github-router 0.3.297 → 0.3.303

package/dist/hooks.mjs

@@ -10919,50 +10919,148 @@ var init_harness_parse = __esmMin((() => {
 	init_exec();
 	init_gate_registry();
 	STATIC_IDS = /* @__PURE__ */ new Set(["typecheck", "lint"]);
+}));
+//#endregion
+//#region src/lib/state.ts
+var DEFAULT_LAUNCH_ID, state;
+var init_state = __esmMin((() => {
+	DEFAULT_LAUNCH_ID = "__default__";
+	state = {
+		accountType: "enterprise",
+		copilotTokenGeneration: 0,
+		manualApprove: false,
+		rateLimitWait: false,
+		showToken: false,
+		extendedBetas: false,
+		browseEnabled: false,
+		fleetEnabled: false,
+		agentsEnabled: false,
+		powerBrowseEnabled: false,
+		humanlikeForce: "auto",
+		sessionId: randomUUID(),
+		machineId: randomBytes(32).toString("hex"),
+		launchRegistry: /* @__PURE__ */ new Map()
+	};
+	Object.defineProperty(state, "peerMcpNonce", {
+		enumerable: true,
+		configurable: true,
+		get() {
+			return state.launchRegistry.get(DEFAULT_LAUNCH_ID)?.nonce;
+		},
+		set(value) {
+			if (value === void 0) {
+				state.launchRegistry.delete(DEFAULT_LAUNCH_ID);
+				return;
+			}
+			const existing = state.launchRegistry.get(DEFAULT_LAUNCH_ID);
+			state.launchRegistry.set(DEFAULT_LAUNCH_ID, {
+				launchId: DEFAULT_LAUNCH_ID,
+				nonce: value,
+				secret: existing?.secret ?? "",
+				profileId: existing?.profileId ?? "standard",
+				allowedGroups: existing?.allowedGroups,
+				allowedPersonas: existing?.allowedPersonas,
+				createdAt: existing?.createdAt ?? Date.now()
+			});
+		}
+	});
 })), FAST_PROFILE_MODELS, FAST_PROFILE_NATIVE_AGENT_NAMES, FAST_PROFILE_ADVISOR_MODEL, FAST_PROFILE_DELEGATION_GRAPH;
 var init_fast_profile_contract = __esmMin((() => {
 	FAST_PROFILE_MODELS = Object.freeze({
 		luna: "gpt-5.6-luna",
+		sol: "gpt-5.6-sol",
+		gemini: "gemini-3.7-flash",
+		grok: "grok-4.6",
+		opus: "claude-opus-5",
+		explore: "gpt-5.6-luna",
+		plan: "gpt-5.6-sol",
+		"general-purpose": "gpt-5.6-luna",
+		implementer: "gemini-3.7-flash",
 		reviewer: "grok-4.6",
-		planner: "gpt-5.6-sol",
-		critic: "gemini-3.7-flash",
+		advisor: "gemini-3.7-flash",
 		oracle: "claude-opus-5"
 	});
 	FAST_PROFILE_NATIVE_AGENT_NAMES = [
 		"Explore",
+		"Plan",
+		"general-purpose",
 		"implementer",
-		"reviewer",
-		"planner",
-		"critic"
+		"reviewer"
 	];
 	Object.freeze({
 		Explore: FAST_PROFILE_MODELS.luna,
-		implementer: FAST_PROFILE_MODELS.luna,
-		reviewer: FAST_PROFILE_MODELS.reviewer,
-		planner: FAST_PROFILE_MODELS.planner,
-		critic: FAST_PROFILE_MODELS.critic
+		Plan: FAST_PROFILE_MODELS.sol,
+		"general-purpose": FAST_PROFILE_MODELS.luna,
+		implementer: FAST_PROFILE_MODELS.gemini,
+		reviewer: FAST_PROFILE_MODELS.reviewer
 	});
 	Object.freeze({
 		Explore: "high",
-		implementer: "max",
-		reviewer: "medium",
-		planner: "high",
-		critic: "medium"
+		Plan: "high",
+		"general-purpose": "max",
+		implementer: "high",
+		reviewer: "medium"
 	});
-	FAST_PROFILE_ADVISOR_MODEL = FAST_PROFILE_MODELS.critic;
+	FAST_PROFILE_ADVISOR_MODEL = FAST_PROFILE_MODELS.advisor;
 	`${FAST_PROFILE_ADVISOR_MODEL}`;
 	FAST_PROFILE_MODELS.oracle;
 	FAST_PROFILE_DELEGATION_GRAPH = Object.freeze({
 		Explore: Object.freeze([]),
-		implementer: Object.freeze(["reviewer", "critic"]),
-		reviewer: Object.freeze([]),
-		planner: Object.freeze([
-			"reviewer",
-			"Explore",
-			"critic"
-		]),
-		critic: Object.freeze([])
+		Plan: Object.freeze(["Explore", "reviewer"]),
+		"general-purpose": Object.freeze(["reviewer"]),
+		implementer: Object.freeze(["reviewer"]),
+		reviewer: Object.freeze([])
+	});
+})), MAX_PROFILE_MODELS, MAX_PROFILE_NATIVE_AGENT_NAMES, MAX_PROFILE_NATIVE_MODELS;
+var init_max_profile_contract = __esmMin((() => {
+	init_state();
+	MAX_PROFILE_MODELS = Object.freeze({
+		sol: "gpt-5.6-sol",
+		luna: "gpt-5.6-luna",
+		gemini: "gemini-3.7-flash",
+		grok: "grok-4.6",
+		opus: "claude-opus-5"
+	});
+	MAX_PROFILE_NATIVE_AGENT_NAMES = [
+		"Explore",
+		"Plan",
+		"general-purpose",
+		"implementer",
+		"reviewer",
+		"brainstorm",
+		"peer-review-coordinator"
+	];
+	Object.freeze({
+		Explore: "high",
+		Plan: "high",
+		"general-purpose": "max",
+		implementer: "high",
+		reviewer: "high",
+		brainstorm: "medium",
+		"peer-review-coordinator": "max"
+	});
+	MAX_PROFILE_NATIVE_MODELS = Object.freeze({
+		Explore: MAX_PROFILE_MODELS.luna,
+		Plan: MAX_PROFILE_MODELS.sol,
+		"general-purpose": MAX_PROFILE_MODELS.luna,
+		implementer: MAX_PROFILE_MODELS.gemini,
+		reviewer: MAX_PROFILE_MODELS.grok,
+		brainstorm: MAX_PROFILE_MODELS.grok,
+		"peer-review-coordinator": MAX_PROFILE_MODELS.luna
 	});
+	MAX_PROFILE_MODELS.sol;
+	MAX_PROFILE_MODELS.opus;
+	Object.freeze([
+		MAX_PROFILE_MODELS.luna,
+		MAX_PROFILE_MODELS.gemini,
+		MAX_PROFILE_MODELS.grok
+	]);
+	Object.freeze([
+		MAX_PROFILE_MODELS.sol,
+		MAX_PROFILE_MODELS.luna,
+		MAX_PROFILE_MODELS.gemini,
+		MAX_PROFILE_MODELS.opus
+	]);
 }));
 //#endregion
 //#region node_modules/undici/lib/core/symbols.js
@@ -37773,7 +37871,7 @@ var internal_first_mate_guard_exports = /* @__PURE__ */ __exportAll({
 	buildFirstMateGuardHookCommand: () => buildFirstMateGuardHookCommand,
 	internalFirstMateGuard: () => internalFirstMateGuard
 });
-function readStdinSync$1() {
+function readStdinSync$2() {
 	try {
 		return readFileSync(0, "utf8");
 	} catch {
@@ -37799,7 +37897,7 @@ var init_internal_first_mate_guard = __esmMin((() => {
 			let hookInput;
 			let parsed;
 			try {
-				const payload = JSON.parse(readStdinSync$1());
+				const payload = JSON.parse(readStdinSync$2());
 				if (typeof payload.tool_name === "string") toolName = payload.tool_name;
 				if (typeof payload.agent_type === "string") hookInput = { agent_type: payload.agent_type };
 				parsed = true;
@@ -37932,7 +38030,7 @@ function deny(reason, target, caller) {
 * ordinary-tool hook therefore passes through, while a recognized Task/Agent
 * dispatch fails closed on malformed input or identity.
 */
-function decideFastDispatchGuard(stdin) {
+function decideFastDispatchGuard(stdin, opts) {
 	let parsed;
 	try {
 		parsed = typeof stdin === "string" ? JSON.parse(stdin) : stdin;
@@ -37948,13 +38046,19 @@ function decideFastDispatchGuard(stdin) {
 		verdict: "allow-non-dispatch"
 	};
 	if (!payload.tool_input || typeof payload.tool_input !== "object" || Array.isArray(payload.tool_input)) return deny(`fast dispatch denied: ${toolName} payload has malformed tool_input`);
-	const targetResult = resolveAliasedString(payload.tool_input, ["subagent_type", "subagentType"]);
+	const toolInput = payload.tool_input;
+	for (const field of CONTINUATION_FIELDS) if (hasOwn(toolInput, field)) {
+		const val = toolInput[field];
+		if (val !== void 0 && val !== null && val !== false) return deny(`fast dispatch denied: ${toolName} continuation/reattachment (${field}) is not permitted in fast profile`);
+	}
+	const targetResult = resolveAliasedString(toolInput, ["subagent_type", "subagentType"]);
 	if (targetResult.malformed) return deny(`fast dispatch denied: ${toolName} target identity is malformed`);
 	if (targetResult.conflict) return deny(`fast dispatch denied: ${toolName} target aliases conflict`);
 	const targetValue = targetResult.value;
-	if (!targetValue || !FAST_NATIVE_AGENT_SET.has(targetValue)) return deny(`fast dispatch denied: ${toolName} target must be one of ${FAST_NATIVE_AGENT_NAMES.join(", ")}`);
+	const effectiveAllowedTargets = opts?.allowedTargets ? new Set(opts.allowedTargets) : /* @__PURE__ */ new Set([...FAST_NATIVE_AGENT_NAMES, ...opts?.allowBrowse ? [FAST_BROWSE_DISPATCH_AGENT] : []]);
+	if (!targetValue || !effectiveAllowedTargets.has(targetValue)) return deny(`fast dispatch denied: ${toolName} target must be one of ${[...effectiveAllowedTargets].join(", ")}`);
 	const target = targetValue;
-	const updatedInput = { ...payload.tool_input };
+	const updatedInput = { ...toolInput };
 	delete updatedInput.model;
 	const callerType = resolveAliasedString(payload, ["agent_type", "agentType"]);
 	const callerId = resolveAliasedString(payload, ["agent_id", "agentId"]);
@@ -37982,9 +38086,9 @@ function decideFastDispatchGuard(stdin) {
 			verdict: "allow"
 		};
 	}
-	if (!FAST_NATIVE_AGENT_SET.has(callerTypeValue)) return deny(`fast dispatch denied: unknown caller role ${JSON.stringify(callerTypeValue)}`, target);
+	if (!(/* @__PURE__ */ new Set([...FAST_NATIVE_AGENT_NAMES, "worker-browse"])).has(callerTypeValue)) return deny(`fast dispatch denied: unknown caller role ${JSON.stringify(callerTypeValue)}`, target);
 	const caller = callerTypeValue;
-	if (!FAST_DISPATCH_GRAPH[caller].has(target)) return deny(`fast dispatch denied: ${caller} cannot invoke ${target}`, target, caller);
+	if (!(FAST_DISPATCH_GRAPH[caller] ?? /* @__PURE__ */ new Set()).has(target)) return deny(`fast dispatch denied: ${caller} cannot invoke ${target}`, target, caller);
 	return {
 		allowed: true,
 		caller,
@@ -38009,18 +38113,44 @@ function fastDispatchDenyOutput(reason) {
 		permissionDecisionReason: reason
 	} });
 }
-var FAST_NATIVE_AGENT_NAMES, FAST_NATIVE_AGENT_SET, FAST_DISPATCH_GRAPH;
+var FAST_BROWSE_DISPATCH_AGENT, FAST_NATIVE_AGENT_NAMES, FAST_DISPATCH_GRAPH, CONTINUATION_FIELDS;
 var init_fast_dispatch_acl = __esmMin((() => {
 	init_fast_profile_contract();
+	FAST_BROWSE_DISPATCH_AGENT = "worker-browse";
 	FAST_NATIVE_AGENT_NAMES = FAST_PROFILE_NATIVE_AGENT_NAMES;
-	FAST_NATIVE_AGENT_SET = new Set(FAST_NATIVE_AGENT_NAMES);
+	new Set(FAST_NATIVE_AGENT_NAMES);
 	FAST_DISPATCH_GRAPH = Object.freeze({
 		Explore: new Set(FAST_PROFILE_DELEGATION_GRAPH.Explore),
+		Plan: new Set(FAST_PROFILE_DELEGATION_GRAPH.Plan),
+		"general-purpose": new Set(FAST_PROFILE_DELEGATION_GRAPH["general-purpose"]),
 		implementer: new Set(FAST_PROFILE_DELEGATION_GRAPH.implementer),
 		reviewer: new Set(FAST_PROFILE_DELEGATION_GRAPH.reviewer),
-		planner: new Set(FAST_PROFILE_DELEGATION_GRAPH.planner),
-		critic: new Set(FAST_PROFILE_DELEGATION_GRAPH.critic)
+		"worker-browse": /* @__PURE__ */ new Set([])
 	});
+	CONTINUATION_FIELDS = [
+		"resume",
+		"resume_session",
+		"resumeSession",
+		"resume_agent_id",
+		"resumeAgentId",
+		"continuation",
+		"continue",
+		"continue_session",
+		"continueSession",
+		"agent_id",
+		"agentId",
+		"session_id",
+		"sessionId",
+		"thread_id",
+		"threadId",
+		"task_id",
+		"taskId",
+		"target_agent_id",
+		"targetAgentId",
+		"reattach",
+		"reattach_session",
+		"reattachSession"
+	];
 }));
 //#endregion
 //#region src/internal-fast-dispatch-guard.ts
@@ -38028,7 +38158,7 @@ var internal_fast_dispatch_guard_exports = /* @__PURE__ */ __exportAll({
 	buildFastDispatchGuardHookCommand: () => buildFastDispatchGuardHookCommand,
 	internalFastDispatchGuard: () => internalFastDispatchGuard
 });
-function readStdinSync() {
+function readStdinSync$1() {
 	try {
 		if (process.stdin.isTTY) return "";
 		return readFileSync(0, "utf8");
@@ -38037,8 +38167,11 @@ function readStdinSync() {
 	}
 }
 /** Build the persisted command for the fast-profile PreToolUse hook. */
-function buildFastDispatchGuardHookCommand(invocation) {
-	return buildSelfCommand(invocation, "internal-fast-dispatch-guard");
+function buildFastDispatchGuardHookCommand(invocation, opts) {
+	const flags = [];
+	if (opts?.allowBrowse) flags.push("--allowBrowse");
+	if (opts?.allowedTargets && opts.allowedTargets.length > 0) flags.push(`--allowedTargets "${opts.allowedTargets.join(",")}"`);
+	return buildSelfCommand(invocation, ["internal-fast-dispatch-guard", ...flags].join(" "));
 }
 var internalFastDispatchGuard;
 var init_internal_fast_dispatch_guard = __esmMin((() => {
@@ -38050,8 +38183,24 @@ var init_internal_fast_dispatch_guard = __esmMin((() => {
 			name: "internal-fast-dispatch-guard",
 			description: "Internal: PreToolUse guard enforcing the fast-profile native Task/Agent ACL."
 		},
-		run() {
-			const decision = decideFastDispatchGuard(readStdinSync());
+		args: {
+			allowBrowse: {
+				type: "boolean",
+				description: "Whether worker-browse is allowed as a target.",
+				default: false
+			},
+			allowedTargets: {
+				type: "string",
+				description: "Comma-separated list of allowed target subagents."
+			}
+		},
+		run({ args }) {
+			const allowedTargets = args.allowedTargets ? args.allowedTargets.split(",").map((s) => s.trim()).filter(Boolean) : void 0;
+			const allowBrowse = args.allowBrowse === true || (allowedTargets ? allowedTargets.includes("worker-browse") : false);
+			const decision = decideFastDispatchGuard(readStdinSync$1(), {
+				allowedTargets,
+				allowBrowse
+			});
 			if (!decision.allowed && decision.reason) process.stdout.write(fastDispatchDenyOutput(decision.reason));
 			else if (decision.verdict === "allow" && decision.updatedInput) process.stdout.write(fastDispatchAllowOutput(decision.updatedInput));
 			process.exitCode = 0;
@@ -38059,6 +38208,209 @@ var init_internal_fast_dispatch_guard = __esmMin((() => {
 	});
 }));
 //#endregion
+//#region src/lib/max-dispatch-acl.ts
+function isMaxAgentSchemaModelAlias(model) {
+	if (typeof model !== "string") return false;
+	return MAX_AGENT_SCHEMA_MODEL_ALIAS_SET.has(baseModel(model.trim()).toLowerCase());
+}
+function stringField(input, ...keys) {
+	const values = keys.filter((key) => Object.prototype.hasOwnProperty.call(input, key)).map((key) => input[key]).filter((value) => value !== void 0 && value !== null);
+	if (values.length === 0) return void 0;
+	if (values.some((value) => typeof value !== "string" || value.trim().length === 0)) return void 0;
+	const distinct = [...new Set(values.map((value) => value.trim()))];
+	return distinct.length === 1 ? distinct[0] : void 0;
+}
+function baseModel(model) {
+	return model.replace(/(?:\[1m\])+$/i, "");
+}
+function normalizeMaxDispatchModel(model) {
+	if (typeof model !== "string" || model.trim().length === 0) return void 0;
+	const base = baseModel(model.trim());
+	return MAX_ALLOWED_MODEL_BASES.has(base) ? base === "grok-4.6" ? base : `${base}[1m]` : void 0;
+}
+function normalizeMaxDispatchEffort(model, effort) {
+	if (effort === void 0 || effort === null) return void 0;
+	if (typeof effort !== "string") return void 0;
+	if ((model === "gpt-5.6-sol" ? [
+		"high",
+		"xhigh",
+		"max"
+	] : model === "gpt-5.6-luna" ? [
+		"none",
+		"low",
+		"medium",
+		"high",
+		"xhigh",
+		"max"
+	] : model === "grok-4.6" || model === "gemini-3.7-flash" ? [
+		"low",
+		"medium",
+		"high"
+	] : []).includes(effort)) return effort;
+}
+/**
+* Native max Task/Agent ACL. Role frontmatter owns the fixed model. Required
+* public-schema aliases are stripped as transport placeholders; a client that
+* can express custom ids may override only to Luna, Gemini, or Grok with a
+* live-ladder effort. Sol/Codex/unknown/private ids are rejected. The lead may
+* target any emitted max role; role-to-role edges are unrestricted here.
+*/
+function decideMaxDispatchGuard(stdin, opts = {}) {
+	let parsed;
+	try {
+		parsed = typeof stdin === "string" ? JSON.parse(stdin) : stdin;
+	} catch {
+		return {
+			allowed: false,
+			reason: "max dispatch denied: malformed hook payload",
+			verdict: "deny"
+		};
+	}
+	if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return {
+		allowed: false,
+		reason: "max dispatch denied: hook payload must be an object",
+		verdict: "deny"
+	};
+	const payload = parsed;
+	if (typeof payload.tool_name !== "string") return {
+		allowed: false,
+		reason: "max dispatch denied: hook payload has no tool_name",
+		verdict: "deny"
+	};
+	if (!/^(Task|Agent)$/.test(payload.tool_name)) return {
+		allowed: true,
+		verdict: "allow-non-dispatch"
+	};
+	if (!payload.tool_input || typeof payload.tool_input !== "object" || Array.isArray(payload.tool_input)) return {
+		allowed: false,
+		reason: `max dispatch denied: ${payload.tool_name} payload has malformed tool_input`,
+		verdict: "deny"
+	};
+	const toolInput = payload.tool_input;
+	const target = stringField(toolInput, "subagent_type", "subagentType");
+	if (!target || !MAX_NATIVE_AGENT_SET.has(target)) return {
+		allowed: false,
+		reason: `max dispatch denied: target must be one of ${[...MAX_PROFILE_NATIVE_AGENT_NAMES, MAX_BROWSE_DISPATCH_AGENT].join(", ")}`,
+		verdict: "deny"
+	};
+	const nativeTarget = target;
+	const modelValue = toolInput.model;
+	const schemaAlias = isMaxAgentSchemaModelAlias(modelValue);
+	const normalizedModel = modelValue === void 0 || schemaAlias ? void 0 : normalizeMaxDispatchModel(modelValue);
+	if (modelValue !== void 0 && !schemaAlias && !normalizedModel) return {
+		allowed: false,
+		reason: "max dispatch denied: model must be a Claude Code Agent schema alias, Luna[1m], Gemini 3.7 Flash[1m], or bare Grok 4.6",
+		target,
+		verdict: "deny"
+	};
+	const requestedEffort = toolInput.thinking ?? toolInput.effort;
+	const effort = normalizeMaxDispatchEffort(normalizedModel ? baseModel(normalizedModel) : nativeTarget === "worker-browse" ? "gpt-5.6-luna" : nativeTarget === "reviewer" && opts.reviewerModel ? baseModel(opts.reviewerModel) : MAX_PROFILE_NATIVE_MODELS[nativeTarget], requestedEffort);
+	if ((toolInput.thinking !== void 0 || toolInput.effort !== void 0) && !effort) return {
+		allowed: false,
+		reason: "max dispatch denied: reasoning override is not supported by the selected model",
+		target,
+		verdict: "deny"
+	};
+	const effectiveEffort = (nativeTarget === "reviewer" && !normalizedModel && opts.reviewerModel ? opts.reviewerEffort ?? (baseModel(opts.reviewerModel) === "gpt-5.6-luna" ? "max" : "high") : void 0) ?? effort;
+	const updatedInput = { ...toolInput };
+	if (normalizedModel) updatedInput.model = normalizedModel;
+	else delete updatedInput.model;
+	if (effectiveEffort) if (toolInput.thinking !== void 0) updatedInput.thinking = effectiveEffort;
+	else updatedInput.effort = effectiveEffort;
+	if (toolInput.thinking !== void 0 && toolInput.effort !== void 0) delete updatedInput.effort;
+	if (toolInput.model === void 0 && normalizedModel === void 0) delete updatedInput.model;
+	return {
+		allowed: true,
+		target,
+		effort: effectiveEffort,
+		updatedInput,
+		verdict: "allow"
+	};
+}
+function maxDispatchAllowOutput(updatedInput) {
+	return JSON.stringify({ hookSpecificOutput: {
+		hookEventName: "PreToolUse",
+		permissionDecision: "allow",
+		updatedInput
+	} });
+}
+function maxDispatchDenyOutput(reason) {
+	return JSON.stringify({ hookSpecificOutput: {
+		hookEventName: "PreToolUse",
+		permissionDecision: "deny",
+		permissionDecisionReason: reason
+	} });
+}
+var MAX_BROWSE_DISPATCH_AGENT, MAX_NATIVE_AGENT_SET, MAX_ALLOWED_MODEL_BASES, MAX_AGENT_SCHEMA_MODEL_ALIASES, MAX_AGENT_SCHEMA_MODEL_ALIAS_SET;
+var init_max_dispatch_acl = __esmMin((() => {
+	init_max_profile_contract();
+	MAX_BROWSE_DISPATCH_AGENT = "worker-browse";
+	MAX_NATIVE_AGENT_SET = /* @__PURE__ */ new Set([...MAX_PROFILE_NATIVE_AGENT_NAMES, MAX_BROWSE_DISPATCH_AGENT]);
+	MAX_ALLOWED_MODEL_BASES = /* @__PURE__ */ new Set([
+		"gpt-5.6-luna",
+		"gemini-3.7-flash",
+		"grok-4.6"
+	]);
+	MAX_AGENT_SCHEMA_MODEL_ALIASES = Object.freeze([
+		"sonnet",
+		"opus",
+		"haiku",
+		"fable"
+	]);
+	MAX_AGENT_SCHEMA_MODEL_ALIAS_SET = new Set(MAX_AGENT_SCHEMA_MODEL_ALIASES);
+}));
+//#endregion
+//#region src/internal-max-dispatch-guard.ts
+var internal_max_dispatch_guard_exports = /* @__PURE__ */ __exportAll({
+	buildMaxDispatchGuardHookCommand: () => buildMaxDispatchGuardHookCommand,
+	internalMaxDispatchGuard: () => internalMaxDispatchGuard
+});
+function readStdinSync() {
+	try {
+		if (process.stdin.isTTY) return "";
+		return readFileSync(0, "utf8");
+	} catch {
+		return "";
+	}
+}
+function buildMaxDispatchGuardHookCommand(invocation, opts = {}) {
+	const flags = [];
+	if (opts.reviewerModel) flags.push(`--reviewerModel "${opts.reviewerModel}"`);
+	if (opts.reviewerEffort) flags.push(`--reviewerEffort ${opts.reviewerEffort}`);
+	return buildSelfCommand(invocation, ["internal-max-dispatch-guard", ...flags].join(" "));
+}
+var internalMaxDispatchGuard;
+var init_internal_max_dispatch_guard = __esmMin((() => {
+	init_dist$1();
+	init_max_dispatch_acl();
+	init_self_invocation();
+	internalMaxDispatchGuard = defineCommand({
+		meta: {
+			name: "internal-max-dispatch-guard",
+			description: "Internal: PreToolUse guard enforcing the max-profile native Task/Agent policy."
+		},
+		args: {
+			reviewerModel: {
+				type: "string",
+				description: "Catalog-resolved Max reviewer model for this launch."
+			},
+			reviewerEffort: {
+				type: "string",
+				description: "Fixed Max reviewer effort for this launch."
+			}
+		},
+		run({ args }) {
+			const decision = decideMaxDispatchGuard(readStdinSync(), {
+				reviewerModel: args.reviewerModel,
+				reviewerEffort: args.reviewerEffort === "max" ? "max" : "high"
+			});
+			if (!decision.allowed && decision.reason) process.stdout.write(maxDispatchDenyOutput(decision.reason));
+			else if (decision.verdict === "allow" && decision.updatedInput) process.stdout.write(maxDispatchAllowOutput(decision.updatedInput));
+			process.exitCode = 0;
+		}
+	});
+}));
+//#endregion
 //#region src/hooks.ts
 init_dist$1();
 init_dist();
@@ -38088,7 +38440,8 @@ await runMain(defineCommand({
 		"internal-artifact-open": () => Promise.resolve().then(() => (init_internal_artifact_open(), internal_artifact_open_exports)).then((m) => m.internalArtifactOpen),
 		"internal-first-mate-guard": () => Promise.resolve().then(() => (init_internal_first_mate_guard(), internal_first_mate_guard_exports)).then((m) => m.internalFirstMateGuard),
 		"internal-worker-guard": () => Promise.resolve().then(() => (init_internal_worker_guard(), internal_worker_guard_exports)).then((m) => m.internalWorkerGuard),
-		"internal-fast-dispatch-guard": () => Promise.resolve().then(() => (init_internal_fast_dispatch_guard(), internal_fast_dispatch_guard_exports)).then((m) => m.internalFastDispatchGuard)
+		"internal-fast-dispatch-guard": () => Promise.resolve().then(() => (init_internal_fast_dispatch_guard(), internal_fast_dispatch_guard_exports)).then((m) => m.internalFastDispatchGuard),
+		"internal-max-dispatch-guard": () => Promise.resolve().then(() => (init_internal_max_dispatch_guard(), internal_max_dispatch_guard_exports)).then((m) => m.internalMaxDispatchGuard)
 	}
 }), { rawArgs: argv });
 //#endregion

package/dist/hooks.sha256

@@ -1 +1 @@
-c04dc9bea5da9812a46182da6c555cbfac40b3fb549aa28f16046ca72f2ecd36
+d50ce1714ea8a0b817f63de404f710f29c3bb7956f90a7b0aa765917648abd00

package/dist/{internal-artifact-open-D6tKMg8v.js → internal-artifact-open-DRSxShAW.js}

@@ -1,5 +1,5 @@
 import { t as ArtifactClient } from "./client-CQMfroGV.js";
-import { a as isSubagentContext } from "./stop-gate-policy-DMr3KVmw.js";
+import { a as isSubagentContext } from "./stop-gate-policy-zhzRIj6G.js";
 import { defineCommand } from "citty";
 import { readFileSync, realpathSync, writeFileSync } from "node:fs";
 import path from "node:path";
@@ -316,4 +316,4 @@ const internalArtifactOpen = defineCommand({
 //#endregion
 export { internalArtifactOpen };
 
-//# sourceMappingURL=internal-artifact-open-D6tKMg8v.js.map
+//# sourceMappingURL=internal-artifact-open-DRSxShAW.js.map