@seanmars/tospec 0.23.0 → 0.26.0-beta

package/dist/commands/config.js

@@ -1,15 +1,17 @@
-import { spawn } from 'node:child_process';
+import crossSpawn from 'cross-spawn';
+import { splitCommandLine } from '../utils/command-line.js';
 import * as fs from 'node:fs';
 import * as path from 'node:path';
-import { getGlobalConfigPath, getEffectiveConfigPath, getGlobalConfig, saveGlobalConfig, } from '../core/global-config.js';
+import { getGlobalConfigPath, getGlobalConfig, getStoredGlobalConfig, getStoredGlobalConfigFields, saveGlobalConfig, assertGlobalConfigReadable, assertGlobalConfigWritable, } from '../core/global-config.js';
 import * as yaml from 'yaml';
-import { getNestedValue, setNestedValue, deleteNestedValue, coerceValue, validateConfigKeyPath, hasUnsafeKeySegment, validateConfig, DEFAULT_CONFIG, } from '../core/config-schema.js';
+import { getNestedValue, setNestedValue, deleteNestedValue, coerceValue, validateConfigKeyPath, hasUnsafeKeySegment, validateConfig, findInvalidConfigFields, } from '../core/config-schema.js';
 import { ALL_WORKFLOWS, getProfileWorkflows } from '../core/profiles.js';
-import { describeWorkflowReferenceGaps, findWorkflowReferenceGaps, } from '../core/shared/skill-generation.js';
+import { closeWorkflowReferences, describeWorkflowReferenceGaps, findWorkflowReferenceGaps, } from '../core/shared/skill-generation.js';
 import { TOSPEC_DIR_NAME } from '../core/config.js';
 import { stripBom } from '../core/parsers/requirement-text.js';
 import { UpdateCommand } from '../core/update.js';
-import { isPromptCancellationError, asErrorMessage, CliAbortError, emitSuccess, emitFailureStatus, } from './shared-output.js';
+import { isInteractive } from '../utils/interactive.js';
+import { isPromptCancellationError, asErrorMessage, CliAbortError, emitSuccess, emitFailureStatus, formatLabeled, } from './shared-output.js';
 /**
  * The `--json` null-shapes, one per subcommand, keyed by the data key each
  * success payload carries. Shared by the commander-level failure table in
@@ -106,6 +108,41 @@ function ignoredWorkflowsDiagnostic(config) {
         fix: 'Run "tospec config profile custom" to apply it, or "tospec config unset workflows" to drop it.',
     };
 }
+/**
+ * The fix for a `custom` profile with no workflows list. The `set` example is
+ * the reference closure, not a fixed few ids: the old `explore,grill,propose`
+ * named siblings it left out, so following it drew
+ * `config_workflow_reference_missing` on the next `config list`. Seeded with
+ * `explore`, the entry point the old example started from; the closure decides
+ * the rest.
+ */
+function workflowsListFix() {
+    const example = closeWorkflowReferences(['explore']).join(',');
+    return [
+        'Run "tospec config profile core" to install every workflow, or pick a subset with "tospec config profile".',
+        `To set the list directly: tospec config set workflows "${example}"`,
+    ].join('\n');
+}
+/**
+ * The finding that the `custom` profile has no workflows to install, or null.
+ * `config profile custom` refuses that state, but `set` and `unset` are raw
+ * writes and stay permissive — so they have to say what the write means, or
+ * the next `init` / `update` installs zero skills unannounced. Any write that
+ * can reach the state checks it: `set profile custom`, `set workflows ""` and
+ * `unset workflows` alike.
+ */
+function profileNeedsWorkflowsDiagnostic(config) {
+    if (config.profile !== 'custom')
+        return null;
+    if (config.workflows && config.workflows.length > 0)
+        return null;
+    return {
+        severity: 'warning',
+        code: 'config_profile_needs_workflows',
+        message: 'Profile "custom" needs a workflows list, and none is configured, so init and update install no skills.',
+        fix: workflowsListFix(),
+    };
+}
 /**
  * The finding that the selected workflows' own instructions name workflows the
  * selection leaves out, or null. Raised here as well as at install time because
@@ -171,21 +208,14 @@ export function diffProfileState(before, after) {
     };
 }
 /**
- * The config file's raw contents, only to tell an explicit value from a default —
+ * Whether the loaded profile came from the file rather than the defaults —
  * `getGlobalConfig()` has merged the two. Reads the file actually loaded, not
- * the write target: the two differ until a legacy install migrates.
+ * the write target: the two differ until a legacy install migrates. A file
+ * with an invalid field is ignored whole, so nothing in it counts.
  */
-function rawGlobalConfig() {
-    try {
-        const configPath = getEffectiveConfigPath();
-        if (fs.existsSync(configPath)) {
-            return JSON.parse(stripBom(fs.readFileSync(configPath, 'utf-8')));
-        }
-    }
-    catch {
-        // Unreadable: treat every value as a default rather than fail a listing.
-    }
-    return {};
+function isProfileExplicit() {
+    const stored = getStoredGlobalConfigFields();
+    return findInvalidConfigFields(stored).length === 0 && stored.profile !== undefined;
 }
 /**
  * The workflows a profile resolves to — `core` expands to the full set, any
@@ -209,14 +239,16 @@ export function registerConfigCommand(program) {
         const opts = thisCommand.opts();
         if (opts.scope && opts.scope !== 'global') {
             const message = 'Project-local config is not yet implemented';
+            const fix = 'Omit --scope, or pass --scope global.';
             // The subcommand's --json, not the parent's: `config --scope project
             // get x --json` used to abort with nothing on stdout, so an agent saw
             // exit 1 and no document at all.
             if (actionCommand.opts().json) {
-                emitFailureStatus(CONFIG_FAILURE_PAYLOADS[actionCommand.name()] ?? CONFIG_SCOPE_FAILURE_PAYLOAD, { severity: 'error', code: 'config_scope_unsupported', message, fix: 'Omit --scope, or pass --scope global.' });
+                emitFailureStatus(CONFIG_FAILURE_PAYLOADS[actionCommand.name()] ?? CONFIG_SCOPE_FAILURE_PAYLOAD, { severity: 'error', code: 'config_scope_unsupported', message, fix });
             }
             else {
                 console.error(`Error: ${message}`);
+                console.error(`Fix: ${fix}`);
             }
             // Not `process.exit(1)`: exiting here kills the process before stderr
             // has flushed.
@@ -245,7 +277,6 @@ export function registerConfigCommand(program) {
             // `config set --allow-unknown` writes any top-level key, so spreading
             // lets user data shadow the envelope's reserved fields (`version`,
             // `root`, `status`).
-            // tospec/decisions/20260916_121544-config-list-json-nests-under-config-key.md
             //
             // `profileSettings` mirrors the human branch below, the only other place
             // saying which workflows `profile: "core"` resolves to.
@@ -257,14 +288,13 @@ export function registerConfigCommand(program) {
                 config,
                 profileSettings: {
                     profile: config.profile ?? 'core',
-                    explicit: rawGlobalConfig().profile !== undefined,
+                    explicit: isProfileExplicit(),
                     workflows: resolveListedWorkflows(config),
                 },
                 ...(listStatus.length ? { status: listStatus } : {}),
             });
         }
         else {
-            const rawConfig = rawGlobalConfig();
             console.log(yaml.stringify(config).trimEnd());
             // The dump above is the stored config, so under a profile that ignores
             // `workflows` it and the resolved list below are two different answers
@@ -273,7 +303,7 @@ export function registerConfigCommand(program) {
             if (ignored) {
                 console.log(`  ^ ${ignored.message}`);
             }
-            const profileSource = rawConfig.profile !== undefined ? '(explicit)' : '(default)';
+            const profileSource = isProfileExplicit() ? '(explicit)' : '(default)';
             console.log(`\nProfile settings:`);
             console.log(`  profile: ${config.profile} ${profileSource}`);
             const workflows = resolveListedWorkflows(config);
@@ -286,14 +316,14 @@ export function registerConfigCommand(program) {
             }
             if (ignored?.fix) {
                 console.log();
-                console.log(ignored.fix);
+                console.log(`Fix: ${ignored.fix}`);
             }
             const referenceGap = workflowReferenceDiagnostic(config);
             if (referenceGap) {
                 console.log();
                 console.log(`Warning: ${referenceGap.message}`);
                 if (referenceGap.fix)
-                    console.log(referenceGap.fix);
+                    console.log(`Fix: ${referenceGap.fix}`);
             }
         }
     });
@@ -325,28 +355,24 @@ export function registerConfigCommand(program) {
                 return;
             }
             console.error(`Error: Invalid configuration key "${key}".${reason}`);
-            for (const line of fixLines)
-                console.error(line);
+            console.error(formatLabeled('Fix', fixLines.join('\n')));
             process.exitCode = 1;
             return;
         }
         const config = getGlobalConfig();
         const value = getNestedValue(config, key);
         if (value === undefined) {
+            // `workflows` is a list, so the generic `<value>` placeholder hides the
+            // one thing a caller needs: the comma-separated form.
+            const fix = key === 'workflows'
+                ? workflowsListFix()
+                : `tospec config set ${key} <value>`;
             if (options.json) {
-                emitFailureStatus({ get: null }, {
-                    severity: 'error',
-                    code: 'config_error',
-                    message: `Key "${key}" is not set.`,
-                    // `workflows` is a list, so the generic `<value>` placeholder
-                    // hides the one thing a caller needs: the comma-separated form.
-                    fix: key === 'workflows'
-                        ? `tospec config set workflows "${ALL_WORKFLOWS.slice(0, 3).join(',')}"`
-                        : `tospec config set ${key} <value>`,
-                });
+                emitFailureStatus({ get: null }, { severity: 'error', code: 'config_error', message: `Key "${key}" is not set.`, fix });
                 return;
             }
             console.error(`Error: Key "${key}" is not set.`);
+            console.error(formatLabeled('Fix', fix));
             process.exitCode = 1;
             return;
         }
@@ -376,10 +402,9 @@ export function registerConfigCommand(program) {
                 emitFailureStatus(CONFIG_FAILURE_PAYLOADS.set, { severity: 'error', code: 'config_error', message, ...(fix ? { fix } : {}) });
                 return;
             }
-            console.error(`Error: ${message}`);
+            console.error(formatLabeled('Error', message));
             if (fix)
-                for (const line of fix.split('\n'))
-                    console.error(line);
+                console.error(formatLabeled('Fix', fix));
             process.exitCode = 1;
         };
         const allowUnknown = Boolean(options.allowUnknown);
@@ -396,14 +421,22 @@ export function registerConfigCommand(program) {
             fail(`Invalid configuration key "${key}".${reason}`, fixLines.join('\n'));
             return;
         }
-        const config = getGlobalConfig();
-        const coercedValue = coerceValue(value, options.string || false, key);
+        const rootKey = key.split('.')[0];
+        assertGlobalConfigWritable([rootKey]);
+        const config = getStoredGlobalConfig();
+        const parsedValue = coerceValue(value, options.string || false, key);
+        // A repeated id installs nothing extra, but `config list` and the profile
+        // summary would count it twice. Dropped rather than refused, as `init
+        // --tools` drops a repeated tool: what `explore,explore` asks for is clear.
+        const coercedValue = key === 'workflows' && Array.isArray(parsedValue) ? [...new Set(parsedValue)] : parsedValue;
         // Validate a copy before touching the config that is saved.
         const newConfig = JSON.parse(JSON.stringify(config));
         setNestedValue(newConfig, key, coercedValue);
-        const validation = validateConfig(newConfig);
-        if (!validation.success) {
-            fail(`Invalid configuration - ${validation.error}`);
+        // This key's refusals only: when the write repairs one of two invalid
+        // fields, the other still fails, and that is not about this value.
+        const refused = findInvalidConfigFields(newConfig).filter((entry) => entry.field === rootKey);
+        if (refused.length > 0) {
+            fail(`Invalid configuration - ${refused.map((entry) => entry.detail).join('; ')}`);
             return;
         }
         // The schema types `workflows` as string[], so a misspelled id passes it
@@ -422,14 +455,16 @@ export function registerConfigCommand(program) {
         // discards it. Said alongside the confirmation, not instead of it: the
         // value genuinely was stored, it is just not what `update` acts on.
         const profile = config.profile ?? 'core';
-        const workflowsIgnored = key === 'workflows' && profile !== 'custom';
-        // The mirror image: `config profile custom` refuses without a list, but
-        // `set` is the raw write and stays permissive — so it has to say what
-        // that write means, or the next `init` installs zero skills unannounced.
-        const storedWorkflows = config.workflows;
-        const profileNeedsWorkflows = key === 'profile' &&
-            coercedValue === 'custom' &&
-            (!storedWorkflows || storedWorkflows.length === 0);
+        // An empty list is no list, the same rule `ignoredWorkflowsDiagnostic`
+        // applies, so there is nothing to call unused.
+        const workflowsIgnored = key === 'workflows' &&
+            profile !== 'custom' &&
+            !(Array.isArray(coercedValue) && coercedValue.length === 0);
+        // Keyed on the written root, so an unrelated `set` under an already
+        // empty custom profile does not repeat the warning on every write.
+        const profileNeedsWorkflows = rootKey === 'profile' || rootKey === 'workflows'
+            ? profileNeedsWorkflowsDiagnostic(config)
+            : null;
         const warnings = [];
         if (workflowsIgnored) {
             warnings.push({
@@ -439,14 +474,8 @@ export function registerConfigCommand(program) {
                 fix: 'Run "tospec config profile custom" to make it take effect.',
             });
         }
-        if (profileNeedsWorkflows) {
-            warnings.push({
-                severity: 'warning',
-                code: 'config_profile_needs_workflows',
-                message: 'Profile "custom" needs a workflows list, and none is configured, so init and update install no skills.',
-                fix: `tospec config set workflows "${ALL_WORKFLOWS.slice(0, 3).join(',')}"`,
-            });
-        }
+        if (profileNeedsWorkflows)
+            warnings.push(profileNeedsWorkflows);
         if (options.json) {
             emitSuccess({
                 set: { key, value: coercedValue },
@@ -454,12 +483,18 @@ export function registerConfigCommand(program) {
             });
             return;
         }
-        const displayValue = typeof coercedValue === 'string' ? `"${coercedValue}"` : String(coercedValue);
+        // `String([])` is empty, which reads as a missing value; `(none)` is
+        // what `config list` prints for the same empty list.
+        const displayValue = typeof coercedValue === 'string'
+            ? `"${coercedValue}"`
+            : Array.isArray(coercedValue) && coercedValue.length === 0
+                ? '(none)'
+                : String(coercedValue);
         console.log(`Set ${key} = ${displayValue}`);
         for (const warning of warnings) {
             console.error(`Warning: ${warning.message}`);
             if (warning.fix)
-                console.error(warning.fix);
+                console.error(formatLabeled('Fix', warning.fix));
         }
     });
     configCmd
@@ -467,17 +502,49 @@ export function registerConfigCommand(program) {
         .description('Remove a key (revert to default)')
         .option('--json', 'Output as JSON')
         .action((key, options) => {
-        const config = getGlobalConfig();
+        assertGlobalConfigReadable();
+        const config = getStoredGlobalConfig();
+        // Unlike `get`, no --allow-unknown here: a key the file already holds is
+        // removed even when this build does not know it, so a key written with
+        // `set --allow-unknown`, or left behind by an older schema, stays
+        // removable without a flag. Only an unknown key the file lacks is
+        // refused; a typo there would otherwise report success.
+        const keyValidation = validateConfigKeyPath(key);
+        if (!keyValidation.valid &&
+            (hasUnsafeKeySegment(key) || getNestedValue(config, key) === undefined)) {
+            const reason = keyValidation.reason ? ` ${keyValidation.reason}.` : '';
+            const message = `Invalid configuration key "${key}".${reason}`;
+            const fix = 'Use "tospec config list" to see available keys.';
+            if (options.json) {
+                emitFailureStatus(CONFIG_FAILURE_PAYLOADS.unset, { severity: 'error', code: 'config_error', message, fix });
+                return;
+            }
+            console.error(formatLabeled('Error', message));
+            console.error(formatLabeled('Fix', fix));
+            process.exitCode = 1;
+            return;
+        }
+        assertGlobalConfigWritable([key.split('.')[0]]);
         const existed = deleteNestedValue(config, key);
         if (existed)
             saveGlobalConfig(config);
+        // Only removing `workflows` can leave `custom` empty: removing `profile`
+        // reverts to `core`, which ignores the list.
+        const warning = key.split('.')[0] === 'workflows'
+            ? profileNeedsWorkflowsDiagnostic(config)
+            : null;
         if (options.json) {
             // Success either way: unsetting an absent key is the state the caller
             // asked for. `existed` is what says whether anything changed.
-            emitSuccess({ unset: { key, existed } });
+            emitSuccess({ unset: { key, existed }, ...(warning ? { status: [warning] } : {}) });
             return;
         }
         console.log(existed ? `Unset ${key} (reverted to default)` : `Key "${key}" was not set`);
+        if (warning) {
+            console.error(`Warning: ${warning.message}`);
+            if (warning.fix)
+                console.error(formatLabeled('Fix', warning.fix));
+        }
     });
     configCmd
         .command('reset')
@@ -497,8 +564,7 @@ export function registerConfigCommand(program) {
                 });
                 return;
             }
-            console.error('Error: --all flag is required for reset');
-            console.error('Usage: tospec config reset --all [-y]');
+            console.error(formatLabeled('Error', '--all flag is required for reset\nUsage: tospec config reset --all [-y]'));
             process.exitCode = 1;
             return;
         }
@@ -514,6 +580,14 @@ export function registerConfigCommand(program) {
             });
             return;
         }
+        // Without a terminal the prompt reads stdin's EOF as a cancel, and the run
+        // ended in exit 130, the code that means the user pressed Ctrl-C.
+        if (!options.yes && !isInteractive()) {
+            console.error(formatLabeled('Error', 'Cannot confirm the reset: no interactive terminal.'));
+            console.error(formatLabeled('Fix', 'tospec config reset --all --yes'));
+            process.exitCode = 1;
+            return;
+        }
         if (!options.yes) {
             const { confirm } = await import('@inquirer/prompts');
             let confirmed;
@@ -536,7 +610,14 @@ export function registerConfigCommand(program) {
                 return;
             }
         }
-        saveGlobalConfig({ ...DEFAULT_CONFIG });
+        // The one write allowed over an unparseable file: replacing it is the
+        // point, and without it a broken config has no recovery from the CLI.
+        //
+        // An empty object, not DEFAULT_CONFIG: written out, the defaults became
+        // stored values, and `list` labelled the reset profile "(explicit)". Not
+        // a deleted file either: with none here, reads fall back to a legacy
+        // config and the reset would bring its settings back.
+        saveGlobalConfig({}, { overwriteUnreadable: true });
         if (options.json) {
             emitSuccess({ config: getGlobalConfig() });
             return;
@@ -549,32 +630,51 @@ export function registerConfigCommand(program) {
         .action(async () => {
         const editor = process.env.EDITOR || process.env.VISUAL;
         if (!editor) {
-            console.error('Error: No editor configured');
-            console.error('Set the EDITOR or VISUAL environment variable to your preferred editor');
-            console.error('Example: export EDITOR=vim');
+            console.error(formatLabeled('Error', 'No editor configured\nSet the EDITOR or VISUAL environment variable to your preferred editor\nExample: export EDITOR=vim'));
             process.exitCode = 1;
             return;
         }
         const configPath = getGlobalConfigPath();
+        // Runs only when the write target is absent, so it overwrites nothing; the
+        // unreadable guard would otherwise send a user whose only file is a broken
+        // legacy one back to this very command.
+        //
+        // Seeded empty for the reason `reset` writes `{}`: a seeded default is a
+        // stored value, so closing the editor unchanged left the profile
+        // "(explicit)" though nobody had chosen it.
         if (!fs.existsSync(configPath)) {
-            saveGlobalConfig({ ...DEFAULT_CONFIG });
+            saveGlobalConfig({}, { overwriteUnreadable: true });
+        }
+        // `EDITOR="code --wait"` is a command line, not a program name: spawned
+        // whole, it was looked up as a file literally named "code --wait" and
+        // failed with ENOENT. Split here, never handed to a shell — `shell: true`
+        // would also run whatever else the variable contains.
+        const [command, ...editorArgs] = splitCommandLine(editor);
+        if (!command) {
+            console.error('Error: EDITOR is set but names no program.');
+            process.exitCode = 1;
+            return;
         }
-        // shell: false so a space in the editor or config path is not re-parsed.
-        const child = spawn(editor, [configPath], {
-            stdio: 'inherit',
-            shell: false,
-        });
-        await new Promise((resolve, reject) => {
-            child.on('close', (code) => {
-                if (code === 0) {
-                    resolve();
-                }
-                else {
-                    reject(new Error(`Editor exited with code ${code}`));
-                }
-            });
-            child.on('error', reject);
+        // cross-spawn, not child_process.spawn: on Windows `code` is `code.cmd`,
+        // which only cmd.exe can run, and reaching it safely means cmd.exe's
+        // quoting rules (`%`, `^`, `&`, `"`) for every argument, the config path
+        // included. That escaping is the library's whole purpose; a hand-rolled
+        // copy is the BatBadBut bug class Node itself had to patch.
+        const outcome = await new Promise((resolve) => {
+            const child = crossSpawn(command, [...editorArgs, configPath], { stdio: 'inherit' });
+            child.on('close', (code) => resolve({ code }));
+            child.on('error', (error) => resolve({ error }));
         });
+        if ('error' in outcome) {
+            console.error(`Error: Could not start editor "${command}": ${outcome.error.message}`);
+            process.exitCode = 1;
+            return;
+        }
+        if (outcome.code !== 0) {
+            console.error(`Error: Editor "${command}" exited with code ${outcome.code}.`);
+            process.exitCode = 1;
+            return;
+        }
         try {
             const rawConfig = fs.readFileSync(configPath, 'utf-8');
             // `config edit` just handed this file to the user's editor, and a
@@ -593,8 +693,7 @@ export function registerConfigCommand(program) {
                 console.error(`Error: Config file not found at ${configPath}`);
             }
             else if (error instanceof SyntaxError) {
-                console.error(`Error: Invalid JSON in ${configPath}`);
-                console.error(error.message);
+                console.error(formatLabeled('Error', `Invalid JSON in ${configPath}\n${error.message}`));
             }
             else {
                 console.error(`Error: Unable to validate configuration - ${error instanceof Error ? error.message : String(error)}`);
@@ -615,7 +714,7 @@ export function registerConfigCommand(program) {
             }
             console.error(`Error: ${message}`);
             if (fix)
-                console.error(`Fix: ${fix}`);
+                console.error(formatLabeled('Fix', fix));
             process.exitCode = 1;
         };
         /** The resolved state, so a caller need not re-read it with `config list`. */
@@ -629,7 +728,8 @@ export function registerConfigCommand(program) {
         // The stored list is dropped, not rewritten to ALL_WORKFLOWS: rewriting it
         // manufactures the state `ignoredWorkflowsDiagnostic` warns about.
         if (preset === 'core') {
-            const config = getGlobalConfig();
+            assertGlobalConfigWritable(['profile', 'workflows']);
+            const config = getStoredGlobalConfig();
             config.profile = 'core';
             delete config.workflows;
             saveGlobalConfig(config);
@@ -639,11 +739,17 @@ export function registerConfigCommand(program) {
         // The command `config set workflows` and `config list` both name as the
         // way to make a workflow list take effect.
         if (preset === 'custom') {
-            const config = getGlobalConfig();
+            // Before the read: an unparseable file reads as the defaults, which have
+            // no workflows list, so the refusal below would send the user to
+            // `config set workflows` — a write the same file then refuses.
+            assertGlobalConfigReadable();
+            // An invalid `workflows` is refused here, not counted as a list below.
+            assertGlobalConfigWritable(['profile']);
+            const config = getStoredGlobalConfig();
             // Without a list, `custom` resolves to zero workflows and the next
             // `tospec update` deletes every installed skill directory.
             if (!config.workflows || config.workflows.length === 0) {
-                fail('Profile "custom" needs a workflows list, and none is configured.', `tospec config set workflows "${ALL_WORKFLOWS.slice(0, 3).join(',')}"`);
+                fail('Profile "custom" needs a workflows list, and none is configured.', workflowsListFix());
                 return;
             }
             config.profile = 'custom';
@@ -663,13 +769,20 @@ export function registerConfigCommand(program) {
             return;
         }
         if (!process.stdout.isTTY) {
-            console.error('Interactive mode required. Use `tospec config profile core|custom` or set config via environment/flags.');
+            console.error('Error: Interactive mode required. Use `tospec config profile core|custom` or set config via environment/flags.');
             process.exitCode = 1;
             return;
         }
+        // Before the picker: the save at its end would refuse the file anyway, after
+        // the user had answered every prompt against defaults shown as "current".
+        assertGlobalConfigReadable();
         const { select, checkbox, confirm } = await import('@inquirer/prompts');
         try {
+            // Shown from what reads resolve, saved onto what the file holds: for a
+            // file with an invalid field the two differ, and saving the defaults
+            // would erase the user's other settings.
             const config = getGlobalConfig();
+            const stored = getStoredGlobalConfig();
             const currentState = resolveCurrentProfileState(config);
             console.log('\nCurrent profile settings');
             console.log(`  Workflows: ${formatWorkflowSummary(currentState.workflows, currentState.profile)}`);
@@ -745,14 +858,14 @@ export function registerConfigCommand(program) {
                 console.log(`  ${line}`);
             }
             console.log();
-            config.profile = nextState.profile;
+            stored.profile = nextState.profile;
             // Same rule as the `core` preset above: a list stored under `core` is an
             // ignored key every later `config list` warns about.
             if (nextState.profile === 'core')
-                delete config.workflows;
+                delete stored.workflows;
             else
-                config.workflows = nextState.workflows;
-            saveGlobalConfig(config);
+                stored.workflows = nextState.workflows;
+            saveGlobalConfig(stored);
             const projectDir = process.cwd();
             const tospecDir = path.join(projectDir, TOSPEC_DIR_NAME);
             if (fs.existsSync(tospecDir)) {
@@ -768,8 +881,8 @@ export function registerConfigCommand(program) {
                         console.log('Run `tospec update` in your other projects to apply.');
                     }
                     catch (error) {
-                        console.error(`\`tospec update\` failed: ${asErrorMessage(error)}`);
-                        console.error('Please run it manually to apply the profile changes.');
+                        console.error(`Error: \`tospec update\` failed: ${asErrorMessage(error)}`);
+                        console.error('Fix: Run `tospec update` manually to apply the profile changes.');
                         process.exitCode = 1;
                     }
                     return;