@wrongstack/cli 0.264.0 → 0.265.1

package/dist/index.js

@@ -1,25 +1,26 @@
 #!/usr/bin/env node
 import * as fsp5 from 'fs/promises';
-import * as path39 from 'path';
+import * as path4 from 'path';
 import { join } from 'path';
-import { color, writeErr, loadPlugins, renderProgress, SpecStore, TaskGraphStore, analyzeCriticalPath, getTemplate, listTemplates, templateToMarkdown, SpecParser, renderSpecAnalysis, AISpecBuilder, expectDefined, DefaultTaskStore, TaskTracker, renderTaskGraph, withFileLock, DefaultSecretScrubber, resolveProjectDir, GlobalMailbox, TOKENS, ToolRegistry, resolveSessionLoggingConfig, createSessionEventBridge, HookRegistry, HookRunner, SlashCommandRegistry, attachDepWatcherBridge, SessionMemoryConsolidator, BrainDecisionQueue, ObservableBrainArbiter, HumanEscalatingBrainArbiter, createTieredBrainArbiter, DefaultBrainArbiter, BrainMonitor, mailboxSessionTag, createDelegateTool, FLEET_ROSTER, createMcpControlTool, startTechStackConsumer, startPackageOutdatedWatcher, recordFileAction, createAutonomyBrain, DefaultPluginAPI, SpecVersioning, wstackGlobalRoot, DEFAULT_CONTEXT_WINDOW_MODE_ID, recentTextTurns, enhanceUserPrompt, projectSlug, DefaultSystemPromptBuilder, mutateTasks, loadTasks, resolveContextWindowPolicy, repairToolUseAdjacency, mutatePlan, setPlanItemStatus, getPlanTemplate, loadPlan, emptyPlan, addPlanItem, savePlan, DefaultLogger, DefaultModelsRegistry, isStdinTTY, DefaultPathResolver, EventBus, runProviderWithRetry, ReplayLogStore, ReplayProviderRunner, mergeCustomModelDefs, makeAutonomyPromptContributor, createContextManagerTool, makeMailboxTool, makeMailSendTool, makeMailInboxTool, InMemoryMetricsSink, wireMetricsToEvents, DefaultHealthRegistry, startMetricsServer, DEFAULT_SESSION_PRUNE_DAYS, RecoveryLock, DefaultAttachmentStore, Context, QueueStore, loadTodosCheckpoint, attachTodosCheckpoint, loadDirectorState, createDefaultPipelines, resolveAuditLevel, AutoCompactionMiddleware, estimateRequestTokensCalibrated, Agent, FleetManager, makeDirectorSessionFactory, Director, makeFleetEmitTool, makeFleetStatusTool, resolveModelMatrix, DEFAULT_SUBAGENT_BASELINE, AutoApprovePermissionPolicy, PhaseStore, AutoPhasePlanner, PhaseGraphBuilder, WorktreeManager, PhaseOrchestrator, makeLLMClassifier, writeOut, ParallelEternalEngine, EternalAutonomyEngine, allServers as allServers$1, CHIMERA_REVIEW_PROMPT, AutonomousCoordinator, noOpVault, decryptConfigSecrets, encryptConfigSecrets, atomicWrite, setQueuedMessagesSnapshot, DefaultSessionRewinder, bootConfig as bootConfig$1, setOutputLineGuard, setRawMode, DefaultSessionReader, resolveWstackPaths, ToolAuditLog, DefaultSessionStore as DefaultSessionStore$1, ProviderRegistry, StreamHangError, ProviderError, makeAgentSubagentRunner, NULL_FLEET_BUS, buildChildEnv, formatContextWindowModeList, getContextWindowMode, AGENT_CATALOG, dispatchAgent, formatTodosList, formatTaskList, formatTaskProgress, formatPlan, SessionRecovery, loadGoal, goalFilePath, summarizeUsage, saveGoal, formatGoal, emptyGoal, buildGoalPreamble, pendingBtwCount, setBtwNote, MATRIX_PHASE_KEYS, matrixKeyKind, phaseForRole, onResize, ERROR_CODES, FsError, ConfigError, InputBuilder, truncate, estimateMessageTokens, AGENTS_BY_PHASE, validateAgainstSchema, resolveMailboxIdentity, isSecretField as isSecretField$1 } from '@wrongstack/core';
-import { DefaultSecretVault, encryptConfigSecrets as encryptConfigSecrets$1, decryptConfigSecrets as decryptConfigSecrets$1, isSecretField } from '@wrongstack/core/security';
+import { color, writeErr, loadPlugins, renderProgress, SpecStore, TaskGraphStore, analyzeCriticalPath, getTemplate, listTemplates, templateToMarkdown, SpecParser, renderSpecAnalysis, AISpecBuilder, expectDefined, DefaultTaskStore, TaskTracker, renderTaskGraph, withFileLock, DefaultSecretScrubber, projectHash, wstackGlobalRoot, resolveProjectDir, GlobalMailbox, TOKENS, ToolRegistry, resolveSessionLoggingConfig, createSessionEventBridge, HookRegistry, HookRunner, normalizeTokenSavingTier, SlashCommandRegistry, attachDepWatcherBridge, SessionMemoryConsolidator, BrainDecisionQueue, ObservableBrainArbiter, HumanEscalatingBrainArbiter, createTieredBrainArbiter, DefaultBrainArbiter, BrainMonitor, mailboxSessionTag, createDelegateTool, FLEET_ROSTER, createMcpControlTool, startTechStackConsumer, startPackageOutdatedWatcher, recordFileAction, createAutonomyBrain, DefaultPluginAPI, SpecVersioning, DEFAULT_CONTEXT_WINDOW_MODE_ID, recentTextTurns, enhanceUserPrompt, projectSlug, DefaultSystemPromptBuilder, mutateTasks, loadTasks, resolveContextWindowPolicy, repairToolUseAdjacency, mutatePlan, setPlanItemStatus, getPlanTemplate, loadPlan, emptyPlan, addPlanItem, savePlan, DefaultLogger, DefaultModelsRegistry, isStdinTTY, DefaultPathResolver, EventBus, runProviderWithRetry, ReplayLogStore, ReplayProviderRunner, mergeCustomModelDefs, makeAutonomyPromptContributor, createContextManagerTool, makeMailboxTool, makeMailSendTool, makeMailInboxTool, InMemoryMetricsSink, wireMetricsToEvents, DefaultHealthRegistry, startMetricsServer, DEFAULT_SESSION_PRUNE_DAYS, RecoveryLock, DefaultAttachmentStore, Context, QueueStore, loadTodosCheckpoint, attachTodosCheckpoint, loadDirectorState, createDefaultPipelines, resolveAuditLevel, AutoCompactionMiddleware, estimateRequestTokensCalibrated, Agent, FleetManager, makeDirectorSessionFactory, Director, makeFleetEmitTool, makeFleetStatusTool, resolveModelMatrix, DEFAULT_SUBAGENT_BASELINE, AutoApprovePermissionPolicy, PhaseStore, AutoPhasePlanner, PhaseGraphBuilder, WorktreeManager, PhaseOrchestrator, makeLLMClassifier, writeOut, ParallelEternalEngine, EternalAutonomyEngine, allServers as allServers$1, CHIMERA_REVIEW_PROMPT, AutonomousCoordinator, noOpVault, decryptConfigSecrets, encryptConfigSecrets, atomicWrite, setQueuedMessagesSnapshot, DefaultSessionRewinder, bootConfig as bootConfig$1, setOutputLineGuard, setRawMode, DefaultSessionReader, resolveWstackPaths, ToolAuditLog, DefaultSessionStore as DefaultSessionStore$1, ProviderRegistry, StreamHangError, ProviderError, makeAgentSubagentRunner, NULL_FLEET_BUS, buildChildEnv, formatContextWindowModeList, getContextWindowMode, AGENT_CATALOG, dispatchAgent, formatTodosList, formatTaskList, formatTaskProgress, formatPlan, SessionRecovery, loadGoal, goalFilePath, summarizeUsage, saveGoal, formatGoal, emptyGoal, buildGoalPreamble, pendingBtwCount, setBtwNote, MATRIX_PHASE_KEYS, matrixKeyKind, phaseForRole, onResize, ERROR_CODES, FsError, ConfigError, InputBuilder, truncate, estimateMessageTokens, AGENTS_BY_PHASE, validateAgainstSchema, resolveMailboxIdentity, isSecretField as isSecretField$1 } from '@wrongstack/core';
+import { decryptConfigSecrets as decryptConfigSecrets$1, encryptConfigSecrets as encryptConfigSecrets$1, DefaultSecretVault, isSecretField } from '@wrongstack/core/security';
 import * as crypto3 from 'crypto';
 import { createHash, randomBytes, randomUUID } from 'crypto';
 import { createRequire } from 'module';
 import * as os from 'os';
 import os__default from 'os';
-import { findFreePort, AutoPhaseWebSocketHandler, handleShellOpen, handleMemoryForget, handleMemoryRemember, handleMemoryList, handleFilesWrite, handleFilesRead, handleFilesTree, handleFilesList, createEternalSubscription, createHttpServer, registerInstance, openBrowser, unregisterInstance, estimateTokens as estimateTokens$1, stringifyContent, messagePreview, messageTokens, createCustomModeStore } from '@wrongstack/webui/server';
+import { findFreePort, AutoPhaseWebSocketHandler, generateAuthToken, verifyClient, handleGitInfo, handleShellOpen, handleSkillsExport, handleSkillsEdit, handleSkillsCreate, handleSkillsUpdate, handleSkillsUninstall, handleSkillsInstall, handleSkillsContent, handleMemoryForget, handleMemoryRemember, handleMemoryList, handleFilesWrite, handleFilesRead, handleFilesTree, handleFilesList, createEternalSubscription, createHttpServer, registerInstance, openBrowser, unregisterInstance, estimateTokens as estimateTokens$1, stringifyContent, messagePreview, messageTokens, createCustomModeStore } from '@wrongstack/webui/server';
 import { makeProviderFromConfig, capabilitiesFor, buildProviderFactoriesFromRegistry } from '@wrongstack/providers';
 import { toErrorMessage } from '@wrongstack/core/utils';
-import { getProcessRegistry, builtinToolsPack, TIER1_TOOLS, rememberTool, forgetTool, searchMemoryTool, relatedMemoryTool, runStartupIndex, isIndexableFile, enqueueReindex, cancelPendingReindexes, shutdownCodebaseIndexHost, resetIndexCircuitBreaker } from '@wrongstack/tools';
+import { getProcessRegistry, builtinToolsPack, rememberTool, forgetTool, searchMemoryTool, relatedMemoryTool, runStartupIndex, isIndexableFile, enqueueReindex, cancelPendingReindexes, shutdownCodebaseIndexHost, TIER2_TOOLS, TIER3_TOOLS, TIER1_TOOLS, resetIndexCircuitBreaker } from '@wrongstack/tools';
 import { DefaultSessionStore } from '@wrongstack/core/storage';
 import { probeLocalLlm } from '@wrongstack/runtime/probe';
+import * as fs2 from 'fs';
+import { watch, writeFileSync, existsSync, readFileSync } from 'fs';
+import { SkillInstaller } from '@wrongstack/core/skills';
 import { WebSocketServer, WebSocket } from 'ws';
 import { spawn, execFile, execFileSync } from 'child_process';
 import { MCPRegistry, MCPServer, serveHttp, serveStdio } from '@wrongstack/mcp';
-import * as fs2 from 'fs';
-import { writeFileSync, existsSync, readFileSync } from 'fs';
 import { fileURLToPath } from 'url';
 import { createDefaultContainer, routeImagesForModel, readClipboardImage } from '@wrongstack/runtime';
 import * as readline from 'readline';
@@ -68,15 +69,57 @@ async function pathExists(file) {
     return false;
   }
 }
+async function hasRootFileWithSuffix(root, suffixes) {
+  let names;
+  try {
+    names = await fsp5.readdir(root);
+  } catch {
+    return false;
+  }
+  const lower = suffixes.map((s) => s.toLowerCase());
+  return names.some((n) => lower.some((s) => n.toLowerCase().endsWith(s)));
+}
+function parseCiRunCommands(yaml) {
+  const commands = [];
+  const lines = yaml.split(/\r?\n/);
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i] ?? "";
+    const m = /^(\s*)(?:-\s+)?run:\s*(.*)$/.exec(line);
+    if (!m) continue;
+    const indent = (m[1] ?? "").length;
+    const inline = (m[2] ?? "").trim();
+    if (inline && inline !== "|" && inline !== ">" && !/^[|>][+-]?$/.test(inline)) {
+      commands.push(inline);
+      continue;
+    }
+    for (let j = i + 1; j < lines.length; j++) {
+      const body = lines[j] ?? "";
+      if (body.trim() === "") continue;
+      const bodyIndent = body.length - body.trimStart().length;
+      if (bodyIndent <= indent) break;
+      commands.push(body.trim());
+      i = j;
+    }
+  }
+  return commands.filter((c) => c !== "" && !/^(#|cd\s|echo\s|export\s|set\s|if\s)/.test(c));
+}
+function applyCiCommands(facts, commands) {
+  const find = (re) => commands.find((c) => re.test(c));
+  facts.test ??= find(/\b(test|pytest|vitest|jest|go test|cargo test|mix test|rspec)\b/i);
+  facts.lint ??= find(/\b(lint|eslint|biome|clippy|ruff|flake8|golangci-lint|fmt --check)\b/i);
+  facts.build ??= find(
+    /\b(build|compile|tsc|cargo build|go build|mvn .*package|gradle .*build)\b/i
+  );
+}
 async function detectPackageManager2(root, declared) {
   if (declared) {
     const name = declared.split("@")[0];
     if (name) return name;
   }
-  if (await pathExists(path39.join(root, "pnpm-lock.yaml"))) return "pnpm";
-  if (await pathExists(path39.join(root, "bun.lockb"))) return "bun";
-  if (await pathExists(path39.join(root, "bun.lock"))) return "bun";
-  if (await pathExists(path39.join(root, "yarn.lock"))) return "yarn";
+  if (await pathExists(path4.join(root, "pnpm-lock.yaml"))) return "pnpm";
+  if (await pathExists(path4.join(root, "bun.lockb"))) return "bun";
+  if (await pathExists(path4.join(root, "bun.lock"))) return "bun";
+  if (await pathExists(path4.join(root, "yarn.lock"))) return "yarn";
   return "npm";
 }
 function hasUsableScript(scripts, name) {
@@ -94,10 +137,50 @@ function parseMakeTargets(makefile) {
   }
   return targets;
 }
+async function scanSourceTree(root) {
+  const counts = /* @__PURE__ */ new Map();
+  const entryPoints = [];
+  const topDirs = [];
+  let fileCount = 0;
+  const MAX_FILES = 5e3;
+  const MAX_DEPTH = 6;
+  async function walk(dir, depth, rel) {
+    if (fileCount >= MAX_FILES || depth > MAX_DEPTH) return;
+    let entries;
+    try {
+      entries = await fsp5.readdir(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const e of entries) {
+      if (fileCount >= MAX_FILES) return;
+      const name = e.name;
+      if (e.isDirectory()) {
+        if (SCAN_IGNORE_DIRS.has(name) || name.startsWith(".")) continue;
+        if (depth === 0) topDirs.push(name);
+        await walk(path4.join(dir, name), depth + 1, rel ? `${rel}/${name}` : name);
+      } else if (e.isFile()) {
+        fileCount++;
+        const ext = path4.extname(name).toLowerCase();
+        const lang = EXT_LANG[ext];
+        if (!lang) continue;
+        counts.set(lang, (counts.get(lang) ?? 0) + 1);
+        const base = name.slice(0, name.length - ext.length).toLowerCase();
+        if (entryPoints.length < 10 && ENTRY_BASENAMES.has(base)) {
+          entryPoints.push(rel ? `${rel}/${name}` : name);
+        }
+      }
+    }
+  }
+  await walk(root, 0, "");
+  if (counts.size === 0) return void 0;
+  const languages = [...counts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 5).map(([lang, n]) => `${lang} (${n})`);
+  return { languages, entryPoints, topDirs: topDirs.sort() };
+}
 async function detectProjectFacts(root) {
   const facts = { hints: [] };
   try {
-    const pkg = JSON.parse(await fsp5.readFile(path39.join(root, "package.json"), "utf8"));
+    const pkg = JSON.parse(await fsp5.readFile(path4.join(root, "package.json"), "utf8"));
     const scripts = pkg.scripts ?? {};
     const pm = await detectPackageManager2(root, pkg.packageManager);
     if (hasUsableScript(scripts, "build")) facts.build = `${pm} run build`;
@@ -111,14 +194,14 @@ async function detectProjectFacts(root) {
   } catch {
   }
   try {
-    if (!await pathExists(path39.join(root, "pyproject.toml"))) throw new Error("not python");
+    if (!await pathExists(path4.join(root, "pyproject.toml"))) throw new Error("not python");
     facts.test ??= "pytest";
     facts.lint ??= "ruff check .";
     facts.hints.push("pyproject.toml");
   } catch {
   }
   try {
-    if (!await pathExists(path39.join(root, "go.mod"))) throw new Error("not go");
+    if (!await pathExists(path4.join(root, "go.mod"))) throw new Error("not go");
     facts.build ??= "go build ./...";
     facts.test ??= "go test ./...";
     facts.run ??= "go run .";
@@ -126,7 +209,7 @@ async function detectProjectFacts(root) {
   } catch {
   }
   try {
-    if (!await pathExists(path39.join(root, "Cargo.toml"))) throw new Error("not rust");
+    if (!await pathExists(path4.join(root, "Cargo.toml"))) throw new Error("not rust");
     facts.build ??= "cargo build";
     facts.test ??= "cargo test";
     facts.lint ??= "cargo clippy";
@@ -135,7 +218,7 @@ async function detectProjectFacts(root) {
   } catch {
   }
   try {
-    const makefile = await fsp5.readFile(path39.join(root, "Makefile"), "utf8");
+    const makefile = await fsp5.readFile(path4.join(root, "Makefile"), "utf8");
     const targets = parseMakeTargets(makefile);
     facts.build ??= targets.has("build") ? "make build" : "make";
     if (targets.has("test")) facts.test ??= "make test";
@@ -145,6 +228,118 @@ async function detectProjectFacts(root) {
     facts.hints.push("Makefile");
   } catch {
   }
+  try {
+    const composer = JSON.parse(await fsp5.readFile(path4.join(root, "composer.json"), "utf8"));
+    const scripts = composer.scripts ?? {};
+    if ("test" in scripts) facts.test ??= "composer test";
+    if ("lint" in scripts) facts.lint ??= "composer lint";
+    facts.hints.push("composer.json");
+  } catch {
+  }
+  try {
+    if (!await pathExists(path4.join(root, "pom.xml"))) throw new Error("not maven");
+    facts.build ??= "mvn package";
+    facts.test ??= "mvn test";
+    facts.hints.push("pom.xml");
+  } catch {
+  }
+  try {
+    const hasGradle = await pathExists(path4.join(root, "build.gradle")) || await pathExists(path4.join(root, "build.gradle.kts"));
+    if (!hasGradle) throw new Error("not gradle");
+    const g = await pathExists(path4.join(root, "gradlew")) ? "./gradlew" : "gradle";
+    facts.build ??= `${g} build`;
+    facts.test ??= `${g} test`;
+    facts.hints.push("Gradle");
+  } catch {
+  }
+  try {
+    const hasDotnet = await pathExists(path4.join(root, "global.json")) || await hasRootFileWithSuffix(root, [".csproj", ".fsproj", ".sln"]);
+    if (!hasDotnet) throw new Error("not dotnet");
+    facts.build ??= "dotnet build";
+    facts.test ??= "dotnet test";
+    facts.run ??= "dotnet run";
+    facts.hints.push(".NET project");
+  } catch {
+  }
+  try {
+    if (!await pathExists(path4.join(root, "mix.exs"))) throw new Error("not elixir");
+    facts.build ??= "mix compile";
+    facts.test ??= "mix test";
+    facts.lint ??= "mix format --check-formatted";
+    facts.run ??= "mix run";
+    facts.hints.push("mix.exs");
+  } catch {
+  }
+  try {
+    if (!await pathExists(path4.join(root, "pubspec.yaml"))) throw new Error("not dart");
+    facts.test ??= "dart test";
+    facts.lint ??= "dart analyze";
+    facts.hints.push("pubspec.yaml");
+  } catch {
+  }
+  try {
+    const hasDeno = await pathExists(path4.join(root, "deno.json")) || await pathExists(path4.join(root, "deno.jsonc"));
+    if (!hasDeno) throw new Error("not deno");
+    facts.test ??= "deno test";
+    facts.lint ??= "deno lint";
+    facts.hints.push("deno.json");
+  } catch {
+  }
+  try {
+    if (!await pathExists(path4.join(root, "Package.swift"))) throw new Error("not swift");
+    facts.build ??= "swift build";
+    facts.test ??= "swift test";
+    facts.run ??= "swift run";
+    facts.hints.push("Package.swift");
+  } catch {
+  }
+  try {
+    if (!await pathExists(path4.join(root, "Gemfile"))) throw new Error("not ruby");
+    if (await pathExists(path4.join(root, "Rakefile"))) facts.test ??= "bundle exec rake test";
+    facts.hints.push("Gemfile");
+  } catch {
+  }
+  try {
+    if (!await pathExists(path4.join(root, "CMakeLists.txt"))) throw new Error("not cmake");
+    facts.build ??= "cmake -B build && cmake --build build";
+    facts.test ??= "ctest --test-dir build";
+    facts.hints.push("CMakeLists.txt");
+  } catch {
+  }
+  try {
+    const hasPip = await pathExists(path4.join(root, "requirements.txt")) || await pathExists(path4.join(root, "setup.py")) || await pathExists(path4.join(root, "setup.cfg"));
+    if (!hasPip) throw new Error("not pip");
+    facts.test ??= "pytest";
+    facts.hints.push("requirements.txt");
+  } catch {
+  }
+  if (!facts.build || !facts.test || !facts.lint) {
+    try {
+      const wfDir = path4.join(root, ".github", "workflows");
+      const wfNames = (await fsp5.readdir(wfDir)).filter((n) => /\.ya?ml$/i.test(n));
+      const commands = [];
+      for (const n of wfNames) {
+        commands.push(...parseCiRunCommands(await fsp5.readFile(path4.join(wfDir, n), "utf8")));
+      }
+      if (commands.length > 0) {
+        const before = { build: facts.build, test: facts.test, lint: facts.lint };
+        applyCiCommands(facts, commands);
+        if (facts.build !== before.build || facts.test !== before.test || facts.lint !== before.lint) {
+          facts.hints.push(".github/workflows");
+        }
+      }
+    } catch {
+    }
+  }
+  if (!facts.build && !facts.test && !facts.run && !facts.lint) {
+    const scan = await scanSourceTree(root);
+    if (scan) {
+      facts.languages = scan.languages;
+      if (scan.entryPoints.length > 0) facts.entryPoints = scan.entryPoints;
+      if (scan.topDirs.length > 0) facts.topDirs = scan.topDirs;
+      facts.hints.push(`source scan: ${scan.languages.join(", ")}`);
+    }
+  }
   return facts;
 }
 function renderAgentsTemplate(f) {
@@ -152,6 +347,16 @@ function renderAgentsTemplate(f) {
   const hints = f.hints.length > 0 ? `
 
 > Auto-detected: ${f.hints.join(", ")}` : "";
+  const runtime = f.languages?.length ? `_CLI, server, browser, worker, library, package?_ \u2014 detected: ${f.languages.join(", ")}` : "_CLI, server, browser, worker, library, package?_";
+  const keyFileRows = [];
+  for (const ep of f.entryPoints ?? [])
+    keyFileRows.push(`| \`${ep}\` | _Likely entry point (detected)_ |`);
+  for (const dir of f.topDirs ?? [])
+    keyFileRows.push(`| \`${dir}/\` | _Top-level directory (detected)_ |`);
+  const keyFiles = keyFileRows.length > 0 ? keyFileRows.join("\n") : `| _src/_ | _Main source entry point(s)_ |
+| _tests/_ | _Test root or convention_ |
+| _docs/_ | _Architecture, runbooks, design notes_ |
+| _scripts/_ | _Automation scripts (CI, release, install, etc.)_ |`;
   return `# AGENTS.md
 
 > **DO NOT DELETE THIS FILE.** It is loaded into WrongStack's system prompt as
@@ -163,7 +368,7 @@ function renderAgentsTemplate(f) {
 
 - **Purpose:** _What does this project do and why does it exist?_
 - **Primary users:** _Who uses it: developers, operators, customers, internal systems?_
-- **Runtime / deployment:** _CLI, server, browser, worker, library, package?_${hints}
+- **Runtime / deployment:** ${runtime}${hints}
 
 ## How to work safely
 
@@ -185,10 +390,7 @@ function renderAgentsTemplate(f) {
 
 | File / directory | Role |
 |---|---|
-| _src/_ | _Main source entry point(s)_ |
-| _tests/_ | _Test root or convention_ |
-| _docs/_ | _Architecture, runbooks, design notes_ |
-| _scripts/_ | _Automation scripts (CI, release, install, etc.)_ |
+${keyFiles}
 
 ## Architecture notes
 
@@ -247,8 +449,79 @@ function countToolResults(messages) {
 function estimateTokens(messages) {
   return estimateMessageTokens(messages);
 }
+var EXT_LANG, SCAN_IGNORE_DIRS, ENTRY_BASENAMES;
 var init_helpers = __esm({
   "src/slash-commands/helpers.ts"() {
+    EXT_LANG = {
+      ".ts": "TypeScript",
+      ".tsx": "TypeScript",
+      ".mts": "TypeScript",
+      ".cts": "TypeScript",
+      ".js": "JavaScript",
+      ".jsx": "JavaScript",
+      ".mjs": "JavaScript",
+      ".cjs": "JavaScript",
+      ".py": "Python",
+      ".rb": "Ruby",
+      ".go": "Go",
+      ".rs": "Rust",
+      ".java": "Java",
+      ".kt": "Kotlin",
+      ".kts": "Kotlin",
+      ".c": "C",
+      ".h": "C",
+      ".cpp": "C++",
+      ".cc": "C++",
+      ".cxx": "C++",
+      ".hpp": "C++",
+      ".cs": "C#",
+      ".php": "PHP",
+      ".swift": "Swift",
+      ".scala": "Scala",
+      ".clj": "Clojure",
+      ".ex": "Elixir",
+      ".exs": "Elixir",
+      ".erl": "Erlang",
+      ".hs": "Haskell",
+      ".ml": "OCaml",
+      ".dart": "Dart",
+      ".lua": "Lua",
+      ".jl": "Julia",
+      ".sh": "Shell",
+      ".bash": "Shell",
+      ".ps1": "PowerShell",
+      ".pl": "Perl",
+      ".zig": "Zig",
+      ".nim": "Nim",
+      ".sql": "SQL",
+      ".vue": "Vue",
+      ".svelte": "Svelte"
+    };
+    SCAN_IGNORE_DIRS = /* @__PURE__ */ new Set([
+      ".git",
+      "node_modules",
+      "dist",
+      "build",
+      "out",
+      "target",
+      "vendor",
+      ".venv",
+      "venv",
+      "env",
+      "__pycache__",
+      ".next",
+      ".nuxt",
+      ".cache",
+      "coverage",
+      ".wrongstack",
+      ".idea",
+      ".vscode",
+      "obj",
+      ".gradle",
+      ".dart_tool",
+      "Pods"
+    ]);
+    ENTRY_BASENAMES = /* @__PURE__ */ new Set(["main", "index", "app", "cli", "server", "__main__"]);
   }
 });
 function normalizeKeys(cfg) {
@@ -269,11 +542,18 @@ function writeKeysBack(cfg, keys) {
   }
   cfg.apiKeys = keys;
   const active = keys.find((k) => k.label === cfg.activeKey) ?? expectDefined(keys[0]);
-  cfg.apiKey = active.apiKey;
+  delete cfg.apiKey;
   if (!cfg.activeKey || !keys.some((k) => k.label === cfg.activeKey)) {
     cfg.activeKey = active.label;
   }
 }
+function resolveActiveApiKey(cfg) {
+  if (Array.isArray(cfg.apiKeys) && cfg.apiKeys.length > 0) {
+    const active = cfg.activeKey ? cfg.apiKeys.find((k) => k.label === cfg.activeKey) : void 0;
+    return (active ?? cfg.apiKeys[0])?.apiKey;
+  }
+  return cfg.apiKey && cfg.apiKey.length > 0 ? cfg.apiKey : void 0;
+}
 function activeLabel(cfg, keys) {
   if (cfg.activeKey && keys.some((k) => k.label === cfg.activeKey)) return cfg.activeKey;
   return keys[0]?.label;
@@ -678,7 +958,7 @@ async function findSpec(store, idOrTitle) {
 async function gatherProjectContext2(projectRoot) {
   const parts = [];
   try {
-    const pkgPath = path39.join(projectRoot, "package.json");
+    const pkgPath = path4.join(projectRoot, "package.json");
     const pkgRaw = await fsp5.readFile(pkgPath, "utf8");
     const pkg = JSON.parse(pkgRaw);
     parts.push(`Project: ${String(pkg.name ?? "unknown")}`);
@@ -696,13 +976,13 @@ async function gatherProjectContext2(projectRoot) {
   } catch {
   }
   try {
-    const tsconfigPath = path39.join(projectRoot, "tsconfig.json");
+    const tsconfigPath = path4.join(projectRoot, "tsconfig.json");
     await fsp5.access(tsconfigPath);
     parts.push("Language: TypeScript");
   } catch {
   }
   try {
-    const srcDir = path39.join(projectRoot, "src");
+    const srcDir = path4.join(projectRoot, "src");
     const entries = await fsp5.readdir(srcDir, { withFileTypes: true });
     const dirs = entries.filter((e) => e.isDirectory()).map((e) => e.name);
     if (dirs.length > 0) parts.push(`Source structure: src/${dirs.join(", src/")}`);
@@ -2127,12 +2407,12 @@ __export(project_utils_exports, {
   touchProjectInManifest: () => touchProjectInManifest
 });
 function projectsJsonPath(globalConfigPath) {
-  const base = globalConfigPath ? path39.dirname(globalConfigPath) : wstackGlobalRoot();
-  return path39.join(base, "projects.json");
+  const base = globalConfigPath ? path4.dirname(globalConfigPath) : wstackGlobalRoot();
+  return path4.join(base, "projects.json");
 }
 function projectsDataDir(globalConfigPath) {
-  const base = globalConfigPath ? path39.dirname(globalConfigPath) : wstackGlobalRoot();
-  return path39.join(base, "projects");
+  const base = globalConfigPath ? path4.dirname(globalConfigPath) : wstackGlobalRoot();
+  return path4.join(base, "projects");
 }
 async function loadManifest(globalConfigPath) {
   const file = projectsJsonPath(globalConfigPath);
@@ -2146,12 +2426,12 @@ async function loadManifest(globalConfigPath) {
 }
 async function saveManifest(manifest, globalConfigPath) {
   const file = projectsJsonPath(globalConfigPath);
-  await fsp5.mkdir(path39.dirname(file), { recursive: true });
+  await fsp5.mkdir(path4.dirname(file), { recursive: true });
   await fsp5.writeFile(file, JSON.stringify(manifest, null, 2), "utf8");
 }
 function generateSlug(root) {
-  const base = path39.basename(root).toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40) || "project";
-  const hash = createHash("sha256").update(path39.resolve(root)).digest("hex").slice(0, 6);
+  const base = path4.basename(root).toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40) || "project";
+  const hash = createHash("sha256").update(path4.resolve(root)).digest("hex").slice(0, 6);
   return `${base}-${hash}`;
 }
 function findProject(manifest, query) {
@@ -2166,29 +2446,29 @@ function findProject(manifest, query) {
   return found;
 }
 async function ensureProjectDataDir(slug, globalConfigPath) {
-  const dir = path39.join(projectsDataDir(globalConfigPath), slug);
+  const dir = path4.join(projectsDataDir(globalConfigPath), slug);
   await fsp5.mkdir(dir, { recursive: true });
   return dir;
 }
 async function touchProjectInManifest(opts) {
-  const root = path39.resolve(opts.projectRoot);
+  const root = path4.resolve(opts.projectRoot);
   const file = projectsJsonPath(opts.globalConfigPath);
   let entry;
   await withFileLock(file, async () => {
     const manifest = await loadManifest(opts.globalConfigPath);
     const now = (/* @__PURE__ */ new Date()).toISOString();
-    entry = manifest.projects.find((p) => path39.resolve(p.root) === root);
+    entry = manifest.projects.find((p) => path4.resolve(p.root) === root);
     if (entry) {
       entry.lastSeen = now;
-      if (opts.workingDir) entry.lastWorkingDir = path39.resolve(opts.workingDir);
+      if (opts.workingDir) entry.lastWorkingDir = path4.resolve(opts.workingDir);
     } else {
       entry = {
-        name: opts.name ?? path39.basename(root),
+        name: opts.name ?? path4.basename(root),
         root,
         slug: generateSlug(root),
         createdAt: now,
         lastSeen: now,
-        lastWorkingDir: opts.workingDir ? path39.resolve(opts.workingDir) : void 0
+        lastWorkingDir: opts.workingDir ? path4.resolve(opts.workingDir) : void 0
       };
       manifest.projects.push(entry);
     }
@@ -2634,7 +2914,7 @@ __export(update_check_exports, {
   getUpdateNotification: () => getUpdateNotification
 });
 function cachePath(homeFn = defaultHomeDir2) {
-  return path39.join(homeFn(), ".wrongstack", "update-cache.json");
+  return path4.join(homeFn(), ".wrongstack", "update-cache.json");
 }
 function currentVersion() {
   const req2 = createRequire(import.meta.url);
@@ -2671,7 +2951,7 @@ async function readCache(homeFn = defaultHomeDir2) {
 }
 async function writeCache(entry, homeFn = defaultHomeDir2) {
   try {
-    const dir = path39.dirname(cachePath(homeFn));
+    const dir = path4.dirname(cachePath(homeFn));
     await fsp5.mkdir(dir, { recursive: true });
     await fsp5.writeFile(cachePath(homeFn), JSON.stringify(entry, null, 2), "utf8");
   } catch {
@@ -2757,7 +3037,7 @@ function registerWebuiInstance(p, deps = {}) {
       wsPort: p.wsPort,
       host: p.host,
       projectRoot: p.projectRoot,
-      projectName: path39.basename(p.projectRoot) || p.projectRoot,
+      projectName: path4.basename(p.projectRoot) || p.projectRoot,
       startedAt: p.startedAt,
       url: `http://${p.host}:${p.httpPort}`
     },
@@ -2768,7 +3048,7 @@ function registerWebuiInstance(p, deps = {}) {
 function announceWebuiReady(p) {
   const log = p.log ?? ((m) => console.log(m));
   const launch = p.openBrowserFn ?? openBrowser;
-  const openUrl = `http://${p.host}:${p.httpPort}`;
+  const openUrl = p.wsToken ? `http://${p.host}:${p.httpPort}?token=${encodeURIComponent(p.wsToken)}` : `http://${p.host}:${p.httpPort}`;
   p.server.on("listening", () => {
     log(
       `
@@ -2821,7 +3101,7 @@ var init_lifecycle = __esm({
   }
 });
 function getVault(globalConfigPath) {
-  const keyFile = path39.join(path39.dirname(globalConfigPath ?? ""), ".key");
+  const keyFile = path4.join(path4.dirname(globalConfigPath ?? ""), ".key");
   return new DefaultSecretVault({ keyFile });
 }
 async function loadSavedProviders(globalConfigPath) {
@@ -2855,7 +3135,7 @@ function resolveDistDir() {
   try {
     const requireFromHere = createRequire(import.meta.url);
     const serverEntry = requireFromHere.resolve("@wrongstack/webui/server");
-    return path39.resolve(path39.dirname(serverEntry), "..");
+    return path4.resolve(path4.dirname(serverEntry), "..");
   } catch {
     return null;
   }
@@ -2869,7 +3149,9 @@ function startStaticServe(opts, deps = {}) {
     host: opts.host,
     distDir,
     wsPort: opts.wsPort,
-    globalRoot: opts.globalRoot
+    globalRoot: opts.globalRoot,
+    onFleetPing: opts.onFleetPing,
+    apiToken: opts.apiToken
   });
   server.listen(opts.httpPort, opts.host);
   return { server, port: opts.httpPort };
@@ -3540,8 +3822,8 @@ function sendResult6(ctx, ws, success, message) {
   ctx.send(ws, { type: "key.operation_result", payload: { success, message } });
 }
 async function handleProjectsList(ctx, ws) {
-  const projectsBase = ctx.opts.globalConfigPath ? path39.resolve(path39.dirname(ctx.opts.globalConfigPath)) : wstackGlobalRoot();
-  const manifestPath = path39.join(projectsBase, "projects.json");
+  const projectsBase = ctx.opts.globalConfigPath ? path4.resolve(path4.dirname(ctx.opts.globalConfigPath)) : wstackGlobalRoot();
+  const manifestPath = path4.join(projectsBase, "projects.json");
   try {
     const raw = await fsp5.readFile(manifestPath, "utf8");
     const manifest = JSON.parse(raw);
@@ -3554,22 +3836,22 @@ async function handleProjectsSelect(ctx, ws, payload) {
   const { opts } = ctx;
   const { root, name: projectName } = payload;
   try {
-    const resolved = path39.resolve(root);
+    const resolved = path4.resolve(root);
     const stat7 = await fsp5.stat(resolved).catch(() => null);
     if (!stat7?.isDirectory()) {
       ctx.send(ws, {
         type: "projects.selected",
         payload: {
           root,
-          name: projectName ?? path39.basename(root),
+          name: projectName ?? path4.basename(root),
           message: `Cannot switch: not a directory: ${resolved}`
         }
       });
       return;
     }
     const manifest = await loadManifest(opts.globalConfigPath);
-    const entry = manifest.projects.find((p) => path39.resolve(p.root) === resolved);
-    const displayName = projectName?.trim() || entry?.name || path39.basename(resolved);
+    const entry = manifest.projects.find((p) => path4.resolve(p.root) === resolved);
+    const displayName = projectName?.trim() || entry?.name || path4.basename(resolved);
     if (entry) {
       entry.lastSeen = (/* @__PURE__ */ new Date()).toISOString();
     } else {
@@ -3615,8 +3897,8 @@ async function handleProjectsSelect(ctx, ws, payload) {
       });
     } catch {
     }
-    const globalRoot = opts.globalConfigPath ? path39.dirname(opts.globalConfigPath) : wstackGlobalRoot();
-    const newSessionsDir = path39.join(resolveProjectDir(resolved, globalRoot), "sessions");
+    const globalRoot = opts.globalConfigPath ? path4.dirname(opts.globalConfigPath) : wstackGlobalRoot();
+    const newSessionsDir = path4.join(resolveProjectDir(resolved, globalRoot), "sessions");
     await fsp5.mkdir(newSessionsDir, { recursive: true });
     const newStore = new DefaultSessionStore({ dir: newSessionsDir });
     opts.sessionStore = newStore;
@@ -3646,11 +3928,11 @@ async function handleProjectsSelect(ctx, ws, payload) {
 async function handleProjectsAdd(ctx, ws, payload) {
   const { root: addRoot, name: addName } = payload;
   try {
-    const resolved = path39.resolve(addRoot);
+    const resolved = path4.resolve(addRoot);
     const stat7 = await fsp5.stat(resolved).catch(() => null);
     if (!stat7?.isDirectory()) throw new Error(`Not a directory: ${resolved}`);
     const manifest = await loadManifest(ctx.opts.globalConfigPath);
-    const existing = manifest.projects.find((p) => path39.resolve(p.root) === resolved);
+    const existing = manifest.projects.find((p) => path4.resolve(p.root) === resolved);
     if (existing) {
       ctx.send(ws, {
         type: "projects.added",
@@ -3663,7 +3945,7 @@ async function handleProjectsAdd(ctx, ws, payload) {
       });
       return;
     }
-    const name = addName?.trim() || path39.basename(resolved);
+    const name = addName?.trim() || path4.basename(resolved);
     const slug = projectSlug(resolved);
     await ensureProjectDataDir(slug, ctx.opts.globalConfigPath);
     const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -3677,7 +3959,7 @@ async function handleProjectsAdd(ctx, ws, payload) {
     ctx.send(ws, {
       type: "projects.added",
       payload: {
-        name: path39.basename(addRoot),
+        name: path4.basename(addRoot),
         root: addRoot,
         slug: "",
         message: toErrorMessage(err)
@@ -3688,8 +3970,8 @@ async function handleProjectsAdd(ctx, ws, payload) {
 async function handleWorkingDirSet(ctx, ws, newPath) {
   try {
     const wdRoot = ctx.opts.projectRoot ?? ctx.opts.agent.ctx.projectRoot;
-    const resolved = path39.resolve(wdRoot, newPath);
-    if (!resolved.startsWith(wdRoot + path39.sep) && resolved !== wdRoot) {
+    const resolved = path4.resolve(wdRoot, newPath);
+    if (!resolved.startsWith(wdRoot + path4.sep) && resolved !== wdRoot) {
       sendResult6(ctx, ws, false, `Path must stay inside the project root: ${wdRoot}`);
       return;
     }
@@ -4026,13 +4308,13 @@ function sendResult8(ctx, ws, success, message) {
 }
 function storeFor(opts) {
   return opts.sessionStore ?? new DefaultSessionStore({
-    dir: path39.join(opts.projectRoot ?? opts.agent.ctx.projectRoot, ".wrongstack", "sessions")
+    dir: path4.join(opts.projectRoot ?? opts.agent.ctx.projectRoot, ".wrongstack", "sessions")
   });
 }
 async function handleGoalGet(ctx, _ws) {
   const projectRoot = ctx.opts.projectRoot ?? ctx.opts.agent.ctx.projectRoot;
   try {
-    const goalPath = path39.join(projectRoot, ".wrongstack", "goal.json");
+    const goalPath = path4.join(projectRoot, ".wrongstack", "goal.json");
     const raw = await fsp5.readFile(goalPath, "utf8");
     ctx.broadcast({ type: "goal.updated", payload: JSON.parse(raw) });
   } catch {
@@ -4108,7 +4390,7 @@ async function handleSessionNew(ctx, _ws) {
 function rewinderFor(opts) {
   const projectRoot = opts.projectRoot ?? opts.agent.ctx.projectRoot;
   return new DefaultSessionRewinder(
-    opts.sessionsDir ?? path39.join(projectRoot, ".wrongstack", "sessions"),
+    opts.sessionsDir ?? path4.join(projectRoot, ".wrongstack", "sessions"),
     projectRoot
   );
 }
@@ -4442,14 +4724,14 @@ async function runWebUI(opts) {
   let customModeStoreP = null;
   const getCustomModeStore = () => {
     customModeStoreP ??= (async () => {
-      const dir = opts.globalConfigPath ? path39.dirname(opts.globalConfigPath) : wstackGlobalRoot();
+      const dir = opts.globalConfigPath ? path4.dirname(opts.globalConfigPath) : wstackGlobalRoot();
       const store = createCustomModeStore(dir);
       await store.load();
       return store;
     })();
     return customModeStoreP;
   };
-  const autoPhaseStoreDir = opts.projectRoot ? path39.join(opts.projectRoot, ".wrongstack", "autophase") : path39.join(os.tmpdir(), ".wrongstack", "autophase");
+  const autoPhaseStoreDir = opts.projectRoot ? path4.join(opts.projectRoot, ".wrongstack", "autophase") : path4.join(os.tmpdir(), ".wrongstack", "autophase");
   const autoPhaseHandler = new AutoPhaseWebSocketHandler(
     opts.agent,
     opts.agent.ctx,
@@ -4480,7 +4762,12 @@ async function runWebUI(opts) {
     "contextAutoCompact",
     "contextStrategy",
     "logLevel",
-    "auditLevel"
+    "auditLevel",
+    // Telegram plugin notification settings (parity with the standalone server).
+    "tgConfigured",
+    "tgSessionEnd",
+    "tgDelegate",
+    "tgLongToolMs"
   ];
   const prefSnapshot = () => {
     const snapshot = {};
@@ -4519,6 +4806,12 @@ async function runWebUI(opts) {
       meta["logLevel"] = cfg.log?.["level"] ?? "info";
       meta["auditLevel"] = cfg.session?.["auditLevel"] ?? "standard";
       meta["maxIterations"] = cfg.tools?.["maxIterations"] ?? 500;
+      const tgExt = cfg.extensions?.["telegram"];
+      meta["tgConfigured"] = typeof tgExt?.["botToken"] === "string" && tgExt["botToken"].length > 0;
+      meta["tgSessionEnd"] = tgExt?.["notifyOnSessionEnd"] === true;
+      meta["tgDelegate"] = tgExt?.["notifyOnDelegate"] !== false;
+      const tgMs = tgExt?.["longToolThresholdMs"];
+      meta["tgLongToolMs"] = typeof tgMs === "number" ? tgMs : 3e4;
     } catch {
     }
   }
@@ -4540,7 +4833,7 @@ async function runWebUI(opts) {
         return;
       }
       const vault = new DefaultSecretVault({
-        keyFile: path39.join(path39.dirname(configPath2), ".key")
+        keyFile: path4.join(path4.dirname(configPath2), ".key")
       });
       const decrypted = decryptConfigSecrets$1(parsed, vault);
       const autonomyCfg = decrypted.autonomy ?? {};
@@ -4613,6 +4906,16 @@ async function runWebUI(opts) {
         toolsCfg.maxIterations = payload["maxIterations"];
         decrypted.tools = toolsCfg;
       }
+      const tgTouched = typeof payload["tgSessionEnd"] === "boolean" || typeof payload["tgDelegate"] === "boolean" || typeof payload["tgLongToolMs"] === "number";
+      if (tgTouched) {
+        const ext = decrypted.extensions ?? {};
+        const tg = ext["telegram"] ?? {};
+        if (typeof payload["tgSessionEnd"] === "boolean") tg["notifyOnSessionEnd"] = payload["tgSessionEnd"];
+        if (typeof payload["tgDelegate"] === "boolean") tg["notifyOnDelegate"] = payload["tgDelegate"];
+        if (typeof payload["tgLongToolMs"] === "number") tg["longToolThresholdMs"] = payload["tgLongToolMs"];
+        ext["telegram"] = tg;
+        decrypted.extensions = ext;
+      }
       const encrypted = encryptConfigSecrets$1(decrypted, vault);
       await atomicWrite(configPath2, JSON.stringify(encrypted, null, 2), { mode: 384 });
     };
@@ -4634,7 +4937,6 @@ async function runWebUI(opts) {
       );
     }
   };
-  const authToken = crypto3.randomBytes(16).toString("hex");
   const sessionStartedAt = Date.now();
   async function buildSessionStartPayload(overrides, needsSetup = false) {
     let maxContext = 0;
@@ -4663,7 +4965,7 @@ async function runWebUI(opts) {
       model: opts.agent.ctx.model,
       provider: opts.agent.ctx.provider.id,
       mode: opts.modeId ?? "default",
-      projectName: opts.projectRoot ? path39.basename(opts.projectRoot) : void 0,
+      projectName: opts.projectRoot ? path4.basename(opts.projectRoot) : void 0,
       // Frontend reads `projectRoot` from session.start (ws-handlers setEnv) —
       // omitting it left the store's projectRoot empty after a project switch.
       projectRoot: opts.projectRoot ?? opts.agent.ctx.projectRoot ?? "",
@@ -4689,7 +4991,7 @@ async function runWebUI(opts) {
       const projectDir = resolveProjectDir(opts.projectRoot, wstackGlobalRoot());
       const mailbox = new GlobalMailbox(projectDir, opts.events);
       webuiClientId = `webui@${crypto3.randomUUID().slice(0, 8)}`;
-      const projectName = opts.projectRoot ? path39.basename(opts.projectRoot) : "unknown";
+      const projectName = opts.projectRoot ? path4.basename(opts.projectRoot) : "unknown";
       await mailbox.registerClient({
         clientId: webuiClientId,
         sessionId: opts.projectRoot,
@@ -4714,13 +5016,19 @@ async function runWebUI(opts) {
     }
   };
   registerWebuiClient();
+  const wsToken = generateAuthToken();
   const wss = new WebSocketServer({ port, host, maxPayload: 1 * 1024 * 1024 });
   console.log(`[WebUI] WebSocket server starting on ws://${host}:${port}`);
+  let fleetBroadcastCli = null;
   const httpServer = startStaticServe({
     host,
     httpPort,
     wsPort,
-    globalRoot: path39.dirname(opts.globalConfigPath ?? "")
+    globalRoot: path4.dirname(opts.globalConfigPath ?? ""),
+    onFleetPing: () => {
+      void fleetBroadcastCli?.();
+    },
+    apiToken: wsToken
   });
   if (httpServer) {
     announceWebuiReady({
@@ -4728,14 +5036,15 @@ async function runWebUI(opts) {
       host,
       httpPort,
       wsPort,
-      open: !!opts.open
+      open: !!opts.open,
+      wsToken
     });
   } else {
     console.warn(
       `[WebUI] Frontend not served (run \`pnpm --filter @wrongstack/webui build\`). WS bridge still active on ws://${host}:${wsPort}.`
     );
   }
-  const registryBaseDir = opts.globalConfigPath ? path39.dirname(opts.globalConfigPath) : void 0;
+  const registryBaseDir = opts.globalConfigPath ? path4.dirname(opts.globalConfigPath) : void 0;
   if (opts.projectRoot) {
     registerWebuiInstance({
       pid: process.pid,
@@ -4770,9 +5079,13 @@ async function runWebUI(opts) {
     emitConcurrency();
     eventUnsubscribers.push(
       opts.events.on("iteration.started", (e) => {
+        const maxIt = opts.agent.ctx.meta["maxIterations"];
         broadcast({
           type: "iteration.started",
-          payload: { index: e.index }
+          payload: {
+            index: e.index,
+            ...typeof maxIt === "number" ? { maxIterations: maxIt } : {}
+          }
         });
       })
     );
@@ -5033,6 +5346,18 @@ async function runWebUI(opts) {
     broadcast,
     log: (m) => console.log(m)
   };
+  const skillsProjectRoot = opts.projectRoot ?? opts.agent.ctx.projectRoot ?? "";
+  const skillsCtx = {
+    skillLoader: opts.skillLoader,
+    skillInstaller: opts.skillLoader ? new SkillInstaller({
+      manifestPath: path4.join(wstackGlobalRoot(), "installed-skills.json"),
+      projectSkillsDir: path4.join(skillsProjectRoot, ".wrongstack", "skills"),
+      globalSkillsDir: path4.join(wstackGlobalRoot(), "skills"),
+      projectHash: skillsProjectRoot ? projectHash(skillsProjectRoot) : "",
+      skillLoader: opts.skillLoader
+    }) : void 0,
+    projectRoot: skillsProjectRoot
+  };
   const worklistCtx = {
     agent: opts.agent,
     sessionId: opts.session.id,
@@ -5097,20 +5422,22 @@ async function runWebUI(opts) {
       console.log(`[WebUI] WebSocket server running on ws://${host}:${port}`);
       setupEvents();
       opts.onListening?.({ httpPort, wsPort, host });
-      const globalRoot = opts.globalConfigPath ? path39.dirname(opts.globalConfigPath) : void 0;
+      const globalRoot = opts.globalConfigPath ? path4.dirname(opts.globalConfigPath) : void 0;
       if (globalRoot) {
-        const statusInterval = setInterval(async () => {
+        const broadcastSessions = async () => {
           try {
             const { SessionRegistry } = await import('@wrongstack/core');
             const registry = new SessionRegistry(globalRoot);
             const sessions = await registry.list();
-            const live = sessions.filter((s) => s.status !== "stale").map((s) => ({
+            const mySlug = sessions.find((s) => s.pid === process.pid)?.projectSlug;
+            const live = sessions.filter((s) => s.status !== "stale").filter((s) => mySlug ? s.projectSlug === mySlug : true).map((s) => ({
               sessionId: s.sessionId,
               projectName: s.projectName,
               projectSlug: s.projectSlug,
               projectRoot: s.projectRoot,
               workingDir: s.workingDir,
               gitBranch: s.gitBranch,
+              clientType: s.clientType,
               status: s.status,
               pid: s.pid,
               startedAt: s.startedAt,
@@ -5122,60 +5449,52 @@ async function runWebUI(opts) {
                 currentTool: a.currentTool,
                 iterations: a.iterations,
                 toolCalls: a.toolCalls,
+                costUsd: a.costUsd,
+                tokensIn: a.tokensIn,
+                tokensOut: a.tokensOut,
+                ctxPct: a.ctxPct,
+                model: a.model,
+                partialText: a.partialText,
                 lastActivityAt: a.lastActivityAt
               }))
             }));
             broadcast({ type: "sessions.status_update", payload: { sessions: live } });
           } catch {
           }
-        }, 5e3);
+        };
+        fleetBroadcastCli = broadcastSessions;
+        const statusInterval = setInterval(() => void broadcastSessions(), 5e3);
         if (statusInterval.unref) statusInterval.unref();
         eventUnsubscribers.push(() => clearInterval(statusInterval));
-      }
-    });
-    wss.on("connection", async (ws, req2) => {
-      const isLoopback = (hostname) => hostname === "localhost" || hostname === "127.0.0.1" || hostname === "::1" || hostname === "[::1]";
-      const tokenMatches = (provided) => {
-        if (!provided) return false;
-        const a = Buffer.from(provided);
-        const b = Buffer.from(authToken);
-        return a.length === b.length && crypto3.timingSafeEqual(a, b);
-      };
-      try {
-        const url = new URL(req2.url ?? "/", `http://localhost:${port}`);
-        const token = url.searchParams.get("token");
-        const tokenOk = tokenMatches(token);
-        const hostHeader = (req2.headers.host ?? "").trim();
-        let hostOk = false;
+        let regDebounce;
         try {
-          hostOk = !!hostHeader && isLoopback(new URL(`http://${hostHeader}`).hostname);
+          const regWatcher = watch(globalRoot, { persistent: false }, (_event, filename) => {
+            const name = filename ? String(filename) : "";
+            if (!name.startsWith("session-registry.json") || name.endsWith(".lock")) return;
+            if (regDebounce) clearTimeout(regDebounce);
+            regDebounce = setTimeout(() => void broadcastSessions(), 150);
+          });
+          eventUnsubscribers.push(() => {
+            if (regDebounce) clearTimeout(regDebounce);
+            regWatcher.close();
+          });
         } catch {
-          hostOk = false;
-        }
-        if (!hostOk) {
-          ws.close(4003, "Forbidden: non-loopback Host header");
-          return;
-        }
-        const origin = req2.headers.origin;
-        if (origin) {
-          try {
-            const { hostname } = new URL(origin);
-            if (!isLoopback(hostname) && !tokenOk) {
-              ws.close(4003, "Forbidden: non-loopback origin requires auth token");
-              return;
-            }
-          } catch {
-            ws.close(4003, "Forbidden: invalid origin");
-            return;
-          }
-        } else {
-          if (!tokenOk) {
-            ws.close(4003, "Forbidden: auth token required for non-browser clients");
-            return;
-          }
         }
-      } catch {
-        ws.close(4001, "Unauthorized: malformed request");
+        void broadcastSessions();
+      }
+    });
+    wss.on("connection", async (ws, req2) => {
+      const ok = verifyClient({
+        origin: req2.headers.origin,
+        url: req2.url ?? "/",
+        hostHeader: req2.headers.host,
+        remoteAddress: req2.socket.remoteAddress,
+        cookieHeader: req2.headers.cookie,
+        wsHost: host,
+        expectedToken: wsToken
+      });
+      if (!ok) {
+        ws.close(4003, "Forbidden");
         return;
       }
       const client = { ws, sessionId: opts.session.id };
@@ -5500,10 +5819,84 @@ async function runWebUI(opts) {
         }
         return handleMemoryForget(ws, msg, opts.memoryStore);
       }
+      // ── MCP operations — MCP servers are read directly from config file ──
+      case "mcp.list": {
+        const servers = [];
+        if (opts.globalConfigPath) {
+          try {
+            const raw = await fsp5.readFile(opts.globalConfigPath, "utf8");
+            const cfg = JSON.parse(raw);
+            const mcpServers = cfg.mcpServers;
+            if (mcpServers) {
+              for (const [name, serverCfg] of Object.entries(mcpServers)) {
+                servers.push({
+                  name,
+                  transport: serverCfg.transport ?? "stdio",
+                  status: "stopped",
+                  enabled: serverCfg.enabled ?? true,
+                  // Conditional spreads keep these absent (not explicitly
+                  // `undefined`) to satisfy exactOptionalPropertyTypes.
+                  ...serverCfg.description !== void 0 && { description: serverCfg.description },
+                  ...serverCfg.allowedTools !== void 0 && { tools: serverCfg.allowedTools }
+                });
+              }
+            }
+          } catch {
+          }
+        }
+        send(ws, { type: "mcp.list", payload: { servers } });
+        break;
+      }
+      case "mcp.add":
+      case "mcp.remove":
+      case "mcp.update":
+      case "mcp.wake":
+      case "mcp.sleep":
+      case "mcp.discover":
+      case "mcp.enable":
+      case "mcp.disable":
+      case "mcp.restart": {
+        send(ws, {
+          type: "mcp.operation_result",
+          payload: {
+            success: false,
+            message: 'MCP management operations require the standalone WebUI server. Please run "wrongstack webui" instead of "wrongstack --webui".'
+          }
+        });
+        break;
+      }
       case "skills.list": {
         await handleSkillsList(introspectionCtx, ws);
         break;
       }
+      case "skills.content": {
+        await handleSkillsContent(ws, skillsCtx, msg);
+        break;
+      }
+      case "skills.install": {
+        await handleSkillsInstall(ws, skillsCtx, msg);
+        break;
+      }
+      case "skills.uninstall": {
+        await handleSkillsUninstall(ws, skillsCtx, msg);
+        break;
+      }
+      case "skills.update": {
+        await handleSkillsUpdate(ws, skillsCtx, msg);
+        break;
+      }
+      case "skills.create": {
+        await handleSkillsCreate(ws, skillsCtx, msg);
+        break;
+      }
+      case "skills.edit": {
+        await handleSkillsEdit(ws, skillsCtx, msg);
+        break;
+      }
+      case "skills.export": {
+        await handleSkillsExport(ws, skillsCtx);
+        break;
+      }
       case "modes.list": {
         await handleModesList(agentConfigCtx, ws);
         break;
@@ -5676,7 +6069,7 @@ async function runWebUI(opts) {
       // ── Mailbox operations — project-level inter-agent messaging ────
       case "mailbox.messages": {
         const projectRoot = opts.projectRoot ?? opts.agent.ctx.projectRoot ?? "";
-        const globalRoot = opts.globalConfigPath ? path39.dirname(opts.globalConfigPath) : "";
+        const globalRoot = opts.globalConfigPath ? path4.dirname(opts.globalConfigPath) : "";
         if (!projectRoot || !globalRoot) {
           send(ws, {
             type: "mailbox.messages",
@@ -5725,7 +6118,7 @@ async function runWebUI(opts) {
       }
       case "mailbox.agents": {
         const projectRoot = opts.projectRoot ?? opts.agent.ctx.projectRoot ?? "";
-        const globalRoot = opts.globalConfigPath ? path39.dirname(opts.globalConfigPath) : "";
+        const globalRoot = opts.globalConfigPath ? path4.dirname(opts.globalConfigPath) : "";
         if (!projectRoot || !globalRoot) {
           send(ws, {
             type: "mailbox.agents",
@@ -5768,7 +6161,7 @@ async function runWebUI(opts) {
       }
       case "mailbox.clear": {
         const projectRoot = opts.projectRoot ?? opts.agent.ctx.projectRoot ?? "";
-        const globalRoot = opts.globalConfigPath ? path39.dirname(opts.globalConfigPath) : "";
+        const globalRoot = opts.globalConfigPath ? path4.dirname(opts.globalConfigPath) : "";
         if (!projectRoot || !globalRoot) {
           send(ws, { type: "mailbox.cleared", payload: { error: "No project root available" } });
           break;
@@ -5788,7 +6181,7 @@ async function runWebUI(opts) {
       }
       case "mailbox.purge": {
         const projectRoot = opts.projectRoot ?? opts.agent.ctx.projectRoot ?? "";
-        const globalRoot = opts.globalConfigPath ? path39.dirname(opts.globalConfigPath) : "";
+        const globalRoot = opts.globalConfigPath ? path4.dirname(opts.globalConfigPath) : "";
         if (!projectRoot || !globalRoot) {
           send(ws, { type: "mailbox.purged", payload: { error: "No project root available" } });
           break;
@@ -5809,32 +6202,7 @@ async function runWebUI(opts) {
       }
       case "git.info": {
         const projectRoot = opts.projectRoot ?? opts.agent.ctx.projectRoot ?? "";
-        const cwd = projectRoot || void 0;
-        const { execFile: ef } = await import('child_process');
-        const git = (args) => new Promise((resolve11) => {
-          ef("git", args, { cwd, timeout: 3e3 }, (err, stdout) => {
-            resolve11(err ? "" : stdout.trim());
-          });
-        });
-        const [branchRaw, diffRaw, statusRaw, upstreamRaw] = await Promise.all([
-          git(["branch", "--show-current"]),
-          git(["diff", "--stat"]),
-          git(["status", "--porcelain"]),
-          git(["rev-list", "--left-right", "--count", "@{upstream}...HEAD"])
-        ]);
-        const branch = branchRaw || "(detached)";
-        const addMatch = /(\d+)\s+insertion/i.exec(diffRaw);
-        const delMatch = /(\d+)\s+deletion/i.exec(diffRaw);
-        const added = addMatch ? Number(addMatch[1]) : 0;
-        const deleted = delMatch ? Number(delMatch[1]) : 0;
-        const untracked = statusRaw.split("\n").filter((l) => l.startsWith("??")).length;
-        const [behindRaw, aheadRaw] = (upstreamRaw || "0	0").split("	");
-        const behind = Number(behindRaw) || 0;
-        const ahead = Number(aheadRaw) || 0;
-        send(ws, {
-          type: "git.info",
-          payload: { branch, added, deleted, untracked, ahead, behind }
-        });
+        await handleGitInfo(ws, projectRoot);
         break;
       }
       default: {
@@ -6449,7 +6817,7 @@ var ReadlineInputReader = class {
   history = [];
   pending = false;
   constructor(opts = {}) {
-    this.historyFile = opts.historyFile ?? path39.join(wstackGlobalRoot(), "history");
+    this.historyFile = opts.historyFile ?? path4.join(wstackGlobalRoot(), "history");
   }
   async loadHistory() {
     try {
@@ -6461,7 +6829,7 @@ var ReadlineInputReader = class {
   }
   async saveHistory() {
     try {
-      await fsp5.mkdir(path39.dirname(this.historyFile), { recursive: true });
+      await fsp5.mkdir(path4.dirname(this.historyFile), { recursive: true });
       await fsp5.writeFile(this.historyFile, this.history.slice(-1e3).join("\n"));
     } catch {
     }
@@ -6793,7 +7161,7 @@ function pickGroupIndex(opts) {
         if (Number.isFinite(parsed)) current = wrap(parsed);
       } catch {
       }
-      fs2.mkdirSync(path39.dirname(opts.cursorFile), { recursive: true });
+      fs2.mkdirSync(path4.dirname(opts.cursorFile), { recursive: true });
       fs2.writeFileSync(opts.cursorFile, String(wrap(current + 1)));
       return current;
     } catch {
@@ -6846,11 +7214,11 @@ function assertSafeToDelete(filename, parentDir) {
     throw new FsError({
       message: `Refusing to delete protected file: ${filename}`,
       code: ERROR_CODES.FS_DELETE_FAILED,
-      path: path39.join(parentDir, filename),
+      path: path4.join(parentDir, filename),
       context: { reason: "protected_basename" }
     });
   }
-  if (filename !== path39.basename(filename)) {
+  if (filename !== path4.basename(filename)) {
     throw new FsError({
       message: `Refusing to delete path with traversal: ${filename}`,
       code: ERROR_CODES.FS_DELETE_FAILED,
@@ -6862,11 +7230,11 @@ function assertSafeToDelete(filename, parentDir) {
     throw new FsError({
       message: `Refusing to delete unknown file: ${filename}`,
       code: ERROR_CODES.FS_DELETE_FAILED,
-      path: path39.join(parentDir, filename),
+      path: path4.join(parentDir, filename),
       context: { reason: "unknown_file_pattern" }
     });
   }
-  const resolvedParent = path39.resolve(parentDir);
+  const resolvedParent = path4.resolve(parentDir);
   if (!resolvedParent.endsWith(".wrongstack")) {
     throw new FsError({
       message: `Unexpected parent directory for bak prune: ${resolvedParent}`,
@@ -6877,8 +7245,8 @@ function assertSafeToDelete(filename, parentDir) {
   }
 }
 async function safeDelete(filePath) {
-  const dir = path39.dirname(filePath);
-  const filename = path39.basename(filePath);
+  const dir = path4.dirname(filePath);
+  const filename = path4.basename(filePath);
   try {
     assertSafeToDelete(filename, dir);
     await fsp5.unlink(filePath);
@@ -6923,16 +7291,16 @@ function diffSummary(oldCfg, newCfg) {
 }
 var defaultHomeDir = () => os__default.homedir();
 function historyDir(homeFn = defaultHomeDir) {
-  return path39.join(homeFn(), ".wrongstack", "config.history", "entries");
+  return path4.join(homeFn(), ".wrongstack", "config.history", "entries");
 }
 function historyIndexPath(homeFn = defaultHomeDir) {
-  return path39.join(homeFn(), ".wrongstack", "config.history", "index.json");
+  return path4.join(homeFn(), ".wrongstack", "config.history", "index.json");
 }
 function configPath(homeFn = defaultHomeDir) {
-  return path39.join(homeFn(), ".wrongstack", "config.json");
+  return path4.join(homeFn(), ".wrongstack", "config.json");
 }
 function backupLastPath(homeFn = defaultHomeDir) {
-  return path39.join(homeFn(), ".wrongstack", "config.json.last");
+  return path4.join(homeFn(), ".wrongstack", "config.json.last");
 }
 function entryId(ts) {
   return ts.replace(/[:.]/g, "-").slice(0, 19);
@@ -6990,7 +7358,7 @@ async function backupCurrent(homeFn = defaultHomeDir) {
   }
   if (content !== void 0) {
     try {
-      const bakPath = path39.join(homeFn(), ".wrongstack", `config.json.${ts}.bak`);
+      const bakPath = path4.join(homeFn(), ".wrongstack", `config.json.${ts}.bak`);
       await atomicWrite(bakPath, content);
     } catch (err) {
       writeErr(
@@ -6999,11 +7367,11 @@ async function backupCurrent(homeFn = defaultHomeDir) {
     }
   }
   try {
-    const dir = path39.join(homeFn(), ".wrongstack");
+    const dir = path4.join(homeFn(), ".wrongstack");
     const files = await fsp5.readdir(dir);
     const baks = files.filter((f) => f.startsWith("config.json.") && f.endsWith(".bak")).sort().reverse();
     for (const f of baks.slice(10)) {
-      await safeDelete(path39.join(dir, f));
+      await safeDelete(path4.join(dir, f));
     }
   } catch (err) {
     writeErr(
@@ -7024,7 +7392,7 @@ async function appendHistory(oldCfg, newCfg, description, homeFn = defaultHomeDi
   };
   try {
     await fsp5.writeFile(
-      path39.join(historyDir(homeFn), `${id}.json`),
+      path4.join(historyDir(homeFn), `${id}.json`),
       JSON.stringify(entry, null, 2),
       "utf8"
     );
@@ -7032,7 +7400,7 @@ async function appendHistory(oldCfg, newCfg, description, homeFn = defaultHomeDi
     throw new FsError({
       message: toErrorMessage(err),
       code: ERROR_CODES.FS_WRITE_FAILED,
-      path: path39.join(historyDir(homeFn), `${id}.json`),
+      path: path4.join(historyDir(homeFn), `${id}.json`),
       cause: err
     });
   }
@@ -7047,7 +7415,7 @@ async function listHistory(homeFn = defaultHomeDir) {
 }
 async function getHistoryEntry(id, homeFn = defaultHomeDir) {
   try {
-    const raw = await fsp5.readFile(path39.join(historyDir(homeFn), `${id}.json`), "utf8");
+    const raw = await fsp5.readFile(path4.join(historyDir(homeFn), `${id}.json`), "utf8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -7161,11 +7529,11 @@ async function buildPickableProviders(modelsRegistry, config) {
 var theme = { primary: color.amber };
 async function saveToGlobalConfig(configPath2, provider, model, homeFn = () => process.env.HOME ?? os__default.homedir()) {
   try {
-    const { atomicWrite: atomicWrite17 } = await import('@wrongstack/core');
-    const fs39 = await import('fs/promises');
+    const { atomicWrite: atomicWrite16 } = await import('@wrongstack/core');
+    const fs38 = await import('fs/promises');
     let existing = {};
     try {
-      const raw = await fs39.readFile(configPath2, "utf8");
+      const raw = await fs38.readFile(configPath2, "utf8");
       existing = JSON.parse(raw);
     } catch {
     }
@@ -7184,7 +7552,7 @@ async function saveToGlobalConfig(configPath2, provider, model, homeFn = () => p
         })
       );
     }
-    await atomicWrite17(configPath2, JSON.stringify(existing, null, 2), { mode: 384 });
+    await atomicWrite16(configPath2, JSON.stringify(existing, null, 2), { mode: 384 });
     try {
       await appendHistory(
         oldCfg,
@@ -7506,7 +7874,8 @@ function buildAuthCommand(opts) {
           {
             encrypt: (v) => v,
             decrypt: (v) => v,
-            isEncrypted: () => false
+            isEncrypted: () => false,
+            keyVersion: 1
           }
         );
       } catch {
@@ -7847,7 +8216,7 @@ function formatPhaseList(graph) {
 }
 async function gatherProjectContext(projectRoot) {
   try {
-    const raw = await fsp5.readFile(path39.join(projectRoot, "package.json"), "utf8");
+    const raw = await fsp5.readFile(path4.join(projectRoot, "package.json"), "utf8");
     const pkg = JSON.parse(raw);
     const parts = [
       `Project: ${String(pkg.name ?? "unknown")}`,
@@ -9273,17 +9642,17 @@ function diagnoseConfig(cfg, plugins = []) {
 function scanPlaintextSecrets(node, prefix, findings) {
   if (!isPlainObject(node)) return;
   for (const [key, value] of Object.entries(node)) {
-    const path40 = prefix ? `${prefix}.${key}` : key;
+    const path39 = prefix ? `${prefix}.${key}` : key;
     if (typeof value === "string") {
       if (value.length > 0 && isSecretField$1(key) && !value.startsWith(ENC_PREFIX)) {
         findings.push({
-          path: path40,
+          path: path39,
           problem: "looks like a plaintext secret (not vault-encrypted) \u2014 it will be encrypted on next boot",
           severity: "warning"
         });
       }
     } else if (isPlainObject(value)) {
-      scanPlaintextSecrets(value, path40, findings);
+      scanPlaintextSecrets(value, path39, findings);
     }
   }
 }
@@ -9304,7 +9673,7 @@ function resolvePersistPath(deps) {
   return deps.globalConfigPath;
 }
 async function ensureProjectDir(filePath) {
-  const dir = path39.dirname(filePath);
+  const dir = path4.dirname(filePath);
   try {
     await fsp5.mkdir(dir, { recursive: true });
   } catch {
@@ -9328,7 +9697,8 @@ var PROJECT_SAFE_FIELDS = /* @__PURE__ */ new Set([
   "session",
   "indexing",
   "tools",
-  "launch"
+  "launch",
+  "circuitBreaker"
 ]);
 function filterSafeForProject(cfg) {
   const out = {};
@@ -9508,8 +9878,8 @@ function buildDoctorCommand(opts) {
     return `  ${icon} ${color.cyan(f.path)} \u2014 ${f.problem}${fix}`;
   }
   async function findParsableBackup(file) {
-    const dir = path39.dirname(file);
-    const base = path39.basename(file);
+    const dir = path4.dirname(file);
+    const base = path4.basename(file);
     const candidates = [`${base}.last`];
     try {
       const siblings = await fsp5.readdir(dir);
@@ -9520,7 +9890,7 @@ function buildDoctorCommand(opts) {
     }
     for (const name of candidates) {
       try {
-        const raw = await fsp5.readFile(path39.join(dir, name), "utf8");
+        const raw = await fsp5.readFile(path4.join(dir, name), "utf8");
         JSON.parse(raw);
         return { name, raw };
       } catch {
@@ -9637,7 +10007,7 @@ function buildDoctorCommand(opts) {
           await atomicWrite(target.file, JSON.stringify(report.fixed, null, 2));
           if (!target.isProject) {
             try {
-              const homeFn = () => path39.dirname(path39.dirname(target.file));
+              const homeFn = () => path4.dirname(path4.dirname(target.file));
               await appendHistory(parsed, report.fixed, "config doctor auto-fix", homeFn);
             } catch {
             }
@@ -11817,8 +12187,8 @@ function buildInitCommand(opts) {
     description: "Create or update .wrongstack/AGENTS.md project context for the system prompt.",
     async run(_args, ctx) {
       const root = ctx?.projectRoot ?? opts.projectRoot ?? process.cwd();
-      const dir = path39.join(root, ".wrongstack");
-      const file = path39.join(dir, "AGENTS.md");
+      const dir = path4.join(root, ".wrongstack");
+      const file = path4.join(dir, "AGENTS.md");
       const isFirstInit = !await fileExists(file);
       const detected = await detectProjectFacts(root);
       const body = renderAgentsTemplate(detected);
@@ -11826,7 +12196,7 @@ function buildInitCommand(opts) {
       await fsp5.writeFile(file, body, "utf8");
       let nodePkg = false;
       try {
-        await fsp5.access(path39.join(root, "package.json"));
+        await fsp5.access(path4.join(root, "package.json"));
         nodePkg = true;
       } catch {
       }
@@ -12520,9 +12890,9 @@ function stateBadge(state) {
       return color.dim(state);
   }
 }
-async function readConfig(path40) {
+async function readConfig(path39) {
   try {
-    return JSON.parse(await fsp5.readFile(path40, "utf8"));
+    return JSON.parse(await fsp5.readFile(path39, "utf8"));
   } catch {
     return {};
   }
@@ -12530,11 +12900,11 @@ async function readConfig(path40) {
 function isMcpServerRecord(value) {
   return !!value && typeof value === "object" && !Array.isArray(value);
 }
-async function writeConfig(path40, cfg) {
+async function writeConfig(path39, cfg) {
   const raw = JSON.stringify(cfg, null, 2);
-  const tmp = path40 + ".tmp";
+  const tmp = path39 + ".tmp";
   await fsp5.writeFile(tmp, raw, "utf8");
-  await fsp5.rename(tmp, path40);
+  await fsp5.rename(tmp, path39);
 }
 
 // src/slash-commands/mcp.ts
@@ -14653,6 +15023,73 @@ function formatSuggestions(suggestions) {
   return lines.join("\n");
 }
 
+// src/slash-commands/coordinator.ts
+function buildCoordinatorCommand(opts) {
+  return {
+    name: "coordinator",
+    category: "Agent",
+    description: "Start, stop, or inspect the AutonomousCoordinator \u2014 the fleet brain that auctions tasks and consults Brain for risky decisions.",
+    help: [
+      "Usage:",
+      "  /coordinator start <goal>   Start the coordinator with a goal",
+      "  /coordinator stop           Stop the running coordinator",
+      "  /coordinator status         Show current coordinator status",
+      "",
+      "The AutonomousCoordinator runs alongside the agent loop and:",
+      "  \u2022 Maintains a shared knowledge graph of facts and decisions",
+      "  \u2022 Breaks work into a task DAG and auctions tasks to subagents",
+      "  \u2022 Consults the Brain for risky decisions",
+      "  \u2022 Uses ConsensusProtocol to vote on multi-agent changes",
+      "",
+      "It is separate from /autonomy eternal \u2014 both can run concurrently."
+    ].join("\n"),
+    async run(args) {
+      const trimmed = args.trim();
+      const [verbRaw, ...rest] = trimmed.split(/\s+/);
+      const verb = (verbRaw ?? "").toLowerCase();
+      if (verb === "start") {
+        const goal = rest.join(" ").trim();
+        if (!goal) {
+          return { message: "Usage: /coordinator start <goal>\nA goal is required to start the coordinator." };
+        }
+        opts.onCoordinatorStart?.(goal);
+        return {
+          message: `AutonomousCoordinator started with goal: "${goal}"
+Use /coordinator status to monitor progress.`
+        };
+      }
+      if (verb === "stop") {
+        opts.onCoordinatorStop?.();
+        return { message: "AutonomousCoordinator stop signal sent." };
+      }
+      if (verb === "status") {
+        const canStart = opts.onCoordinatorStart != null;
+        const canStop = opts.onCoordinatorStop != null;
+        return {
+          message: [
+            `Coordinator wired: start=${canStart ? "yes" : "no"}, stop=${canStop ? "yes" : "no"}`,
+            "Use F9 in the TUI for the full coordinator panel."
+          ].join("\n")
+        };
+      }
+      return {
+        message: [
+          "Usage:",
+          "  /coordinator start <goal>   Start with a goal",
+          "  /coordinator stop            Stop the coordinator",
+          "  /coordinator status          Show status",
+          "",
+          "The coordinator is a fleet brain that:",
+          "  \u2022 Auctions tasks to subagents via TaskAuctioneer",
+          "  \u2022 Maintains a shared KnowledgeGraph",
+          "  \u2022 Consults Brain for risky decisions",
+          "  \u2022 Uses ConsensusProtocol for multi-agent votes"
+        ].join("\n")
+      };
+    }
+  };
+}
+
 // src/slash-commands/mouse.ts
 function buildMouseCommand(_opts) {
   return {
@@ -14833,7 +15270,7 @@ async function listProjectsCommand(opts, ctx) {
   return { message: lines.join("\n") };
 }
 async function addProjectCommand(opts, ctx, targetPath, displayName) {
-  const resolved = path39.resolve(ctx?.projectRoot ?? ctx?.cwd ?? process.cwd(), targetPath);
+  const resolved = path4.resolve(ctx?.projectRoot ?? ctx?.cwd ?? process.cwd(), targetPath);
   try {
     await fsp5.access(resolved);
   } catch {
@@ -14850,7 +15287,7 @@ async function addProjectCommand(opts, ctx, targetPath, displayName) {
       message: color.yellow(`Project already registered: "${existing.name}" (${existing.slug})`)
     };
   }
-  const name = displayName?.trim() || path39.basename(resolved);
+  const name = displayName?.trim() || path4.basename(resolved);
   const slug = generateSlug(resolved);
   const now = (/* @__PURE__ */ new Date()).toISOString();
   await ensureProjectDataDir(slug, opts.paths?.globalConfig);
@@ -14903,7 +15340,7 @@ async function removeProjectCommand(opts, _ctx, slugOrName) {
   };
 }
 async function switchProjectCommand(opts, ctx, target, displayName) {
-  const resolved = path39.resolve(ctx?.projectRoot ?? ctx?.cwd ?? process.cwd(), target);
+  const resolved = path4.resolve(ctx?.projectRoot ?? ctx?.cwd ?? process.cwd(), target);
   try {
     await fsp5.access(resolved);
   } catch {
@@ -14917,8 +15354,8 @@ async function switchProjectCommand(opts, ctx, target, displayName) {
   try {
     const req2 = createRequire(import.meta.url);
     const pkgPath = req2.resolve("@wrongstack/cli/package.json");
-    const pkgDir = path39.dirname(pkgPath);
-    cliPath = path39.join(pkgDir, "dist", "index.js");
+    const pkgDir = path4.dirname(pkgPath);
+    cliPath = path4.join(pkgDir, "dist", "index.js");
     await fsp5.access(cliPath);
   } catch {
     cliPath = process.argv[1] ?? "";
@@ -14935,13 +15372,13 @@ async function switchProjectCommand(opts, ctx, target, displayName) {
   if (existing) {
     existing.lastSeen = (/* @__PURE__ */ new Date()).toISOString();
   } else {
-    const name = displayName?.trim() || path39.basename(resolved);
+    const name = displayName?.trim() || path4.basename(resolved);
     const slug = generateSlug(resolved);
     manifest.projects.push({ name, root: resolved, slug, lastSeen: (/* @__PURE__ */ new Date()).toISOString() });
     await ensureProjectDataDir(slug, opts.paths?.globalConfig);
   }
   await saveManifest(manifest, opts.paths?.globalConfig);
-  const targetName = displayName?.trim() || path39.basename(resolved);
+  const targetName = displayName?.trim() || path4.basename(resolved);
   const canSwitch = await confirmProjectSwitch(opts, targetName);
   if (!canSwitch) return { message: "" };
   const nodeExe = process.execPath;
@@ -15057,8 +15494,8 @@ async function spawnInProject(opts, _ctx, root, projectName) {
   try {
     const req2 = createRequire(import.meta.url);
     const pkgPath = req2.resolve("@wrongstack/cli/package.json");
-    const pkgDir = path39.dirname(pkgPath);
-    cliPath = path39.join(pkgDir, "dist", "index.js");
+    const pkgDir = path4.dirname(pkgPath);
+    cliPath = path4.join(pkgDir, "dist", "index.js");
     await fsp5.access(cliPath);
   } catch {
     cliPath = process.argv[1] ?? "";
@@ -15075,7 +15512,7 @@ async function spawnInProject(opts, _ctx, root, projectName) {
   if (existing) {
     existing.lastSeen = (/* @__PURE__ */ new Date()).toISOString();
   } else {
-    const name = projectName || path39.basename(root);
+    const name = projectName || path4.basename(root);
     const slug = generateSlug(root);
     manifest.projects.push({ name, root, slug, lastSeen: (/* @__PURE__ */ new Date()).toISOString() });
     await ensureProjectDataDir(slug, opts.paths?.globalConfig);
@@ -15107,8 +15544,8 @@ async function handleNewSession(_opts, _ctx) {
   try {
     const req2 = createRequire(import.meta.url);
     const pkgPath = req2.resolve("@wrongstack/cli/package.json");
-    const pkgDir = path39.dirname(pkgPath);
-    cliPath = path39.join(pkgDir, "dist", "index.js");
+    const pkgDir = path4.dirname(pkgPath);
+    cliPath = path4.join(pkgDir, "dist", "index.js");
     await fsp5.access(cliPath);
   } catch {
     cliPath = process.argv[1] ?? "";
@@ -15219,7 +15656,7 @@ function buildReviewCommand(opts) {
       for (const f of allChanged) {
         if (f.path.startsWith(".wrongstack/")) continue;
         try {
-          await fsp5.access(path39.join(cwd, f.path));
+          await fsp5.access(path4.join(cwd, f.path));
           existing.push(f);
         } catch {
         }
@@ -15230,7 +15667,7 @@ function buildReviewCommand(opts) {
       const filesWithContent = [];
       for (const f of existing.slice(0, 30)) {
         try {
-          const content = await fsp5.readFile(path39.join(cwd, f.path), "utf8");
+          const content = await fsp5.readFile(path4.join(cwd, f.path), "utf8");
           filesWithContent.push({ ...f, content });
         } catch {
         }
@@ -15264,10 +15701,13 @@ function buildSettingsCommand(opts) {
     "  /settings hints on|off        Show or suppress rotating launch hints",
     "  /settings debug-stream on|off   Raw SSE hex-dump to stderr for debugging",
     "  /settings config-scope global|project   Save settings globally or per-project",
+    "  /settings fs-access unrestricted|project   File-tool access scope (project = confine to project root)",
     "  /settings refine on|off       Enable/disable prompt refinement",
     "  /settings refine-delay <seconds>   Countdown duration for refine preview",
     "  /settings refine-language original|english   Default language for refinement",
     "  /settings semver-part patch|minor|major|auto   Default part for /semver and the semver_bump tool",
+    "  /settings breaker on|off   Enable/disable the process circuit breaker (gates bash/exec)",
+    "  /settings breaker-timeout <seconds>   Auto kill/reset delay when the breaker trips (0 = manual)",
     "  /settings defaults            Show built-in default values",
     "",
     "Settings are persisted to ~/.wrongstack/config.json."
@@ -15279,10 +15719,14 @@ function buildSettingsCommand(opts) {
     const hints = opts.configStore.get().hints !== false;
     const debugStream = opts.configStore.get().debugStream === true;
     const configScope = opts.configStore.get().configScope ?? "global";
+    const fsAccess = opts.configStore.get().tools?.restrictToProjectRoot === true ? "project" : "unrestricted";
     const enhanceEnabled = autonomy?.enhance ?? true;
     const enhanceDelay = autonomy?.enhanceDelayMs ?? 6e4;
     const enhanceLanguage = autonomy?.enhanceLanguage ?? "original";
     const semverPart = opts.configStore.get().extensions?.["semver-bump"]?.["defaultPart"] ?? "patch";
+    const cb = opts.configStore.get().circuitBreaker;
+    const breakerEnabled = cb?.enabled === true;
+    const breakerTimeout = cb?.autoKillResetMs ?? 6e4;
     return [
       `${color.bold("WrongStack")} ${color.dim("\u2014 Settings")}`,
       "",
@@ -15291,10 +15735,12 @@ function buildSettingsCommand(opts) {
       `  launch hints:          ${hints ? color.cyan("on") : color.dim("off")}   ${color.dim("change: /settings hints on|off")}`,
       `  debug stream:         ${debugStream ? color.cyan("on") : color.dim("off")}   ${color.dim("change: /settings debug-stream on|off")}`,
       `  config scope:         ${color.cyan(configScope)}   ${color.dim("change: /settings config-scope global|project")}`,
+      `  filesystem access:   ${color.cyan(fsAccess)}   ${color.dim("change: /settings fs-access unrestricted|project")}`,
       `  refine:              ${enhanceEnabled ? color.cyan("on") : color.dim("off")}   ${color.dim("change: /settings refine on|off")}`,
       `  refine-delay:        ${color.cyan(formatDelay(enhanceDelay))}   ${color.dim("change: /settings refine-delay <seconds>")}`,
       `  refine-language:     ${color.cyan(enhanceLanguage)}   ${color.dim("change: /settings refine-language original|english")}`,
       `  semver default part: ${color.cyan(semverPart)}   ${color.dim("change: /settings semver-part patch|minor|major|auto")}`,
+      `  circuit breaker:     ${breakerEnabled ? color.cyan("on") : color.dim("off")} (kill/reset ${breakerTimeout > 0 ? formatDelay(breakerTimeout) : color.dim("manual")})   ${color.dim("change: /settings breaker on|off")}`,
       "",
       color.dim("  Persisted to ~/.wrongstack/config.json \xB7 /settings help for more")
     ].join("\n");
@@ -15407,6 +15853,25 @@ function buildSettingsCommand(opts) {
           const label = raw === "project" ? `${color.cyan("project")} \u2014 settings saved to <project>/.wrongstack/config.json` : `${color.cyan("global")} \u2014 settings saved to ~/.wrongstack/config.json`;
           return { message: `${color.green("\u2713")} config scope \u2192 ${label}` };
         }
+        if (sub === "fs-access") {
+          const raw = (rest[0] ?? "").toLowerCase();
+          if (!["unrestricted", "project"].includes(raw)) {
+            return { message: `${color.amber("Usage:")} /settings fs-access unrestricted|project` };
+          }
+          const restrict = raw === "project";
+          await persistConfigSetting(persistDeps, (cfg) => {
+            const tools = cfg.tools ?? {};
+            tools.restrictToProjectRoot = restrict;
+            cfg.tools = tools;
+            const features = cfg.features ?? {};
+            features.allowOutsideProjectRoot = !restrict;
+            cfg.features = features;
+          });
+          const label = restrict ? `${color.cyan("project")} \u2014 file tools confined to the project root` : `${color.cyan("unrestricted")} \u2014 file tools may access paths outside the project root`;
+          return {
+            message: `${color.green("\u2713")} filesystem access \u2192 ${label}   ${color.dim("(restart or re-open the session to apply)")}`
+          };
+        }
         if (sub === "refine") {
           const raw = (rest[0] ?? "").toLowerCase();
           if (!["on", "off"].includes(raw)) {
@@ -15467,8 +15932,46 @@ function buildSettingsCommand(opts) {
             message: `${color.green("\u2713")} semver default part \u2192 ${color.bold(raw)}   ${color.dim("saved to global config; used when /semver or semver_bump gets no explicit part")}`
           };
         }
+        if (sub === "breaker") {
+          const raw = (rest[0] ?? "").toLowerCase();
+          if (!["on", "off"].includes(raw)) {
+            return { message: `${color.amber("Usage:")} /settings breaker on|off` };
+          }
+          const on = raw === "on";
+          await persistConfigSetting(persistDeps, (cfg) => {
+            const cb = cfg.circuitBreaker;
+            cfg.circuitBreaker = { ...cb ?? {}, enabled: on };
+          });
+          getProcessRegistry().setBreakerConfig({ enabled: on });
+          return {
+            message: `${color.green("\u2713")} circuit breaker \u2192 ${on ? color.cyan("on") : color.dim("off")}   ${color.dim(on ? "bash/exec gated on repeated failures; trips arm the kill/reset countdown" : "bash/exec always proceed")}`
+          };
+        }
+        if (sub === "breaker-timeout") {
+          const raw = rest[0];
+          if (raw === void 0) {
+            return {
+              message: `${color.amber("Usage:")} /settings breaker-timeout <seconds>   ${color.dim("(0 = manual recovery only)")}`
+            };
+          }
+          const seconds = Number.parseFloat(raw);
+          if (Number.isNaN(seconds) || seconds < 0) {
+            return {
+              message: `${color.red("Invalid number")}: "${raw}". Enter seconds, e.g. /settings breaker-timeout 60`
+            };
+          }
+          const ms = Math.round(seconds * 1e3);
+          await persistConfigSetting(persistDeps, (cfg) => {
+            const cb = cfg.circuitBreaker;
+            cfg.circuitBreaker = { ...cb ?? {}, autoKillResetMs: ms };
+          });
+          getProcessRegistry().setBreakerConfig({ autoKillResetMs: ms });
+          return {
+            message: `${color.green("\u2713")} breaker kill/reset timeout \u2192 ${ms > 0 ? formatDelay(ms) : color.dim("manual")}   ${color.dim(ms > 0 ? "statusline shows a countdown when the breaker trips" : "breaker trips require /kill reset")}`
+          };
+        }
         return {
-          message: `${color.red("Unknown setting")} "${sub}". ${unknownSubcommand(sub, ["delay", "mode", "hints", "debug-stream", "config-scope", "refine", "refine-delay", "refine-language", "semver-part", "defaults"], "settings")}`
+          message: `${color.red("Unknown setting")} "${sub}". ${unknownSubcommand(sub, ["delay", "mode", "hints", "debug-stream", "config-scope", "fs-access", "refine", "refine-delay", "refine-language", "semver-part", "breaker", "breaker-timeout", "defaults"], "settings")}`
         };
       } catch (err) {
         return {
@@ -15601,7 +16104,7 @@ var DEFAULTS = {
   working_dir: true
 };
 function resolveConfigPath() {
-  return process.env[CONFIG_ENV] ?? path39.join(process.env.HOME ?? "", ".wrongstack", "statusline.json");
+  return process.env[CONFIG_ENV] ?? path4.join(process.env.HOME ?? "", ".wrongstack", "statusline.json");
 }
 async function loadStatuslineConfig() {
   const p = resolveConfigPath();
@@ -15615,7 +16118,7 @@ async function loadStatuslineConfig() {
 async function saveStatuslineConfig(cfg) {
   const p = resolveConfigPath();
   try {
-    await fsp5.mkdir(path39.dirname(p), { recursive: true });
+    await fsp5.mkdir(path4.dirname(p), { recursive: true });
     await atomicWrite(p, JSON.stringify(cfg, null, 2));
   } catch (err) {
     throw new FsError({
@@ -15780,7 +16283,7 @@ function buildTasksCommand(_opts) {
   return {
     name: "tasks",
     category: "Inspect",
-    description: "Manage structured tasks with dependencies, types, and priorities: /tasks [show|add <title>|start|done|fail|status <id> <status>|promote <id>|planify <id>|clear]",
+    description: 'Manage structured tasks with dependencies, types, and priorities: /tasks [show|add <title>|start|done|fail|status <id> <status>|promote <id>|planify <id>|clear]. Tasks are session-persistent (survive resume, isolated to this session). Use `scope: "project"` to share across sessions. For simpler per-turn todos use /todos. For multi-phase roadmaps use /plan.',
     help: [
       "Usage:",
       "  /tasks                            Show task progress + list",
@@ -15797,7 +16300,8 @@ function buildTasksCommand(_opts) {
       "  /tasks clear                      Remove all tasks",
       "",
       "Types: feature, bugfix, refactor, docs, test, chore",
-      "Priorities: critical, high, medium, low"
+      "Priorities: critical, high, medium, low",
+      'Scope: tasks are session-isolated by default; use scope:"project" in the task tool to share across sessions'
     ].join("\n"),
     async run(args, ctx) {
       if (!ctx) {
@@ -15849,9 +16353,23 @@ ${formatPlan(updated)}`;
               return file;
             }
             const parts = restJoined.split(/\s+/);
-            const title = parts[0] ?? "";
-            const type = validateType(parts[1] ?? "") ?? "feature";
-            const priority = validatePriority(parts[2] ?? "") ?? "medium";
+            let type = "feature";
+            let priority = "medium";
+            if (parts.length > 1) {
+              const p = validatePriority(parts[parts.length - 1] ?? "");
+              if (p) {
+                priority = p;
+                parts.pop();
+                if (parts.length > 1) {
+                  const t = validateType(parts[parts.length - 1] ?? "");
+                  if (t) {
+                    type = t;
+                    parts.pop();
+                  }
+                }
+              }
+            }
+            const title = parts.join(" ");
             const now = (/* @__PURE__ */ new Date()).toISOString();
             file.tasks.push({
               id: `task_${randomUUID()}`,
@@ -16016,7 +16534,7 @@ ${formatTaskProgress(file.tasks)}`;
                 "clear"
               ],
               "tasks"
-            );
+            ) + "\n\nRelated: /plan (session-persistent roadmap) | /todos (per-turn list)";
             return file;
         }
         return file;
@@ -16027,13 +16545,13 @@ ${formatTaskProgress(file.tasks)}`;
 }
 async function discoverPackageFiles(projectRoot) {
   const files = [];
-  const rootPkg = path39.join(projectRoot, "package.json");
+  const rootPkg = path4.join(projectRoot, "package.json");
   try {
     await fsp5.access(rootPkg);
     files.push(rootPkg);
   } catch {
   }
-  const workspaceFile = path39.join(projectRoot, "pnpm-workspace.yaml");
+  const workspaceFile = path4.join(projectRoot, "pnpm-workspace.yaml");
   try {
     await fsp5.access(workspaceFile);
     const content = await fsp5.readFile(workspaceFile, "utf8");
@@ -16043,12 +16561,12 @@ async function discoverPackageFiles(projectRoot) {
     const globs = rawGlobs.split(/[\s,]+/).filter(Boolean).map((g) => g.replace(/['"]/g, ""));
     for (const g of globs) {
       const dirPrefix = g.replace(/\/?\*$/, "").replace(/\/\*$/, "");
-      const dir = path39.join(projectRoot, dirPrefix);
+      const dir = path4.join(projectRoot, dirPrefix);
       try {
         const entries = await fsp5.readdir(dir, { withFileTypes: true });
         for (const e of entries) {
           if (!e.isDirectory()) continue;
-          const subPkg = path39.join(dir, e.name, "package.json");
+          const subPkg = path4.join(dir, e.name, "package.json");
           try {
             await fsp5.access(subPkg);
             files.push(subPkg);
@@ -16063,7 +16581,7 @@ async function discoverPackageFiles(projectRoot) {
   return files;
 }
 function buildTechStackTask(opts) {
-  const pkgList = opts.packageFiles.map((f) => `  - ${path39.relative(opts.projectRoot, f)}`).join("\n");
+  const pkgList = opts.packageFiles.map((f) => `  - ${path4.relative(opts.projectRoot, f)}`).join("\n");
   const header = opts.isInit ? [
     "## Tech Stack Audit \u2014 First-Time Project Init",
     "",
@@ -16548,7 +17066,7 @@ function buildTodosCommand(opts) {
   return {
     name: "todos",
     category: "Inspect",
-    description: "Inspect or edit the live todo list: /todos [show|clear|add|done|remove|rm <id|index>]",
+    description: "Inspect or edit the live todo list: /todos [show|clear|add|done|remove|rm <id|index>]. For multi-phase work use /plan (session-persistent roadmap). For structured typed work with priorities and dependencies use /tasks (session-persistent).",
     async run(args) {
       const ctx = opts.context;
       if (!ctx) return { message: "No active context." };
@@ -16602,7 +17120,7 @@ function buildTodosCommand(opts) {
         }
         default:
           return {
-            message: unknownSubcommand(cmd, ["show", "clear", "add", "done", "remove"], "todos")
+            message: unknownSubcommand(cmd, ["show", "clear", "add", "done", "remove"], "todos") + "\n\nRelated: /plan (session-persistent roadmap) | /tasks (structured tasks with priorities)"
           };
       }
     }
@@ -16648,7 +17166,7 @@ function buildWorkingDirCommand(_opts) {
       }
       const trimmed = args.trim();
       if (!trimmed) {
-        const rel2 = path39.relative(ctx.projectRoot, ctx.workingDir) || ".";
+        const rel2 = path4.relative(ctx.projectRoot, ctx.workingDir) || ".";
         return {
           message: [
             `Working directory: ${color.bold(ctx.workingDir)}`,
@@ -16657,10 +17175,10 @@ function buildWorkingDirCommand(_opts) {
           ].join("\n")
         };
       }
-      const resolved = path39.isAbsolute(trimmed) ? path39.resolve(trimmed) : path39.resolve(ctx.projectRoot, trimmed);
-      const root = path39.resolve(ctx.projectRoot);
-      const rel = path39.relative(root, resolved);
-      if (rel.startsWith("..") || path39.isAbsolute(rel)) {
+      const resolved = path4.isAbsolute(trimmed) ? path4.resolve(trimmed) : path4.resolve(ctx.projectRoot, trimmed);
+      const root = path4.resolve(ctx.projectRoot);
+      const rel = path4.relative(root, resolved);
+      if (rel.startsWith("..") || path4.isAbsolute(rel)) {
         return {
           message: color.red(
             `Directory "${trimmed}" is outside the project root.
@@ -16685,8 +17203,8 @@ function buildWorkingDirCommand(_opts) {
           message: color.red(toErrorMessage(err))
         };
       }
-      const prevRel = path39.relative(ctx.projectRoot, previous) || ".";
-      const newRel = path39.relative(ctx.projectRoot, resolved) || ".";
+      const prevRel = path4.relative(ctx.projectRoot, previous) || ".";
+      const newRel = path4.relative(ctx.projectRoot, resolved) || ".";
       return {
         message: [
           color.green(`  \u2713 ${prevRel} \u2192 ${color.bold(newRel)}`),
@@ -16840,6 +17358,7 @@ function buildBuiltinSlashCommands(opts) {
     buildMouseCommand(),
     buildAutonomyCommand(opts),
     buildGoalCommand(opts),
+    buildCoordinatorCommand(opts),
     buildBrainCommand(opts),
     buildBtwCommand(opts),
     buildNextCommand(opts),
@@ -16886,13 +17405,13 @@ var MANIFESTS = [
 ];
 async function detectProjectKind(projectRoot) {
   try {
-    await fsp5.access(path39.join(projectRoot, ".wrongstack", "AGENTS.md"));
+    await fsp5.access(path4.join(projectRoot, ".wrongstack", "AGENTS.md"));
     return "initialized";
   } catch {
   }
   for (const m of MANIFESTS) {
     try {
-      await fsp5.access(path39.join(projectRoot, m));
+      await fsp5.access(path4.join(projectRoot, m));
       return "project";
     } catch {
     }
@@ -16900,8 +17419,8 @@ async function detectProjectKind(projectRoot) {
   return "empty";
 }
 async function scaffoldAgentsMd(projectRoot) {
-  const dir = path39.join(projectRoot, ".wrongstack");
-  const file = path39.join(dir, "AGENTS.md");
+  const dir = path4.join(projectRoot, ".wrongstack");
+  const file = path4.join(dir, "AGENTS.md");
   const facts = await detectProjectFacts(projectRoot);
   const body = renderAgentsTemplate(facts);
   await fsp5.mkdir(dir, { recursive: true });
@@ -16914,7 +17433,7 @@ async function runProjectCheck(opts) {
   if (kind === "initialized") {
     renderer.write(
       `
-  ${color.green("\u2713")} Project initialized ${color.dim(`(${path39.join(projectRoot, ".wrongstack", "AGENTS.md")})`)}
+  ${color.green("\u2713")} Project initialized ${color.dim(`(${path4.join(projectRoot, ".wrongstack", "AGENTS.md")})`)}
 `
     );
     return true;
@@ -16945,7 +17464,7 @@ async function runProjectCheck(opts) {
     }
     return true;
   }
-  const gitDir = path39.join(projectRoot, ".git");
+  const gitDir = path4.join(projectRoot, ".git");
   let hasGit = false;
   try {
     await fsp5.access(gitDir);
@@ -17180,11 +17699,11 @@ async function countProjectFiles(projectRoot, threshold) {
     for (const e of entries) {
       if (SKIP_DIRS.has(e.name)) continue;
       if (count >= threshold) return;
-      const full = path39.join(dir, e.name);
+      const full = path4.join(dir, e.name);
       if (e.isDirectory()) {
         await walk(full);
       } else if (e.isFile()) {
-        if (INDEXABLE_EXTS.has(path39.extname(e.name))) {
+        if (INDEXABLE_EXTS.has(path4.extname(e.name))) {
           count++;
         }
       }
@@ -17525,14 +18044,14 @@ function summarize(value, name) {
   if (typeof v === "object" && v !== null) {
     const o = v;
     if (name === "edit") {
-      const path40 = typeof o["path"] === "string" ? o["path"] : "";
+      const path39 = typeof o["path"] === "string" ? o["path"] : "";
       const reps = typeof o["replacements"] === "number" ? o["replacements"] : 0;
-      return `${path40}  ${reps} replacement${reps === 1 ? "" : "s"}`.trim();
+      return `${path39}  ${reps} replacement${reps === 1 ? "" : "s"}`.trim();
     }
     if (name === "write") {
-      const path40 = typeof o["path"] === "string" ? o["path"] : "";
+      const path39 = typeof o["path"] === "string" ? o["path"] : "";
       const bytes = typeof o["bytes"] === "number" ? o["bytes"] : void 0;
-      return bytes !== void 0 ? `${path40}  ${bytes}B` : path40;
+      return bytes !== void 0 ? `${path39}  ${bytes}B` : path39;
     }
     if (typeof o["count"] === "number") {
       return `${o["count"]} match${o["count"] === 1 ? "" : "es"}`;
@@ -17869,14 +18388,14 @@ var auditCmd = async (args, deps) => {
   return verify.ok ? 0 : 1;
 };
 async function listAudits(log, dir, deps) {
-  const fs39 = await import('fs/promises');
-  const path40 = await import('path');
+  const fs38 = await import('fs/promises');
+  const path39 = await import('path');
   const out = [];
   let foundRoot = true;
   const scan = async (scanDir, prefix, depth) => {
     let entries;
     try {
-      entries = await fs39.readdir(scanDir, { withFileTypes: true });
+      entries = await fs38.readdir(scanDir, { withFileTypes: true });
     } catch {
       if (depth === 0) foundRoot = false;
       return;
@@ -17884,7 +18403,7 @@ async function listAudits(log, dir, deps) {
     for (const entry of entries) {
       if (entry.name.startsWith(".")) continue;
       if (entry.isDirectory()) {
-        if (depth === 0) await scan(path40.join(scanDir, entry.name), entry.name, depth + 1);
+        if (depth === 0) await scan(path39.join(scanDir, entry.name), entry.name, depth + 1);
         continue;
       }
       if (!entry.isFile() || !entry.name.endsWith(".audit.jsonl")) continue;
@@ -18878,7 +19397,7 @@ async function resolveWstackEntry() {
   try {
     const req2 = createRequire(import.meta.url);
     const pkgPath = req2.resolve("@wrongstack/cli/package.json");
-    const entry = path39.join(path39.dirname(pkgPath), "dist", "index.js");
+    const entry = path4.join(path4.dirname(pkgPath), "dist", "index.js");
     await fsp5.access(entry);
     return entry;
   } catch {
@@ -18893,7 +19412,7 @@ async function benchRun(_args, deps) {
   const outBase = flagStr(deps, "out") ?? "bench-results";
   let config;
   try {
-    config = await loadBenchConfig(path39.resolve(deps.cwd, modelsPath));
+    config = await loadBenchConfig(path4.resolve(deps.cwd, modelsPath));
   } catch (err) {
     deps.renderer.writeError(toErrorMessage(err));
     return 1;
@@ -18904,8 +19423,8 @@ async function benchRun(_args, deps) {
     if (c > 0) config.concurrency = c;
   }
   const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-  const outDir = path39.resolve(deps.cwd, outBase, stamp);
-  const predictionsDir = path39.join(outDir, "predictions");
+  const outDir = path4.resolve(deps.cwd, outBase, stamp);
+  const predictionsDir = path4.join(outDir, "predictions");
   let suite;
   let grade;
   let isSwebench = false;
@@ -18917,14 +19436,14 @@ async function benchRun(_args, deps) {
     }
     const languagesRaw = flagStr(deps, "languages");
     const languages = languagesRaw ? languagesRaw.split(",").map((s) => s.trim()).filter(Boolean) : void 0;
-    suite = createPolyglotSuite({ polyglotDir: path39.resolve(deps.cwd, polyglotDir), languages });
+    suite = createPolyglotSuite({ polyglotDir: path4.resolve(deps.cwd, polyglotDir), languages });
     grade = (a) => gradePolyglot(a);
   } else if (suiteId === "swebench") {
     isSwebench = true;
     const datasetDir = flagStr(deps, "dataset-dir");
     const docker = flagBool(deps, "docker");
     suite = createSwebenchSuite({
-      datasetDir: datasetDir ? path39.resolve(deps.cwd, datasetDir) : void 0,
+      datasetDir: datasetDir ? path4.resolve(deps.cwd, datasetDir) : void 0,
       docker
     });
     grade = (a) => gradeSwebench({ ...a, predictionsDir });
@@ -18954,7 +19473,7 @@ async function benchRun(_args, deps) {
   }
   await writeJsonArtifacts(outDir, report);
   const md = renderMarkdownReport(report);
-  await fsp5.writeFile(path39.join(outDir, "report.md"), md, "utf8");
+  await fsp5.writeFile(path4.join(outDir, "report.md"), md, "utf8");
   deps.renderer.write("\n" + md + "\n");
   if (isSwebench) {
     for (const cell of config.cells) {
@@ -18967,7 +19486,7 @@ async function benchRun(_args, deps) {
       "Grade with the official SWE-bench harness: python -m swebench.harness.run_evaluation --predictions_path <file> --run_id <id>"
     );
   }
-  deps.renderer.writeInfo(`Report written to ${path39.join(outDir, "report.md")}`);
+  deps.renderer.writeInfo(`Report written to ${path4.join(outDir, "report.md")}`);
   return 0;
 }
 async function benchReport(args, deps) {
@@ -18976,7 +19495,7 @@ async function benchReport(args, deps) {
     deps.renderer.writeError("Usage: wstack bench report <run-directory>");
     return 1;
   }
-  const outDir = path39.resolve(deps.cwd, dir);
+  const outDir = path4.resolve(deps.cwd, dir);
   let summary;
   try {
     summary = await readSummary(outDir);
@@ -18987,7 +19506,7 @@ async function benchReport(args, deps) {
     return 1;
   }
   const md = renderMarkdownReport(summary);
-  await fsp5.writeFile(path39.join(outDir, "report.md"), md, "utf8");
+  await fsp5.writeFile(path4.join(outDir, "report.md"), md, "utf8");
   deps.renderer.write("\n" + md + "\n");
   return 0;
 }
@@ -19002,7 +19521,7 @@ async function benchList(_args, deps) {
   const modelsPath = flagStr(deps, "models");
   if (modelsPath) {
     try {
-      const config = await loadBenchConfig(path39.resolve(deps.cwd, modelsPath));
+      const config = await loadBenchConfig(path4.resolve(deps.cwd, modelsPath));
       deps.renderer.write("\n" + color.bold("Model cells\n"));
       for (const cell of config.cells) {
         deps.renderer.write(
@@ -19057,14 +19576,14 @@ var doctorCmd = async (_args, deps) => {
     checks.push({
       name: "provider",
       status: "fail",
-      detail: "no provider configured \u2014 run `wstack init` or `wstack auth`"
+      detail: "no provider configured \u2014 run `wstack auth` to set up"
     });
   else checks.push({ name: "provider", status: "ok", detail: cfg.provider });
   if (!cfg.model)
     checks.push({
       name: "model",
       status: "fail",
-      detail: "no model configured \u2014 run `wstack init`"
+      detail: "no model configured \u2014 run `wstack auth` to configure"
     });
   else checks.push({ name: "model", status: "ok", detail: cfg.model });
   if (cfg.provider) {
@@ -19119,7 +19638,7 @@ var doctorCmd = async (_args, deps) => {
   }
   try {
     await fsp5.mkdir(deps.paths.projectSessions, { recursive: true });
-    const probe = path39.join(deps.paths.projectSessions, `.probe-${Date.now()}`);
+    const probe = path4.join(deps.paths.projectSessions, `.probe-${Date.now()}`);
     await fsp5.writeFile(probe, "");
     await fsp5.unlink(probe);
     checks.push({ name: "sessions writable", status: "ok", detail: deps.paths.projectSessions });
@@ -19222,8 +19741,8 @@ var exportCmd = async (args, deps) => {
     return 1;
   }
   if (output) {
-    await fsp5.mkdir(path39.dirname(path39.resolve(deps.cwd, output)), { recursive: true });
-    await fsp5.writeFile(path39.resolve(deps.cwd, output), rendered, "utf8");
+    await fsp5.mkdir(path4.dirname(path4.resolve(deps.cwd, output)), { recursive: true });
+    await fsp5.writeFile(path4.resolve(deps.cwd, output), rendered, "utf8");
     deps.renderer.write(`Wrote ${rendered.length} bytes to ${output}
 `);
   } else {
@@ -19232,80 +19751,23 @@ var exportCmd = async (args, deps) => {
   }
   return 0;
 };
-
-// src/subcommands/handlers/init.ts
-init_helpers();
 var initCmd = async (_args, deps) => {
-  deps.renderer.write(color.bold("WrongStack init\n"));
-  deps.renderer.writeInfo("Loading provider catalog from models.dev (cached locally)\u2026");
-  let providers;
-  try {
-    providers = await deps.modelsRegistry.listProviders();
-  } catch (err) {
-    deps.renderer.writeError(
-      `Failed to load provider catalog: ${err instanceof Error ? err.message : err}`
-    );
-    return 1;
-  }
-  const detected = providers.filter((p) => p.family !== "unsupported").filter((p) => p.envVars.some((v) => process.env[v]));
-  const ranked = detected.length > 0 ? detected : providers.filter((p) => ["anthropic", "openai", "google"].includes(p.id));
-  if (detected.length > 0)
-    deps.renderer.write(
-      `Detected API keys for: ${detected.map((p) => p.name).join(", ")}
+  deps.renderer.write(color.bold("WrongStack init (deprecated)\n"));
+  deps.renderer.write(
+    `
+  ${color.amber("\u26A0 This command is deprecated.")}
+
+  Use ${color.bold("wstack auth")} to set up providers, add API keys,
+  and configure your default model in one interactive workflow.
+
+  ${color.dim("Examples:")}
+    ${color.cyan("wstack auth")}              Interactive setup menu
+    ${color.cyan("wstack auth anthropic")}   Add Anthropic API key directly
+    ${color.cyan("wstack auth local")}        Add local LLM (Ollama, vLLM, LM Studio)
+
+  Run ${color.bold("wstack auth --help")} for more options.
 `
-    );
-  const defaultId = ranked[0]?.id ?? "anthropic";
-  const providerAnswer = (await deps.reader.readLine(`Provider [${defaultId}]: `)).trim();
-  if (providerAnswer === "q") {
-    deps.renderer.write(color.dim("Cancelled.\n"));
-    return 0;
-  }
-  const providerId = providerAnswer || defaultId;
-  const provider = await deps.modelsRegistry.getProvider(providerId);
-  if (!provider) {
-    deps.renderer.writeError(`Provider "${providerId}" not found in models.dev catalog.`);
-    return 1;
-  }
-  if (provider.family === "unsupported") {
-    deps.renderer.writeError(
-      `Provider "${providerId}" uses ${provider.npm} which has no built-in transport. Install a plugin to enable it.`
-    );
-    return 1;
-  }
-  const suggestedModel = await deps.modelsRegistry.suggestModel(providerId) ?? "";
-  const modelHint = suggestedModel ? ` [${suggestedModel}]` : "";
-  const modelAnswer = (await deps.reader.readLine(`Model${modelHint}: `)).trim();
-  if (modelAnswer === "q") {
-    deps.renderer.write(color.dim("Cancelled.\n"));
-    return 0;
-  }
-  const modelId = modelAnswer || suggestedModel;
-  if (!modelId) {
-    deps.renderer.writeError("No model selected. Aborting.");
-    return 1;
-  }
-  const envHit = provider.envVars.map((v) => process.env[v]).find(Boolean);
-  let apiKey = "";
-  if (!envHit) {
-    apiKey = (await deps.reader.readLine(
-      `API key (stored in ${deps.paths.globalConfig}; empty = expect ${provider.envVars[0] ?? "env var"}): `
-    )).trim();
-  } else {
-    deps.renderer.writeInfo(`Found API key in env (${provider.envVars.join(" / ")}).`);
-  }
-  await fsp5.mkdir(deps.paths.globalRoot, { recursive: true });
-  const config = { version: 1, provider: providerId, model: modelId };
-  if (apiKey) config.apiKey = apiKey;
-  const vault = new DefaultSecretVault({ keyFile: deps.paths.secretsKey });
-  const encrypted = encryptConfigSecrets$1(config, vault);
-  await atomicWrite(deps.paths.globalConfig, JSON.stringify(encrypted, null, 2), { mode: 384 });
-  await fsp5.mkdir(path39.join(deps.projectRoot, ".wrongstack"), { recursive: true });
-  const agentsFile = path39.join(deps.projectRoot, ".wrongstack", "AGENTS.md");
-  const projectFacts = await detectProjectFacts(deps.projectRoot);
-  await atomicWrite(agentsFile, renderAgentsTemplate(projectFacts));
-  deps.renderer.writeInfo(`Wrote ${deps.paths.globalConfig}`);
-  deps.renderer.writeInfo(`Project state lives in ${deps.paths.projectDir}`);
-  deps.renderer.writeInfo('Try: wstack "<task>"  or  wstack');
+  );
   return 0;
 };
 var AllowAllPermissionPolicy = class extends AutoApprovePermissionPolicy {
@@ -19321,7 +19783,7 @@ function parseToolsFlag(flags) {
   );
   return set.size > 0 ? set : null;
 }
-function makeServeContext(cwd, projectRoot, signal) {
+function makeServeContext(cwd, projectRoot, signal, restrictFsToRoot = true) {
   const provider = {
     id: "mcp-serve",
     capabilities: { maxContext: 0 },
@@ -19348,6 +19810,7 @@ function makeServeContext(cwd, projectRoot, signal) {
     tokenCounter,
     cwd,
     projectRoot,
+    allowOutsideProjectRoot: !restrictFsToRoot,
     model: "mcp-serve",
     tools: []
   });
@@ -19373,7 +19836,12 @@ async function serveMcpStdio(deps) {
     registry.registerAllOrThrow([...builtinToolsPack.tools ?? []], builtinToolsPack.name);
   }
   const controller = new AbortController();
-  const ctx = makeServeContext(deps.cwd, deps.projectRoot, controller.signal);
+  const ctx = makeServeContext(
+    deps.cwd,
+    deps.projectRoot,
+    controller.signal,
+    deps.config.tools?.restrictToProjectRoot ?? false
+  );
   const permissionPolicy = yolo ? new AllowAllPermissionPolicy() : new AutoApprovePermissionPolicy();
   const executor = new ToolExecutor(registry, {
     permissionPolicy,
@@ -20663,7 +21131,7 @@ var usageCmd = async (_args, deps) => {
   return 0;
 };
 var projectsCmd = async (_args, deps) => {
-  const projectsRoot = path39.join(deps.paths.globalRoot, "projects");
+  const projectsRoot = path4.join(deps.paths.globalRoot, "projects");
   try {
     const entries = await fsp5.readdir(projectsRoot);
     if (entries.length === 0) {
@@ -20673,7 +21141,7 @@ var projectsCmd = async (_args, deps) => {
     for (const hash of entries) {
       try {
         const meta = JSON.parse(
-          await fsp5.readFile(path39.join(projectsRoot, hash, "meta.json"), "utf8")
+          await fsp5.readFile(path4.join(projectsRoot, hash, "meta.json"), "utf8")
         );
         deps.renderer.write(
           `  ${color.dim(hash)}  ${color.dim(meta.lastSeen ?? "")}  ${meta.root ?? "?"}
@@ -21122,7 +21590,7 @@ function findSessionId(args) {
 var rewindCmd = async (args, deps) => {
   const flags = parseRewindFlags(args);
   const wpaths = resolveWstackPaths({ projectRoot: deps.projectRoot });
-  const sessionsDir = path39.join(wpaths.globalRoot, "sessions");
+  const sessionsDir = path4.join(wpaths.globalRoot, "sessions");
   const rewind = new DefaultSessionRewinder(sessionsDir, deps.projectRoot);
   let sessionId = findSessionId(args);
   if (!sessionId) {
@@ -21267,7 +21735,7 @@ async function listFleetRuns(deps) {
   }
   const runs = [];
   for (const id of entries) {
-    const runDir = path39.join(deps.paths.projectSessions, id);
+    const runDir = path4.join(deps.paths.projectSessions, id);
     let stat7;
     try {
       stat7 = await fsp5.stat(runDir);
@@ -21280,17 +21748,17 @@ async function listFleetRuns(deps) {
     let subagentCount = 0;
     let subagentsDir;
     try {
-      await fsp5.access(path39.join(runDir, "fleet.json"));
+      await fsp5.access(path4.join(runDir, "fleet.json"));
       manifest = true;
     } catch {
     }
     try {
-      await fsp5.access(path39.join(runDir, "checkpoint.json"));
+      await fsp5.access(path4.join(runDir, "checkpoint.json"));
       checkpoint = true;
     } catch {
     }
     try {
-      subagentsDir = path39.join(runDir, "subagents");
+      subagentsDir = path4.join(runDir, "subagents");
       const files = await fsp5.readdir(subagentsDir);
       subagentCount = files.filter((f) => f.endsWith(".jsonl")).length;
     } catch {
@@ -21317,7 +21785,7 @@ async function listFleetRuns(deps) {
   return 0;
 }
 async function showFleetRun(runId, deps) {
-  const runDir = path39.join(deps.paths.projectSessions, runId);
+  const runDir = path4.join(deps.paths.projectSessions, runId);
   let stat7;
   try {
     stat7 = await fsp5.stat(runDir);
@@ -21334,7 +21802,7 @@ async function showFleetRun(runId, deps) {
   deps.renderer.write(color.bold(`
 Fleet Run: ${runId}
 `) + "\n");
-  const manifestPath = path39.join(runDir, "fleet.json");
+  const manifestPath = path4.join(runDir, "fleet.json");
   let manifestData = null;
   try {
     manifestData = await fsp5.readFile(manifestPath, "utf8");
@@ -21352,7 +21820,7 @@ Fleet Run: ${runId}
     deps.renderer.write(`  ${color.dim("\u25CB")} fleet.json \u2014 not found
 `);
   }
-  const checkpointPath = path39.join(runDir, "checkpoint.json");
+  const checkpointPath = path4.join(runDir, "checkpoint.json");
   let checkpointData = null;
   try {
     checkpointData = await fsp5.readFile(checkpointPath, "utf8");
@@ -21399,7 +21867,7 @@ Fleet Run: ${runId}
     } catch {
     }
   }
-  const subagentsDir = path39.join(runDir, "subagents");
+  const subagentsDir = path4.join(runDir, "subagents");
   let subagentFiles = [];
   try {
     subagentFiles = await fsp5.readdir(subagentsDir);
@@ -21411,7 +21879,7 @@ Fleet Run: ${runId}
   Subagent transcripts (${subagentFiles.length}):
 `);
     for (const f of subagentFiles.sort()) {
-      const filePath = path39.join(subagentsDir, f);
+      const filePath = path4.join(subagentsDir, f);
       let size;
       try {
         const s = await fsp5.stat(filePath);
@@ -21428,7 +21896,7 @@ Fleet Run: ${runId}
   ${color.dim("\u25CB")} No subagent transcripts
 `);
   }
-  const sharedDir = path39.join(runDir, "shared");
+  const sharedDir = path4.join(runDir, "shared");
   try {
     const files = await fsp5.readdir(sharedDir);
     deps.renderer.write(`
@@ -21669,8 +22137,8 @@ var helpCmd = async (_args, deps) => {
     '  wstack --eternal "<mission>" Launch eternal-autonomy loop against a goal \u2014 Ctrl+C to stop',
     "  wstack resume [<id>]         Resume a session",
     "  wstack sessions              List recent sessions",
-    "  wstack init                  Pick provider + model from models.dev",
-    "  wstack auth                  Interactive key manager (list/add/update/delete)",
+    "  wstack auth                  Interactive setup + key manager (add/edit/delete)",
+    "  wstack auth <provider>       Add API key for a provider",
     "  wstack auth list             Quick listing of saved providers and keys",
     "  wstack auth status <id>      Detailed view of one provider",
     "  wstack auth remove <id>      Delete a provider (asks for confirmation)",
@@ -21755,7 +22223,7 @@ function resolveBundledSkillsDir() {
   try {
     const req2 = createRequire(import.meta.url);
     const corePkg = req2.resolve("@wrongstack/core/package.json");
-    return path39.join(path39.dirname(corePkg), "skills");
+    return path4.join(path4.dirname(corePkg), "skills");
   } catch {
     return void 0;
   }
@@ -21976,7 +22444,7 @@ async function boot(argv) {
     const created = await registerProjectAtBoot({ projectRoot, cwd, wpaths });
     if (created && isInteractiveTTY) {
       renderer.write(
-        color.dim(`  \u2713 Registered "${path39.basename(projectRoot)}" in projects.json.
+        color.dim(`  \u2713 Registered "${path4.basename(projectRoot)}" in projects.json.
 `)
       );
     }
@@ -22056,7 +22524,7 @@ async function boot(argv) {
     } catch {
     }
     printLaunchHints(renderer, flags, {
-      cursorFile: path39.join(wpaths.cacheDir, "hint-cursor")
+      cursorFile: path4.join(wpaths.cacheDir, "hint-cursor")
     });
   } else {
     const effectiveChoices = config.launch ? {
@@ -22094,7 +22562,7 @@ async function boot(argv) {
 }
 async function checkGitInCwd(opts) {
   const { cwd, renderer, reader } = opts;
-  const cwdGit = path39.join(cwd, ".git");
+  const cwdGit = path4.join(cwd, ".git");
   let hasCwdGit = false;
   try {
     await fsp5.access(cwdGit);
@@ -22134,10 +22602,10 @@ async function checkGitInCwd(opts) {
       }
     }
   }
-  const parentDir = path39.dirname(cwd);
+  const parentDir = path4.dirname(cwd);
   if (parentDir !== cwd) {
     try {
-      await fsp5.access(path39.join(parentDir, ".git"));
+      await fsp5.access(path4.join(parentDir, ".git"));
       renderer.write(
         `  ${color.dim("\u2139")} A ${color.bold(".git")} repo exists in the parent directory: ${color.dim(parentDir)}
 `
@@ -22149,7 +22617,7 @@ async function checkGitInCwd(opts) {
 async function registerProjectAtBoot(opts) {
   const { projectRoot, cwd, wpaths } = opts;
   const manifest = await loadManifest(wpaths.globalConfig);
-  const existed = manifest.projects.some((p) => path39.resolve(p.root) === path39.resolve(projectRoot));
+  const existed = manifest.projects.some((p) => path4.resolve(p.root) === path4.resolve(projectRoot));
   await touchProjectInManifest({
     projectRoot,
     globalConfigPath: wpaths.globalConfig,
@@ -22157,9 +22625,26 @@ async function registerProjectAtBoot(opts) {
   });
   return !existed;
 }
+function toolsForTier(tier, allTools) {
+  switch (tier) {
+    case "off":
+      return allTools;
+    case "minimal":
+    case "light":
+      return TIER1_TOOLS;
+    case "medium":
+      return [...TIER1_TOOLS, ...TIER2_TOOLS];
+    case "aggressive": {
+      const t2WithoutTask = TIER2_TOOLS.filter((t) => t.name !== "task");
+      const t3WithoutSetCwd = TIER3_TOOLS.filter((t) => t.name !== "setWorkingDir");
+      return [...TIER1_TOOLS, ...t2WithoutTask, ...t3WithoutSetCwd];
+    }
+  }
+}
 function registerBuiltinTools(deps) {
+  const tier = normalizeTokenSavingTier(deps.config.features.tokenSavingMode);
   const allTools = builtinToolsPack.tools ?? [];
-  const toolsToRegister = deps.config.features.tokenSavingMode ? TIER1_TOOLS : allTools;
+  const toolsToRegister = toolsForTier(tier, allTools);
   deps.toolRegistry.registerAllOrThrow([...toolsToRegister], builtinToolsPack.name);
   deps.toolRegistry.registerDefault(
     createContextManagerTool({ compactor: deps.compactor })
@@ -22350,7 +22835,7 @@ function resolveBundledSkillsDir2() {
   try {
     const req2 = createRequire(import.meta.url);
     const corePkg = req2.resolve("@wrongstack/core/package.json");
-    return path39.join(path39.dirname(corePkg), "skills");
+    return path4.join(path4.dirname(corePkg), "skills");
   } catch {
     return void 0;
   }
@@ -22838,7 +23323,7 @@ async function runRepl(opts) {
   clientMailbox.registerClient({
     clientId,
     sessionId: replProjectRoot,
-    name: `REPL [${path39.basename(replProjectRoot)}]`,
+    name: `REPL [${path4.basename(replProjectRoot)}]`,
     source: "repl",
     pid: process.pid
   }).then(() => {
@@ -23655,6 +24140,7 @@ function printBanner(renderer, projectName) {
 }
 
 // src/execution.ts
+init_provider_config_utils();
 init_utils();
 async function execute(deps) {
   const {
@@ -23874,8 +24360,8 @@ async function execute(deps) {
         result = await agent.run(query, { signal: ctrl.signal });
       } finally {
         process.off("SIGINT", onSigint);
-        const { getProcessRegistry: getProcessRegistry2 } = await import('@wrongstack/tools');
-        getProcessRegistry2().killAll();
+        const { getProcessRegistry: getProcessRegistry3 } = await import('@wrongstack/tools');
+        getProcessRegistry3().killAll();
       }
       const after = tokenCounter.total();
       const costAfter = tokenCounter.estimateCost().total;
@@ -23934,7 +24420,7 @@ async function execute(deps) {
       const { runTui } = await import('@wrongstack/tui');
       renderer.setSilent(true);
       const banneredFamily = savedProviderCfg?.family ?? resolvedProvider?.family;
-      const banneredKey = savedProviderCfg?.apiKey ?? config.apiKey ?? (resolvedProvider?.envVars ?? savedProviderCfg?.envVars ?? []).map((v) => process.env[v]).find((v) => !!v);
+      const banneredKey = (savedProviderCfg ? resolveActiveApiKey(savedProviderCfg) : void 0) ?? config.apiKey ?? (resolvedProvider?.envVars ?? savedProviderCfg?.envVars ?? []).map((v) => process.env[v]).find((v) => !!v);
       const banneredKeyTail = banneredKey && banneredKey.length >= 3 ? banneredKey.slice(-3) : void 0;
       const autoPhaseHandlers = /* @__PURE__ */ new Map();
       const subscribeAutoPhase = (handler) => {
@@ -23987,7 +24473,7 @@ async function execute(deps) {
       const onDirectorReady = (dir) => {
         if (autonomousCoordinator) return;
         const transcript = context.session.transcriptPath;
-        const sessionDir = transcript ? path39.dirname(transcript) : wpaths.projectDir;
+        const sessionDir = transcript ? path4.dirname(transcript) : wpaths.projectDir;
         const llmProvider = {
           decide: async (prompt) => {
             const sysPrompt = [
@@ -24041,8 +24527,12 @@ Reply with ONLY the JSON object.`
           mailbox,
           selfAgentId: `leader@${context.session.id ?? "unknown"}`,
           selfAgentName: "Leader",
-          llmProvider
+          llmProvider,
+          onCoordinatorEvent: (event) => {
+            for (const fn of coordinatorEvents) fn(event);
+          }
         });
+        deps.onCoordinatorStop = () => autonomousCoordinator?.stop();
       };
       if (director) onDirectorReady(director);
       const offDirectorSpawned = events.onPattern("subagent.spawned", () => {
@@ -24135,7 +24625,7 @@ Reply with ONLY the JSON object.`
               featureMemory: cfg.features?.memory !== false,
               featureSkills: cfg.features?.skills !== false,
               featureModelsRegistry: cfg.features?.modelsRegistry !== false,
-              featureTokenSaving: cfg.features?.tokenSavingMode ?? false,
+              featureTokenSaving: normalizeTokenSavingTier(cfg.features?.tokenSavingMode),
               allowOutsideProjectRoot: cfg.features?.allowOutsideProjectRoot ?? true,
               contextAutoCompact: cfg.context?.autoCompact !== false,
               contextStrategy: cfg.context?.strategy ?? "hybrid",
@@ -24143,6 +24633,7 @@ Reply with ONLY the JSON object.`
               auditLevel: cfg.session?.auditLevel ?? "standard",
               indexOnStart: cfg.indexing?.onSessionStart !== false,
               maxIterations: cfg.tools?.maxIterations ?? 500,
+              restrictFsToRoot: cfg.tools?.restrictToProjectRoot ?? false,
               autoProceedMaxIterations: cfg.autonomy?.autoProceedMaxIterations ?? 50,
               debugStream: cfg.debugStream ?? false,
               configScope: cfg.configScope ?? "global",
@@ -24150,7 +24641,9 @@ Reply with ONLY the JSON object.`
               enhanceEnabled: cfg.autonomy?.enhance ?? true,
               enhanceLanguage: cfg.autonomy?.enhanceLanguage === "english" ? "english" : "original",
               mouseMode: autonomy?.mouseMode ?? false,
-              autonomyNextPrompt: cfg.autonomy?.autonomyNextPrompt ?? "auto {{suggestion}}"
+              autonomyNextPrompt: cfg.autonomy?.autonomyNextPrompt ?? "auto {{suggestion}}",
+              breakerEnabled: cfg.circuitBreaker?.enabled === true,
+              breakerAutoKillResetMs: cfg.circuitBreaker?.autoKillResetMs ?? 6e4
             };
           },
           async saveSettings(s) {
@@ -24179,7 +24672,7 @@ Reply with ONLY the JSON object.`
                     a["autoProceedMaxIterations"] = s.autoProceedMaxIterations;
                 }
               );
-              if (s.featureMcp !== void 0 || s.featurePlugins !== void 0 || s.featureMemory !== void 0 || s.featureSkills !== void 0 || s.featureModelsRegistry !== void 0 || s.featureTokenSaving !== void 0 || s.allowOutsideProjectRoot !== void 0 || s.contextAutoCompact !== void 0 || s.contextStrategy !== void 0 || s.logLevel !== void 0 || s.auditLevel !== void 0 || s.indexOnStart !== void 0 || s.maxIterations !== void 0 || s.nextPrediction !== void 0 || s.debugStream !== void 0 || s.configScope !== void 0 || s.enhanceDelayMs !== void 0) {
+              if (s.featureMcp !== void 0 || s.featurePlugins !== void 0 || s.featureMemory !== void 0 || s.featureSkills !== void 0 || s.featureModelsRegistry !== void 0 || s.featureTokenSaving !== void 0 || s.allowOutsideProjectRoot !== void 0 || s.contextAutoCompact !== void 0 || s.contextStrategy !== void 0 || s.logLevel !== void 0 || s.auditLevel !== void 0 || s.indexOnStart !== void 0 || s.maxIterations !== void 0 || s.restrictFsToRoot !== void 0 || s.nextPrediction !== void 0 || s.debugStream !== void 0 || s.configScope !== void 0 || s.enhanceDelayMs !== void 0) {
                 const configScope = s.configScope ?? configStore.get().configScope ?? "global";
                 const targetPath = configScope === "project" && wpaths.inProjectConfig ? wpaths.inProjectConfig : wpaths.globalConfig;
                 let raw;
@@ -24231,11 +24724,18 @@ Reply with ONLY the JSON object.`
                   idx.onSessionStart = s.indexOnStart;
                   decrypted.indexing = idx;
                 }
-                if (s.maxIterations !== void 0) {
+                if (s.maxIterations !== void 0 || s.restrictFsToRoot !== void 0) {
                   const tools = decrypted.tools ?? {};
-                  tools.maxIterations = s.maxIterations;
+                  if (s.maxIterations !== void 0) tools.maxIterations = s.maxIterations;
+                  if (s.restrictFsToRoot !== void 0)
+                    tools.restrictToProjectRoot = s.restrictFsToRoot;
                   decrypted.tools = tools;
                 }
+                if (s.restrictFsToRoot !== void 0) {
+                  const features = decrypted.features ?? {};
+                  features.allowOutsideProjectRoot = !s.restrictFsToRoot;
+                  decrypted.features = features;
+                }
                 if (s.debugStream !== void 0) {
                   decrypted.debugStream = s.debugStream;
                   const { setDebugStreamEnabled } = await import('@wrongstack/providers');
@@ -24257,7 +24757,7 @@ Reply with ONLY the JSON object.`
                 const toWrite = targetPath === wpaths.globalConfig ? decrypted : filterSafeForProject(decrypted);
                 const encrypted = encryptConfigSecrets(toWrite, noOpVault);
                 if (targetPath !== wpaths.globalConfig) {
-                  await fsp5.mkdir(path39.dirname(targetPath), { recursive: true });
+                  await fsp5.mkdir(path4.dirname(targetPath), { recursive: true });
                 }
                 await atomicWrite(targetPath, JSON.stringify(encrypted, null, 2), { mode: 384 });
                 configStore.update({
@@ -24267,7 +24767,7 @@ Reply with ONLY the JSON object.`
                   ...s.logLevel !== void 0 ? { log: decrypted.log } : {},
                   ...s.auditLevel !== void 0 ? { session: decrypted.session } : {},
                   ...s.indexOnStart !== void 0 ? { indexing: decrypted.indexing } : {},
-                  ...s.maxIterations !== void 0 ? { tools: decrypted.tools } : {},
+                  ...s.maxIterations !== void 0 || s.restrictFsToRoot !== void 0 ? { tools: decrypted.tools } : {},
                   ...s.debugStream !== void 0 ? { debugStream: s.debugStream } : {},
                   ...s.configScope !== void 0 ? { configScope: s.configScope } : {},
                   ...s.enhanceDelayMs !== void 0 ? {
@@ -24329,6 +24829,18 @@ Reply with ONLY the JSON object.`
               coordinatorEvents.delete(fn);
             };
           },
+          onCoordinatorStart: (goal) => {
+            if (!autonomousCoordinator) {
+              console.error("[coordinator] not ready \u2014 no director yet (spawn a subagent first)");
+              return;
+            }
+            autonomousCoordinator.run({ goal: goal ?? "" }).catch((err) => {
+              console.error("[coordinator] run() failed:", err);
+            });
+          },
+          onCoordinatorStop: () => {
+            autonomousCoordinator?.stop();
+          },
           // /clear: signal the TUI to wipe entries and reset fleet/leader stats
           // AND bump the context chip version — so the display reflects a
           // completely fresh session after the backend has been cleared.
@@ -24346,7 +24858,7 @@ Reply with ONLY the JSON object.`
           agentsMonitorController,
           getLiveSessions: async () => {
             const { SessionRegistry } = await import('@wrongstack/core');
-            const globalRoot = path39.dirname(wpaths.globalConfig);
+            const globalRoot = path4.dirname(wpaths.globalConfig);
             const registry = new SessionRegistry(globalRoot);
             const sessions = await registry.list();
             return sessions.filter((s) => s.status !== "stale").map((s) => ({
@@ -24475,7 +24987,7 @@ Reply with ONLY the JSON object.`
             if (!sessionStore) return null;
             try {
               const { SessionRegistry } = await import('@wrongstack/core');
-              const registry = new SessionRegistry(path39.dirname(wpaths.globalConfig));
+              const registry = new SessionRegistry(path4.dirname(wpaths.globalConfig));
               const live = (await registry.list()).find(
                 (s) => s.sessionId === sessionId && s.status !== "stale" && s.pid !== process.pid
               );
@@ -24613,7 +25125,7 @@ Reply with ONLY the JSON object.`
               if (slug === "new-session") {
                 pendingProjectSwitch = {
                   root: projectRoot,
-                  name: path39.basename(projectRoot) || projectRoot
+                  name: path4.basename(projectRoot) || projectRoot
                 };
               }
               return;
@@ -24667,7 +25179,7 @@ ${parts.join("\n")}
           },
           // `wrongstack quick` sets flags.quick — open the F3 agents monitor by default.
           initialAgentsMonitorOpen: !!flags.quick,
-          tokenSavingMode: config.features.tokenSavingMode,
+          tokenSavingMode: normalizeTokenSavingTier(config.features.tokenSavingMode) !== "off",
           toolCount: agent.tools.list().length
         });
         if (code === PROJECT_SWITCH_EXIT_CODE && pendingProjectSwitch) {
@@ -24679,8 +25191,8 @@ ${parts.join("\n")}
           try {
             const req2 = createRequire8(import.meta.url);
             const pkgPath = req2.resolve("@wrongstack/cli/package.json");
-            const pkgDir = path39.dirname(pkgPath);
-            cliPath = path39.join(pkgDir, "dist", "index.js");
+            const pkgDir = path4.dirname(pkgPath);
+            cliPath = path4.join(pkgDir, "dist", "index.js");
             await fsp5.access(cliPath);
           } catch {
             cliPath = process.argv[1] ?? "";
@@ -24741,6 +25253,23 @@ ${parts.join("\n")}
         modeStore,
         modeId,
         needsSetup,
+        // Print the "open this" banner only once the server is actually
+        // listening, using the RESOLVED ports. The requested port
+        // (flags.port) auto-advances past busy ports inside runWebUI, so a
+        // banner printed up-front with flags.port lies whenever 3456/3457 are
+        // taken (a second instance, leftover sockets). Bind is 127.0.0.1-only,
+        // so the host must be the literal IPv4 loopback — `localhost` resolves
+        // to `::1` first on Windows and never reaches the server.
+        onListening: ({ httpPort: boundHttpPort }) => {
+          renderer.writeInfo(
+            color.green(
+              `  \u2726 WebUI running \u2192 ${color.bold(`http://127.0.0.1:${boundHttpPort}`)}`
+            )
+          );
+          renderer.writeInfo(
+            color.dim("  Press Ctrl+C in this terminal to stop the WebUI server.\n")
+          );
+        },
         // Make autonomy.switch from the browser flip the CLI's real
         // autonomy mode — context.meta alone never reaches the run loop.
         onAutonomySwitch: (mode) => {
@@ -24749,12 +25278,6 @@ ${parts.join("\n")}
           }
         }
       });
-      renderer.writeInfo(
-        color.green(
-          `  \u2726 WebUI running \u2192 ${color.bold(`http://localhost:${Number.parseInt(String(flags.port ?? "3457"), 10)}`)}`
-        )
-      );
-      renderer.writeInfo(color.dim("  Press Ctrl+C in this terminal to stop the WebUI server.\n"));
       const webuiExit = new Promise((resolve11) => {
         const onSigint = () => {
           renderer.setSilent(false);
@@ -24789,7 +25312,7 @@ ${parts.join("\n")}
         supportsVision,
         attachments,
         effectiveMaxContext,
-        projectName: path39.basename(projectRoot) || void 0,
+        projectName: path4.basename(projectRoot) || void 0,
         getAutonomy,
         onAutonomy,
         getNextPredict,
@@ -24827,6 +25350,7 @@ ${parts.join("\n")}
     }
   } finally {
     fleetStatusLine?.stop();
+    deps.onCoordinatorStop?.();
     try {
       stats.render(renderer);
     } catch (_err) {
@@ -25011,7 +25535,7 @@ var MultiAgentHost = class _MultiAgentHost {
       doneCondition: { type: "all_tasks_done" },
       maxConcurrent: this.opts.maxConcurrent ?? 4
     };
-    const defaultScratchpad = this.opts.sharedScratchpadPath || (this.opts.sessionsRoot && this.opts.directorRunId ? path39.join(this.opts.sessionsRoot, this.opts.directorRunId, "shared") : void 0);
+    const defaultScratchpad = this.opts.sharedScratchpadPath || (this.opts.sessionsRoot && this.opts.directorRunId ? path4.join(this.opts.sessionsRoot, this.opts.directorRunId, "shared") : void 0);
     this.director = new Director({
       config: coordinatorConfig,
       manifestPath: this.opts.manifestPath,
@@ -25210,6 +25734,8 @@ var MultiAgentHost = class _MultiAgentHost {
         tokenCounter: this.deps.tokenCounter,
         cwd: subCwd,
         projectRoot: this.deps.projectRoot,
+        // Subagents inherit the leader's filesystem-access scope.
+        allowOutsideProjectRoot: config.features?.allowOutsideProjectRoot ?? !(config.tools?.restrictToProjectRoot ?? false),
         model: effModel,
         tools: this.filterTools(tools),
         // Distinct mailbox identity: without these, every subagent fell back
@@ -25568,16 +26094,16 @@ var MultiAgentHost = class _MultiAgentHost {
     if (this.director) return this.director;
     this.opts.directorMode = true;
     if (this.opts.fleetRoot && !this.opts.manifestPath) {
-      this.opts.manifestPath = path39.join(this.opts.fleetRoot, "fleet.json");
+      this.opts.manifestPath = path4.join(this.opts.fleetRoot, "fleet.json");
     }
     if (this.opts.fleetRoot && !this.opts.sharedScratchpadPath) {
-      this.opts.sharedScratchpadPath = path39.join(this.opts.fleetRoot, "shared");
+      this.opts.sharedScratchpadPath = path4.join(this.opts.fleetRoot, "shared");
     }
     if (this.opts.fleetRoot && !this.opts.sessionsRoot) {
-      this.opts.sessionsRoot = path39.join(this.opts.fleetRoot, "subagents");
+      this.opts.sessionsRoot = path4.join(this.opts.fleetRoot, "subagents");
     }
     if (this.opts.fleetRoot && !this.opts.stateCheckpointPath) {
-      this.opts.stateCheckpointPath = path39.join(this.opts.fleetRoot, "director-state.json");
+      this.opts.stateCheckpointPath = path4.join(this.opts.fleetRoot, "director-state.json");
     }
     await this.ensureDirector();
     return this.director ?? null;
@@ -25706,11 +26232,11 @@ var SessionStats = class {
       if (tool.name === "bash") this.bashCommands++;
       else if (tool.name === "fetch") this.fetches++;
       if (!tool.ok) return;
-      const path40 = typeof input?.path === "string" ? input.path : void 0;
-      if (tool.name === "read" && path40) this.readPaths.add(path40);
-      else if (tool.name === "edit" && path40) this.editedPaths.add(path40);
-      else if (tool.name === "write" && path40) {
-        this.writtenPaths.add(path40);
+      const path39 = typeof input?.path === "string" ? input.path : void 0;
+      if (tool.name === "read" && path39) this.readPaths.add(path39);
+      else if (tool.name === "edit" && path39) this.editedPaths.add(path39);
+      else if (tool.name === "write" && path39) {
+        this.writtenPaths.add(path39);
         const content = typeof input?.content === "string" ? input.content : "";
         this.bytesWritten += Buffer.byteLength(content, "utf8");
       }
@@ -26022,7 +26548,7 @@ async function setupCodebaseIndexing(deps) {
           if (tool?.mutating && FILE_EDIT_TOOLS.has(tool.name)) {
             const fp = payload.toolUse.input?.file_path;
             if (typeof fp === "string" && fp.length > 0) {
-              const abs = path39.resolve(payload.ctx.cwd, fp);
+              const abs = path4.resolve(payload.ctx.cwd, fp);
               if (isIndexableFile(abs)) {
                 enqueueReindex({ projectRoot, files: [abs], debounceMs, onError });
               }
@@ -26041,7 +26567,7 @@ async function setupCodebaseIndexing(deps) {
         if (!filename) return;
         const rel = filename.toString();
         if (isIgnored(rel)) return;
-        const abs = path39.resolve(projectRoot, rel);
+        const abs = path4.resolve(projectRoot, rel);
         if (!isIndexableFile(abs)) return;
         enqueueReindex({ projectRoot, files: [abs], debounceMs, onError });
       });
@@ -26095,7 +26621,7 @@ function setupMetrics(params) {
   const dumpMetrics = () => {
     if (!metricsSink) return;
     try {
-      const out = path39.join(wpaths.projectSessions, "metrics.json");
+      const out = path4.join(wpaths.projectSessions, "metrics.json");
       const snap = metricsSink.snapshot();
       writeFileSync(out, JSON.stringify(snap, null, 2));
     } catch {
@@ -26335,7 +26861,7 @@ async function setupSession(params) {
     );
   });
   const attachments = new DefaultAttachmentStore({
-    spoolDir: path39.join(wpaths.projectSessions, session?.id, "attachments")
+    spoolDir: path4.join(wpaths.projectSessions, session?.id, "attachments")
   });
   const ctxSignal = new AbortController().signal;
   const traceId = randomBytes(16).toString("hex");
@@ -26347,11 +26873,15 @@ async function setupSession(params) {
     tokenCounter,
     cwd,
     projectRoot,
+    // Filesystem-access scope: derived from features.allowOutsideProjectRoot,
+    // falling back to the old tools.restrictToProjectRoot config key (inverted:
+    // restrict=false in old config → allow=true in new). Togglable live via
+    // `/settings` ("Allow outside project").
+    allowOutsideProjectRoot: config.features?.allowOutsideProjectRoot ?? !(config.tools?.restrictToProjectRoot ?? false),
     model: config.model,
     agentId: "leader",
     agentName: "Leader Agent",
-    traceId,
-    allowOutsideProjectRoot: config.features?.allowOutsideProjectRoot ?? true
+    traceId
   });
   context.meta["packageTrackerOpts"] = {
     storageDir: wpaths.projectDir,
@@ -26359,11 +26889,11 @@ async function setupSession(params) {
   };
   if (restoredMessages.length > 0) context.state.replaceMessages(restoredMessages);
   const queueStore = new QueueStore({
-    dir: path39.join(wpaths.projectSessions, session?.id),
+    dir: path4.join(wpaths.projectSessions, session?.id),
     ...eventsBus ? { events: eventsBus } : {},
     ...traceId ? { traceId } : {}
   });
-  const todosCheckpointPath = path39.join(wpaths.projectSessions, `${session?.id}.todos.json`);
+  const todosCheckpointPath = path4.join(wpaths.projectSessions, `${session?.id}.todos.json`);
   if (resumeId) {
     try {
       const restoredTodos = await loadTodosCheckpoint(
@@ -26387,15 +26917,15 @@ async function setupSession(params) {
     eventsBus,
     traceId
   );
-  const planPath = path39.join(wpaths.projectSessions, `${session?.id}.plan.json`);
+  const planPath = path4.join(wpaths.projectSessions, `${session?.id}.plan.json`);
   context.state.setMeta("plan.path", planPath);
-  const taskPath = path39.join(wpaths.projectSessions, `${session?.id}.tasks.json`);
+  const taskPath = path4.join(wpaths.projectSessions, `${session?.id}.tasks.json`);
   context.state.setMeta("task.path", taskPath);
   let dirState;
   if (resumeId) {
     try {
-      const fleetRoot = path39.join(wpaths.projectSessions, session?.id);
-      dirState = await loadDirectorState(path39.join(fleetRoot, "director-state.json"));
+      const fleetRoot = path4.join(wpaths.projectSessions, session?.id);
+      dirState = await loadDirectorState(path4.join(fleetRoot, "director-state.json"));
       if (dirState) {
         const tCounts = {};
         for (const t of dirState.tasks) tCounts[t.status] = (tCounts[t.status] ?? 0) + 1;
@@ -26642,7 +27172,7 @@ async function main(argv) {
       projectGoal: wpaths.projectGoal,
       projectSessions: wpaths.projectSessions
     },
-    pathJoiner: { join: (a, b) => path39.join(a, b) },
+    pathJoiner: { join: (a, b) => path4.join(a, b) },
     systemPromptBuilderToken: TOKENS.SystemPromptBuilder
   });
   const toolRegistry = new ToolRegistry();
@@ -26737,6 +27267,49 @@ async function main(argv) {
     writeErr(color.red(`  \u2717 ${p.description}
 `));
   });
+  const cliClientId = `cli@${randomBytes(4).toString("hex")}`;
+  let cliToolCalls = 0;
+  let cliInputTokens = 0;
+  let cliOutputTokens = 0;
+  let cliCacheTokens = 0;
+  let cliCostUsd = 0;
+  const emitClientStatus = () => {
+    events.emit("client.status", {
+      clientType: "cli",
+      clientId: cliClientId,
+      projectHash: wpaths.projectSlug,
+      agentCount: 1,
+      model: config.model,
+      mode: activeMode?.id ?? "off",
+      toolCalls: cliToolCalls,
+      inputTokens: cliInputTokens,
+      outputTokens: cliOutputTokens,
+      cacheTokens: cliCacheTokens,
+      costUsd: cliCostUsd,
+      timestamp: Date.now(),
+      projectSlug: wpaths.projectSlug
+    });
+  };
+  evOn("tool.executed", () => {
+    cliToolCalls++;
+    emitClientStatus();
+  });
+  evOn("provider.response", (e) => {
+    if (e.usage) {
+      cliInputTokens = e.usage.input ?? cliInputTokens;
+      cliOutputTokens = e.usage.output ?? cliOutputTokens;
+      cliCacheTokens = (e.usage.cacheRead ?? 0) + (e.usage.cacheWrite ?? 0);
+    }
+    emitClientStatus();
+  });
+  evOn("token.accounted", (e) => {
+    cliCostUsd = e.cost.total;
+    emitClientStatus();
+  });
+  evOn("iteration.completed", () => {
+    emitClientStatus();
+  });
+  emitClientStatus();
   const promptBuilder = container.resolve(TOKENS.SystemPromptBuilder);
   let onlineAgents = [];
   try {
@@ -26780,10 +27353,10 @@ async function main(argv) {
   memoryStore.withTraceId(sessResult.traceId);
   let tracker;
   try {
-    const { getSessionRegistry, AgentStatusTracker } = await import('@wrongstack/core');
+    const { getSessionRegistry, AgentStatusTracker, FleetNotifier } = await import('@wrongstack/core');
     const registry = getSessionRegistry(wpaths.globalRoot);
-    const projectSlug2 = path39.basename(wpaths.projectDir);
-    const projectName = path39.basename(projectRoot);
+    const projectSlug2 = path4.basename(wpaths.projectDir);
+    const projectName = path4.basename(projectRoot);
     let gitBranch;
     try {
       const { execSync } = await import('child_process');
@@ -26803,13 +27376,22 @@ async function main(argv) {
       projectName,
       workingDir: context.workingDir,
       gitBranch,
+      // The TUI and the REPL both boot through cli-main; `tuiOwnsScreen`
+      // distinguishes the surface so the Fleet HQ map can label this session.
+      clientType: tuiOwnsScreen ? "tui" : "cli",
       pid: process.pid,
       startedAt: (/* @__PURE__ */ new Date()).toISOString()
     });
-    tracker = new AgentStatusTracker({ events, registry });
+    const fleetNotifier = new FleetNotifier({
+      baseDir: wpaths.globalRoot,
+      projectRoot,
+      selfPid: process.pid
+    });
+    tracker = new AgentStatusTracker({ events, registry, onUpdate: () => fleetNotifier.notify() });
     tracker.start();
     const cleanup = async () => {
       try {
+        fleetNotifier.dispose();
         await registry.markClosing();
         tracker?.stop();
       } catch {
@@ -26882,7 +27464,7 @@ async function main(argv) {
     if (e.ok && (e.name === "write" || e.name === "edit" || e.name === "replace" || e.name === "patch")) {
       const filePath = e.input?.path;
       if (filePath) {
-        const projectDir = path39.join(wpaths.globalRoot, "projects", wpaths.projectSlug);
+        const projectDir = path4.join(wpaths.globalRoot, "projects", wpaths.projectSlug);
         void recordFileAction(
           { storageDir: projectDir, projectRoot },
           {
@@ -27012,7 +27594,7 @@ async function main(argv) {
     toolRegistry,
     events,
     log: logger,
-    lazyMode: config.features.tokenSavingMode
+    lazyMode: normalizeTokenSavingTier(config.features.tokenSavingMode) !== "off"
   });
   if (config.features.mcp) {
     for (const cfg of Object.values(config.mcpServers ?? {})) {
@@ -27048,7 +27630,7 @@ async function main(argv) {
   let depWatcherDispose;
   if (dwCfg?.["enabled"] === true) {
     try {
-      const projectDir = path39.join(wpaths.globalRoot, "projects", wpaths.projectSlug);
+      const projectDir = path4.join(wpaths.globalRoot, "projects", wpaths.projectSlug);
       const dwMailbox = new GlobalMailbox(projectDir, events);
       depWatcherDispose = attachDepWatcherBridge({
         events,
@@ -27147,12 +27729,12 @@ async function main(argv) {
       }
     }
   };
-  const fleetRoot = directorMode ? path39.join(wpaths.projectSessions, session.id) : void 0;
-  const manifestPath = directorMode ? typeof process.env["WRONGSTACK_FLEET_MANIFEST"] === "string" ? process.env["WRONGSTACK_FLEET_MANIFEST"] : path39.join(expectDefined(fleetRoot), "fleet.json") : void 0;
-  const sharedScratchpadPath = directorMode ? path39.join(expectDefined(fleetRoot), "shared") : void 0;
-  const subagentSessionsRoot = directorMode ? path39.join(expectDefined(fleetRoot), "subagents") : void 0;
-  const stateCheckpointPath = directorMode ? path39.join(expectDefined(fleetRoot), "director-state.json") : void 0;
-  const fleetRootForPromotion = path39.join(wpaths.projectSessions, session.id);
+  const fleetRoot = directorMode ? path4.join(wpaths.projectSessions, session.id) : void 0;
+  const manifestPath = directorMode ? typeof process.env["WRONGSTACK_FLEET_MANIFEST"] === "string" ? process.env["WRONGSTACK_FLEET_MANIFEST"] : path4.join(expectDefined(fleetRoot), "fleet.json") : void 0;
+  const sharedScratchpadPath = directorMode ? path4.join(expectDefined(fleetRoot), "shared") : void 0;
+  const subagentSessionsRoot = directorMode ? path4.join(expectDefined(fleetRoot), "subagents") : void 0;
+  const stateCheckpointPath = directorMode ? path4.join(expectDefined(fleetRoot), "director-state.json") : void 0;
+  const fleetRootForPromotion = path4.join(wpaths.projectSessions, session.id);
   const brainSettings = {
     maxAutoRisk: "medium"
   };
@@ -27295,7 +27877,7 @@ async function main(argv) {
   let techStackConsumerDispose;
   if (dwCfg?.["enabled"] === true) {
     try {
-      const projectDir = path39.join(wpaths.globalRoot, "projects", wpaths.projectSlug);
+      const projectDir = path4.join(wpaths.globalRoot, "projects", wpaths.projectSlug);
       const tsMailbox = new GlobalMailbox(projectDir, events);
       const fileAuthorOpts = {
         storageDir: projectDir,
@@ -27328,7 +27910,7 @@ async function main(argv) {
   let pkgOutdatedDispose;
   if (dwCfg?.["enabled"] === true) {
     try {
-      const projectDir = path39.join(wpaths.globalRoot, "projects", wpaths.projectSlug);
+      const projectDir = path4.join(wpaths.globalRoot, "projects", wpaths.projectSlug);
       const pkgMailbox = new GlobalMailbox(projectDir, events);
       const pkgTrackerOpts = {
         storageDir: projectDir,
@@ -27702,7 +28284,7 @@ ${color.dim("\u2500".repeat(40))}` : "";
       return director.spawn(cfg);
     },
     onFleetLog: async (subagentId, mode) => {
-      const subagentsRoot = path39.join(fleetRootForPromotion, "subagents");
+      const subagentsRoot = path4.join(fleetRootForPromotion, "subagents");
       let runDirs;
       try {
         runDirs = await fsp5.readdir(subagentsRoot);
@@ -27711,7 +28293,7 @@ ${color.dim("\u2500".repeat(40))}` : "";
       }
       const found = [];
       for (const runId of runDirs) {
-        const runDir = path39.join(subagentsRoot, runId);
+        const runDir = path4.join(subagentsRoot, runId);
         let files;
         try {
           files = await fsp5.readdir(runDir);
@@ -27720,7 +28302,7 @@ ${color.dim("\u2500".repeat(40))}` : "";
         }
         for (const f of files) {
           if (!f.endsWith(".jsonl")) continue;
-          const full = path39.join(runDir, f);
+          const full = path4.join(runDir, f);
           try {
             const stat7 = await fsp5.stat(full);
             found.push({
@@ -27821,7 +28403,7 @@ ${color.dim("\u2500".repeat(40))}` : "";
       }
       const dir = await multiAgentHost.ensureDirector();
       if (!dir) return "Director is not available.";
-      const dirStatePath = path39.join(fleetRootForPromotion, "director-state.json");
+      const dirStatePath = path4.join(fleetRootForPromotion, "director-state.json");
       const prior = await loadDirectorState(dirStatePath);
       if (!prior) {
         return "No prior director-state.json found \u2014 nothing to retry.";
@@ -27890,9 +28472,9 @@ ${color.dim("\u2500".repeat(40))}` : "";
       for (const tool of director2.tools(FLEET_ROSTER)) {
         toolRegistry.register(tool);
       }
-      const mp = path39.join(fleetRootForPromotion, "fleet.json");
-      const sp = path39.join(fleetRootForPromotion, "shared");
-      const ss = path39.join(fleetRootForPromotion, "subagents");
+      const mp = path4.join(fleetRootForPromotion, "fleet.json");
+      const sp = path4.join(fleetRootForPromotion, "shared");
+      const ss = path4.join(fleetRootForPromotion, "subagents");
       const lines = [
         `${color.green("\u2713")} Promoted to director mode.`,
         `  Roster: ${Object.keys(FLEET_ROSTER).join(", ")}`,
@@ -28261,6 +28843,13 @@ Restart WrongStack to load or unload plugin code in this session.`;
         if (s.contextAutoCompact !== void 0) {
           autoCompactor?.setEnabled(s.contextAutoCompact);
         }
+        if (s.restrictFsToRoot !== void 0) {
+          context.allowOutsideProjectRoot = !s.restrictFsToRoot;
+          config = patchConfig(config, {
+            features: { ...config.features, allowOutsideProjectRoot: !s.restrictFsToRoot },
+            tools: { ...config.tools, restrictToProjectRoot: s.restrictFsToRoot }
+          });
+        }
       } catch {
       }
     },