@wrongstack/core 0.6.6 → 0.7.0

package/dist/index.js

@@ -106,6 +106,53 @@ var init_atomic_write = __esm({
 });
 
 // src/types/errors.ts
+var ERROR_CODES = {
+  // Provider
+  PROVIDER_RATE_LIMITED: "PROVIDER_RATE_LIMITED",
+  PROVIDER_AUTH_FAILED: "PROVIDER_AUTH_FAILED",
+  PROVIDER_OVERLOADED: "PROVIDER_OVERLOADED",
+  PROVIDER_INVALID_REQUEST: "PROVIDER_INVALID_REQUEST",
+  PROVIDER_SERVER_ERROR: "PROVIDER_SERVER_ERROR",
+  PROVIDER_NETWORK_ERROR: "PROVIDER_NETWORK_ERROR",
+  PROVIDER_CONTEXT_OVERFLOW: "PROVIDER_CONTEXT_OVERFLOW",
+  // Tool
+  TOOL_NOT_FOUND: "TOOL_NOT_FOUND",
+  TOOL_PERMISSION_DENIED: "TOOL_PERMISSION_DENIED",
+  TOOL_EXECUTION_FAILED: "TOOL_EXECUTION_FAILED",
+  TOOL_TIMEOUT: "TOOL_TIMEOUT",
+  TOOL_INPUT_INVALID: "TOOL_INPUT_INVALID",
+  // Config
+  CONFIG_INVALID: "CONFIG_INVALID",
+  CONFIG_NOT_FOUND: "CONFIG_NOT_FOUND",
+  CONFIG_PARSE_FAILED: "CONFIG_PARSE_FAILED",
+  CONFIG_MIGRATION_NEEDED: "CONFIG_MIGRATION_NEEDED",
+  // Plugin
+  PLUGIN_LOAD_FAILED: "PLUGIN_LOAD_FAILED",
+  PLUGIN_API_MISMATCH: "PLUGIN_API_MISMATCH",
+  PLUGIN_MISSING_DEPENDENCY: "PLUGIN_MISSING_DEPENDENCY",
+  // Agent
+  AGENT_ITERATION_LIMIT: "AGENT_ITERATION_LIMIT",
+  AGENT_CONTEXT_OVERFLOW: "AGENT_CONTEXT_OVERFLOW",
+  AGENT_ABORTED: "AGENT_ABORTED",
+  AGENT_RUN_FAILED: "AGENT_RUN_FAILED",
+  // Session
+  SESSION_NOT_FOUND: "SESSION_NOT_FOUND",
+  SESSION_CORRUPTED: "SESSION_CORRUPTED",
+  SESSION_WRITE_FAILED: "SESSION_WRITE_FAILED",
+  // Container / Registry
+  CONTAINER_TOKEN_ALREADY_BOUND: "CONTAINER_TOKEN_ALREADY_BOUND",
+  CONTAINER_TOKEN_NOT_BOUND: "CONTAINER_TOKEN_NOT_BOUND",
+  REGISTRY_DUPLICATE: "REGISTRY_DUPLICATE",
+  REGISTRY_NOT_FOUND: "REGISTRY_NOT_FOUND",
+  // File system
+  FS_READ_FAILED: "FS_READ_FAILED",
+  FS_WRITE_FAILED: "FS_WRITE_FAILED",
+  FS_MKDIR_FAILED: "FS_MKDIR_FAILED",
+  FS_DELETE_FAILED: "FS_DELETE_FAILED",
+  FS_ATOMIC_WRITE_FAILED: "FS_ATOMIC_WRITE_FAILED",
+  // General
+  UNKNOWN: "UNKNOWN"
+};
 var WrongStackError = class extends Error {
   code;
   subsystem;
@@ -171,7 +218,7 @@ var PluginError = class extends WrongStackError {
       code: opts.code,
       subsystem: "plugin",
       severity: "error",
-      recoverable: opts.code === "PLUGIN_MISSING_DEPENDENCY",
+      recoverable: opts.code === ERROR_CODES.PLUGIN_MISSING_DEPENDENCY,
       context: { plugin: opts.pluginName, ...opts.context },
       cause: opts.cause
     });
@@ -185,20 +232,20 @@ var AgentError = class extends WrongStackError {
       message: opts.message,
       code: opts.code,
       subsystem: "agent",
-      severity: opts.code === "AGENT_ABORTED" ? "warning" : "error",
-      recoverable: opts.recoverable ?? opts.code === "AGENT_ITERATION_LIMIT",
+      severity: opts.code === ERROR_CODES.AGENT_ABORTED ? "warning" : "error",
+      recoverable: opts.recoverable ?? opts.code === ERROR_CODES.AGENT_ITERATION_LIMIT,
       context: opts.context,
       cause: opts.cause
     });
     this.name = "AgentError";
   }
 };
-function toWrongStackError(err, code = "AGENT_RUN_FAILED") {
+function toWrongStackError(err, code = ERROR_CODES.AGENT_RUN_FAILED) {
   if (err instanceof WrongStackError) return err;
   const message = err instanceof Error ? err.message : String(err);
   return new AgentError({
     message,
-    code: code === "UNKNOWN" ? "AGENT_RUN_FAILED" : code,
+    code: code === "UNKNOWN" ? ERROR_CODES.AGENT_RUN_FAILED : code,
     cause: err
   });
 }
@@ -209,8 +256,8 @@ var SessionError = class extends WrongStackError {
       message: opts.message,
       code: opts.code,
       subsystem: "session",
-      severity: opts.code === "SESSION_WRITE_FAILED" ? "error" : "warning",
-      recoverable: opts.code !== "SESSION_CORRUPTED",
+      severity: opts.code === ERROR_CODES.SESSION_WRITE_FAILED ? "error" : "warning",
+      recoverable: opts.code !== ERROR_CODES.SESSION_CORRUPTED,
       context: { sessionId: opts.sessionId, ...opts.context },
       cause: opts.cause
     });
@@ -218,6 +265,22 @@ var SessionError = class extends WrongStackError {
     this.sessionId = opts.sessionId;
   }
 };
+var FsError = class extends WrongStackError {
+  path;
+  constructor(opts) {
+    super({
+      message: opts.message,
+      code: opts.code,
+      subsystem: "fs",
+      severity: "error",
+      recoverable: opts.code !== ERROR_CODES.FS_READ_FAILED,
+      context: { path: opts.path, ...opts.context },
+      cause: opts.cause
+    });
+    this.name = "FsError";
+    this.path = opts.path;
+  }
+};
 function isWrongStackError(err) {
   return err instanceof WrongStackError;
 }
@@ -236,6 +299,9 @@ function isSessionError(err) {
 function isAgentError(err) {
   return err instanceof AgentError;
 }
+function isFsError(err) {
+  return err instanceof FsError;
+}
 
 // src/kernel/container.ts
 var Container = class {
@@ -244,7 +310,7 @@ var Container = class {
     if (this.entries.has(token)) {
       throw new WrongStackError({
         message: `Container: token "${token.description ?? "unknown"}" already bound`,
-        code: "CONTAINER_TOKEN_ALREADY_BOUND",
+        code: ERROR_CODES.CONTAINER_TOKEN_ALREADY_BOUND,
         subsystem: "container",
         context: { token: token.description }
       });
@@ -261,7 +327,7 @@ var Container = class {
     if (!existing) {
       throw new WrongStackError({
         message: `Container: cannot override "${token.description ?? "unknown"}" \u2014 not bound`,
-        code: "CONTAINER_TOKEN_NOT_BOUND",
+        code: ERROR_CODES.CONTAINER_TOKEN_NOT_BOUND,
         subsystem: "container",
         context: { token: token.description }
       });
@@ -278,7 +344,7 @@ var Container = class {
     if (!existing) {
       throw new WrongStackError({
         message: `Container: cannot decorate "${token.description ?? "unknown"}" \u2014 not bound`,
-        code: "CONTAINER_TOKEN_NOT_BOUND",
+        code: ERROR_CODES.CONTAINER_TOKEN_NOT_BOUND,
         subsystem: "container",
         context: { token: token.description }
       });
@@ -292,7 +358,7 @@ var Container = class {
     if (!entry) {
       throw new WrongStackError({
         message: `Container: token "${token.description ?? "unknown"}" not bound`,
-        code: "CONTAINER_TOKEN_NOT_BOUND",
+        code: ERROR_CODES.CONTAINER_TOKEN_NOT_BOUND,
         subsystem: "container",
         context: { token: token.description }
       });
@@ -895,16 +961,30 @@ function truncate(s, n) {
   return s.length <= n ? s : `${s.slice(0, n - 1)}\u2026`;
 }
 function providerStatusToCode(status, type) {
-  if (status === 0) return "PROVIDER_NETWORK_ERROR";
-  if (type === "rate_limit_error" || status === 429) return "PROVIDER_RATE_LIMITED";
-  if (type === "authentication_error" || status === 401) return "PROVIDER_AUTH_FAILED";
-  if (type === "overloaded_error" || status === 529) return "PROVIDER_OVERLOADED";
-  if (type === "invalid_request_error" || status === 400) return "PROVIDER_INVALID_REQUEST";
-  if (status === 408) return "PROVIDER_NETWORK_ERROR";
-  if (status >= 500) return "PROVIDER_SERVER_ERROR";
-  return "PROVIDER_INVALID_REQUEST";
+  if (status === 0) return ERROR_CODES.PROVIDER_NETWORK_ERROR;
+  if (type === "rate_limit_error" || status === 429) return ERROR_CODES.PROVIDER_RATE_LIMITED;
+  if (type === "authentication_error" || status === 401) return ERROR_CODES.PROVIDER_AUTH_FAILED;
+  if (type === "overloaded_error" || status === 529) return ERROR_CODES.PROVIDER_OVERLOADED;
+  if (type === "invalid_request_error" || status === 400) return ERROR_CODES.PROVIDER_INVALID_REQUEST;
+  if (status === 408) return ERROR_CODES.PROVIDER_NETWORK_ERROR;
+  if (status >= 500) return ERROR_CODES.PROVIDER_SERVER_ERROR;
+  return ERROR_CODES.PROVIDER_INVALID_REQUEST;
 }
 
+// src/types/default-config.ts
+var DEFAULT_TOOLS_CONFIG = Object.freeze({
+  defaultExecutionStrategy: "smart",
+  maxIterations: 100,
+  iterationTimeoutMs: 3e5,
+  sessionTimeoutMs: 18e5,
+  perIterationOutputCapBytes: 1e5,
+  autoExtendLimit: true
+});
+var DEFAULT_CONTEXT_CONFIG = Object.freeze({
+  preserveK: 10,
+  eliseThreshold: 2e3
+});
+
 // src/types/secret-vault.ts
 var ENCRYPTED_PREFIX = "enc:v1:";
 
@@ -1736,9 +1816,11 @@ var DefaultPathResolver = class {
   }
 };
 
+// src/execution/regex-patterns.ts
+var NETWORK_ERR_RE = /ECONN|ETIMEDOUT|ETIME|ENOTFOUND|EAI_AGAIN|fetch failed/i;
+
 // src/execution/error-handler.ts
 var CONTEXT_OVERFLOW_RE = /context|too long|tokens/i;
-var NETWORK_ERR_RE = /ECONN|ETIMEDOUT|ETIME|ENOTFOUND|EAI_AGAIN|fetch failed/i;
 function buildRecoveryStrategies(opts) {
   return [
     {
@@ -1845,15 +1927,14 @@ var DefaultErrorHandler = class {
 };
 
 // src/execution/retry-policy.ts
-var DefaultRetryPolicy = class _DefaultRetryPolicy {
-  static NETWORK_ERR_RE = /ECONN|ETIMEDOUT|ETIME|ENOTFOUND|EAI_AGAIN|fetch failed/i;
+var DefaultRetryPolicy = class {
   shouldRetry(err, attempt) {
     if (err instanceof ProviderError) {
       if (!err.retryable) return false;
       return attempt < this.maxAttempts(err);
     }
     const msg = err.message ?? "";
-    const isNetwork = _DefaultRetryPolicy.NETWORK_ERR_RE.test(msg);
+    const isNetwork = NETWORK_ERR_RE.test(msg);
     if (isNetwork) return attempt < 2;
     return false;
   }
@@ -2558,10 +2639,8 @@ var InMemoryAgentBridge = class {
         this.pendingRequests.delete(correlationId);
         reject(new Error(`Request ${correlationId} timed out after ${timeout}ms`));
       }, timeout);
-      if (this.stopped) {
+      if (!this.inflightGuards.has(correlationId)) {
         clearTimeout(timer);
-        this.inflightGuards.delete(correlationId);
-        this.pendingRequests.delete(correlationId);
         reject(new Error("Bridge stopped"));
         return;
       }
@@ -3924,8 +4003,16 @@ var DefaultSessionStore = class {
     }
   }
   async resume(id) {
-    const data = await this.load(id);
     const file = path6.join(this.dir, `${id}.jsonl`);
+    try {
+      await fsp2.access(file, fsp2.constants.R_OK);
+    } catch {
+      throw new Error(
+        `Session "${id}" not found \u2014 the session file does not exist or was deleted.`,
+        { cause: new Error("ENOENT") }
+      );
+    }
+    const data = await this.load(id);
     let handle;
     try {
       handle = await fsp2.open(file, "a", 384);
@@ -4822,16 +4909,16 @@ var BEHAVIOR_DEFAULTS = {
     softThreshold: 0.75,
     hardThreshold: 0.9,
     autoCompact: true,
-    preserveK: 10,
-    eliseThreshold: 2e3
+    preserveK: DEFAULT_CONTEXT_CONFIG.preserveK,
+    eliseThreshold: DEFAULT_CONTEXT_CONFIG.eliseThreshold
   },
   tools: {
-    defaultExecutionStrategy: "smart",
-    maxIterations: 100,
-    iterationTimeoutMs: 3e5,
-    sessionTimeoutMs: 18e5,
-    perIterationOutputCapBytes: 1e5,
-    autoExtendLimit: true
+    defaultExecutionStrategy: DEFAULT_TOOLS_CONFIG.defaultExecutionStrategy,
+    maxIterations: DEFAULT_TOOLS_CONFIG.maxIterations,
+    iterationTimeoutMs: DEFAULT_TOOLS_CONFIG.iterationTimeoutMs,
+    sessionTimeoutMs: DEFAULT_TOOLS_CONFIG.sessionTimeoutMs,
+    perIterationOutputCapBytes: DEFAULT_TOOLS_CONFIG.perIterationOutputCapBytes,
+    autoExtendLimit: DEFAULT_TOOLS_CONFIG.autoExtendLimit
   },
   log: { level: "info" },
   features: {
@@ -5745,7 +5832,7 @@ var DirectorStateCheckpoint = class {
       this.timer = null;
     }
     await this.persist();
-    if (this.rewriteRequested) {
+    while (this.rewriteRequested) {
       this.rewriteRequested = false;
       await this.persist();
     }
@@ -7175,7 +7262,7 @@ var AutoCompactionMiddleware = class {
       if (fatal) {
         throw new AgentError({
           message: `Auto-compaction failed at ${pressure.level} threshold`,
-          code: "AGENT_CONTEXT_OVERFLOW",
+          code: ERROR_CODES.AGENT_CONTEXT_OVERFLOW,
           recoverable: true,
           context: {
             level: pressure.level,
@@ -7378,7 +7465,16 @@ async function loadGoal(filePath) {
   }
 }
 async function saveGoal(filePath, goal) {
-  await atomicWrite(filePath, JSON.stringify(goal, null, 2), { mode: 384 });
+  try {
+    await atomicWrite(filePath, JSON.stringify(goal, null, 2), { mode: 384 });
+  } catch (err) {
+    throw new FsError({
+      message: err instanceof Error ? err.message : String(err),
+      code: ERROR_CODES.FS_ATOMIC_WRITE_FAILED,
+      path: filePath,
+      cause: err
+    });
+  }
 }
 function emptyGoal(goal) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -7454,7 +7550,8 @@ function formatGoal(goal, journalLimit = 10) {
 // src/execution/eternal-autonomy.ts
 var execFileP = promisify(execFile);
 var BRAINSTORM_DONE = /* @__PURE__ */ Symbol("brainstorm-done");
-var GOAL_COMPLETE_MARKER = /^\s*\[goal[_\s-]?complete\]\s*$/im;
+var GOAL_COMPLETE_MARKER = /^\s*\[goal[_\s-]*complete\]\s*$/im;
+var GOAL_CLEAR_MARKER = /^\s*\[\/?goal\s*clear\]\s*$/im;
 var EternalAutonomyEngine = class {
   constructor(opts) {
     this.opts = opts;
@@ -7592,7 +7689,7 @@ var EternalAutonomyEngine = class {
           // Cap the inner loop so a runaway agent.run can't burn through
           // the iteration timeout — the engine's own outer loop is the
           // long-running thing, each tick should be bounded.
-          maxIterations: this.opts.iterationMaxAgentSteps ?? 50
+          maxIterations: this.opts.iterationMaxAgentSteps ?? 500
         }
       );
       if (result.status === "aborted") {
@@ -7680,7 +7777,12 @@ var EternalAutonomyEngine = class {
     emit({ phase: "sleep", ms: cycleGapMs });
     await sleep(cycleGapMs);
     if (GOAL_COMPLETE_MARKER.test(finalText)) {
-      await this.markGoalCompleted(action, finalText);
+      await this.clearGoalManually(finalText);
+      this.stopRequested = true;
+      return true;
+    }
+    if (GOAL_CLEAR_MARKER.test(finalText)) {
+      await this.clearGoalManually(finalText);
       this.stopRequested = true;
       return true;
     }
@@ -7980,6 +8082,30 @@ ${recentJournal}` : "No prior iterations.",
     });
     await saveGoal(this.goalPath, withEntry);
   }
+  /**
+   * Manually clear the goal — equivalent to `/goal clear` typed by the user.
+   * Sets goalState to `abandoned`, removes the goal file, and fires
+   * `onEternalStop` so the REPL returns to normal mode.
+   */
+  async clearGoalManually(note) {
+    const current = await loadGoal(this.goalPath);
+    if (current) {
+      const abandoned = { ...current, goalState: "abandoned" };
+      await saveGoal(this.goalPath, abandoned);
+    }
+    try {
+      const { unlink: unlink10 } = await import('fs/promises');
+      await unlink10(this.goalPath);
+    } catch {
+    }
+    this.opts.onEternalStop?.();
+    void this.appendIterationEntry({
+      source: "manual",
+      task: "goal cleared",
+      status: "success",
+      note: note.slice(0, 240)
+    });
+  }
   async appendFailure(task, note) {
     await this.appendIterationEntry({ source: "manual", task, status: "failure", note });
   }
@@ -8047,10 +8173,10 @@ var SubagentBudget = class _SubagentBudget {
    * or hung listener (Director not built / event filter detached mid-run)
    * leaves the budget over-limit and never enforces anything, since
    * `checkLimit` returns synchronously via `void this.checkLimitAsync`.
-   * Hardcoded for now — most fleets set their own per-task timeout that
-   * dwarfs this anyway. 30 s matches the existing event-emit timeoutMs.
+   * Raised from 30s to 60s to give subagents more headroom before
+   * the threshold negotiation times out and triggers a hard stop.
    */
-  static DECISION_TIMEOUT_MS = 3e4;
+  static DECISION_TIMEOUT_MS = 6e4;
   /**
    * Injected by the runner when wiring the budget to its EventBus.
    * Used by `checkLimitAsync` to emit `budget.threshold_reached` events.
@@ -8581,13 +8707,19 @@ var FLEET_ROSTER = {
   "security-scanner": SECURITY_SCANNER_AGENT
 };
 var FLEET_ROSTER_BUDGETS = {
-  "audit-log": { timeoutMs: 8 * 60 * 1e3, maxIterations: 150, maxToolCalls: 500 },
-  "bug-hunter": { timeoutMs: 15 * 60 * 1e3, maxIterations: 200, maxToolCalls: 600 },
-  "refactor-planner": { timeoutMs: 12 * 60 * 1e3, maxIterations: 180, maxToolCalls: 550 },
-  "security-scanner": { timeoutMs: 15 * 60 * 1e3, maxIterations: 200, maxToolCalls: 600 }
+  "audit-log": { timeoutMs: 7.5 * 60 * 60 * 1e3, maxIterations: 5e3, maxToolCalls: 15e3 },
+  "bug-hunter": { timeoutMs: 10 * 60 * 60 * 1e3, maxIterations: 8e3, maxToolCalls: 2e4 },
+  "refactor-planner": { timeoutMs: 7.5 * 60 * 60 * 1e3, maxIterations: 6e3, maxToolCalls: 18e3 },
+  "security-scanner": { timeoutMs: 10 * 60 * 60 * 1e3, maxIterations: 8e3, maxToolCalls: 2e4 }
+};
+var GENERIC_SUBAGENT_BUDGET = {
+  timeoutMs: 3 * 60 * 60 * 1e3,
+  maxIterations: 5e3,
+  maxToolCalls: 15e3
 };
 function applyRosterBudget(cfg) {
-  const defaultBudget = FLEET_ROSTER_BUDGETS[cfg.role ?? ""];
+  const roleBudget = cfg.role ? FLEET_ROSTER_BUDGETS[cfg.role] : void 0;
+  const defaultBudget = roleBudget ?? (cfg.name ? GENERIC_SUBAGENT_BUDGET : void 0);
   if (!defaultBudget) return cfg;
   return {
     ...cfg,
@@ -8659,7 +8791,7 @@ var DefaultMultiAgentCoordinator = class extends EventEmitter {
       // hasParentBridge() — the type now reflects this.
       parentBridge: null,
       doneCondition: this.config.doneCondition,
-      maxConcurrent: this.config.maxConcurrent ?? 4
+      maxConcurrent: this.config.maxConcurrent ?? 16
     };
     this.subagents.set(id, {
       config: { ...subagent, id },
@@ -8705,6 +8837,30 @@ var DefaultMultiAgentCoordinator = class extends EventEmitter {
     this.drainPendingAsAborted("Coordinator stopAll() drained the pending queue");
     await Promise.allSettled([...this.subagents.keys()].map((id) => this.stop(id)));
   }
+  async remove(subagentId) {
+    await this.stop(subagentId);
+    this.subagents.delete(subagentId);
+  }
+  /**
+   * Get current coordinator stats for monitoring/debugging.
+   */
+  getStats() {
+    let running = 0, idle = 0, stopped = 0;
+    for (const [, entry] of this.subagents) {
+      if (entry.status === "running") running++;
+      else if (entry.status === "idle") idle++;
+      else stopped++;
+    }
+    return {
+      total: this.subagents.size,
+      running,
+      idle,
+      stopped,
+      inFlight: this.inFlight,
+      pending: this.pendingTasks.length,
+      completed: this.completedResults.length
+    };
+  }
   getStatus() {
     return {
       coordinatorId: this.coordinatorId,
@@ -8786,7 +8942,7 @@ var DefaultMultiAgentCoordinator = class extends EventEmitter {
     }
   }
   canDispatch() {
-    const max = this.config.maxConcurrent ?? 4;
+    const max = this.config.maxConcurrent ?? 16;
     return this.inFlight < max && this.pendingTasks.length > 0;
   }
   takeNextDispatchableTask() {
@@ -8880,13 +9036,18 @@ var DefaultMultiAgentCoordinator = class extends EventEmitter {
     task.subagentId = subagentId;
     subagent.context.tasks.push(task);
     this.emit("task.assigned", { task, subagentId });
+    const rawMaxIterations = subagent.config.maxIterations;
+    const rawMaxToolCalls = subagent.config.maxToolCalls;
+    const rawMaxTokens = subagent.config.maxTokens;
+    const rawMaxCostUsd = subagent.config.maxCostUsd;
+    const rawTimeoutMs = subagent.config.timeoutMs;
     const configWithRosterDefaults = applyRosterBudget(subagent.config);
     const budget = new SubagentBudget({
-      maxIterations: configWithRosterDefaults.maxIterations ?? this.config.defaultBudget?.maxIterations,
-      maxToolCalls: task.maxToolCalls ?? configWithRosterDefaults.maxToolCalls ?? this.config.defaultBudget?.maxToolCalls,
-      maxTokens: configWithRosterDefaults.maxTokens ?? this.config.defaultBudget?.maxTokens,
-      maxCostUsd: configWithRosterDefaults.maxCostUsd ?? this.config.defaultBudget?.maxCostUsd,
-      timeoutMs: task.timeoutMs ?? configWithRosterDefaults.timeoutMs ?? this.config.defaultBudget?.timeoutMs
+      maxIterations: rawMaxIterations ?? this.config.defaultBudget?.maxIterations ?? configWithRosterDefaults.maxIterations,
+      maxToolCalls: rawMaxToolCalls ?? this.config.defaultBudget?.maxToolCalls ?? configWithRosterDefaults.maxToolCalls,
+      maxTokens: rawMaxTokens ?? this.config.defaultBudget?.maxTokens ?? configWithRosterDefaults.maxTokens,
+      maxCostUsd: rawMaxCostUsd ?? this.config.defaultBudget?.maxCostUsd ?? configWithRosterDefaults.maxCostUsd,
+      timeoutMs: rawTimeoutMs ?? this.config.defaultBudget?.timeoutMs ?? configWithRosterDefaults.timeoutMs
     });
     subagent.activeBudget = budget;
     if (!this.runner) {
@@ -8957,7 +9118,7 @@ var DefaultMultiAgentCoordinator = class extends EventEmitter {
                   kind: "timeout",
                   used: elapsed,
                   limit,
-                  timeoutMs: 3e4,
+                  timeoutMs: 6e4,
                   extend: (extra) => resolveDecision({ extend: extra }),
                   deny: () => resolveDecision("stop")
                 });
@@ -9167,6 +9328,12 @@ var ParallelEternalEngine = class {
   get currentState() {
     return this.state;
   }
+  /**
+   * Get the underlying coordinator for stats/monitoring.
+   */
+  getCoordinator() {
+    return this.coordinator;
+  }
   stop() {
     this.stopRequested = true;
     void this.persistState("stopped").catch(() => {
@@ -9303,8 +9470,8 @@ Task: ${task}
           await coordinator.spawn({
             id: subagentId,
             name: `slot-${subagentId.slice(-6)}`,
-            maxIterations: 50,
-            maxToolCalls: 200,
+            // Let the coordinator apply its default budget (from roster or generic).
+            // Hardcoding low limits here defeats the x10 budget improvement.
             timeoutMs: this.timeoutMs
           });
           subagentIds.push(subagentId);
@@ -9321,7 +9488,7 @@ Task: ${task}
     let results = [];
     try {
       const ctrl = new AbortController();
-      const timer = setTimeout(() => ctrl.abort(), this.timeoutMs + 6e4);
+      const timer = setTimeout(() => ctrl.abort(), Math.max(this.timeoutMs * 2, 72e5));
       try {
         results = await coordinator.awaitTasks(taskIds);
       } finally {
@@ -10387,7 +10554,12 @@ var Director = class {
         }
       }
     }
-    const result = await this.coordinator.spawn(config);
+    let result;
+    try {
+      result = await this.coordinator.spawn(config);
+    } catch (err) {
+      throw err;
+    }
     if (this.fleetManager) {
       this.fleetManager.recordSpawn(result.subagentId, config, priceLookup);
     } else {
@@ -10655,6 +10827,9 @@ var Director = class {
   async terminateAll() {
     await this.coordinator.stopAll();
   }
+  async remove(subagentId) {
+    await this.coordinator.remove(subagentId);
+  }
   status() {
     return this.coordinator.getStatus();
   }
@@ -10835,7 +11010,7 @@ var Director = class {
   }
 };
 function createDelegateTool(opts) {
-  const defaultTimeoutMs = opts.defaultTimeoutMs ?? 4 * 60 * 60 * 1e3;
+  const defaultTimeoutMs = opts.defaultTimeoutMs ?? 30 * 60 * 1e3;
   const rosterIds = opts.roster ? Object.keys(opts.roster) : [];
   const inputSchema = {
     type: "object",
@@ -10851,7 +11026,7 @@ function createDelegateTool(opts) {
       },
       name: {
         type: "string",
-        description: "Display name for the subagent when not using a roster role. Required when `role` is omitted."
+        description: "Display name for free-form subagents (not using a roster role). The subagent gets a large default budget (3h, 5000 iter, 15000 tool calls). Required when `role` is omitted."
       },
       provider: {
         type: "string",
@@ -10882,8 +11057,8 @@ function createDelegateTool(opts) {
   };
   return {
     name: "delegate",
-    description: "Hand a discrete piece of work to a dedicated subagent and wait for its result. The subagent has its own context, its own LLM call, and its own budget \u2014 use this when a task is self-contained, would otherwise blow up your context, or benefits from a specialized role (bug-hunter, security-scanner, refactor-planner, audit-log). YOU decide how big the budget is: pass `timeoutMs`, `maxIterations`, and `maxToolCalls` sized to the actual work. There is no hidden cap forcing a 3-minute / 80-iteration limit \u2014 if a monorepo audit needs 2 hours and 500 tool calls, ask for that. Call multiple delegates in parallel through the provider's parallel-tool-call surface to fan work out across roles.",
-    usageHint: "Set `task` to a complete instruction. Either pick `role` from the roster or pass `name` + `provider` + `model`. For non-trivial work, also pass `timeoutMs` (the wall-clock budget you actually need), `maxIterations`, and `maxToolCalls` \u2014 defaults are intentionally generous (4 hours) but the right values depend on scope. Returns the subagent's `TaskResult` \u2014 including the textual `result`, iteration count, tool count, and duration. Auto-promotes the host into director mode on first call.",
+    description: "Hand a discrete piece of work to a dedicated subagent and wait for its result. The subagent has its own context, its own LLM call, and its own budget \u2014 use this when a task is self-contained, would otherwise blow up your context, or benefits from a specialized role (bug-hunter, security-scanner, refactor-planner, audit-log). For free-form coding tasks (not tied to a pre-defined role), pass `name` + `task` \u2014 the subagent runs as a general-purpose coding agent with a large default budget. YOU decide how big the budget is: pass `timeoutMs`, `maxIterations`, and `maxToolCalls` sized to the actual work. There is no hidden cap forcing a 3-minute / 80-iteration limit \u2014 if a monorepo audit needs 2 hours and 500 tool calls, ask for that. Call multiple delegates in parallel through the provider's parallel-tool-call surface to fan work out across roles.",
+    usageHint: "Set `task` to a complete instruction. Either pick `role` from the roster (audit-log, bug-hunter, refactor-planner, security-scanner) or pass `name` to run a free-form coding agent. For non-trivial work, also pass `timeoutMs`, `maxIterations`, and `maxToolCalls`. Returns the subagent's `TaskResult` \u2014 including the textual `result`, iteration count, tool count, and duration. Auto-promotes the host into director mode on first call.",
     permission: "auto",
     mutating: false,
     inputSchema,
@@ -10931,6 +11106,7 @@ function createDelegateTool(opts) {
             model: i.model,
             systemPromptOverride: i.systemPromptOverride
           };
+          cfg = applyRosterBudget({ ...cfg, name: i.name });
         }
         if (typeof i.maxIterations === "number" && i.maxIterations > 0) {
           cfg.maxIterations = i.maxIterations;
@@ -10938,7 +11114,7 @@ function createDelegateTool(opts) {
         if (typeof i.maxToolCalls === "number" && i.maxToolCalls > 0) {
           cfg.maxToolCalls = i.maxToolCalls;
         }
-        const SUBAGENT_TIMEOUT_BUFFER_MS = opts.subagentTimeoutBufferMs ?? 3e4;
+        const SUBAGENT_TIMEOUT_BUFFER_MS = opts.subagentTimeoutBufferMs ?? 6e4;
         const desiredSubTimeout = Math.max(3e4, timeoutMs - SUBAGENT_TIMEOUT_BUFFER_MS);
         if (!cfg.timeoutMs || cfg.timeoutMs > desiredSubTimeout) {
           cfg.timeoutMs = desiredSubTimeout;
@@ -10975,6 +11151,7 @@ function createDelegateTool(opts) {
         const errorKind = result.error?.kind;
         const retryable = result.error?.retryable;
         const backoffMs = result.error?.backoffMs;
+        const summary = buildDelegateSummary(i.role, result);
         return {
           ok: result.status === "success",
           status: result.status,
@@ -10990,7 +11167,10 @@ function createDelegateTool(opts) {
           toolCalls: result.toolCalls,
           durationMs: result.durationMs,
           ...partial ? { partial } : {},
-          ...hintForKind(errorKind, retryable, backoffMs, partial) ? { hint: hintForKind(errorKind, retryable, backoffMs, partial) } : {}
+          ...hintForKind(errorKind, retryable, backoffMs, partial) ? { hint: hintForKind(errorKind, retryable, backoffMs, partial) } : {},
+          // Summary is included so callers (TUI, CLI renderer) can surface
+          // it as a chat history line — the LLM also sees it for continuity.
+          summary
         };
       } catch (err) {
         return {
@@ -11003,10 +11183,11 @@ function createDelegateTool(opts) {
   };
 }
 function instantiateRosterConfig2(role, base) {
+  const withBudget = applyRosterBudget({ ...base, role });
   return {
-    ...base,
-    // Roster entries are templates. Give each spawn a fresh id so
-    // parallel or repeated delegates can use the same role safely.
+    ...withBudget,
+    // Give each spawn a fresh id so parallel or repeated delegates
+    // can use the same role safely.
     id: `${role}-${randomUUID().slice(0, 8)}`
   };
 }
@@ -11066,6 +11247,18 @@ ${partial.lastAssistantText}`;
       return retryable ? "Failure classified as retryable. Try again with the same input." : void 0;
   }
 }
+function buildDelegateSummary(role, result) {
+  const roleLabel = role ?? "subagent";
+  const ms = result.durationMs;
+  const duration = ms < 6e4 ? `${Math.round(ms / 1e3)}s` : ms < 36e5 ? `${Math.round(ms / 6e4)}m` : `${(ms / 36e5).toFixed(1)}h`;
+  if (result.status === "success") {
+    const preview = typeof result.result === "string" ? result.result.trim().slice(0, 120).replace(/\n+/g, " ") : null;
+    const tail = preview ? ` \u2014 ${preview}` : "";
+    return `[${roleLabel}] done in ${duration} (${result.iterations} iter, ${result.toolCalls} tools)${tail}`;
+  }
+  const errLabel = result.error?.kind ?? result.status;
+  return `[${roleLabel}] ${result.status} after ${duration} (${result.iterations} iter, ${result.toolCalls} tools) \u2014 ${errLabel}`;
+}
 async function readSubagentPartial(opts, subagentId) {
   if (!opts.sessionsRoot) return void 0;
   const candidates = [];
@@ -11106,6 +11299,7 @@ async function readSubagentPartial(opts, subagentId) {
           }
         }
       } catch {
+        continue;
       }
     }
     return {
@@ -16363,7 +16557,6 @@ var defaultGitignoreUpdater = new GitignoreUpdater();
 
 // src/security-scanner/orchestrator.ts
 init_atomic_write();
-var NETWORK_ERR_RE2 = /ECONN|ETIMEDOUT|ETIME|ENOTFOUND|EAI_AGAIN|fetch failed/i;
 var SecurityScannerOrchestrator = class {
   constructor(retryPolicy, errorHandler) {
     this.retryPolicy = retryPolicy;
@@ -16386,7 +16579,7 @@ var SecurityScannerOrchestrator = class {
       const isProviderErr = err instanceof ProviderError;
       const policy = this.retryPolicy;
       const errAsErr = isProviderErr ? err : err instanceof Error ? err : new Error(String(err));
-      if (!policy || !isProviderErr && !NETWORK_ERR_RE2.test(errAsErr.message)) {
+      if (!policy || !isProviderErr && !NETWORK_ERR_RE.test(errAsErr.message)) {
         throw err;
       }
       const canRetry = policy.shouldRetry(errAsErr, attempt);
@@ -17583,7 +17776,7 @@ var ExtensionRegistry = class {
     if (this.extensions.some((e) => e.name === ext.name)) {
       throw new WrongStackError({
         message: `Extension "${ext.name}" already registered`,
-        code: "REGISTRY_DUPLICATE",
+        code: ERROR_CODES.REGISTRY_DUPLICATE,
         subsystem: "container",
         context: { extension: ext.name }
       });
@@ -17987,10 +18180,15 @@ var Agent = class {
     });
     let finalText = "";
     let iterations = 0;
+    const delegateSummaries = [];
     let effectiveLimit = opts.maxIterations ?? this.maxIterations;
     const hasHardLimit = effectiveLimit > 0 && Number.isFinite(effectiveLimit);
     let recoveryRetries = 0;
     const autonomousContinue = opts.autonomousContinue ?? this.autonomousContinue;
+    const onSubagentDone = ({ summary, ok }) => {
+      delegateSummaries.push({ summary, ok });
+    };
+    const offSubagentDone = this.events.on("subagent.done", onSubagentDone);
     const diRunner = this.container.has(TOKENS.ProviderRunner) ? this.container.resolve(TOKENS.ProviderRunner) : null;
     const baseRunner = diRunner ? (ctx, req) => diRunner.run({
       provider: ctx.provider,
@@ -18012,116 +18210,122 @@ var Agent = class {
       tracer: this.tracer
     });
     const customRunner = this.extensions.wrapProviderRunner(baseRunner);
-    for (let i = 0; ; i++) {
-      iterations = i + 1;
-      if (controller.signal.aborted) {
-        return { status: "aborted", iterations };
-      }
-      if (autonomousContinue) {
-        consumeAutonomousContinue(this.ctx);
-      }
-      const limitCheck = await this.checkIterationLimit(
-        i,
-        effectiveLimit,
-        hasHardLimit,
-        iterations
-      );
-      effectiveLimit = limitCheck.limit;
-      if (limitCheck.exit) {
-        return { ...limitCheck.exit, finalText };
-      }
-      await this.extensions.runBeforeIteration(this.ctx, i);
-      this.events.emit("iteration.started", { ctx: this.ctx, index: i });
-      const req = await this.buildAndRunRequestPipeline(opts);
-      let res;
-      try {
-        res = await customRunner(this.ctx, req);
-        recoveryRetries = 0;
-      } catch (err) {
+    try {
+      for (let i = 0; ; i++) {
+        iterations = i + 1;
         if (controller.signal.aborted) {
-          this.events.emit("error", { err: toError(err), phase: "provider" });
-          return { status: "aborted", iterations, error: toWrongStackError(err, "AGENT_ABORTED") };
+          return { status: "aborted", iterations };
+        }
+        if (autonomousContinue) {
+          consumeAutonomousContinue(this.ctx);
+        }
+        const limitCheck = await this.checkIterationLimit(
+          i,
+          effectiveLimit,
+          hasHardLimit,
+          iterations,
+          delegateSummaries
+        );
+        effectiveLimit = limitCheck.limit;
+        if (limitCheck.exit) {
+          return { ...limitCheck.exit, finalText };
         }
-        const extDecision = await this.extensions.runOnError(this.ctx, err, "provider", i);
-        if (extDecision) {
-          if (extDecision.action === "fail") {
+        await this.extensions.runBeforeIteration(this.ctx, i);
+        this.events.emit("iteration.started", { ctx: this.ctx, index: i });
+        const req = await this.buildAndRunRequestPipeline(opts);
+        let res;
+        try {
+          res = await customRunner(this.ctx, req);
+          recoveryRetries = 0;
+        } catch (err) {
+          if (controller.signal.aborted) {
             this.events.emit("error", { err: toError(err), phase: "provider" });
-            return { status: "failed", iterations, error: toWrongStackError(err) };
+            return { status: "aborted", iterations, error: toWrongStackError(err, "AGENT_ABORTED") };
           }
-          if (extDecision.action === "continue") {
-            await this.extensions.runAfterIteration(this.ctx, i);
-            continue;
+          const extDecision = await this.extensions.runOnError(this.ctx, err, "provider", i);
+          if (extDecision) {
+            if (extDecision.action === "fail") {
+              this.events.emit("error", { err: toError(err), phase: "provider" });
+              return { status: "failed", iterations, error: toWrongStackError(err), delegateSummaries };
+            }
+            if (extDecision.action === "continue") {
+              await this.extensions.runAfterIteration(this.ctx, i);
+              continue;
+            }
+            if (extDecision.action === "retry") {
+              recoveryRetries++;
+              if (recoveryRetries > 2) {
+                this.events.emit("error", { err: toError(err), phase: "provider" });
+                return { status: "failed", iterations, error: toWrongStackError(err), delegateSummaries };
+              }
+              if (extDecision.model) this.ctx.model = extDecision.model;
+              this.logger.info("Extension requested retry; retrying turn");
+              continue;
+            }
           }
-          if (extDecision.action === "retry") {
+          const recovered = await this.errorHandler.recover(err, this.ctx);
+          if (!recovered || recovered.action === "fail") {
+            this.events.emit("error", { err: toError(err), phase: "provider" });
+            return {
+              status: "failed",
+              iterations,
+              error: toWrongStackError(recovered?.error ?? err),
+              delegateSummaries
+            };
+          }
+          if (recovered.action === "retry") {
             recoveryRetries++;
             if (recoveryRetries > 2) {
               this.events.emit("error", { err: toError(err), phase: "provider" });
               return { status: "failed", iterations, error: toWrongStackError(err) };
             }
-            if (extDecision.model) this.ctx.model = extDecision.model;
-            this.logger.info("Extension requested retry; retrying turn");
+            if (recovered.model) this.ctx.model = recovered.model;
+            this.logger.info(`Recovered provider error via ${recovered.reason}; retrying turn`);
             continue;
           }
+          recoveryRetries = 0;
+          res = recovered.response;
         }
-        const recovered = await this.errorHandler.recover(err, this.ctx);
-        if (!recovered || recovered.action === "fail") {
-          this.events.emit("error", { err: toError(err), phase: "provider" });
-          return {
-            status: "failed",
-            iterations,
-            error: toWrongStackError(recovered?.error ?? err)
-          };
+        const responseResult = await this.processResponse(res, req);
+        if (responseResult.aborted) {
+          return { status: "aborted", iterations, finalText: responseResult.finalText, delegateSummaries };
         }
-        if (recovered.action === "retry") {
-          recoveryRetries++;
-          if (recoveryRetries > 2) {
-            this.events.emit("error", { err: toError(err), phase: "provider" });
-            return { status: "failed", iterations, error: toWrongStackError(err) };
+        if (responseResult.done) {
+          return { status: "done", iterations, finalText: responseResult.finalText, delegateSummaries };
+        }
+        finalText = responseResult.finalText;
+        const toolUses = res.content.filter(isToolUseBlock);
+        if (toolUses.length === 0) {
+          this.events.emit("iteration.completed", { ctx: this.ctx, index: i });
+          if (autonomousContinue && responseResult.directive === "continue") {
+            await this.compactContextIfNeeded();
+            await this.extensions.runAfterIteration(this.ctx, i);
+            continue;
           }
-          if (recovered.model) this.ctx.model = recovered.model;
-          this.logger.info(`Recovered provider error via ${recovered.reason}; retrying turn`);
-          continue;
+          if (autonomousContinue && responseResult.directive === "stop") {
+            return { status: "done", iterations, finalText, delegateSummaries };
+          }
+          return { status: "done", iterations, finalText, delegateSummaries };
         }
-        recoveryRetries = 0;
-        res = recovered.response;
-      }
-      const responseResult = await this.processResponse(res, req);
-      if (responseResult.aborted) {
-        return { status: "aborted", iterations, finalText: responseResult.finalText };
-      }
-      if (responseResult.done) {
-        return { status: "done", iterations, finalText: responseResult.finalText };
-      }
-      finalText = responseResult.finalText;
-      const toolUses = res.content.filter(isToolUseBlock);
-      if (toolUses.length === 0) {
-        this.events.emit("iteration.completed", { ctx: this.ctx, index: i });
-        if (autonomousContinue && responseResult.directive === "continue") {
+        await this.executeTools(toolUses);
+        if (autonomousContinue && consumeAutonomousContinue(this.ctx)) {
+          this.events.emit("iteration.completed", { ctx: this.ctx, index: i });
           await this.compactContextIfNeeded();
           await this.extensions.runAfterIteration(this.ctx, i);
           continue;
         }
-        if (autonomousContinue && responseResult.directive === "stop") {
-          return { status: "done", iterations, finalText };
-        }
-        return { status: "done", iterations, finalText };
-      }
-      await this.executeTools(toolUses);
-      if (autonomousContinue && consumeAutonomousContinue(this.ctx)) {
         this.events.emit("iteration.completed", { ctx: this.ctx, index: i });
         await this.compactContextIfNeeded();
         await this.extensions.runAfterIteration(this.ctx, i);
-        continue;
-      }
-      this.events.emit("iteration.completed", { ctx: this.ctx, index: i });
-      await this.compactContextIfNeeded();
-      await this.extensions.runAfterIteration(this.ctx, i);
-      if (autonomousContinue && responseResult.directive === "continue") {
-        continue;
-      }
-      if (autonomousContinue && responseResult.directive === "stop") {
-        return { status: "done", iterations, finalText };
+        if (autonomousContinue && responseResult.directive === "continue") {
+          continue;
+        }
+        if (autonomousContinue && responseResult.directive === "stop") {
+          return { status: "done", iterations, finalText, delegateSummaries };
+        }
       }
+    } finally {
+      offSubagentDone();
     }
   }
   /**
@@ -18130,7 +18334,7 @@ var Agent = class {
    * the loop should exit. Returns `{ limit }` with no result when the
    * iteration may proceed.
    */
-  async checkIterationLimit(iterationIndex, limit, hasHardLimit, currentIterations) {
+  async checkIterationLimit(iterationIndex, limit, hasHardLimit, currentIterations, delegateSummaries) {
     if (hasHardLimit && iterationIndex >= limit) {
       const extendBy = await requestLimitExtension({
         events: this.events,
@@ -18143,7 +18347,7 @@ var Agent = class {
         this.logger.info(`Iteration limit extended by ${extendBy} (new limit: ${newLimit})`);
         return { limit: newLimit };
       }
-      return { limit, exit: { status: "max_iterations", iterations: currentIterations } };
+      return { limit, exit: { status: "max_iterations", iterations: currentIterations, delegateSummaries } };
     }
     return { limit };
   }
@@ -18550,11 +18754,9 @@ var Context = class {
     return this._state;
   }
   /**
-   * Register a teardown hook tied to the current run's abort signal. The
-   * hook fires when the run aborts or ends normally — Agent.run wires this
-   * through a RunController. Hooks registered before a run starts are stored
-   * and fired when the next run ends; there is no "immediate fire" when no
-   * run is active.
+   * Register a teardown hook tied to the current run's abort signal.
+   * Hooks registered before a run starts are stored and fired when the
+   * next run ends; there is no immediate fire when no run is active.
    *
    * **Scope:** these hooks fire on the **whole agent run's** abort, not on
    * an individual tool call. For per-tool teardown of resources owned by
@@ -19133,13 +19335,13 @@ ${mem}`);
 };
 
 // src/registry/tool-registry.ts
-var ToolRegistry = class {
+var ToolRegistry = class _ToolRegistry {
   tools = /* @__PURE__ */ new Map();
   register(tool, owner = "core") {
     if (this.tools.has(tool.name)) {
       throw new WrongStackError({
         message: `Tool "${tool.name}" already registered`,
-        code: "REGISTRY_DUPLICATE",
+        code: ERROR_CODES.REGISTRY_DUPLICATE,
         subsystem: "container",
         context: { tool: tool.name }
       });
@@ -19191,7 +19393,7 @@ var ToolRegistry = class {
     if (!this.tools.has(name)) {
       throw new WrongStackError({
         message: `Tool "${name}" not registered; cannot override`,
-        code: "REGISTRY_NOT_FOUND",
+        code: ERROR_CODES.REGISTRY_NOT_FOUND,
         subsystem: "container",
         context: { tool: name }
       });
@@ -19214,7 +19416,7 @@ var ToolRegistry = class {
     if (!entry) {
       throw new WrongStackError({
         message: `Tool "${name}" not registered; cannot wrap`,
-        code: "REGISTRY_NOT_FOUND",
+        code: ERROR_CODES.REGISTRY_NOT_FOUND,
         subsystem: "container",
         context: { tool: name }
       });
@@ -19255,6 +19457,15 @@ var ToolRegistry = class {
   clear() {
     this.tools.clear();
   }
+  /**
+   * Return a new ToolRegistry with the same registered tools and owners.
+   * Useful for creating filtered copies in multi-agent scenarios.
+   */
+  clone() {
+    const copy = new _ToolRegistry();
+    for (const { tool, owner } of this.listWithOwner()) copy.register(tool, owner);
+    return copy;
+  }
 };
 
 // src/registry/provider-registry.ts
@@ -19587,7 +19798,7 @@ function topoSort(plugins) {
     if (visiting.has(p.name)) {
       throw new PluginError({
         message: `Plugin dependency cycle: ${[...stack, p.name].join(" -> ")}`,
-        code: "PLUGIN_LOAD_FAILED",
+        code: ERROR_CODES.PLUGIN_LOAD_FAILED,
         pluginName: p.name
       });
     }
@@ -19598,7 +19809,7 @@ function topoSort(plugins) {
       if (!d) {
         throw new PluginError({
           message: `Plugin "${p.name}" depends on missing plugin "${dep.name}"`,
-          code: "PLUGIN_MISSING_DEPENDENCY",
+          code: ERROR_CODES.PLUGIN_MISSING_DEPENDENCY,
           pluginName: p.name,
           context: { dependency: dep.name }
         });
@@ -19606,7 +19817,7 @@ function topoSort(plugins) {
       if (dep.version && d.version && !satisfies(dep.version, d.version)) {
         throw new PluginError({
           message: `Plugin "${p.name}" requires "${dep.name}@${dep.version}", found ${d.version}`,
-          code: "PLUGIN_LOAD_FAILED",
+          code: ERROR_CODES.PLUGIN_LOAD_FAILED,
           pluginName: p.name,
           context: { dependency: dep.name, required: dep.version, found: d.version }
         });
@@ -19620,7 +19831,7 @@ function topoSort(plugins) {
         if (dep.version && d.version && !satisfies(dep.version, d.version)) {
           throw new PluginError({
             message: `Plugin "${p.name}" optional dep "${dep.name}@${dep.version}" found ${d.version}`,
-            code: "PLUGIN_LOAD_FAILED",
+            code: ERROR_CODES.PLUGIN_LOAD_FAILED,
             pluginName: p.name,
             context: { dependency: dep.name, required: dep.version, found: d.version }
           });
@@ -19645,7 +19856,7 @@ async function loadPlugins(plugins, opts) {
       if (names.has(c)) {
         throw new PluginError({
           message: `Plugin "${p.name}" conflicts with loaded plugin "${c}"`,
-          code: "PLUGIN_LOAD_FAILED",
+          code: ERROR_CODES.PLUGIN_LOAD_FAILED,
           pluginName: p.name,
           context: { conflictsWith: c }
         });
@@ -19663,7 +19874,7 @@ async function loadPlugins(plugins, opts) {
     if (!satisfies(plugin.apiVersion, kernelVersion)) {
       const err = new PluginError({
         message: `Plugin "${plugin.name}" requires apiVersion ${plugin.apiVersion}; kernel is ${kernelVersion}`,
-        code: "PLUGIN_API_MISMATCH",
+        code: ERROR_CODES.PLUGIN_API_MISMATCH,
         pluginName: plugin.name,
         context: { required: plugin.apiVersion, kernel: kernelVersion }
       });
@@ -19685,7 +19896,7 @@ async function loadPlugins(plugins, opts) {
           const detail = firstErr ? `${firstErr.path}: ${firstErr.message}` : "config invalid";
           const err = new PluginError({
             message: `Plugin "${plugin.name}" config invalid \u2014 ${detail}`,
-            code: "PLUGIN_LOAD_FAILED",
+            code: ERROR_CODES.PLUGIN_LOAD_FAILED,
             pluginName: plugin.name,
             context: { errors: result.errors }
           });
@@ -19714,7 +19925,12 @@ async function unloadPlugins(loadedPlugins, opts) {
   for (const plugin of ordered) {
     if (typeof plugin.teardown !== "function") continue;
     try {
-      const api = pluginApiMap.get(plugin) ?? opts.apiFactory(plugin);
+      const api = pluginApiMap.get(plugin);
+      if (!api) {
+        throw new Error(
+          `Plugin "${plugin.name}" API not found in pluginApiMap \u2014 was setup() called?`
+        );
+      }
       await plugin.teardown(api);
       pluginApiMap.delete(plugin);
       opts.log.info(`Plugin "${plugin.name}" torn down`);
@@ -19730,7 +19946,7 @@ function wrapApiForCapabilityCheck(plugin, api, log, enforce = false) {
     if (enforce) {
       throw new PluginError({
         message: msg,
-        code: "PLUGIN_LOAD_FAILED",
+        code: ERROR_CODES.PLUGIN_LOAD_FAILED,
         pluginName: plugin.name,
         context: { subsystem, detail }
       });
@@ -19803,6 +20019,6 @@ function wrapApiForCapabilityCheck(plugin, api, log, enforce = false) {
   });
 }
 
-export { AISpecBuilder, ALL_FLEET_AGENTS, AUDIT_LOG_AGENT, Agent, AgentError, AutoApprovePermissionPolicy, AutoCompactionMiddleware, AutoExecutor, AutonomousRunner, BUG_HUNTER_AGENT, BudgetExceededError, CONTEXT_WINDOW_MODES, ConfigError, ConfigMigrationError, Container, Context, ConversationState, DEFAULT_CONFIG_MIGRATIONS, DEFAULT_CONTEXT_WINDOW_MODE_ID, DEFAULT_DIRECTOR_PREAMBLE, DEFAULT_MAX_ITERATIONS, DEFAULT_MODES, DEFAULT_RECOVERY_STRATEGIES, DEFAULT_SPEC_TEMPLATE, DEFAULT_SUBAGENT_BASELINE, DefaultAttachmentStore, DefaultConfigLoader, DefaultConfigStore, DefaultErrorHandler, DefaultHealthRegistry, DefaultLogger, DefaultMemoryStore, DefaultModeStore, DefaultModelsRegistry, DefaultMultiAgentCoordinator, DefaultPathResolver, DefaultPermissionPolicy, DefaultPluginAPI, DefaultProviderRunner, DefaultRetryPolicy, DefaultSecretScrubber, DefaultSecretVault, DefaultSessionReader, DefaultSessionRewinder, DefaultSessionStore, DefaultSkillLoader, DefaultSystemPromptBuilder, DefaultTaskStore, DefaultTokenCounter, Director, DirectorStateCheckpoint, DoneConditionChecker, EternalAutonomyEngine, EventBus, ExtensionRegistry, FLEET_ROSTER, FLEET_ROSTER_BUDGETS, FleetBus, FleetManager, FleetSpawnBudgetError, FleetUsageAggregator, GitignoreUpdater, HybridCompactor, InMemoryAgentBridge, InMemoryBridgeTransport, InMemoryMetricsSink, InputBuilder, IntelligentCompactor, KERNEL_API_VERSION, LAYER_1_IDENTITY, LLMSelector, MAX_JOURNAL_ENTRIES, NULL_FLEET_BUS, NoopMetricsSink, NoopTracer, OTelTracer, PROMETHEUS_CONTENT_TYPE, ParallelEternalEngine, Pipeline, PluginError, ProviderError, ProviderRegistry, QueueStore, REFACTOR_PLANNER_AGENT, RecoveryLock, ReportGenerator, RunController, SECURITY_SCANNER_AGENT, SPEC_TEMPLATES, ScopedEventBus, SecurityScanner, SecurityScannerOrchestrator, SelectiveCompactor, SessionAnalyzer, SessionError, SkillGenerator, SkillInstaller, SkillManifestStore, SlashCommandRegistry, SpecDrivenDev, SpecParser, SpecStore, SpecVersioning, SubagentBudget, TOKENS, TaskFlow, TaskGenerator, TaskGraphStore, TaskTracker, TechStackDetector, ToolError, ToolExecutor, ToolRegistry, WrongStackError, addPlanItem, allServers, analyzeCriticalPath, appendJournal, applyRosterBudget, asBlocks, asText, atomicWrite, attachPlanCheckpoint, attachTodosCheckpoint, awsServer, blockServer, braveSearchServer, buildChildEnv, buildGoalPreamble, buildOtlpMetricsRequest, buildOtlpTracesRequest, buildRecoveryStrategies, classifyFamily, clearPlan, color, compileGlob, compileUserRegex, composeDirectorPrompt, composeSubagentPrompt, computeTaskProgress, context7Server, contextManagerTool, createAutoExecutor, createContextManagerTool, createDefaultPipelines, createDelegateTool, createMcpControlTool, createMessage, createSecuritySlashCommand, createToolOutputSerializer, decryptConfigSecrets, defaultGitignoreUpdater, defaultOrchestrator, defaultReportGenerator, defaultSecurityScanner, defaultSkillGenerator, defaultTechStackDetector, deriveTodosFromPlanItem, detectNewlineStyle, downloadGitHubTarball, emptyGoal, emptyPlan, encryptConfigSecrets, ensureDir, estimateRequestTokens, estimateTextTokens, estimateToolDefTokens, estimateToolInputTokens, estimateToolResultTokens, everArtServer, extractRunEnv, filesystemServer, findCriticalPath, formatContextWindowModeList, formatGoal, formatPlan, formatPlanTemplates, formatTodosList, getContextWindowMode, getPlanTemplate, getTemplate, githubServer, goalFilePath, googleMapsServer, isAgentError, isConfigError, isContextWindowModeId, isImageBlock, isPluginError, isSessionError, isTextBlock, isThinkingBlock, isToolError, isToolResultBlock, isToolUseBlock, isWrongStackError, listContextWindowModes, listPlanTemplates, listTemplates, loadDirectorState, loadGoal, loadPlan, loadPlugins, loadProjectModes, loadTodosCheckpoint, loadUserModes, makeAgentSubagentRunner, makeAutonomyPromptContributor, makeContinueToNextIterationTool, makeDirectorSessionFactory, matchAny, matchGlob, migratePlaintextSecrets, miniMaxVisionServer, normalizeToLf, parseContinueDirective, parseSkillRef, projectHash, removePlanItem, renderProgress, renderPrometheus, renderSpecAnalysis, renderTaskGraph, renderTaskList, repairToolUseAdjacency, resolveContextWindowPolicy, resolveWstackPaths, rewriteConfigEncrypted, rosterSummaryFromConfigs, runConfigMigrations, safeParse, safeStringify, sanitizeJsonString, saveGoal, savePlan, saveTodosCheckpoint, securitySlashCommand, sentinelServer, setPlanItemStatus, slackServer, startMetricsServer, startOtlpMetricsExporter, startOtlpTraceExporter, stripAnsi, summarizeUsage, templateToMarkdown, toStyle, toWrongStackError, topologicalSort, unifiedDiff, unloadPlugins, validateAgainstSchema, wireMetricsToEvents, wrapAsState, zaiVisionServer };
+export { AISpecBuilder, ALL_FLEET_AGENTS, AUDIT_LOG_AGENT, Agent, AgentError, AutoApprovePermissionPolicy, AutoCompactionMiddleware, AutoExecutor, AutonomousRunner, BUG_HUNTER_AGENT, BudgetExceededError, CONTEXT_WINDOW_MODES, ConfigError, ConfigMigrationError, Container, Context, ConversationState, DEFAULT_CONFIG_MIGRATIONS, DEFAULT_CONTEXT_CONFIG, DEFAULT_CONTEXT_WINDOW_MODE_ID, DEFAULT_DIRECTOR_PREAMBLE, DEFAULT_MAX_ITERATIONS, DEFAULT_MODES, DEFAULT_RECOVERY_STRATEGIES, DEFAULT_SPEC_TEMPLATE, DEFAULT_SUBAGENT_BASELINE, DEFAULT_TOOLS_CONFIG, DefaultAttachmentStore, DefaultConfigLoader, DefaultConfigStore, DefaultErrorHandler, DefaultHealthRegistry, DefaultLogger, DefaultMemoryStore, DefaultModeStore, DefaultModelsRegistry, DefaultMultiAgentCoordinator, DefaultPathResolver, DefaultPermissionPolicy, DefaultPluginAPI, DefaultProviderRunner, DefaultRetryPolicy, DefaultSecretScrubber, DefaultSecretVault, DefaultSessionReader, DefaultSessionRewinder, DefaultSessionStore, DefaultSkillLoader, DefaultSystemPromptBuilder, DefaultTaskStore, DefaultTokenCounter, Director, DirectorStateCheckpoint, DoneConditionChecker, ERROR_CODES, EternalAutonomyEngine, EventBus, ExtensionRegistry, FLEET_ROSTER, FLEET_ROSTER_BUDGETS, FleetBus, FleetManager, FleetSpawnBudgetError, FleetUsageAggregator, FsError, GitignoreUpdater, HybridCompactor, InMemoryAgentBridge, InMemoryBridgeTransport, InMemoryMetricsSink, InputBuilder, IntelligentCompactor, KERNEL_API_VERSION, LAYER_1_IDENTITY, LLMSelector, MAX_JOURNAL_ENTRIES, NULL_FLEET_BUS, NoopMetricsSink, NoopTracer, OTelTracer, PROMETHEUS_CONTENT_TYPE, ParallelEternalEngine, Pipeline, PluginError, ProviderError, ProviderRegistry, QueueStore, REFACTOR_PLANNER_AGENT, RecoveryLock, ReportGenerator, RunController, SECURITY_SCANNER_AGENT, SPEC_TEMPLATES, ScopedEventBus, SecurityScanner, SecurityScannerOrchestrator, SelectiveCompactor, SessionAnalyzer, SessionError, SkillGenerator, SkillInstaller, SkillManifestStore, SlashCommandRegistry, SpecDrivenDev, SpecParser, SpecStore, SpecVersioning, SubagentBudget, TOKENS, TaskFlow, TaskGenerator, TaskGraphStore, TaskTracker, TechStackDetector, ToolError, ToolExecutor, ToolRegistry, WrongStackError, addPlanItem, allServers, analyzeCriticalPath, appendJournal, applyRosterBudget, asBlocks, asText, atomicWrite, attachPlanCheckpoint, attachTodosCheckpoint, awsServer, blockServer, braveSearchServer, buildChildEnv, buildGoalPreamble, buildOtlpMetricsRequest, buildOtlpTracesRequest, buildRecoveryStrategies, classifyFamily, clearPlan, color, compileGlob, compileUserRegex, composeDirectorPrompt, composeSubagentPrompt, computeTaskProgress, context7Server, contextManagerTool, createAutoExecutor, createContextManagerTool, createDefaultPipelines, createDelegateTool, createMcpControlTool, createMessage, createSecuritySlashCommand, createToolOutputSerializer, decryptConfigSecrets, defaultGitignoreUpdater, defaultOrchestrator, defaultReportGenerator, defaultSecurityScanner, defaultSkillGenerator, defaultTechStackDetector, deriveTodosFromPlanItem, detectNewlineStyle, downloadGitHubTarball, emptyGoal, emptyPlan, encryptConfigSecrets, ensureDir, estimateRequestTokens, estimateTextTokens, estimateToolDefTokens, estimateToolInputTokens, estimateToolResultTokens, everArtServer, extractRunEnv, filesystemServer, findCriticalPath, formatContextWindowModeList, formatGoal, formatPlan, formatPlanTemplates, formatTodosList, getContextWindowMode, getPlanTemplate, getTemplate, githubServer, goalFilePath, googleMapsServer, isAgentError, isConfigError, isContextWindowModeId, isFsError, isImageBlock, isPluginError, isSessionError, isTextBlock, isThinkingBlock, isToolError, isToolResultBlock, isToolUseBlock, isWrongStackError, listContextWindowModes, listPlanTemplates, listTemplates, loadDirectorState, loadGoal, loadPlan, loadPlugins, loadProjectModes, loadTodosCheckpoint, loadUserModes, makeAgentSubagentRunner, makeAutonomyPromptContributor, makeContinueToNextIterationTool, makeDirectorSessionFactory, matchAny, matchGlob, migratePlaintextSecrets, miniMaxVisionServer, normalizeToLf, parseContinueDirective, parseSkillRef, projectHash, removePlanItem, renderProgress, renderPrometheus, renderSpecAnalysis, renderTaskGraph, renderTaskList, repairToolUseAdjacency, resolveContextWindowPolicy, resolveWstackPaths, rewriteConfigEncrypted, rosterSummaryFromConfigs, runConfigMigrations, safeParse, safeStringify, sanitizeJsonString, saveGoal, savePlan, saveTodosCheckpoint, securitySlashCommand, sentinelServer, setPlanItemStatus, slackServer, startMetricsServer, startOtlpMetricsExporter, startOtlpTraceExporter, stripAnsi, summarizeUsage, templateToMarkdown, toStyle, toWrongStackError, topologicalSort, unifiedDiff, unloadPlugins, validateAgainstSchema, wireMetricsToEvents, wrapAsState, zaiVisionServer };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map