github-router 0.3.177 → 0.3.202

package/dist/{peer-mcp-personas-BtQi-dF-.js → peer-mcp-personas-rik0SIrg.js}

@@ -1,6 +1,6 @@
-import { t as PATHS } from "./paths-BZPgxKUl.js";
-import { d as runCommandCapture, l as parseBoolEnv, n as isPidAlive, o as trackChild, p as runManagedExeCapture, r as registerColbertExitHandlers, t as getColbertInstanceUuid, u as resolveExecutable } from "./lifecycle-DrDEjx_c.js";
-import { i as registerExitHandlers, n as getInstanceUuid, r as recordWorkerRepo, t as WorktreeRegistry } from "./lifecycle-Dvr3pGGG.js";
+import { t as PATHS } from "./paths-BO22pMUb.js";
+import { d as runCommandCapture, l as parseBoolEnv, n as isPidAlive, o as trackChild, p as runManagedExeCapture, r as registerColbertExitHandlers, t as getColbertInstanceUuid, u as resolveExecutable } from "./lifecycle-D-1CYr1Y.js";
+import { i as registerExitHandlers, n as getInstanceUuid, r as recordWorkerRepo, t as WorktreeRegistry } from "./lifecycle-bPdiXjYB.js";
 import { createRequire } from "node:module";
 import consola from "consola";
 import { createHash, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -623,6 +623,13 @@ function normalizeModelId$1(id) {
 *    version pinning (a dated catalog id matched at Step 1) always wins.
 * 6. Return as-is with a warning
 */
+/**
+* `[1m]`-downgrade warnings we've already emitted this process. `resolveModel`
+* is called many times per launch (env setup, model validation, the banner,
+* and — under `serve` — on every model-picker `/models` poll), so the downgrade
+* notice is deduped to once per model id to avoid log spam.
+*/
+const warnedOneMDowngrade = /* @__PURE__ */ new Set();
 function resolveModel(modelId) {
 	const models = state.models?.data;
 	if (!models) return modelId;
@@ -630,7 +637,10 @@ function resolveModel(modelId) {
 	if (oneMMatch) {
 		const stripped = oneMMatch[1];
 		const resolved = resolveModel(stripped);
-		if (!/-1m(?:$|-)/.test(resolved)) consola.warn(`Model "${modelId}" requested 1M context but no -1m backend is in Copilot's catalog for this tier/family; downgrading upstream to "${resolved}" (200K). Claude Code's local context accounting will still assume 1M — expect premature auto-compact. Drop the [1m] suffix (or unset CLAUDE_CODE_DISABLE_1M_CONTEXT if you set it) to silence.`);
+		if (!/-1m(?:$|-)/.test(resolved) && !warnedOneMDowngrade.has(modelId)) {
+			warnedOneMDowngrade.add(modelId);
+			consola.warn(`Model "${modelId}" requested 1M context but no -1m backend is in Copilot's catalog for this tier/family; downgrading upstream to "${resolved}" (200K). Claude Code's local context accounting will still assume 1M — expect premature auto-compact. Drop the [1m] suffix (or unset CLAUDE_CODE_DISABLE_1M_CONTEXT if you set it) to silence.`);
+		}
 		return resolved;
 	}
 	if (models.some((m) => m.id === modelId)) return modelId;
@@ -1145,6 +1155,25 @@ function collapsePathKeys(env) {
 	return env;
 }
 
+//#endregion
+//#region src/lib/mcp-workspace-header.ts
+/** Header the per-session MCP headersHelper emits, carrying the calling Claude
+*  session's working directory. The /mcp handler uses it as the default
+*  `workspace` for repo-scoped tools so a machine-wide `serve` targets the
+*  active repo, not the proxy launch cwd. */
+const MCP_WORKSPACE_HEADER = "X-GH-Workspace";
+/** stdout JSON the headersHelper prints; Claude merges it into the connection
+*  headers. `cwd` is the helper's own process cwd = the session's project dir. */
+function buildWorkspaceHeaderJson(cwd) {
+	return JSON.stringify({ [MCP_WORKSPACE_HEADER]: cwd });
+}
+/** Command string Claude runs as the headersHelper. Mirrors
+*  buildPromptSubmitHookCommand's quoting (src/lib/orchestration/prompt-submit-hook.ts). */
+function buildWorkspaceHeaderHelperCommand(execPath, scriptPath) {
+	const q = (s) => `"${s}"`;
+	return scriptPath && scriptPath !== execPath ? `${q(execPath)} ${q(scriptPath)} internal-workspace-header` : `${q(execPath)} internal-workspace-header`;
+}
+
 //#endregion
 //#region src/lib/insecure-tls.ts
 const IS_BUN$1 = typeof globalThis.Bun !== "undefined";
@@ -12076,6 +12105,14 @@ var TreeSitterPool = class {
 	*  entirely and force the in-process path, rather than churning spawn→crash
 	*  forever. */
 	crashCount = 0;
+	workersSpawned = 0;
+	/** Test-only observability for crash/respawn assertions. */
+	__workerLifecycleForTest() {
+		return {
+			crashes: this.crashCount,
+			spawned: this.workersSpawned
+		};
+	}
 	queue = [];
 	inflight = /* @__PURE__ */ new Map();
 	constructor() {
@@ -12123,6 +12160,7 @@ var TreeSitterPool = class {
 			let worker;
 			try {
 				worker = new Worker(this.workerPath);
+				this.workersSpawned += 1;
 			} catch (err) {
 				consola.debug(`[code_search] tree-sitter worker spawn failed: ${err.message}`);
 				resolve(null);
@@ -12225,8 +12263,14 @@ var TreeSitterPool = class {
 			if (!job) break;
 			pw.busyJobId = job.id;
 			this.inflight.set(job.id, job);
+			const injectCrash = _testCrashOnceArmed;
+			const reqToPost = injectCrash ? {
+				...job.req,
+				testCrash: true
+			} : job.req;
 			try {
-				pw.worker.postMessage(job.req);
+				pw.worker.postMessage(reqToPost);
+				if (injectCrash) _testCrashOnceArmed = false;
 			} catch (err) {
 				consola.debug(`[code_search] tree-sitter worker postMessage failed: ${err.message}`);
 				this.inflight.delete(job.id);
@@ -12398,6 +12442,7 @@ function resolveWorkerPath() {
 }
 let _pool = null;
 let _shutdownRegistered = false;
+let _testCrashOnceArmed = false;
 /**
 * The pool is ON by default for real (non-CI) runs and OFF under CI.
 *
@@ -12650,6 +12695,10 @@ const WALL_TIME_MS = 3e4;
 * comfortable headroom for ~5-10 files even on cold cache.
 */
 const STRUCTURAL_BUDGET_MS = 200;
+let _structuralBudgetTestOverride = null;
+function structuralBudgetMs() {
+	return _structuralBudgetTestOverride ?? STRUCTURAL_BUDGET_MS;
+}
 const STRUCTURAL_TOPN_FULL = 50;
 const STRUCTURAL_TOPN_FAST = 10;
 /**
@@ -13957,7 +14006,7 @@ async function searchCode(rawInput, externalSignal) {
 			})).filter((e) => e.index >= 0),
 			workspaceRoot: ws.canonical,
 			topN,
-			budgetMs: STRUCTURAL_BUDGET_MS,
+			budgetMs: structuralBudgetMs(),
 			signal: ac.signal
 		});
 		structuralOutlines = structural.outlinesByFile;
@@ -15562,6 +15611,7 @@ async function provisionAndIndexColbert(opts = {}) {
 		return;
 	}
 	if (!provisioned) return;
+	if (opts.skipCwdIndex) return;
 	const cwd = opts.cwd ?? process$1.cwd();
 	try {
 		if ((await gitState(cwd)).isRepo && await startupKickAllowed(cwd)) kickBackgroundInit(cwd);
@@ -16881,7 +16931,7 @@ function logAudit$1(record) {
 		try {
 			const fs$2 = await import("node:fs/promises");
 			const path$1 = await import("node:path");
-			const { PATHS: PATHS$1 } = await import("./paths-CDYvyApX.js");
+			const { PATHS: PATHS$1 } = await import("./paths-B5k78n0d.js");
 			const dir = path$1.join(PATHS$1.APP_DIR, "browser-mcp");
 			await fs$2.mkdir(dir, { recursive: true });
 			const line = JSON.stringify({
@@ -24084,9 +24134,9 @@ function jsonPathPreflightCap(body, scope) {
 		const decision = typeof args.decision === "string" ? args.decision : "";
 		const optionsRaw = Array.isArray(args.options) ? args.options : [];
 		const standInContext = typeof args.context === "string" ? args.context : "";
-		if (!decision || optionsRaw.length === 0) return void 0;
+		if (!decision || optionsRaw.length === 0 || !standInContext.trim()) return void 0;
 		const briefBytes$1 = Buffer.byteLength(decision + JSON.stringify(optionsRaw) + standInContext, "utf8");
-		const STAND_IN_CAP_BYTES = 6 * 1024;
+		const STAND_IN_CAP_BYTES = 32 * 1024;
 		if (briefBytes$1 > STAND_IN_CAP_BYTES) return rpcResult(body.id, toolError(`pre-flight rejected: stand_in on a ${briefBytes$1}-byte input is predicted to exceed the JSON tools/call timeout (cap=${STAND_IN_CAP_BYTES} bytes). stand_in runs two sequential voting rounds across three frontier models — wall-clock is typically 2-3 minutes regardless of input size. Send Accept: text/event-stream to use the SSE path which bypasses this cap, or trim the decision/options/context.`));
 		return;
 	}
@@ -24213,7 +24263,13 @@ function logTelemetry(t) {
 	if (t.errorMessage) parts.push(`error=${JSON.stringify(t.errorMessage)}`);
 	process.stderr.write(parts.join(" ") + "\n");
 }
-async function handleToolsCall(body, scope) {
+function toolAcceptsWorkspace(tool$1) {
+	return tool$1.capability === "worker" || tool$1.toolNameHttp === "code" || tool$1.toolNameHttp === "run_workflow";
+}
+function applySessionWorkspace(args, sessionWorkspace, tool$1) {
+	if ((!tool$1 || toolAcceptsWorkspace(tool$1)) && typeof sessionWorkspace === "string" && sessionWorkspace.length > 0 && nodePath.isAbsolute(sessionWorkspace) && (args.workspace === void 0 || args.workspace === "")) args.workspace = sessionWorkspace;
+}
+async function handleToolsCall(body, scope, sessionWorkspace) {
 	const params = body.params ?? {};
 	const name = typeof params.name === "string" ? params.name : "";
 	const args = params.arguments ?? {};
@@ -24276,6 +24332,7 @@ async function handleToolsCall(body, scope) {
 	const telemetryName = persona ? persona.agentName : nonPersonaTool.toolNameHttp;
 	const telemetryModel = persona ? persona.model : "(non-persona)";
 	try {
+		if (nonPersonaTool) applySessionWorkspace(args, sessionWorkspace, nonPersonaTool);
 		const result = persona ? await callPersona(persona, personaPrompt, personaContext, personaEffort, aborter?.signal) : await nonPersonaTool.handler(args, aborter?.signal);
 		logTelemetry({
 			name: telemetryName,
@@ -24321,7 +24378,7 @@ function handleCancelledNotification(body) {
 	}
 	cancelInflight(requestId, "client requested cancellation");
 }
-async function handleRpc(_c, body, scope) {
+async function handleRpc(_c, body, scope, sessionWorkspace) {
 	if (body === null || typeof body !== "object" || Array.isArray(body)) return {
 		status: 200,
 		body: rpcError(null, RPC_INVALID_REQUEST, "jsonrpc 2.0 envelope required")
@@ -24372,7 +24429,7 @@ async function handleRpc(_c, body, scope) {
 			};
 			return {
 				status: 200,
-				body: await handleToolsCall(body, scope)
+				body: await handleToolsCall(body, scope, sessionWorkspace)
 			};
 		case "resources/list":
 			if (isNotification) return {
@@ -24463,17 +24520,18 @@ async function handleMcpPost(c, scopeArg = "all") {
 		consola.debug("/mcp parse error:", err);
 		return c.json(rpcError(null, RPC_PARSE_ERROR, "request body is not valid JSON"), 200);
 	}
+	const sessionWorkspace = c.req.header(MCP_WORKSPACE_HEADER);
 	if (process.env.GH_ROUTER_LOG_PEER_MCP === "1" && typeof body === "object" && body !== null && !Array.isArray(body) && body.method === "tools/call") {
 		const nm = typeof body.params?.name === "string" ? body.params.name : "?";
 		process.stderr.write(`[peer-mcp] recv t=${Date.now()} name=${nm} scope=${scope} inflight=${currentInFlight()}\n`);
 	}
-	if (typeof body === "object" && body !== null && !Array.isArray(body) && body.method === "tools/call" && acceptsEventStream(c.req.header("accept"))) return handleToolsCallSSE(body, scope);
+	if (typeof body === "object" && body !== null && !Array.isArray(body) && body.method === "tools/call" && acceptsEventStream(c.req.header("accept"))) return handleToolsCallSSE(body, scope, sessionWorkspace);
 	if (typeof body === "object" && body !== null && !Array.isArray(body) && body.method === "tools/call") {
 		const preflight = jsonPathPreflightCap(body, scope);
 		if (preflight) return c.json(preflight, 200);
 	}
 	try {
-		const { status, body: respBody } = await handleRpc(c, body, scope);
+		const { status, body: respBody } = await handleRpc(c, body, scope, sessionWorkspace);
 		if (respBody === null) return c.body(null, status);
 		return c.json(respBody, status);
 	} catch (err) {
@@ -24526,9 +24584,9 @@ function acceptsEventStream(accept) {
 * "Invalid state: Controller is already closed" race without warning.
 */
 const SSE_HEARTBEAT_INTERVAL_MS = 5e3;
-async function handleToolsCallSSE(body, scope) {
+async function handleToolsCallSSE(body, scope, sessionWorkspace) {
 	const encoder = new TextEncoder();
-	const callPromise = handleToolsCall(body, scope);
+	const callPromise = handleToolsCall(body, scope, sessionWorkspace);
 	let heartbeatHandle;
 	const stream = new ReadableStream({
 		async start(controller) {
@@ -28039,12 +28097,15 @@ Respond with ONLY a single JSON object — no prose, no markdown fences, no prea
   "choice": "<option.id>" | null,
   "confidence": <number between 0.0 and 1.0>,
   "reasoning": "<one short sentence>",
-  "need_more_info": "<what context is missing, if you cannot decide>"
+  "need_more_info": "<what context is missing, if you cannot decide>",
+  "alternative": "<a concrete unlisted option — ONLY if every provided option is inadequate>"
 }
 
 Calibration rules:
 - "confidence" reflects how sure you are this is the better option (not how confident you are in your prose). 0.5 = coin flip. 0.9 = clear winner. Be honestly calibrated; the orchestrator weighs your number directly.
 - If the question is genuinely under-specified — you'd need information you don't have to choose well — set "choice": null AND populate "need_more_info" with the specific gap. Do NOT guess.
+- The caller curated these options; default to choosing among them. Only if a provided option is actively harmful, or clearly dominated by an obvious unlisted option, set "choice": null AND put that concrete option in "alternative" (one sentence). This is distinct from "need_more_info" (which is about missing context, not a better option). Prefer choosing over proposing — do not invent an alternative to avoid committing.
+- On an abstention, populate at most ONE escape channel: "need_more_info" OR "alternative", never both. If both seem to apply, use "need_more_info" — missing context takes precedence, because you can't reliably judge the options inadequate without it.
 - One sentence of reasoning. Not a paragraph.
 - The other two models will vote independently and you will see their votes in round 2. There is no benefit to anticipating what they'll pick; vote on the merits.
 
@@ -28057,16 +28118,19 @@ Same JSON schema as round 1:
   "choice": "<option.id>" | null,
   "confidence": <number between 0.0 and 1.0>,
   "reasoning": "<one short sentence>",
-  "need_more_info": "<gap, if any>"
+  "need_more_info": "<gap, if any>",
+  "alternative": "<a concrete unlisted option, if every provided option is inadequate>"
 }
 
 Calibration rules:
 - You may keep your round-1 vote OR change it. Do NOT change just to agree — agreement is not the goal, the right answer is. Capitulating to peer pressure when you still believe your original choice is better is a failure mode, not a success.
 - If a peer's reasoning identifies a consideration you missed or weighed wrong, update freely. The blind round was the anti-anchor mechanism; this round is where genuine evidence can move you.
 - If round 1 left you genuinely uncertain and peer reasoning hasn't resolved it, "choice": null is still the honest answer.
+- Keep using "alternative" only when every provided option is inadequate (choice null); it is not a way to dodge a decision the options already support.
+- On an abstention, populate at most ONE escape channel: "need_more_info" OR "alternative", never both. If both seem to apply, use "need_more_info" (missing context takes precedence).
 
 Output ONLY the JSON object.`;
-const RETRY_PROMPT_SUFFIX = `\n\nYour previous response was not valid JSON matching the schema. Respond with ONLY the JSON object — no preamble, no markdown fences, no closing remarks. Schema reminder: {"choice": "<id>" | null, "confidence": 0.0-1.0, "reasoning": "<one sentence>", "need_more_info": "<gap, if any>"}`;
+const RETRY_PROMPT_SUFFIX = `\n\nYour previous response was not valid JSON matching the schema. Respond with ONLY the JSON object — no preamble, no markdown fences, no closing remarks. Schema reminder: {"choice": "<id>" | null, "confidence": 0.0-1.0, "reasoning": "<one sentence>", "need_more_info": "<gap, if any>", "alternative": "<unlisted option, if any>"}`;
 /**
 * Run the two-round stand-in protocol. Returns a structured verdict
 * envelope. Throws only on systemic failure (e.g., all three upstream
@@ -28074,71 +28138,66 @@ const RETRY_PROMPT_SUFFIX = `\n\nYour previous response was not valid JSON match
 * `VoteFailure` entries in the result.
 */
 async function runStandIn(input, signal) {
+	const validIds = new Set(input.options.map((o) => o.id));
 	const r1UserText = buildRound1UserText(input);
-	const r1 = await Promise.all(STAND_IN_MODELS.map((cfg) => callAndParse(cfg, SYSTEM_PROMPT_R1, r1UserText, signal)));
+	const r1 = await Promise.all(STAND_IN_MODELS.map((cfg) => callAndParse(cfg, SYSTEM_PROMPT_R1, r1UserText, validIds, signal)));
 	const successfulR1 = r1.filter((r) => isVote(r.vote));
-	if (successfulR1.length === STAND_IN_MODELS.length && successfulR1.every((r) => r.vote.needMoreInfo && r.vote.choice === null)) {
-		const gaps = successfulR1.map((r) => `- ${r.key}: ${r.vote.needMoreInfo}`).join("\n");
-		return {
-			verdict: "need_more_info",
-			recommendation: null,
-			confidence: 0,
-			votes: voteRecord(r1, null),
-			notes: `All three models reported they need more context to decide:\n${gaps}`
-		};
-	}
+	const nmiR1 = gapAbstainVerdict(successfulR1, r1, null);
+	if (nmiR1) return nmiR1;
 	const r1Decision = aggregateVotes(successfulR1);
-	if (r1Decision.verdict === "consensus" && r1Decision.meanConfidence >= .8) return {
+	if (r1Decision.verdict === "consensus" && r1Decision.meanConfidence >= .8) return withDerivedNotes({
 		verdict: "consensus",
 		recommendation: r1Decision.winner,
 		confidence: round2(r1Decision.meanConfidence),
 		votes: voteRecord(r1, null),
 		notes: `All three models picked ${r1Decision.winner} in round 1 with high confidence (skipped round 2).`
-	};
-	if (successfulR1.length < 2) return {
+	}, r1, null);
+	if (successfulR1.length < 2) return withDerivedNotes({
 		verdict: "no_consensus",
 		recommendation: null,
 		confidence: 0,
 		votes: voteRecord(r1, null),
 		notes: `Only ${successfulR1.length} of 3 models returned a parseable round-1 vote; insufficient signal to run round 2.`
-	};
+	}, r1, null);
 	const r2UserTextBase = buildRound2UserTextBase(input, r1);
-	const r2 = await Promise.all(STAND_IN_MODELS.map((cfg) => callAndParse(cfg, SYSTEM_PROMPT_R2, r2UserTextBase + `\n\nYou are ${cfg.key}. Reconsider and vote.`, signal)));
+	const r2 = await Promise.all(STAND_IN_MODELS.map((cfg) => callAndParse(cfg, SYSTEM_PROMPT_R2, r2UserTextBase + `\n\nYou are ${cfg.key}. Reconsider and vote.`, validIds, signal)));
 	const successfulR2 = r2.filter((r) => isVote(r.vote));
-	if (successfulR2.length < 2) return {
+	if (successfulR2.length < 2) return withDerivedNotes({
 		verdict: "no_consensus",
 		recommendation: null,
 		confidence: 0,
 		votes: voteRecord(r1, r2),
 		notes: `Only ${successfulR2.length} of 3 models returned a parseable round-2 vote; deferring to user.`
-	};
+	}, r1, r2);
+	const nmiR2 = gapAbstainVerdict(successfulR2, r1, r2);
+	if (nmiR2) return nmiR2;
 	const r2Decision = aggregateVotes(successfulR2);
-	if (r2Decision.verdict === "consensus") return {
+	if (r2Decision.verdict === "consensus") return withDerivedNotes({
 		verdict: "consensus",
 		recommendation: r2Decision.winner,
 		confidence: round2(r2Decision.meanConfidence),
 		votes: voteRecord(r1, r2),
 		notes: `All three models picked ${r2Decision.winner} in round 2.`
-	};
+	}, r1, r2);
 	if (r2Decision.verdict === "majority") {
 		const dissenters = successfulR2.filter((r) => r.vote.choice !== r2Decision.winner).map((r) => `${r.key} picked ${r.vote.choice ?? "abstain"} (${r.vote.reasoning})`).join("; ");
-		return {
+		return withDerivedNotes({
 			verdict: "majority",
 			recommendation: r2Decision.winner,
 			confidence: round2(r2Decision.meanConfidence),
 			votes: voteRecord(r1, r2),
 			notes: `Majority (2 of 3) picked ${r2Decision.winner}. Dissent: ${dissenters}.`
-		};
+		}, r1, r2);
 	}
-	return {
+	return withDerivedNotes({
 		verdict: "no_consensus",
 		recommendation: null,
 		confidence: 0,
 		votes: voteRecord(r1, r2),
 		notes: `Models did not converge in round 2 (votes split). Defer to user.`
-	};
+	}, r1, r2);
 }
-async function callAndParse(cfg, instructions, userText, signal) {
+async function callAndParse(cfg, instructions, userText, validIds, signal) {
 	const model = cfg.key === "gpt-5.6-sol" ? resolveOpenAiFrontier() ?? cfg.model : cfg.model;
 	let raw;
 	try {
@@ -28159,7 +28218,7 @@ async function callAndParse(cfg, instructions, userText, signal) {
 			}
 		};
 	}
-	const first = tryParseVote(raw);
+	const first = tryParseVote(raw, validIds);
 	if (first.ok) return {
 		key: cfg.key,
 		vote: first.vote
@@ -28183,7 +28242,7 @@ async function callAndParse(cfg, instructions, userText, signal) {
 			}
 		};
 	}
-	const second = tryParseVote(retryRaw);
+	const second = tryParseVote(retryRaw, validIds);
 	if (second.ok) return {
 		key: cfg.key,
 		vote: second.vote
@@ -28197,7 +28256,7 @@ async function callAndParse(cfg, instructions, userText, signal) {
 		}
 	};
 }
-function tryParseVote(raw) {
+function tryParseVote(raw, validIds) {
 	if (!raw || !raw.trim()) return {
 		ok: false,
 		error: "empty response"
@@ -28225,11 +28284,16 @@ function tryParseVote(raw) {
 		error: "parsed value is not an object"
 	};
 	const obj = parsed;
-	const choice = obj.choice === null ? null : typeof obj.choice === "string" && obj.choice.length > 0 ? obj.choice : void 0;
-	if (choice === void 0) return {
+	const rawChoice = obj.choice === null ? null : typeof obj.choice === "string" && obj.choice.length > 0 ? obj.choice : void 0;
+	if (rawChoice === void 0) return {
 		ok: false,
 		error: "missing or invalid 'choice' field (string or null required)"
 	};
+	if (rawChoice !== null && !validIds.has(rawChoice)) return {
+		ok: false,
+		error: "'choice' must be one of the provided option ids or null"
+	};
+	const choice = rawChoice;
 	const confidenceRaw = obj.confidence;
 	const confidence = typeof confidenceRaw === "number" && Number.isFinite(confidenceRaw) ? Math.max(0, Math.min(1, confidenceRaw)) : void 0;
 	if (confidence === void 0) return {
@@ -28241,13 +28305,15 @@ function tryParseVote(raw) {
 		ok: false,
 		error: "missing or empty 'reasoning' field"
 	};
+	const needMoreInfo = choice === null && typeof obj.need_more_info === "string" && obj.need_more_info.trim().length > 0 ? obj.need_more_info.trim() : void 0;
 	return {
 		ok: true,
 		vote: {
 			choice,
 			confidence,
 			reasoning,
-			needMoreInfo: typeof obj.need_more_info === "string" && obj.need_more_info.length > 0 ? obj.need_more_info : void 0
+			needMoreInfo,
+			alternative: choice === null && !needMoreInfo && typeof obj.alternative === "string" && obj.alternative.trim().length > 0 ? obj.alternative.trim() : void 0
 		}
 	};
 }
@@ -28310,13 +28376,70 @@ function buildRound2UserTextBase(input, r1) {
 	for (const r of r1) if (isVote(r.vote)) {
 		const choiceText = r.vote.choice === null ? "abstain" : r.vote.choice;
 		const gapText = r.vote.needMoreInfo ? ` (needs: ${r.vote.needMoreInfo})` : "";
-		summaries.push(`- ${r.key} picked ${choiceText}, confidence ${r.vote.confidence.toFixed(2)}, reasoning: ${r.vote.reasoning}${gapText}`);
+		const altText = r.vote.alternative ? ` [proposed unlisted alternative: ${r.vote.alternative}]` : "";
+		summaries.push(`- ${r.key} picked ${choiceText}, confidence ${r.vote.confidence.toFixed(2)}, reasoning: ${r.vote.reasoning}${gapText}${altText}`);
 	} else summaries.push(`- ${r.key} did not return a valid round-1 vote (${r.vote.error}).`);
 	return base + "\n" + summaries.join("\n");
 }
 function isVote(v) {
 	return !("error" in v);
 }
+function gapAbstainVerdict(successful, r1, r2) {
+	const gapVotes = successful.filter((r) => r.vote.choice === null && r.vote.needMoreInfo);
+	if (gapVotes.length < 2) return null;
+	const gaps = gapVotes.map((r) => `- ${r.key}: ${r.vote.needMoreInfo}`).join("\n");
+	const header = gapVotes.length === STAND_IN_MODELS.length ? "All three models reported they need more context to decide:" : `${gapVotes.length} of 3 models reported they need more context to decide:`;
+	return withDerivedNotes({
+		verdict: "need_more_info",
+		recommendation: null,
+		confidence: 0,
+		votes: voteRecord(r1, r2),
+		notes: `${header}\n${gaps}`
+	}, r1, r2);
+}
+/**
+* Freshest parsed vote per model (round 2 if it parsed, else round 1) — the
+* basis for deriving alternative / gap notes without double-counting a model
+* across rounds.
+*/
+function freshestVotes(r1, r2) {
+	const out = [];
+	for (const cfg of STAND_IN_MODELS) {
+		const r2Entry = r2?.find((r) => r.key === cfg.key);
+		const r1Entry = r1.find((r) => r.key === cfg.key);
+		const vote = r2Entry && isVote(r2Entry.vote) ? r2Entry.vote : r1Entry && isVote(r1Entry.vote) ? r1Entry.vote : null;
+		if (vote) out.push({
+			key: cfg.key,
+			vote
+		});
+	}
+	return out;
+}
+/**
+* Append derived notes to a verdict WITHOUT touching the verdict / tally:
+*  - panel-proposed unlisted `alternative`s (surfaced on every verdict);
+*  - partial missing-context gaps (surfaced only on no_consensus — the
+*    dedicated need_more_info path already lists its own gaps).
+* Purely additive to `notes`; never changes verdict / recommendation / isError.
+* This is what lets the alternative + partial-gap signals ride along while the
+* abstain and blind-R1 invariants stay untouched.
+*/
+function withDerivedNotes(result, r1, r2) {
+	const fresh = freshestVotes(r1, r2);
+	const extras = [];
+	const alts = fresh.filter((v) => v.vote.alternative);
+	if (alts.length > 0) extras.push("The panel also flagged unlisted option(s):\n" + alts.map((v) => `- ${v.key}: ${v.vote.alternative}`).join("\n"));
+	if (result.verdict === "no_consensus") {
+		const gaps = fresh.filter((v) => v.vote.choice === null && v.vote.needMoreInfo);
+		if (gaps.length > 0) extras.push("Some models cited missing context:\n" + gaps.map((v) => `- ${v.key}: ${v.vote.needMoreInfo}`).join("\n"));
+	}
+	if (extras.length === 0) return result;
+	const notes = [result.notes, ...extras].filter(Boolean).join("\n\n");
+	return {
+		...result,
+		notes
+	};
+}
 function voteRecord(r1, r2) {
 	const record = {};
 	for (const cfg of STAND_IN_MODELS) {
@@ -31289,10 +31412,14 @@ const NON_PERSONA_MCP_TOOLS = Object.freeze([
 		toolNameHttp: "stand_in",
 		group: "decide",
 		capability: "stand_in",
-		description: "Three-lab away-mode decision tiebreak advisor for moments when the user is unavailable and the agent is stuck between two or more concrete options. It polls gpt-5.6-sol, Opus 4.7, and gemini-3.1-pro-preview across blind and informed voting rounds, then returns a ranked-choice verdict such as consensus, majority, no_consensus, or need_more_info. Use when work would otherwise halt on a bounded choice the user would normally make. Not for code review, open-ended exploration, single-model second opinions, or bypassing confirmation on irreversible actions such as push, delete, drop, or deploy; use peer-review-coordinator or the individual critics for review and still ask the user for destructive actions.",
+		description: "Three-lab away-mode decision tiebreak advisor for moments when the user is unavailable and the agent is stuck between two or more concrete options. It polls gpt-5.6-sol, Opus 4.7, and gemini-3.1-pro-preview across blind and informed voting rounds, then returns a ranked-choice verdict such as consensus, majority, no_consensus, or need_more_info. Use when work would otherwise halt on a bounded choice the user would normally make. If every provided option is inadequate, the panel may flag a concrete better unlisted option in `notes` so you can re-invoke with a revised set. The three panel models are cold-start — no repo, transcript, or memory access — and see only your decision, options, and context, so the `context` argument must carry all the background they need to judge. Not for code review, open-ended exploration, single-model second opinions, or bypassing confirmation on irreversible actions such as push, delete, drop, or deploy; use peer-review-coordinator or the individual critics for review and still ask the user for destructive actions.",
 		inputSchema: {
 			type: "object",
-			required: ["decision", "options"],
+			required: [
+				"decision",
+				"options",
+				"context"
+			],
 			additionalProperties: false,
 			properties: {
 				decision: {
@@ -31303,7 +31430,7 @@ const NON_PERSONA_MCP_TOOLS = Object.freeze([
 					type: "array",
 					minItems: 2,
 					maxItems: 6,
-					description: "2-6 concrete options for the panel to vote on. Caller-provided — do NOT ask the panel to generate options. The verdict cites the chosen option by `id`.",
+					description: "2-6 concrete options curated by the caller for the panel to vote on. The panel may surface a gated unlisted alternative in `notes`, but does not replace the caller's option set. The verdict cites the chosen option by `id`.",
 					items: {
 						type: "object",
 						required: ["id", "summary"],
@@ -31326,7 +31453,7 @@ const NON_PERSONA_MCP_TOOLS = Object.freeze([
 				},
 				context: {
 					type: "string",
-					description: "Task / code background that informs the decision. Keep tight — the input is capped at ~6KB total across decision + options + context."
+					description: "REQUIRED. The three panel models are cold-start: no access to your repository, prior transcript, or memory — they see ONLY this decision + options + context. Include everything needed to decide well: the constraints that matter, the relevant code or excerpts, prior decisions not to relitigate, and what a good outcome looks like. Thin context yields a weak verdict. (On the JSON transport a ~32KB size guard applies; the SSE transport has no such limit.)"
 				}
 			}
 		},
@@ -31370,8 +31497,9 @@ function assertMcpToolSurfaceConsistent() {
 /**
 * Shared closure body for the two worker MCP tools. Validates the
 * minimal arg shape (prompt required + optional knobs typed), then
-* forwards to `runWorkerAgent`. `workspace` defaults to the proxy's
-* launch cwd; callers can override via the optional `workspace` arg
+* forwards to `runWorkerAgent`. Outside serve mode, `workspace` defaults
+* to the proxy's launch cwd; serve mode requires an explicit/header-derived
+* workspace. Callers can override via the optional `workspace` arg
 * (absolute paths only — enforced here). The engine performs every
 * deeper validation (model existence, thinking clamp, worktree
 * provisioning, semaphore acquisition, workspace realpath +
@@ -31433,7 +31561,7 @@ async function runWorkerToolCall(call) {
 		};
 		worktree = args.worktree;
 	}
-	let workspace = process.cwd();
+	let workspace;
 	if (args.workspace !== void 0) {
 		if (typeof args.workspace !== "string" || args.workspace.length === 0) return {
 			content: [{
@@ -31450,7 +31578,14 @@ async function runWorkerToolCall(call) {
 			isError: true
 		};
 		workspace = args.workspace;
-	}
+	} else if (state.serveMode) return {
+		content: [{
+			type: "text",
+			text: `worker_${mode}: a workspace is required. This is a machine-wide github-router serve; pass the absolute path of the project you are working in as \`workspace\`.`
+		}],
+		isError: true
+	};
+	else workspace = process.cwd();
 	let maxWallClockMs;
 	let clampNote = "";
 	if (args.maxWallClockMs !== void 0) {
@@ -31663,11 +31798,11 @@ async function runStandInToolCall(args, signal) {
 			detail
 		});
 	}
-	const context = args.context === void 0 ? void 0 : typeof args.context === "string" ? args.context : null;
-	if (context === null) return {
+	const context = typeof args.context === "string" ? args.context : "";
+	if (!context.trim()) return {
 		content: [{
 			type: "text",
-			text: "stand_in: arguments.context must be a string when provided"
+			text: "stand_in: arguments.context is required (non-empty string). The panel is cold-start and sees only decision + options + context; include the constraints, relevant code, and success criteria needed to decide."
 		}],
 		isError: true
 	};
@@ -31681,7 +31816,34 @@ async function runStandInToolCall(args, signal) {
 		text: JSON.stringify(result)
 	}] };
 }
+/**
+* Every exact `mcp__<key>__<tool>` name github-router injects, for the given
+* resolved group keys (`peers`/`search`/… → their collision-resolved mcpServers
+* key). A SUPERSET — it ignores per-tool capability gates because an allow-list
+* entry for a tool that isn't actually served is inert, which keeps it correct
+* as gates change and as tools are added.
+*
+* Used to seed CloudCLI's `localStorage['claude-settings'].allowedTools` so its
+* Agent-SDK `canUseTool` auto-approves our MCP tools in PLAN mode. `canUseTool`
+* does EXACT tool-name matching (no `mcp__<server>` wildcard — see
+* `matchesToolPermission` in CloudCLI's `claude-sdk.js`), so bare `mcp__peers`
+* would NOT cover `mcp__peers__gemini_critic`; the exact names are required.
+* This is the ONLY lever for plan mode: bypass mode skips `canUseTool`, and the
+* mirror `settings.json permissions.allow` is NOT consulted by `canUseTool`
+* (which reads `sdkOptions.allowedTools`, seeded from this localStorage key).
+*/
+function enumerateInjectedMcpToolNames(groupKeys, opts = {}) {
+	const names = [];
+	const peersKey = groupKeys.peers;
+	if (peersKey) for (const p of [...PERSONAS_READ, ...PERSONAS_WRITE]) names.push(`mcp__${peersKey}__${p.toolNameHttp}`);
+	for (const t of NON_PERSONA_MCP_TOOLS) {
+		const key = groupKeys[t.group];
+		if (key) names.push(`mcp__${key}__${t.toolNameHttp}`);
+	}
+	if (opts.codexCli) names.push("mcp__codex-cli__codex");
+	return [...new Set(names)];
+}
 
 //#endregion
-export { isAdvisorRequested as $, cacheCopilotVersion as $t, liveExec as A, provisionBrowserAssets as At, withNoOutputRetry as B, DEFAULT_CODEX_MODEL as Bt, fileReviewDebounce as C, resolveMcpToolTimeoutMs as Ct, stopGateEnabledForRepo as D, MAX_RESPONSE_BODY_BYTES as Dt, repoRoot as E, createChatCompletions as Et, IMPLEMENT_DEFAULT_MODEL as F, shouldUseInsecureTls as Ft, vscodeRipgrepPath as G, generateRandomPort as Gt, buildToolbeltAwareness as H, DEFAULT_PORT as Ht, PLAN_DEFAULT_MODEL as I, ArtifactClient as It, searchWeb as J, withInstallLock as Jt, TOOLBELT_TOOLS$1 as K, pickClaudeDefault as Kt, REVIEW_DEFAULT_MODEL as L, collapsePathKeys as Lt, BROWSE_DEFAULT_MODEL as M, provisionAndIndexColbert as Mt, DEFAULT_MODEL as N, extractTarGzMember as Nt, stopReviewStateDir as O, readResponseBodyCapped as Ot, EXPLORE_DEFAULT_MODEL as P, extractZipMember as Pt, injectAdvisorTool as Q, tryRefreshAndRetry as Qt, appendPlanReminder as R, toolbeltPathOverride as Rt, fileLastPromptStore as S, assembleResponsesPayload as St, repoFingerprint as T, createResponses as Tt, toolbeltEnabled as U, UPSTREAM_FETCH_TIMEOUT_MS as Ut, availableToolCommands as V, DEFAULT_CODEX_MODEL_FALLBACKS as Vt, toolbeltSkipSet as W, UPSTREAM_INACTIVITY_TIMEOUT_MS as Wt, ADVISOR_TOOL_INSTRUCTIONS as X, setupGitHubAgentToken as Xt, ADVISOR_INTERNAL_TOOL_NAME as Y, setupCopilotToken as Yt, buildAdvisorStream as Z, setupGitHubToken as Zt, stopGateId as _, workerToolsEnabled as _t, buildPeerAwarenessSnippet as a, resolveModel as an, relayAnthropicStream as at, fileBaselineStore as b, createMessages as bt, buildArtifactOpenHookCommand as c, fetchWithTransientRetry as cn, agentToolsEnabled as ct, captureLaunchBaseline as d, GITHUB_API_BASE_URL as dn, browserCompoundToolsEnabled as dt, cacheModels as en, buildAnthropicErrorEvent as et, decideStopHook as f, copilotBaseUrl as fn, browserToolsEnabled as ft, stopGateDisabled as g, standInToolEnabled as gt, launchBaselineKey as h, state as hn, nativeSubagentModel as ht, buildAgentPrompt as i, resolveCodexModel as in, readIteratorWithTimeout as it, resolveSealedGate as j, hasSupportedBrowserInstalled as jt, trustRepo as k, parseJsonOrDiagnose as kt, buildSessionBindHookCommand as l, HTTPError as ln, artifactToolsEnabled as lt, injectStopHookIntoSettingsFile as m, githubHeaders as mn, geminiAvailable as mt, MCP_GROUPS as n, filterBetaHeader as nn, isControllerClosedError as nt, buildPeerAwarenessSummary as o, sleep as on, handleMcpDelete as ot, fileBlockBudget as p, copilotHeaders as pn, fleetToolsEnabled as pt, assetFor as q, getPackageVersion as qt, assertMcpToolSurfaceConsistent as r, isNullish as rn, logStreamError as rt, personasFor as s, getModels as sn, handleMcpPost as st, GROUP_META as t, cacheVSCodeVersion as tn, buildOpenAIErrorEvent as tt, buildStopHookCommand as u, forwardError as un, browseAgentEnabled as ut, stopGatePlanMode as v, shimDefaultsToXhigh as vt, isSubagentContext as w, pickEndpoint as wt, fileFindingsStore as x, getTokenCount as xt, stopReviewEnabled as y, countTokens as yt, runWorkerAgent as z, DEFAULT_CLAUDE_MODEL_FALLBACKS as zt };
-//# sourceMappingURL=peer-mcp-personas-BtQi-dF-.js.map
+export { buildAdvisorStream as $, setupCopilotToken as $t, trustRepo as A, readResponseBodyCapped as At, runWorkerAgent as B, buildWorkspaceHeaderJson as Bt, fileLastPromptStore as C, getTokenCount as Ct, repoRoot as D, createResponses as Dt, repoFingerprint as E, pickEndpoint as Et, EXPLORE_DEFAULT_MODEL as F, extractTarGzMember as Ft, toolbeltEnabled as G, DEFAULT_CODEX_MODEL_FALLBACKS as Gt, buildEnv as H, toolbeltPathOverride as Ht, IMPLEMENT_DEFAULT_MODEL as I, extractZipMember as It, TOOLBELT_TOOLS$1 as J, UPSTREAM_INACTIVITY_TIMEOUT_MS as Jt, toolbeltSkipSet as K, DEFAULT_PORT as Kt, PLAN_DEFAULT_MODEL as L, shouldUseInsecureTls as Lt, resolveSealedGate as M, provisionBrowserAssets as Mt, BROWSE_DEFAULT_MODEL as N, hasSupportedBrowserInstalled as Nt, stopGateEnabledForRepo as O, createChatCompletions as Ot, DEFAULT_MODEL as P, provisionAndIndexColbert as Pt, ADVISOR_TOOL_INSTRUCTIONS as Q, withInstallLock as Qt, REVIEW_DEFAULT_MODEL as R, ArtifactClient as Rt, fileFindingsStore as S, createMessages as St, isSubagentContext as T, resolveMcpToolTimeoutMs as Tt, availableToolCommands as U, DEFAULT_CLAUDE_MODEL_FALLBACKS as Ut, withNoOutputRetry as V, collapsePathKeys as Vt, buildToolbeltAwareness as W, DEFAULT_CODEX_MODEL as Wt, searchWeb as X, pickClaudeDefault as Xt, assetFor as Y, generateRandomPort as Yt, ADVISOR_INTERNAL_TOOL_NAME as Z, getPackageVersion as Zt, stopGateDisabled as _, copilotBaseUrl as _n, nativeSubagentModel as _t, buildPeerAwarenessSnippet as a, cacheVSCodeVersion as an, logStreamError as at, stopReviewEnabled as b, state as bn, shimDefaultsToXhigh as bt, personasFor as c, resolveCodexModel as cn, handleMcpDelete as ct, buildStopHookCommand as d, getModels as dn, artifactToolsEnabled as dt, setupGitHubAgentToken as en, injectAdvisorTool as et, captureLaunchBaseline as f, getGitHubUser as fn, browseAgentEnabled as ft, launchBaselineKey as g, GITHUB_API_BASE_URL as gn, geminiAvailable as gt, injectStopHookIntoSettingsFile as h, forwardError as hn, fleetToolsEnabled as ht, buildAgentPrompt as i, cacheModels as in, isControllerClosedError as it, liveExec as j, parseJsonOrDiagnose as jt, stopReviewStateDir as k, MAX_RESPONSE_BODY_BYTES as kt, buildArtifactOpenHookCommand as l, resolveModel as ln, handleMcpPost as lt, fileBlockBudget as m, HTTPError as mn, browserToolsEnabled as mt, MCP_GROUPS as n, tryRefreshAndRetry as nn, buildAnthropicErrorEvent as nt, buildPeerAwarenessSummary as o, filterBetaHeader as on, readIteratorWithTimeout as ot, decideStopHook as p, fetchWithTransientRetry as pn, browserCompoundToolsEnabled as pt, vscodeRipgrepPath as q, UPSTREAM_FETCH_TIMEOUT_MS as qt, assertMcpToolSurfaceConsistent as r, cacheCopilotVersion as rn, buildOpenAIErrorEvent as rt, enumerateInjectedMcpToolNames as s, isNullish as sn, relayAnthropicStream as st, GROUP_META as t, setupGitHubToken as tn, isAdvisorRequested as tt, buildSessionBindHookCommand as u, sleep as un, agentToolsEnabled as ut, stopGateId as v, copilotHeaders as vn, standInToolEnabled as vt, fileReviewDebounce as w, assembleResponsesPayload as wt, fileBaselineStore as x, countTokens as xt, stopGatePlanMode as y, githubHeaders as yn, workerToolsEnabled as yt, appendPlanReminder as z, buildWorkspaceHeaderHelperCommand as zt };
+//# sourceMappingURL=peer-mcp-personas-rik0SIrg.js.map