefaultSecretVault, DefaultSessionReader, DefaultSessionStore, DefaultSkillLoader, DefaultTaskStore, Director, DirectorBudgetError, DirectorStateCheckpoint, DoneConditionChecker, FLEET_ROSTER, FLEET_ROSTER_BUDGETS, FleetBus, FleetUsageAggregator, HybridCompactor, InMemoryAgentBridge, InMemoryBridgeTransport, InMemoryMetricsSink, IntelligentCompactor, LLMSelector, NoopMetricsSink, NoopTracer, OTelTracer, PROMETHEUS_CONTENT_TYPE, QueueStore, REFACTOR_PLANNER_AGENT, RecoveryLock, SECURITY_SCANNER_AGENT, SPEC_TEMPLATES, SelectiveCompactor, SessionAnalyzer, SpecDrivenDev, SpecParser, SpecStore, SpecVersioning, SubagentBudget, TaskFlow, TaskGenerator, TaskGraphStore, TaskTracker, ToolExecutor, addPlanItem, allServers, analyzeCriticalPath, applyRosterBudget, attachPlanCheckpoint, attachTodosCheckpoint, awsServer, blockServer, braveSearchServer, buildOtlpMetricsRequest, buildOtlpTracesRequest, classifyFamily, clearPlan, composeDirectorPrompt, composeSubagentPrompt, context7Server, contextManagerTool, createAutoExecutor, createContextManagerTool, createDelegateTool, createMessage, decryptConfigSecrets2 as decryptConfigSecrets, deriveTodosFromPlanItem, emptyPlan, encryptConfigSecrets, everArtServer, filesystemServer, formatPlan, formatPlanTemplates, getPlanTemplate, getTemplate, githubServer, googleMapsServer, listPlanTemplates, listTemplates, loadDirectorState, loadPlan, loadProjectModes, loadTodosCheckpoint, loadUserModes, makeAgentSubagentRunner, makeDirectorSessionFactory, migratePlaintextSecrets, miniMaxVisionServer, removePlanItem, renderProgress, renderPrometheus, renderSpecAnalysis, renderTaskGraph, renderTaskList, rewriteConfigEncrypted, rosterSummaryFromConfigs, runConfigMigrations, savePlan, saveTodosCheckpoint, sentinelServer, setPlanItemStatus, slackServer, startMetricsServer, startOtlpMetricsExporter, startOtlpTraceExporter, templateToMarkdown, wireMetricsToEvents, zaiVisionServer };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map