@wrongstack/core 0.51.3 → 0.63.4

package/dist/index.js

@@ -93,7 +93,7 @@ async function renameWithRetry(from, to) {
       if (!code || !TRANSIENT_RENAME_CODES.has(code) || i === delays.length) {
         throw err;
       }
-      await new Promise((resolve11) => setTimeout(resolve11, delays[i]));
+      await new Promise((resolve13) => setTimeout(resolve13, delays[i]));
     }
   }
   throw lastErr;
@@ -884,7 +884,9 @@ var TOKENS = {
   /** Optional git-worktree lifecycle manager (per-phase isolation in AutoPhase). */
   WorktreeManager: t("WorktreeManager"),
   /** Optional global Brain arbiter for policy/decision escalation. */
-  BrainArbiter: t("BrainArbiter")
+  BrainArbiter: t("BrainArbiter"),
+  /** Lifecycle hook registry (shell + in-process hooks). */
+  HookRegistry: t("HookRegistry")
 };
 
 // src/kernel/run-controller.ts
@@ -2058,7 +2060,7 @@ var DefaultPathResolver = class {
 var NETWORK_ERR_RE = /ECONN|ETIMEDOUT|ETIME|ENOTFOUND|EAI_AGAIN|fetch failed/i;
 
 // src/execution/error-handler.ts
-var CONTEXT_OVERFLOW_RE = /context|too long|tokens/i;
+var CONTEXT_OVERFLOW_RE = /context|too long|tokens|exceeds the context window|context window/i;
 function buildRecoveryStrategies(opts) {
   return [
     {
@@ -2066,7 +2068,7 @@ function buildRecoveryStrategies(opts) {
       compactor: opts?.compactor,
       async attempt(err, ctx) {
         if (!(err instanceof ProviderError)) return null;
-        if (err.status !== 413 && !CONTEXT_OVERFLOW_RE.test(err.message)) return null;
+        if (err.status !== 413 && !isContextOverflowError(err)) return null;
         if (this.compactor) {
           try {
             const report = await this.compactor.compact(ctx, { aggressive: true });
@@ -2129,6 +2131,14 @@ function buildRecoveryStrategies(opts) {
   ];
 }
 var DEFAULT_RECOVERY_STRATEGIES = buildRecoveryStrategies();
+function isContextOverflowError(err) {
+  return CONTEXT_OVERFLOW_RE.test([
+    err.message,
+    err.body?.message,
+    err.body?.type,
+    err.body?.raw
+  ].filter(Boolean).join("\n"));
+}
 var DefaultErrorHandler = class {
   strategies;
   constructor(strategies = DEFAULT_RECOVERY_STRATEGIES) {
@@ -2145,7 +2155,7 @@ var DefaultErrorHandler = class {
       if (err.status === 429) return { kind: "rate_limit", retryable: true };
       if (err.status === 529) return { kind: "overloaded", retryable: true };
       if (err.status >= 500) return { kind: "server", retryable: true };
-      if (err.status === 413 || CONTEXT_OVERFLOW_RE.test(err.message)) {
+      if (err.status === 413 || isContextOverflowError(err)) {
         return { kind: "context_overflow", retryable: false };
       }
       if (err.status >= 400) return { kind: "client", retryable: false };
@@ -2369,6 +2379,7 @@ function stripUndefined(obj) {
 // src/models/models-registry.ts
 var DEFAULT_URL = "https://models.dev/api.json";
 var DEFAULT_TTL_SECONDS = 24 * 3600;
+var DEFAULT_REFRESH_TIMEOUT_MS = 15e3;
 var FAMILY_BY_NPM = {
   "@ai-sdk/anthropic": "anthropic",
   "@ai-sdk/google-vertex/anthropic": "anthropic",
@@ -2405,6 +2416,7 @@ var DefaultModelsRegistry = class {
   fetchImpl;
   seed;
   maxStaleAgeMs;
+  refreshTimeoutMs;
   overlay;
   overlayUrl;
   overlayFile;
@@ -2417,6 +2429,7 @@ var DefaultModelsRegistry = class {
     this.seed = opts.seed;
     const maxStaleSeconds = opts.maxStaleAgeSeconds ?? 7 * 24 * 3600;
     this.maxStaleAgeMs = maxStaleSeconds * 1e3;
+    this.refreshTimeoutMs = opts.refreshTimeoutMs ?? DEFAULT_REFRESH_TIMEOUT_MS;
     this.overlay = opts.overlay;
     this.overlayUrl = opts.overlayUrl;
     this.overlayFile = opts.overlayFile;
@@ -2468,22 +2481,34 @@ var DefaultModelsRegistry = class {
   }
   /** Fetch + cache the models.dev base. Throws on failure (used by `refresh`). */
   async refreshBase() {
-    const res = await this.fetchImpl(this.url, {
-      method: "GET",
-      headers: { accept: "application/json" }
-    });
-    if (!res.ok) {
-      throw new Error(`ModelsRegistry: HTTP ${res.status} fetching ${this.url}`);
-    }
-    const json = await res.json();
-    this.fetchedAt = /* @__PURE__ */ new Date();
-    const envelope = {
-      fetchedAt: this.fetchedAt.toISOString(),
-      url: this.url,
-      payload: json
-    };
-    await atomicWrite(this.cacheFile, JSON.stringify(envelope));
-    return json;
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), this.refreshTimeoutMs);
+    try {
+      const res = await this.fetchImpl(this.url, {
+        method: "GET",
+        headers: { accept: "application/json" },
+        signal: controller.signal
+      });
+      clearTimeout(timeout);
+      if (!res.ok) {
+        throw new Error(`ModelsRegistry: HTTP ${res.status} fetching ${this.url}`);
+      }
+      const json = await res.json();
+      this.fetchedAt = /* @__PURE__ */ new Date();
+      const envelope = {
+        fetchedAt: this.fetchedAt.toISOString(),
+        url: this.url,
+        payload: json
+      };
+      await atomicWrite(this.cacheFile, JSON.stringify(envelope));
+      return json;
+    } catch (err) {
+      clearTimeout(timeout);
+      if (err instanceof Error && err.name === "AbortError") {
+        throw new Error(`ModelsRegistry: fetch timed out after ${this.refreshTimeoutMs}ms`);
+      }
+      throw err;
+    }
   }
   /**
    * Resolve the curated overlay, memoised. Order: in-memory `overlay` →
@@ -3034,7 +3059,7 @@ var InMemoryAgentBridge = class {
       );
     }
     this.inflightGuards.add(correlationId);
-    return new Promise((resolve11, reject) => {
+    return new Promise((resolve13, reject) => {
       const timer = setTimeout(() => {
         this.inflightGuards.delete(correlationId);
         this.pendingRequests.delete(correlationId);
@@ -3046,7 +3071,7 @@ var InMemoryAgentBridge = class {
         return;
       }
       this.pendingRequests.set(correlationId, {
-        resolve: resolve11,
+        resolve: resolve13,
         reject,
         timer
       });
@@ -3239,11 +3264,11 @@ function validateAgainstSchema(value, schema) {
   walk2(value, schema, "", errors);
   return { ok: errors.length === 0, errors };
 }
-function walk2(value, schema, path36, errors) {
+function walk2(value, schema, path37, errors) {
   if (schema.enum !== void 0) {
     if (!schema.enum.some((e) => deepEqual(e, value))) {
       errors.push({
-        path: path36 || "<root>",
+        path: path37 || "<root>",
         message: `expected one of ${JSON.stringify(schema.enum)}, got ${JSON.stringify(value)}`
       });
       return;
@@ -3252,7 +3277,7 @@ function walk2(value, schema, path36, errors) {
   if (typeof schema.type === "string") {
     if (!checkType(value, schema.type)) {
       errors.push({
-        path: path36 || "<root>",
+        path: path37 || "<root>",
         message: `expected ${schema.type}, got ${describeType(value)}`
       });
       return;
@@ -3262,19 +3287,19 @@ function walk2(value, schema, path36, errors) {
     const obj = value;
     for (const req of schema.required ?? []) {
       if (!(req in obj)) {
-        errors.push({ path: joinPath(path36, req), message: "required property missing" });
+        errors.push({ path: joinPath(path37, req), message: "required property missing" });
       }
     }
     if (schema.properties) {
       for (const [key, subSchema] of Object.entries(schema.properties)) {
         if (key in obj) {
-          walk2(obj[key], subSchema, joinPath(path36, key), errors);
+          walk2(obj[key], subSchema, joinPath(path37, key), errors);
         }
       }
     }
   }
   if (schema.type === "array" && Array.isArray(value) && schema.items) {
-    value.forEach((item, i) => walk2(item, schema.items, `${path36}[${i}]`, errors));
+    value.forEach((item, i) => walk2(item, schema.items, `${path37}[${i}]`, errors));
   }
 }
 function checkType(value, type) {
@@ -3400,8 +3425,9 @@ var ToolExecutor = class {
    */
   async executeBatch(toolUses, ctx, strategy) {
     let budget = this.opts.perIterationOutputCapBytes ?? 1e5;
-    const runOne = async (use) => {
+    const runOne = async (use0) => {
       const start = Date.now();
+      let use = use0;
       const tool = this.registry.get(use.name);
       if (!tool) {
         const result = this.unknownToolResult(use, () => this.registry.list().map((t2) => t2.name));
@@ -3434,10 +3460,36 @@ Please call the tool again with arguments that match its inputSchema. You can us
         budget = this.decrementBudget(result, budget);
         return { result, tool, durationMs: Date.now() - start };
       }
+      if (this.opts.hookRunner?.has("PreToolUse")) {
+        const pre = await this.opts.hookRunner.preToolUse(tool.name, use.input, ctx);
+        if (pre.block) {
+          const result = this.blockedByHookResult(use, pre.reason);
+          budget = this.decrementBudget(result, budget);
+          return { result, tool, durationMs: Date.now() - start };
+        }
+        if (pre.input) {
+          const reval = validateAgainstSchema(pre.input, tool.inputSchema);
+          if (!reval.ok) {
+            const errorDetails = reval.errors.map((e) => `  - ${e.path || "input"}: ${e.message}`).join("\n");
+            const result = {
+              type: "tool_result",
+              tool_use_id: use.id,
+              content: `A PreToolUse hook rewrote the arguments for "${tool.name}" into an invalid shape.
+
+Validation errors:
+${errorDetails}`,
+              is_error: true
+            };
+            budget = this.decrementBudget(result, budget);
+            return { result, tool, durationMs: Date.now() - start };
+          }
+          use = { ...use, input: pre.input };
+        }
+      }
       const decision = await this.opts.permissionPolicy.evaluate(tool, use.input, ctx);
       let effectivePermission = decision.permission;
       const policy = this.opts.permissionPolicy;
-      const yolo = policy.getYolo?.() === true || policy.getForceAllYolo?.() === true;
+      const yolo = policy.getYolo?.() === true || policy.getYoloDestructive?.() === true || policy.getForceAllYolo?.() === true;
       if (toolDangerousCaps.length > 0 && effectivePermission === "auto" && !yolo) {
         effectivePermission = "confirm";
       }
@@ -3480,7 +3532,20 @@ Please call the tool again with arguments that match its inputSchema. You can us
         "tool.has_dangerous_capabilities": toolCapsForAudit.length > 0
       });
       try {
-        const result = await this.executeTool(tool, use, ctx, budget);
+        let result = await this.executeTool(tool, use, ctx, budget);
+        if (this.opts.hookRunner?.has("PostToolUse")) {
+          const post = await this.opts.hookRunner.postToolUse(
+            tool.name,
+            use.input,
+            { content: String(result.content), isError: !!result.is_error },
+            ctx
+          );
+          if (post.additionalContext) {
+            result = { ...result, content: `${result.content}
+
+${post.additionalContext}` };
+          }
+        }
         budget = this.decrementBudget(result, budget);
         span?.setAttribute("tool.is_error", !!result.is_error);
         span?.setAttribute(
@@ -3669,6 +3734,14 @@ ${excerpt}`;
       is_error: true
     };
   }
+  blockedByHookResult(use, reason) {
+    return {
+      type: "tool_result",
+      tool_use_id: use.id,
+      content: `Tool "${use.name}" was blocked by a PreToolUse hook: ${reason ?? "no reason given"}`,
+      is_error: true
+    };
+  }
   decrementBudget(result, budget) {
     const contentBytes = typeof result.content === "string" ? Buffer.byteLength(result.content, "utf8") : Buffer.byteLength(JSON.stringify(result.content), "utf8");
     return Math.max(0, budget - contentBytes);
@@ -4752,6 +4825,23 @@ function tryParse(s) {
   }
 }
 
+// src/utils/merge-custom-models.ts
+function mergeCustomModelDefs(providerCustomModels, configModels) {
+  const out = {};
+  if (providerCustomModels) {
+    for (const [id, def] of Object.entries(providerCustomModels)) {
+      out[id] = { ...def };
+    }
+  }
+  if (configModels) {
+    for (const [id, def] of Object.entries(configModels)) {
+      out[id] = { ...def };
+    }
+  }
+  if (Object.keys(out).length === 0) return void 0;
+  return out;
+}
+
 // src/storage/session-store.ts
 init_atomic_write();
 var DefaultSessionStore = class {
@@ -6901,12 +6991,95 @@ var DirectorStateCheckpoint = class {
   }
 };
 init_atomic_write();
+var DESTRUCTIVE_BASH_PATTERNS = [
+  /\bgit\s+(?:clean\s+-[^\s]*[xdf]|reset\s+--hard)\b/i,
+  /\b(?:drop|truncate)\s+(?:table|database|schema)\b/i,
+  /\bdelete\s+from\b/i,
+  /\b(?:mkfs|format|diskpart|shutdown|reboot)\b/i,
+  /\bchmod\s+-R\s+777\b/i,
+  /\bchown\s+-R\b/i,
+  /\b(?:curl|wget)\b.*\|\s*(?:sh|bash|zsh|pwsh|powershell)\b/i,
+  /\b(?:powershell|pwsh)\b.*(?:-encodedcommand|-enc)\b/i,
+  /:\(\)\s*\{\s*:\|:&\s*}\s*;/
+];
+var PROJECT_ESCAPE_PATTERN = /(?:^|[\s"'])\.\.(?:[\\/]|$)/;
+var ABSOLUTE_PATH_PATTERN = /(?:^|[\s"'])(?:~[\\/]|\/[A-Za-z0-9_.-]|[A-Za-z]:[\\/])/;
+var SHELL_OPERATORS = /* @__PURE__ */ new Set(["&&", "||", "|", ";", ">", ">>", "<", "2>", "2>>"]);
+function getInputString(input, key) {
+  if (!input || typeof input !== "object") return void 0;
+  const value = input[key];
+  return typeof value === "string" ? value : void 0;
+}
+function pathLooksInsideProject(rawPath, projectRoot) {
+  if (!projectRoot) return false;
+  if (rawPath === "~" || rawPath.startsWith("~/") || rawPath.startsWith("~\\")) return false;
+  const resolved = path6.resolve(projectRoot, rawPath);
+  const relative8 = path6.relative(projectRoot, resolved);
+  return !!relative8 && !relative8.startsWith("..") && !path6.isAbsolute(relative8);
+}
+function tokenizeShell(command) {
+  return command.match(/"[^"]*"|'[^']*'|\S+/g)?.map((token) => token.replace(/^['"]|['"]$/g, "")) ?? [];
+}
+function pathTokenIsOutsideProject(token, projectRoot) {
+  if (!token || SHELL_OPERATORS.has(token) || token.startsWith("-")) return false;
+  if (token === "/" || token === "~" || token === "." || token === "..") return token !== ".";
+  if (token.includes("*")) return true;
+  if (token.startsWith("..") || token.includes("../") || token.includes("..\\")) return true;
+  if (path6.isAbsolute(token) || token.startsWith("~/")) return !pathLooksInsideProject(token, projectRoot);
+  return false;
+}
+function hasDangerousDeleteTarget(tokens, start, projectRoot) {
+  const targets = tokens.slice(start).filter((token) => !token.startsWith("-") && !SHELL_OPERATORS.has(token));
+  if (targets.length === 0) return true;
+  return targets.some((target) => pathTokenIsOutsideProject(target, projectRoot));
+}
+function hasDestructiveDelete(command, projectRoot) {
+  const tokens = tokenizeShell(command);
+  for (let i = 0; i < tokens.length; i++) {
+    const token = tokens[i]?.toLowerCase();
+    if (!token) continue;
+    if (token === "rm") {
+      const args = tokens.slice(i + 1);
+      const recursiveOrForce = args.some(
+        (arg) => /^-[^-]*[rf]/i.test(arg) || arg === "--recursive" || arg === "--force"
+      );
+      if (recursiveOrForce && hasDangerousDeleteTarget(tokens, i + 1, projectRoot)) return true;
+    }
+    if (token === "rmdir" || token === "rd") {
+      const args = tokens.slice(i + 1);
+      const recursive = args.some((arg) => arg.toLowerCase() === "/s");
+      if (recursive && hasDangerousDeleteTarget(tokens, i + 1, projectRoot)) return true;
+    }
+    if (token === "del" || token === "erase") {
+      if (hasDangerousDeleteTarget(tokens, i + 1, projectRoot)) return true;
+    }
+    if (token === "remove-item") {
+      const args = tokens.slice(i + 1).map((arg) => arg.toLowerCase());
+      const recursiveOrForce = args.includes("-recurse") || args.includes("-force");
+      if (recursiveOrForce && hasDangerousDeleteTarget(tokens, i + 1, projectRoot)) return true;
+    }
+  }
+  return false;
+}
+function isClearlyDestructiveBashCommand(command, projectRoot) {
+  const trimmed = command.trim();
+  if (!trimmed) return false;
+  if (hasDestructiveDelete(trimmed, projectRoot)) return true;
+  if (DESTRUCTIVE_BASH_PATTERNS.some((pattern) => pattern.test(trimmed))) return true;
+  if (/\bcd\s+(?:\.\.|~|\/|[A-Za-z]:[\\/])/i.test(trimmed)) return true;
+  if (PROJECT_ESCAPE_PATTERN.test(trimmed)) return true;
+  const absolute = trimmed.match(ABSOLUTE_PATH_PATTERN)?.[0]?.trim().replace(/^['"]|['"]$/g, "");
+  if (absolute && !pathLooksInsideProject(absolute, projectRoot)) return true;
+  return false;
+}
+
+// src/security/permission-policy.ts
 var DefaultPermissionPolicy = class {
   policy = {};
   loaded = false;
   trustFile;
   yolo;
-  forceAllYolo;
+  yoloDestructive;
   /**
    * Session-scoped "soft deny" map. When the user presses 'n' (block once),
    * the tool+pattern is added here. If the LLM retries in the same session,
@@ -6939,7 +7112,7 @@ var DefaultPermissionPolicy = class {
   constructor(opts) {
     this.trustFile = opts.trustFile;
     this.yolo = opts.yolo ?? false;
-    this.forceAllYolo = opts.forceAllYolo ?? false;
+    this.yoloDestructive = opts.yoloDestructive ?? opts.forceAllYolo ?? false;
     this.promptDelegate = opts.promptDelegate;
   }
   /**
@@ -6959,13 +7132,21 @@ var DefaultPermissionPolicy = class {
   getYolo() {
     return this.yolo;
   }
-  /** Toggle force-all-YOLO at runtime. */
+  /** Toggle the destructive YOLO override at runtime. */
+  setYoloDestructive(enabled) {
+    this.yoloDestructive = enabled;
+  }
+  /** Check whether the destructive YOLO override is active. */
+  getYoloDestructive() {
+    return this.yoloDestructive;
+  }
+  /** @deprecated Use `setYoloDestructive`. */
   setForceAllYolo(enabled) {
-    this.forceAllYolo = enabled;
+    this.setYoloDestructive(enabled);
   }
-  /** Check whether force-all-YOLO is active. */
+  /** @deprecated Use `getYoloDestructive`. */
   getForceAllYolo() {
-    return this.forceAllYolo;
+    return this.getYoloDestructive();
   }
   async reload() {
     try {
@@ -7012,7 +7193,8 @@ var DefaultPermissionPolicy = class {
       return { permission: "auto", source: "trust" };
     }
     if (this.yolo) {
-      if (tool.riskTier === "destructive" && !this.forceAllYolo) {
+      const destructive = this.isDestructiveYoloCall(tool, input, ctx);
+      if (destructive && !this.yoloDestructive) {
         if (this.promptDelegate) {
           const decision = await this.promptDelegate(tool, input, subject ?? tool.name);
           if (decision === "always") {
@@ -7064,6 +7246,18 @@ var DefaultPermissionPolicy = class {
     }
     return { permission: "confirm", source: "default" };
   }
+  isDestructiveYoloCall(tool, input, ctx) {
+    if (tool.name === "bash") {
+      const command = getInputString(input, "command");
+      return command ? isClearlyDestructiveBashCommand(command, ctx.projectRoot) : true;
+    }
+    if (tool.name === "write" || tool.name === "edit" || tool.name === "replace" || tool.name === "patch") {
+      const targetPath = getInputString(input, "path") ?? getInputString(input, "file");
+      if (!targetPath || !ctx.projectRoot) return false;
+      return !pathLooksInsideProject(targetPath, ctx.projectRoot);
+    }
+    return tool.riskTier === "destructive";
+  }
   async trust(rule) {
     if (!this.loaded) await this.reload();
     const entry = this.policy[rule.tool] ?? {};
@@ -7534,8 +7728,8 @@ async function streamProviderToResponse(provider, req, signal, ctx, events) {
       try {
         await Promise.race([
           Promise.resolve(iter.return?.()),
-          new Promise((resolve11) => {
-            drainTimer = setTimeout(resolve11, 500);
+          new Promise((resolve13) => {
+            drainTimer = setTimeout(resolve13, 500);
           })
         ]);
       } finally {
@@ -7596,7 +7790,7 @@ async function runProviderWithRetry(opts) {
           description
         });
       }
-      await new Promise((resolve11, reject) => {
+      await new Promise((resolve13, reject) => {
         let settled = false;
         const onAbort = () => {
           if (settled) return;
@@ -7609,7 +7803,7 @@ async function runProviderWithRetry(opts) {
           settled = true;
           clearTimeout(t2);
           signal.removeEventListener("abort", onAbort);
-          resolve11();
+          resolve13();
         }, delay);
         if (signal.aborted) {
           onAbort();
@@ -9159,7 +9353,8 @@ ${recentJournal}` : "No prior iterations.",
       "   \u2022 When this iteration's Task is finished (real artifact / passing",
       "     test / applied diff / clean output), emit `[done]` on its own line.",
       "   \u2022 Do not stop on the first obstacle \u2014 try at least 3 distinct",
-      "     approaches before giving up. YOLO is active; no confirmations.",
+      "     approaches before giving up. YOLO is active for normal project work;",
+      "     destructive-gated confirmations still belong to the permission flow.",
       "",
       "2. UPDATE TODO STATE (when Source is `todo`)",
       "   \u2022 Mark this todo `in_progress` via the todos tool before tool work.",
@@ -9288,7 +9483,7 @@ ${recentJournal}` : "No prior iterations.",
   }
 };
 function sleep(ms) {
-  return new Promise((resolve11) => setTimeout(resolve11, ms));
+  return new Promise((resolve13) => setTimeout(resolve13, ms));
 }
 
 // src/coordination/subagent-budget.ts
@@ -9504,12 +9699,12 @@ var SubagentBudget = class _SubagentBudget {
           if (!bus || !bus.hasListenerFor("budget.threshold_reached")) {
             return Promise.resolve("stop");
           }
-          return new Promise((resolve11) => {
+          return new Promise((resolve13) => {
             let resolved = false;
             const respond = (d) => {
               if (resolved) return;
               resolved = true;
-              resolve11(d);
+              resolve13(d);
             };
             const fallback = setTimeout(
               () => respond("stop"),
@@ -12736,7 +12931,7 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
       taskIds.map((id) => {
         const cached = this.completedResults.find((r) => r.taskId === id);
         if (cached) return cached;
-        return new Promise((resolve11, reject) => {
+        return new Promise((resolve13, reject) => {
           const timeout = setTimeout(() => {
             this.off("task.completed", handler);
             reject(new Error(`awaitTasks timed out waiting for task "${id}"`));
@@ -12745,7 +12940,7 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
             if (result.taskId === id) {
               clearTimeout(timeout);
               this.off("task.completed", handler);
-              resolve11(result);
+              resolve13(result);
             }
           };
           this.on("task.completed", handler);
@@ -13248,7 +13443,7 @@ function providerErrorToSubagentError(err, message, cause) {
 
 // src/execution/parallel-eternal-engine.ts
 function sleep2(ms) {
-  return new Promise((resolve11) => setTimeout(resolve11, ms));
+  return new Promise((resolve13) => setTimeout(resolve13, ms));
 }
 var GOAL_COMPLETE_MARKER2 = /^\s*\[goal[_\s-]?complete\]\s*$/im;
 var ParallelEternalEngine = class {
@@ -13427,7 +13622,8 @@ ${recentJournal}` : "No prior iterations.",
       "\u2500\u2500 EXECUTION PROTOCOL \u2500\u2500",
       "\u2022 Execute the assigned task end-to-end using multiple tool calls.",
       "\u2022 Emit `[done]` on its own line when the task is complete.",
-      "\u2022 Do not ask for confirmation \u2014 YOLO is active.",
+      "\u2022 Do not ask before routine in-project tool use \u2014 YOLO is active for normal project work.",
+      "\u2022 If a destructive-gated confirmation appears, wait for the permission flow.",
       "\u2022 If the overall Mission is accomplished, emit `[GOAL_COMPLETE]` followed by a verification recipe.",
       "\u2022 Keep output concise \u2014 summarize findings, do not transcribe files."
     ].join("\n");
@@ -13684,8 +13880,10 @@ ${journalTail.join("\n")}` : "Recent journal: (none \u2014 this is the first ite
       "  decide.",
       "",
       "### Operating principles",
-      "- YOLO is active. Do NOT ask for confirmation, do NOT propose",
-      "  options. Pick the best path and execute it.",
+      "- YOLO is active for normal project work. Proceed with routine",
+      "  in-project tool use without pre-confirming; pick the best path and execute it.",
+      "  If the permission system raises a destructive-gated confirmation, wait",
+      "  for that flow instead of trying to bypass it.",
       "- Use tools freely; multiple calls per turn are normal and expected.",
       "- When working on a todo, mark it `in_progress` via the todos tool",
       "  before tool work and `completed` (or `cancelled` with a reason)",
@@ -16053,11 +16251,11 @@ var Director = class _Director {
         if (cached) return cached;
         const existing = this.taskWaiters.get(id);
         if (existing) return existing.promise;
-        let resolve11;
+        let resolve13;
         const promise = new Promise((res) => {
-          resolve11 = res;
+          resolve13 = res;
         });
-        this.taskWaiters.set(id, { promise, resolve: resolve11 });
+        this.taskWaiters.set(id, { promise, resolve: resolve13 });
         return promise;
       })
     );
@@ -16442,7 +16640,7 @@ function createDelegateTool(opts) {
           subagentId
         });
         const dir = director;
-        const result = await new Promise((resolve11) => {
+        const result = await new Promise((resolve13) => {
           let settled = false;
           let timer;
           const finish = (value) => {
@@ -16452,7 +16650,7 @@ function createDelegateTool(opts) {
             offTool();
             offIter();
             offProgress();
-            resolve11(value);
+            resolve13(value);
           };
           const arm = () => {
             if (timer) clearTimeout(timer);
@@ -18082,9 +18280,9 @@ var AISpecBuilder = class {
     if (!this.sessionPath) return;
     try {
       const fsp20 = await import('fs/promises');
-      const path36 = await import('path');
+      const path37 = await import('path');
       const { atomicWrite: atomicWrite2 } = await Promise.resolve().then(() => (init_atomic_write(), atomic_write_exports));
-      await fsp20.mkdir(path36.dirname(this.sessionPath), { recursive: true });
+      await fsp20.mkdir(path37.dirname(this.sessionPath), { recursive: true });
       await atomicWrite2(this.sessionPath, JSON.stringify(this.session, null, 2));
     } catch {
     }
@@ -18794,15 +18992,15 @@ function computeCriticalPath(graph, _topoOrder, blockedByMap) {
       maxId = id;
     }
   }
-  const path36 = [];
+  const path37 = [];
   let current = maxId;
   const visited = /* @__PURE__ */ new Set();
   while (current && !visited.has(current)) {
     visited.add(current);
-    path36.unshift(current);
+    path37.unshift(current);
     current = prev.get(current) ?? null;
   }
-  return path36;
+  return path37;
 }
 function computeParallelGroups(graph, blockedByMap) {
   const groups = [];
@@ -19352,7 +19550,7 @@ var SddParallelRun = class {
       "\u2500\u2500 EXECUTION PROTOCOL \u2500\u2500",
       "\u2022 Execute the assigned SDD task end-to-end using multiple tool calls.",
       "\u2022 Mark the task [done] in the tracker when complete.",
-      "\u2022 Do not ask for confirmation.",
+      "\u2022 Do not ask before routine in-project tool use; if a permission gate appears, wait for that flow.",
       "\u2022 Keep output concise \u2014 summarize changes, do not transcribe files."
     ].join("\n");
     const spawns = subagentIds.map(
@@ -19595,9 +19793,9 @@ var DefaultHealthRegistry = class {
   }
   async runOne(check) {
     let timer = null;
-    const timeout = new Promise((resolve11) => {
+    const timeout = new Promise((resolve13) => {
       timer = setTimeout(
-        () => resolve11({ status: "unhealthy", detail: `timeout after ${this.timeoutMs}ms` }),
+        () => resolve13({ status: "unhealthy", detail: `timeout after ${this.timeoutMs}ms` }),
         this.timeoutMs
       );
     });
@@ -19780,7 +19978,7 @@ async function startMetricsServer(opts) {
   const tls = opts.tls;
   const useHttps = !!(tls?.cert && tls?.key);
   const host = opts.host ?? "127.0.0.1";
-  const path36 = opts.path ?? "/metrics";
+  const path37 = opts.path ?? "/metrics";
   const healthPath = opts.healthPath ?? "/healthz";
   const healthRegistry = opts.healthRegistry;
   const listener = (req, res) => {
@@ -19790,7 +19988,7 @@ async function startMetricsServer(opts) {
       return;
     }
     const url = req.url.split("?")[0];
-    if (url === path36) {
+    if (url === path37) {
       let body;
       try {
         body = renderPrometheus(opts.sink.snapshot());
@@ -19836,14 +20034,14 @@ async function startMetricsServer(opts) {
     const { createServer } = await import('http');
     server = createServer(listener);
   }
-  await new Promise((resolve11, reject) => {
+  await new Promise((resolve13, reject) => {
     const onError = (err) => {
       server.off("listening", onListening);
       reject(err);
     };
     const onListening = () => {
       server.off("error", onError);
-      resolve11();
+      resolve13();
     };
     server.once("error", onError);
     server.once("listening", onListening);
@@ -19854,9 +20052,9 @@ async function startMetricsServer(opts) {
   const protocol = useHttps ? "https" : "http";
   return {
     port: boundPort,
-    url: `${protocol}://${host}:${boundPort}${path36}`,
-    close: () => new Promise((resolve11, reject) => {
-      server.close((err) => err ? reject(err) : resolve11());
+    url: `${protocol}://${host}:${boundPort}${path37}`,
+    close: () => new Promise((resolve13, reject) => {
+      server.close((err) => err ? reject(err) : resolve13());
     })
   };
 }
@@ -20405,7 +20603,7 @@ var context7Server = () => ({
   name: "context7",
   description: "Codebase-aware documentation and Q&A (context7.ai)",
   transport: "streamable-http",
-  url: "https://server.context7.ai/mcp",
+  url: "https://mcp.context7.com/mcp",
   permission: "confirm"
 });
 var braveSearchServer = () => ({
@@ -21995,7 +22193,7 @@ var CloudSync = class {
       const localPath = this.categoryToPath(cat);
       if (!localPath) continue;
       const rel = segments.slice(2).join("/");
-      const destPath = rel ? path6.join(localPath, rel) : localPath;
+      const destPath = resolvePulledCategoryPath(cat, localPath, rel, entry.path);
       const blobData = await this.getBlob(token, owner, repoName, entry.sha);
       await fsp3.mkdir(path6.dirname(destPath), { recursive: true });
       await fsp3.writeFile(destPath, Buffer.from(blobData, "base64"));
@@ -22169,6 +22367,26 @@ var CloudSync = class {
     return results;
   }
 };
+function resolvePulledCategoryPath(cat, localPath, rel, remotePath) {
+  const directoryBacked = cat === "skills" || cat === "prompts";
+  if (!directoryBacked) {
+    if (rel) throw new Error(`Refusing nested CloudSync path for file category: ${remotePath}`);
+    return localPath;
+  }
+  if (!rel) return localPath;
+  const normalizedRel = path6.normalize(rel);
+  const traversesUp = normalizedRel === ".." || normalizedRel.startsWith(`..${path6.sep}`);
+  if (path6.isAbsolute(normalizedRel) || traversesUp) {
+    throw new Error(`Refusing CloudSync path traversal: ${remotePath}`);
+  }
+  const dest = path6.resolve(localPath, normalizedRel);
+  const root = path6.resolve(localPath);
+  const relative8 = path6.relative(root, dest);
+  if (relative8.startsWith("..") || path6.isAbsolute(relative8)) {
+    throw new Error(`Refusing CloudSync path outside category root: ${remotePath}`);
+  }
+  return dest;
+}
 function timeAgo(iso) {
   const diff = Date.now() - new Date(iso).getTime();
   const mins = Math.floor(diff / 6e4);
@@ -23337,7 +23555,7 @@ var SecurityScannerOrchestrator = class {
       const delay = Math.round(policy.delayMs(attempt));
       const status = isProviderErr ? err.status : 0;
       console.warn(`[SecurityScanner] retry ${attempt + 1} after ${delay}ms (status=${status}) \u2014 ${errAsErr.message}`);
-      await new Promise((resolve11) => setTimeout(resolve11, delay));
+      await new Promise((resolve13) => setTimeout(resolve13, delay));
       return this.completeWithRetry(provider, request, abortController, attempt + 1);
     }
   }
@@ -24913,12 +25131,12 @@ function makeContinueToNextIterationTool() {
 // src/core/iteration-limit.ts
 function requestLimitExtension(opts) {
   const { events, currentIterations, currentLimit, autoExtend, timeoutMs = 3e4 } = opts;
-  return new Promise((resolve11) => {
+  return new Promise((resolve13) => {
     let resolved = false;
     const timerFired = () => {
       if (!resolved) {
         resolved = true;
-        resolve11(0);
+        resolve13(0);
       }
     };
     const timer = setTimeout(timerFired, timeoutMs);
@@ -24927,14 +25145,14 @@ function requestLimitExtension(opts) {
       if (!resolved) {
         resolved = true;
         clearTimeout(timer);
-        resolve11(0);
+        resolve13(0);
       }
     };
     const grant = (extra) => {
       if (!resolved) {
         resolved = true;
         clearTimeout(timer);
-        resolve11(Math.max(0, extra));
+        resolve13(Math.max(0, extra));
       }
     };
     events.emit("iteration.limit_reached", {
@@ -24948,7 +25166,7 @@ function requestLimitExtension(opts) {
         if (!resolved) {
           resolved = true;
           clearTimeout(timer);
-          resolve11(100);
+          resolve13(100);
         }
       });
     }
@@ -25540,13 +25758,13 @@ var Agent = class {
     }
   }
   waitForConfirm(info) {
-    return new Promise((resolve11) => {
+    return new Promise((resolve13) => {
       this.events.emit("tool.confirm_needed", {
         tool: info.tool,
         input: info.input,
         toolUseId: info.toolUseId,
         suggestedPattern: info.suggestedPattern,
-        resolve: resolve11
+        resolve: resolve13
       });
     });
   }
@@ -25620,6 +25838,260 @@ function sizeSignals(toolName, content) {
   }
   return { outputBytes, outputTokens, outputLines };
 }
+
+// src/hooks/registry.ts
+var HookRegistry = class {
+  entries = [];
+  /** Register an in-process hook. Returns an unsubscribe function. */
+  registerInProcess(event, matcher, hook, owner) {
+    const entry = {
+      kind: "inprocess",
+      event,
+      matcher: matcher ?? "*",
+      hook,
+      owner
+    };
+    this.entries.push(entry);
+    return () => this.remove(entry);
+  }
+  /** Register a single shell hook. Returns an unsubscribe function. */
+  registerShell(event, hook) {
+    const entry = {
+      kind: "shell",
+      event,
+      matcher: hook.matcher ?? "*",
+      command: hook.command,
+      timeoutMs: hook.timeoutMs
+    };
+    this.entries.push(entry);
+    return () => this.remove(entry);
+  }
+  /** Bulk-load shell hooks from a `config.hooks` map. */
+  loadShellHooks(hooks) {
+    if (!hooks) return;
+    for (const [event, list] of Object.entries(hooks)) {
+      for (const h of list ?? []) {
+        if (h?.command) this.registerShell(event, h);
+      }
+    }
+  }
+  /** All entries registered for an event, in registration order. */
+  list(event) {
+    return this.entries.filter((e) => e.event === event);
+  }
+  /** True when any entry is registered for the event. */
+  has(event) {
+    return this.entries.some((e) => e.event === event);
+  }
+  /** Drop every registered hook (used in teardown / tests). */
+  clear() {
+    this.entries.length = 0;
+  }
+  remove(entry) {
+    const i = this.entries.indexOf(entry);
+    if (i >= 0) this.entries.splice(i, 1);
+  }
+};
+function hookMatcherMatches(matcher, toolName) {
+  if (!matcher || matcher === "*") return true;
+  if (toolName === void 0) return true;
+  const target = toolName.toLowerCase();
+  return matcher.split("|").map((s) => s.trim().toLowerCase()).filter(Boolean).includes(target);
+}
+var DEFAULT_TIMEOUT_MS3 = 5e3;
+var MAX_OUTPUT_BYTES = 64 * 1024;
+async function runShellHook(spec, input, logger) {
+  const timeoutMs = spec.timeoutMs ?? DEFAULT_TIMEOUT_MS3;
+  return await new Promise((resolve13) => {
+    let settled = false;
+    const done = (v) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      resolve13(v);
+    };
+    let child;
+    try {
+      child = spawn(spec.command, {
+        cwd: input.cwd,
+        env: process.env,
+        stdio: ["pipe", "pipe", "pipe"],
+        shell: true
+      });
+    } catch (err2) {
+      logger?.warn?.(`hook spawn failed: ${err2 instanceof Error ? err2.message : String(err2)}`);
+      return resolve13(null);
+    }
+    const timer = setTimeout(() => {
+      logger?.warn?.(`hook command timed out after ${timeoutMs}ms: ${spec.command}`);
+      try {
+        child.kill("SIGKILL");
+      } catch {
+      }
+      done(null);
+    }, timeoutMs);
+    let out = "";
+    let err = "";
+    let outTrunc = false;
+    child.stdout?.on("data", (d) => {
+      if (outTrunc) return;
+      out += d.toString("utf8");
+      if (Buffer.byteLength(out, "utf8") > MAX_OUTPUT_BYTES) {
+        out = out.slice(0, MAX_OUTPUT_BYTES);
+        outTrunc = true;
+      }
+    });
+    child.stderr?.on("data", (d) => {
+      if (err.length < MAX_OUTPUT_BYTES) err += d.toString("utf8");
+    });
+    child.on("error", (e) => {
+      logger?.warn?.(`hook command error: ${e instanceof Error ? e.message : String(e)}`);
+      done(null);
+    });
+    child.on("close", (code) => {
+      if (code === 2) {
+        const reason = (err.trim() || out.trim() || "blocked by hook").slice(0, 2e3);
+        return done({ decision: "block", reason });
+      }
+      const parsed = parseOutcome(out);
+      done(parsed);
+    });
+    try {
+      child.stdin?.end(`${JSON.stringify(input)}
+`);
+    } catch {
+    }
+  });
+}
+function parseOutcome(stdout) {
+  const trimmed = stdout.trim();
+  if (!trimmed || trimmed[0] !== "{") return null;
+  try {
+    const obj = JSON.parse(trimmed);
+    const outcome = {};
+    if (obj["decision"] === "block" || obj["decision"] === "allow") {
+      outcome.decision = obj["decision"];
+    }
+    if (typeof obj["reason"] === "string") outcome.reason = obj["reason"];
+    if (typeof obj["additionalContext"] === "string") {
+      outcome.additionalContext = obj["additionalContext"];
+    }
+    if (obj["modifiedInput"] && typeof obj["modifiedInput"] === "object") {
+      outcome.modifiedInput = obj["modifiedInput"];
+    }
+    return outcome;
+  } catch {
+    return null;
+  }
+}
+
+// src/hooks/runner.ts
+var HookRunner = class {
+  constructor(opts) {
+    this.opts = opts;
+    this.registry = opts.registry;
+  }
+  opts;
+  registry;
+  /** Cheap guard so callers can skip building payloads when nothing listens. */
+  has(event) {
+    return this.registry.has(event);
+  }
+  async preToolUse(toolName, toolInput, env) {
+    const entries = this.matching("PreToolUse", toolName);
+    if (entries.length === 0) return {};
+    let current = toolInput;
+    let mutated = false;
+    for (const entry of entries) {
+      const payload = {
+        event: "PreToolUse",
+        toolName,
+        toolInput: current,
+        ...this.base(env)
+      };
+      const outcome = await this.invoke(entry, payload);
+      if (!outcome) continue;
+      if (outcome.modifiedInput && typeof outcome.modifiedInput === "object") {
+        current = outcome.modifiedInput;
+        mutated = true;
+      }
+      if (outcome.decision === "block") {
+        return { block: true, reason: outcome.reason ?? `Blocked by ${entry.event} hook` };
+      }
+    }
+    return mutated ? { input: current } : {};
+  }
+  async postToolUse(toolName, toolInput, result, env) {
+    const payload = {
+      event: "PostToolUse",
+      toolName,
+      toolInput,
+      toolResult: result,
+      ...this.base(env)
+    };
+    return { additionalContext: await this.collectContext("PostToolUse", toolName, payload) };
+  }
+  async userPromptSubmit(prompt, env) {
+    const entries = this.matching("UserPromptSubmit", void 0);
+    if (entries.length === 0) return {};
+    const payload = { event: "UserPromptSubmit", prompt, ...this.base(env) };
+    const parts = [];
+    for (const entry of entries) {
+      const outcome = await this.invoke(entry, payload);
+      if (!outcome) continue;
+      if (outcome.decision === "block") {
+        return { block: true, reason: outcome.reason ?? "Blocked by UserPromptSubmit hook" };
+      }
+      if (outcome.additionalContext) parts.push(outcome.additionalContext);
+    }
+    return parts.length ? { additionalContext: parts.join("\n") } : {};
+  }
+  async sessionStart(env) {
+    const payload = { event: "SessionStart", ...this.base(env) };
+    return { additionalContext: await this.collectContext("SessionStart", void 0, payload) };
+  }
+  async stop(env) {
+    const payload = { event: "Stop", ...this.base(env) };
+    await this.collectContext("Stop", void 0, payload);
+  }
+  // ── internals ──────────────────────────────────────────────────────
+  base(env) {
+    const sessionId = this.opts.sessionId?.();
+    return sessionId ? { cwd: env.cwd, sessionId } : { cwd: env.cwd };
+  }
+  matching(event, toolName) {
+    return this.registry.list(event).filter((e) => hookMatcherMatches(e.matcher, toolName));
+  }
+  async invoke(entry, payload) {
+    try {
+      if (entry.kind === "inprocess") {
+        const r = await entry.hook(payload);
+        return r ?? null;
+      }
+      if (this.opts.allowShell === false) return null;
+      return await runShellHook(
+        { command: entry.command, timeoutMs: entry.timeoutMs },
+        payload,
+        this.opts.logger
+      );
+    } catch (err) {
+      this.opts.logger?.warn?.(
+        `${payload.event} hook threw: ${err instanceof Error ? err.message : String(err)}`
+      );
+      return null;
+    }
+  }
+  async collectContext(event, toolName, payload) {
+    const entries = this.matching(event, toolName);
+    if (entries.length === 0) return void 0;
+    const parts = [];
+    for (const entry of entries) {
+      const outcome = await this.invoke(entry, payload);
+      if (outcome?.additionalContext) parts.push(outcome.additionalContext);
+    }
+    return parts.length ? parts.join("\n") : void 0;
+  }
+};
 async function bootConfig(options = {}) {
   const { flags = {}, appLabel = "wstack", loadSyncConfig = true } = options;
   const cwd = typeof flags["cwd"] === "string" ? path6.resolve(flags["cwd"]) : process.cwd();
@@ -25667,6 +26139,10 @@ function flagsToConfigPatch(flags) {
   const patch = {};
   if (typeof flags["provider"] === "string") patch.provider = flags["provider"];
   if (typeof flags["model"] === "string") patch.model = flags["model"];
+  if (typeof flags["fallback-model"] === "string") {
+    const list = flags["fallback-model"].split(",").map((s) => s.trim()).filter(Boolean);
+    if (list.length > 0) patch.fallbackModels = list;
+  }
   if (typeof flags["cwd"] === "string") patch.cwd = flags["cwd"];
   if (typeof flags["log-level"] === "string") {
     patch.log = { level: flags["log-level"] };
@@ -25998,8 +26474,8 @@ var InputBuilder = class {
   async registerFile(input) {
     const ref = await this.store.add({ ...input, kind: "file" });
     this.refs.push(ref);
-    const path36 = ref.meta.filename ?? ref.meta.label ?? String(ref.seq);
-    return `[file:${path36}]`;
+    const path37 = ref.meta.filename ?? ref.meta.label ?? String(ref.seq);
+    return `[file:${path37}]`;
   }
   /**
    * Whether `appendPaste(text)` would collapse the text to a placeholder
@@ -26399,12 +26875,12 @@ ${mem}`);
     }
   }
   async gitStatus(root) {
-    return new Promise((resolve11) => {
+    return new Promise((resolve13) => {
       let settled = false;
       const finish = (s) => {
         if (settled) return;
         settled = true;
-        resolve11(s);
+        resolve13(s);
       };
       let proc;
       const timer = setTimeout(() => {
@@ -26799,9 +27275,13 @@ var DefaultPluginAPI = class {
   config;
   log;
   configStore;
+  hookRegistry;
+  ownerName;
   pluginCleanupFns = [];
   constructor(init) {
     const owner = init.ownerName;
+    this.ownerName = owner;
+    this.hookRegistry = init.hookRegistry;
     this.container = init.container;
     this.events = init.events;
     this.config = init.config;
@@ -26888,6 +27368,13 @@ var DefaultPluginAPI = class {
   registerSystemPromptContributor(c) {
     return this.extensions.registerSystemPromptContributor(c);
   }
+  registerHook(event, matcher, hook) {
+    if (!this.hookRegistry) return () => {
+    };
+    const off = this.hookRegistry.registerInProcess(event, matcher, hook, this.ownerName);
+    this.pluginCleanupFns.push(off);
+    return off;
+  }
 };
 var noopMcp = {
   start: async () => void 0,
@@ -27610,7 +28097,7 @@ var PhaseOrchestrator = class {
   async mergeOne(phase, handle) {
     if (!this.worktrees) return;
     try {
-      const resolve11 = this.ctx.resolveConflict ? async (info) => {
+      const resolve13 = this.ctx.resolveConflict ? async (info) => {
         const shouldResolve = await this.shouldAttemptConflictResolution(phase, info);
         if (!shouldResolve) return false;
         this.emit("phase.conflictResolving", {
@@ -27620,7 +28107,7 @@ var PhaseOrchestrator = class {
         });
         return this.ctx.resolveConflict(phase, info);
       } : void 0;
-      const result = await this.worktrees.merge(handle, { squash: true, resolve: resolve11 });
+      const result = await this.worktrees.merge(handle, { squash: true, resolve: resolve13 });
       if (result.resolved) {
         this.emit("phase.conflictResolved", { phaseId: phase.id, name: phase.name });
       }
@@ -27970,7 +28457,7 @@ var PhaseOrchestrator = class {
     }
   }
   delay(ms) {
-    return new Promise((resolve11) => setTimeout(resolve11, ms));
+    return new Promise((resolve13) => setTimeout(resolve13, ms));
   }
 };
 
@@ -29007,12 +29494,12 @@ var BrainDecisionQueue = class {
       options: request.options,
       rationale: "Decision escalated to human authority."
     };
-    const pending = new Promise((resolve11) => {
-      const entry = { request, resolve: resolve11 };
+    const pending = new Promise((resolve13) => {
+      const entry = { request, resolve: resolve13 };
       if (this.opts.timeoutMs && this.opts.timeoutMs > 0) {
         entry.timer = setTimeout(() => {
           this.pending.delete(request.id);
-          resolve11({ type: "deny", reason: "Brain human decision timed out." });
+          resolve13({ type: "deny", reason: "Brain human decision timed out." });
         }, this.opts.timeoutMs);
       }
       this.pending.set(request.id, entry);
@@ -29127,8 +29614,8 @@ var CollaborationBus = class {
     if (this.isPaused()) return false;
     this.pausedAtMs = Date.now();
     this.pausedBy = byParticipant;
-    this.pausePromise = new Promise((resolve11) => {
-      this.pauseResolve = resolve11;
+    this.pausePromise = new Promise((resolve13) => {
+      this.pauseResolve = resolve13;
     });
     return true;
   }
@@ -29164,8 +29651,8 @@ var CollaborationBus = class {
       return true;
     }
     let timer;
-    const timeoutPromise = new Promise((resolve11) => {
-      timer = setTimeout(() => resolve11("timeout"), timeoutMs);
+    const timeoutPromise = new Promise((resolve13) => {
+      timer = setTimeout(() => resolve13("timeout"), timeoutMs);
     });
     const resumedPromise = this.pausePromise.then(() => "resumed");
     const winner = await Promise.race([resumedPromise, timeoutPromise]);
@@ -29656,7 +30143,7 @@ function createGitPlugin() {
 }
 async function runGit(args, cwd) {
   try {
-    return await new Promise((resolve11, reject) => {
+    return await new Promise((resolve13, reject) => {
       const child = spawn("git", args, { cwd, stdio: ["ignore", "pipe", "pipe"] });
       let stdout = "";
       let stderr = "";
@@ -29677,7 +30164,7 @@ async function runGit(args, cwd) {
           })
         );
       });
-      child.on("close", (code) => resolve11({ stdout, stderr, code: code ?? 0 }));
+      child.on("close", (code) => resolve13({ stdout, stderr, code: code ?? 0 }));
     });
   } catch (err) {
     if (err instanceof WrongStackError) throw err;
@@ -30353,6 +30840,6 @@ ${formatPlan(updated)}`
   };
 }
 
-export { ACP_AGENTS, AGENTS_BY_PHASE, AGENT_CATALOG, AISpecBuilder, ALL_AGENT_DEFINITIONS, ALL_FLEET_AGENTS, ALL_SYNC_CATEGORIES, AUDIT_LOG_AGENT, Agent, AgentError, AnnotationsStore, AutoApprovePermissionPolicy, AutoCompactionMiddleware, AutoExecutor, AutoPhasePlanner, AutoPhaseRunner, AutonomousRunner, BUG_HUNTER_AGENT, BrainDecisionQueue, BudgetExceededError, CONTEXT_WINDOW_MODES, CORE_RECONSTRUCT_EVENTS, CheckpointManager, CloudSync, CollaborationBus, ConfigError, ConfigMigrationError, Container, Context, ConversationState, DEFAULT_AUTONOMY_CONFIG, DEFAULT_CONFIG_MIGRATIONS, DEFAULT_CONTEXT_CONFIG, DEFAULT_CONTEXT_WINDOW_MODE_ID, DEFAULT_DIRECTOR_PREAMBLE, DEFAULT_DISPATCH_ROLE, DEFAULT_MAX_ITERATIONS, DEFAULT_MODES, DEFAULT_RECOVERY_STRATEGIES, DEFAULT_SESSION_LOGGING_CONFIG, DEFAULT_SPEC_TEMPLATE, DEFAULT_SUBAGENT_BASELINE, DEFAULT_TOOLS_CONFIG, DefaultAttachmentStore, DefaultBrainArbiter, DefaultConfigLoader, DefaultConfigStore, DefaultErrorHandler, DefaultHealthRegistry, DefaultLogger, DefaultMemoryStore, DefaultModeStore, DefaultModelsRegistry, DefaultMultiAgentCoordinator, DefaultPathResolver, DefaultPermissionPolicy, DefaultPluginAPI, DefaultPromptStore, DefaultProviderRunner, DefaultRetryPolicy, DefaultSecretScrubber, DefaultSecretVault, DefaultSessionReader, DefaultSessionRewinder, DefaultSessionStore, DefaultSkillLoader, DefaultSystemPromptBuilder, DefaultTaskStore, DefaultTokenCounter, Director, DirectorStateCheckpoint, DoneConditionChecker, ERROR_CODES, EternalAutonomyEngine, EventBus, ExtensionRegistry, FLEET_ROSTER, FLEET_ROSTER_BUDGETS, FLEET_ROSTER_WITHACP, FleetBus, FleetCostCapError, FleetManager, FleetSpawnBudgetError, FleetUsageAggregator, FsError, GitignoreUpdater, HumanEscalatingBrainArbiter, HybridCompactor, InMemoryAgentBridge, InMemoryBridgeTransport, InMemoryMetricsSink, InputBuilder, IntelligentCompactor, KERNEL_API_VERSION, LAYER_1_IDENTITY, LLMSelector, MATRIX_PHASE_KEYS, MAX_JOURNAL_ENTRIES, NULL_FLEET_BUS, NoopMetricsSink, NoopTracer, OTelTracer, ObservableBrainArbiter, PROMETHEUS_CONTENT_TYPE, ParallelEternalEngine, PhaseGraphBuilder, PhaseOrchestrator, PhaseStore, Pipeline, PluginError, ProviderError, ProviderRegistry, QueueStore, REFACTOR_PLANNER_AGENT, RecoveryLock, ReplayLogStore, ReplayProviderRunner, ReportGenerator, RunController, SECURITY_SCANNER_AGENT, SPEC_TEMPLATES, STANDARD_AUDIT_EVENTS, ScopedEventBus, SddParallelRun, SddTaskDecomposer, SecurityScanner, SecurityScannerOrchestrator, SelectiveCompactor, SessionAnalyzer, SessionError, SessionRecovery, SkillGenerator, SkillInstaller, SkillManifestStore, SlashCommandRegistry, SpecDrivenDev, SpecParser, SpecStore, SpecVersioning, SubagentBudget, TOKENS, TaskFlow, TaskGenerator, TaskGraphStore, TaskTracker, TechStackDetector, ToolAuditLog, ToolError, ToolExecutor, ToolRegistry, WorktreeManager, WrongStackError, addPlanItem, allServers, analyzeCriticalPath, appendJournal, applyRosterBudget, asBlocks, asText, assertSafePath, atomicWrite, attachAutoExtend, attachPlanCheckpoint, attachTodosCheckpoint, awsServer, blockServer, bootConfig, braveSearchServer, buildBtwBlock, buildChildEnv, buildGoalPreamble, buildOtlpMetricsRequest, buildOtlpTracesRequest, buildRecoveryStrategies, classifyFamily, clearPlan, collabInjectMiddleware, collabPauseMiddleware, color, compileGlob, compileUserRegex, completePartialObject, composeDirectorPrompt, composeSubagentPrompt, computeTaskProgress, consumeBtwNotes, context7Server, contextManagerTool, createAutoExecutor, createAutoPhaseFromTaskGraph, createContextManagerTool, createDefaultPipelines, createDelegateTool, createGitPlugin, createMcpControlTool, createMessage, createObservabilityPlugin, createPlanPlugin, createPromptsPlugin, createSecurityPlugin, createSecuritySlashCommand, createSessionEventBridge, createSkillsPlugin, createSyncPlugin, createToolOutputSerializer, decryptConfigSecrets, defaultGitignoreUpdater, defaultOrchestrator, defaultReportGenerator, defaultSecurityScanner, defaultSkillGenerator, defaultTechStackDetector, deriveTodosFromPlanItem, detectNewlineStyle, dispatchAgent, downloadGitHubTarball, emptyGoal, emptyPlan, encryptConfigSecrets, ensureDir, estimateRequestTokens, estimateRequestTokensCalibrated, estimateTextTokens, estimateToolDefTokens, estimateToolInputTokens, estimateToolResultTokens, everArtServer, expandGlob, extractRunEnv, filesystemServer, findCriticalPath, flagsToConfigPatch, formatContextWindowModeList, formatGoal, formatHumanPrompt, formatPlan, formatPlanTemplates, formatTodosList, getAgentDefinition, getCalibrationState, getContextWindowMode, getPlanTemplate, getTemplate, getTermSize, githubServer, goalFilePath, googleMapsServer, hashRequest, isAgentError, isConfigError, isContextWindowModeId, isFsError, isImageBlock, isInteractive, isPluginError, isSessionError, isStdinTTY, isStdoutTTY, isTextBlock, isThinkingBlock, isToolError, isToolResultBlock, isToolUseBlock, isValidMatrixKey, isWrongStackError, listContextWindowModes, listPlanTemplates, listTemplates, loadDirectorState, loadGoal, loadPlan, loadPlugins, loadProjectModes, loadTodosCheckpoint, loadUserModes, makeAgentSubagentRunner, makeAskTool, makeAssignTool, makeAutonomyPromptContributor, makeAwaitTasksTool, makeCollabDebugTool, makeContinueToNextIterationTool, makeDirectorSessionFactory, makeFleetEmitTool, makeFleetHealthTool, makeFleetSessionTool, makeFleetStatusTool, makeFleetUsageTool, makeLLMClassifier, makeRollUpTool, makeSpawnTool, makeTerminateTool, matchAny, matchGlob, matrixKeyKind, mergeModelsPayload, migratePlaintextSecrets, miniMaxVisionServer, normalizeToLf, onResize, parseContinueDirective, parseSkillRef, pendingBtwCount, phaseForRole, projectHash, recordActualUsage, removePlanItem, renderProgress, renderPrometheus, renderSpecAnalysis, renderTaskGraph, renderTaskList, repairToolUseAdjacency, resetCalibration, resolveAuditLevel, resolveContextWindowPolicy, resolveModelMatrix, resolveSessionLoggingConfig, resolveWstackPaths, rewriteConfigEncrypted, rosterSummaryFromConfigs, runConfigMigrations, runProviderWithRetry, safeParse, safeStringify, sanitizeJsonString, saveGoal, savePlan, saveTodosCheckpoint, scoreAgents, securitySlashCommand, sentinelServer, setBtwNote, setPlanItemStatus, setRawMode, slackServer, stableStringify, startMetricsServer, startOtlpMetricsExporter, startOtlpTraceExporter, stripAnsi, summarizeUsage, templateToMarkdown, toStyle, toWrongStackError, topologicalSort, unifiedDiff, unloadPlugins, validateAgainstSchema, wireMetricsToEvents, wrapAsState, writeErr, writeOut, zaiVisionServer };
+export { ACP_AGENTS, AGENTS_BY_PHASE, AGENT_CATALOG, AISpecBuilder, ALL_AGENT_DEFINITIONS, ALL_FLEET_AGENTS, ALL_SYNC_CATEGORIES, AUDIT_LOG_AGENT, Agent, AgentError, AnnotationsStore, AutoApprovePermissionPolicy, AutoCompactionMiddleware, AutoExecutor, AutoPhasePlanner, AutoPhaseRunner, AutonomousRunner, BUG_HUNTER_AGENT, BrainDecisionQueue, BudgetExceededError, CONTEXT_WINDOW_MODES, CORE_RECONSTRUCT_EVENTS, CheckpointManager, CloudSync, CollaborationBus, ConfigError, ConfigMigrationError, Container, Context, ConversationState, DEFAULT_AUTONOMY_CONFIG, DEFAULT_CONFIG_MIGRATIONS, DEFAULT_CONTEXT_CONFIG, DEFAULT_CONTEXT_WINDOW_MODE_ID, DEFAULT_DIRECTOR_PREAMBLE, DEFAULT_DISPATCH_ROLE, DEFAULT_MAX_ITERATIONS, DEFAULT_MODES, DEFAULT_RECOVERY_STRATEGIES, DEFAULT_SESSION_LOGGING_CONFIG, DEFAULT_SPEC_TEMPLATE, DEFAULT_SUBAGENT_BASELINE, DEFAULT_TOOLS_CONFIG, DefaultAttachmentStore, DefaultBrainArbiter, DefaultConfigLoader, DefaultConfigStore, DefaultErrorHandler, DefaultHealthRegistry, DefaultLogger, DefaultMemoryStore, DefaultModeStore, DefaultModelsRegistry, DefaultMultiAgentCoordinator, DefaultPathResolver, DefaultPermissionPolicy, DefaultPluginAPI, DefaultPromptStore, DefaultProviderRunner, DefaultRetryPolicy, DefaultSecretScrubber, DefaultSecretVault, DefaultSessionReader, DefaultSessionRewinder, DefaultSessionStore, DefaultSkillLoader, DefaultSystemPromptBuilder, DefaultTaskStore, DefaultTokenCounter, Director, DirectorStateCheckpoint, DoneConditionChecker, ERROR_CODES, EternalAutonomyEngine, EventBus, ExtensionRegistry, FLEET_ROSTER, FLEET_ROSTER_BUDGETS, FLEET_ROSTER_WITHACP, FleetBus, FleetCostCapError, FleetManager, FleetSpawnBudgetError, FleetUsageAggregator, FsError, GitignoreUpdater, HookRegistry, HookRunner, HumanEscalatingBrainArbiter, HybridCompactor, InMemoryAgentBridge, InMemoryBridgeTransport, InMemoryMetricsSink, InputBuilder, IntelligentCompactor, KERNEL_API_VERSION, LAYER_1_IDENTITY, LLMSelector, MATRIX_PHASE_KEYS, MAX_JOURNAL_ENTRIES, NULL_FLEET_BUS, NoopMetricsSink, NoopTracer, OTelTracer, ObservableBrainArbiter, PROMETHEUS_CONTENT_TYPE, ParallelEternalEngine, PhaseGraphBuilder, PhaseOrchestrator, PhaseStore, Pipeline, PluginError, ProviderError, ProviderRegistry, QueueStore, REFACTOR_PLANNER_AGENT, RecoveryLock, ReplayLogStore, ReplayProviderRunner, ReportGenerator, RunController, SECURITY_SCANNER_AGENT, SPEC_TEMPLATES, STANDARD_AUDIT_EVENTS, ScopedEventBus, SddParallelRun, SddTaskDecomposer, SecurityScanner, SecurityScannerOrchestrator, SelectiveCompactor, SessionAnalyzer, SessionError, SessionRecovery, SkillGenerator, SkillInstaller, SkillManifestStore, SlashCommandRegistry, SpecDrivenDev, SpecParser, SpecStore, SpecVersioning, SubagentBudget, TOKENS, TaskFlow, TaskGenerator, TaskGraphStore, TaskTracker, TechStackDetector, ToolAuditLog, ToolError, ToolExecutor, ToolRegistry, WorktreeManager, WrongStackError, addPlanItem, allServers, analyzeCriticalPath, appendJournal, applyRosterBudget, asBlocks, asText, assertSafePath, atomicWrite, attachAutoExtend, attachPlanCheckpoint, attachTodosCheckpoint, awsServer, blockServer, bootConfig, braveSearchServer, buildBtwBlock, buildChildEnv, buildGoalPreamble, buildOtlpMetricsRequest, buildOtlpTracesRequest, buildRecoveryStrategies, classifyFamily, clearPlan, collabInjectMiddleware, collabPauseMiddleware, color, compileGlob, compileUserRegex, completePartialObject, composeDirectorPrompt, composeSubagentPrompt, computeTaskProgress, consumeBtwNotes, context7Server, contextManagerTool, createAutoExecutor, createAutoPhaseFromTaskGraph, createContextManagerTool, createDefaultPipelines, createDelegateTool, createGitPlugin, createMcpControlTool, createMessage, createObservabilityPlugin, createPlanPlugin, createPromptsPlugin, createSecurityPlugin, createSecuritySlashCommand, createSessionEventBridge, createSkillsPlugin, createSyncPlugin, createToolOutputSerializer, decryptConfigSecrets, defaultGitignoreUpdater, defaultOrchestrator, defaultReportGenerator, defaultSecurityScanner, defaultSkillGenerator, defaultTechStackDetector, deriveTodosFromPlanItem, detectNewlineStyle, dispatchAgent, downloadGitHubTarball, emptyGoal, emptyPlan, encryptConfigSecrets, ensureDir, estimateRequestTokens, estimateRequestTokensCalibrated, estimateTextTokens, estimateToolDefTokens, estimateToolInputTokens, estimateToolResultTokens, everArtServer, expandGlob, extractRunEnv, filesystemServer, findCriticalPath, flagsToConfigPatch, formatContextWindowModeList, formatGoal, formatHumanPrompt, formatPlan, formatPlanTemplates, formatTodosList, getAgentDefinition, getCalibrationState, getContextWindowMode, getPlanTemplate, getTemplate, getTermSize, githubServer, goalFilePath, googleMapsServer, hashRequest, hookMatcherMatches, isAgentError, isConfigError, isContextWindowModeId, isFsError, isImageBlock, isInteractive, isPluginError, isSessionError, isStdinTTY, isStdoutTTY, isTextBlock, isThinkingBlock, isToolError, isToolResultBlock, isToolUseBlock, isValidMatrixKey, isWrongStackError, listContextWindowModes, listPlanTemplates, listTemplates, loadDirectorState, loadGoal, loadPlan, loadPlugins, loadProjectModes, loadTodosCheckpoint, loadUserModes, makeAgentSubagentRunner, makeAskTool, makeAssignTool, makeAutonomyPromptContributor, makeAwaitTasksTool, makeCollabDebugTool, makeContinueToNextIterationTool, makeDirectorSessionFactory, makeFleetEmitTool, makeFleetHealthTool, makeFleetSessionTool, makeFleetStatusTool, makeFleetUsageTool, makeLLMClassifier, makeRollUpTool, makeSpawnTool, makeTerminateTool, matchAny, matchGlob, matrixKeyKind, mergeCustomModelDefs, mergeModelsPayload, migratePlaintextSecrets, miniMaxVisionServer, normalizeToLf, onResize, parseContinueDirective, parseSkillRef, pendingBtwCount, phaseForRole, projectHash, recordActualUsage, removePlanItem, renderProgress, renderPrometheus, renderSpecAnalysis, renderTaskGraph, renderTaskList, repairToolUseAdjacency, resetCalibration, resolveAuditLevel, resolveContextWindowPolicy, resolveModelMatrix, resolveSessionLoggingConfig, resolveWstackPaths, rewriteConfigEncrypted, rosterSummaryFromConfigs, runConfigMigrations, runProviderWithRetry, runShellHook, safeParse, safeStringify, sanitizeJsonString, saveGoal, savePlan, saveTodosCheckpoint, scoreAgents, securitySlashCommand, sentinelServer, setBtwNote, setPlanItemStatus, setRawMode, slackServer, stableStringify, startMetricsServer, startOtlpMetricsExporter, startOtlpTraceExporter, stripAnsi, summarizeUsage, templateToMarkdown, toStyle, toWrongStackError, topologicalSort, unifiedDiff, unloadPlugins, validateAgainstSchema, wireMetricsToEvents, wrapAsState, writeErr, writeOut, zaiVisionServer };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map