aiden-runtime 4.0.2 → 4.1.1

package/dist/core/voice/stt.js

@@ -51,11 +51,23 @@ exports.getSttProviders = getSttProviders;
 //
 // If all providers fail: returns { text: '', provider: 'none', error }
 // — never throws; callers check result.text.
+//
+// Phase v4.1-3 surgical edits:
+//   - Cloud providers request `verbose_json` so we receive segment-level
+//     `avg_logprob`. The mean is exposed on the result as `confidence`
+//     (negative; closer to zero is more confident). Channel adapters
+//     (e.g. Telegram voice notes) use this to decide whether to echo
+//     a low-confidence transcript back to the user before handing it
+//     to the agent.
+//   - All `console.*` removed in favour of an injectable `Logger` from
+//     `core/v4/logger`. Defaults to a noop logger so callers without a
+//     wired logger get silence (REPL-safe). v4.1-1.3a contract.
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const child_process_1 = require("child_process");
 const util_1 = require("util");
 const axios_1 = __importDefault(require("axios"));
+const logger_1 = require("../v4/logger");
 const execAsync = (0, util_1.promisify)(child_process_1.exec);
 // ── Internal helpers ──────────────────────────────────────────────────────────
 const WORKSPACE = path_1.default.join(process.cwd(), 'workspace');
@@ -75,6 +87,29 @@ function resolveAudioPath(opts) {
     }
     throw new Error('SttOptions: provide audioFilePath or audioBuffer');
 }
+/**
+ * Compute mean of `avg_logprob` across Whisper segments — Phase v4.1-3.
+ * Returns `undefined` when the field is absent (older response shapes,
+ * non-verbose_json fallback, or no segments at all). Callers only use
+ * this when the value is finite; preserve that invariant here.
+ */
+function meanAvgLogprob(payload) {
+    const segs = payload?.segments;
+    if (!Array.isArray(segs) || segs.length === 0)
+        return undefined;
+    let sum = 0;
+    let count = 0;
+    for (const s of segs) {
+        const v = s?.avg_logprob;
+        if (typeof v === 'number' && Number.isFinite(v)) {
+            sum += v;
+            count += 1;
+        }
+    }
+    if (count === 0)
+        return undefined;
+    return sum / count;
+}
 // ── Provider 1 — Groq Whisper ─────────────────────────────────────────────────
 async function transcribeGroq(audioPath, opts) {
     const apiKey = process.env.GROQ_API_KEY;
@@ -88,15 +123,20 @@ async function transcribeGroq(audioPath, opts) {
     form.append('model', 'whisper-large-v3');
     if (opts.language)
         form.append('language', opts.language);
-    form.append('response_format', 'json');
+    // Phase v4.1-3 — verbose_json gives us segment-level `avg_logprob`
+    // for confidence scoring on the channel side. Groq mirrors OpenAI's
+    // Whisper response shape here.
+    form.append('response_format', 'verbose_json');
     const res = await axios_1.default.post('https://api.groq.com/openai/v1/audio/transcriptions', form, {
         headers: { ...form.getHeaders(), Authorization: `Bearer ${apiKey}` },
         timeout,
     });
+    const confidence = meanAvgLogprob(res.data);
     return {
         text: (res.data.text ?? '').trim(),
         provider: 'groq',
         durationMs: Date.now() - t0,
+        ...(typeof confidence === 'number' ? { confidence } : {}),
     };
 }
 // ── Provider 2 — OpenAI Whisper ───────────────────────────────────────────────
@@ -112,15 +152,18 @@ async function transcribeOpenAI(audioPath, opts) {
     form.append('model', 'whisper-1');
     if (opts.language)
         form.append('language', opts.language);
-    form.append('response_format', 'json');
+    // Phase v4.1-3 — same verbose_json switch as Groq for parity.
+    form.append('response_format', 'verbose_json');
     const res = await axios_1.default.post('https://api.openai.com/v1/audio/transcriptions', form, {
         headers: { ...form.getHeaders(), Authorization: `Bearer ${apiKey}` },
         timeout,
     });
+    const confidence = meanAvgLogprob(res.data);
     return {
         text: (res.data.text ?? '').trim(),
         provider: 'openai',
         durationMs: Date.now() - t0,
+        ...(typeof confidence === 'number' ? { confidence } : {}),
     };
 }
 // ── Provider 3 — Local Whisper.cpp ────────────────────────────────────────────
@@ -168,6 +211,7 @@ async function transcribe(options) {
     const t0 = Date.now();
     let tmpFile = '';
     const errors = [];
+    const log = options.logger ?? (0, logger_1.noopLogger)();
     try {
         const audioPath = resolveAudioPath(options);
         if (!options.audioFilePath && options.audioBuffer)
@@ -175,7 +219,11 @@ async function transcribe(options) {
         // Provider 1 — Groq
         try {
             const r = await transcribeGroq(audioPath, options);
-            console.log(`[STT] Groq Whisper: "${r.text.slice(0, 60)}" (${r.durationMs}ms)`);
+            log.info(`groq whisper transcribed`, {
+                snippet: r.text.slice(0, 60),
+                durationMs: r.durationMs,
+                confidence: r.confidence,
+            });
             return r;
         }
         catch (e) {
@@ -184,7 +232,11 @@ async function transcribe(options) {
         // Provider 2 — OpenAI
         try {
             const r = await transcribeOpenAI(audioPath, options);
-            console.log(`[STT] OpenAI Whisper: "${r.text.slice(0, 60)}" (${r.durationMs}ms)`);
+            log.info(`openai whisper transcribed`, {
+                snippet: r.text.slice(0, 60),
+                durationMs: r.durationMs,
+                confidence: r.confidence,
+            });
             return r;
         }
         catch (e) {
@@ -193,7 +245,10 @@ async function transcribe(options) {
         // Provider 3 — Local Whisper.cpp
         try {
             const r = await transcribeLocal(audioPath, options);
-            console.log(`[STT] Local Whisper.cpp: "${r.text.slice(0, 60)}" (${r.durationMs}ms)`);
+            log.info(`local whisper transcribed`, {
+                snippet: r.text.slice(0, 60),
+                durationMs: r.durationMs,
+            });
             return r;
         }
         catch (e) {
@@ -201,7 +256,7 @@ async function transcribe(options) {
         }
         // All failed
         const errorMsg = errors.join(' | ');
-        console.warn(`[STT] All providers failed: ${errorMsg}`);
+        log.warn(`all providers failed`, { errors: errorMsg });
         return { text: '', provider: 'none', durationMs: Date.now() - t0, error: errorMsg };
     }
     catch (outer) {

package/dist/core/voice/tts.js

@@ -136,15 +136,27 @@ async function synthesizeEdge(text, opts) {
     const voice = opts.voice ?? DEFAULT_VOICE;
     const audioPath = path_1.default.join(WORKSPACE, `tts_edge_${Date.now()}.mp3`);
     const audioFwd = audioPath.replace(/\\/g, '/');
-    const escaped = text.replace(/"/g, '\\"').replace(/'/g, "\\'");
     const timeout = opts.timeoutMs ?? 20000;
+    // Phase v4.1-voice-cli (Piece 0) — write the user text to a UTF-8
+    // file and have Python read it from there. The old inline-escape
+    // path (`text.replace(/"/g,'\\"').replace(/'/g,"\\'")`) was
+    // brittle for any text containing both quote styles plus
+    // backticks / `${...}` (which break the JS template literal that
+    // generates the Python script). Reading from a file removes ALL
+    // escaping concerns. JSON.stringify on the file paths + voice
+    // produces valid Python string literals (JSON ⊂ Python string syntax).
+    const textFile = path_1.default.join(WORKSPACE, `tts_edge_text_${Date.now()}.txt`);
+    fs_1.default.writeFileSync(textFile, text, 'utf-8');
+    const textFileFwd = textFile.replace(/\\/g, '/');
     const script = `
 import asyncio, sys
 sys.stderr = open('nul', 'w')
 import edge_tts
 async def main():
-    communicate = edge_tts.Communicate("${escaped}", "${voice}")
-    await communicate.save("${audioFwd}")
+    with open(${JSON.stringify(textFileFwd)}, 'r', encoding='utf-8') as f:
+        txt = f.read()
+    communicate = edge_tts.Communicate(txt, ${JSON.stringify(voice)})
+    await communicate.save(${JSON.stringify(audioFwd)})
 asyncio.run(main())
 `.trim();
     const tmpPy = path_1.default.join(WORKSPACE, `tts_edge_gen_${Date.now()}.py`);
@@ -170,6 +182,10 @@ asyncio.run(main())
             fs_1.default.unlinkSync(tmpPy);
         }
         catch { /* ignore */ }
+        try {
+            fs_1.default.unlinkSync(textFile);
+        }
+        catch { /* ignore */ }
     }
 }
 // ── Provider 2 — ElevenLabs ───────────────────────────────────────────────────

package/dist/moat/dangerousPatterns.js

@@ -52,7 +52,7 @@ exports.DANGEROUS_PATTERNS = [
     { name: 'kill_all', regex: /\bkill\s+-9\s+-1\b/, tier: 'dangerous', description: 'kill all processes' },
     { name: 'pkill_force', regex: /\bpkill\s+-9\b/, tier: 'caution', description: 'force kill processes' },
     { name: 'systemctl_disable', regex: /\bsystemctl\s+(-[^\s]+\s+)*(stop|restart|disable|mask)\b/i, tier: 'caution', description: 'stop/restart system service' },
-    { name: 'pkill_aiden', regex: /\b(pkill|killall)\b.*\b(aiden|gateway|hermes)\b/i, tier: 'dangerous', description: 'kill aiden/gateway process (self-termination)' },
+    { name: 'pkill_aiden', regex: /\b(pkill|killall)\b.*\b(aiden|gateway)\b/i, tier: 'dangerous', description: 'kill aiden/gateway process (self-termination)' },
     // ── Sensitive write targets ───────────────────────────────────
     { name: 'write_etc', regex: />\s*\/etc\//, tier: 'dangerous', description: 'overwrite system config' },
     { name: 'tee_etc', regex: /\btee\b.*\/etc\//, tier: 'dangerous', description: 'overwrite system file via tee' },

package/dist/providers/v4/codexResponsesAdapter.js

@@ -129,14 +129,19 @@ class CodexResponsesAdapter {
         const body = {
             model: this.model,
             input: items,
-            tool_choice: 'auto',
-            parallel_tool_calls: true,
             store: false,
         };
         if (instructions)
             body.instructions = instructions;
+        // Phase v4.1.1-oauth-fix Phase 5: `tool_choice` and
+        // `parallel_tool_calls` are only meaningful when tools are present.
+        // OpenAI Codex returns HTTP 400 (empty body) for `tool_choice: 'auto'`
+        // without a `tools` field — surfaced by `aiden doctor --providers`'s
+        // no-tools liveness probe.
         if (input.tools && input.tools.length > 0) {
             body.tools = input.tools.map(toWireTool);
+            body.tool_choice = 'auto';
+            body.parallel_tool_calls = true;
         }
         if (typeof input.temperature === 'number') {
             body.temperature = input.temperature;

package/dist/providers/v4/errors.js

@@ -16,9 +16,59 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ProviderRateLimitError = exports.ProviderTimeoutError = exports.ProviderError = void 0;
+exports.formatRawForMessage = formatRawForMessage;
+/**
+ * Format a raw response body for inclusion in the user-facing error
+ * message. Recognises the OpenAI / Anthropic JSON envelope shape
+ * (`{ error: { message: "..." } }`) and falls back to the raw string
+ * for plain-text bodies. Returns null when nothing useful is available
+ * so callers can omit the ": <detail>" tail entirely.
+ *
+ * Truncates to 300 chars to keep multi-line responses from blowing
+ * up the user's terminal — full body remains on `error.raw` for
+ * programmatic consumers / `aiden doctor --providers` deep mode.
+ */
+function formatRawForMessage(raw) {
+    if (raw === undefined || raw === null)
+        return null;
+    // OpenAI / Anthropic JSON envelope: { error: { message: "..." } }
+    if (typeof raw === 'object') {
+        const err = raw.error;
+        if (err && typeof err === 'object') {
+            const msg = err.message;
+            if (typeof msg === 'string' && msg.length > 0) {
+                return msg.length > 300 ? `${msg.slice(0, 300)}…` : msg;
+            }
+        }
+        // Some providers put the message at the top level.
+        const topMsg = raw.message;
+        if (typeof topMsg === 'string' && topMsg.length > 0) {
+            return topMsg.length > 300 ? `${topMsg.slice(0, 300)}…` : topMsg;
+        }
+        return null;
+    }
+    // Plain string body.
+    if (typeof raw === 'string') {
+        const trimmed = raw.trim();
+        if (trimmed.length === 0)
+            return null;
+        return trimmed.length > 300 ? `${trimmed.slice(0, 300)}…` : trimmed;
+    }
+    return null;
+}
+/**
+ * Compose the final `Error.message` from the short summary and (when
+ * available) the parsed/truncated raw response body. The body remains
+ * stashed on `ProviderError.raw` either way — this only enriches what
+ * users see when the error is rendered.
+ */
+function composeMessage(message, raw) {
+    const tail = formatRawForMessage(raw);
+    return tail ? `${message}: ${tail}` : message;
+}
 class ProviderError extends Error {
     constructor(message, providerName, statusCode, raw, retryable = false) {
-        super(message);
+        super(composeMessage(message, raw));
         this.providerName = providerName;
         this.statusCode = statusCode;
         this.raw = raw;

package/dist/providers/v4/ollamaPromptToolsAdapter.js

@@ -71,7 +71,12 @@ class OllamaPromptToolsAdapter {
                 const status = response.status;
                 const rawText = await this.safeReadText(response);
                 const retryable = status >= 500 || status === 429;
-                const err = new errors_1.ProviderError(`Provider ${this.providerName} returned ${status}: ${rawText.slice(0, 500)}`, this.providerName, status, rawText, retryable);
+                // Phase v4.1.1-oauth-fix Phase 5: short message only. The raw
+                // body flows via the .raw arg and composeMessage in errors.ts
+                // appends a truncated summary into the final .message — this
+                // file used to inline it, producing duplicated output in
+                // `aiden doctor --providers` and anywhere else err.message is logged.
+                const err = new errors_1.ProviderError(`Provider ${this.providerName} returned ${status}`, this.providerName, status, rawText, retryable);
                 if (!retryable || attempt >= totalAttempts)
                     throw err;
                 lastError = err;
@@ -149,7 +154,9 @@ class OllamaPromptToolsAdapter {
             clearTimeout(timer);
             const status = response.status;
             const rawText = await this.safeReadText(response);
-            throw new errors_1.ProviderError(`Provider ${this.providerName} returned ${status}: ${rawText.slice(0, 500)}`, this.providerName, status, rawText, status >= 500);
+            // Phase v4.1.1-oauth-fix Phase 5: composeMessage handles body
+            // rendering centrally; inlining it here would duplicate.
+            throw new errors_1.ProviderError(`Provider ${this.providerName} returned ${status}`, this.providerName, status, rawText, status >= 500);
         }
         if (!response.body) {
             clearTimeout(timer);

package/dist/tools/v4/index.js

@@ -21,7 +21,7 @@
  * Status: PHASE 8.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.memoryRemoveTool = exports.memoryReplaceTool = exports.memoryAddTool = exports.processWaitTool = exports.processKillTool = exports.processLogReadTool = exports.processListTool = exports.processSpawnTool = exports.executeCodeTool = exports.shellExecTool = exports.naturalEventsTool = exports.nowPlayingTool = exports.systemInfoTool = exports.makeLookupToolSchema = exports.skillManageTool = exports.skillViewTool = exports.skillsListTool = exports.sessionListTool = exports.sessionSearchTool = exports.browserCloseTool = exports.browserScrollTool = exports.browserFillTool = exports.browserTypeTool = exports.browserClickTool = exports.browserNavigateTool = exports.browserGetUrlTool = exports.browserExtractTool = exports.browserScreenshotTool = exports.fileCopyTool = exports.fileMoveTool = exports.fileDeleteTool = exports.filePatchTool = exports.fileWriteTool = exports.fileListTool = exports.fileReadTool = exports.deepResearchTool = exports.webPageTool = exports.webFetchTool = exports.webSearchTool = void 0;
+exports.memoryRemoveTool = exports.memoryReplaceTool = exports.memoryAddTool = exports.processWaitTool = exports.processKillTool = exports.processLogReadTool = exports.processListTool = exports.processSpawnTool = exports.executeCodeTool = exports.shellExecTool = exports.naturalEventsTool = exports.nowPlayingTool = exports.systemInfoTool = exports.makeLookupToolSchema = exports.skillManageTool = exports.skillViewTool = exports.skillsListTool = exports.sessionListTool = exports.sessionSearchTool = exports.browserCloseTool = exports.browserScrollTool = exports.browserFillTool = exports.browserTypeTool = exports.browserClickTool = exports.browserNavigateTool = exports.browserGetUrlTool = exports.browserExtractTool = exports.browserScreenshotTool = exports.fileCopyTool = exports.fileMoveTool = exports.fileDeleteTool = exports.filePatchTool = exports.fileWriteTool = exports.fileListTool = exports.fileReadTool = exports.deepResearchTool = exports.webPageTool = exports.webFetchTool = exports.webSearchTool = exports.makeSubagentFanoutTool = void 0;
 exports.registerReadOnlyTools = registerReadOnlyTools;
 exports.registerWriteTools = registerWriteTools;
 exports.registerAllTools = registerAllTools;
@@ -66,6 +66,7 @@ const processWait_1 = require("./process/processWait");
 const memoryAdd_1 = require("./memory/memoryAdd");
 const memoryReplace_1 = require("./memory/memoryReplace");
 const memoryRemove_1 = require("./memory/memoryRemove");
+const subagentFanout_1 = require("./subagent/subagentFanout");
 /**
  * Register every read-only tool into `registry`. The
  * `lookup_tool_schema` tool needs a registry reference, so it's
@@ -99,6 +100,34 @@ function registerReadOnlyTools(registry) {
     registry.register(nowPlaying_1.nowPlayingTool);
     registry.register(naturalEvents_1.naturalEventsTool);
     registry.register((0, lookupToolSchema_1.makeLookupToolSchema)(registry));
+    // Phase v4.1-subagent — register a stub for subagent_fanout so its
+    // schema is visible to the agent loop, the MCP server, and the
+    // /tools slash command BEFORE the runtime resolves provider /
+    // adapter / agent dependencies. The full runtime calls
+    // `registry.register(makeSubagentFanoutTool({...real opts}))` to
+    // replace this stub once `buildAgentRuntime` has those handles.
+    // Until then, calling the stub returns a clear "not wired" error
+    // rather than crashing.
+    registry.register(makeSubagentFanoutStub());
+}
+/** Stub used until the runtime wires real provider / adapter / agent
+ *  dependencies. Returns the SAME schema as the real tool so MCP and
+ *  /tools see a consistent surface. */
+function makeSubagentFanoutStub() {
+    return (0, subagentFanout_1.makeSubagentFanoutTool)({
+        resolveProviders: () => [],
+        resolveActiveModel: () => ({ providerId: 'unset', modelId: 'unset' }),
+        aggregatorAdapter: {
+            apiMode: 'chat_completions',
+            async call() {
+                throw new Error('subagent_fanout: tool not wired — runtime did not replace the stub. ' +
+                    'Call registry.register(makeSubagentFanoutTool({...})) after buildAgentRuntime.');
+            },
+        },
+        runChild: async () => {
+            throw new Error('subagent_fanout: tool not wired — runtime did not replace the stub.');
+        },
+    });
 }
 /**
  * Register every Phase 8 write/execute tool. Phase 9 will gate
@@ -138,6 +167,8 @@ function registerAllTools(registry) {
     registerReadOnlyTools(registry);
     registerWriteTools(registry);
 }
+var subagentFanout_2 = require("./subagent/subagentFanout");
+Object.defineProperty(exports, "makeSubagentFanoutTool", { enumerable: true, get: function () { return subagentFanout_2.makeSubagentFanoutTool; } });
 var webSearch_2 = require("./web/webSearch");
 Object.defineProperty(exports, "webSearchTool", { enumerable: true, get: function () { return webSearch_2.webSearchTool; } });
 var webFetch_2 = require("./web/webFetch");

package/dist/tools/v4/subagent/subagentFanout.js

@@ -0,0 +1,190 @@
+"use strict";
+/**
+ * Copyright (c) 2026 Shiva Deore (Taracod).
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ *
+ * Aiden — local-first agent.
+ */
+/**
+ * tools/v4/subagent/subagentFanout.ts — `subagent_fanout` wrapper.
+ *
+ * Phase v4.1-subagent. Spawns N parallel agent instances against the
+ * same problem (or a partition of it), then merges results via the
+ * chosen strategy. The orchestrator lives at
+ * `core/v4/subagent/fanout.ts`; this file is the agent-callable
+ * adapter that:
+ *
+ *   1. Validates the LLM's call args against the schema.
+ *   2. Builds a per-child runner (closure over the parent runtime)
+ *      that wraps an AidenAgent run.
+ *   3. Filters mutating tools out of each child's schema array
+ *      unless `AIDEN_SUBAGENT_ALLOW_DESTRUCTIVE=1`.
+ *   4. Returns the merged output + raw N results + diagnostics.
+ *
+ * The factory pattern (`makeSubagentFanoutTool`) mirrors
+ * `lookup_tool_schema` — the runtime constructs it with a closure
+ * over registry / providers / paths that the schema can't carry.
+ *
+ * Tool category is `network` not `write` — the tool itself doesn't
+ * touch disk; it only spends LLM tokens. That keeps it default-
+ * exposed in MCP under the read-only env (mutates: false).
+ *
+ * The description bakes a hard-learned lesson from prior multi-agent
+ * systems: "Self-reports are not verified facts" — the parent must
+ * verify any side-effects children report rather than trust the
+ * summary. Children's tool calls are executed in isolated contexts;
+ * a child claiming "wrote file X" or "ran command Y" must be
+ * verified by the parent before the parent acts on that claim.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.makeSubagentFanoutTool = makeSubagentFanoutTool;
+const factory_1 = require("../../../core/v4/logger/factory");
+const fanout_1 = require("../../../core/v4/subagent/fanout");
+const merger_1 = require("../../../core/v4/subagent/merger");
+const SCHEMA_DESC = 'Spawn N parallel agent children against the same problem (ensemble) or a partitioned task list, ' +
+    'then merge results via the chosen strategy. Use this for multi-perspective research, ' +
+    'provider-diverse fact-checking, or analyzing N independent inputs in parallel. ' +
+    'IMPORTANT: self-reports from children are not verified facts — if a child claims it ' +
+    'wrote a file, ran a command, or completed a side-effect, you (the parent) MUST verify ' +
+    'independently before trusting that claim.';
+function makeSubagentFanoutTool(factory) {
+    return {
+        schema: {
+            name: 'subagent_fanout',
+            description: SCHEMA_DESC,
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    mode: {
+                        type: 'string',
+                        description: "'partition' = each child gets a different goal from `tasks`. " +
+                            "'ensemble' = every child gets the same `query`.",
+                        enum: ['partition', 'ensemble'],
+                    },
+                    n: {
+                        type: 'number',
+                        description: 'Number of children to spawn. Default 3, hard cap 5. ' +
+                            'Higher N hits provider RPM limits and inflates tail latency.',
+                    },
+                    query: {
+                        type: 'string',
+                        description: 'Same input given to every child (ensemble mode only).',
+                    },
+                    tasks: {
+                        type: 'array',
+                        description: 'Per-child task list (partition mode only). Length must equal n.',
+                        // Schema mirrors PartitionTask interface in
+                        // core/v4/subagent/fanout.ts:70-75. If you change one, change
+                        // the other. OpenAI Codex backend strictly validates schemas
+                        // and rejects `type: "array"` declarations missing `items`,
+                        // so the inner shape must be explicit here.
+                        items: {
+                            type: 'object',
+                            description: 'One unit of work for a partition-mode child.',
+                            properties: {
+                                goal: {
+                                    type: 'string',
+                                    description: 'The task this child should accomplish.',
+                                },
+                                context: {
+                                    type: 'string',
+                                    description: 'Optional shared context for the child.',
+                                },
+                                role: {
+                                    type: 'string',
+                                    description: 'Optional role tag, diagnostic only.',
+                                },
+                            },
+                            required: ['goal'],
+                        },
+                    },
+                    merge: {
+                        type: 'string',
+                        description: "'all' = return raw N results, no aggregator (FREE). " +
+                            "'vote' = LLM judge picks one verbatim (+1 call). " +
+                            "'pick-best' = LLM judge picks one with reasoning (+1 call). " +
+                            "'combine' = LLM synthesizes one unified answer (+1 call).",
+                        enum: ['all', 'vote', 'pick-best', 'combine'],
+                    },
+                    timeoutMs: {
+                        type: 'number',
+                        description: 'Per-child wall-clock timeout (ms). Default 90000. ' +
+                            'Outer wall-clock cap is 5x this value.',
+                    },
+                },
+                required: ['mode'],
+            },
+        },
+        // mutates: false because the tool itself only spends tokens — disk /
+        // process side-effects, if any, happen INSIDE child agents whose
+        // toolsets are filtered to read-only by default. This keeps the
+        // tool default-exposed in MCP under the read-only env.
+        category: 'network',
+        mutates: false,
+        toolset: 'subagent',
+        async execute(args, _ctx) {
+            const logger = factory.logger ?? (0, factory_1.noopLogger)();
+            // ── Coerce args ────────────────────────────────────────────
+            const mode = (args.mode === 'partition' || args.mode === 'ensemble')
+                ? args.mode
+                : null;
+            if (!mode) {
+                return {
+                    success: false,
+                    error: "subagent_fanout: 'mode' must be 'partition' or 'ensemble'",
+                };
+            }
+            const n = typeof args.n === 'number' && Number.isInteger(args.n)
+                ? args.n
+                : 3;
+            const merge = (args.merge === 'all' || args.merge === 'vote'
+                || args.merge === 'pick-best' || args.merge === 'combine')
+                ? args.merge
+                : 'combine';
+            const query = typeof args.query === 'string' ? args.query : undefined;
+            const tasks = Array.isArray(args.tasks)
+                ? args.tasks
+                : undefined;
+            const timeoutMs = typeof args.timeoutMs === 'number'
+                && args.timeoutMs > 0
+                ? args.timeoutMs
+                : undefined;
+            // ── Resolve providers + aggregator at call time ───────────
+            const providers = factory.resolveProviders();
+            if (providers.length === 0) {
+                return {
+                    success: false,
+                    error: 'subagent_fanout: no providers configured — run `aiden setup` first',
+                };
+            }
+            const aggOverride = (0, merger_1.resolveAggregatorOverride)();
+            const aggregatorModel = aggOverride ?? factory.resolveActiveModel();
+            const fanoutOpts = {
+                mode,
+                query,
+                tasks,
+                n,
+                merge,
+                providers,
+                runChild: factory.runChild,
+                aggregatorAdapter: factory.aggregatorAdapter,
+                aggregatorModel,
+                timeoutMs,
+                logger,
+            };
+            try {
+                const result = await (0, fanout_1.runFanout)(fanoutOpts);
+                return {
+                    success: true,
+                    merged: result.merged,
+                    results: result.results,
+                    diagnostics: result.diagnostics,
+                };
+            }
+            catch (err) {
+                const message = err instanceof Error ? err.message : String(err);
+                return { success: false, error: message };
+            }
+        },
+    };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aiden-runtime",
-  "version": "4.0.2",
+  "version": "4.1.1",
   "publishConfig": {
     "access": "public"
   },
@@ -224,7 +224,7 @@
   "dependencies": {
     "@inquirer/core": "^11.1.9",
     "@inquirer/prompts": "^8.4.2",
-    "@modelcontextprotocol/sdk": "^1.27.1",
+    "@modelcontextprotocol/sdk": "^1.29.0",
     "@slack/bolt": "^4.6.0",
     "@slack/web-api": "^7.15.0",
     "@types/archiver": "^7.0.0",
@@ -232,6 +232,7 @@
     "@types/sql.js": "^1.4.9",
     "@types/twilio": "^3.19.2",
     "@types/ws": "^8.18.1",
+    "ansi-escapes": "^4.3.2",
     "archiver": "^7.0.1",
     "axios": "^1.15.2",
     "bcrypt": "^6.0.0",
@@ -256,15 +257,18 @@
     "marked": "^15.0.12",
     "marked-terminal": "^7.3.0",
     "multer": "^2.1.1",
+    "node-telegram-bot-api": "0.67.0",
     "nodemailer": "^8.0.3",
     "open": "^11.0.0",
     "ora": "^9.3.0",
     "pdf-parse": "^1.1.1",
     "playwright": "^1.58.2",
+    "proper-lockfile": "^4.1.2",
     "puppeteer": "^24.39.1",
     "qrcode-terminal": "^0.12.0",
     "screenshot-desktop": "^1.15.3",
     "sql.js": "^1.14.1",
+    "string-width": "^4.2.3",
     "stripe": "^20.4.1",
     "tar-stream": "^3.1.8",
     "twilio": "^5.13.1",
@@ -272,6 +276,10 @@
     "whatsapp-web.js": "^1.26.0",
     "ws": "^8.20.0"
   },
+  "optionalDependencies": {
+    "decibri": "*",
+    "node-record-lpcm16": "*"
+  },
   "overrides": {
     "basic-ftp": "^5.3.1",
     "ip-address": "^10.1.1",
@@ -287,6 +295,7 @@
     "@types/js-yaml": "^4.0.9",
     "@types/multer": "^2.0.0",
     "@types/node": "^25.3.0",
+    "@types/node-telegram-bot-api": "0.64.14",
     "@types/nodemailer": "^7.0.11",
     "@types/pdf-parse": "^1.1.4",
     "@types/qrcode-terminal": "^0.12.2",