@wrongstack/cli 0.260.0 → 0.265.1

package/dist/index.js

@@ -1,30 +1,33 @@
 #!/usr/bin/env node
 import * as fsp5 from 'fs/promises';
-import * as path39 from 'path';
+import * as path4 from 'path';
 import { join } from 'path';
-import { color, writeErr, loadPlugins, renderProgress, SpecStore, TaskGraphStore, analyzeCriticalPath, getTemplate, listTemplates, templateToMarkdown, SpecParser, renderSpecAnalysis, AISpecBuilder, expectDefined, DefaultTaskStore, TaskTracker, renderTaskGraph, withFileLock, DefaultSecretScrubber, resolveProjectDir, GlobalMailbox, TOKENS, ToolRegistry, resolveSessionLoggingConfig, createSessionEventBridge, HookRegistry, HookRunner, SlashCommandRegistry, attachDepWatcherBridge, SessionMemoryConsolidator, BrainDecisionQueue, ObservableBrainArbiter, HumanEscalatingBrainArbiter, createTieredBrainArbiter, DefaultBrainArbiter, BrainMonitor, mailboxSessionTag, createDelegateTool, FLEET_ROSTER, createMcpControlTool, startTechStackConsumer, startPackageOutdatedWatcher, recordFileAction, createAutonomyBrain, DefaultPluginAPI, SpecVersioning, wstackGlobalRoot, DEFAULT_CONTEXT_WINDOW_MODE_ID, recentTextTurns, enhanceUserPrompt, projectSlug, DefaultSystemPromptBuilder, mutateTasks, loadTasks, resolveContextWindowPolicy, repairToolUseAdjacency, mutatePlan, setPlanItemStatus, getPlanTemplate, loadPlan, emptyPlan, addPlanItem, savePlan, DefaultLogger, DefaultModelsRegistry, isStdinTTY, DefaultPathResolver, EventBus, runProviderWithRetry, ReplayLogStore, ReplayProviderRunner, mergeCustomModelDefs, makeAutonomyPromptContributor, createContextManagerTool, makeMailboxTool, makeMailSendTool, makeMailInboxTool, InMemoryMetricsSink, wireMetricsToEvents, DefaultHealthRegistry, startMetricsServer, DEFAULT_SESSION_PRUNE_DAYS, RecoveryLock, DefaultAttachmentStore, Context, QueueStore, loadTodosCheckpoint, attachTodosCheckpoint, loadDirectorState, createDefaultPipelines, resolveAuditLevel, AutoCompactionMiddleware, estimateRequestTokensCalibrated, Agent, FleetManager, makeDirectorSessionFactory, Director, makeFleetEmitTool, makeFleetStatusTool, resolveModelMatrix, DEFAULT_SUBAGENT_BASELINE, AutoApprovePermissionPolicy, PhaseStore, AutoPhasePlanner, PhaseGraphBuilder, WorktreeManager, PhaseOrchestrator, makeLLMClassifier, writeOut, ParallelEternalEngine, EternalAutonomyEngine, allServers as allServers$1, CHIMERA_REVIEW_PROMPT, noOpVault, decryptConfigSecrets, encryptConfigSecrets, atomicWrite, setQueuedMessagesSnapshot, DefaultSessionRewinder, bootConfig as bootConfig$1, setOutputLineGuard, setRawMode, DefaultSessionReader, resolveWstackPaths, ToolAuditLog, DefaultSessionStore as DefaultSessionStore$1, ProviderRegistry, StreamHangError, ProviderError, makeAgentSubagentRunner, NULL_FLEET_BUS, buildChildEnv, formatContextWindowModeList, getContextWindowMode, AGENT_CATALOG, dispatchAgent, formatTodosList, formatTaskList, formatTaskProgress, formatPlan, SessionRecovery, loadGoal, goalFilePath, summarizeUsage, saveGoal, formatGoal, emptyGoal, buildGoalPreamble, pendingBtwCount, setBtwNote, MATRIX_PHASE_KEYS, matrixKeyKind, phaseForRole, onResize, ERROR_CODES, FsError, ConfigError, InputBuilder, truncate, estimateMessageTokens, AGENTS_BY_PHASE, validateAgainstSchema, resolveMailboxIdentity, isSecretField as isSecretField$1 } from '@wrongstack/core';
-import { DefaultSecretVault, encryptConfigSecrets as encryptConfigSecrets$1, decryptConfigSecrets as decryptConfigSecrets$1, isSecretField } from '@wrongstack/core/security';
+import { color, writeErr, loadPlugins, renderProgress, SpecStore, TaskGraphStore, analyzeCriticalPath, getTemplate, listTemplates, templateToMarkdown, SpecParser, renderSpecAnalysis, AISpecBuilder, expectDefined, DefaultTaskStore, TaskTracker, renderTaskGraph, withFileLock, DefaultSecretScrubber, projectHash, wstackGlobalRoot, resolveProjectDir, GlobalMailbox, TOKENS, ToolRegistry, resolveSessionLoggingConfig, createSessionEventBridge, HookRegistry, HookRunner, normalizeTokenSavingTier, SlashCommandRegistry, attachDepWatcherBridge, SessionMemoryConsolidator, BrainDecisionQueue, ObservableBrainArbiter, HumanEscalatingBrainArbiter, createTieredBrainArbiter, DefaultBrainArbiter, BrainMonitor, mailboxSessionTag, createDelegateTool, FLEET_ROSTER, createMcpControlTool, startTechStackConsumer, startPackageOutdatedWatcher, recordFileAction, createAutonomyBrain, DefaultPluginAPI, SpecVersioning, DEFAULT_CONTEXT_WINDOW_MODE_ID, recentTextTurns, enhanceUserPrompt, projectSlug, DefaultSystemPromptBuilder, mutateTasks, loadTasks, resolveContextWindowPolicy, repairToolUseAdjacency, mutatePlan, setPlanItemStatus, getPlanTemplate, loadPlan, emptyPlan, addPlanItem, savePlan, DefaultLogger, DefaultModelsRegistry, isStdinTTY, DefaultPathResolver, EventBus, runProviderWithRetry, ReplayLogStore, ReplayProviderRunner, mergeCustomModelDefs, makeAutonomyPromptContributor, createContextManagerTool, makeMailboxTool, makeMailSendTool, makeMailInboxTool, InMemoryMetricsSink, wireMetricsToEvents, DefaultHealthRegistry, startMetricsServer, DEFAULT_SESSION_PRUNE_DAYS, RecoveryLock, DefaultAttachmentStore, Context, QueueStore, loadTodosCheckpoint, attachTodosCheckpoint, loadDirectorState, createDefaultPipelines, resolveAuditLevel, AutoCompactionMiddleware, estimateRequestTokensCalibrated, Agent, FleetManager, makeDirectorSessionFactory, Director, makeFleetEmitTool, makeFleetStatusTool, resolveModelMatrix, DEFAULT_SUBAGENT_BASELINE, AutoApprovePermissionPolicy, PhaseStore, AutoPhasePlanner, PhaseGraphBuilder, WorktreeManager, PhaseOrchestrator, makeLLMClassifier, writeOut, ParallelEternalEngine, EternalAutonomyEngine, allServers as allServers$1, CHIMERA_REVIEW_PROMPT, AutonomousCoordinator, noOpVault, decryptConfigSecrets, encryptConfigSecrets, atomicWrite, setQueuedMessagesSnapshot, DefaultSessionRewinder, bootConfig as bootConfig$1, setOutputLineGuard, setRawMode, DefaultSessionReader, resolveWstackPaths, ToolAuditLog, DefaultSessionStore as DefaultSessionStore$1, ProviderRegistry, StreamHangError, ProviderError, makeAgentSubagentRunner, NULL_FLEET_BUS, buildChildEnv, formatContextWindowModeList, getContextWindowMode, AGENT_CATALOG, dispatchAgent, formatTodosList, formatTaskList, formatTaskProgress, formatPlan, SessionRecovery, loadGoal, goalFilePath, summarizeUsage, saveGoal, formatGoal, emptyGoal, buildGoalPreamble, pendingBtwCount, setBtwNote, MATRIX_PHASE_KEYS, matrixKeyKind, phaseForRole, onResize, ERROR_CODES, FsError, ConfigError, InputBuilder, truncate, estimateMessageTokens, AGENTS_BY_PHASE, validateAgainstSchema, resolveMailboxIdentity, isSecretField as isSecretField$1 } from '@wrongstack/core';
+import { decryptConfigSecrets as decryptConfigSecrets$1, encryptConfigSecrets as encryptConfigSecrets$1, DefaultSecretVault, isSecretField } from '@wrongstack/core/security';
 import * as crypto3 from 'crypto';
 import { createHash, randomBytes, randomUUID } from 'crypto';
 import { createRequire } from 'module';
 import * as os from 'os';
 import os__default from 'os';
-import { findFreePort, AutoPhaseWebSocketHandler, handleShellOpen, handleMemoryForget, handleMemoryRemember, handleMemoryList, handleFilesWrite, handleFilesRead, handleFilesTree, handleFilesList, createEternalSubscription, createHttpServer, registerInstance, openBrowser, unregisterInstance, estimateTokens as estimateTokens$1, stringifyContent, messagePreview, messageTokens, createCustomModeStore } from '@wrongstack/webui/server';
+import { findFreePort, AutoPhaseWebSocketHandler, generateAuthToken, verifyClient, handleGitInfo, handleShellOpen, handleSkillsExport, handleSkillsEdit, handleSkillsCreate, handleSkillsUpdate, handleSkillsUninstall, handleSkillsInstall, handleSkillsContent, handleMemoryForget, handleMemoryRemember, handleMemoryList, handleFilesWrite, handleFilesRead, handleFilesTree, handleFilesList, createEternalSubscription, createHttpServer, registerInstance, openBrowser, unregisterInstance, estimateTokens as estimateTokens$1, stringifyContent, messagePreview, messageTokens, createCustomModeStore } from '@wrongstack/webui/server';
 import { makeProviderFromConfig, capabilitiesFor, buildProviderFactoriesFromRegistry } from '@wrongstack/providers';
-import { getProcessRegistry, builtinToolsPack, TIER1_TOOLS, rememberTool, forgetTool, searchMemoryTool, relatedMemoryTool, runStartupIndex, isIndexableFile, enqueueReindex, cancelPendingReindexes, shutdownCodebaseIndexHost, resetIndexCircuitBreaker } from '@wrongstack/tools';
+import { toErrorMessage } from '@wrongstack/core/utils';
+import { getProcessRegistry, builtinToolsPack, rememberTool, forgetTool, searchMemoryTool, relatedMemoryTool, runStartupIndex, isIndexableFile, enqueueReindex, cancelPendingReindexes, shutdownCodebaseIndexHost, TIER2_TOOLS, TIER3_TOOLS, TIER1_TOOLS, resetIndexCircuitBreaker } from '@wrongstack/tools';
 import { DefaultSessionStore } from '@wrongstack/core/storage';
+import { probeLocalLlm } from '@wrongstack/runtime/probe';
+import * as fs2 from 'fs';
+import { watch, writeFileSync, existsSync, readFileSync } from 'fs';
+import { SkillInstaller } from '@wrongstack/core/skills';
 import { WebSocketServer, WebSocket } from 'ws';
 import { spawn, execFile, execFileSync } from 'child_process';
 import { MCPRegistry, MCPServer, serveHttp, serveStdio } from '@wrongstack/mcp';
-import * as fs2 from 'fs';
-import { writeFileSync, existsSync, readFileSync } from 'fs';
 import { fileURLToPath } from 'url';
 import { createDefaultContainer, routeImagesForModel, readClipboardImage } from '@wrongstack/runtime';
 import * as readline from 'readline';
+import { ACP_AGENT_COMMANDS, makeACPSubagentRunner, runEnsemble, renderEnsembleText, EnsembleRegistry, makeACPSubagentRunnerWithStop, findAgentDescriptor } from '@wrongstack/acp';
 import { parseNextSteps } from '@wrongstack/tui';
-import { ACP_AGENT_COMMANDS, makeACPSubagentRunner, makeACPSubagentRunnerWithStop } from '@wrongstack/acp';
 import { WrongStackACPServer } from '@wrongstack/acp/agent';
-import { ACP_AGENTS, SubagentBudget } from '@wrongstack/core/coordination';
+import { SubagentBudget } from '@wrongstack/core/coordination';
 import { loadBenchConfig, reportHeaderLine, readSummary, renderMarkdownReport, createPolyglotSuite, createSwebenchSuite, runBenchmark, writeJsonArtifacts, collectCellPredictions, writePredictionsJsonl, gradePolyglot, gradeSwebench } from '@wrongstack/bench';
 import { allServers } from '@wrongstack/core/infrastructure';
 import { ToolExecutor } from '@wrongstack/core/execution';
@@ -66,15 +69,57 @@ async function pathExists(file) {
     return false;
   }
 }
+async function hasRootFileWithSuffix(root, suffixes) {
+  let names;
+  try {
+    names = await fsp5.readdir(root);
+  } catch {
+    return false;
+  }
+  const lower = suffixes.map((s) => s.toLowerCase());
+  return names.some((n) => lower.some((s) => n.toLowerCase().endsWith(s)));
+}
+function parseCiRunCommands(yaml) {
+  const commands = [];
+  const lines = yaml.split(/\r?\n/);
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i] ?? "";
+    const m = /^(\s*)(?:-\s+)?run:\s*(.*)$/.exec(line);
+    if (!m) continue;
+    const indent = (m[1] ?? "").length;
+    const inline = (m[2] ?? "").trim();
+    if (inline && inline !== "|" && inline !== ">" && !/^[|>][+-]?$/.test(inline)) {
+      commands.push(inline);
+      continue;
+    }
+    for (let j = i + 1; j < lines.length; j++) {
+      const body = lines[j] ?? "";
+      if (body.trim() === "") continue;
+      const bodyIndent = body.length - body.trimStart().length;
+      if (bodyIndent <= indent) break;
+      commands.push(body.trim());
+      i = j;
+    }
+  }
+  return commands.filter((c) => c !== "" && !/^(#|cd\s|echo\s|export\s|set\s|if\s)/.test(c));
+}
+function applyCiCommands(facts, commands) {
+  const find = (re) => commands.find((c) => re.test(c));
+  facts.test ??= find(/\b(test|pytest|vitest|jest|go test|cargo test|mix test|rspec)\b/i);
+  facts.lint ??= find(/\b(lint|eslint|biome|clippy|ruff|flake8|golangci-lint|fmt --check)\b/i);
+  facts.build ??= find(
+    /\b(build|compile|tsc|cargo build|go build|mvn .*package|gradle .*build)\b/i
+  );
+}
 async function detectPackageManager2(root, declared) {
   if (declared) {
     const name = declared.split("@")[0];
     if (name) return name;
   }
-  if (await pathExists(path39.join(root, "pnpm-lock.yaml"))) return "pnpm";
-  if (await pathExists(path39.join(root, "bun.lockb"))) return "bun";
-  if (await pathExists(path39.join(root, "bun.lock"))) return "bun";
-  if (await pathExists(path39.join(root, "yarn.lock"))) return "yarn";
+  if (await pathExists(path4.join(root, "pnpm-lock.yaml"))) return "pnpm";
+  if (await pathExists(path4.join(root, "bun.lockb"))) return "bun";
+  if (await pathExists(path4.join(root, "bun.lock"))) return "bun";
+  if (await pathExists(path4.join(root, "yarn.lock"))) return "yarn";
   return "npm";
 }
 function hasUsableScript(scripts, name) {
@@ -92,10 +137,50 @@ function parseMakeTargets(makefile) {
   }
   return targets;
 }
+async function scanSourceTree(root) {
+  const counts = /* @__PURE__ */ new Map();
+  const entryPoints = [];
+  const topDirs = [];
+  let fileCount = 0;
+  const MAX_FILES = 5e3;
+  const MAX_DEPTH = 6;
+  async function walk(dir, depth, rel) {
+    if (fileCount >= MAX_FILES || depth > MAX_DEPTH) return;
+    let entries;
+    try {
+      entries = await fsp5.readdir(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const e of entries) {
+      if (fileCount >= MAX_FILES) return;
+      const name = e.name;
+      if (e.isDirectory()) {
+        if (SCAN_IGNORE_DIRS.has(name) || name.startsWith(".")) continue;
+        if (depth === 0) topDirs.push(name);
+        await walk(path4.join(dir, name), depth + 1, rel ? `${rel}/${name}` : name);
+      } else if (e.isFile()) {
+        fileCount++;
+        const ext = path4.extname(name).toLowerCase();
+        const lang = EXT_LANG[ext];
+        if (!lang) continue;
+        counts.set(lang, (counts.get(lang) ?? 0) + 1);
+        const base = name.slice(0, name.length - ext.length).toLowerCase();
+        if (entryPoints.length < 10 && ENTRY_BASENAMES.has(base)) {
+          entryPoints.push(rel ? `${rel}/${name}` : name);
+        }
+      }
+    }
+  }
+  await walk(root, 0, "");
+  if (counts.size === 0) return void 0;
+  const languages = [...counts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 5).map(([lang, n]) => `${lang} (${n})`);
+  return { languages, entryPoints, topDirs: topDirs.sort() };
+}
 async function detectProjectFacts(root) {
   const facts = { hints: [] };
   try {
-    const pkg = JSON.parse(await fsp5.readFile(path39.join(root, "package.json"), "utf8"));
+    const pkg = JSON.parse(await fsp5.readFile(path4.join(root, "package.json"), "utf8"));
     const scripts = pkg.scripts ?? {};
     const pm = await detectPackageManager2(root, pkg.packageManager);
     if (hasUsableScript(scripts, "build")) facts.build = `${pm} run build`;
@@ -109,14 +194,14 @@ async function detectProjectFacts(root) {
   } catch {
   }
   try {
-    if (!await pathExists(path39.join(root, "pyproject.toml"))) throw new Error("not python");
+    if (!await pathExists(path4.join(root, "pyproject.toml"))) throw new Error("not python");
     facts.test ??= "pytest";
     facts.lint ??= "ruff check .";
     facts.hints.push("pyproject.toml");
   } catch {
   }
   try {
-    if (!await pathExists(path39.join(root, "go.mod"))) throw new Error("not go");
+    if (!await pathExists(path4.join(root, "go.mod"))) throw new Error("not go");
     facts.build ??= "go build ./...";
     facts.test ??= "go test ./...";
     facts.run ??= "go run .";
@@ -124,7 +209,7 @@ async function detectProjectFacts(root) {
   } catch {
   }
   try {
-    if (!await pathExists(path39.join(root, "Cargo.toml"))) throw new Error("not rust");
+    if (!await pathExists(path4.join(root, "Cargo.toml"))) throw new Error("not rust");
     facts.build ??= "cargo build";
     facts.test ??= "cargo test";
     facts.lint ??= "cargo clippy";
@@ -133,7 +218,7 @@ async function detectProjectFacts(root) {
   } catch {
   }
   try {
-    const makefile = await fsp5.readFile(path39.join(root, "Makefile"), "utf8");
+    const makefile = await fsp5.readFile(path4.join(root, "Makefile"), "utf8");
     const targets = parseMakeTargets(makefile);
     facts.build ??= targets.has("build") ? "make build" : "make";
     if (targets.has("test")) facts.test ??= "make test";
@@ -143,6 +228,118 @@ async function detectProjectFacts(root) {
     facts.hints.push("Makefile");
   } catch {
   }
+  try {
+    const composer = JSON.parse(await fsp5.readFile(path4.join(root, "composer.json"), "utf8"));
+    const scripts = composer.scripts ?? {};
+    if ("test" in scripts) facts.test ??= "composer test";
+    if ("lint" in scripts) facts.lint ??= "composer lint";
+    facts.hints.push("composer.json");
+  } catch {
+  }
+  try {
+    if (!await pathExists(path4.join(root, "pom.xml"))) throw new Error("not maven");
+    facts.build ??= "mvn package";
+    facts.test ??= "mvn test";
+    facts.hints.push("pom.xml");
+  } catch {
+  }
+  try {
+    const hasGradle = await pathExists(path4.join(root, "build.gradle")) || await pathExists(path4.join(root, "build.gradle.kts"));
+    if (!hasGradle) throw new Error("not gradle");
+    const g = await pathExists(path4.join(root, "gradlew")) ? "./gradlew" : "gradle";
+    facts.build ??= `${g} build`;
+    facts.test ??= `${g} test`;
+    facts.hints.push("Gradle");
+  } catch {
+  }
+  try {
+    const hasDotnet = await pathExists(path4.join(root, "global.json")) || await hasRootFileWithSuffix(root, [".csproj", ".fsproj", ".sln"]);
+    if (!hasDotnet) throw new Error("not dotnet");
+    facts.build ??= "dotnet build";
+    facts.test ??= "dotnet test";
+    facts.run ??= "dotnet run";
+    facts.hints.push(".NET project");
+  } catch {
+  }
+  try {
+    if (!await pathExists(path4.join(root, "mix.exs"))) throw new Error("not elixir");
+    facts.build ??= "mix compile";
+    facts.test ??= "mix test";
+    facts.lint ??= "mix format --check-formatted";
+    facts.run ??= "mix run";
+    facts.hints.push("mix.exs");
+  } catch {
+  }
+  try {
+    if (!await pathExists(path4.join(root, "pubspec.yaml"))) throw new Error("not dart");
+    facts.test ??= "dart test";
+    facts.lint ??= "dart analyze";
+    facts.hints.push("pubspec.yaml");
+  } catch {
+  }
+  try {
+    const hasDeno = await pathExists(path4.join(root, "deno.json")) || await pathExists(path4.join(root, "deno.jsonc"));
+    if (!hasDeno) throw new Error("not deno");
+    facts.test ??= "deno test";
+    facts.lint ??= "deno lint";
+    facts.hints.push("deno.json");
+  } catch {
+  }
+  try {
+    if (!await pathExists(path4.join(root, "Package.swift"))) throw new Error("not swift");
+    facts.build ??= "swift build";
+    facts.test ??= "swift test";
+    facts.run ??= "swift run";
+    facts.hints.push("Package.swift");
+  } catch {
+  }
+  try {
+    if (!await pathExists(path4.join(root, "Gemfile"))) throw new Error("not ruby");
+    if (await pathExists(path4.join(root, "Rakefile"))) facts.test ??= "bundle exec rake test";
+    facts.hints.push("Gemfile");
+  } catch {
+  }
+  try {
+    if (!await pathExists(path4.join(root, "CMakeLists.txt"))) throw new Error("not cmake");
+    facts.build ??= "cmake -B build && cmake --build build";
+    facts.test ??= "ctest --test-dir build";
+    facts.hints.push("CMakeLists.txt");
+  } catch {
+  }
+  try {
+    const hasPip = await pathExists(path4.join(root, "requirements.txt")) || await pathExists(path4.join(root, "setup.py")) || await pathExists(path4.join(root, "setup.cfg"));
+    if (!hasPip) throw new Error("not pip");
+    facts.test ??= "pytest";
+    facts.hints.push("requirements.txt");
+  } catch {
+  }
+  if (!facts.build || !facts.test || !facts.lint) {
+    try {
+      const wfDir = path4.join(root, ".github", "workflows");
+      const wfNames = (await fsp5.readdir(wfDir)).filter((n) => /\.ya?ml$/i.test(n));
+      const commands = [];
+      for (const n of wfNames) {
+        commands.push(...parseCiRunCommands(await fsp5.readFile(path4.join(wfDir, n), "utf8")));
+      }
+      if (commands.length > 0) {
+        const before = { build: facts.build, test: facts.test, lint: facts.lint };
+        applyCiCommands(facts, commands);
+        if (facts.build !== before.build || facts.test !== before.test || facts.lint !== before.lint) {
+          facts.hints.push(".github/workflows");
+        }
+      }
+    } catch {
+    }
+  }
+  if (!facts.build && !facts.test && !facts.run && !facts.lint) {
+    const scan = await scanSourceTree(root);
+    if (scan) {
+      facts.languages = scan.languages;
+      if (scan.entryPoints.length > 0) facts.entryPoints = scan.entryPoints;
+      if (scan.topDirs.length > 0) facts.topDirs = scan.topDirs;
+      facts.hints.push(`source scan: ${scan.languages.join(", ")}`);
+    }
+  }
   return facts;
 }
 function renderAgentsTemplate(f) {
@@ -150,6 +347,16 @@ function renderAgentsTemplate(f) {
   const hints = f.hints.length > 0 ? `
 
 > Auto-detected: ${f.hints.join(", ")}` : "";
+  const runtime = f.languages?.length ? `_CLI, server, browser, worker, library, package?_ \u2014 detected: ${f.languages.join(", ")}` : "_CLI, server, browser, worker, library, package?_";
+  const keyFileRows = [];
+  for (const ep of f.entryPoints ?? [])
+    keyFileRows.push(`| \`${ep}\` | _Likely entry point (detected)_ |`);
+  for (const dir of f.topDirs ?? [])
+    keyFileRows.push(`| \`${dir}/\` | _Top-level directory (detected)_ |`);
+  const keyFiles = keyFileRows.length > 0 ? keyFileRows.join("\n") : `| _src/_ | _Main source entry point(s)_ |
+| _tests/_ | _Test root or convention_ |
+| _docs/_ | _Architecture, runbooks, design notes_ |
+| _scripts/_ | _Automation scripts (CI, release, install, etc.)_ |`;
   return `# AGENTS.md
 
 > **DO NOT DELETE THIS FILE.** It is loaded into WrongStack's system prompt as
@@ -161,7 +368,7 @@ function renderAgentsTemplate(f) {
 
 - **Purpose:** _What does this project do and why does it exist?_
 - **Primary users:** _Who uses it: developers, operators, customers, internal systems?_
-- **Runtime / deployment:** _CLI, server, browser, worker, library, package?_${hints}
+- **Runtime / deployment:** ${runtime}${hints}
 
 ## How to work safely
 
@@ -183,10 +390,7 @@ function renderAgentsTemplate(f) {
 
 | File / directory | Role |
 |---|---|
-| _src/_ | _Main source entry point(s)_ |
-| _tests/_ | _Test root or convention_ |
-| _docs/_ | _Architecture, runbooks, design notes_ |
-| _scripts/_ | _Automation scripts (CI, release, install, etc.)_ |
+${keyFiles}
 
 ## Architecture notes
 
@@ -245,8 +449,79 @@ function countToolResults(messages) {
 function estimateTokens(messages) {
   return estimateMessageTokens(messages);
 }
+var EXT_LANG, SCAN_IGNORE_DIRS, ENTRY_BASENAMES;
 var init_helpers = __esm({
   "src/slash-commands/helpers.ts"() {
+    EXT_LANG = {
+      ".ts": "TypeScript",
+      ".tsx": "TypeScript",
+      ".mts": "TypeScript",
+      ".cts": "TypeScript",
+      ".js": "JavaScript",
+      ".jsx": "JavaScript",
+      ".mjs": "JavaScript",
+      ".cjs": "JavaScript",
+      ".py": "Python",
+      ".rb": "Ruby",
+      ".go": "Go",
+      ".rs": "Rust",
+      ".java": "Java",
+      ".kt": "Kotlin",
+      ".kts": "Kotlin",
+      ".c": "C",
+      ".h": "C",
+      ".cpp": "C++",
+      ".cc": "C++",
+      ".cxx": "C++",
+      ".hpp": "C++",
+      ".cs": "C#",
+      ".php": "PHP",
+      ".swift": "Swift",
+      ".scala": "Scala",
+      ".clj": "Clojure",
+      ".ex": "Elixir",
+      ".exs": "Elixir",
+      ".erl": "Erlang",
+      ".hs": "Haskell",
+      ".ml": "OCaml",
+      ".dart": "Dart",
+      ".lua": "Lua",
+      ".jl": "Julia",
+      ".sh": "Shell",
+      ".bash": "Shell",
+      ".ps1": "PowerShell",
+      ".pl": "Perl",
+      ".zig": "Zig",
+      ".nim": "Nim",
+      ".sql": "SQL",
+      ".vue": "Vue",
+      ".svelte": "Svelte"
+    };
+    SCAN_IGNORE_DIRS = /* @__PURE__ */ new Set([
+      ".git",
+      "node_modules",
+      "dist",
+      "build",
+      "out",
+      "target",
+      "vendor",
+      ".venv",
+      "venv",
+      "env",
+      "__pycache__",
+      ".next",
+      ".nuxt",
+      ".cache",
+      "coverage",
+      ".wrongstack",
+      ".idea",
+      ".vscode",
+      "obj",
+      ".gradle",
+      ".dart_tool",
+      "Pods"
+    ]);
+    ENTRY_BASENAMES = /* @__PURE__ */ new Set(["main", "index", "app", "cli", "server", "__main__"]);
   }
 });
 function normalizeKeys(cfg) {
@@ -267,11 +542,18 @@ function writeKeysBack(cfg, keys) {
   }
   cfg.apiKeys = keys;
   const active = keys.find((k) => k.label === cfg.activeKey) ?? expectDefined(keys[0]);
-  cfg.apiKey = active.apiKey;
+  delete cfg.apiKey;
   if (!cfg.activeKey || !keys.some((k) => k.label === cfg.activeKey)) {
     cfg.activeKey = active.label;
   }
 }
+function resolveActiveApiKey(cfg) {
+  if (Array.isArray(cfg.apiKeys) && cfg.apiKeys.length > 0) {
+    const active = cfg.activeKey ? cfg.apiKeys.find((k) => k.label === cfg.activeKey) : void 0;
+    return (active ?? cfg.apiKeys[0])?.apiKey;
+  }
+  return cfg.apiKey && cfg.apiKey.length > 0 ? cfg.apiKey : void 0;
+}
 function activeLabel(cfg, keys) {
   if (cfg.activeKey && keys.some((k) => k.label === cfg.activeKey)) return cfg.activeKey;
   return keys[0]?.label;
@@ -372,26 +654,26 @@ function fmtDuration(ms) {
   const remMin = m - h * 60;
   return `${h}h${remMin}m`;
 }
-function fmtTaskResultLine(r, color72) {
+function fmtTaskResultLine(r, color74) {
   const stats = `${r.iterations}it ${r.toolCalls}tc ${fmtDuration(r.durationMs)}`;
   const errMsg = typeof r.error === "string" ? r.error : r.error?.message;
   const errKind = typeof r.error === "object" ? r.error?.kind : void 0;
   const errTail = errMsg ? ` \u2014 ${errMsg.replace(/\s+/g, " ").slice(0, 80)}${errMsg.length > 80 ? "\u2026" : ""}` : "";
-  const errKindChip = errKind ? color72.dim(` [${errKind}]`) : "";
-  const errSnip = errMsg || errKind ? `${errKindChip}${color72.dim(errTail)}` : "";
+  const errKindChip = errKind ? color74.dim(` [${errKind}]`) : "";
+  const errSnip = errMsg || errKind ? `${errKindChip}${color74.dim(errTail)}` : "";
   switch (r.status) {
     case "success":
-      return { mark: color72.green("\u2713"), stats, tail: "" };
+      return { mark: color74.green("\u2713"), stats, tail: "" };
     case "timeout":
       return {
-        mark: color72.yellow("\u23F1"),
-        stats: `${color72.yellow("timeout")} ${stats}`,
+        mark: color74.yellow("\u23F1"),
+        stats: `${color74.yellow("timeout")} ${stats}`,
         tail: errSnip
       };
     case "stopped":
-      return { mark: color72.dim("\u2298"), stats: `${color72.dim("stopped")} ${stats}`, tail: errSnip };
+      return { mark: color74.dim("\u2298"), stats: `${color74.dim("stopped")} ${stats}`, tail: errSnip };
     case "failed":
-      return { mark: color72.red("\u2717"), stats: `${color72.red("failed")} ${stats}`, tail: errSnip };
+      return { mark: color74.red("\u2717"), stats: `${color74.red("failed")} ${stats}`, tail: errSnip };
   }
 }
 var init_utils = __esm({
@@ -676,7 +958,7 @@ async function findSpec(store, idOrTitle) {
 async function gatherProjectContext2(projectRoot) {
   const parts = [];
   try {
-    const pkgPath = path39.join(projectRoot, "package.json");
+    const pkgPath = path4.join(projectRoot, "package.json");
     const pkgRaw = await fsp5.readFile(pkgPath, "utf8");
     const pkg = JSON.parse(pkgRaw);
     parts.push(`Project: ${String(pkg.name ?? "unknown")}`);
@@ -694,13 +976,13 @@ async function gatherProjectContext2(projectRoot) {
   } catch {
   }
   try {
-    const tsconfigPath = path39.join(projectRoot, "tsconfig.json");
+    const tsconfigPath = path4.join(projectRoot, "tsconfig.json");
     await fsp5.access(tsconfigPath);
     parts.push("Language: TypeScript");
   } catch {
   }
   try {
-    const srcDir = path39.join(projectRoot, "src");
+    const srcDir = path4.join(projectRoot, "src");
     const entries = await fsp5.readdir(srcDir, { withFileTypes: true });
     const dirs = entries.filter((e) => e.isDirectory()).map((e) => e.name);
     if (dirs.length > 0) parts.push(`Source structure: src/${dirs.join(", src/")}`);
@@ -2125,12 +2407,12 @@ __export(project_utils_exports, {
   touchProjectInManifest: () => touchProjectInManifest
 });
 function projectsJsonPath(globalConfigPath) {
-  const base = globalConfigPath ? path39.dirname(globalConfigPath) : wstackGlobalRoot();
-  return path39.join(base, "projects.json");
+  const base = globalConfigPath ? path4.dirname(globalConfigPath) : wstackGlobalRoot();
+  return path4.join(base, "projects.json");
 }
 function projectsDataDir(globalConfigPath) {
-  const base = globalConfigPath ? path39.dirname(globalConfigPath) : wstackGlobalRoot();
-  return path39.join(base, "projects");
+  const base = globalConfigPath ? path4.dirname(globalConfigPath) : wstackGlobalRoot();
+  return path4.join(base, "projects");
 }
 async function loadManifest(globalConfigPath) {
   const file = projectsJsonPath(globalConfigPath);
@@ -2144,12 +2426,12 @@ async function loadManifest(globalConfigPath) {
 }
 async function saveManifest(manifest, globalConfigPath) {
   const file = projectsJsonPath(globalConfigPath);
-  await fsp5.mkdir(path39.dirname(file), { recursive: true });
+  await fsp5.mkdir(path4.dirname(file), { recursive: true });
   await fsp5.writeFile(file, JSON.stringify(manifest, null, 2), "utf8");
 }
 function generateSlug(root) {
-  const base = path39.basename(root).toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40) || "project";
-  const hash = createHash("sha256").update(path39.resolve(root)).digest("hex").slice(0, 6);
+  const base = path4.basename(root).toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40) || "project";
+  const hash = createHash("sha256").update(path4.resolve(root)).digest("hex").slice(0, 6);
   return `${base}-${hash}`;
 }
 function findProject(manifest, query) {
@@ -2164,29 +2446,29 @@ function findProject(manifest, query) {
   return found;
 }
 async function ensureProjectDataDir(slug, globalConfigPath) {
-  const dir = path39.join(projectsDataDir(globalConfigPath), slug);
+  const dir = path4.join(projectsDataDir(globalConfigPath), slug);
   await fsp5.mkdir(dir, { recursive: true });
   return dir;
 }
 async function touchProjectInManifest(opts) {
-  const root = path39.resolve(opts.projectRoot);
+  const root = path4.resolve(opts.projectRoot);
   const file = projectsJsonPath(opts.globalConfigPath);
   let entry;
   await withFileLock(file, async () => {
     const manifest = await loadManifest(opts.globalConfigPath);
     const now = (/* @__PURE__ */ new Date()).toISOString();
-    entry = manifest.projects.find((p) => path39.resolve(p.root) === root);
+    entry = manifest.projects.find((p) => path4.resolve(p.root) === root);
     if (entry) {
       entry.lastSeen = now;
-      if (opts.workingDir) entry.lastWorkingDir = path39.resolve(opts.workingDir);
+      if (opts.workingDir) entry.lastWorkingDir = path4.resolve(opts.workingDir);
     } else {
       entry = {
-        name: opts.name ?? path39.basename(root),
+        name: opts.name ?? path4.basename(root),
         root,
         slug: generateSlug(root),
         createdAt: now,
         lastSeen: now,
-        lastWorkingDir: opts.workingDir ? path39.resolve(opts.workingDir) : void 0
+        lastWorkingDir: opts.workingDir ? path4.resolve(opts.workingDir) : void 0
       };
       manifest.projects.push(entry);
     }
@@ -2632,7 +2914,7 @@ __export(update_check_exports, {
   getUpdateNotification: () => getUpdateNotification
 });
 function cachePath(homeFn = defaultHomeDir2) {
-  return path39.join(homeFn(), ".wrongstack", "update-cache.json");
+  return path4.join(homeFn(), ".wrongstack", "update-cache.json");
 }
 function currentVersion() {
   const req2 = createRequire(import.meta.url);
@@ -2669,7 +2951,7 @@ async function readCache(homeFn = defaultHomeDir2) {
 }
 async function writeCache(entry, homeFn = defaultHomeDir2) {
   try {
-    const dir = path39.dirname(cachePath(homeFn));
+    const dir = path4.dirname(cachePath(homeFn));
     await fsp5.mkdir(dir, { recursive: true });
     await fsp5.writeFile(cachePath(homeFn), JSON.stringify(entry, null, 2), "utf8");
   } catch {
@@ -2755,7 +3037,7 @@ function registerWebuiInstance(p, deps = {}) {
       wsPort: p.wsPort,
       host: p.host,
       projectRoot: p.projectRoot,
-      projectName: path39.basename(p.projectRoot) || p.projectRoot,
+      projectName: path4.basename(p.projectRoot) || p.projectRoot,
       startedAt: p.startedAt,
       url: `http://${p.host}:${p.httpPort}`
     },
@@ -2766,7 +3048,7 @@ function registerWebuiInstance(p, deps = {}) {
 function announceWebuiReady(p) {
   const log = p.log ?? ((m) => console.log(m));
   const launch = p.openBrowserFn ?? openBrowser;
-  const openUrl = `http://${p.host}:${p.httpPort}`;
+  const openUrl = p.wsToken ? `http://${p.host}:${p.httpPort}?token=${encodeURIComponent(p.wsToken)}` : `http://${p.host}:${p.httpPort}`;
   p.server.on("listening", () => {
     log(
       `
@@ -2819,7 +3101,7 @@ var init_lifecycle = __esm({
   }
 });
 function getVault(globalConfigPath) {
-  const keyFile = path39.join(path39.dirname(globalConfigPath ?? ""), ".key");
+  const keyFile = path4.join(path4.dirname(globalConfigPath ?? ""), ".key");
   return new DefaultSecretVault({ keyFile });
 }
 async function loadSavedProviders(globalConfigPath) {
@@ -2853,7 +3135,7 @@ function resolveDistDir() {
   try {
     const requireFromHere = createRequire(import.meta.url);
     const serverEntry = requireFromHere.resolve("@wrongstack/webui/server");
-    return path39.resolve(path39.dirname(serverEntry), "..");
+    return path4.resolve(path4.dirname(serverEntry), "..");
   } catch {
     return null;
   }
@@ -2867,7 +3149,9 @@ function startStaticServe(opts, deps = {}) {
     host: opts.host,
     distDir,
     wsPort: opts.wsPort,
-    globalRoot: opts.globalRoot
+    globalRoot: opts.globalRoot,
+    onFleetPing: opts.onFleetPing,
+    apiToken: opts.apiToken
   });
   server.listen(opts.httpPort, opts.host);
   return { server, port: opts.httpPort };
@@ -2908,7 +3192,7 @@ async function handleModesList(ctx, ws) {
       payload: {
         modes: [],
         activeId: "default",
-        error: err instanceof Error ? err.message : String(err)
+        error: toErrorMessage(err)
       }
     });
   }
@@ -2931,7 +3215,7 @@ async function handleModeSwitch(ctx, ws, id) {
     const payload = await ctx.buildSessionStart({ mode: id });
     ctx.broadcast({ type: "session.start", payload });
   } catch (err) {
-    sendResult(ctx, ws, false, err instanceof Error ? err.message : String(err));
+    sendResult(ctx, ws, false, toErrorMessage(err));
   }
 }
 async function handleModelSwitch(ctx, ws, payload) {
@@ -2950,7 +3234,7 @@ async function handleModelSwitch(ctx, ws, payload) {
       ctx,
       ws,
       false,
-      `Switch failed: ${err instanceof Error ? err.message : String(err)}`
+      `Switch failed: ${toErrorMessage(err)}`
     );
   }
 }
@@ -2999,7 +3283,7 @@ async function handleModelRefine(ctx, ws, text) {
       payload: {
         refined: text,
         english: text,
-        error: err instanceof Error ? err.message : String(err)
+        error: toErrorMessage(err)
       }
     });
   }
@@ -3009,8 +3293,6 @@ var init_agent_config = __esm({
     init_provider_config();
   }
 });
-
-// src/webui-server/ws-handlers/brain.ts
 function sendResult2(ctx, ws, success, message) {
   ctx.send(ws, { type: "key.operation_result", payload: { success, message } });
 }
@@ -3064,7 +3346,7 @@ async function handleBrainAsk(ctx, ws, question) {
       ctx,
       ws,
       false,
-      `Brain consultation failed: ${err instanceof Error ? err.message : String(err)}`
+      `Brain consultation failed: ${toErrorMessage(err)}`
     );
   }
 }
@@ -3072,8 +3354,6 @@ var init_brain = __esm({
   "src/webui-server/ws-handlers/brain.ts"() {
   }
 });
-
-// src/webui-server/ws-handlers/connection.ts
 async function handleUserMessage(ctx, ws, content) {
   if (ctx.abortControllers.has(ws)) {
     ctx.send(ws, {
@@ -3106,7 +3386,7 @@ async function handleUserMessage(ctx, ws, content) {
       type: "error",
       payload: {
         phase: "agent.run",
-        message: err instanceof Error ? err.message : String(err)
+        message: toErrorMessage(err)
       }
     });
   } finally {
@@ -3355,8 +3635,6 @@ var init_cost_helpers = __esm({
   "src/webui-server/cost-helpers.ts"() {
   }
 });
-
-// src/webui-server/ws-handlers/introspection.ts
 async function handleSkillsList(ctx, ws) {
   if (!ctx.skillLoader) {
     ctx.send(ws, { type: "skills.list", payload: { skills: [], enabled: false } });
@@ -3387,7 +3665,7 @@ async function handleSkillsList(ctx, ws) {
       payload: {
         skills: [],
         enabled: true,
-        error: err instanceof Error ? err.message : String(err)
+        error: toErrorMessage(err)
       }
     });
   }
@@ -3544,8 +3822,8 @@ function sendResult6(ctx, ws, success, message) {
   ctx.send(ws, { type: "key.operation_result", payload: { success, message } });
 }
 async function handleProjectsList(ctx, ws) {
-  const projectsBase = ctx.opts.globalConfigPath ? path39.resolve(path39.dirname(ctx.opts.globalConfigPath)) : wstackGlobalRoot();
-  const manifestPath = path39.join(projectsBase, "projects.json");
+  const projectsBase = ctx.opts.globalConfigPath ? path4.resolve(path4.dirname(ctx.opts.globalConfigPath)) : wstackGlobalRoot();
+  const manifestPath = path4.join(projectsBase, "projects.json");
   try {
     const raw = await fsp5.readFile(manifestPath, "utf8");
     const manifest = JSON.parse(raw);
@@ -3558,22 +3836,22 @@ async function handleProjectsSelect(ctx, ws, payload) {
   const { opts } = ctx;
   const { root, name: projectName } = payload;
   try {
-    const resolved = path39.resolve(root);
+    const resolved = path4.resolve(root);
     const stat7 = await fsp5.stat(resolved).catch(() => null);
     if (!stat7?.isDirectory()) {
       ctx.send(ws, {
         type: "projects.selected",
         payload: {
           root,
-          name: projectName ?? path39.basename(root),
+          name: projectName ?? path4.basename(root),
           message: `Cannot switch: not a directory: ${resolved}`
         }
       });
       return;
     }
     const manifest = await loadManifest(opts.globalConfigPath);
-    const entry = manifest.projects.find((p) => path39.resolve(p.root) === resolved);
-    const displayName = projectName?.trim() || entry?.name || path39.basename(resolved);
+    const entry = manifest.projects.find((p) => path4.resolve(p.root) === resolved);
+    const displayName = projectName?.trim() || entry?.name || path4.basename(resolved);
     if (entry) {
       entry.lastSeen = (/* @__PURE__ */ new Date()).toISOString();
     } else {
@@ -3619,8 +3897,8 @@ async function handleProjectsSelect(ctx, ws, payload) {
       });
     } catch {
     }
-    const globalRoot = opts.globalConfigPath ? path39.dirname(opts.globalConfigPath) : wstackGlobalRoot();
-    const newSessionsDir = path39.join(resolveProjectDir(resolved, globalRoot), "sessions");
+    const globalRoot = opts.globalConfigPath ? path4.dirname(opts.globalConfigPath) : wstackGlobalRoot();
+    const newSessionsDir = path4.join(resolveProjectDir(resolved, globalRoot), "sessions");
     await fsp5.mkdir(newSessionsDir, { recursive: true });
     const newStore = new DefaultSessionStore({ dir: newSessionsDir });
     opts.sessionStore = newStore;
@@ -3644,17 +3922,17 @@ async function handleProjectsSelect(ctx, ws, payload) {
     const switchedP = await ctx.buildSessionStart({ reset: true, clearedSessionId: oldSessionId });
     ctx.broadcast({ type: "session.start", payload: switchedP });
   } catch (err) {
-    sendResult6(ctx, ws, false, err instanceof Error ? err.message : String(err));
+    sendResult6(ctx, ws, false, toErrorMessage(err));
   }
 }
 async function handleProjectsAdd(ctx, ws, payload) {
   const { root: addRoot, name: addName } = payload;
   try {
-    const resolved = path39.resolve(addRoot);
+    const resolved = path4.resolve(addRoot);
     const stat7 = await fsp5.stat(resolved).catch(() => null);
     if (!stat7?.isDirectory()) throw new Error(`Not a directory: ${resolved}`);
     const manifest = await loadManifest(ctx.opts.globalConfigPath);
-    const existing = manifest.projects.find((p) => path39.resolve(p.root) === resolved);
+    const existing = manifest.projects.find((p) => path4.resolve(p.root) === resolved);
     if (existing) {
       ctx.send(ws, {
         type: "projects.added",
@@ -3667,7 +3945,7 @@ async function handleProjectsAdd(ctx, ws, payload) {
       });
       return;
     }
-    const name = addName?.trim() || path39.basename(resolved);
+    const name = addName?.trim() || path4.basename(resolved);
     const slug = projectSlug(resolved);
     await ensureProjectDataDir(slug, ctx.opts.globalConfigPath);
     const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -3681,10 +3959,10 @@ async function handleProjectsAdd(ctx, ws, payload) {
     ctx.send(ws, {
       type: "projects.added",
       payload: {
-        name: path39.basename(addRoot),
+        name: path4.basename(addRoot),
         root: addRoot,
         slug: "",
-        message: err instanceof Error ? err.message : String(err)
+        message: toErrorMessage(err)
       }
     });
   }
@@ -3692,8 +3970,8 @@ async function handleProjectsAdd(ctx, ws, payload) {
 async function handleWorkingDirSet(ctx, ws, newPath) {
   try {
     const wdRoot = ctx.opts.projectRoot ?? ctx.opts.agent.ctx.projectRoot;
-    const resolved = path39.resolve(wdRoot, newPath);
-    if (!resolved.startsWith(wdRoot + path39.sep) && resolved !== wdRoot) {
+    const resolved = path4.resolve(wdRoot, newPath);
+    if (!resolved.startsWith(wdRoot + path4.sep) && resolved !== wdRoot) {
       sendResult6(ctx, ws, false, `Path must stay inside the project root: ${wdRoot}`);
       return;
     }
@@ -3706,7 +3984,7 @@ async function handleWorkingDirSet(ctx, ws, newPath) {
     ctx.broadcast({ type: "working_dir.changed", payload: { cwd: resolved, projectRoot: wdRoot } });
     sendResult6(ctx, ws, true, `Working directory set to ${resolved}`);
   } catch (err) {
-    sendResult6(ctx, ws, false, err instanceof Error ? err.message : String(err));
+    sendResult6(ctx, ws, false, toErrorMessage(err));
   }
 }
 var init_projects = __esm({
@@ -3714,11 +3992,27 @@ var init_projects = __esm({
     init_project_utils();
   }
 });
-
-// src/webui-server/ws-handlers/providers.ts
 function sendResult7(ctx, ws, success, message) {
   ctx.send(ws, { type: "key.operation_result", payload: { success, message } });
 }
+function broadcastSaved(ctx, providers) {
+  ctx.broadcast({
+    type: "providers.saved",
+    payload: {
+      providers: Object.entries(providers).map(([id, cfg]) => ({
+        id,
+        family: cfg.family,
+        baseUrl: cfg.baseUrl,
+        apiKeys: normalizeKeys(cfg).map((k) => ({
+          label: k.label,
+          maskedKey: maskedKey(k.apiKey),
+          isActive: k.label === cfg.activeKey,
+          createdAt: k.createdAt
+        }))
+      }))
+    }
+  });
+}
 async function handleProvidersList(ctx, ws) {
   if (!ctx.modelsRegistry) {
     sendResult7(ctx, ws, false, "Models registry not available");
@@ -3743,7 +4037,7 @@ async function handleProvidersList(ctx, ws) {
       }
     });
   } catch (err) {
-    sendResult7(ctx, ws, false, err instanceof Error ? err.message : String(err));
+    sendResult7(ctx, ws, false, toErrorMessage(err));
   }
 }
 async function handleProviderModels(ctx, ws, providerId) {
@@ -3778,7 +4072,7 @@ async function handleProviderModels(ctx, ws, providerId) {
       }
     });
   } catch (err) {
-    sendResult7(ctx, ws, false, err instanceof Error ? err.message : String(err));
+    sendResult7(ctx, ws, false, toErrorMessage(err));
   }
 }
 async function handleProvidersSaved(ctx, ws) {
@@ -3801,7 +4095,7 @@ async function handleProvidersSaved(ctx, ws) {
       }
     });
   } catch (err) {
-    sendResult7(ctx, ws, false, err instanceof Error ? err.message : String(err));
+    sendResult7(ctx, ws, false, toErrorMessage(err));
   }
 }
 async function handleKeyUpsert(ctx, ws, providerId, label, apiKey) {
@@ -3821,7 +4115,7 @@ async function handleKeyUpsert(ctx, ws, providerId, label, apiKey) {
     await ctx.providerStore.save(providers);
     sendResult7(ctx, ws, true, `Key "${label}" saved for ${providerId}`);
   } catch (err) {
-    sendResult7(ctx, ws, false, err instanceof Error ? err.message : String(err));
+    sendResult7(ctx, ws, false, toErrorMessage(err));
   }
 }
 async function handleKeyDelete(ctx, ws, providerId, label) {
@@ -3845,7 +4139,7 @@ async function handleKeyDelete(ctx, ws, providerId, label) {
     await ctx.providerStore.save(providers);
     sendResult7(ctx, ws, true, `Key "${label}" deleted from ${providerId}`);
   } catch (err) {
-    sendResult7(ctx, ws, false, err instanceof Error ? err.message : String(err));
+    sendResult7(ctx, ws, false, toErrorMessage(err));
   }
 }
 async function handleKeySetActive(ctx, ws, providerId, label) {
@@ -3862,7 +4156,7 @@ async function handleKeySetActive(ctx, ws, providerId, label) {
     await ctx.providerStore.save(providers);
     sendResult7(ctx, ws, true, `Active key for ${providerId} set to "${label}"`);
   } catch (err) {
-    sendResult7(ctx, ws, false, err instanceof Error ? err.message : String(err));
+    sendResult7(ctx, ws, false, toErrorMessage(err));
   }
 }
 async function handleProviderAdd(ctx, ws, payload) {
@@ -3907,7 +4201,7 @@ async function handleProviderAdd(ctx, ws, payload) {
       }
     });
   } catch (err) {
-    sendResult7(ctx, ws, false, err instanceof Error ? err.message : String(err));
+    sendResult7(ctx, ws, false, toErrorMessage(err));
   }
 }
 async function handleProviderRemove(ctx, ws, providerId) {
@@ -3921,12 +4215,92 @@ async function handleProviderRemove(ctx, ws, providerId) {
     await ctx.providerStore.save(providers);
     sendResult7(ctx, ws, true, `Provider "${providerId}" removed`);
   } catch (err) {
-    sendResult7(ctx, ws, false, err instanceof Error ? err.message : String(err));
+    sendResult7(ctx, ws, false, toErrorMessage(err));
+  }
+}
+async function handleProviderClearModels(ctx, ws, providerId) {
+  try {
+    const providers = await ctx.providerStore.load();
+    const cfg = providers[providerId];
+    if (!cfg) {
+      sendResult7(ctx, ws, false, `Unknown provider "${providerId}"`);
+      return;
+    }
+    delete cfg.models;
+    await ctx.providerStore.save(providers);
+    sendResult7(ctx, ws, true, `Cleared model allowlist for ${providerId}`);
+    broadcastSaved(ctx, providers);
+  } catch (err) {
+    sendResult7(ctx, ws, false, toErrorMessage(err));
+  }
+}
+async function handleProviderUndoClear(ctx, ws, providerId, previousModels) {
+  try {
+    const providers = await ctx.providerStore.load();
+    const cfg = providers[providerId];
+    if (!cfg) {
+      sendResult7(ctx, ws, false, `Unknown provider "${providerId}"`);
+      return;
+    }
+    cfg.models = [...previousModels];
+    await ctx.providerStore.save(providers);
+    sendResult7(ctx, ws, true, `Restored ${previousModels.length} model(s) for ${providerId}`);
+    broadcastSaved(ctx, providers);
+  } catch (err) {
+    sendResult7(ctx, ws, false, toErrorMessage(err));
+  }
+}
+async function handleProviderUpdate(ctx, ws, payload) {
+  try {
+    const providers = await ctx.providerStore.load();
+    const cfg = providers[payload.id];
+    if (!cfg) {
+      sendResult7(ctx, ws, false, `Unknown provider "${payload.id}"`);
+      return;
+    }
+    if (payload.family !== void 0) cfg.family = payload.family;
+    if (payload.baseUrl !== void 0) cfg.baseUrl = payload.baseUrl;
+    if (payload.envVars !== void 0) cfg.envVars = payload.envVars;
+    if (payload.models !== void 0) cfg.models = payload.models;
+    await ctx.providerStore.save(providers);
+    sendResult7(ctx, ws, true, `Updated ${payload.id}`);
+    broadcastSaved(ctx, providers);
+  } catch (err) {
+    sendResult7(ctx, ws, false, toErrorMessage(err));
+  }
+}
+async function handleProviderProbe(ctx, ws, providerId, timeoutMs) {
+  const reply = (payload) => ctx.send(ws, { type: "provider.probe", payload: { providerId, ...payload } });
+  try {
+    const providers = await ctx.providerStore.load();
+    const cfg = providers[providerId];
+    if (!cfg) {
+      reply({ ok: false, status: "no_provider" });
+      return;
+    }
+    if (!cfg.baseUrl) {
+      reply({ ok: false, status: "no_base_url" });
+      return;
+    }
+    const keys = normalizeKeys(cfg);
+    const active = keys.find((k) => k.label === cfg.activeKey) ?? keys[0];
+    const result = await probeLocalLlm({
+      baseUrl: cfg.baseUrl,
+      apiKey: active?.apiKey,
+      noAuth: false,
+      scrubber: probeScrubber,
+      ...timeoutMs !== void 0 ? { timeoutMs } : {}
+    });
+    reply(result);
+  } catch (err) {
+    reply({ ok: false, status: "unreachable", detail: toErrorMessage(err) });
   }
 }
+var probeScrubber;
 var init_providers = __esm({
   "src/webui-server/ws-handlers/providers.ts"() {
     init_provider_config();
+    probeScrubber = new DefaultSecretScrubber();
   }
 });
 function sendResult8(ctx, ws, success, message) {
@@ -3934,13 +4308,13 @@ function sendResult8(ctx, ws, success, message) {
 }
 function storeFor(opts) {
   return opts.sessionStore ?? new DefaultSessionStore({
-    dir: path39.join(opts.projectRoot ?? opts.agent.ctx.projectRoot, ".wrongstack", "sessions")
+    dir: path4.join(opts.projectRoot ?? opts.agent.ctx.projectRoot, ".wrongstack", "sessions")
   });
 }
 async function handleGoalGet(ctx, _ws) {
   const projectRoot = ctx.opts.projectRoot ?? ctx.opts.agent.ctx.projectRoot;
   try {
-    const goalPath = path39.join(projectRoot, ".wrongstack", "goal.json");
+    const goalPath = path4.join(projectRoot, ".wrongstack", "goal.json");
     const raw = await fsp5.readFile(goalPath, "utf8");
     ctx.broadcast({ type: "goal.updated", payload: JSON.parse(raw) });
   } catch {
@@ -3968,7 +4342,7 @@ async function handleSessionsList(ctx, ws, limit) {
   } catch (err) {
     ctx.send(ws, {
       type: "sessions.list",
-      payload: { sessions: [], error: err instanceof Error ? err.message : String(err) }
+      payload: { sessions: [], error: toErrorMessage(err) }
     });
   }
 }
@@ -4000,7 +4374,7 @@ async function handleSessionNew(ctx, _ws) {
         JSON.stringify({
           level: "warn",
           event: "webui.session_new_store_failed",
-          message: err instanceof Error ? err.message : String(err),
+          message: toErrorMessage(err),
           timestamp: (/* @__PURE__ */ new Date()).toISOString()
         })
       );
@@ -4016,7 +4390,7 @@ async function handleSessionNew(ctx, _ws) {
 function rewinderFor(opts) {
   const projectRoot = opts.projectRoot ?? opts.agent.ctx.projectRoot;
   return new DefaultSessionRewinder(
-    opts.sessionsDir ?? path39.join(projectRoot, ".wrongstack", "sessions"),
+    opts.sessionsDir ?? path4.join(projectRoot, ".wrongstack", "sessions"),
     projectRoot
   );
 }
@@ -4040,7 +4414,7 @@ async function handleSessionRewind(ctx, ws, checkpointIndex) {
     const payload = await ctx.buildSessionStart({ reset: true });
     ctx.broadcast({ type: "session.start", payload });
   } catch (err) {
-    sendResult8(ctx, ws, false, err instanceof Error ? err.message : String(err));
+    sendResult8(ctx, ws, false, toErrorMessage(err));
   }
 }
 async function handleSessionDelete(ctx, ws, id) {
@@ -4052,7 +4426,7 @@ async function handleSessionDelete(ctx, ws, id) {
     await storeFor(ctx.opts).delete(id);
     sendResult8(ctx, ws, true, `Session ${id} deleted`);
   } catch (err) {
-    sendResult8(ctx, ws, false, err instanceof Error ? err.message : String(err));
+    sendResult8(ctx, ws, false, toErrorMessage(err));
   }
 }
 function handleSessionSave(ctx, ws) {
@@ -4095,7 +4469,7 @@ async function handleSessionResume(ctx, ws, id) {
     ctx.broadcast({ type: "session.start", payload });
     sendResult8(ctx, ws, true, `Resumed session ${id}`);
   } catch (err) {
-    sendResult8(ctx, ws, false, err instanceof Error ? err.message : String(err));
+    sendResult8(ctx, ws, false, toErrorMessage(err));
   }
 }
 var init_sessions = __esm({
@@ -4350,14 +4724,14 @@ async function runWebUI(opts) {
   let customModeStoreP = null;
   const getCustomModeStore = () => {
     customModeStoreP ??= (async () => {
-      const dir = opts.globalConfigPath ? path39.dirname(opts.globalConfigPath) : wstackGlobalRoot();
+      const dir = opts.globalConfigPath ? path4.dirname(opts.globalConfigPath) : wstackGlobalRoot();
       const store = createCustomModeStore(dir);
       await store.load();
       return store;
     })();
     return customModeStoreP;
   };
-  const autoPhaseStoreDir = opts.projectRoot ? path39.join(opts.projectRoot, ".wrongstack", "autophase") : path39.join(os.tmpdir(), ".wrongstack", "autophase");
+  const autoPhaseStoreDir = opts.projectRoot ? path4.join(opts.projectRoot, ".wrongstack", "autophase") : path4.join(os.tmpdir(), ".wrongstack", "autophase");
   const autoPhaseHandler = new AutoPhaseWebSocketHandler(
     opts.agent,
     opts.agent.ctx,
@@ -4388,7 +4762,12 @@ async function runWebUI(opts) {
     "contextAutoCompact",
     "contextStrategy",
     "logLevel",
-    "auditLevel"
+    "auditLevel",
+    // Telegram plugin notification settings (parity with the standalone server).
+    "tgConfigured",
+    "tgSessionEnd",
+    "tgDelegate",
+    "tgLongToolMs"
   ];
   const prefSnapshot = () => {
     const snapshot = {};
@@ -4427,6 +4806,12 @@ async function runWebUI(opts) {
       meta["logLevel"] = cfg.log?.["level"] ?? "info";
       meta["auditLevel"] = cfg.session?.["auditLevel"] ?? "standard";
       meta["maxIterations"] = cfg.tools?.["maxIterations"] ?? 500;
+      const tgExt = cfg.extensions?.["telegram"];
+      meta["tgConfigured"] = typeof tgExt?.["botToken"] === "string" && tgExt["botToken"].length > 0;
+      meta["tgSessionEnd"] = tgExt?.["notifyOnSessionEnd"] === true;
+      meta["tgDelegate"] = tgExt?.["notifyOnDelegate"] !== false;
+      const tgMs = tgExt?.["longToolThresholdMs"];
+      meta["tgLongToolMs"] = typeof tgMs === "number" ? tgMs : 3e4;
     } catch {
     }
   }
@@ -4448,7 +4833,7 @@ async function runWebUI(opts) {
         return;
       }
       const vault = new DefaultSecretVault({
-        keyFile: path39.join(path39.dirname(configPath2), ".key")
+        keyFile: path4.join(path4.dirname(configPath2), ".key")
       });
       const decrypted = decryptConfigSecrets$1(parsed, vault);
       const autonomyCfg = decrypted.autonomy ?? {};
@@ -4521,6 +4906,16 @@ async function runWebUI(opts) {
         toolsCfg.maxIterations = payload["maxIterations"];
         decrypted.tools = toolsCfg;
       }
+      const tgTouched = typeof payload["tgSessionEnd"] === "boolean" || typeof payload["tgDelegate"] === "boolean" || typeof payload["tgLongToolMs"] === "number";
+      if (tgTouched) {
+        const ext = decrypted.extensions ?? {};
+        const tg = ext["telegram"] ?? {};
+        if (typeof payload["tgSessionEnd"] === "boolean") tg["notifyOnSessionEnd"] = payload["tgSessionEnd"];
+        if (typeof payload["tgDelegate"] === "boolean") tg["notifyOnDelegate"] = payload["tgDelegate"];
+        if (typeof payload["tgLongToolMs"] === "number") tg["longToolThresholdMs"] = payload["tgLongToolMs"];
+        ext["telegram"] = tg;
+        decrypted.extensions = ext;
+      }
       const encrypted = encryptConfigSecrets$1(decrypted, vault);
       await atomicWrite(configPath2, JSON.stringify(encrypted, null, 2), { mode: 384 });
     };
@@ -4542,7 +4937,6 @@ async function runWebUI(opts) {
       );
     }
   };
-  const authToken = crypto3.randomBytes(16).toString("hex");
   const sessionStartedAt = Date.now();
   async function buildSessionStartPayload(overrides, needsSetup = false) {
     let maxContext = 0;
@@ -4571,7 +4965,7 @@ async function runWebUI(opts) {
       model: opts.agent.ctx.model,
       provider: opts.agent.ctx.provider.id,
       mode: opts.modeId ?? "default",
-      projectName: opts.projectRoot ? path39.basename(opts.projectRoot) : void 0,
+      projectName: opts.projectRoot ? path4.basename(opts.projectRoot) : void 0,
       // Frontend reads `projectRoot` from session.start (ws-handlers setEnv) —
       // omitting it left the store's projectRoot empty after a project switch.
       projectRoot: opts.projectRoot ?? opts.agent.ctx.projectRoot ?? "",
@@ -4597,7 +4991,7 @@ async function runWebUI(opts) {
       const projectDir = resolveProjectDir(opts.projectRoot, wstackGlobalRoot());
       const mailbox = new GlobalMailbox(projectDir, opts.events);
       webuiClientId = `webui@${crypto3.randomUUID().slice(0, 8)}`;
-      const projectName = opts.projectRoot ? path39.basename(opts.projectRoot) : "unknown";
+      const projectName = opts.projectRoot ? path4.basename(opts.projectRoot) : "unknown";
       await mailbox.registerClient({
         clientId: webuiClientId,
         sessionId: opts.projectRoot,
@@ -4622,13 +5016,19 @@ async function runWebUI(opts) {
     }
   };
   registerWebuiClient();
+  const wsToken = generateAuthToken();
   const wss = new WebSocketServer({ port, host, maxPayload: 1 * 1024 * 1024 });
   console.log(`[WebUI] WebSocket server starting on ws://${host}:${port}`);
+  let fleetBroadcastCli = null;
   const httpServer = startStaticServe({
     host,
     httpPort,
     wsPort,
-    globalRoot: path39.dirname(opts.globalConfigPath ?? "")
+    globalRoot: path4.dirname(opts.globalConfigPath ?? ""),
+    onFleetPing: () => {
+      void fleetBroadcastCli?.();
+    },
+    apiToken: wsToken
   });
   if (httpServer) {
     announceWebuiReady({
@@ -4636,14 +5036,15 @@ async function runWebUI(opts) {
       host,
       httpPort,
       wsPort,
-      open: !!opts.open
+      open: !!opts.open,
+      wsToken
     });
   } else {
     console.warn(
       `[WebUI] Frontend not served (run \`pnpm --filter @wrongstack/webui build\`). WS bridge still active on ws://${host}:${wsPort}.`
     );
   }
-  const registryBaseDir = opts.globalConfigPath ? path39.dirname(opts.globalConfigPath) : void 0;
+  const registryBaseDir = opts.globalConfigPath ? path4.dirname(opts.globalConfigPath) : void 0;
   if (opts.projectRoot) {
     registerWebuiInstance({
       pid: process.pid,
@@ -4678,9 +5079,13 @@ async function runWebUI(opts) {
     emitConcurrency();
     eventUnsubscribers.push(
       opts.events.on("iteration.started", (e) => {
+        const maxIt = opts.agent.ctx.meta["maxIterations"];
         broadcast({
           type: "iteration.started",
-          payload: { index: e.index }
+          payload: {
+            index: e.index,
+            ...typeof maxIt === "number" ? { maxIterations: maxIt } : {}
+          }
         });
       })
     );
@@ -4941,6 +5346,18 @@ async function runWebUI(opts) {
     broadcast,
     log: (m) => console.log(m)
   };
+  const skillsProjectRoot = opts.projectRoot ?? opts.agent.ctx.projectRoot ?? "";
+  const skillsCtx = {
+    skillLoader: opts.skillLoader,
+    skillInstaller: opts.skillLoader ? new SkillInstaller({
+      manifestPath: path4.join(wstackGlobalRoot(), "installed-skills.json"),
+      projectSkillsDir: path4.join(skillsProjectRoot, ".wrongstack", "skills"),
+      globalSkillsDir: path4.join(wstackGlobalRoot(), "skills"),
+      projectHash: skillsProjectRoot ? projectHash(skillsProjectRoot) : "",
+      skillLoader: opts.skillLoader
+    }) : void 0,
+    projectRoot: skillsProjectRoot
+  };
   const worklistCtx = {
     agent: opts.agent,
     sessionId: opts.session.id,
@@ -5005,20 +5422,22 @@ async function runWebUI(opts) {
       console.log(`[WebUI] WebSocket server running on ws://${host}:${port}`);
       setupEvents();
       opts.onListening?.({ httpPort, wsPort, host });
-      const globalRoot = opts.globalConfigPath ? path39.dirname(opts.globalConfigPath) : void 0;
+      const globalRoot = opts.globalConfigPath ? path4.dirname(opts.globalConfigPath) : void 0;
       if (globalRoot) {
-        const statusInterval = setInterval(async () => {
+        const broadcastSessions = async () => {
           try {
             const { SessionRegistry } = await import('@wrongstack/core');
             const registry = new SessionRegistry(globalRoot);
             const sessions = await registry.list();
-            const live = sessions.filter((s) => s.status !== "stale").map((s) => ({
+            const mySlug = sessions.find((s) => s.pid === process.pid)?.projectSlug;
+            const live = sessions.filter((s) => s.status !== "stale").filter((s) => mySlug ? s.projectSlug === mySlug : true).map((s) => ({
               sessionId: s.sessionId,
               projectName: s.projectName,
               projectSlug: s.projectSlug,
               projectRoot: s.projectRoot,
               workingDir: s.workingDir,
               gitBranch: s.gitBranch,
+              clientType: s.clientType,
               status: s.status,
               pid: s.pid,
               startedAt: s.startedAt,
@@ -5030,60 +5449,52 @@ async function runWebUI(opts) {
                 currentTool: a.currentTool,
                 iterations: a.iterations,
                 toolCalls: a.toolCalls,
+                costUsd: a.costUsd,
+                tokensIn: a.tokensIn,
+                tokensOut: a.tokensOut,
+                ctxPct: a.ctxPct,
+                model: a.model,
+                partialText: a.partialText,
                 lastActivityAt: a.lastActivityAt
               }))
             }));
             broadcast({ type: "sessions.status_update", payload: { sessions: live } });
           } catch {
           }
-        }, 5e3);
+        };
+        fleetBroadcastCli = broadcastSessions;
+        const statusInterval = setInterval(() => void broadcastSessions(), 5e3);
         if (statusInterval.unref) statusInterval.unref();
         eventUnsubscribers.push(() => clearInterval(statusInterval));
-      }
-    });
-    wss.on("connection", async (ws, req2) => {
-      const isLoopback = (hostname) => hostname === "localhost" || hostname === "127.0.0.1" || hostname === "::1" || hostname === "[::1]";
-      const tokenMatches = (provided) => {
-        if (!provided) return false;
-        const a = Buffer.from(provided);
-        const b = Buffer.from(authToken);
-        return a.length === b.length && crypto3.timingSafeEqual(a, b);
-      };
-      try {
-        const url = new URL(req2.url ?? "/", `http://localhost:${port}`);
-        const token = url.searchParams.get("token");
-        const tokenOk = tokenMatches(token);
-        const hostHeader = (req2.headers.host ?? "").trim();
-        let hostOk = false;
+        let regDebounce;
         try {
-          hostOk = !!hostHeader && isLoopback(new URL(`http://${hostHeader}`).hostname);
+          const regWatcher = watch(globalRoot, { persistent: false }, (_event, filename) => {
+            const name = filename ? String(filename) : "";
+            if (!name.startsWith("session-registry.json") || name.endsWith(".lock")) return;
+            if (regDebounce) clearTimeout(regDebounce);
+            regDebounce = setTimeout(() => void broadcastSessions(), 150);
+          });
+          eventUnsubscribers.push(() => {
+            if (regDebounce) clearTimeout(regDebounce);
+            regWatcher.close();
+          });
         } catch {
-          hostOk = false;
         }
-        if (!hostOk) {
-          ws.close(4003, "Forbidden: non-loopback Host header");
-          return;
-        }
-        const origin = req2.headers.origin;
-        if (origin) {
-          try {
-            const { hostname } = new URL(origin);
-            if (!isLoopback(hostname) && !tokenOk) {
-              ws.close(4003, "Forbidden: non-loopback origin requires auth token");
-              return;
-            }
-          } catch {
-            ws.close(4003, "Forbidden: invalid origin");
-            return;
-          }
-        } else {
-          if (!tokenOk) {
-            ws.close(4003, "Forbidden: auth token required for non-browser clients");
-            return;
-          }
-        }
-      } catch {
-        ws.close(4001, "Unauthorized: malformed request");
+        void broadcastSessions();
+      }
+    });
+    wss.on("connection", async (ws, req2) => {
+      const ok = verifyClient({
+        origin: req2.headers.origin,
+        url: req2.url ?? "/",
+        hostHeader: req2.headers.host,
+        remoteAddress: req2.socket.remoteAddress,
+        cookieHeader: req2.headers.cookie,
+        wsHost: host,
+        expectedToken: wsToken
+      });
+      if (!ok) {
+        ws.close(4003, "Forbidden");
         return;
       }
       const client = { ws, sessionId: opts.session.id };
@@ -5227,6 +5638,31 @@ async function runWebUI(opts) {
         await handleProviderRemove(wsHandlerCtx, ws, m.payload.providerId);
         break;
       }
+      case "provider.clear_models": {
+        const m = msg;
+        await handleProviderClearModels(wsHandlerCtx, ws, m.payload.providerId);
+        break;
+      }
+      case "provider.undo_clear": {
+        const m = msg;
+        await handleProviderUndoClear(
+          wsHandlerCtx,
+          ws,
+          m.payload.providerId,
+          m.payload.previousModels
+        );
+        break;
+      }
+      case "provider.update": {
+        const m = msg;
+        await handleProviderUpdate(wsHandlerCtx, ws, m.payload);
+        break;
+      }
+      case "provider.probe": {
+        const m = msg;
+        await handleProviderProbe(wsHandlerCtx, ws, m.payload.providerId, m.payload.timeoutMs);
+        break;
+      }
       case "todos.get": {
         handleTodosGet(worklistCtx, ws);
         break;
@@ -5383,10 +5819,84 @@ async function runWebUI(opts) {
         }
         return handleMemoryForget(ws, msg, opts.memoryStore);
       }
+      // ── MCP operations — MCP servers are read directly from config file ──
+      case "mcp.list": {
+        const servers = [];
+        if (opts.globalConfigPath) {
+          try {
+            const raw = await fsp5.readFile(opts.globalConfigPath, "utf8");
+            const cfg = JSON.parse(raw);
+            const mcpServers = cfg.mcpServers;
+            if (mcpServers) {
+              for (const [name, serverCfg] of Object.entries(mcpServers)) {
+                servers.push({
+                  name,
+                  transport: serverCfg.transport ?? "stdio",
+                  status: "stopped",
+                  enabled: serverCfg.enabled ?? true,
+                  // Conditional spreads keep these absent (not explicitly
+                  // `undefined`) to satisfy exactOptionalPropertyTypes.
+                  ...serverCfg.description !== void 0 && { description: serverCfg.description },
+                  ...serverCfg.allowedTools !== void 0 && { tools: serverCfg.allowedTools }
+                });
+              }
+            }
+          } catch {
+          }
+        }
+        send(ws, { type: "mcp.list", payload: { servers } });
+        break;
+      }
+      case "mcp.add":
+      case "mcp.remove":
+      case "mcp.update":
+      case "mcp.wake":
+      case "mcp.sleep":
+      case "mcp.discover":
+      case "mcp.enable":
+      case "mcp.disable":
+      case "mcp.restart": {
+        send(ws, {
+          type: "mcp.operation_result",
+          payload: {
+            success: false,
+            message: 'MCP management operations require the standalone WebUI server. Please run "wrongstack webui" instead of "wrongstack --webui".'
+          }
+        });
+        break;
+      }
       case "skills.list": {
         await handleSkillsList(introspectionCtx, ws);
         break;
       }
+      case "skills.content": {
+        await handleSkillsContent(ws, skillsCtx, msg);
+        break;
+      }
+      case "skills.install": {
+        await handleSkillsInstall(ws, skillsCtx, msg);
+        break;
+      }
+      case "skills.uninstall": {
+        await handleSkillsUninstall(ws, skillsCtx, msg);
+        break;
+      }
+      case "skills.update": {
+        await handleSkillsUpdate(ws, skillsCtx, msg);
+        break;
+      }
+      case "skills.create": {
+        await handleSkillsCreate(ws, skillsCtx, msg);
+        break;
+      }
+      case "skills.edit": {
+        await handleSkillsEdit(ws, skillsCtx, msg);
+        break;
+      }
+      case "skills.export": {
+        await handleSkillsExport(ws, skillsCtx);
+        break;
+      }
       case "modes.list": {
         await handleModesList(agentConfigCtx, ws);
         break;
@@ -5501,11 +6011,16 @@ async function runWebUI(opts) {
         break;
       }
       // Collaboration messages — the CLI webui-server doesn't run a
-      // full collab hub; silently acknowledge and ignore.
+      // full collab hub; silently acknowledge and ignore. request_pause /
+      // resume are included so the CollabPanel's pause/resume buttons don't
+      // trip the "Unhandled message type" warning (the standalone webui
+      // server is the one that wires the real CollaborationWebSocketHandler).
       case "collab.join":
       case "collab.leave":
       case "collab.annotate":
       case "collab.resolve":
+      case "collab.request_pause":
+      case "collab.resume":
         break;
       case "projects.list": {
         await handleProjectsList(projectsCtx, ws);
@@ -5554,7 +6069,7 @@ async function runWebUI(opts) {
       // ── Mailbox operations — project-level inter-agent messaging ────
       case "mailbox.messages": {
         const projectRoot = opts.projectRoot ?? opts.agent.ctx.projectRoot ?? "";
-        const globalRoot = opts.globalConfigPath ? path39.dirname(opts.globalConfigPath) : "";
+        const globalRoot = opts.globalConfigPath ? path4.dirname(opts.globalConfigPath) : "";
         if (!projectRoot || !globalRoot) {
           send(ws, {
             type: "mailbox.messages",
@@ -5603,7 +6118,7 @@ async function runWebUI(opts) {
       }
       case "mailbox.agents": {
         const projectRoot = opts.projectRoot ?? opts.agent.ctx.projectRoot ?? "";
-        const globalRoot = opts.globalConfigPath ? path39.dirname(opts.globalConfigPath) : "";
+        const globalRoot = opts.globalConfigPath ? path4.dirname(opts.globalConfigPath) : "";
         if (!projectRoot || !globalRoot) {
           send(ws, {
             type: "mailbox.agents",
@@ -5646,7 +6161,7 @@ async function runWebUI(opts) {
       }
       case "mailbox.clear": {
         const projectRoot = opts.projectRoot ?? opts.agent.ctx.projectRoot ?? "";
-        const globalRoot = opts.globalConfigPath ? path39.dirname(opts.globalConfigPath) : "";
+        const globalRoot = opts.globalConfigPath ? path4.dirname(opts.globalConfigPath) : "";
         if (!projectRoot || !globalRoot) {
           send(ws, { type: "mailbox.cleared", payload: { error: "No project root available" } });
           break;
@@ -5664,6 +6179,32 @@ async function runWebUI(opts) {
         }
         break;
       }
+      case "mailbox.purge": {
+        const projectRoot = opts.projectRoot ?? opts.agent.ctx.projectRoot ?? "";
+        const globalRoot = opts.globalConfigPath ? path4.dirname(opts.globalConfigPath) : "";
+        if (!projectRoot || !globalRoot) {
+          send(ws, { type: "mailbox.purged", payload: { error: "No project root available" } });
+          break;
+        }
+        try {
+          const mbDir = resolveProjectDir(projectRoot, globalRoot);
+          const mb = new GlobalMailbox(mbDir);
+          const payload = msg;
+          const result = await mb.purgeStale(payload.payload);
+          send(ws, { type: "mailbox.purged", payload: result });
+        } catch (err) {
+          send(ws, {
+            type: "mailbox.purged",
+            payload: { error: err instanceof Error ? err.message : String(err) }
+          });
+        }
+        break;
+      }
+      case "git.info": {
+        const projectRoot = opts.projectRoot ?? opts.agent.ctx.projectRoot ?? "";
+        await handleGitInfo(ws, projectRoot);
+        break;
+      }
       default: {
         const msgType = msg.type;
         if (msgType.startsWith("autophase.")) {
@@ -6276,7 +6817,7 @@ var ReadlineInputReader = class {
   history = [];
   pending = false;
   constructor(opts = {}) {
-    this.historyFile = opts.historyFile ?? path39.join(wstackGlobalRoot(), "history");
+    this.historyFile = opts.historyFile ?? path4.join(wstackGlobalRoot(), "history");
   }
   async loadHistory() {
     try {
@@ -6288,7 +6829,7 @@ var ReadlineInputReader = class {
   }
   async saveHistory() {
     try {
-      await fsp5.mkdir(path39.dirname(this.historyFile), { recursive: true });
+      await fsp5.mkdir(path4.dirname(this.historyFile), { recursive: true });
       await fsp5.writeFile(this.historyFile, this.history.slice(-1e3).join("\n"));
     } catch {
     }
@@ -6620,7 +7161,7 @@ function pickGroupIndex(opts) {
         if (Number.isFinite(parsed)) current = wrap(parsed);
       } catch {
       }
-      fs2.mkdirSync(path39.dirname(opts.cursorFile), { recursive: true });
+      fs2.mkdirSync(path4.dirname(opts.cursorFile), { recursive: true });
       fs2.writeFileSync(opts.cursorFile, String(wrap(current + 1)));
       return current;
     } catch {
@@ -6673,11 +7214,11 @@ function assertSafeToDelete(filename, parentDir) {
     throw new FsError({
       message: `Refusing to delete protected file: ${filename}`,
       code: ERROR_CODES.FS_DELETE_FAILED,
-      path: path39.join(parentDir, filename),
+      path: path4.join(parentDir, filename),
       context: { reason: "protected_basename" }
     });
   }
-  if (filename !== path39.basename(filename)) {
+  if (filename !== path4.basename(filename)) {
     throw new FsError({
       message: `Refusing to delete path with traversal: ${filename}`,
       code: ERROR_CODES.FS_DELETE_FAILED,
@@ -6689,11 +7230,11 @@ function assertSafeToDelete(filename, parentDir) {
     throw new FsError({
       message: `Refusing to delete unknown file: ${filename}`,
       code: ERROR_CODES.FS_DELETE_FAILED,
-      path: path39.join(parentDir, filename),
+      path: path4.join(parentDir, filename),
       context: { reason: "unknown_file_pattern" }
     });
   }
-  const resolvedParent = path39.resolve(parentDir);
+  const resolvedParent = path4.resolve(parentDir);
   if (!resolvedParent.endsWith(".wrongstack")) {
     throw new FsError({
       message: `Unexpected parent directory for bak prune: ${resolvedParent}`,
@@ -6704,8 +7245,8 @@ function assertSafeToDelete(filename, parentDir) {
   }
 }
 async function safeDelete(filePath) {
-  const dir = path39.dirname(filePath);
-  const filename = path39.basename(filePath);
+  const dir = path4.dirname(filePath);
+  const filename = path4.basename(filePath);
   try {
     assertSafeToDelete(filename, dir);
     await fsp5.unlink(filePath);
@@ -6750,16 +7291,16 @@ function diffSummary(oldCfg, newCfg) {
 }
 var defaultHomeDir = () => os__default.homedir();
 function historyDir(homeFn = defaultHomeDir) {
-  return path39.join(homeFn(), ".wrongstack", "config.history", "entries");
+  return path4.join(homeFn(), ".wrongstack", "config.history", "entries");
 }
 function historyIndexPath(homeFn = defaultHomeDir) {
-  return path39.join(homeFn(), ".wrongstack", "config.history", "index.json");
+  return path4.join(homeFn(), ".wrongstack", "config.history", "index.json");
 }
 function configPath(homeFn = defaultHomeDir) {
-  return path39.join(homeFn(), ".wrongstack", "config.json");
+  return path4.join(homeFn(), ".wrongstack", "config.json");
 }
 function backupLastPath(homeFn = defaultHomeDir) {
-  return path39.join(homeFn(), ".wrongstack", "config.json.last");
+  return path4.join(homeFn(), ".wrongstack", "config.json.last");
 }
 function entryId(ts) {
   return ts.replace(/[:.]/g, "-").slice(0, 19);
@@ -6769,7 +7310,7 @@ async function ensureHistoryDir(homeFn = defaultHomeDir) {
     await fsp5.mkdir(historyDir(homeFn), { recursive: true });
   } catch (err) {
     throw new FsError({
-      message: err instanceof Error ? err.message : String(err),
+      message: toErrorMessage(err),
       code: ERROR_CODES.FS_MKDIR_FAILED,
       path: historyDir(homeFn),
       cause: err
@@ -6790,7 +7331,7 @@ async function writeIndex(idx, homeFn = defaultHomeDir) {
     await atomicWrite(historyIndexPath(homeFn), JSON.stringify(idx, null, 2));
   } catch (err) {
     throw new FsError({
-      message: err instanceof Error ? err.message : String(err),
+      message: toErrorMessage(err),
       code: ERROR_CODES.FS_ATOMIC_WRITE_FAILED,
       path: historyIndexPath(homeFn),
       cause: err
@@ -6811,30 +7352,30 @@ async function backupCurrent(homeFn = defaultHomeDir) {
       await atomicWrite(last, content);
     } catch (err) {
       writeErr(
-        `[config-history] .last backup failed: ${err instanceof Error ? err.message : String(err)}`
+        `[config-history] .last backup failed: ${toErrorMessage(err)}`
       );
     }
   }
   if (content !== void 0) {
     try {
-      const bakPath = path39.join(homeFn(), ".wrongstack", `config.json.${ts}.bak`);
+      const bakPath = path4.join(homeFn(), ".wrongstack", `config.json.${ts}.bak`);
       await atomicWrite(bakPath, content);
     } catch (err) {
       writeErr(
-        `[config-history] timestamped backup failed: ${err instanceof Error ? err.message : String(err)}`
+        `[config-history] timestamped backup failed: ${toErrorMessage(err)}`
       );
     }
   }
   try {
-    const dir = path39.join(homeFn(), ".wrongstack");
+    const dir = path4.join(homeFn(), ".wrongstack");
     const files = await fsp5.readdir(dir);
     const baks = files.filter((f) => f.startsWith("config.json.") && f.endsWith(".bak")).sort().reverse();
     for (const f of baks.slice(10)) {
-      await safeDelete(path39.join(dir, f));
+      await safeDelete(path4.join(dir, f));
     }
   } catch (err) {
     writeErr(
-      `[config-history] backup prune failed: ${err instanceof Error ? err.message : String(err)}`
+      `[config-history] backup prune failed: ${toErrorMessage(err)}`
     );
   }
 }
@@ -6851,15 +7392,15 @@ async function appendHistory(oldCfg, newCfg, description, homeFn = defaultHomeDi
   };
   try {
     await fsp5.writeFile(
-      path39.join(historyDir(homeFn), `${id}.json`),
+      path4.join(historyDir(homeFn), `${id}.json`),
       JSON.stringify(entry, null, 2),
       "utf8"
     );
   } catch (err) {
     throw new FsError({
-      message: err instanceof Error ? err.message : String(err),
+      message: toErrorMessage(err),
       code: ERROR_CODES.FS_WRITE_FAILED,
-      path: path39.join(historyDir(homeFn), `${id}.json`),
+      path: path4.join(historyDir(homeFn), `${id}.json`),
       cause: err
     });
   }
@@ -6874,7 +7415,7 @@ async function listHistory(homeFn = defaultHomeDir) {
 }
 async function getHistoryEntry(id, homeFn = defaultHomeDir) {
   try {
-    const raw = await fsp5.readFile(path39.join(historyDir(homeFn), `${id}.json`), "utf8");
+    const raw = await fsp5.readFile(path4.join(historyDir(homeFn), `${id}.json`), "utf8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -6985,16 +7526,14 @@ async function buildPickableProviders(modelsRegistry, config) {
   }
   return out;
 }
-
-// src/picker.ts
 var theme = { primary: color.amber };
 async function saveToGlobalConfig(configPath2, provider, model, homeFn = () => process.env.HOME ?? os__default.homedir()) {
   try {
-    const { atomicWrite: atomicWrite17 } = await import('@wrongstack/core');
-    const fs39 = await import('fs/promises');
+    const { atomicWrite: atomicWrite16 } = await import('@wrongstack/core');
+    const fs38 = await import('fs/promises');
     let existing = {};
     try {
-      const raw = await fs39.readFile(configPath2, "utf8");
+      const raw = await fs38.readFile(configPath2, "utf8");
       existing = JSON.parse(raw);
     } catch {
     }
@@ -7008,12 +7547,12 @@ async function saveToGlobalConfig(configPath2, provider, model, homeFn = () => p
         JSON.stringify({
           level: "warn",
           event: "picker.backup_failed",
-          message: err instanceof Error ? err.message : String(err),
+          message: toErrorMessage(err),
           timestamp: (/* @__PURE__ */ new Date()).toISOString()
         })
       );
     }
-    await atomicWrite17(configPath2, JSON.stringify(existing, null, 2), { mode: 384 });
+    await atomicWrite16(configPath2, JSON.stringify(existing, null, 2), { mode: 384 });
     try {
       await appendHistory(
         oldCfg,
@@ -7029,7 +7568,7 @@ async function saveToGlobalConfig(configPath2, provider, model, homeFn = () => p
       JSON.stringify({
         level: "warn",
         event: "picker.save_failed",
-        message: err instanceof Error ? err.message : String(err),
+        message: toErrorMessage(err),
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
       })
     );
@@ -7335,7 +7874,8 @@ function buildAuthCommand(opts) {
           {
             encrypt: (v) => v,
             decrypt: (v) => v,
-            isEncrypted: () => false
+            isEncrypted: () => false,
+            keyVersion: 1
           }
         );
       } catch {
@@ -7676,7 +8216,7 @@ function formatPhaseList(graph) {
 }
 async function gatherProjectContext(projectRoot) {
   try {
-    const raw = await fsp5.readFile(path39.join(projectRoot, "package.json"), "utf8");
+    const raw = await fsp5.readFile(path4.join(projectRoot, "package.json"), "utf8");
     const pkg = JSON.parse(raw);
     const parts = [
       `Project: ${String(pkg.name ?? "unknown")}`,
@@ -8027,7 +8567,7 @@ function buildCodebaseReindexCommand(opts) {
 ${color.yellow(`  ${r.errors.length} file(s) had errors`)}` : "");
         return { message: summary };
       } catch (err) {
-        const msg = `${color.red("Codebase reindex failed:")} ${err instanceof Error ? err.message : String(err)}`;
+        const msg = `${color.red("Codebase reindex failed:")} ${toErrorMessage(err)}`;
         return { message: msg };
       }
     }
@@ -8114,7 +8654,7 @@ async function historyCommand(opts, sessionId, args) {
   } catch (err) {
     return {
       message: color.yellow(
-        `Failed to read session: ${err instanceof Error ? err.message : String(err)}`
+        `Failed to read session: ${toErrorMessage(err)}`
       )
     };
   }
@@ -8616,7 +9156,7 @@ async function spawnAgent(opts, role, _task, _name, header) {
     opts.renderer.write(msg);
     return { message: msg };
   } catch (err) {
-    const msg = `${color.red("\u2717 Spawn failed")}: ${err instanceof Error ? err.message : String(err)}`;
+    const msg = `${color.red("\u2717 Spawn failed")}: ${toErrorMessage(err)}`;
     opts.renderer.writeWarning(msg);
     return { message: msg };
   }
@@ -9102,17 +9642,17 @@ function diagnoseConfig(cfg, plugins = []) {
 function scanPlaintextSecrets(node, prefix, findings) {
   if (!isPlainObject(node)) return;
   for (const [key, value] of Object.entries(node)) {
-    const path40 = prefix ? `${prefix}.${key}` : key;
+    const path39 = prefix ? `${prefix}.${key}` : key;
     if (typeof value === "string") {
       if (value.length > 0 && isSecretField$1(key) && !value.startsWith(ENC_PREFIX)) {
         findings.push({
-          path: path40,
+          path: path39,
           problem: "looks like a plaintext secret (not vault-encrypted) \u2014 it will be encrypted on next boot",
           severity: "warning"
         });
       }
     } else if (isPlainObject(value)) {
-      scanPlaintextSecrets(value, path40, findings);
+      scanPlaintextSecrets(value, path39, findings);
     }
   }
 }
@@ -9133,7 +9673,7 @@ function resolvePersistPath(deps) {
   return deps.globalConfigPath;
 }
 async function ensureProjectDir(filePath) {
-  const dir = path39.dirname(filePath);
+  const dir = path4.dirname(filePath);
   try {
     await fsp5.mkdir(dir, { recursive: true });
   } catch {
@@ -9157,7 +9697,8 @@ var PROJECT_SAFE_FIELDS = /* @__PURE__ */ new Set([
   "session",
   "indexing",
   "tools",
-  "launch"
+  "launch",
+  "circuitBreaker"
 ]);
 function filterSafeForProject(cfg) {
   const out = {};
@@ -9337,8 +9878,8 @@ function buildDoctorCommand(opts) {
     return `  ${icon} ${color.cyan(f.path)} \u2014 ${f.problem}${fix}`;
   }
   async function findParsableBackup(file) {
-    const dir = path39.dirname(file);
-    const base = path39.basename(file);
+    const dir = path4.dirname(file);
+    const base = path4.basename(file);
     const candidates = [`${base}.last`];
     try {
       const siblings = await fsp5.readdir(dir);
@@ -9349,7 +9890,7 @@ function buildDoctorCommand(opts) {
     }
     for (const name of candidates) {
       try {
-        const raw = await fsp5.readFile(path39.join(dir, name), "utf8");
+        const raw = await fsp5.readFile(path4.join(dir, name), "utf8");
         JSON.parse(raw);
         return { name, raw };
       } catch {
@@ -9415,7 +9956,7 @@ function buildDoctorCommand(opts) {
           parsed = JSON.parse(raw);
         } catch (err) {
           errorCount++;
-          const msg = err instanceof Error ? err.message : String(err);
+          const msg = toErrorMessage(err);
           lines.push(`  ${color.red("\u2717")} invalid JSON \u2014 ${msg}`);
           if (!applyFixes) {
             fixableCount++;
@@ -9466,7 +10007,7 @@ function buildDoctorCommand(opts) {
           await atomicWrite(target.file, JSON.stringify(report.fixed, null, 2));
           if (!target.isProject) {
             try {
-              const homeFn = () => path39.dirname(path39.dirname(target.file));
+              const homeFn = () => path4.dirname(path4.dirname(target.file));
               await appendHistory(parsed, report.fixed, "config doctor auto-fix", homeFn);
             } catch {
             }
@@ -9554,6 +10095,65 @@ function buildEnhanceCommand(opts) {
     }
   };
 }
+function buildEnsembleCommand(_opts) {
+  return {
+    name: "ensemble",
+    category: "Agent",
+    description: "Fan a task out to multiple ACP agents in parallel (claude-code, gemini-cli, codex-cli, etc.).",
+    argsHint: "<agent-ids-csv> <task description>",
+    help: [
+      "Fan a single task out to multiple ACP-supporting agents in parallel.",
+      "",
+      "Usage:",
+      "  /ensemble <agent-ids-csv> <task description>",
+      "",
+      "Examples:",
+      '  /ensemble claude-code,gemini-cli "review this diff"',
+      '  /ensemble claude-code,codex-cli "refactor auth/session.ts"',
+      '  /ensemble claude-code,gemini-cli,codex-cli "explain the v1 protocol"',
+      "",
+      "Each agent runs in its own process. Agents not installed on the host",
+      "are skipped with a warning. The command waits for all agents to finish",
+      "and reports per-agent outcomes (success / failed / skipped / cancelled).",
+      "",
+      "Use /acp list (or wstack acp list) to see which agents are detected."
+    ].join("\n"),
+    async run(args) {
+      const trimmed = args.trim();
+      if (!trimmed) {
+        return {
+          message: 'Usage: /ensemble <agent-ids-csv> <task description>\n\nExamples:\n  /ensemble claude-code,gemini-cli "review this diff"\n  /ensemble claude-code,codex-cli "refactor auth/session.ts"\n\nRun `wstack acp list` to see which agents are detected on this host.'
+        };
+      }
+      const spaceIdx = trimmed.search(/\s/);
+      if (spaceIdx === -1) {
+        return {
+          message: 'Task description is required.\n\nUsage: /ensemble <agent-ids-csv> <task description>\nExample: /ensemble claude-code,gemini-cli "explain this code"'
+        };
+      }
+      const agentIds = trimmed.slice(0, spaceIdx);
+      const task = stripSurroundingQuotes(trimmed.slice(spaceIdx + 1).trim());
+      if (!task) {
+        return { message: "Task description is required." };
+      }
+      try {
+        const result = await runEnsemble({ agentIds, task });
+        return { message: renderEnsembleText(result) };
+      } catch (err) {
+        return { message: `Ensemble failed: ${toErrorMessage(err)}` };
+      }
+    }
+  };
+}
+function stripSurroundingQuotes(s) {
+  if (s.length < 2) return s;
+  const first = s[0];
+  const last = s[s.length - 1];
+  if ((first === '"' || first === "'") && first === last) {
+    return s.slice(1, -1);
+  }
+  return s;
+}
 function parseModelRef(ref) {
   const trimmed = ref.trim();
   const slash = trimmed.indexOf("/");
@@ -9854,7 +10454,7 @@ function buildFallbackCommand(opts) {
         };
       } catch (err) {
         return {
-          message: `${color.red("fallback error")}: ${err instanceof Error ? err.message : String(err)}`
+          message: `${color.red("fallback error")}: ${toErrorMessage(err)}`
         };
       }
     }
@@ -11071,7 +11671,7 @@ async function handleSpawn(opts, subargs) {
       const id = await opts.onFleetSpawn(role);
       spawned.push(id);
     } catch (err) {
-      const warnMsg = `${color.red("\u2717 Spawn failed")} for slot ${i + 1}: ${err instanceof Error ? err.message : String(err)}`;
+      const warnMsg = `${color.red("\u2717 Spawn failed")} for slot ${i + 1}: ${toErrorMessage(err)}`;
       opts.renderer.writeWarning(warnMsg);
     }
   }
@@ -11125,7 +11725,7 @@ async function handleDispatch(opts, subargs) {
       lines.push(`  ${color.green("\u2713 spawned")} ${color.bold(decision.role)} as ${color.dim(id)}`);
     } catch (err) {
       lines.push(
-        `  ${color.amber("\u26A0 spawn failed:")} ${err instanceof Error ? err.message : String(err)}`
+        `  ${color.amber("\u26A0 spawn failed:")} ${toErrorMessage(err)}`
       );
     }
   } else {
@@ -11587,8 +12187,8 @@ function buildInitCommand(opts) {
     description: "Create or update .wrongstack/AGENTS.md project context for the system prompt.",
     async run(_args, ctx) {
       const root = ctx?.projectRoot ?? opts.projectRoot ?? process.cwd();
-      const dir = path39.join(root, ".wrongstack");
-      const file = path39.join(dir, "AGENTS.md");
+      const dir = path4.join(root, ".wrongstack");
+      const file = path4.join(dir, "AGENTS.md");
       const isFirstInit = !await fileExists(file);
       const detected = await detectProjectFacts(root);
       const body = renderAgentsTemplate(detected);
@@ -11596,7 +12196,7 @@ function buildInitCommand(opts) {
       await fsp5.writeFile(file, body, "utf8");
       let nodePkg = false;
       try {
-        await fsp5.access(path39.join(root, "package.json"));
+        await fsp5.access(path4.join(root, "package.json"));
         nodePkg = true;
       } catch {
       }
@@ -11758,6 +12358,7 @@ function buildMailboxCommand(opts) {
       "  /mailbox broadcast <message>  Message every agent on the project.",
       "  /mailbox history [n]          Last n messages on the project (default 20).",
       "  /mailbox clear                 Delete all messages from the mailbox.",
+      "  /mailbox purge                Remove stale/orphaned messages (completed >1d, incomplete >7d).",
       "",
       "Examples:",
       "  /mailbox broadcast pausing deploys, hold off on main",
@@ -11866,8 +12467,17 @@ function buildMailboxCommand(opts) {
         await mb.clearAll();
         return { message: color.green("\u2713 All messages deleted from the mailbox.") };
       }
+      if (sub === "purge") {
+        const result = await mb.purgeStale();
+        if (result.totalPurged === 0) {
+          return { message: color.green("\u2713 No stale messages found. Mailbox is clean.") };
+        }
+        return {
+          message: `\u2713 Purged ${result.totalPurged} message(s): ${result.completedPurged} completed, ${result.incompletePurged} incomplete. ${result.remaining} message(s) remain.`
+        };
+      }
       return {
-        message: `Unknown subcommand "${sub}". Use: /mailbox [agents|online|send|broadcast|history|clear]`
+        message: `Unknown subcommand "${sub}". Use: /mailbox [agents|online|send|broadcast|history|clear purge]`
       };
     }
   };
@@ -12280,9 +12890,9 @@ function stateBadge(state) {
       return color.dim(state);
   }
 }
-async function readConfig(path40) {
+async function readConfig(path39) {
   try {
-    return JSON.parse(await fsp5.readFile(path40, "utf8"));
+    return JSON.parse(await fsp5.readFile(path39, "utf8"));
   } catch {
     return {};
   }
@@ -12290,11 +12900,11 @@ async function readConfig(path40) {
 function isMcpServerRecord(value) {
   return !!value && typeof value === "object" && !Array.isArray(value);
 }
-async function writeConfig(path40, cfg) {
+async function writeConfig(path39, cfg) {
   const raw = JSON.stringify(cfg, null, 2);
-  const tmp = path40 + ".tmp";
+  const tmp = path39 + ".tmp";
   await fsp5.writeFile(tmp, raw, "utf8");
-  await fsp5.rename(tmp, path40);
+  await fsp5.rename(tmp, path39);
 }
 
 // src/slash-commands/mcp.ts
@@ -12484,7 +13094,7 @@ async function runCompact(opts) {
     responseText = response.content.filter((b) => b.type === "text").map((b) => b.text).join("").trim();
   } catch (err) {
     return {
-      message: `LLM call failed: ${err instanceof Error ? err.message : String(err)}`
+      message: `LLM call failed: ${toErrorMessage(err)}`
     };
   }
   if (!responseText) {
@@ -12500,7 +13110,7 @@ ${responseText.slice(0, 500)}` };
     parsed = JSON.parse(jsonMatch[0]);
   } catch (err) {
     return {
-      message: `Failed to parse LLM response: ${err instanceof Error ? err.message : String(err)}
+      message: `Failed to parse LLM response: ${toErrorMessage(err)}
 
 Raw response:
 ${responseText.slice(0, 500)}`
@@ -12558,7 +13168,7 @@ ${responseText.slice(0, 500)}`
       }
     } catch (err) {
       errors.push(
-        `${op.action} failed for ${op.targets.join(", ")}: ${err instanceof Error ? err.message : String(err)}`
+        `${op.action} failed for ${op.targets.join(", ")}: ${toErrorMessage(err)}`
       );
     }
   }
@@ -13195,7 +13805,7 @@ function buildModelsCommand(opts) {
         };
       } catch (err) {
         return {
-          message: `${color.red("models error")}: ${err instanceof Error ? err.message : String(err)}`
+          message: `${color.red("models error")}: ${toErrorMessage(err)}`
         };
       }
     }
@@ -13879,7 +14489,7 @@ async function killSession(sessionId) {
   } catch (err) {
     return {
       message: color.red(
-        `Failed to kill session: ${err instanceof Error ? err.message : String(err)}`
+        `Failed to kill session: ${toErrorMessage(err)}`
       )
     };
   }
@@ -14250,7 +14860,7 @@ function buildSetModelCommand(opts) {
         };
       } catch (err) {
         return {
-          message: `${color.red("setmodel error")}: ${err instanceof Error ? err.message : String(err)}`
+          message: `${color.red("setmodel error")}: ${toErrorMessage(err)}`
         };
       }
     }
@@ -14353,7 +14963,7 @@ function buildSuggestCommand(opts) {
         opts.onSuggestions?.(suggestions);
         return { message: formatSuggestions(suggestions) };
       } catch (err) {
-        const msg = `Suggestion generation failed: ${err instanceof Error ? err.message : String(err)}`;
+        const msg = `Suggestion generation failed: ${toErrorMessage(err)}`;
         opts.renderer.writeWarning(msg);
         return { message: msg };
       }
@@ -14413,6 +15023,73 @@ function formatSuggestions(suggestions) {
   return lines.join("\n");
 }
 
+// src/slash-commands/coordinator.ts
+function buildCoordinatorCommand(opts) {
+  return {
+    name: "coordinator",
+    category: "Agent",
+    description: "Start, stop, or inspect the AutonomousCoordinator \u2014 the fleet brain that auctions tasks and consults Brain for risky decisions.",
+    help: [
+      "Usage:",
+      "  /coordinator start <goal>   Start the coordinator with a goal",
+      "  /coordinator stop           Stop the running coordinator",
+      "  /coordinator status         Show current coordinator status",
+      "",
+      "The AutonomousCoordinator runs alongside the agent loop and:",
+      "  \u2022 Maintains a shared knowledge graph of facts and decisions",
+      "  \u2022 Breaks work into a task DAG and auctions tasks to subagents",
+      "  \u2022 Consults the Brain for risky decisions",
+      "  \u2022 Uses ConsensusProtocol to vote on multi-agent changes",
+      "",
+      "It is separate from /autonomy eternal \u2014 both can run concurrently."
+    ].join("\n"),
+    async run(args) {
+      const trimmed = args.trim();
+      const [verbRaw, ...rest] = trimmed.split(/\s+/);
+      const verb = (verbRaw ?? "").toLowerCase();
+      if (verb === "start") {
+        const goal = rest.join(" ").trim();
+        if (!goal) {
+          return { message: "Usage: /coordinator start <goal>\nA goal is required to start the coordinator." };
+        }
+        opts.onCoordinatorStart?.(goal);
+        return {
+          message: `AutonomousCoordinator started with goal: "${goal}"
+Use /coordinator status to monitor progress.`
+        };
+      }
+      if (verb === "stop") {
+        opts.onCoordinatorStop?.();
+        return { message: "AutonomousCoordinator stop signal sent." };
+      }
+      if (verb === "status") {
+        const canStart = opts.onCoordinatorStart != null;
+        const canStop = opts.onCoordinatorStop != null;
+        return {
+          message: [
+            `Coordinator wired: start=${canStart ? "yes" : "no"}, stop=${canStop ? "yes" : "no"}`,
+            "Use F9 in the TUI for the full coordinator panel."
+          ].join("\n")
+        };
+      }
+      return {
+        message: [
+          "Usage:",
+          "  /coordinator start <goal>   Start with a goal",
+          "  /coordinator stop            Stop the coordinator",
+          "  /coordinator status          Show status",
+          "",
+          "The coordinator is a fleet brain that:",
+          "  \u2022 Auctions tasks to subagents via TaskAuctioneer",
+          "  \u2022 Maintains a shared KnowledgeGraph",
+          "  \u2022 Consults Brain for risky decisions",
+          "  \u2022 Uses ConsensusProtocol for multi-agent votes"
+        ].join("\n")
+      };
+    }
+  };
+}
+
 // src/slash-commands/mouse.ts
 function buildMouseCommand(_opts) {
   return {
@@ -14593,7 +15270,7 @@ async function listProjectsCommand(opts, ctx) {
   return { message: lines.join("\n") };
 }
 async function addProjectCommand(opts, ctx, targetPath, displayName) {
-  const resolved = path39.resolve(ctx?.projectRoot ?? ctx?.cwd ?? process.cwd(), targetPath);
+  const resolved = path4.resolve(ctx?.projectRoot ?? ctx?.cwd ?? process.cwd(), targetPath);
   try {
     await fsp5.access(resolved);
   } catch {
@@ -14610,7 +15287,7 @@ async function addProjectCommand(opts, ctx, targetPath, displayName) {
       message: color.yellow(`Project already registered: "${existing.name}" (${existing.slug})`)
     };
   }
-  const name = displayName?.trim() || path39.basename(resolved);
+  const name = displayName?.trim() || path4.basename(resolved);
   const slug = generateSlug(resolved);
   const now = (/* @__PURE__ */ new Date()).toISOString();
   await ensureProjectDataDir(slug, opts.paths?.globalConfig);
@@ -14663,7 +15340,7 @@ async function removeProjectCommand(opts, _ctx, slugOrName) {
   };
 }
 async function switchProjectCommand(opts, ctx, target, displayName) {
-  const resolved = path39.resolve(ctx?.projectRoot ?? ctx?.cwd ?? process.cwd(), target);
+  const resolved = path4.resolve(ctx?.projectRoot ?? ctx?.cwd ?? process.cwd(), target);
   try {
     await fsp5.access(resolved);
   } catch {
@@ -14677,8 +15354,8 @@ async function switchProjectCommand(opts, ctx, target, displayName) {
   try {
     const req2 = createRequire(import.meta.url);
     const pkgPath = req2.resolve("@wrongstack/cli/package.json");
-    const pkgDir = path39.dirname(pkgPath);
-    cliPath = path39.join(pkgDir, "dist", "index.js");
+    const pkgDir = path4.dirname(pkgPath);
+    cliPath = path4.join(pkgDir, "dist", "index.js");
     await fsp5.access(cliPath);
   } catch {
     cliPath = process.argv[1] ?? "";
@@ -14695,13 +15372,13 @@ async function switchProjectCommand(opts, ctx, target, displayName) {
   if (existing) {
     existing.lastSeen = (/* @__PURE__ */ new Date()).toISOString();
   } else {
-    const name = displayName?.trim() || path39.basename(resolved);
+    const name = displayName?.trim() || path4.basename(resolved);
     const slug = generateSlug(resolved);
     manifest.projects.push({ name, root: resolved, slug, lastSeen: (/* @__PURE__ */ new Date()).toISOString() });
     await ensureProjectDataDir(slug, opts.paths?.globalConfig);
   }
   await saveManifest(manifest, opts.paths?.globalConfig);
-  const targetName = displayName?.trim() || path39.basename(resolved);
+  const targetName = displayName?.trim() || path4.basename(resolved);
   const canSwitch = await confirmProjectSwitch(opts, targetName);
   if (!canSwitch) return { message: "" };
   const nodeExe = process.execPath;
@@ -14817,8 +15494,8 @@ async function spawnInProject(opts, _ctx, root, projectName) {
   try {
     const req2 = createRequire(import.meta.url);
     const pkgPath = req2.resolve("@wrongstack/cli/package.json");
-    const pkgDir = path39.dirname(pkgPath);
-    cliPath = path39.join(pkgDir, "dist", "index.js");
+    const pkgDir = path4.dirname(pkgPath);
+    cliPath = path4.join(pkgDir, "dist", "index.js");
     await fsp5.access(cliPath);
   } catch {
     cliPath = process.argv[1] ?? "";
@@ -14835,7 +15512,7 @@ async function spawnInProject(opts, _ctx, root, projectName) {
   if (existing) {
     existing.lastSeen = (/* @__PURE__ */ new Date()).toISOString();
   } else {
-    const name = projectName || path39.basename(root);
+    const name = projectName || path4.basename(root);
     const slug = generateSlug(root);
     manifest.projects.push({ name, root, slug, lastSeen: (/* @__PURE__ */ new Date()).toISOString() });
     await ensureProjectDataDir(slug, opts.paths?.globalConfig);
@@ -14867,8 +15544,8 @@ async function handleNewSession(_opts, _ctx) {
   try {
     const req2 = createRequire(import.meta.url);
     const pkgPath = req2.resolve("@wrongstack/cli/package.json");
-    const pkgDir = path39.dirname(pkgPath);
-    cliPath = path39.join(pkgDir, "dist", "index.js");
+    const pkgDir = path4.dirname(pkgPath);
+    cliPath = path4.join(pkgDir, "dist", "index.js");
     await fsp5.access(cliPath);
   } catch {
     cliPath = process.argv[1] ?? "";
@@ -14979,7 +15656,7 @@ function buildReviewCommand(opts) {
       for (const f of allChanged) {
         if (f.path.startsWith(".wrongstack/")) continue;
         try {
-          await fsp5.access(path39.join(cwd, f.path));
+          await fsp5.access(path4.join(cwd, f.path));
           existing.push(f);
         } catch {
         }
@@ -14990,7 +15667,7 @@ function buildReviewCommand(opts) {
       const filesWithContent = [];
       for (const f of existing.slice(0, 30)) {
         try {
-          const content = await fsp5.readFile(path39.join(cwd, f.path), "utf8");
+          const content = await fsp5.readFile(path4.join(cwd, f.path), "utf8");
           filesWithContent.push({ ...f, content });
         } catch {
         }
@@ -15024,10 +15701,13 @@ function buildSettingsCommand(opts) {
     "  /settings hints on|off        Show or suppress rotating launch hints",
     "  /settings debug-stream on|off   Raw SSE hex-dump to stderr for debugging",
     "  /settings config-scope global|project   Save settings globally or per-project",
+    "  /settings fs-access unrestricted|project   File-tool access scope (project = confine to project root)",
     "  /settings refine on|off       Enable/disable prompt refinement",
     "  /settings refine-delay <seconds>   Countdown duration for refine preview",
     "  /settings refine-language original|english   Default language for refinement",
     "  /settings semver-part patch|minor|major|auto   Default part for /semver and the semver_bump tool",
+    "  /settings breaker on|off   Enable/disable the process circuit breaker (gates bash/exec)",
+    "  /settings breaker-timeout <seconds>   Auto kill/reset delay when the breaker trips (0 = manual)",
     "  /settings defaults            Show built-in default values",
     "",
     "Settings are persisted to ~/.wrongstack/config.json."
@@ -15039,10 +15719,14 @@ function buildSettingsCommand(opts) {
     const hints = opts.configStore.get().hints !== false;
     const debugStream = opts.configStore.get().debugStream === true;
     const configScope = opts.configStore.get().configScope ?? "global";
+    const fsAccess = opts.configStore.get().tools?.restrictToProjectRoot === true ? "project" : "unrestricted";
     const enhanceEnabled = autonomy?.enhance ?? true;
     const enhanceDelay = autonomy?.enhanceDelayMs ?? 6e4;
     const enhanceLanguage = autonomy?.enhanceLanguage ?? "original";
     const semverPart = opts.configStore.get().extensions?.["semver-bump"]?.["defaultPart"] ?? "patch";
+    const cb = opts.configStore.get().circuitBreaker;
+    const breakerEnabled = cb?.enabled === true;
+    const breakerTimeout = cb?.autoKillResetMs ?? 6e4;
     return [
       `${color.bold("WrongStack")} ${color.dim("\u2014 Settings")}`,
       "",
@@ -15051,10 +15735,12 @@ function buildSettingsCommand(opts) {
       `  launch hints:          ${hints ? color.cyan("on") : color.dim("off")}   ${color.dim("change: /settings hints on|off")}`,
       `  debug stream:         ${debugStream ? color.cyan("on") : color.dim("off")}   ${color.dim("change: /settings debug-stream on|off")}`,
       `  config scope:         ${color.cyan(configScope)}   ${color.dim("change: /settings config-scope global|project")}`,
+      `  filesystem access:   ${color.cyan(fsAccess)}   ${color.dim("change: /settings fs-access unrestricted|project")}`,
       `  refine:              ${enhanceEnabled ? color.cyan("on") : color.dim("off")}   ${color.dim("change: /settings refine on|off")}`,
       `  refine-delay:        ${color.cyan(formatDelay(enhanceDelay))}   ${color.dim("change: /settings refine-delay <seconds>")}`,
       `  refine-language:     ${color.cyan(enhanceLanguage)}   ${color.dim("change: /settings refine-language original|english")}`,
       `  semver default part: ${color.cyan(semverPart)}   ${color.dim("change: /settings semver-part patch|minor|major|auto")}`,
+      `  circuit breaker:     ${breakerEnabled ? color.cyan("on") : color.dim("off")} (kill/reset ${breakerTimeout > 0 ? formatDelay(breakerTimeout) : color.dim("manual")})   ${color.dim("change: /settings breaker on|off")}`,
       "",
       color.dim("  Persisted to ~/.wrongstack/config.json \xB7 /settings help for more")
     ].join("\n");
@@ -15167,6 +15853,25 @@ function buildSettingsCommand(opts) {
           const label = raw === "project" ? `${color.cyan("project")} \u2014 settings saved to <project>/.wrongstack/config.json` : `${color.cyan("global")} \u2014 settings saved to ~/.wrongstack/config.json`;
           return { message: `${color.green("\u2713")} config scope \u2192 ${label}` };
         }
+        if (sub === "fs-access") {
+          const raw = (rest[0] ?? "").toLowerCase();
+          if (!["unrestricted", "project"].includes(raw)) {
+            return { message: `${color.amber("Usage:")} /settings fs-access unrestricted|project` };
+          }
+          const restrict = raw === "project";
+          await persistConfigSetting(persistDeps, (cfg) => {
+            const tools = cfg.tools ?? {};
+            tools.restrictToProjectRoot = restrict;
+            cfg.tools = tools;
+            const features = cfg.features ?? {};
+            features.allowOutsideProjectRoot = !restrict;
+            cfg.features = features;
+          });
+          const label = restrict ? `${color.cyan("project")} \u2014 file tools confined to the project root` : `${color.cyan("unrestricted")} \u2014 file tools may access paths outside the project root`;
+          return {
+            message: `${color.green("\u2713")} filesystem access \u2192 ${label}   ${color.dim("(restart or re-open the session to apply)")}`
+          };
+        }
         if (sub === "refine") {
           const raw = (rest[0] ?? "").toLowerCase();
           if (!["on", "off"].includes(raw)) {
@@ -15227,19 +15932,55 @@ function buildSettingsCommand(opts) {
             message: `${color.green("\u2713")} semver default part \u2192 ${color.bold(raw)}   ${color.dim("saved to global config; used when /semver or semver_bump gets no explicit part")}`
           };
         }
+        if (sub === "breaker") {
+          const raw = (rest[0] ?? "").toLowerCase();
+          if (!["on", "off"].includes(raw)) {
+            return { message: `${color.amber("Usage:")} /settings breaker on|off` };
+          }
+          const on = raw === "on";
+          await persistConfigSetting(persistDeps, (cfg) => {
+            const cb = cfg.circuitBreaker;
+            cfg.circuitBreaker = { ...cb ?? {}, enabled: on };
+          });
+          getProcessRegistry().setBreakerConfig({ enabled: on });
+          return {
+            message: `${color.green("\u2713")} circuit breaker \u2192 ${on ? color.cyan("on") : color.dim("off")}   ${color.dim(on ? "bash/exec gated on repeated failures; trips arm the kill/reset countdown" : "bash/exec always proceed")}`
+          };
+        }
+        if (sub === "breaker-timeout") {
+          const raw = rest[0];
+          if (raw === void 0) {
+            return {
+              message: `${color.amber("Usage:")} /settings breaker-timeout <seconds>   ${color.dim("(0 = manual recovery only)")}`
+            };
+          }
+          const seconds = Number.parseFloat(raw);
+          if (Number.isNaN(seconds) || seconds < 0) {
+            return {
+              message: `${color.red("Invalid number")}: "${raw}". Enter seconds, e.g. /settings breaker-timeout 60`
+            };
+          }
+          const ms = Math.round(seconds * 1e3);
+          await persistConfigSetting(persistDeps, (cfg) => {
+            const cb = cfg.circuitBreaker;
+            cfg.circuitBreaker = { ...cb ?? {}, autoKillResetMs: ms };
+          });
+          getProcessRegistry().setBreakerConfig({ autoKillResetMs: ms });
+          return {
+            message: `${color.green("\u2713")} breaker kill/reset timeout \u2192 ${ms > 0 ? formatDelay(ms) : color.dim("manual")}   ${color.dim(ms > 0 ? "statusline shows a countdown when the breaker trips" : "breaker trips require /kill reset")}`
+          };
+        }
         return {
-          message: `${color.red("Unknown setting")} "${sub}". ${unknownSubcommand(sub, ["delay", "mode", "hints", "debug-stream", "config-scope", "refine", "refine-delay", "refine-language", "semver-part", "defaults"], "settings")}`
+          message: `${color.red("Unknown setting")} "${sub}". ${unknownSubcommand(sub, ["delay", "mode", "hints", "debug-stream", "config-scope", "fs-access", "refine", "refine-delay", "refine-language", "semver-part", "breaker", "breaker-timeout", "defaults"], "settings")}`
         };
       } catch (err) {
         return {
-          message: `${color.red("Settings error")}: ${err instanceof Error ? err.message : String(err)}`
+          message: `${color.red("Settings error")}: ${toErrorMessage(err)}`
         };
       }
     }
   };
 }
-
-// src/slash-commands/spawn-agents.ts
 function buildSpawnCommand(opts) {
   return {
     name: "spawn",
@@ -15276,7 +16017,7 @@ function buildSpawnCommand(opts) {
         const summary = Object.keys(parsed).length > 0 ? await opts.onSpawn(description, parsed) : await opts.onSpawn(description);
         return { message: summary };
       } catch (err) {
-        return { message: `Spawn failed: ${err instanceof Error ? err.message : String(err)}` };
+        return { message: `Spawn failed: ${toErrorMessage(err)}` };
       }
     }
   };
@@ -15363,7 +16104,7 @@ var DEFAULTS = {
   working_dir: true
 };
 function resolveConfigPath() {
-  return process.env[CONFIG_ENV] ?? path39.join(process.env.HOME ?? "", ".wrongstack", "statusline.json");
+  return process.env[CONFIG_ENV] ?? path4.join(process.env.HOME ?? "", ".wrongstack", "statusline.json");
 }
 async function loadStatuslineConfig() {
   const p = resolveConfigPath();
@@ -15377,11 +16118,11 @@ async function loadStatuslineConfig() {
 async function saveStatuslineConfig(cfg) {
   const p = resolveConfigPath();
   try {
-    await fsp5.mkdir(path39.dirname(p), { recursive: true });
+    await fsp5.mkdir(path4.dirname(p), { recursive: true });
     await atomicWrite(p, JSON.stringify(cfg, null, 2));
   } catch (err) {
     throw new FsError({
-      message: err instanceof Error ? err.message : String(err),
+      message: toErrorMessage(err),
       code: err instanceof Error && err.message.includes("mkdir") ? ERROR_CODES.FS_MKDIR_FAILED : ERROR_CODES.FS_ATOMIC_WRITE_FAILED,
       path: p,
       cause: err
@@ -15542,7 +16283,7 @@ function buildTasksCommand(_opts) {
   return {
     name: "tasks",
     category: "Inspect",
-    description: "Manage structured tasks with dependencies, types, and priorities: /tasks [show|add <title>|start|done|fail|status <id> <status>|promote <id>|planify <id>|clear]",
+    description: 'Manage structured tasks with dependencies, types, and priorities: /tasks [show|add <title>|start|done|fail|status <id> <status>|promote <id>|planify <id>|clear]. Tasks are session-persistent (survive resume, isolated to this session). Use `scope: "project"` to share across sessions. For simpler per-turn todos use /todos. For multi-phase roadmaps use /plan.',
     help: [
       "Usage:",
       "  /tasks                            Show task progress + list",
@@ -15559,7 +16300,8 @@ function buildTasksCommand(_opts) {
       "  /tasks clear                      Remove all tasks",
       "",
       "Types: feature, bugfix, refactor, docs, test, chore",
-      "Priorities: critical, high, medium, low"
+      "Priorities: critical, high, medium, low",
+      'Scope: tasks are session-isolated by default; use scope:"project" in the task tool to share across sessions'
     ].join("\n"),
     async run(args, ctx) {
       if (!ctx) {
@@ -15611,12 +16353,26 @@ ${formatPlan(updated)}`;
               return file;
             }
             const parts = restJoined.split(/\s+/);
-            const title = parts[0] ?? "";
-            const type = validateType(parts[1] ?? "") ?? "feature";
-            const priority = validatePriority(parts[2] ?? "") ?? "medium";
+            let type = "feature";
+            let priority = "medium";
+            if (parts.length > 1) {
+              const p = validatePriority(parts[parts.length - 1] ?? "");
+              if (p) {
+                priority = p;
+                parts.pop();
+                if (parts.length > 1) {
+                  const t = validateType(parts[parts.length - 1] ?? "");
+                  if (t) {
+                    type = t;
+                    parts.pop();
+                  }
+                }
+              }
+            }
+            const title = parts.join(" ");
             const now = (/* @__PURE__ */ new Date()).toISOString();
             file.tasks.push({
-              id: `task_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`,
+              id: `task_${randomUUID()}`,
               title,
               type,
               priority,
@@ -15739,7 +16495,7 @@ ${formatTaskProgress(file.tasks)}`;
             ];
             if (found.item.description) {
               todos.push({
-                id: `todo_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`,
+                id: `todo_${randomUUID()}`,
                 content: found.item.description.slice(0, 200),
                 status: "pending",
                 promotedFromTask: found.item.id
@@ -15778,7 +16534,7 @@ ${formatTaskProgress(file.tasks)}`;
                 "clear"
               ],
               "tasks"
-            );
+            ) + "\n\nRelated: /plan (session-persistent roadmap) | /todos (per-turn list)";
             return file;
         }
         return file;
@@ -15789,13 +16545,13 @@ ${formatTaskProgress(file.tasks)}`;
 }
 async function discoverPackageFiles(projectRoot) {
   const files = [];
-  const rootPkg = path39.join(projectRoot, "package.json");
+  const rootPkg = path4.join(projectRoot, "package.json");
   try {
     await fsp5.access(rootPkg);
     files.push(rootPkg);
   } catch {
   }
-  const workspaceFile = path39.join(projectRoot, "pnpm-workspace.yaml");
+  const workspaceFile = path4.join(projectRoot, "pnpm-workspace.yaml");
   try {
     await fsp5.access(workspaceFile);
     const content = await fsp5.readFile(workspaceFile, "utf8");
@@ -15805,12 +16561,12 @@ async function discoverPackageFiles(projectRoot) {
     const globs = rawGlobs.split(/[\s,]+/).filter(Boolean).map((g) => g.replace(/['"]/g, ""));
     for (const g of globs) {
       const dirPrefix = g.replace(/\/?\*$/, "").replace(/\/\*$/, "");
-      const dir = path39.join(projectRoot, dirPrefix);
+      const dir = path4.join(projectRoot, dirPrefix);
       try {
         const entries = await fsp5.readdir(dir, { withFileTypes: true });
         for (const e of entries) {
           if (!e.isDirectory()) continue;
-          const subPkg = path39.join(dir, e.name, "package.json");
+          const subPkg = path4.join(dir, e.name, "package.json");
           try {
             await fsp5.access(subPkg);
             files.push(subPkg);
@@ -15825,7 +16581,7 @@ async function discoverPackageFiles(projectRoot) {
   return files;
 }
 function buildTechStackTask(opts) {
-  const pkgList = opts.packageFiles.map((f) => `  - ${path39.relative(opts.projectRoot, f)}`).join("\n");
+  const pkgList = opts.packageFiles.map((f) => `  - ${path4.relative(opts.projectRoot, f)}`).join("\n");
   const header = opts.isInit ? [
     "## Tech Stack Audit \u2014 First-Time Project Init",
     "",
@@ -15947,7 +16703,7 @@ function buildTechStackCommand(opts) {
         }
       } catch (err) {
         discoveryNote = color.red(
-          `Could not scan for package files: ${err instanceof Error ? err.message : String(err)}`
+          `Could not scan for package files: ${toErrorMessage(err)}`
         );
       }
       const task = buildTechStackTask({
@@ -15975,7 +16731,7 @@ function buildTechStackCommand(opts) {
         const summary = await opts.onSpawnAndWait(task, { name });
         return { message: summary };
       } catch (err) {
-        const msg = `Tech stack scan failed: ${err instanceof Error ? err.message : String(err)}`;
+        const msg = `Tech stack scan failed: ${toErrorMessage(err)}`;
         opts.renderer.writeWarning(msg);
         return { message: msg };
       }
@@ -16088,39 +16844,196 @@ function buildTelegramSetupCommand(opts) {
         };
       }
       try {
-        await persistTelegramConfig(persistDeps, (telegram) => {
-          telegram.botToken = botToken;
-          if (chatId) {
-            telegram.notifyChatId = /^\d+$/.test(chatId) ? Number(chatId) : chatId;
+        await persistTelegramConfig(persistDeps, (telegram) => {
+          telegram.botToken = botToken;
+          if (chatId) {
+            telegram.notifyChatId = /^\d+$/.test(chatId) ? Number(chatId) : chatId;
+          }
+          if (telegram.notifyOnSessionEnd === void 0) {
+            telegram.notifyOnSessionEnd = true;
+          }
+        });
+        const chatLine = chatId ? `
+Default chat:  ${color.green(chatId)}` : `
+${color.dim("No default chat set. You can add it later: /telegram-setup <token> <chatId>")}`;
+        return {
+          message: [
+            `${color.green("\u2713")} Telegram configured successfully!`,
+            "",
+            `Bot:          ${color.bold(`@${bot.username ?? bot.first_name}`)} ${color.dim(`(id=${bot.id})`)}`,
+            `Name:         ${bot.first_name}`,
+            chatLine,
+            "",
+            `${color.amber("\u26A0")}  Restart WrongStack for the plugin to pick up the new config.`,
+            "",
+            "After restart, try:",
+            `  ${color.cyan("/telegram:status")}   \u2014 check bot connection`,
+            `  ${color.cyan("/telegram:send")}     \u2014 send a test message`
+          ].join("\n")
+        };
+      } catch (err) {
+        return {
+          message: [
+            `${color.red("\u2717")} Failed to save config.`,
+            `Error: ${err.message}`
+          ].join("\n")
+        };
+      }
+    }
+  };
+}
+init_helpers();
+var HELP2 = [
+  "Usage:",
+  "  /telegram-settings                      Show current Telegram notification settings",
+  "  /telegram-settings session-end on|off   Notify on session end",
+  "  /telegram-settings delegate on|off      Notify when a delegated subagent finishes",
+  "  /telegram-settings long-tool <ms|off>   Notify for tools slower than <ms> (0/off = disabled)",
+  "  /telegram-settings poll <seconds>       Bot polling interval (1\u201360)",
+  "  /telegram-settings chat <chatId>        Default chat for notifications",
+  "",
+  "Aliases: /tg-settings",
+  "",
+  "Settings apply immediately \u2014 no restart needed."
+].join("\n");
+function buildTelegramSettingsCommand(opts) {
+  function currentView() {
+    const config = opts.configStore.get();
+    const tg = config.extensions?.telegram ?? {};
+    const sessionEnd = tg.notifyOnSessionEnd === true;
+    const delegate = tg.notifyOnDelegate !== false;
+    const longToolMs = typeof tg.longToolThresholdMs === "number" ? tg.longToolThresholdMs : 3e4;
+    const longTool = longToolMs > 0 ? `${longToolMs}ms` : "off";
+    const poll = typeof tg.pollIntervalSec === "number" ? `${tg.pollIntervalSec}s` : "2s";
+    const chat = tg.notifyChatId !== void 0 && tg.notifyChatId !== null ? String(tg.notifyChatId) : "not set";
+    const hasToken = typeof tg.botToken === "string" && tg.botToken.length > 0;
+    return [
+      `${color.bold("Telegram")} ${color.dim("\u2014 Notification Settings")}`,
+      "",
+      `  session end:     ${sessionEnd ? color.cyan("on") : color.dim("off")}   ${color.dim("change: /telegram-settings session-end on|off")}`,
+      `  delegate done:   ${delegate ? color.cyan("on") : color.dim("off")}   ${color.dim("change: /telegram-settings delegate on|off")}`,
+      `  long tool:       ${color.cyan(longTool)}   ${color.dim("change: /telegram-settings long-tool <ms|off>")}`,
+      `  poll interval:   ${color.cyan(poll)}   ${color.dim("change: /telegram-settings poll <seconds>")}`,
+      `  notify chat:     ${color.cyan(chat)}   ${color.dim("change: /telegram-settings chat <chatId>")}`,
+      "",
+      hasToken ? color.dim("  Bot token configured. Changes apply immediately.") : `${color.amber("\u26A0")}  No bot token configured. Run: /telegram-setup <botToken> [chatId]`
+    ].join("\n");
+  }
+  return {
+    name: "telegram-settings",
+    category: "Config",
+    aliases: ["tg-settings"],
+    description: "Toggle which agent events are reported to Telegram.",
+    argsHint: "[session-end|delegate|long-tool|poll|chat <value>]",
+    help: HELP2,
+    async run(args) {
+      const { cmd: sub, rest } = parseSubcommand(args);
+      if (sub === "help" || sub === "--help" || sub === "-h") {
+        return { message: HELP2 };
+      }
+      if (!opts.configStore || !opts.paths?.globalConfig) {
+        return { message: `${color.red("Error")} config store not available.` };
+      }
+      if (!sub) {
+        return { message: currentView() };
+      }
+      const persistDeps = {
+        configStore: opts.configStore,
+        globalConfigPath: opts.paths.globalConfig,
+        vault: noOpVault
+      };
+      try {
+        if (sub === "session-end") {
+          const raw = (rest[0] ?? "").toLowerCase();
+          if (!["on", "off"].includes(raw)) {
+            return { message: `${color.amber("Usage:")} /telegram-settings session-end on|off` };
           }
-          if (telegram.notifyOnSessionEnd === void 0) {
-            telegram.notifyOnSessionEnd = true;
+          const on = raw === "on";
+          await persistTelegramConfig(persistDeps, (tg) => {
+            tg.notifyOnSessionEnd = on;
+          });
+          return {
+            message: `${color.green("\u2713")} session-end \u2192 ${on ? color.cyan("on") : color.dim("off")}`
+          };
+        }
+        if (sub === "delegate") {
+          const raw = (rest[0] ?? "").toLowerCase();
+          if (!["on", "off"].includes(raw)) {
+            return { message: `${color.amber("Usage:")} /telegram-settings delegate on|off` };
           }
-        });
-        const chatLine = chatId ? `
-Default chat:  ${color.green(chatId)}` : `
-${color.dim("No default chat set. You can add it later: /telegram-setup <token> <chatId>")}`;
+          const on = raw === "on";
+          await persistTelegramConfig(persistDeps, (tg) => {
+            tg.notifyOnDelegate = on;
+          });
+          return {
+            message: `${color.green("\u2713")} delegate \u2192 ${on ? color.cyan("on") : color.dim("off")}`
+          };
+        }
+        if (sub === "long-tool") {
+          const raw = rest[0];
+          if (raw === void 0) {
+            return {
+              message: `${color.amber("Usage:")} /telegram-settings long-tool <ms|off>   ${color.dim("(0 or off disables)")}`
+            };
+          }
+          if (raw === "off") {
+            await persistTelegramConfig(persistDeps, (tg) => {
+              tg.longToolThresholdMs = 0;
+            });
+            return {
+              message: `${color.green("\u2713")} long-tool \u2192 ${color.dim("off")}`
+            };
+          }
+          const ms = Number.parseInt(raw, 10);
+          if (Number.isNaN(ms) || ms < 0) {
+            return {
+              message: `${color.red("Invalid number")}: "${raw}". Enter milliseconds, e.g. /telegram-settings long-tool 15000`
+            };
+          }
+          await persistTelegramConfig(persistDeps, (tg) => {
+            tg.longToolThresholdMs = ms;
+          });
+          return {
+            message: `${color.green("\u2713")} long-tool \u2192 ${color.cyan(`${ms}ms`)}`
+          };
+        }
+        if (sub === "poll") {
+          const raw = rest[0];
+          if (raw === void 0) {
+            return { message: `${color.amber("Usage:")} /telegram-settings poll <seconds>   ${color.dim("(1\u201360)")}` };
+          }
+          const sec = Number.parseInt(raw, 10);
+          if (Number.isNaN(sec) || sec < 1 || sec > 60) {
+            return {
+              message: `${color.red("Invalid value")}: "${raw}". Enter seconds between 1 and 60.`
+            };
+          }
+          await persistTelegramConfig(persistDeps, (tg) => {
+            tg.pollIntervalSec = sec;
+          });
+          return {
+            message: `${color.green("\u2713")} poll \u2192 ${color.cyan(`${sec}s`)}`
+          };
+        }
+        if (sub === "chat") {
+          const raw = rest[0];
+          if (!raw) {
+            return { message: `${color.amber("Usage:")} /telegram-settings chat <chatId>` };
+          }
+          const chatId = /^\d+$/.test(raw) ? Number(raw) : raw;
+          await persistTelegramConfig(persistDeps, (tg) => {
+            tg.notifyChatId = chatId;
+          });
+          return {
+            message: `${color.green("\u2713")} notify chat \u2192 ${color.cyan(raw)}`
+          };
+        }
         return {
-          message: [
-            `${color.green("\u2713")} Telegram configured successfully!`,
-            "",
-            `Bot:          ${color.bold(`@${bot.username ?? bot.first_name}`)} ${color.dim(`(id=${bot.id})`)}`,
-            `Name:         ${bot.first_name}`,
-            chatLine,
-            "",
-            `${color.amber("\u26A0")}  Restart WrongStack for the plugin to pick up the new config.`,
-            "",
-            "After restart, try:",
-            `  ${color.cyan("/telegram:status")}   \u2014 check bot connection`,
-            `  ${color.cyan("/telegram:send")}     \u2014 send a test message`
-          ].join("\n")
+          message: `${color.red("Unknown setting")} "${sub}". ${unknownSubcommand(sub, ["session-end", "delegate", "long-tool", "poll", "chat"], "telegram-settings")}`
         };
       } catch (err) {
         return {
-          message: [
-            `${color.red("\u2717")} Failed to save config.`,
-            `Error: ${err.message}`
-          ].join("\n")
+          message: `${color.red("Settings error")}: ${toErrorMessage(err)}`
         };
       }
     }
@@ -16153,7 +17066,7 @@ function buildTodosCommand(opts) {
   return {
     name: "todos",
     category: "Inspect",
-    description: "Inspect or edit the live todo list: /todos [show|clear|add|done|remove|rm <id|index>]",
+    description: "Inspect or edit the live todo list: /todos [show|clear|add|done|remove|rm <id|index>]. For multi-phase work use /plan (session-persistent roadmap). For structured typed work with priorities and dependencies use /tasks (session-persistent).",
     async run(args) {
       const ctx = opts.context;
       if (!ctx) return { message: "No active context." };
@@ -16207,7 +17120,7 @@ function buildTodosCommand(opts) {
         }
         default:
           return {
-            message: unknownSubcommand(cmd, ["show", "clear", "add", "done", "remove"], "todos")
+            message: unknownSubcommand(cmd, ["show", "clear", "add", "done", "remove"], "todos") + "\n\nRelated: /plan (session-persistent roadmap) | /tasks (structured tasks with priorities)"
           };
       }
     }
@@ -16253,7 +17166,7 @@ function buildWorkingDirCommand(_opts) {
       }
       const trimmed = args.trim();
       if (!trimmed) {
-        const rel2 = path39.relative(ctx.projectRoot, ctx.workingDir) || ".";
+        const rel2 = path4.relative(ctx.projectRoot, ctx.workingDir) || ".";
         return {
           message: [
             `Working directory: ${color.bold(ctx.workingDir)}`,
@@ -16262,10 +17175,10 @@ function buildWorkingDirCommand(_opts) {
           ].join("\n")
         };
       }
-      const resolved = path39.isAbsolute(trimmed) ? path39.resolve(trimmed) : path39.resolve(ctx.projectRoot, trimmed);
-      const root = path39.resolve(ctx.projectRoot);
-      const rel = path39.relative(root, resolved);
-      if (rel.startsWith("..") || path39.isAbsolute(rel)) {
+      const resolved = path4.isAbsolute(trimmed) ? path4.resolve(trimmed) : path4.resolve(ctx.projectRoot, trimmed);
+      const root = path4.resolve(ctx.projectRoot);
+      const rel = path4.relative(root, resolved);
+      if (rel.startsWith("..") || path4.isAbsolute(rel)) {
         return {
           message: color.red(
             `Directory "${trimmed}" is outside the project root.
@@ -16287,11 +17200,11 @@ function buildWorkingDirCommand(_opts) {
         ctx.setWorkingDir(resolved);
       } catch (err) {
         return {
-          message: color.red(err instanceof Error ? err.message : String(err))
+          message: color.red(toErrorMessage(err))
         };
       }
-      const prevRel = path39.relative(ctx.projectRoot, previous) || ".";
-      const newRel = path39.relative(ctx.projectRoot, resolved) || ".";
+      const prevRel = path4.relative(ctx.projectRoot, previous) || ".";
+      const newRel = path4.relative(ctx.projectRoot, resolved) || ".";
       return {
         message: [
           color.green(`  \u2713 ${prevRel} \u2192 ${color.bold(newRel)}`),
@@ -16434,6 +17347,7 @@ function buildBuiltinSlashCommands(opts) {
     buildDirectorCommand(opts),
     buildFleetCommand(opts),
     buildEnhanceCommand(opts),
+    buildEnsembleCommand(),
     buildMemoryCommand(opts),
     buildTodosCommand(opts),
     buildTasksCommand(),
@@ -16444,6 +17358,7 @@ function buildBuiltinSlashCommands(opts) {
     buildMouseCommand(),
     buildAutonomyCommand(opts),
     buildGoalCommand(opts),
+    buildCoordinatorCommand(opts),
     buildBrainCommand(opts),
     buildBtwCommand(opts),
     buildNextCommand(opts),
@@ -16456,6 +17371,7 @@ function buildBuiltinSlashCommands(opts) {
     buildWorktreeCommand(opts),
     buildSettingsCommand(opts),
     buildTelegramSetupCommand(opts),
+    buildTelegramSettingsCommand(opts),
     buildSetModelCommand(opts),
     buildFallbackCommand(opts),
     buildModelCapsCommand(opts),
@@ -16475,8 +17391,6 @@ function buildBuiltinSlashCommands(opts) {
     })
   ];
 }
-
-// src/pre-launch.ts
 var MANIFESTS = [
   "package.json",
   "pyproject.toml",
@@ -16491,13 +17405,13 @@ var MANIFESTS = [
 ];
 async function detectProjectKind(projectRoot) {
   try {
-    await fsp5.access(path39.join(projectRoot, ".wrongstack", "AGENTS.md"));
+    await fsp5.access(path4.join(projectRoot, ".wrongstack", "AGENTS.md"));
     return "initialized";
   } catch {
   }
   for (const m of MANIFESTS) {
     try {
-      await fsp5.access(path39.join(projectRoot, m));
+      await fsp5.access(path4.join(projectRoot, m));
       return "project";
     } catch {
     }
@@ -16505,8 +17419,8 @@ async function detectProjectKind(projectRoot) {
   return "empty";
 }
 async function scaffoldAgentsMd(projectRoot) {
-  const dir = path39.join(projectRoot, ".wrongstack");
-  const file = path39.join(dir, "AGENTS.md");
+  const dir = path4.join(projectRoot, ".wrongstack");
+  const file = path4.join(dir, "AGENTS.md");
   const facts = await detectProjectFacts(projectRoot);
   const body = renderAgentsTemplate(facts);
   await fsp5.mkdir(dir, { recursive: true });
@@ -16519,7 +17433,7 @@ async function runProjectCheck(opts) {
   if (kind === "initialized") {
     renderer.write(
       `
-  ${color.green("\u2713")} Project initialized ${color.dim(`(${path39.join(projectRoot, ".wrongstack", "AGENTS.md")})`)}
+  ${color.green("\u2713")} Project initialized ${color.dim(`(${path4.join(projectRoot, ".wrongstack", "AGENTS.md")})`)}
 `
     );
     return true;
@@ -16544,13 +17458,13 @@ async function runProjectCheck(opts) {
 `);
       } catch (err) {
         renderer.writeError(
-          `Failed to scaffold AGENTS.md: ${err instanceof Error ? err.message : String(err)}`
+          `Failed to scaffold AGENTS.md: ${toErrorMessage(err)}`
         );
       }
     }
     return true;
   }
-  const gitDir = path39.join(projectRoot, ".git");
+  const gitDir = path4.join(projectRoot, ".git");
   let hasGit = false;
   try {
     await fsp5.access(gitDir);
@@ -16589,7 +17503,7 @@ async function runProjectCheck(opts) {
 `);
       } catch (err) {
         renderer.writeError(
-          `git init failed: ${err instanceof Error ? err.message : String(err)}
+          `git init failed: ${toErrorMessage(err)}
 `
         );
       }
@@ -16785,11 +17699,11 @@ async function countProjectFiles(projectRoot, threshold) {
     for (const e of entries) {
       if (SKIP_DIRS.has(e.name)) continue;
       if (count >= threshold) return;
-      const full = path39.join(dir, e.name);
+      const full = path4.join(dir, e.name);
       if (e.isDirectory()) {
         await walk(full);
       } else if (e.isFile()) {
-        if (INDEXABLE_EXTS.has(path39.extname(e.name))) {
+        if (INDEXABLE_EXTS.has(path4.extname(e.name))) {
           count++;
         }
       }
@@ -17130,14 +18044,14 @@ function summarize(value, name) {
   if (typeof v === "object" && v !== null) {
     const o = v;
     if (name === "edit") {
-      const path40 = typeof o["path"] === "string" ? o["path"] : "";
+      const path39 = typeof o["path"] === "string" ? o["path"] : "";
       const reps = typeof o["replacements"] === "number" ? o["replacements"] : 0;
-      return `${path40}  ${reps} replacement${reps === 1 ? "" : "s"}`.trim();
+      return `${path39}  ${reps} replacement${reps === 1 ? "" : "s"}`.trim();
     }
     if (name === "write") {
-      const path40 = typeof o["path"] === "string" ? o["path"] : "";
+      const path39 = typeof o["path"] === "string" ? o["path"] : "";
       const bytes = typeof o["bytes"] === "number" ? o["bytes"] : void 0;
-      return bytes !== void 0 ? `${path40}  ${bytes}B` : path40;
+      return bytes !== void 0 ? `${path39}  ${bytes}B` : path39;
     }
     if (typeof o["count"] === "number") {
       return `${o["count"]} match${o["count"] === 1 ? "" : "es"}`;
@@ -17148,6 +18062,17 @@ function summarize(value, name) {
 
 // src/boot.ts
 init_project_utils();
+function resolveCmdFromCatalog(subagentId) {
+  const desc = findAgentDescriptor(subagentId);
+  if (!desc) return null;
+  const out = {
+    command: desc.acp.command,
+    args: [...desc.acp.args ?? []],
+    role: subagentId
+  };
+  if (desc.acp.env) out.env = desc.acp.env;
+  return out;
+}
 var acpCmd = async (args, deps) => {
   const sub = args[0];
   if (!sub || sub === "server" || sub === "serve") {
@@ -17162,6 +18087,9 @@ Usage:
   wstack acp list         List available ACP agents
   wstack acp spawn <id> <task>
                         Spawn an ACP agent as a subagent and wait for result
+  wstack acp parallel <agent-id-csv> <task>
+                        Fan a task out to multiple ACP agents in parallel
+                        and aggregate the results
   wstack acp help         Show this help
 
 ACP Mode:
@@ -17171,9 +18099,17 @@ ACP Mode:
   Press Ctrl+C to stop.
 
 spawn:
-  Spawns a named ACP agent (cline, gemini-cli, copilot, openhands, goose)
-  with the given task and waits for its result.
+  Spawns a named ACP agent (claude-code, gemini-cli, codex-cli, copilot,
+  cline, goose, openhands, qwen-code, kiro-cli, opencode, mistral-vibe,
+  cursor) with the given task and waits for its result.
   Example: wstack acp spawn cline "fix the login bug"
+
+parallel:
+  Runs the same task on a comma-separated list of ACP agents concurrently.
+  Example: wstack acp parallel claude-code,gemini-cli,codex-cli "review this diff"
+  Each agent's result is rendered under a clearly-marked header. Returns 0
+  if at least one agent succeeds, 1 if all fail. Agents that aren't
+  installed are skipped with a warning.
 `);
     return 0;
   }
@@ -17183,20 +18119,20 @@ spawn:
   if (sub === "spawn") {
     return spawnACPAgent(args.slice(1), deps);
   }
+  if (sub === "parallel") {
+    return parallelACPAgents(args.slice(1), deps);
+  }
   deps.renderer.writeError(`Unknown acp subcommand: ${sub}
 `);
   deps.renderer.write("Run `wstack acp help` for usage.\n");
   return 1;
 };
 async function runACPServer(deps) {
-  const toolRegistry = deps.toolRegistry;
-  const tools = toolRegistry?.list() ?? [];
   deps.renderer.writeInfo("Starting WrongStack ACP server...\n");
-  deps.renderer.writeInfo(`Exposing ${tools.length} tool(s) via ACP protocol.
-`);
   deps.renderer.writeInfo("Waiting for ACP client connection on stdin/stdout...\n");
+  deps.renderer.writeInfo("(default runTurn is a no-op echo \u2014 wire makeACPServerAgentTurn for a real agent)\n");
   deps.renderer.writeInfo("Press Ctrl+C to stop.\n");
-  const server = new WrongStackACPServer({ tools });
+  const server = new WrongStackACPServer({});
   const shutdown = () => {
     deps.renderer.writeWarning("\nShutting down ACP server...");
     server.stop();
@@ -17215,16 +18151,25 @@ async function runACPServer(deps) {
   }
   return 0;
 }
-function listACPAgents(deps) {
-  deps.renderer.write("Available ACP agents:\n\n");
-  for (const a of ACP_AGENTS) {
-    const id = a.id ?? a.role;
-    const name = a.name ?? a.role ?? "";
-    const desc = a.prompt?.slice(0, 50) ?? "";
-    deps.renderer.write(`  ${id.padEnd(16)} ${name.padEnd(20)} ${desc}\u2026
+async function listACPAgents(deps) {
+  const registry = new EnsembleRegistry();
+  const detected = await registry.list();
+  deps.renderer.write("Detected ACP agents:\n\n");
+  const installed = detected.filter((a) => a.installed);
+  const missing = detected.filter((a) => !a.installed);
+  for (const a of installed) {
+    const ver = a.version ? `  (${a.version.split("\n")[0]})` : "";
+    deps.renderer.write(`  \u2713 ${a.id.padEnd(16)} ${a.displayName}${ver}
+`);
+  }
+  for (const a of missing) {
+    deps.renderer.write(`  \u2717 ${a.id.padEnd(16)} ${a.displayName}  (${a.reason ?? "not installed"})
 `);
   }
-  deps.renderer.write("\nUse `wstack acp spawn <agent> <task>` to delegate a task.\n");
+  deps.renderer.write(`
+${installed.length} of ${detected.length} agents available.
+`);
+  deps.renderer.write("Use `wstack acp spawn <agent-id> <task>` to delegate a task.\n");
   return 0;
 }
 async function spawnACPAgent(args, deps) {
@@ -17240,7 +18185,7 @@ async function spawnACPAgent(args, deps) {
     deps.renderer.write("Task description is required.\n");
     return 1;
   }
-  const cmd = ACP_AGENT_COMMANDS[subagentId];
+  const cmd = ACP_AGENT_COMMANDS[subagentId] ?? resolveCmdFromCatalog(subagentId);
   if (!cmd) {
     deps.renderer.writeError(`Unknown ACP agent: ${subagentId}
 `);
@@ -17294,10 +18239,11 @@ async function spawnACPAgent(args, deps) {
     );
     return 0;
   } catch (err) {
-    deps.renderer.writeError(
-      `ACP agent error: ${err instanceof Error ? err.message : String(err)}
-`
-    );
+    const e = err;
+    const detail = e.kind ? `[${e.kind}] ` : "";
+    const message = e.message ?? (err instanceof Error ? err.message : String(err));
+    deps.renderer.writeError(`ACP agent error: ${detail}${message}
+`);
     return 1;
   } finally {
     cleanup();
@@ -17305,6 +18251,94 @@ async function spawnACPAgent(args, deps) {
     process.off("SIGTERM", cleanup);
   }
 }
+async function parallelACPAgents(args, deps) {
+  const [csv, ...taskParts] = args;
+  if (!csv) {
+    deps.renderer.writeError("Usage: wstack acp parallel <agent-id-csv> <task>\n");
+    deps.renderer.write('Example: wstack acp parallel claude-code,gemini-cli "review this diff"\n');
+    return 1;
+  }
+  const task = taskParts.join(" ");
+  if (!task) {
+    deps.renderer.writeError("Usage: wstack acp parallel <agent-id-csv> <task>\n");
+    deps.renderer.writeError("Task description is required.\n");
+    return 1;
+  }
+  const ac = new AbortController();
+  const onSignal = () => ac.abort();
+  process.on("SIGINT", onSignal);
+  process.on("SIGTERM", onSignal);
+  try {
+    const result = await runEnsemble({
+      agentIds: csv,
+      task,
+      resolveCmd: resolveCmdFromCatalog,
+      signal: ac.signal
+    });
+    const skipped = result.results.filter((r) => r.status === "skipped");
+    if (skipped.length > 0) {
+      deps.renderer.writeWarning(
+        `Skipping ${skipped.length} agent(s) not installed: ${skipped.map((s) => `${s.agentId} (${s.reason ?? "not installed"})`).join(", ")}
+`
+      );
+    }
+    if (result.summary.succeeded + result.summary.failed + result.summary.cancelled === 0) {
+      deps.renderer.writeError("No installed agents to run.\n");
+      deps.renderer.write("Run `wstack acp list` to see what is available.\n");
+      return 1;
+    }
+    const fannedOut = result.results.filter((r) => r.status !== "skipped").map((r) => r.agentId).join(", ");
+    deps.renderer.writeInfo(
+      `Fanning out to ${result.summary.succeeded + result.summary.failed + result.summary.cancelled} agent(s): ${fannedOut}
+`
+    );
+    deps.renderer.writeInfo(`Task: ${result.task}
+
+`);
+    for (const r of result.results) {
+      if (r.status === "skipped") continue;
+      deps.renderer.write(`
+=== ${r.agentId} ===
+`);
+      if (r.status === "success") {
+        deps.renderer.write(r.result && r.result.length > 0 ? r.result : "(no result)");
+        deps.renderer.write(
+          `
+[${r.agentId}] success  ${r.durationMs}ms  iterations=${r.iterations} toolCalls=${r.toolCalls}
+`
+        );
+      } else if (r.status === "failed") {
+        deps.renderer.writeError(
+          `[${r.error?.kind ?? "unknown"}] ${r.error?.message ?? "failed"}
+`
+        );
+        deps.renderer.write(
+          `[${r.agentId}] failed  ${r.durationMs}ms
+`
+        );
+      } else {
+        deps.renderer.writeError(
+          `[${r.error?.kind ?? "aborted"}] ${r.error?.message ?? "cancelled"}
+`
+        );
+        deps.renderer.write(
+          `[${r.agentId}] cancelled  ${r.durationMs}ms
+`
+        );
+      }
+    }
+    const { succeeded, failed, cancelled, skipped: skip } = result.summary;
+    deps.renderer.write(
+      `
+Parallel summary: ${succeeded} succeeded, ${failed} failed, ${cancelled} cancelled, ${skip} skipped.
+`
+    );
+    return succeeded > 0 ? 0 : 1;
+  } finally {
+    process.off("SIGINT", onSignal);
+    process.off("SIGTERM", onSignal);
+  }
+}
 var auditCmd = async (args, deps) => {
   const wpaths = resolveWstackPaths({
     projectRoot: deps.projectRoot,
@@ -17354,14 +18388,14 @@ var auditCmd = async (args, deps) => {
   return verify.ok ? 0 : 1;
 };
 async function listAudits(log, dir, deps) {
-  const fs39 = await import('fs/promises');
-  const path40 = await import('path');
+  const fs38 = await import('fs/promises');
+  const path39 = await import('path');
   const out = [];
   let foundRoot = true;
   const scan = async (scanDir, prefix, depth) => {
     let entries;
     try {
-      entries = await fs39.readdir(scanDir, { withFileTypes: true });
+      entries = await fs38.readdir(scanDir, { withFileTypes: true });
     } catch {
       if (depth === 0) foundRoot = false;
       return;
@@ -17369,7 +18403,7 @@ async function listAudits(log, dir, deps) {
     for (const entry of entries) {
       if (entry.name.startsWith(".")) continue;
       if (entry.isDirectory()) {
-        if (depth === 0) await scan(path40.join(scanDir, entry.name), entry.name, depth + 1);
+        if (depth === 0) await scan(path39.join(scanDir, entry.name), entry.name, depth + 1);
         continue;
       }
       if (!entry.isFile() || !entry.name.endsWith(".audit.jsonl")) continue;
@@ -18092,6 +19126,35 @@ ${color.amber("?")} Pick: `)).trim().toLowerCase();
   }
 }
 
+// src/auth-menu/local.ts
+init_provider_config_utils();
+
+// src/auth-menu/local.ts
+var LOCAL_LLM_PRESETS = [
+  {
+    id: "ollama",
+    label: "Ollama",
+    defaultBaseUrl: "http://localhost:11434/v1",
+    noAuth: true,
+    hint: "https://ollama.com \u2014 port 11434, no auth"
+  },
+  {
+    id: "vllm",
+    label: "vLLM",
+    defaultBaseUrl: "http://localhost:8000/v1",
+    noAuth: false,
+    hint: "https://docs.vllm.ai \u2014 port 8000, optional Bearer"
+  },
+  {
+    id: "lmstudio",
+    label: "LM Studio",
+    defaultBaseUrl: "http://localhost:1234/v1",
+    noAuth: false,
+    hint: "https://lmstudio.ai \u2014 port 1234, optional Bearer"
+  }
+];
+new Map(LOCAL_LLM_PRESETS.map((p) => [p.id, p]));
+
 // src/subcommands/handlers/auth.ts
 init_provider_config_utils();
 var authCmd = async (args, deps) => {
@@ -18334,7 +19397,7 @@ async function resolveWstackEntry() {
   try {
     const req2 = createRequire(import.meta.url);
     const pkgPath = req2.resolve("@wrongstack/cli/package.json");
-    const entry = path39.join(path39.dirname(pkgPath), "dist", "index.js");
+    const entry = path4.join(path4.dirname(pkgPath), "dist", "index.js");
     await fsp5.access(entry);
     return entry;
   } catch {
@@ -18349,9 +19412,9 @@ async function benchRun(_args, deps) {
   const outBase = flagStr(deps, "out") ?? "bench-results";
   let config;
   try {
-    config = await loadBenchConfig(path39.resolve(deps.cwd, modelsPath));
+    config = await loadBenchConfig(path4.resolve(deps.cwd, modelsPath));
   } catch (err) {
-    deps.renderer.writeError(err instanceof Error ? err.message : String(err));
+    deps.renderer.writeError(toErrorMessage(err));
     return 1;
   }
   const concurrencyRaw = flagStr(deps, "concurrency");
@@ -18360,8 +19423,8 @@ async function benchRun(_args, deps) {
     if (c > 0) config.concurrency = c;
   }
   const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-  const outDir = path39.resolve(deps.cwd, outBase, stamp);
-  const predictionsDir = path39.join(outDir, "predictions");
+  const outDir = path4.resolve(deps.cwd, outBase, stamp);
+  const predictionsDir = path4.join(outDir, "predictions");
   let suite;
   let grade;
   let isSwebench = false;
@@ -18373,14 +19436,14 @@ async function benchRun(_args, deps) {
     }
     const languagesRaw = flagStr(deps, "languages");
     const languages = languagesRaw ? languagesRaw.split(",").map((s) => s.trim()).filter(Boolean) : void 0;
-    suite = createPolyglotSuite({ polyglotDir: path39.resolve(deps.cwd, polyglotDir), languages });
+    suite = createPolyglotSuite({ polyglotDir: path4.resolve(deps.cwd, polyglotDir), languages });
     grade = (a) => gradePolyglot(a);
   } else if (suiteId === "swebench") {
     isSwebench = true;
     const datasetDir = flagStr(deps, "dataset-dir");
     const docker = flagBool(deps, "docker");
     suite = createSwebenchSuite({
-      datasetDir: datasetDir ? path39.resolve(deps.cwd, datasetDir) : void 0,
+      datasetDir: datasetDir ? path4.resolve(deps.cwd, datasetDir) : void 0,
       docker
     });
     grade = (a) => gradeSwebench({ ...a, predictionsDir });
@@ -18405,12 +19468,12 @@ async function benchRun(_args, deps) {
       onProgress: (msg) => deps.renderer.write(color.dim(msg) + "\n")
     });
   } catch (err) {
-    deps.renderer.writeError(err instanceof Error ? err.message : String(err));
+    deps.renderer.writeError(toErrorMessage(err));
     return 1;
   }
   await writeJsonArtifacts(outDir, report);
   const md = renderMarkdownReport(report);
-  await fsp5.writeFile(path39.join(outDir, "report.md"), md, "utf8");
+  await fsp5.writeFile(path4.join(outDir, "report.md"), md, "utf8");
   deps.renderer.write("\n" + md + "\n");
   if (isSwebench) {
     for (const cell of config.cells) {
@@ -18423,7 +19486,7 @@ async function benchRun(_args, deps) {
       "Grade with the official SWE-bench harness: python -m swebench.harness.run_evaluation --predictions_path <file> --run_id <id>"
     );
   }
-  deps.renderer.writeInfo(`Report written to ${path39.join(outDir, "report.md")}`);
+  deps.renderer.writeInfo(`Report written to ${path4.join(outDir, "report.md")}`);
   return 0;
 }
 async function benchReport(args, deps) {
@@ -18432,18 +19495,18 @@ async function benchReport(args, deps) {
     deps.renderer.writeError("Usage: wstack bench report <run-directory>");
     return 1;
   }
-  const outDir = path39.resolve(deps.cwd, dir);
+  const outDir = path4.resolve(deps.cwd, dir);
   let summary;
   try {
     summary = await readSummary(outDir);
   } catch (err) {
     deps.renderer.writeError(
-      `cannot read summary.json in ${outDir}: ${err instanceof Error ? err.message : String(err)}`
+      `cannot read summary.json in ${outDir}: ${toErrorMessage(err)}`
     );
     return 1;
   }
   const md = renderMarkdownReport(summary);
-  await fsp5.writeFile(path39.join(outDir, "report.md"), md, "utf8");
+  await fsp5.writeFile(path4.join(outDir, "report.md"), md, "utf8");
   deps.renderer.write("\n" + md + "\n");
   return 0;
 }
@@ -18458,7 +19521,7 @@ async function benchList(_args, deps) {
   const modelsPath = flagStr(deps, "models");
   if (modelsPath) {
     try {
-      const config = await loadBenchConfig(path39.resolve(deps.cwd, modelsPath));
+      const config = await loadBenchConfig(path4.resolve(deps.cwd, modelsPath));
       deps.renderer.write("\n" + color.bold("Model cells\n"));
       for (const cell of config.cells) {
         deps.renderer.write(
@@ -18476,7 +19539,7 @@ async function benchList(_args, deps) {
       });
       deps.renderer.write("\n" + color.dim(`Harness: ${fp}`) + "\n");
     } catch (err) {
-      deps.renderer.writeError(err instanceof Error ? err.message : String(err));
+      deps.renderer.writeError(toErrorMessage(err));
       return 1;
     }
   }
@@ -18513,14 +19576,14 @@ var doctorCmd = async (_args, deps) => {
     checks.push({
       name: "provider",
       status: "fail",
-      detail: "no provider configured \u2014 run `wstack init` or `wstack auth`"
+      detail: "no provider configured \u2014 run `wstack auth` to set up"
     });
   else checks.push({ name: "provider", status: "ok", detail: cfg.provider });
   if (!cfg.model)
     checks.push({
       name: "model",
       status: "fail",
-      detail: "no model configured \u2014 run `wstack init`"
+      detail: "no model configured \u2014 run `wstack auth` to configure"
     });
   else checks.push({ name: "model", status: "ok", detail: cfg.model });
   if (cfg.provider) {
@@ -18560,7 +19623,7 @@ var doctorCmd = async (_args, deps) => {
     checks.push({
       name: "models cache",
       status: "warn",
-      detail: `read failed: ${err instanceof Error ? err.message : String(err)}`
+      detail: `read failed: ${toErrorMessage(err)}`
     });
   }
   try {
@@ -18575,7 +19638,7 @@ var doctorCmd = async (_args, deps) => {
   }
   try {
     await fsp5.mkdir(deps.paths.projectSessions, { recursive: true });
-    const probe = path39.join(deps.paths.projectSessions, `.probe-${Date.now()}`);
+    const probe = path4.join(deps.paths.projectSessions, `.probe-${Date.now()}`);
     await fsp5.writeFile(probe, "");
     await fsp5.unlink(probe);
     checks.push({ name: "sessions writable", status: "ok", detail: deps.paths.projectSessions });
@@ -18583,7 +19646,7 @@ var doctorCmd = async (_args, deps) => {
     checks.push({
       name: "sessions writable",
       status: "fail",
-      detail: `cannot write to ${deps.paths.projectSessions}: ${err instanceof Error ? err.message : String(err)}`
+      detail: `cannot write to ${deps.paths.projectSessions}: ${toErrorMessage(err)}`
     });
   }
   const mcpEntries = Object.entries(cfg.mcpServers ?? {});
@@ -18674,12 +19737,12 @@ var exportCmd = async (args, deps) => {
   try {
     rendered = await reader.export(sessionId, { format, includeTools, includeDiagnostics });
   } catch (err) {
-    deps.renderer.writeError(`Export failed: ${err instanceof Error ? err.message : String(err)}`);
+    deps.renderer.writeError(`Export failed: ${toErrorMessage(err)}`);
     return 1;
   }
   if (output) {
-    await fsp5.mkdir(path39.dirname(path39.resolve(deps.cwd, output)), { recursive: true });
-    await fsp5.writeFile(path39.resolve(deps.cwd, output), rendered, "utf8");
+    await fsp5.mkdir(path4.dirname(path4.resolve(deps.cwd, output)), { recursive: true });
+    await fsp5.writeFile(path4.resolve(deps.cwd, output), rendered, "utf8");
     deps.renderer.write(`Wrote ${rendered.length} bytes to ${output}
 `);
   } else {
@@ -18688,80 +19751,23 @@ var exportCmd = async (args, deps) => {
   }
   return 0;
 };
-
-// src/subcommands/handlers/init.ts
-init_helpers();
 var initCmd = async (_args, deps) => {
-  deps.renderer.write(color.bold("WrongStack init\n"));
-  deps.renderer.writeInfo("Loading provider catalog from models.dev (cached locally)\u2026");
-  let providers;
-  try {
-    providers = await deps.modelsRegistry.listProviders();
-  } catch (err) {
-    deps.renderer.writeError(
-      `Failed to load provider catalog: ${err instanceof Error ? err.message : err}`
-    );
-    return 1;
-  }
-  const detected = providers.filter((p) => p.family !== "unsupported").filter((p) => p.envVars.some((v) => process.env[v]));
-  const ranked = detected.length > 0 ? detected : providers.filter((p) => ["anthropic", "openai", "google"].includes(p.id));
-  if (detected.length > 0)
-    deps.renderer.write(
-      `Detected API keys for: ${detected.map((p) => p.name).join(", ")}
+  deps.renderer.write(color.bold("WrongStack init (deprecated)\n"));
+  deps.renderer.write(
+    `
+  ${color.amber("\u26A0 This command is deprecated.")}
+
+  Use ${color.bold("wstack auth")} to set up providers, add API keys,
+  and configure your default model in one interactive workflow.
+
+  ${color.dim("Examples:")}
+    ${color.cyan("wstack auth")}              Interactive setup menu
+    ${color.cyan("wstack auth anthropic")}   Add Anthropic API key directly
+    ${color.cyan("wstack auth local")}        Add local LLM (Ollama, vLLM, LM Studio)
+
+  Run ${color.bold("wstack auth --help")} for more options.
 `
-    );
-  const defaultId = ranked[0]?.id ?? "anthropic";
-  const providerAnswer = (await deps.reader.readLine(`Provider [${defaultId}]: `)).trim();
-  if (providerAnswer === "q") {
-    deps.renderer.write(color.dim("Cancelled.\n"));
-    return 0;
-  }
-  const providerId = providerAnswer || defaultId;
-  const provider = await deps.modelsRegistry.getProvider(providerId);
-  if (!provider) {
-    deps.renderer.writeError(`Provider "${providerId}" not found in models.dev catalog.`);
-    return 1;
-  }
-  if (provider.family === "unsupported") {
-    deps.renderer.writeError(
-      `Provider "${providerId}" uses ${provider.npm} which has no built-in transport. Install a plugin to enable it.`
-    );
-    return 1;
-  }
-  const suggestedModel = await deps.modelsRegistry.suggestModel(providerId) ?? "";
-  const modelHint = suggestedModel ? ` [${suggestedModel}]` : "";
-  const modelAnswer = (await deps.reader.readLine(`Model${modelHint}: `)).trim();
-  if (modelAnswer === "q") {
-    deps.renderer.write(color.dim("Cancelled.\n"));
-    return 0;
-  }
-  const modelId = modelAnswer || suggestedModel;
-  if (!modelId) {
-    deps.renderer.writeError("No model selected. Aborting.");
-    return 1;
-  }
-  const envHit = provider.envVars.map((v) => process.env[v]).find(Boolean);
-  let apiKey = "";
-  if (!envHit) {
-    apiKey = (await deps.reader.readLine(
-      `API key (stored in ${deps.paths.globalConfig}; empty = expect ${provider.envVars[0] ?? "env var"}): `
-    )).trim();
-  } else {
-    deps.renderer.writeInfo(`Found API key in env (${provider.envVars.join(" / ")}).`);
-  }
-  await fsp5.mkdir(deps.paths.globalRoot, { recursive: true });
-  const config = { version: 1, provider: providerId, model: modelId };
-  if (apiKey) config.apiKey = apiKey;
-  const vault = new DefaultSecretVault({ keyFile: deps.paths.secretsKey });
-  const encrypted = encryptConfigSecrets$1(config, vault);
-  await atomicWrite(deps.paths.globalConfig, JSON.stringify(encrypted, null, 2), { mode: 384 });
-  await fsp5.mkdir(path39.join(deps.projectRoot, ".wrongstack"), { recursive: true });
-  const agentsFile = path39.join(deps.projectRoot, ".wrongstack", "AGENTS.md");
-  const projectFacts = await detectProjectFacts(deps.projectRoot);
-  await atomicWrite(agentsFile, renderAgentsTemplate(projectFacts));
-  deps.renderer.writeInfo(`Wrote ${deps.paths.globalConfig}`);
-  deps.renderer.writeInfo(`Project state lives in ${deps.paths.projectDir}`);
-  deps.renderer.writeInfo('Try: wstack "<task>"  or  wstack');
+  );
   return 0;
 };
 var AllowAllPermissionPolicy = class extends AutoApprovePermissionPolicy {
@@ -18777,7 +19783,7 @@ function parseToolsFlag(flags) {
   );
   return set.size > 0 ? set : null;
 }
-function makeServeContext(cwd, projectRoot, signal) {
+function makeServeContext(cwd, projectRoot, signal, restrictFsToRoot = true) {
   const provider = {
     id: "mcp-serve",
     capabilities: { maxContext: 0 },
@@ -18804,6 +19810,7 @@ function makeServeContext(cwd, projectRoot, signal) {
     tokenCounter,
     cwd,
     projectRoot,
+    allowOutsideProjectRoot: !restrictFsToRoot,
     model: "mcp-serve",
     tools: []
   });
@@ -18829,7 +19836,12 @@ async function serveMcpStdio(deps) {
     registry.registerAllOrThrow([...builtinToolsPack.tools ?? []], builtinToolsPack.name);
   }
   const controller = new AbortController();
-  const ctx = makeServeContext(deps.cwd, deps.projectRoot, controller.signal);
+  const ctx = makeServeContext(
+    deps.cwd,
+    deps.projectRoot,
+    controller.signal,
+    deps.config.tools?.restrictToProjectRoot ?? false
+  );
   const permissionPolicy = yolo ? new AllowAllPermissionPolicy() : new AutoApprovePermissionPolicy();
   const executor = new ToolExecutor(registry, {
     permissionPolicy,
@@ -19647,7 +20659,7 @@ var modeldiagCmd = async (args, deps) => {
           `  ${label} ${provColor(modelKey.padEnd(50))} ${scoreBar(c.score, 110).slice(0, 11)}  ${color.amber(fmtMs(latency).padEnd(8))} ${color.dim(`in${usage?.input ?? "?"}/out${usage?.output ?? "?"}`.padEnd(12))} ${firstLineClean}`
         );
       } catch (err) {
-        const errMsg = err instanceof Error ? err.message : String(err);
+        const errMsg = toErrorMessage(err);
         writeLine(
           `  ${label} ${color.red(modelKey.padEnd(50))} ${scoreBar(c.score, 110).slice(0, 11)}  ${color.red("FAILED")}    ${color.dim(errMsg.slice(0, 40))}`
         );
@@ -20119,7 +21131,7 @@ var usageCmd = async (_args, deps) => {
   return 0;
 };
 var projectsCmd = async (_args, deps) => {
-  const projectsRoot = path39.join(deps.paths.globalRoot, "projects");
+  const projectsRoot = path4.join(deps.paths.globalRoot, "projects");
   try {
     const entries = await fsp5.readdir(projectsRoot);
     if (entries.length === 0) {
@@ -20129,7 +21141,7 @@ var projectsCmd = async (_args, deps) => {
     for (const hash of entries) {
       try {
         const meta = JSON.parse(
-          await fsp5.readFile(path39.join(projectsRoot, hash, "meta.json"), "utf8")
+          await fsp5.readFile(path4.join(projectsRoot, hash, "meta.json"), "utf8")
         );
         deps.renderer.write(
           `  ${color.dim(hash)}  ${color.dim(meta.lastSeen ?? "")}  ${meta.root ?? "?"}
@@ -20578,7 +21590,7 @@ function findSessionId(args) {
 var rewindCmd = async (args, deps) => {
   const flags = parseRewindFlags(args);
   const wpaths = resolveWstackPaths({ projectRoot: deps.projectRoot });
-  const sessionsDir = path39.join(wpaths.globalRoot, "sessions");
+  const sessionsDir = path4.join(wpaths.globalRoot, "sessions");
   const rewind = new DefaultSessionRewinder(sessionsDir, deps.projectRoot);
   let sessionId = findSessionId(args);
   if (!sessionId) {
@@ -20691,7 +21703,7 @@ ${result.errors.length} error(s):
     }
     return 0;
   } catch (err) {
-    deps.renderer.writeError(err instanceof Error ? err.message : String(err));
+    deps.renderer.writeError(toErrorMessage(err));
     return 1;
   }
 };
@@ -20723,7 +21735,7 @@ async function listFleetRuns(deps) {
   }
   const runs = [];
   for (const id of entries) {
-    const runDir = path39.join(deps.paths.projectSessions, id);
+    const runDir = path4.join(deps.paths.projectSessions, id);
     let stat7;
     try {
       stat7 = await fsp5.stat(runDir);
@@ -20736,17 +21748,17 @@ async function listFleetRuns(deps) {
     let subagentCount = 0;
     let subagentsDir;
     try {
-      await fsp5.access(path39.join(runDir, "fleet.json"));
+      await fsp5.access(path4.join(runDir, "fleet.json"));
       manifest = true;
     } catch {
     }
     try {
-      await fsp5.access(path39.join(runDir, "checkpoint.json"));
+      await fsp5.access(path4.join(runDir, "checkpoint.json"));
       checkpoint = true;
     } catch {
     }
     try {
-      subagentsDir = path39.join(runDir, "subagents");
+      subagentsDir = path4.join(runDir, "subagents");
       const files = await fsp5.readdir(subagentsDir);
       subagentCount = files.filter((f) => f.endsWith(".jsonl")).length;
     } catch {
@@ -20773,7 +21785,7 @@ async function listFleetRuns(deps) {
   return 0;
 }
 async function showFleetRun(runId, deps) {
-  const runDir = path39.join(deps.paths.projectSessions, runId);
+  const runDir = path4.join(deps.paths.projectSessions, runId);
   let stat7;
   try {
     stat7 = await fsp5.stat(runDir);
@@ -20790,7 +21802,7 @@ async function showFleetRun(runId, deps) {
   deps.renderer.write(color.bold(`
 Fleet Run: ${runId}
 `) + "\n");
-  const manifestPath = path39.join(runDir, "fleet.json");
+  const manifestPath = path4.join(runDir, "fleet.json");
   let manifestData = null;
   try {
     manifestData = await fsp5.readFile(manifestPath, "utf8");
@@ -20808,7 +21820,7 @@ Fleet Run: ${runId}
     deps.renderer.write(`  ${color.dim("\u25CB")} fleet.json \u2014 not found
 `);
   }
-  const checkpointPath = path39.join(runDir, "checkpoint.json");
+  const checkpointPath = path4.join(runDir, "checkpoint.json");
   let checkpointData = null;
   try {
     checkpointData = await fsp5.readFile(checkpointPath, "utf8");
@@ -20855,7 +21867,7 @@ Fleet Run: ${runId}
     } catch {
     }
   }
-  const subagentsDir = path39.join(runDir, "subagents");
+  const subagentsDir = path4.join(runDir, "subagents");
   let subagentFiles = [];
   try {
     subagentFiles = await fsp5.readdir(subagentsDir);
@@ -20867,7 +21879,7 @@ Fleet Run: ${runId}
   Subagent transcripts (${subagentFiles.length}):
 `);
     for (const f of subagentFiles.sort()) {
-      const filePath = path39.join(subagentsDir, f);
+      const filePath = path4.join(subagentsDir, f);
       let size;
       try {
         const s = await fsp5.stat(filePath);
@@ -20884,7 +21896,7 @@ Fleet Run: ${runId}
   ${color.dim("\u25CB")} No subagent transcripts
 `);
   }
-  const sharedDir = path39.join(runDir, "shared");
+  const sharedDir = path4.join(runDir, "shared");
   try {
     const files = await fsp5.readdir(sharedDir);
     deps.renderer.write(`
@@ -21125,8 +22137,8 @@ var helpCmd = async (_args, deps) => {
     '  wstack --eternal "<mission>" Launch eternal-autonomy loop against a goal \u2014 Ctrl+C to stop',
     "  wstack resume [<id>]         Resume a session",
     "  wstack sessions              List recent sessions",
-    "  wstack init                  Pick provider + model from models.dev",
-    "  wstack auth                  Interactive key manager (list/add/update/delete)",
+    "  wstack auth                  Interactive setup + key manager (add/edit/delete)",
+    "  wstack auth <provider>       Add API key for a provider",
     "  wstack auth list             Quick listing of saved providers and keys",
     "  wstack auth status <id>      Detailed view of one provider",
     "  wstack auth remove <id>      Delete a provider (asks for confirmation)",
@@ -21211,7 +22223,7 @@ function resolveBundledSkillsDir() {
   try {
     const req2 = createRequire(import.meta.url);
     const corePkg = req2.resolve("@wrongstack/core/package.json");
-    return path39.join(path39.dirname(corePkg), "skills");
+    return path4.join(path4.dirname(corePkg), "skills");
   } catch {
     return void 0;
   }
@@ -21230,7 +22242,7 @@ async function boot(argv) {
   try {
     bootResult = await bootConfig(flags);
   } catch (err) {
-    writeErr(`Config error: ${err instanceof Error ? err.message : String(err)}
+    writeErr(`Config error: ${toErrorMessage(err)}
 `);
     return 2;
   }
@@ -21283,7 +22295,7 @@ async function boot(argv) {
       await modelsRegistry.refresh();
       logger.info("models.dev catalog refreshed");
     } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
+      const msg = toErrorMessage(err);
       logger.warn(`models.dev refresh failed (${msg}); using cached catalog`);
     }
   }
@@ -21432,7 +22444,7 @@ async function boot(argv) {
     const created = await registerProjectAtBoot({ projectRoot, cwd, wpaths });
     if (created && isInteractiveTTY) {
       renderer.write(
-        color.dim(`  \u2713 Registered "${path39.basename(projectRoot)}" in projects.json.
+        color.dim(`  \u2713 Registered "${path4.basename(projectRoot)}" in projects.json.
 `)
       );
     }
@@ -21512,7 +22524,7 @@ async function boot(argv) {
     } catch {
     }
     printLaunchHints(renderer, flags, {
-      cursorFile: path39.join(wpaths.cacheDir, "hint-cursor")
+      cursorFile: path4.join(wpaths.cacheDir, "hint-cursor")
     });
   } else {
     const effectiveChoices = config.launch ? {
@@ -21550,7 +22562,7 @@ async function boot(argv) {
 }
 async function checkGitInCwd(opts) {
   const { cwd, renderer, reader } = opts;
-  const cwdGit = path39.join(cwd, ".git");
+  const cwdGit = path4.join(cwd, ".git");
   let hasCwdGit = false;
   try {
     await fsp5.access(cwdGit);
@@ -21584,16 +22596,16 @@ async function checkGitInCwd(opts) {
         hasCwdGit = true;
       } catch (err) {
         renderer.writeError(
-          `git init failed: ${err instanceof Error ? err.message : String(err)}
+          `git init failed: ${toErrorMessage(err)}
 `
         );
       }
     }
   }
-  const parentDir = path39.dirname(cwd);
+  const parentDir = path4.dirname(cwd);
   if (parentDir !== cwd) {
     try {
-      await fsp5.access(path39.join(parentDir, ".git"));
+      await fsp5.access(path4.join(parentDir, ".git"));
       renderer.write(
         `  ${color.dim("\u2139")} A ${color.bold(".git")} repo exists in the parent directory: ${color.dim(parentDir)}
 `
@@ -21605,7 +22617,7 @@ async function checkGitInCwd(opts) {
 async function registerProjectAtBoot(opts) {
   const { projectRoot, cwd, wpaths } = opts;
   const manifest = await loadManifest(wpaths.globalConfig);
-  const existed = manifest.projects.some((p) => path39.resolve(p.root) === path39.resolve(projectRoot));
+  const existed = manifest.projects.some((p) => path4.resolve(p.root) === path4.resolve(projectRoot));
   await touchProjectInManifest({
     projectRoot,
     globalConfigPath: wpaths.globalConfig,
@@ -21613,9 +22625,26 @@ async function registerProjectAtBoot(opts) {
   });
   return !existed;
 }
+function toolsForTier(tier, allTools) {
+  switch (tier) {
+    case "off":
+      return allTools;
+    case "minimal":
+    case "light":
+      return TIER1_TOOLS;
+    case "medium":
+      return [...TIER1_TOOLS, ...TIER2_TOOLS];
+    case "aggressive": {
+      const t2WithoutTask = TIER2_TOOLS.filter((t) => t.name !== "task");
+      const t3WithoutSetCwd = TIER3_TOOLS.filter((t) => t.name !== "setWorkingDir");
+      return [...TIER1_TOOLS, ...t2WithoutTask, ...t3WithoutSetCwd];
+    }
+  }
+}
 function registerBuiltinTools(deps) {
+  const tier = normalizeTokenSavingTier(deps.config.features.tokenSavingMode);
   const allTools = builtinToolsPack.tools ?? [];
-  const toolsToRegister = deps.config.features.tokenSavingMode ? TIER1_TOOLS : allTools;
+  const toolsToRegister = toolsForTier(tier, allTools);
   deps.toolRegistry.registerAllOrThrow([...toolsToRegister], builtinToolsPack.name);
   deps.toolRegistry.registerDefault(
     createContextManagerTool({ compactor: deps.compactor })
@@ -21806,7 +22835,7 @@ function resolveBundledSkillsDir2() {
   try {
     const req2 = createRequire(import.meta.url);
     const corePkg = req2.resolve("@wrongstack/core/package.json");
-    return path39.join(path39.dirname(corePkg), "skills");
+    return path4.join(path4.dirname(corePkg), "skills");
   } catch {
     return void 0;
   }
@@ -22294,7 +23323,7 @@ async function runRepl(opts) {
   clientMailbox.registerClient({
     clientId,
     sessionId: replProjectRoot,
-    name: `REPL [${path39.basename(replProjectRoot)}]`,
+    name: `REPL [${path4.basename(replProjectRoot)}]`,
     source: "repl",
     pid: process.pid
   }).then(() => {
@@ -22359,7 +23388,7 @@ async function runRepl(opts) {
             }
           } catch (err) {
             opts.renderer.writeError(
-              `[eternal] ${err instanceof Error ? err.message : String(err)}`
+              `[eternal] ${toErrorMessage(err)}`
             );
           }
           await new Promise((resolve11) => setTimeout(resolve11, 250));
@@ -22435,7 +23464,7 @@ async function runRepl(opts) {
             }
           } catch (err) {
             opts.renderer.writeError(
-              `[parallel] ${err instanceof Error ? err.message : String(err)}`
+              `[parallel] ${toErrorMessage(err)}`
             );
           }
           await new Promise((resolve11) => setTimeout(resolve11, 250));
@@ -22508,7 +23537,7 @@ ${lines.join("\n")}
           if (res?.message) opts.renderer.write(`${res.message}
 `);
         } catch (err) {
-          opts.renderer.writeError(err instanceof Error ? err.message : String(err));
+          opts.renderer.writeError(toErrorMessage(err));
         }
         continue;
       }
@@ -22597,7 +23626,7 @@ ${color.dim(taskList2)}
             }
           }
         } catch (err) {
-          opts.renderer.writeError(err instanceof Error ? err.message : String(err));
+          opts.renderer.writeError(toErrorMessage(err));
         }
         continue;
       }
@@ -22786,7 +23815,7 @@ ${color.dim(
               }
             } catch (err) {
               opts.renderer.writeError(
-                `[autonomy] ${err instanceof Error ? err.message : String(err)}`
+                `[autonomy] ${toErrorMessage(err)}`
               );
             } finally {
               activeCtrl = void 0;
@@ -22857,7 +23886,7 @@ ${color.dim(lines)}
           }
         }
       } catch (err) {
-        opts.renderer.writeError(err instanceof Error ? err.message : String(err));
+        opts.renderer.writeError(toErrorMessage(err));
       } finally {
         activeCtrl = void 0;
       }
@@ -22884,7 +23913,7 @@ async function pasteClipboardImage(builder, opts) {
 `));
   } catch (err) {
     opts.renderer.writeError(
-      `Clipboard image error: ${err instanceof Error ? err.message : String(err)}`
+      `Clipboard image error: ${toErrorMessage(err)}`
     );
   }
 }
@@ -22922,7 +23951,7 @@ async function renderGoalBanner(opts) {
           await opts.slashRegistry.dispatch("/autonomy eternal", opts.agent.ctx);
         } catch (err) {
           opts.renderer.writeError(
-            `Auto-resume failed: ${err instanceof Error ? err.message : String(err)}`
+            `Auto-resume failed: ${toErrorMessage(err)}`
           );
         }
       } else {
@@ -23111,6 +24140,7 @@ function printBanner(renderer, projectName) {
 }
 
 // src/execution.ts
+init_provider_config_utils();
 init_utils();
 async function execute(deps) {
   const {
@@ -23134,6 +24164,7 @@ async function execute(deps) {
     effectiveMaxContext,
     queueStore,
     context,
+    mailbox,
     stats,
     detachTodosCheckpoint,
     savedProviderCfg,
@@ -23223,8 +24254,8 @@ async function execute(deps) {
           timeoutMs: 3e5
         };
         const subagentId = await dir.spawn(cfg);
-        const { randomUUID: randomUUID6 } = await import('crypto');
-        const taskId = randomUUID6();
+        const { randomUUID: randomUUID7 } = await import('crypto');
+        const taskId = randomUUID7();
         await dir.assign({
           id: taskId,
           description: taskDesc,
@@ -23329,8 +24360,8 @@ async function execute(deps) {
         result = await agent.run(query, { signal: ctrl.signal });
       } finally {
         process.off("SIGINT", onSigint);
-        const { getProcessRegistry: getProcessRegistry2 } = await import('@wrongstack/tools');
-        getProcessRegistry2().killAll();
+        const { getProcessRegistry: getProcessRegistry3 } = await import('@wrongstack/tools');
+        getProcessRegistry3().killAll();
       }
       const after = tokenCounter.total();
       const costAfter = tokenCounter.estimateCost().total;
@@ -23389,7 +24420,7 @@ async function execute(deps) {
       const { runTui } = await import('@wrongstack/tui');
       renderer.setSilent(true);
       const banneredFamily = savedProviderCfg?.family ?? resolvedProvider?.family;
-      const banneredKey = savedProviderCfg?.apiKey ?? config.apiKey ?? (resolvedProvider?.envVars ?? savedProviderCfg?.envVars ?? []).map((v) => process.env[v]).find((v) => !!v);
+      const banneredKey = (savedProviderCfg ? resolveActiveApiKey(savedProviderCfg) : void 0) ?? config.apiKey ?? (resolvedProvider?.envVars ?? savedProviderCfg?.envVars ?? []).map((v) => process.env[v]).find((v) => !!v);
       const banneredKeyTail = banneredKey && banneredKey.length >= 3 ? banneredKey.slice(-3) : void 0;
       const autoPhaseHandlers = /* @__PURE__ */ new Map();
       const subscribeAutoPhase = (handler) => {
@@ -23437,6 +24468,80 @@ async function execute(deps) {
       };
       const PROJECT_SWITCH_EXIT_CODE = 42;
       let pendingProjectSwitch = null;
+      const coordinatorEvents = /* @__PURE__ */ new Set();
+      let autonomousCoordinator = null;
+      const onDirectorReady = (dir) => {
+        if (autonomousCoordinator) return;
+        const transcript = context.session.transcriptPath;
+        const sessionDir = transcript ? path4.dirname(transcript) : wpaths.projectDir;
+        const llmProvider = {
+          decide: async (prompt) => {
+            const sysPrompt = [
+              {
+                type: "text",
+                text: 'You are the autonomous brain of a multi-agent coordination system. Pick the best option for the decision described and reply with JSON: {"optionId":"<id>","rationale":"<short why>"}.'
+              }
+            ];
+            const userPrompt = {
+              type: "text",
+              text: `Decision: ${prompt.question}
+
+Context: ${prompt.context}
+
+Options:
+${prompt.options.map((o, i) => `  ${i + 1}. [${o.id}] ${o.label}${o.consequence ? ` \u2014 ${o.consequence}` : ""}`).join("\n")}
+
+Risk: ${prompt.risk}
+
+Reply with ONLY the JSON object.`
+            };
+            const resp = await context.provider.complete(
+              {
+                model: context.model,
+                system: sysPrompt,
+                messages: [
+                  {
+                    role: "user",
+                    content: [userPrompt]
+                  }
+                ],
+                maxTokens: 1024,
+                temperature: 0
+              },
+              { signal: context.signal }
+            );
+            const text = resp.content.filter((b) => b.type === "text").map((b) => b.text).join("\n").trim();
+            const cleaned = text.replace(/^```(?:json)?\s*/i, "").replace(/```$/, "").trim();
+            try {
+              const parsed = JSON.parse(cleaned);
+              const optId = parsed.optionId ?? prompt.options[0]?.id ?? "";
+              return { optionId: optId, rationale: parsed.rationale ?? "" };
+            } catch {
+              return { optionId: prompt.options[0]?.id ?? "", rationale: text };
+            }
+          }
+        };
+        autonomousCoordinator = new AutonomousCoordinator({
+          sessionDir,
+          fleet: dir.fleet,
+          mailbox,
+          selfAgentId: `leader@${context.session.id ?? "unknown"}`,
+          selfAgentName: "Leader",
+          llmProvider,
+          onCoordinatorEvent: (event) => {
+            for (const fn of coordinatorEvents) fn(event);
+          }
+        });
+        deps.onCoordinatorStop = () => autonomousCoordinator?.stop();
+      };
+      if (director) onDirectorReady(director);
+      const offDirectorSpawned = events.onPattern("subagent.spawned", () => {
+        const dir = director;
+        if (dir) {
+          offDirectorSpawned();
+          onDirectorReady(dir);
+        }
+      });
       try {
         code = await runTui({
           agent,
@@ -23520,13 +24625,15 @@ async function execute(deps) {
               featureMemory: cfg.features?.memory !== false,
               featureSkills: cfg.features?.skills !== false,
               featureModelsRegistry: cfg.features?.modelsRegistry !== false,
-              featureTokenSaving: cfg.features?.tokenSavingMode ?? false,
+              featureTokenSaving: normalizeTokenSavingTier(cfg.features?.tokenSavingMode),
+              allowOutsideProjectRoot: cfg.features?.allowOutsideProjectRoot ?? true,
               contextAutoCompact: cfg.context?.autoCompact !== false,
               contextStrategy: cfg.context?.strategy ?? "hybrid",
               logLevel: cfg.log?.level ?? "info",
               auditLevel: cfg.session?.auditLevel ?? "standard",
               indexOnStart: cfg.indexing?.onSessionStart !== false,
               maxIterations: cfg.tools?.maxIterations ?? 500,
+              restrictFsToRoot: cfg.tools?.restrictToProjectRoot ?? false,
               autoProceedMaxIterations: cfg.autonomy?.autoProceedMaxIterations ?? 50,
               debugStream: cfg.debugStream ?? false,
               configScope: cfg.configScope ?? "global",
@@ -23534,7 +24641,9 @@ async function execute(deps) {
               enhanceEnabled: cfg.autonomy?.enhance ?? true,
               enhanceLanguage: cfg.autonomy?.enhanceLanguage === "english" ? "english" : "original",
               mouseMode: autonomy?.mouseMode ?? false,
-              autonomyNextPrompt: cfg.autonomy?.autonomyNextPrompt ?? "auto {{suggestion}}"
+              autonomyNextPrompt: cfg.autonomy?.autonomyNextPrompt ?? "auto {{suggestion}}",
+              breakerEnabled: cfg.circuitBreaker?.enabled === true,
+              breakerAutoKillResetMs: cfg.circuitBreaker?.autoKillResetMs ?? 6e4
             };
           },
           async saveSettings(s) {
@@ -23559,9 +24668,11 @@ async function execute(deps) {
                   if (s.enhanceEnabled !== void 0) a["enhance"] = s.enhanceEnabled;
                   if (s.enhanceLanguage !== void 0) a["enhanceLanguage"] = s.enhanceLanguage;
                   if (s.autonomyNextPrompt !== void 0) a["autonomyNextPrompt"] = s.autonomyNextPrompt;
+                  if (s.autoProceedMaxIterations !== void 0)
+                    a["autoProceedMaxIterations"] = s.autoProceedMaxIterations;
                 }
               );
-              if (s.featureMcp !== void 0 || s.featurePlugins !== void 0 || s.featureMemory !== void 0 || s.featureSkills !== void 0 || s.featureModelsRegistry !== void 0 || s.contextAutoCompact !== void 0 || s.contextStrategy !== void 0 || s.logLevel !== void 0 || s.auditLevel !== void 0 || s.indexOnStart !== void 0 || s.maxIterations !== void 0 || s.nextPrediction !== void 0 || s.debugStream !== void 0 || s.configScope !== void 0 || s.enhanceDelayMs !== void 0) {
+              if (s.featureMcp !== void 0 || s.featurePlugins !== void 0 || s.featureMemory !== void 0 || s.featureSkills !== void 0 || s.featureModelsRegistry !== void 0 || s.featureTokenSaving !== void 0 || s.allowOutsideProjectRoot !== void 0 || s.contextAutoCompact !== void 0 || s.contextStrategy !== void 0 || s.logLevel !== void 0 || s.auditLevel !== void 0 || s.indexOnStart !== void 0 || s.maxIterations !== void 0 || s.restrictFsToRoot !== void 0 || s.nextPrediction !== void 0 || s.debugStream !== void 0 || s.configScope !== void 0 || s.enhanceDelayMs !== void 0) {
                 const configScope = s.configScope ?? configStore.get().configScope ?? "global";
                 const targetPath = configScope === "project" && wpaths.inProjectConfig ? wpaths.inProjectConfig : wpaths.globalConfig;
                 let raw;
@@ -23578,7 +24689,7 @@ async function execute(deps) {
                 if (s.nextPrediction !== void 0) {
                   decrypted.nextPrediction = s.nextPrediction;
                 }
-                if (s.featureMcp !== void 0 || s.featurePlugins !== void 0 || s.featureMemory !== void 0 || s.featureSkills !== void 0 || s.featureModelsRegistry !== void 0 || s.featureTokenSaving !== void 0) {
+                if (s.featureMcp !== void 0 || s.featurePlugins !== void 0 || s.featureMemory !== void 0 || s.featureSkills !== void 0 || s.featureModelsRegistry !== void 0 || s.featureTokenSaving !== void 0 || s.allowOutsideProjectRoot !== void 0) {
                   const feats = decrypted.features ?? {};
                   if (s.featureMcp !== void 0) feats.mcp = s.featureMcp;
                   if (s.featurePlugins !== void 0) feats.plugins = s.featurePlugins;
@@ -23588,6 +24699,8 @@ async function execute(deps) {
                     feats.modelsRegistry = s.featureModelsRegistry;
                   if (s.featureTokenSaving !== void 0)
                     feats.tokenSavingMode = s.featureTokenSaving;
+                  if (s.allowOutsideProjectRoot !== void 0)
+                    feats.allowOutsideProjectRoot = s.allowOutsideProjectRoot;
                   decrypted.features = feats;
                 }
                 if (s.contextAutoCompact !== void 0 || s.contextStrategy !== void 0) {
@@ -23611,11 +24724,18 @@ async function execute(deps) {
                   idx.onSessionStart = s.indexOnStart;
                   decrypted.indexing = idx;
                 }
-                if (s.maxIterations !== void 0) {
+                if (s.maxIterations !== void 0 || s.restrictFsToRoot !== void 0) {
                   const tools = decrypted.tools ?? {};
-                  tools.maxIterations = s.maxIterations;
+                  if (s.maxIterations !== void 0) tools.maxIterations = s.maxIterations;
+                  if (s.restrictFsToRoot !== void 0)
+                    tools.restrictToProjectRoot = s.restrictFsToRoot;
                   decrypted.tools = tools;
                 }
+                if (s.restrictFsToRoot !== void 0) {
+                  const features = decrypted.features ?? {};
+                  features.allowOutsideProjectRoot = !s.restrictFsToRoot;
+                  decrypted.features = features;
+                }
                 if (s.debugStream !== void 0) {
                   decrypted.debugStream = s.debugStream;
                   const { setDebugStreamEnabled } = await import('@wrongstack/providers');
@@ -23637,7 +24757,7 @@ async function execute(deps) {
                 const toWrite = targetPath === wpaths.globalConfig ? decrypted : filterSafeForProject(decrypted);
                 const encrypted = encryptConfigSecrets(toWrite, noOpVault);
                 if (targetPath !== wpaths.globalConfig) {
-                  await fsp5.mkdir(path39.dirname(targetPath), { recursive: true });
+                  await fsp5.mkdir(path4.dirname(targetPath), { recursive: true });
                 }
                 await atomicWrite(targetPath, JSON.stringify(encrypted, null, 2), { mode: 384 });
                 configStore.update({
@@ -23647,7 +24767,7 @@ async function execute(deps) {
                   ...s.logLevel !== void 0 ? { log: decrypted.log } : {},
                   ...s.auditLevel !== void 0 ? { session: decrypted.session } : {},
                   ...s.indexOnStart !== void 0 ? { indexing: decrypted.indexing } : {},
-                  ...s.maxIterations !== void 0 ? { tools: decrypted.tools } : {},
+                  ...s.maxIterations !== void 0 || s.restrictFsToRoot !== void 0 ? { tools: decrypted.tools } : {},
                   ...s.debugStream !== void 0 ? { debugStream: s.debugStream } : {},
                   ...s.configScope !== void 0 ? { configScope: s.configScope } : {},
                   ...s.enhanceDelayMs !== void 0 ? {
@@ -23673,6 +24793,7 @@ async function execute(deps) {
               if (s.streamFleet !== void 0) {
                 fleetStreamController?.setEnabled(s.streamFleet);
               }
+              deps.applyLiveSettings?.(s);
               return null;
             } catch (err) {
               const message = err instanceof Error ? err.message : String(err);
@@ -23697,6 +24818,29 @@ async function execute(deps) {
           confirmExit: config.autonomy?.["confirmExit"] ?? true,
           director,
           fleetRoster,
+          // ── AutonomousCoordinator: project-level multi-session coordination ─────────
+          // The coordinator tracks goals, tasks, knowledge, and consensus across all
+          // active sessions in the same project. It runs independently of the leader
+          // agent and is accessible to any session in the project via the GlobalMailbox.
+          getAutonomousCoordinator: () => autonomousCoordinator,
+          subscribeCoordinatorEvents: (fn) => {
+            coordinatorEvents.add(fn);
+            return () => {
+              coordinatorEvents.delete(fn);
+            };
+          },
+          onCoordinatorStart: (goal) => {
+            if (!autonomousCoordinator) {
+              console.error("[coordinator] not ready \u2014 no director yet (spawn a subagent first)");
+              return;
+            }
+            autonomousCoordinator.run({ goal: goal ?? "" }).catch((err) => {
+              console.error("[coordinator] run() failed:", err);
+            });
+          },
+          onCoordinatorStop: () => {
+            autonomousCoordinator?.stop();
+          },
           // /clear: signal the TUI to wipe entries and reset fleet/leader stats
           // AND bump the context chip version — so the display reflects a
           // completely fresh session after the backend has been cleared.
@@ -23714,7 +24858,7 @@ async function execute(deps) {
           agentsMonitorController,
           getLiveSessions: async () => {
             const { SessionRegistry } = await import('@wrongstack/core');
-            const globalRoot = path39.dirname(wpaths.globalConfig);
+            const globalRoot = path4.dirname(wpaths.globalConfig);
             const registry = new SessionRegistry(globalRoot);
             const sessions = await registry.list();
             return sessions.filter((s) => s.status !== "stale").map((s) => ({
@@ -23843,7 +24987,7 @@ async function execute(deps) {
             if (!sessionStore) return null;
             try {
               const { SessionRegistry } = await import('@wrongstack/core');
-              const registry = new SessionRegistry(path39.dirname(wpaths.globalConfig));
+              const registry = new SessionRegistry(path4.dirname(wpaths.globalConfig));
               const live = (await registry.list()).find(
                 (s) => s.sessionId === sessionId && s.status !== "stale" && s.pid !== process.pid
               );
@@ -23981,7 +25125,7 @@ async function execute(deps) {
               if (slug === "new-session") {
                 pendingProjectSwitch = {
                   root: projectRoot,
-                  name: path39.basename(projectRoot) || projectRoot
+                  name: path4.basename(projectRoot) || projectRoot
                 };
               }
               return;
@@ -24035,7 +25179,7 @@ ${parts.join("\n")}
           },
           // `wrongstack quick` sets flags.quick — open the F3 agents monitor by default.
           initialAgentsMonitorOpen: !!flags.quick,
-          tokenSavingMode: config.features.tokenSavingMode,
+          tokenSavingMode: normalizeTokenSavingTier(config.features.tokenSavingMode) !== "off",
           toolCount: agent.tools.list().length
         });
         if (code === PROJECT_SWITCH_EXIT_CODE && pendingProjectSwitch) {
@@ -24047,8 +25191,8 @@ ${parts.join("\n")}
           try {
             const req2 = createRequire8(import.meta.url);
             const pkgPath = req2.resolve("@wrongstack/cli/package.json");
-            const pkgDir = path39.dirname(pkgPath);
-            cliPath = path39.join(pkgDir, "dist", "index.js");
+            const pkgDir = path4.dirname(pkgPath);
+            cliPath = path4.join(pkgDir, "dist", "index.js");
             await fsp5.access(cliPath);
           } catch {
             cliPath = process.argv[1] ?? "";
@@ -24080,6 +25224,7 @@ ${parts.join("\n")}
         }
       } finally {
         renderer.setSilent(false);
+        offDirectorSpawned();
       }
     } else if (flags.webui) {
       agent.disableInteractiveConfirmation();
@@ -24108,6 +25253,23 @@ ${parts.join("\n")}
         modeStore,
         modeId,
         needsSetup,
+        // Print the "open this" banner only once the server is actually
+        // listening, using the RESOLVED ports. The requested port
+        // (flags.port) auto-advances past busy ports inside runWebUI, so a
+        // banner printed up-front with flags.port lies whenever 3456/3457 are
+        // taken (a second instance, leftover sockets). Bind is 127.0.0.1-only,
+        // so the host must be the literal IPv4 loopback — `localhost` resolves
+        // to `::1` first on Windows and never reaches the server.
+        onListening: ({ httpPort: boundHttpPort }) => {
+          renderer.writeInfo(
+            color.green(
+              `  \u2726 WebUI running \u2192 ${color.bold(`http://127.0.0.1:${boundHttpPort}`)}`
+            )
+          );
+          renderer.writeInfo(
+            color.dim("  Press Ctrl+C in this terminal to stop the WebUI server.\n")
+          );
+        },
         // Make autonomy.switch from the browser flip the CLI's real
         // autonomy mode — context.meta alone never reaches the run loop.
         onAutonomySwitch: (mode) => {
@@ -24116,12 +25278,6 @@ ${parts.join("\n")}
           }
         }
       });
-      renderer.writeInfo(
-        color.green(
-          `  \u2726 WebUI running \u2192 ${color.bold(`http://localhost:${Number.parseInt(String(flags.port ?? "3457"), 10)}`)}`
-        )
-      );
-      renderer.writeInfo(color.dim("  Press Ctrl+C in this terminal to stop the WebUI server.\n"));
       const webuiExit = new Promise((resolve11) => {
         const onSigint = () => {
           renderer.setSilent(false);
@@ -24156,7 +25312,7 @@ ${parts.join("\n")}
         supportsVision,
         attachments,
         effectiveMaxContext,
-        projectName: path39.basename(projectRoot) || void 0,
+        projectName: path4.basename(projectRoot) || void 0,
         getAutonomy,
         onAutonomy,
         getNextPredict,
@@ -24194,6 +25350,7 @@ ${parts.join("\n")}
     }
   } finally {
     fleetStatusLine?.stop();
+    deps.onCoordinatorStop?.();
     try {
       stats.render(renderer);
     } catch (_err) {
@@ -24378,7 +25535,7 @@ var MultiAgentHost = class _MultiAgentHost {
       doneCondition: { type: "all_tasks_done" },
       maxConcurrent: this.opts.maxConcurrent ?? 4
     };
-    const defaultScratchpad = this.opts.sharedScratchpadPath || (this.opts.sessionsRoot && this.opts.directorRunId ? path39.join(this.opts.sessionsRoot, this.opts.directorRunId, "shared") : void 0);
+    const defaultScratchpad = this.opts.sharedScratchpadPath || (this.opts.sessionsRoot && this.opts.directorRunId ? path4.join(this.opts.sessionsRoot, this.opts.directorRunId, "shared") : void 0);
     this.director = new Director({
       config: coordinatorConfig,
       manifestPath: this.opts.manifestPath,
@@ -24577,6 +25734,8 @@ var MultiAgentHost = class _MultiAgentHost {
         tokenCounter: this.deps.tokenCounter,
         cwd: subCwd,
         projectRoot: this.deps.projectRoot,
+        // Subagents inherit the leader's filesystem-access scope.
+        allowOutsideProjectRoot: config.features?.allowOutsideProjectRoot ?? !(config.tools?.restrictToProjectRoot ?? false),
         model: effModel,
         tools: this.filterTools(tools),
         // Distinct mailbox identity: without these, every subagent fell back
@@ -24935,16 +26094,16 @@ var MultiAgentHost = class _MultiAgentHost {
     if (this.director) return this.director;
     this.opts.directorMode = true;
     if (this.opts.fleetRoot && !this.opts.manifestPath) {
-      this.opts.manifestPath = path39.join(this.opts.fleetRoot, "fleet.json");
+      this.opts.manifestPath = path4.join(this.opts.fleetRoot, "fleet.json");
     }
     if (this.opts.fleetRoot && !this.opts.sharedScratchpadPath) {
-      this.opts.sharedScratchpadPath = path39.join(this.opts.fleetRoot, "shared");
+      this.opts.sharedScratchpadPath = path4.join(this.opts.fleetRoot, "shared");
     }
     if (this.opts.fleetRoot && !this.opts.sessionsRoot) {
-      this.opts.sessionsRoot = path39.join(this.opts.fleetRoot, "subagents");
+      this.opts.sessionsRoot = path4.join(this.opts.fleetRoot, "subagents");
     }
     if (this.opts.fleetRoot && !this.opts.stateCheckpointPath) {
-      this.opts.stateCheckpointPath = path39.join(this.opts.fleetRoot, "director-state.json");
+      this.opts.stateCheckpointPath = path4.join(this.opts.fleetRoot, "director-state.json");
     }
     await this.ensureDirector();
     return this.director ?? null;
@@ -25073,11 +26232,11 @@ var SessionStats = class {
       if (tool.name === "bash") this.bashCommands++;
       else if (tool.name === "fetch") this.fetches++;
       if (!tool.ok) return;
-      const path40 = typeof input?.path === "string" ? input.path : void 0;
-      if (tool.name === "read" && path40) this.readPaths.add(path40);
-      else if (tool.name === "edit" && path40) this.editedPaths.add(path40);
-      else if (tool.name === "write" && path40) {
-        this.writtenPaths.add(path40);
+      const path39 = typeof input?.path === "string" ? input.path : void 0;
+      if (tool.name === "read" && path39) this.readPaths.add(path39);
+      else if (tool.name === "edit" && path39) this.editedPaths.add(path39);
+      else if (tool.name === "write" && path39) {
+        this.writtenPaths.add(path39);
         const content = typeof input?.content === "string" ? input.content : "";
         this.bytesWritten += Buffer.byteLength(content, "utf8");
       }
@@ -25389,7 +26548,7 @@ async function setupCodebaseIndexing(deps) {
           if (tool?.mutating && FILE_EDIT_TOOLS.has(tool.name)) {
             const fp = payload.toolUse.input?.file_path;
             if (typeof fp === "string" && fp.length > 0) {
-              const abs = path39.resolve(payload.ctx.cwd, fp);
+              const abs = path4.resolve(payload.ctx.cwd, fp);
               if (isIndexableFile(abs)) {
                 enqueueReindex({ projectRoot, files: [abs], debounceMs, onError });
               }
@@ -25408,7 +26567,7 @@ async function setupCodebaseIndexing(deps) {
         if (!filename) return;
         const rel = filename.toString();
         if (isIgnored(rel)) return;
-        const abs = path39.resolve(projectRoot, rel);
+        const abs = path4.resolve(projectRoot, rel);
         if (!isIndexableFile(abs)) return;
         enqueueReindex({ projectRoot, files: [abs], debounceMs, onError });
       });
@@ -25462,7 +26621,7 @@ function setupMetrics(params) {
   const dumpMetrics = () => {
     if (!metricsSink) return;
     try {
-      const out = path39.join(wpaths.projectSessions, "metrics.json");
+      const out = path4.join(wpaths.projectSessions, "metrics.json");
       const snap = metricsSink.snapshot();
       writeFileSync(out, JSON.stringify(snap, null, 2));
     } catch {
@@ -25486,7 +26645,7 @@ function setupMetrics(params) {
       });
     } catch (err) {
       logger.warn(
-        `metrics endpoint failed to start: ${err instanceof Error ? err.message : String(err)}`
+        `metrics endpoint failed to start: ${toErrorMessage(err)}`
       );
     }
   }
@@ -25542,9 +26701,11 @@ async function setupCompaction(params) {
   context.meta["contextWindowMode"] = initialPolicy.id;
   context.meta["contextWindowPolicy"] = initialPolicy;
   let autoCompactor;
-  if (config.context.autoCompact !== false && effectiveMaxContext > 0) {
+  let resolvedBridge;
+  if (effectiveMaxContext > 0) {
     const auditLevel = resolveAuditLevel(fullConfig ?? config);
     const sessionBridge = providedBridge ?? createSessionEventBridge(sessionWriter, auditLevel);
+    resolvedBridge = sessionBridge;
     autoCompactor = new AutoCompactionMiddleware(
       compactor,
       effectiveMaxContext,
@@ -25568,9 +26729,10 @@ async function setupCompaction(params) {
         sessionBridge
       }
     );
+    autoCompactor.setEnabled(config.context.autoCompact !== false);
     pipelines.contextWindow.use({ name: "AutoCompaction", handler: autoCompactor.handler() });
   }
-  return { effectiveMaxContext, autoCompactor };
+  return { effectiveMaxContext, autoCompactor, sessionBridge: resolvedBridge };
 }
 function createAgent(params) {
   const secretScrubber = params.container.resolve(TOKENS.SecretScrubber);
@@ -25676,7 +26838,7 @@ async function setupSession(params) {
         `Resumed session ${resumed.data.metadata.id} \u2014 ${restoredMessages.length} messages, ${restoredToolCalls.length} tool executions, ${resumed.data.usage.input + resumed.data.usage.output} tokens used previously.`
       );
     } catch (err) {
-      renderer.writeError(`Resume failed: ${err instanceof Error ? err.message : String(err)}`);
+      renderer.writeError(`Resume failed: ${toErrorMessage(err)}`);
       throw Object.assign(new Error("RESUME_FAILED"), { exitCode: 2 });
     }
   } else {
@@ -25699,7 +26861,7 @@ async function setupSession(params) {
     );
   });
   const attachments = new DefaultAttachmentStore({
-    spoolDir: path39.join(wpaths.projectSessions, session?.id, "attachments")
+    spoolDir: path4.join(wpaths.projectSessions, session?.id, "attachments")
   });
   const ctxSignal = new AbortController().signal;
   const traceId = randomBytes(16).toString("hex");
@@ -25711,6 +26873,11 @@ async function setupSession(params) {
     tokenCounter,
     cwd,
     projectRoot,
+    // Filesystem-access scope: derived from features.allowOutsideProjectRoot,
+    // falling back to the old tools.restrictToProjectRoot config key (inverted:
+    // restrict=false in old config → allow=true in new). Togglable live via
+    // `/settings` ("Allow outside project").
+    allowOutsideProjectRoot: config.features?.allowOutsideProjectRoot ?? !(config.tools?.restrictToProjectRoot ?? false),
     model: config.model,
     agentId: "leader",
     agentName: "Leader Agent",
@@ -25722,11 +26889,11 @@ async function setupSession(params) {
   };
   if (restoredMessages.length > 0) context.state.replaceMessages(restoredMessages);
   const queueStore = new QueueStore({
-    dir: path39.join(wpaths.projectSessions, session?.id),
+    dir: path4.join(wpaths.projectSessions, session?.id),
     ...eventsBus ? { events: eventsBus } : {},
     ...traceId ? { traceId } : {}
   });
-  const todosCheckpointPath = path39.join(wpaths.projectSessions, `${session?.id}.todos.json`);
+  const todosCheckpointPath = path4.join(wpaths.projectSessions, `${session?.id}.todos.json`);
   if (resumeId) {
     try {
       const restoredTodos = await loadTodosCheckpoint(
@@ -25750,15 +26917,15 @@ async function setupSession(params) {
     eventsBus,
     traceId
   );
-  const planPath = path39.join(wpaths.projectSessions, `${session?.id}.plan.json`);
+  const planPath = path4.join(wpaths.projectSessions, `${session?.id}.plan.json`);
   context.state.setMeta("plan.path", planPath);
-  const taskPath = path39.join(wpaths.projectSessions, `${session?.id}.tasks.json`);
+  const taskPath = path4.join(wpaths.projectSessions, `${session?.id}.tasks.json`);
   context.state.setMeta("task.path", taskPath);
   let dirState;
   if (resumeId) {
     try {
-      const fleetRoot = path39.join(wpaths.projectSessions, session?.id);
-      dirState = await loadDirectorState(path39.join(fleetRoot, "director-state.json"));
+      const fleetRoot = path4.join(wpaths.projectSessions, session?.id);
+      dirState = await loadDirectorState(path4.join(fleetRoot, "director-state.json"));
       if (dirState) {
         const tCounts = {};
         for (const t of dirState.tasks) tCounts[t.status] = (tCounts[t.status] ?? 0) + 1;
@@ -26005,7 +27172,7 @@ async function main(argv) {
       projectGoal: wpaths.projectGoal,
       projectSessions: wpaths.projectSessions
     },
-    pathJoiner: { join: (a, b) => path39.join(a, b) },
+    pathJoiner: { join: (a, b) => path4.join(a, b) },
     systemPromptBuilderToken: TOKENS.SystemPromptBuilder
   });
   const toolRegistry = new ToolRegistry();
@@ -26034,7 +27201,10 @@ async function main(argv) {
   const evOn = (event, handler) => {
     events.on(event, handler);
     teardownHandlers.push(
-      () => events.off(event, handler)
+      () => (
+        // biome-ignore lint/suspicious/noExplicitAny: dynamic event dispatcher signature
+        events.off(event, handler)
+      )
     );
   };
   evOn("provider.response", (e) => {
@@ -26097,6 +27267,49 @@ async function main(argv) {
     writeErr(color.red(`  \u2717 ${p.description}
 `));
   });
+  const cliClientId = `cli@${randomBytes(4).toString("hex")}`;
+  let cliToolCalls = 0;
+  let cliInputTokens = 0;
+  let cliOutputTokens = 0;
+  let cliCacheTokens = 0;
+  let cliCostUsd = 0;
+  const emitClientStatus = () => {
+    events.emit("client.status", {
+      clientType: "cli",
+      clientId: cliClientId,
+      projectHash: wpaths.projectSlug,
+      agentCount: 1,
+      model: config.model,
+      mode: activeMode?.id ?? "off",
+      toolCalls: cliToolCalls,
+      inputTokens: cliInputTokens,
+      outputTokens: cliOutputTokens,
+      cacheTokens: cliCacheTokens,
+      costUsd: cliCostUsd,
+      timestamp: Date.now(),
+      projectSlug: wpaths.projectSlug
+    });
+  };
+  evOn("tool.executed", () => {
+    cliToolCalls++;
+    emitClientStatus();
+  });
+  evOn("provider.response", (e) => {
+    if (e.usage) {
+      cliInputTokens = e.usage.input ?? cliInputTokens;
+      cliOutputTokens = e.usage.output ?? cliOutputTokens;
+      cliCacheTokens = (e.usage.cacheRead ?? 0) + (e.usage.cacheWrite ?? 0);
+    }
+    emitClientStatus();
+  });
+  evOn("token.accounted", (e) => {
+    cliCostUsd = e.cost.total;
+    emitClientStatus();
+  });
+  evOn("iteration.completed", () => {
+    emitClientStatus();
+  });
+  emitClientStatus();
   const promptBuilder = container.resolve(TOKENS.SystemPromptBuilder);
   let onlineAgents = [];
   try {
@@ -26140,10 +27353,10 @@ async function main(argv) {
   memoryStore.withTraceId(sessResult.traceId);
   let tracker;
   try {
-    const { getSessionRegistry, AgentStatusTracker } = await import('@wrongstack/core');
+    const { getSessionRegistry, AgentStatusTracker, FleetNotifier } = await import('@wrongstack/core');
     const registry = getSessionRegistry(wpaths.globalRoot);
-    const projectSlug2 = path39.basename(wpaths.projectDir);
-    const projectName = path39.basename(projectRoot);
+    const projectSlug2 = path4.basename(wpaths.projectDir);
+    const projectName = path4.basename(projectRoot);
     let gitBranch;
     try {
       const { execSync } = await import('child_process');
@@ -26163,13 +27376,22 @@ async function main(argv) {
       projectName,
       workingDir: context.workingDir,
       gitBranch,
+      // The TUI and the REPL both boot through cli-main; `tuiOwnsScreen`
+      // distinguishes the surface so the Fleet HQ map can label this session.
+      clientType: tuiOwnsScreen ? "tui" : "cli",
       pid: process.pid,
       startedAt: (/* @__PURE__ */ new Date()).toISOString()
     });
-    tracker = new AgentStatusTracker({ events, registry });
+    const fleetNotifier = new FleetNotifier({
+      baseDir: wpaths.globalRoot,
+      projectRoot,
+      selfPid: process.pid
+    });
+    tracker = new AgentStatusTracker({ events, registry, onUpdate: () => fleetNotifier.notify() });
     tracker.start();
     const cleanup = async () => {
       try {
+        fleetNotifier.dispose();
         await registry.markClosing();
         tracker?.stop();
       } catch {
@@ -26242,7 +27464,7 @@ async function main(argv) {
     if (e.ok && (e.name === "write" || e.name === "edit" || e.name === "replace" || e.name === "patch")) {
       const filePath = e.input?.path;
       if (filePath) {
-        const projectDir = path39.join(wpaths.globalRoot, "projects", wpaths.projectSlug);
+        const projectDir = path4.join(wpaths.globalRoot, "projects", wpaths.projectSlug);
         void recordFileAction(
           { storageDir: projectDir, projectRoot },
           {
@@ -26372,7 +27594,7 @@ async function main(argv) {
     toolRegistry,
     events,
     log: logger,
-    lazyMode: config.features.tokenSavingMode
+    lazyMode: normalizeTokenSavingTier(config.features.tokenSavingMode) !== "off"
   });
   if (config.features.mcp) {
     for (const cfg of Object.values(config.mcpServers ?? {})) {
@@ -26408,7 +27630,7 @@ async function main(argv) {
   let depWatcherDispose;
   if (dwCfg?.["enabled"] === true) {
     try {
-      const projectDir = path39.join(wpaths.globalRoot, "projects", wpaths.projectSlug);
+      const projectDir = path4.join(wpaths.globalRoot, "projects", wpaths.projectSlug);
       const dwMailbox = new GlobalMailbox(projectDir, events);
       depWatcherDispose = attachDepWatcherBridge({
         events,
@@ -26507,12 +27729,12 @@ async function main(argv) {
       }
     }
   };
-  const fleetRoot = directorMode ? path39.join(wpaths.projectSessions, session.id) : void 0;
-  const manifestPath = directorMode ? typeof process.env["WRONGSTACK_FLEET_MANIFEST"] === "string" ? process.env["WRONGSTACK_FLEET_MANIFEST"] : path39.join(expectDefined(fleetRoot), "fleet.json") : void 0;
-  const sharedScratchpadPath = directorMode ? path39.join(expectDefined(fleetRoot), "shared") : void 0;
-  const subagentSessionsRoot = directorMode ? path39.join(expectDefined(fleetRoot), "subagents") : void 0;
-  const stateCheckpointPath = directorMode ? path39.join(expectDefined(fleetRoot), "director-state.json") : void 0;
-  const fleetRootForPromotion = path39.join(wpaths.projectSessions, session.id);
+  const fleetRoot = directorMode ? path4.join(wpaths.projectSessions, session.id) : void 0;
+  const manifestPath = directorMode ? typeof process.env["WRONGSTACK_FLEET_MANIFEST"] === "string" ? process.env["WRONGSTACK_FLEET_MANIFEST"] : path4.join(expectDefined(fleetRoot), "fleet.json") : void 0;
+  const sharedScratchpadPath = directorMode ? path4.join(expectDefined(fleetRoot), "shared") : void 0;
+  const subagentSessionsRoot = directorMode ? path4.join(expectDefined(fleetRoot), "subagents") : void 0;
+  const stateCheckpointPath = directorMode ? path4.join(expectDefined(fleetRoot), "director-state.json") : void 0;
+  const fleetRootForPromotion = path4.join(wpaths.projectSessions, session.id);
   const brainSettings = {
     maxAutoRisk: "medium"
   };
@@ -26655,7 +27877,7 @@ async function main(argv) {
   let techStackConsumerDispose;
   if (dwCfg?.["enabled"] === true) {
     try {
-      const projectDir = path39.join(wpaths.globalRoot, "projects", wpaths.projectSlug);
+      const projectDir = path4.join(wpaths.globalRoot, "projects", wpaths.projectSlug);
       const tsMailbox = new GlobalMailbox(projectDir, events);
       const fileAuthorOpts = {
         storageDir: projectDir,
@@ -26688,7 +27910,7 @@ async function main(argv) {
   let pkgOutdatedDispose;
   if (dwCfg?.["enabled"] === true) {
     try {
-      const projectDir = path39.join(wpaths.globalRoot, "projects", wpaths.projectSlug);
+      const projectDir = path4.join(wpaths.globalRoot, "projects", wpaths.projectSlug);
       const pkgMailbox = new GlobalMailbox(projectDir, events);
       const pkgTrackerOpts = {
         storageDir: projectDir,
@@ -27062,7 +28284,7 @@ ${color.dim("\u2500".repeat(40))}` : "";
       return director.spawn(cfg);
     },
     onFleetLog: async (subagentId, mode) => {
-      const subagentsRoot = path39.join(fleetRootForPromotion, "subagents");
+      const subagentsRoot = path4.join(fleetRootForPromotion, "subagents");
       let runDirs;
       try {
         runDirs = await fsp5.readdir(subagentsRoot);
@@ -27071,7 +28293,7 @@ ${color.dim("\u2500".repeat(40))}` : "";
       }
       const found = [];
       for (const runId of runDirs) {
-        const runDir = path39.join(subagentsRoot, runId);
+        const runDir = path4.join(subagentsRoot, runId);
         let files;
         try {
           files = await fsp5.readdir(runDir);
@@ -27080,7 +28302,7 @@ ${color.dim("\u2500".repeat(40))}` : "";
         }
         for (const f of files) {
           if (!f.endsWith(".jsonl")) continue;
-          const full = path39.join(runDir, f);
+          const full = path4.join(runDir, f);
           try {
             const stat7 = await fsp5.stat(full);
             found.push({
@@ -27181,7 +28403,7 @@ ${color.dim("\u2500".repeat(40))}` : "";
       }
       const dir = await multiAgentHost.ensureDirector();
       if (!dir) return "Director is not available.";
-      const dirStatePath = path39.join(fleetRootForPromotion, "director-state.json");
+      const dirStatePath = path4.join(fleetRootForPromotion, "director-state.json");
       const prior = await loadDirectorState(dirStatePath);
       if (!prior) {
         return "No prior director-state.json found \u2014 nothing to retry.";
@@ -27250,9 +28472,9 @@ ${color.dim("\u2500".repeat(40))}` : "";
       for (const tool of director2.tools(FLEET_ROSTER)) {
         toolRegistry.register(tool);
       }
-      const mp = path39.join(fleetRootForPromotion, "fleet.json");
-      const sp = path39.join(fleetRootForPromotion, "shared");
-      const ss = path39.join(fleetRootForPromotion, "subagents");
+      const mp = path4.join(fleetRootForPromotion, "fleet.json");
+      const sp = path4.join(fleetRootForPromotion, "shared");
+      const ss = path4.join(fleetRootForPromotion, "subagents");
       const lines = [
         `${color.green("\u2713")} Promoted to director mode.`,
         `  Roster: ${Object.keys(FLEET_ROSTER).join(", ")}`,
@@ -27553,6 +28775,10 @@ Restart WrongStack to load or unload plugin code in this session.`;
     tokenCounter,
     config,
     configStore,
+    // Project-scoped mailbox — the AutonomousCoordinator in execution.ts
+    // subscribes to it so goals/tasks/knowledge are shared with other
+    // terminals working on the same project.
+    mailbox: brainMailbox,
     renderer,
     reader,
     session,
@@ -27592,6 +28818,41 @@ Restart WrongStack to load or unload plugin code in this session.`;
       return autonomyMode;
     },
     getNextPredict: () => nextPredictEnabled,
+    applyLiveSettings: (s) => {
+      try {
+        if (s.yolo !== void 0) {
+          container.resolve(TOKENS.PermissionPolicy).setYolo?.(s.yolo);
+          config = patchConfig(config, { yolo: s.yolo });
+        }
+        if (s.nextPrediction !== void 0) {
+          nextPredictEnabled = s.nextPrediction;
+          config = patchConfig(config, { nextPrediction: s.nextPrediction });
+        }
+        if (s.enhanceEnabled !== void 0) {
+          enhanceController?.setEnabled(s.enhanceEnabled);
+        }
+        if (s.maxIterations !== void 0) {
+          agent.maxIterations = s.maxIterations;
+        }
+        if (s.logLevel !== void 0) {
+          container.resolve(TOKENS.Logger).level = s.logLevel;
+        }
+        if (s.auditLevel !== void 0) {
+          sessionBridge.setAuditLevel(s.auditLevel);
+        }
+        if (s.contextAutoCompact !== void 0) {
+          autoCompactor?.setEnabled(s.contextAutoCompact);
+        }
+        if (s.restrictFsToRoot !== void 0) {
+          context.allowOutsideProjectRoot = !s.restrictFsToRoot;
+          config = patchConfig(config, {
+            features: { ...config.features, allowOutsideProjectRoot: !s.restrictFsToRoot },
+            tools: { ...config.tools, restrictToProjectRoot: s.restrictFsToRoot }
+          });
+        }
+      } catch {
+      }
+    },
     onSuggestionsParsed: (suggestions) => {
       currentSuggestions = suggestions ?? [];
       setSuggestions(suggestions ?? []);
@@ -27674,7 +28935,9 @@ Reply YES to auto-proceed, NO to wait for human input.`
     getBrainLog: () => brainLog,
     // Clean up SessionStats event listeners and all EventBus handlers when the REPL exits.
     onDestroy: () => {
-      teardownHandlers.forEach((fn) => fn());
+      teardownHandlers.forEach((fn) => {
+        fn();
+      });
       stats.destroy(events);
     }
   });