github-router 0.3.293 → 0.3.297

package/dist/{attribution-settings-Dx8TBPE8.js → attribution-settings-B70GmZ68.js}

@@ -1,10 +1,10 @@
-import { Cn as withOneMSuffix, Sn as oneMContextDisabled, a as buildAgentPrompt, en as CONDENSED_OPERATING_SEQUENCE, l as personasFor, n as MCP_GROUPS, t as GROUP_META, tn as DEFINITION_OF_GREATNESS } from "./peer-mcp-personas-DhI7ZPSx.js";
-import { a as isUnderClaudeConfigMirror, d as writeRuntimeFileSecure, t as PATHS } from "./paths-BH4J7slC.js";
-import { f as LUNA_IMPLEMENTER_ALIAS_ID, p as LUNA_SCOUT_ALIAS_ID } from "./server-setup-DbvbW5Ve.js";
-import "./self-invocation-DhO1Z8iD.js";
-import { a as STRIPPED_AUTH_ROUTING_ENV_KEYS, n as buildCodexProviderConfigFlags } from "./provision-CZJ4EWls.js";
-import { n as buildWorkspaceHeaderHelperCommand } from "./mcp-workspace-header-q34H_4wL.js";
-import { a as dispatcherAgentName, c as dispatcherTools, n as activeDispatchModes, o as dispatcherDescription, s as dispatcherPrompt } from "./worker-dispatch-D5fGroNr.js";
+import { Ft as LUNA_IMPLEMENTER_ALIAS_ID, Lt as LUNA_SCOUT_ALIAS_ID, Mt as FAST_CRITIC_ALIAS_ID, Rn as oneMContextDisabled, _n as CONDENSED_OPERATING_SEQUENCE, a as buildAgentPrompt, l as personasFor, n as MCP_GROUPS, t as GROUP_META, vn as DEFINITION_OF_GREATNESS, zn as withOneMSuffix } from "./peer-mcp-personas-ce6_YMnX.js";
+import { a as isUnderClaudeConfigMirror, d as writeRuntimeFileSecure, t as PATHS } from "./paths-Ci485qSJ.js";
+import { o as FAST_PROFILE_NATIVE_AGENT_NAMES } from "./fast-profile-contract-K3P58nj3.js";
+import "./self-invocation-DAB_od0C.js";
+import { a as STRIPPED_AUTH_ROUTING_ENV_KEYS, n as buildCodexProviderConfigFlags } from "./provision-BhCtm3md.js";
+import { n as buildWorkspaceHeaderHelperCommand } from "./mcp-workspace-header-dERl2YTT.js";
+import { a as dispatcherAgentName, c as dispatcherTools, n as activeDispatchModes, o as dispatcherDescription, s as dispatcherPrompt } from "./worker-dispatch-BEHkTbnH.js";
 import consola from "consola";
 import path from "node:path";
 import { randomBytes } from "node:crypto";
@@ -225,7 +225,7 @@ function readOnlyToolSteer() {
 	return "Use Read to read files and Grep/Glob plus the semantic code search tool to find them; Bash is for read-only inspection such as git log, git blame, and git show. Do not modify any file, and do not run mutating commands.";
 }
 /**
-* `tools:` allowlist for the read-only natives (`scout`, `brainstorm`), modelled
+* `tools:` allowlist for read-only natives (`scout`, fast `Explore`, `brainstorm`), modelled
 * on Claude Code's own `Explore`/`Plan` built-ins, which run with every tool
 * EXCEPT Agent / Artifact / ExitPlanMode / Edit / Write / NotebookEdit — note
 * that Anthropic's own read-only agent keeps Bash, which is what makes `git log`
@@ -280,27 +280,43 @@ function buildFastProfileAgentDefinitions(opts) {
 	const implementerModel = nonEmptyModel(opts.nativeSubagentModel);
 	const reviewerModel = nonEmptyModel(opts.reviewerModel);
 	const plannerModel = nonEmptyModel(opts.plannerModel);
-	if (!scoutModel || !implementerModel || !reviewerModel || !plannerModel) throw new Error("fast profile requires resolved scout, implementer, reviewer, and planner models");
+	const criticModel = nonEmptyModel(opts.criticModel);
+	if (!scoutModel || !implementerModel || !reviewerModel || !plannerModel || !criticModel) throw new Error("fast profile requires resolved Explore, implementer, reviewer, planner, and critic models");
 	const searchKey = opts.groupKeys.search ?? GROUP_META.search.preferredKey;
 	const peersKey = peersKeyOf(opts.groupKeys);
 	const searchMcp = opts.serverUrl ? { mcpServers: { [searchKey]: httpEntryFor(opts.serverUrl, "search", opts.nonce, opts.workspaceHeaderCmd) } } : {};
 	const peersMcp = opts.serverUrl && opts.groupKeys.peers ? { mcpServers: { [peersKey]: httpEntryFor(opts.serverUrl, "peers", opts.nonce, opts.workspaceHeaderCmd) } } : {};
 	const oracleTool = opts.groupKeys.peers ? `mcp__${peersKey}__oracle` : void 0;
-	const readOnlyTools = readOnlyToolAllowlist(searchKey);
-	const consultTools = oracleTool ? [...readOnlyTools, oracleTool] : readOnlyTools;
+	const readSearchTools = [
+		"Read",
+		"Grep",
+		"Glob",
+		"Bash"
+	];
+	const scoutTools = [...readSearchTools, `mcp__${searchKey}__*`];
+	const reviewerTools = [...scoutTools, ...oracleTool ? [oracleTool] : []];
+	const plannerTools = [
+		...readSearchTools,
+		"WebFetch",
+		"WebSearch",
+		`mcp__${searchKey}__*`,
+		...oracleTool ? [oracleTool] : [],
+		"Agent"
+	];
 	const reviewerPrompt = "You are the fast profile's repository-aware reviewer. Verify what is actually true by reading the code and running the relevant build, tests, or end-to-end reproduction. Find root causes rather than symptoms. Do not modify production code. Report severity-ranked findings with `file:line` evidence and a clear go/no-go. You do not have Advisor; independently reach your verdict from repository evidence. Use Oracle only as a last resort for one precise unresolved question after your own investigation. " + fileToolSteer("builds and reproductions") + " Do not spawn further agents.";
+	const criticPrompt = "You are the fast profile's fresh-context cross-lab critic. Assess the supplied plan, design, diff, or decision against its stated constraints. Look for overlooked failure modes, unsupported assumptions, and simpler safer alternatives. Do not modify files, run mutating commands, or spawn agents. Return concise severity-ranked findings with `file:line` evidence where applicable. " + readOnlyToolSteer();
 	const out = {
-		scout: {
+		Explore: {
 			description: `Read-only exploration subagent running ${scoutModel}. Use for broad repository discovery before the lead drafts a plan; return conclusions with file:line evidence, not file dumps.`,
 			prompt: "Investigate the repository read-only. Cast a wide net, then return a concise evidence packet for the lead: conclusions, load-bearing `file:line` citations, commands checked, and explicit gaps. Do not plan, edit, or spawn agents. " + readOnlyToolSteer(),
-			tools: readOnlyTools,
+			tools: scoutTools,
 			model: decorateGuaranteedOneM(LUNA_SCOUT_ALIAS_ID),
 			effort: opts.scoutEffort ?? "high",
 			...searchMcp
 		},
 		implementer: {
 			description: `Implementation subagent running ${implementerModel}. Use for well-specified mechanical changes after the plan is approved; implement and verify end to end in its own context.`,
-			prompt: "Implement the approved, well-specified change surgically. Match surrounding style, minimize unrelated churn, use dedicated file tools, and run the relevant build/tests. Do not redesign the plan or spawn more agents. Report changes, verification, and unresolved risk. " + fileToolSteer("builds"),
+			prompt: "Implement the approved, well-specified change surgically. Match surrounding style, minimize unrelated churn, use dedicated file tools, and run the relevant build/tests. For verification, you may invoke only the fast-profile `reviewer` or `critic` native subagent; do not invoke any other role or redesign the plan. Report changes, verification, and unresolved risk. " + fileToolSteer("builds"),
 			model: decorateGuaranteedOneM(LUNA_IMPLEMENTER_ALIAS_ID),
 			effort: opts.implementerEffort ?? "max"
 		},
@@ -309,12 +325,24 @@ function buildFastProfileAgentDefinitions(opts) {
 			prompt: reviewerPrompt,
 			model: reviewerModel,
 			effort: opts.reviewerEffort ?? "medium",
-			...peersMcp
+			tools: reviewerTools,
+			mcpServers: {
+				...searchMcp.mcpServers ?? {},
+				...peersMcp.mcpServers ?? {}
+			}
+		},
+		critic: {
+			description: `Fresh-context cross-lab critic running ${criticModel} at medium effort. Use to challenge a plan, design, diff, or decision against its stated constraints and expose overlooked failure modes.`,
+			prompt: criticPrompt,
+			model: decorateGuaranteedOneM(FAST_CRITIC_ALIAS_ID),
+			effort: opts.criticEffort ?? "medium",
+			tools: scoutTools,
+			...searchMcp
 		},
 		planner: {
 			description: `Plan consultant and approver running ${plannerModel}. Invoke only after Luna has done the repository legwork and drafted a plan; pass a handcrafted evidence packet and the complete draft. The lead must not implement until this agent returns APPROVE.`,
-			prompt: "You are the fast profile's final plan consultant and approver, not a first-pass planner. The caller must provide the user goal, acceptance criteria, repository/domain constraints, Luna's `file:line` and command/test evidence, the complete draft plan, settled decisions, and one focused review question. Selectively verify disputed citations or narrow evidence gaps with read/search tools, but do not repeat broad discovery, edit files, or execute the plan. Return exactly one leading verdict: `APPROVE`, `REVISE`, or `NEED_MORE_CONTEXT`. APPROVE only when the plan is safe, ordered, complete, and verifiable. REVISE must give concrete corrections. NEED_MORE_CONTEXT must name the exact evidence Luna should collect. You do not have Advisor; independently reach your verdict from the evidence packet and selective verification. Use Oracle only as a last resort for one precise unresolved question after your own review. Do not spawn further agents. " + readOnlyToolSteer(),
-			tools: consultTools,
+			prompt: "You are the fast profile's final plan consultant and approver, not a first-pass planner. The caller must provide the user goal, acceptance criteria, repository/domain constraints, Luna's `file:line` and command/test evidence, the complete draft plan, settled decisions, and one focused review question. Selectively verify disputed citations or narrow evidence gaps with read/search tools, but do not repeat broad discovery, edit files, or execute the plan. Return exactly one leading verdict: `APPROVE`, `REVISE`, or `NEED_MORE_CONTEXT`. APPROVE only when the plan is safe, ordered, complete, and verifiable. REVISE must give concrete corrections. NEED_MORE_CONTEXT must name the exact evidence Luna should collect. You do not have Advisor; independently reach your verdict from the evidence packet and selective verification. Use Oracle only as a last resort for one precise unresolved question after your own review. The Task/Agent capability is restricted by the fast in-session ACL: you may invoke only `reviewer`, `Explore`, or `critic`; do not invoke any other role. Bash is for evidence commands only; this is not a shell sandbox. " + readOnlyToolSteer(),
+			tools: plannerTools,
 			model: decorateGuaranteedOneM(plannerModel),
 			effort: opts.plannerEffort ?? "high",
 			mcpServers: {
@@ -323,7 +351,7 @@ function buildFastProfileAgentDefinitions(opts) {
 			}
 		}
 	};
-	const roster = opts.nativeRoster == null ? void 0 : opts.nativeRoster instanceof Set ? opts.nativeRoster : new Set(opts.nativeRoster);
+	const roster = opts.nativeRoster == null ? new Set(FAST_PROFILE_NATIVE_AGENT_NAMES) : opts.nativeRoster instanceof Set ? opts.nativeRoster : new Set(opts.nativeRoster);
 	if (roster) {
 		for (const name of Object.keys(out)) if (!roster.has(name)) delete out[name];
 	}
@@ -789,6 +817,8 @@ async function writePeerMcpRuntimeFiles(serverUrl, opts) {
 		implementerEffort: opts.implementerEffort,
 		reviewerEffort: opts.reviewerEffort,
 		plannerEffort: opts.plannerEffort,
+		criticModel: opts.criticModel,
+		criticEffort: opts.criticEffort,
 		nonce,
 		codexHome,
 		serverUrl,
@@ -796,15 +826,24 @@ async function writePeerMcpRuntimeFiles(serverUrl, opts) {
 	});
 	await fs.unlink(mcpConfigPath).catch(() => {});
 	await fs.unlink(agentsPath).catch(() => {});
-	await writeRuntimeFileSecure(mcpConfigPath, JSON.stringify(mcpConfig, null, 2));
-	await writeRuntimeFileSecure(agentsPath, JSON.stringify(agents, null, 2));
-	const mdResult = await writePeerAgentMdFiles(opts.builtinSubagents ? {
-		...agents,
-		...opts.builtinSubagents
-	} : agents, {
-		agentsDir: opts.agentsDir,
-		fileSuffix
-	});
+	let mdResult;
+	try {
+		await writeRuntimeFileSecure(mcpConfigPath, JSON.stringify(mcpConfig, null, 2));
+		await writeRuntimeFileSecure(agentsPath, JSON.stringify(agents, null, 2));
+		mdResult = await writePeerAgentMdFiles(opts.builtinSubagents ? {
+			...agents,
+			...opts.builtinSubagents
+		} : agents, {
+			agentsDir: opts.agentsDir,
+			fileSuffix
+		});
+	} catch (err) {
+		if (mdResult) await mdResult.cleanup().catch(() => {});
+		await Promise.allSettled([fs.unlink(mcpConfigPath), fs.unlink(agentsPath)]);
+		throw err;
+	}
+	const completeMdResult = mdResult;
+	if (!completeMdResult) throw new Error("peer MCP agent files were not generated");
 	const personas = opts.fastProfile ? [] : personasFor({
 		codexCli: opts.codexCli,
 		geminiAvailable: opts.geminiAvailable,
@@ -815,13 +854,13 @@ async function writePeerMcpRuntimeFiles(serverUrl, opts) {
 		await Promise.allSettled([
 			fs.unlink(mcpConfigPath),
 			fs.unlink(agentsPath),
-			mdResult.cleanup()
+			completeMdResult.cleanup()
 		]);
 	};
 	return {
 		mcpConfigPath,
 		agentsPath,
-		agentMdPaths: mdResult.paths,
+		agentMdPaths: completeMdResult.paths,
 		nonce,
 		personas,
 		cleanup
@@ -1880,10 +1919,11 @@ function joinClauses(parts) {
 *  tier; reserve `reviewer` for the higher-stakes assessment it is there for. */
 function buildNativeReachClauses(opts) {
 	if (opts.profile === "fast") return joinClauses([
-		"`scout` to find or understand something in the repo",
+		"`Explore` to find or understand something in the repo",
 		"`implementer` for approved mechanical coding changes",
 		"`reviewer` for repository-aware verification, reproduction, and root-causing",
-		"`planner` as the Sol plan consultant and approver after Luna has drafted with evidence"
+		"`planner` as the Sol plan consultant and approver after Luna has drafted with evidence",
+		"`critic` for a fresh-context cross-lab challenge to a plan, design, diff, or decision"
 	]);
 	const clauses = [];
 	const implementerFast = opts.implementerFastAvailable !== false;
@@ -2476,4 +2516,4 @@ async function injectAttributionSuppressionIntoSettingsFile(settingsPath) {
 //#endregion
 export { injectPeerMcpIntoMirror as _, appendPeerAwarenessToMirroredClaudeMd as a, workersKeyOf as b, prependArtifactPanelDirectiveToMirroredClaudeMd as c, SEAMLESS_BUILTIN_TOOLS as d, configureServeDefaultPermissionMode as f, BUILTIN_SUBAGENT_DEFINITIONS as g, sanitizeServeSettingsEnv as h, OPERATING_DEFAULTS_DIGEST as i, prependOperatingDefaultsToMirroredClaudeMd as l, planModeAllowRules as m, INJECTED_SKILLS as n, appendToolbeltAwarenessToMirroredClaudeMd as o, injectAllowRules as p, writeInjectedSkill as r, buildOperatingDefaultsDirective as s, injectAttributionSuppressionIntoSettingsFile as t, prependStyleDirectiveToMirroredClaudeMd as u, resolveCodexCliBackend as v, writePeerMcpRuntimeFiles as x, resolveGroupKeysFromMirror as y };
 
-//# sourceMappingURL=attribution-settings-Dx8TBPE8.js.map
+//# sourceMappingURL=attribution-settings-B70GmZ68.js.map