@wrongstack/cli 0.272.1 → 0.273.0

package/dist/index.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { color, writeErr, loadPlugins, renderProgress, SpecStore, TaskGraphStore, analyzeCriticalPath, getTemplate, listTemplates, templateToMarkdown, SpecParser, renderSpecAnalysis, AISpecBuilder, expectDefined, DefaultTaskStore, TaskTracker, renderTaskGraph, withFileLock, resolveHqDataDir, ensureHqFirstRunAuthFile, DEFAULT_HQ_REDACTION_POLICY, watchHqAuthFile, parseHqFrame, HQ_PROTOCOL_VERSION, parseHqEventPayload, scrubAndTruncateHqPreview, DefaultSecretScrubber, projectHash, wstackGlobalRoot, TOKENS, ToolRegistry, GlobalMailbox, resolveSessionLoggingConfig, createSessionEventBridge, HookRegistry, HookRunner, normalizeTokenSavingTier, SlashCommandRegistry, attachDepWatcherBridge, SessionMemoryConsolidator, BrainDecisionQueue, ObservableBrainArbiter, HumanEscalatingBrainArbiter, createTieredBrainArbiter, DefaultBrainArbiter, BrainMonitor, mailboxSessionTag, createDelegateTool, FLEET_ROSTER, createMcpControlTool, startTechStackConsumer, startPackageOutdatedWatcher, recordFileAction, createAutonomyBrain, DefaultPluginAPI, SpecVersioning, buildTranscriptFromEvents, DEFAULT_CONTEXT_WINDOW_MODE_ID, resolveProjectDir, recentTextTurns, gatedEnhancerReasoning, enhanceUserPrompt, projectSlug, DefaultSystemPromptBuilder, mutateTasks, loadTasks, resolveContextWindowPolicy, repairToolUseAdjacency, mutatePlan, setPlanItemStatus, getPlanTemplate, loadPlan, emptyPlan, addPlanItem, savePlan, resolveProviderModelList, DefaultLogger, DefaultModelsRegistry, isStdinTTY, atomicWrite, DefaultPathResolver, EventBus, runProviderWithRetry, ReplayLogStore, ReplayProviderRunner, mergeCustomModelDefs, makeAutonomyPromptContributor, createContextManagerTool, makeMailboxTool, makeMailSendTool, makeMailInboxTool, InMemoryMetricsSink, wireMetricsToEvents, DefaultHealthRegistry, startMetricsServer, createHqPublisherFromEnv, DEFAULT_SESSION_PRUNE_DAYS, RecoveryLock, DefaultAttachmentStore, Context, QueueStore, loadTodosCheckpoint, attachTodosCheckpoint, loadDirectorState, createDefaultPipelines, applyModelRuntime, resolveAuditLevel, AutoCompactionMiddleware, estimateRequestTokensCalibrated, Agent, FleetManager, makeDirectorSessionFactory, Director, makeFleetEmitTool, makeFleetStatusTool, AdaptiveConcurrencyController, resolveModelMatrix, DEFAULT_SUBAGENT_BASELINE, AutoApprovePermissionPolicy, WIDE_SUBAGENT_CAPABILITIES, PhaseStore, AutoPhasePlanner, PhaseGraphBuilder, WorktreeManager, PhaseOrchestrator, makeLLMClassifier, writeOut, ParallelEternalEngine, EternalAutonomyEngine, allServers as allServers$1, CHIMERA_REVIEW_PROMPT, setQueuedMessagesSnapshot, DefaultSessionRewinder, bootConfig as bootConfig$1, setOutputLineGuard, setRawMode, DefaultSessionReader, resolveWstackPaths, ToolAuditLog, DefaultSessionStore as DefaultSessionStore$1, ProviderRegistry, StreamHangError, ProviderError, makeAgentSubagentRunner, NULL_FLEET_BUS, buildChildEnv, formatContextWindowModeList, getContextWindowMode, AGENT_CATALOG, dispatchAgent, noOpVault, formatTodosList, formatTaskList, formatTaskProgress, formatPlan, SessionRecovery, loadGoal, goalFilePath, summarizeUsage, saveGoal, formatGoal, emptyGoal, buildGoalPreamble, pendingBtwCount, setBtwNote, readHqRuntimeFileSync, resolveHqConfig, MATRIX_PHASE_KEYS, matrixKeyKind, phaseForRole, onResize, InputBuilder, DefaultSecretVault, decryptConfigSecrets as decryptConfigSecrets$1, encryptConfigSecrets as encryptConfigSecrets$1, HQ_AUTH_FILE_VERSION, FsError, ERROR_CODES, truncate, estimateMessageTokens, AGENTS_BY_PHASE, validateAgainstSchema, ConfigError, resolveMailboxIdentity, AutonomousCoordinator, mutateHqAuthFile, mintHqToken, readHqAuthFile, DefaultTokenCounter, isSecretField as isSecretField$1, startSessionTelemetryBridge } from '@wrongstack/core';
+import { color, writeErr, loadPlugins, renderProgress, SpecStore, TaskGraphStore, analyzeCriticalPath, getTemplate, listTemplates, templateToMarkdown, SpecParser, renderSpecAnalysis, AISpecBuilder, expectDefined, DefaultTaskStore, TaskTracker, renderTaskGraph, withFileLock, resolveHqDataDir, ensureHqFirstRunAuthFile, DEFAULT_HQ_REDACTION_POLICY, watchHqAuthFile, parseHqFrame, HQ_PROTOCOL_VERSION, parseHqEventPayload, scrubAndTruncateHqPreview, DefaultSecretScrubber, resolveWstackPaths, projectHash, wstackGlobalRoot, TOKENS, ToolRegistry, GlobalMailbox, resolveSessionLoggingConfig, createSessionEventBridge, HookRegistry, HookRunner, normalizeTokenSavingTier, SlashCommandRegistry, attachDepWatcherBridge, createFallbackModelExtension, SessionMemoryConsolidator, BrainDecisionQueue, ObservableBrainArbiter, HumanEscalatingBrainArbiter, createTieredBrainArbiter, DefaultBrainArbiter, BrainMonitor, mailboxSessionTag, createDelegateTool, FLEET_ROSTER, createMcpControlTool, startTechStackConsumer, startPackageOutdatedWatcher, SddRunRegistry, recordFileAction, createAutonomyBrain, DefaultPluginAPI, SpecVersioning, buildTranscriptFromEvents, DEFAULT_CONTEXT_WINDOW_MODE_ID, resolveProjectDir, recentTextTurns, gatedEnhancerReasoning, enhanceUserPrompt, projectSlug, DefaultSystemPromptBuilder, mutateTasks, loadTasks, resolveContextWindowPolicy, repairToolUseAdjacency, mutatePlan, setPlanItemStatus, getPlanTemplate, loadPlan, emptyPlan, addPlanItem, savePlan, resolveProviderModelList, DefaultLogger, DefaultModelsRegistry, isStdinTTY, atomicWrite, DefaultPathResolver, EventBus, runProviderWithRetry, ReplayLogStore, ReplayProviderRunner, mergeCustomModelDefs, makeAutonomyPromptContributor, createContextManagerTool, makeMailboxTool, makeMailSendTool, makeMailInboxTool, applyToolDescriptionModes, InMemoryMetricsSink, wireMetricsToEvents, DefaultHealthRegistry, startMetricsServer, createHqPublisherFromEnv, DEFAULT_SESSION_PRUNE_DAYS, RecoveryLock, DefaultAttachmentStore, Context, QueueStore, loadTodosCheckpoint, attachTodosCheckpoint, loadDirectorState, createDefaultPipelines, applyModelRuntime, resolveAuditLevel, AutoCompactionMiddleware, estimateRequestTokensCalibrated, Agent, FleetManager, makeDirectorSessionFactory, Director, makeFleetEmitTool, AdaptiveConcurrencyController, resolveModelMatrix, DEFAULT_SUBAGENT_BASELINE, AutoApprovePermissionPolicy, WIDE_SUBAGENT_CAPABILITIES, PhaseStore, AutoPhasePlanner, PhaseGraphBuilder, WorktreeManager, PhaseOrchestrator, assignNickname, makeLLMClassifier, writeOut, ParallelEternalEngine, EternalAutonomyEngine, allServers as allServers$1, CHIMERA_REVIEW_PROMPT, setQueuedMessagesSnapshot, DefaultSessionRewinder, bootConfig as bootConfig$1, setOutputLineGuard, setRawMode, DefaultSessionReader, ToolAuditLog, DefaultSessionStore as DefaultSessionStore$1, ProviderRegistry, makeAgentSubagentRunner, NULL_FLEET_BUS, buildChildEnv, formatContextWindowModeList, getContextWindowMode, AGENT_CATALOG, dispatchAgent, normalizeToolDescriptionMode, setToolDescriptionMode, getToolDescriptionMode, noOpVault, formatTodosList, formatTaskList, formatTaskProgress, formatPlan, SessionRecovery, loadGoal, goalFilePath, summarizeUsage, saveGoal, formatGoal, emptyGoal, buildGoalPreamble, pendingBtwCount, setBtwNote, readHqRuntimeFileSync, resolveHqConfig, MATRIX_PHASE_KEYS, matrixKeyKind, phaseForRole, onResize, InputBuilder, DefaultSecretVault, decryptConfigSecrets as decryptConfigSecrets$1, encryptConfigSecrets as encryptConfigSecrets$1, HQ_AUTH_FILE_VERSION, FsError, ERROR_CODES, truncate, estimateMessageTokens, AGENTS_BY_PHASE, validateAgainstSchema, ConfigError, resolveMailboxIdentity, smartDefaultFallbackChain, AutonomousCoordinator, mutateHqAuthFile, mintHqToken, readHqAuthFile, DefaultTokenCounter, isSecretField as isSecretField$1, startSessionTelemetryBridge } from '@wrongstack/core';
 import * as fs4 from 'fs/promises';
 import { decryptConfigSecrets, encryptConfigSecrets, DefaultSecretVault as DefaultSecretVault$1, isSecretField } from '@wrongstack/core/security';
 import * as path4 from 'path';
@@ -8,11 +8,11 @@ import * as crypto2 from 'crypto';
 import { createHash, randomUUID, randomBytes } from 'crypto';
 import * as http from 'http';
 import { createServer } from 'http';
-import * as os from 'os';
-import os__default from 'os';
+import * as os7 from 'os';
+import os7__default from 'os';
 import { WebSocketServer, WebSocket } from 'ws';
 import { createRequire } from 'module';
-import { findFreePort, AutoPhaseWebSocketHandler, WorktreeWebSocketHandler, generateAuthToken, verifyClient, handleGitInfo, handleShellOpen, handleGitDiff, handleGitChanges, handleSkillsExport, handleSkillsEdit, handleSkillsCreate, handleSkillsUpdate, handleSkillsUninstall, handleSkillsInstall, handleSkillsContent, handleMcpRestart, handleMcpDisable, handleMcpEnable, handleMcpDiscover, handleMcpSleep, handleMcpWake, handleMcpUpdate, handleMcpRemove, handleMcpAdd, handleMcpList, handleMemoryForget, handleMemoryRemember, handleMemoryList, handleCompletionRequest, createToolLspCompletionSource, handleFilesWrite, handleFilesRead, handleFilesTree, handleFilesList, createEternalSubscription, createHttpServer, registerInstance, openBrowser as openBrowser$1, unregisterInstance, estimateTokens as estimateTokens$1, stringifyContent, messagePreview, messageTokens, createCustomModeStore } from '@wrongstack/webui/server';
+import { findFreePort, AutoPhaseWebSocketHandler, WorktreeWebSocketHandler, SpecsWebSocketHandler, SddBoardWebSocketHandler, SddWizardWebSocketHandler, buildSddWizardDeps, generateAuthToken, verifyClient, handleGitInfo, handleShellOpen, handleGitDiff, handleGitChanges, handleSkillsExport, handleSkillsEdit, handleSkillsCreate, handleSkillsUpdate, handleSkillsUninstall, handleSkillsInstall, handleSkillsContent, handleMcpRestart, handleMcpDisable, handleMcpEnable, handleMcpDiscover, handleMcpSleep, handleMcpWake, handleMcpUpdate, handleMcpRemove, handleMcpAdd, handleMcpList, handleMemoryForget, handleMemoryRemember, handleMemoryList, handleCompletionRequest, createToolLspCompletionSource, handleFilesWrite, handleFilesRead, handleFilesTree, handleFilesList, createEternalSubscription, createHttpServer, registerInstance, openBrowser as openBrowser$1, unregisterInstance, estimateTokens as estimateTokens$1, stringifyContent, messagePreview, messageTokens, createCustomModeStore } from '@wrongstack/webui/server';
 import { toErrorMessage, readJsonObjectFile, updateJsonObjectFile, setJsonPath, jsonObjectFileExists, removeJsonPath } from '@wrongstack/core/utils';
 import { setOAuthTokenPersister, makeProviderFromConfig, capabilitiesFor, buildProviderFactoriesFromRegistry, refreshCopilotToken, copilotBaseUrlFromToken } from '@wrongstack/providers';
 import { getProcessRegistry, builtinToolsPack, rememberTool, forgetTool, searchMemoryTool, relatedMemoryTool, runStartupIndex, isIndexableFile, enqueueReindex, cancelPendingReindexes, shutdownCodebaseIndexHost, TIER2_TOOLS, TIER3_TOOLS, TIER1_TOOLS, resetIndexCircuitBreaker } from '@wrongstack/tools';
@@ -657,26 +657,26 @@ function fmtDuration(ms) {
   const remMin = m - h * 60;
   return `${h}h${remMin}m`;
 }
-function fmtTaskResultLine(r, color85) {
+function fmtTaskResultLine(r, color86) {
   const stats = `${r.iterations}it ${r.toolCalls}tc ${fmtDuration(r.durationMs)}`;
   const errMsg = typeof r.error === "string" ? r.error : r.error?.message;
   const errKind = typeof r.error === "object" ? r.error?.kind : void 0;
   const errTail = errMsg ? ` \u2014 ${errMsg.replace(/\s+/g, " ").slice(0, 80)}${errMsg.length > 80 ? "\u2026" : ""}` : "";
-  const errKindChip = errKind ? color85.dim(` [${errKind}]`) : "";
-  const errSnip = errMsg || errKind ? `${errKindChip}${color85.dim(errTail)}` : "";
+  const errKindChip = errKind ? color86.dim(` [${errKind}]`) : "";
+  const errSnip = errMsg || errKind ? `${errKindChip}${color86.dim(errTail)}` : "";
   switch (r.status) {
     case "success":
-      return { mark: color85.green("\u2713"), stats, tail: "" };
+      return { mark: color86.green("\u2713"), stats, tail: "" };
     case "timeout":
       return {
-        mark: color85.yellow("\u23F1"),
-        stats: `${color85.yellow("timeout")} ${stats}`,
+        mark: color86.yellow("\u23F1"),
+        stats: `${color86.yellow("timeout")} ${stats}`,
         tail: errSnip
       };
     case "stopped":
-      return { mark: color85.dim("\u2298"), stats: `${color85.dim("stopped")} ${stats}`, tail: errSnip };
+      return { mark: color86.dim("\u2298"), stats: `${color86.dim("stopped")} ${stats}`, tail: errSnip };
     case "failed":
-      return { mark: color85.red("\u2717"), stats: `${color85.red("failed")} ${stats}`, tail: errSnip };
+      return { mark: color86.red("\u2717"), stats: `${color86.red("failed")} ${stats}`, tail: errSnip };
   }
 }
 var init_utils = __esm({
@@ -1335,6 +1335,19 @@ function sddHelp() {
     "  \u2502  /sdd cancel         Cancel session                      \u2502",
     "  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518",
     "",
+    "  \u250C\u2500 \u26A1 Parallel Run \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510",
+    "  \u2502  /sdd parallel [N]   Run tasks in parallel (N slots)     \u2502",
+    "  \u2502  /sdd stop           Stop the active parallel run        \u2502",
+    "  \u2502  /sdd retry-failed   Requeue all failed tasks            \u2502",
+    "  \u2502  /sdd split <id> <A ; B>  Split a task into sub-tasks    \u2502",
+    "  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518",
+    "",
+    "  \u250C\u2500 \u{1F9F9} Lifecycle (after /sdd stop) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510",
+    "  \u2502  /sdd clean          Remove run worktrees + branches     \u2502",
+    "  \u2502  /sdd rollback       Revert the run's merged commits     \u2502",
+    "  \u2502  /sdd destroy        Delete the whole SDD project         \u2502",
+    "  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518",
+    "",
     "  \u250C\u2500 \u{1F4C1} Spec History \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510",
     "  \u2502  /sdd list           List saved specs                    \u2502",
     "  \u2502  /sdd show <id>      Show spec details                   \u2502",
@@ -1626,9 +1639,92 @@ Start executing the tasks one by one.`
           );
           return { message };
         }
-        case "stop": {
+        case "stop":
+        case "abort": {
           opts.onSddParallelStop?.();
-          return { message: "SDD parallel run stopped." };
+          return { message: "SDD parallel run stopped. Use /sdd clean to remove worktrees, /sdd rollback to undo commits, or /sdd destroy to delete the project." };
+        }
+        case "clean":
+        case "cleanup":
+        case "worktrees": {
+          if (!opts.onSddCleanWorktrees) {
+            return { message: "Worktree cleanup is not available in this session." };
+          }
+          const removed = await opts.onSddCleanWorktrees();
+          return {
+            message: removed > 0 ? `Cleaned ${removed} SDD worktree${removed === 1 ? "" : "s"} (and their wstack/ap branches).` : "No SDD worktrees to clean."
+          };
+        }
+        case "rollback":
+        case "revert": {
+          if (!opts.onSddRollback) {
+            return { message: "Rollback is not available in this session." };
+          }
+          const res = await opts.onSddRollback();
+          if (res.ok) {
+            return {
+              message: res.reverted > 0 ? `Rolled back ${res.reverted} run commit${res.reverted === 1 ? "" : "s"} (revert commits added \u2014 history preserved).` : "Nothing to roll back."
+            };
+          }
+          return {
+            message: `Rollback failed${res.reverted ? ` after ${res.reverted} revert(s)` : ""}: ${res.reason ?? "unknown error"}`
+          };
+        }
+        case "destroy":
+        case "nuke": {
+          if (!opts.onSddDestroy) {
+            return { message: "Destroy is not available in this session." };
+          }
+          const res = await opts.onSddDestroy();
+          const builder = sddState.getBuilder();
+          if (builder) {
+            await builder.deleteSession().catch(() => {
+            });
+            sddState.setBuilder(null);
+          }
+          sddState.clearTaskState();
+          const parts = [
+            `SDD project destroyed.`,
+            res.worktreesRemoved > 0 ? `  Removed ${res.worktreesRemoved} worktree${res.worktreesRemoved === 1 ? "" : "s"}.` : "",
+            res.deleted.length ? `  Deleted: ${res.deleted.join(", ")}.` : "",
+            `  (Merged commits left intact \u2014 use /sdd rollback to undo them.)`
+          ].filter(Boolean);
+          return { message: parts.join("\n") };
+        }
+        case "retry-failed":
+        case "retry-all": {
+          if (!opts.onSddRetryAllFailed) {
+            return { message: "No active SDD parallel run to retry." };
+          }
+          const n = opts.onSddRetryAllFailed();
+          return {
+            message: n > 0 ? `Requeued ${n} failed task${n === 1 ? "" : "s"} to pending.` : "No failed tasks to retry."
+          };
+        }
+        case "split": {
+          if (!opts.onSddSplitTask) {
+            return { message: "No active SDD parallel run to split a task in." };
+          }
+          const taskId = restArgs[0];
+          if (!taskId) {
+            return { message: "Usage: /sdd split <task-id> <subtask ; subtask ; \u2026>" };
+          }
+          const subtasks = restArgs.slice(1).join(" ").split(";").map((s) => s.trim()).filter(Boolean).map((piece) => {
+            const [title, ...rest] = piece.split("::");
+            const t = (title ?? "").trim();
+            const d = rest.join("::").trim();
+            return { title: t, description: d || t };
+          }).filter((s) => s.title);
+          if (subtasks.length < 2) {
+            return { message: "Provide at least two sub-tasks: /sdd split <task-id> <A ; B>" };
+          }
+          const ids = opts.onSddSplitTask(taskId, subtasks);
+          if (ids === null) {
+            return { message: `No active run, or task "${taskId}" is unknown / running (can't split).` };
+          }
+          return {
+            message: `Split ${taskId} into ${ids.length} sub-task${ids.length === 1 ? "" : "s"}: ${ids.join(", ")}`
+          };
         }
         case "plan":
         case "impl": {
@@ -2117,20 +2213,25 @@ Start executing the tasks one by one.`
           return { message: lines.join("\n") };
         }
         case "cancel": {
-          const sessionPath = opts.paths.projectSddSession;
           let deletedFromDisk = false;
-          try {
-            await fs4.unlink(sessionPath);
-            deletedFromDisk = true;
-          } catch {
-          }
-          try {
-            await fs4.rm(opts.paths.projectSpecs, { recursive: true, force: true });
-          } catch {
-          }
-          try {
-            await fs4.rm(opts.paths.projectTaskGraphs, { recursive: true, force: true });
-          } catch {
+          if (opts.onSddDestroy) {
+            const res = await opts.onSddDestroy();
+            deletedFromDisk = res.deleted.length > 0 || res.worktreesRemoved > 0;
+          } else {
+            const sessionPath = opts.paths.projectSddSession;
+            try {
+              await fs4.unlink(sessionPath);
+              deletedFromDisk = true;
+            } catch {
+            }
+            try {
+              await fs4.rm(opts.paths.projectSpecs, { recursive: true, force: true });
+            } catch {
+            }
+            try {
+              await fs4.rm(opts.paths.projectTaskGraphs, { recursive: true, force: true });
+            } catch {
+            }
           }
           const cancelBuilder = sddState.getBuilder();
           if (cancelBuilder) {
@@ -4108,7 +4209,7 @@ async function clearHqRuntimeMarker(dataDir, url) {
 function lanIPv4Addresses() {
   const out = [];
   try {
-    const ifaces = os.networkInterfaces();
+    const ifaces = os7.networkInterfaces();
     for (const name of Object.keys(ifaces)) {
       for (const ni of ifaces[name] ?? []) {
         if (ni.family === "IPv4" && !ni.internal) out.push(ni.address);
@@ -4210,7 +4311,7 @@ async function handleApiSessions(res) {
   }
 }
 async function handleApiSessionEvents(res, sessionId, limit, full, transcripts) {
-  const { SessionRegistry, resolveWstackPaths: resolveWstackPaths5, DefaultSessionStore: DefaultSessionStore5 } = await import('@wrongstack/core');
+  const { SessionRegistry, resolveWstackPaths: resolveWstackPaths6, DefaultSessionStore: DefaultSessionStore5 } = await import('@wrongstack/core');
   const globalRoot = path4.dirname(resolveHqDataDir());
   try {
     const registry = new SessionRegistry(globalRoot);
@@ -4221,7 +4322,7 @@ async function handleApiSessionEvents(res, sessionId, limit, full, transcripts)
     let clientType;
     let projectName;
     if (entry) {
-      const paths = resolveWstackPaths5({ projectRoot: entry.projectRoot, globalRoot });
+      const paths = resolveWstackPaths6({ projectRoot: entry.projectRoot, globalRoot });
       const store = new DefaultSessionStore5({ dir: paths.projectSessions });
       const data = await store.load(sessionId).catch(() => null);
       if (data) {
@@ -5117,7 +5218,7 @@ async function getUpdateNotification(signal, homeFn) {
 var defaultHomeDir2, CACHE_TTL_MS;
 var init_update_check = __esm({
   "src/update-check.ts"() {
-    defaultHomeDir2 = () => os.homedir();
+    defaultHomeDir2 = () => os7.homedir();
     CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
   }
 });
@@ -5223,6 +5324,8 @@ async function seedConfigToMeta(opts) {
     meta["enhanceDelayMs"] = autonomyCfg["enhanceDelayMs"] ?? 6e4;
     meta["enhanceLanguage"] = autonomyCfg["enhanceLanguage"] ?? "original";
     meta["nextPrediction"] = cfg.nextPrediction ?? false;
+    meta["fallbackModels"] = cfg.fallbackModels ?? [];
+    meta["fallbackAuto"] = cfg.fallbackAuto !== false;
     meta["featureMcp"] = features["mcp"] !== false;
     meta["featurePlugins"] = features["plugins"] !== false;
     meta["featureMemory"] = features["memory"] !== false;
@@ -5269,8 +5372,7 @@ function createPrefsSeeding(opts) {
       const decrypted = decryptConfigSecrets$1(parsed, vault);
       const autonomy = decrypted.autonomy ?? {};
       if ("autonomy" in payload) autonomy["defaultMode"] = payload["autonomy"];
-      if ("autonomyDelayMs" in payload)
-        autonomy["autoProceedDelayMs"] = payload["autonomyDelayMs"];
+      if ("autonomyDelayMs" in payload) autonomy["autoProceedDelayMs"] = payload["autonomyDelayMs"];
       if ("autoProceedMaxIterations" in payload)
         autonomy["autoProceedMaxIterations"] = payload["autoProceedMaxIterations"];
       if ("yolo" in payload) {
@@ -5282,9 +5384,10 @@ function createPrefsSeeding(opts) {
       if ("streamFleet" in payload) autonomy["streamFleet"] = payload["streamFleet"];
       if ("enhanceEnabled" in payload) autonomy["enhance"] = payload["enhanceEnabled"];
       if ("enhanceDelayMs" in payload) autonomy["enhanceDelayMs"] = payload["enhanceDelayMs"];
-      if ("enhanceLanguage" in payload)
-        autonomy["enhanceLanguage"] = payload["enhanceLanguage"];
+      if ("enhanceLanguage" in payload) autonomy["enhanceLanguage"] = payload["enhanceLanguage"];
       if ("nextPrediction" in payload) decrypted["nextPrediction"] = payload["nextPrediction"];
+      if ("fallbackModels" in payload) decrypted["fallbackModels"] = payload["fallbackModels"];
+      if ("fallbackAuto" in payload) decrypted["fallbackAuto"] = payload["fallbackAuto"];
       decrypted["autonomy"] = autonomy;
       if ("featureMcp" in payload || "featurePlugins" in payload || "featureMemory" in payload || "featureSkills" in payload || "featureModelsRegistry" in payload) {
         const features = decrypted.features ?? {};
@@ -5380,6 +5483,8 @@ var init_prefs_seeding = __esm({
       "confirmExit",
       "streamFleet",
       "nextPrediction",
+      "fallbackModels",
+      "fallbackAuto",
       "enhanceEnabled",
       "enhanceDelayMs",
       "enhanceLanguage",
@@ -6413,22 +6518,29 @@ var init_projects = __esm({
 function sendResult7(ctx, ws, success, message) {
   ctx.send(ws, { type: "key.operation_result", payload: { success, message } });
 }
+function projectSavedProviders(providers) {
+  return Object.entries(providers).map(([id, cfg]) => {
+    const models = cfg.models;
+    const pickedModelId = models && models.length > 0 ? models[0] : void 0;
+    return {
+      id,
+      family: cfg.family ?? id,
+      baseUrl: cfg.baseUrl,
+      models,
+      ...pickedModelId !== void 0 ? { pickedModelId } : {},
+      apiKeys: normalizeKeys(cfg).map((k) => ({
+        label: k.label,
+        maskedKey: maskedKey(k.apiKey),
+        isActive: k.label === cfg.activeKey,
+        createdAt: k.createdAt
+      }))
+    };
+  });
+}
 function broadcastSaved(ctx, providers) {
   ctx.broadcast({
     type: "providers.saved",
-    payload: {
-      providers: Object.entries(providers).map(([id, cfg]) => ({
-        id,
-        family: cfg.family,
-        baseUrl: cfg.baseUrl,
-        apiKeys: normalizeKeys(cfg).map((k) => ({
-          label: k.label,
-          maskedKey: maskedKey(k.apiKey),
-          isActive: k.label === cfg.activeKey,
-          createdAt: k.createdAt
-        }))
-      }))
-    }
+    payload: { providers: projectSavedProviders(providers) }
   });
 }
 async function handleProvidersList(ctx, ws) {
@@ -6484,19 +6596,7 @@ async function handleProvidersSaved(ctx, ws) {
     const providers = await ctx.providerStore.load();
     ctx.send(ws, {
       type: "providers.saved",
-      payload: {
-        providers: Object.entries(providers).map(([id, cfg]) => ({
-          id,
-          family: cfg.family,
-          baseUrl: cfg.baseUrl,
-          apiKeys: normalizeKeys(cfg).map((k) => ({
-            label: k.label,
-            maskedKey: maskedKey(k.apiKey),
-            isActive: k.label === cfg.activeKey,
-            createdAt: k.createdAt
-          }))
-        }))
-      }
+      payload: { providers: projectSavedProviders(providers) }
     });
   } catch (err) {
     sendResult7(ctx, ws, false, toErrorMessage(err));
@@ -6518,6 +6618,7 @@ async function handleKeyUpsert(ctx, ws, providerId, label, apiKey) {
     providers[providerId] = existing;
     await ctx.providerStore.save(providers);
     sendResult7(ctx, ws, true, `Key "${label}" saved for ${providerId}`);
+    broadcastSaved(ctx, providers);
   } catch (err) {
     sendResult7(ctx, ws, false, toErrorMessage(err));
   }
@@ -6542,6 +6643,7 @@ async function handleKeyDelete(ctx, ws, providerId, label) {
     }
     await ctx.providerStore.save(providers);
     sendResult7(ctx, ws, true, `Key "${label}" deleted from ${providerId}`);
+    broadcastSaved(ctx, providers);
   } catch (err) {
     sendResult7(ctx, ws, false, toErrorMessage(err));
   }
@@ -6559,6 +6661,7 @@ async function handleKeySetActive(ctx, ws, providerId, label) {
     providers[providerId] = existing;
     await ctx.providerStore.save(providers);
     sendResult7(ctx, ws, true, `Active key for ${providerId} set to "${label}"`);
+    broadcastSaved(ctx, providers);
   } catch (err) {
     sendResult7(ctx, ws, false, toErrorMessage(err));
   }
@@ -6588,22 +6691,7 @@ async function handleProviderAdd(ctx, ws, payload) {
     await ctx.providerStore.save(providers);
     sendResult7(ctx, ws, true, `Provider "${payload.id}" added`);
     ctx.log(`[WebUI] Provider "${payload.id}" added via provider.add`);
-    ctx.broadcast({
-      type: "providers.saved",
-      payload: {
-        providers: Object.entries(providers).map(([id, cfg]) => ({
-          id,
-          family: cfg.family,
-          baseUrl: cfg.baseUrl,
-          apiKeys: normalizeKeys(cfg).map((k) => ({
-            label: k.label,
-            maskedKey: maskedKey(k.apiKey),
-            isActive: k.label === cfg.activeKey,
-            createdAt: k.createdAt
-          }))
-        }))
-      }
-    });
+    broadcastSaved(ctx, providers);
   } catch (err) {
     sendResult7(ctx, ws, false, toErrorMessage(err));
   }
@@ -6618,6 +6706,7 @@ async function handleProviderRemove(ctx, ws, providerId) {
     delete providers[providerId];
     await ctx.providerStore.save(providers);
     sendResult7(ctx, ws, true, `Provider "${providerId}" removed`);
+    broadcastSaved(ctx, providers);
   } catch (err) {
     sendResult7(ctx, ws, false, toErrorMessage(err));
   }
@@ -7235,7 +7324,7 @@ async function runWebUI(opts) {
     })();
     return customModeStoreP;
   };
-  const autoPhaseStoreDir = opts.projectRoot ? path4.join(opts.projectRoot, ".wrongstack", "autophase") : path4.join(os.tmpdir(), ".wrongstack", "autophase");
+  const autoPhaseStoreDir = opts.projectRoot ? path4.join(opts.projectRoot, ".wrongstack", "autophase") : path4.join(os7.tmpdir(), ".wrongstack", "autophase");
   const autoPhaseHandler = new AutoPhaseWebSocketHandler(
     opts.agent,
     opts.agent.ctx,
@@ -7245,6 +7334,29 @@ async function runWebUI(opts) {
     opts.projectRoot
   );
   const worktreeHandler = new WorktreeWebSocketHandler(opts.events, consoleLogger);
+  const specsPaths = opts.projectRoot ? resolveWstackPaths({ projectRoot: opts.projectRoot }) : null;
+  const specsHandler = new SpecsWebSocketHandler(
+    specsPaths?.projectSpecs ?? path4.join(os7.tmpdir(), ".wrongstack", "specs"),
+    specsPaths?.projectTaskGraphs ?? path4.join(os7.tmpdir(), ".wrongstack", "task-graphs")
+  );
+  const sddBoardHandler = new SddBoardWebSocketHandler(
+    specsPaths?.projectSddBoards ?? path4.join(os7.tmpdir(), ".wrongstack", "sdd-boards"),
+    opts.events
+  );
+  const sddWizardHandler = opts.sddSubagentFactory && specsPaths ? new SddWizardWebSocketHandler(
+    buildSddWizardDeps({
+      agent: opts.agent,
+      events: opts.events,
+      projectRoot: opts.projectRoot ?? process.cwd(),
+      subagentFactory: opts.sddSubagentFactory,
+      paths: {
+        projectSpecs: specsPaths.projectSpecs,
+        projectTaskGraphs: specsPaths.projectTaskGraphs,
+        projectSddBoards: specsPaths.projectSddBoards,
+        projectDir: specsPaths.projectDir
+      }
+    })
+  ) : null;
   await seedConfigToMeta(opts);
   const { prefSnapshot, persistPrefs } = createPrefsSeeding(opts);
   const sessionStartedAt = Date.now();
@@ -8241,6 +8353,9 @@ ${text}` : text;
       const client = { ws, sessionId: opts.session.id };
       clients.set(ws, client);
       autoPhaseHandler.addClient(ws);
+      specsHandler.addClient(ws);
+      sddBoardHandler.addClient(ws);
+      sddWizardHandler?.addClient(ws);
       worktreeHandler.addClient(ws);
       let msgCount = 0;
       let windowResetAt = Date.now() + 6e4;
@@ -8845,7 +8960,11 @@ ${text}` : text;
         break;
       // ── Mailbox operations — project-level inter-agent messaging (PR 8 of #30) ────
       case "mailbox.messages":
-        await handleMailboxMessages(mailboxCtx, msg, ws);
+        await handleMailboxMessages(
+          mailboxCtx,
+          msg,
+          ws
+        );
         break;
       case "mailbox.agents":
         await handleMailboxAgents(mailboxCtx, msg, ws);
@@ -8867,6 +8986,18 @@ ${text}` : text;
           await autoPhaseHandler.handleMessage(
             msg
           );
+        } else if (msgType.startsWith("specs.")) {
+          await specsHandler.handleMessage(
+            msg
+          );
+        } else if (msgType.startsWith("sdd.board.")) {
+          await sddBoardHandler.handleMessage(
+            msg
+          );
+        } else if (msgType.startsWith("sdd.spec.") || msgType.startsWith("sdd.run.")) {
+          await sddWizardHandler?.handleMessage(
+            msg
+          );
         } else {
           console.debug(`[WebUI] Unhandled message type: ${msgType}`);
         }
@@ -8918,6 +9049,12 @@ var init_webui_server = __esm({
 
 // src/cli-main.ts
 init_provider_config_utils();
+var DEFAULT_TASK_CONCURRENCY = 2;
+function resolveTaskConcurrency() {
+  const raw = Number.parseInt(process.env["WRONGSTACK_AUTOPHASE_TASK_CONCURRENCY"] ?? "", 10);
+  if (!Number.isFinite(raw)) return DEFAULT_TASK_CONCURRENCY;
+  return Math.min(8, Math.max(1, raw));
+}
 var WORKTREE_PHASE_CONCURRENCY = 4;
 var MAX_CMD_OUTPUT = 2e5;
 function gitText(args, cwd) {
@@ -9131,6 +9268,7 @@ ${res.out}` };
         };
       }
       const abort = new AbortController();
+      const usedNicknames = /* @__PURE__ */ new Set();
       log(`\u{1F9E0} Planning phases for: ${goal}`);
       let phases;
       try {
@@ -9180,9 +9318,16 @@ ${res.out}` };
           executeTask: async (task, phaseId, env) => {
             const phase = graph.phases.get(phaseId);
             const phaseName = phase?.name ?? phaseId;
+            let agentName = task.assignee;
+            if (!agentName) {
+              const nick = assignNickname("executor", usedNicknames);
+              usedNicknames.add(nick.key);
+              agentName = nick.display.replace(/\s*\([^)]*\)\s*$/, "");
+              active?.orchestrator.setTaskAssignee(task.id, void 0, agentName);
+            }
             return runOnce(
               buildTaskPrompt(task, phaseName, goal),
-              `autophase-${phaseName}-${task.title}`.slice(0, 48),
+              `autophase-${agentName}`.slice(0, 48),
               abort.signal,
               env?.cwd
             );
@@ -9227,9 +9372,11 @@ ${res.out}` };
         // With isolation, parallelizable phases run concurrently; without it,
         // stay strictly sequential to protect the shared working tree.
         maxConcurrentPhases: worktrees ? deps.maxConcurrentPhases ?? WORKTREE_PHASE_CONCURRENCY : 1,
-        // Sequential within a phase: each todo is a full-tool agent and todos in
-        // a phase typically build on one another (they share the phase worktree).
-        maxConcurrentTasks: 1
+        // Within a phase, todos share the phase worktree. Default to a small
+        // amount of parallelism so multiple agents genuinely pick up different
+        // tasks at once (visible on the board); raise/lower via
+        // WRONGSTACK_AUTOPHASE_TASK_CONCURRENCY (1 = strictly sequential).
+        maxConcurrentTasks: resolveTaskConcurrency()
       });
       const onUntyped = deps.events.on;
       const offUntyped = deps.events.off;
@@ -9284,6 +9431,30 @@ ${res.out}` };
         isRunning: () => a.orchestrator.isRunning()
       };
     },
+    onAutoPhaseMoveTask(taskId, toPhaseId) {
+      if (!active) return false;
+      const ok = active.orchestrator.moveTask(taskId, toPhaseId);
+      if (ok) void persist(active.graph);
+      return ok;
+    },
+    onAutoPhaseAssignTask(taskId, agentId, agentName) {
+      if (!active) return false;
+      const ok = active.orchestrator.setTaskAssignee(taskId, agentId, agentName);
+      if (ok) void persist(active.graph);
+      return ok;
+    },
+    onAutoPhaseAddTask(phaseId, spec) {
+      if (!active) return null;
+      const id = active.orchestrator.addTask(phaseId, spec);
+      if (id) void persist(active.graph);
+      return id;
+    },
+    onAutoPhaseRetryTask(taskId) {
+      if (!active) return false;
+      const ok = active.orchestrator.requeueTask(taskId);
+      if (ok) void persist(active.graph);
+      return ok;
+    },
     async onWorktree(action, target) {
       const root = deps.projectRoot;
       if (!await isGitRepo(root)) return "\u26A0 Not a git repository \u2014 worktrees unavailable.";
@@ -9855,7 +10026,7 @@ function printLaunchHints(renderer, flags, opts = {}) {
   renderer.write(`${lines.join("\n")}
 `);
 }
-var defaultUidFn = () => os__default.userInfo().uid;
+var defaultUidFn = () => os7__default.userInfo().uid;
 async function getFileUid(filePath) {
   try {
     const stat8 = await fs4.stat(filePath);
@@ -9865,7 +10036,7 @@ async function getFileUid(filePath) {
   }
 }
 async function checkConfigOwnership(homeFn, uidFn = defaultUidFn) {
-  if (os__default.platform() === "win32") return true;
+  if (os7__default.platform() === "win32") return true;
   const cfg = configPath(homeFn);
   const fileUid = await getFileUid(cfg);
   if (fileUid === void 0) return true;
@@ -9956,7 +10127,7 @@ function diffSummary(oldCfg, newCfg) {
   }
   return changes.length > 0 ? changes.slice(0, 5).join(", ") : "no changes";
 }
-var defaultHomeDir = () => os__default.homedir();
+var defaultHomeDir = () => os7__default.homedir();
 function historyDir(homeFn = defaultHomeDir) {
   return path4.join(homeFn(), ".wrongstack", "config.history", "entries");
 }
@@ -10172,6 +10343,10 @@ async function restoreLast(homeFn = defaultHomeDir) {
 }
 
 // src/provider-helpers.ts
+function visibleModelIds(providerId, config, catalogModelIds, cfg) {
+  const entry = cfg ?? config.providers?.[providerId];
+  return entry?.models !== void 0 ? [...entry.models] : [...catalogModelIds];
+}
 function hasApiKey(provider, config) {
   if (provider.envVars.some((v) => !!process.env[v])) return true;
   const entry = config?.providers?.[provider.id];
@@ -10206,7 +10381,7 @@ async function buildPickableProviders(modelsRegistry, config) {
     const inherited = catalogById.get(catalogType);
     const family = cfg.family ?? inherited?.family ?? "unsupported";
     if (family === "unsupported") continue;
-    const models = cfg.models && cfg.models.length > 0 ? [...cfg.models] : (inherited?.models ?? []).map((m) => m.id);
+    const models = visibleModelIds(id, config, (inherited?.models ?? []).map((m) => m.id), cfg);
     out.push({ id, family, models });
   }
   for (const p of catalog) {
@@ -10218,7 +10393,7 @@ async function buildPickableProviders(modelsRegistry, config) {
   return out;
 }
 var theme = { primary: color.amber };
-async function saveToGlobalConfig(configPath2, provider, model, homeFn = () => process.env.HOME ?? os__default.homedir()) {
+async function saveToGlobalConfig(configPath2, provider, model, homeFn = () => process.env.HOME ?? os7__default.homedir()) {
   try {
     const { atomicWrite: atomicWrite15 } = await import('@wrongstack/core');
     const fs40 = await import('fs/promises');
@@ -10301,7 +10476,7 @@ ${color.bold(theme.primary("WrongStack") + color.dim(" \u2014 Provider & Model S
         // know which models their endpoint actually serves (e.g. LM
         // Studio, vLLM, or a proxy with custom model ids). Otherwise the
         // catalog list keeps providing suggestions.
-        models: cfg.models && cfg.models.length > 0 ? cfg.models.map((m) => ({ id: m, name: m })) : p.models
+        models: visibleModelIds(p.id, config ?? { providers: {} }, p.models.map((m) => m.id), cfg).map((m) => p.models.find((pm) => pm.id === m) ?? { id: m, name: m })
       });
     } else {
       merged.push(p);
@@ -10318,7 +10493,7 @@ ${color.bold(theme.primary("WrongStack") + color.dim(" \u2014 Provider & Model S
       family: cfg.family,
       apiBase: cfg.baseUrl ?? inherited?.apiBase,
       envVars: cfg.envVars ?? inherited?.envVars ?? [],
-      models: cfg.models && cfg.models.length > 0 ? cfg.models.map((m) => ({ id: m, name: m })) : inherited?.models ?? [],
+      models: visibleModelIds(id, config ?? { providers: {} }, (inherited?.models ?? []).map((m) => m.id), cfg).map((m) => inherited?.models.find((pm) => pm.id === m) ?? { id: m, name: m }),
       npm: inherited?.npm
     });
   }
@@ -12885,133 +13060,6 @@ function stripSurroundingQuotes(s) {
   }
   return s;
 }
-function parseModelRef(ref) {
-  const trimmed = ref.trim();
-  const slash = trimmed.indexOf("/");
-  if (slash !== -1) {
-    return {
-      provider: trimmed.slice(0, slash) || void 0,
-      model: trimmed.slice(slash + 1).trim()
-    };
-  }
-  const parts = trimmed.split(/\s+/);
-  if (parts.length >= 2) {
-    return { provider: parts[0], model: parts.slice(1).join(" ") };
-  }
-  return { model: trimmed };
-}
-function shouldFallback(err) {
-  if (err instanceof StreamHangError) {
-    return 599;
-  }
-  if (!(err instanceof ProviderError)) return null;
-  const s = err.status;
-  if (s === 0) return s;
-  if (s === 429 || s === 529 || s >= 500) return s;
-  return null;
-}
-function providerHasKey(entry) {
-  if (!entry) return false;
-  if (typeof entry.apiKey === "string" && entry.apiKey.length > 0) return true;
-  if (Array.isArray(entry.apiKeys) && entry.apiKeys.some((k) => k?.apiKey)) return true;
-  if (Array.isArray(entry.envVars) && entry.envVars.some((v) => !!process.env[v])) return true;
-  return false;
-}
-var SMART_DEFAULT_MAX = 4;
-function smartDefaultFallbackChain(config) {
-  const leaderProvider = config.provider;
-  const leaderModel = config.model;
-  const providers = config.providers ?? {};
-  const seen = /* @__PURE__ */ new Set();
-  const sameProvider = [];
-  const crossProvider = [];
-  const ids = Object.keys(providers).sort(
-    (a, b) => a === leaderProvider ? -1 : b === leaderProvider ? 1 : a.localeCompare(b)
-  );
-  for (const id of ids) {
-    const entry = providers[id];
-    if (!providerHasKey(entry)) continue;
-    const models = entry?.models ?? [];
-    for (const model of models) {
-      if (id === leaderProvider && model === leaderModel) continue;
-      const ref = `${id}/${model}`;
-      if (seen.has(ref)) continue;
-      seen.add(ref);
-      (id === leaderProvider ? sameProvider : crossProvider).push(ref);
-    }
-  }
-  return [...sameProvider, ...crossProvider].slice(0, SMART_DEFAULT_MAX);
-}
-function effectiveFallbackChain(config) {
-  const explicit = config.fallbackModels ?? [];
-  if (explicit.length > 0) return explicit;
-  if (config.fallbackAuto === false) return [];
-  return smartDefaultFallbackChain(config);
-}
-function createFallbackModelExtension(deps) {
-  let dirty = false;
-  return {
-    name: "fallback-model",
-    beforeRun: async (ctx) => {
-      if (!dirty) return;
-      const cfg = deps.getConfig();
-      try {
-        ctx.provider = await deps.buildProvider(cfg.provider);
-        ctx.model = cfg.model;
-        await deps.onModelSwitch?.(cfg.provider, cfg.model);
-      } catch (err) {
-        deps.logger?.warn(
-          `fallback-model: could not restore primary "${cfg.provider}/${cfg.model}": ${err instanceof Error ? err.message : String(err)}`
-        );
-      }
-      dirty = false;
-    },
-    wrapProviderRunner: async (ctx, request, inner) => {
-      try {
-        return await inner(ctx, request);
-      } catch (firstErr) {
-        let lastErr = firstErr;
-        const cfg = deps.getConfig();
-        const chain = effectiveFallbackChain(cfg);
-        for (const ref of chain) {
-          const status = shouldFallback(lastErr);
-          if (status === null) break;
-          const parsed = parseModelRef(ref);
-          if (!parsed.model) continue;
-          const targetProviderId = parsed.provider ?? cfg.provider;
-          const from = { providerId: ctx.provider.id, model: ctx.model };
-          let nextProvider;
-          try {
-            nextProvider = await deps.buildProvider(targetProviderId);
-          } catch (err) {
-            deps.logger?.warn(
-              `fallback-model: skipping "${ref}" \u2014 cannot build provider "${targetProviderId}": ${err instanceof Error ? err.message : String(err)}`
-            );
-            continue;
-          }
-          const providerSwitched = nextProvider.id !== from.providerId;
-          ctx.provider = nextProvider;
-          ctx.model = parsed.model;
-          request.model = parsed.model;
-          dirty = true;
-          await deps.onModelSwitch?.(targetProviderId, parsed.model);
-          deps.events.emit("provider.fallback", {
-            from,
-            to: { providerId: nextProvider.id, model: parsed.model },
-            status,
-            providerSwitched
-          });
-          try {
-            return await inner(ctx, request);
-          } catch (err) {
-            lastErr = err;
-          }
-        }
-        throw lastErr;
-      }
-    }
-  };
-}
 
 // src/slash-commands/fallback.ts
 async function patchGlobalConfig(globalConfigPath, mutate) {
@@ -14186,7 +14234,7 @@ function buildFleetCommand(opts) {
         // ── /fleet terminate <subagentId> ────────────────────────────────────
         case "terminate":
         case "stop":
-          return handleTerminate(opts, subargs);
+          return await handleTerminate(opts, subargs);
         // ── /fleet spawn <role> [count] ──────────────────────────────────────
         case "spawn":
         case "add":
@@ -14357,7 +14405,7 @@ async function handleKill(opts, subargs) {
     return { message: msg2 };
   }
   if (opts.onFleetKill) {
-    const killed = opts.onFleetKill();
+    const killed = await opts.onFleetKill();
     const msg2 = `${color.red("\u2717 Killed")} ${killed} subagent(s).`;
     opts.renderer.write(msg2);
     return { message: msg2 };
@@ -14366,7 +14414,7 @@ async function handleKill(opts, subargs) {
   opts.renderer.writeWarning(msg);
   return { message: msg };
 }
-function handleTerminate(opts, subargs) {
+async function handleTerminate(opts, subargs) {
   const targetId = subargs[0];
   if (!targetId) {
     const msg2 = `${color.amber("\u26A0 /fleet terminate requires a subagentId.")} Use /fleet to see active ids.`;
@@ -14378,7 +14426,7 @@ function handleTerminate(opts, subargs) {
     opts.renderer.writeWarning(msg2);
     return { message: msg2 };
   }
-  const ok = opts.onFleetTerminate(targetId);
+  const ok = await opts.onFleetTerminate(targetId);
   if (ok) {
     const msg2 = `${color.green("\u2713 Terminated")} subagent ${color.bold(targetId)}.`;
     opts.renderer.write(msg2);
@@ -15044,7 +15092,7 @@ function buildInterruptCommand(opts) {
     ].join("\n"),
     async run() {
       const aborted = opts.interruptController?.abortLeader() ?? false;
-      const killed = opts.onFleetKill?.() ?? 0;
+      const killed = opts.onFleetKill ? await opts.onFleetKill() : 0;
       if (!aborted && killed === 0) {
         return { message: color.dim("  Nothing to interrupt \u2014 no run in progress.") };
       }
@@ -17262,7 +17310,7 @@ async function killSession(sessionId) {
     };
   }
 }
-function providerHasKey2(entry) {
+function providerHasKey(entry) {
   if (!entry) return false;
   if (typeof entry.apiKey === "string" && entry.apiKey.length > 0) return true;
   if (Array.isArray(entry.apiKeys) && entry.apiKeys.some((k) => k?.apiKey)) return true;
@@ -17273,7 +17321,7 @@ function keyedProviderIds(config) {
   const ids = /* @__PURE__ */ new Set();
   if (config.provider) ids.add(config.provider);
   for (const [id, entry] of Object.entries(config.providers ?? {})) {
-    if (providerHasKey2(entry)) ids.add(id);
+    if (providerHasKey(entry)) ids.add(id);
   }
   return [...ids].sort();
 }
@@ -17500,7 +17548,7 @@ function buildSetModelCommand(opts) {
               issues.push(
                 `${color.red("\u2717")} ${color.amber(key)}: provider "${entry.provider}" is not configured`
               );
-            } else if (!providerHasKey2(provCfg2)) {
+            } else if (!providerHasKey(provCfg2)) {
               warnings.push(
                 `${color.amber("\u26A0")} ${color.amber(key)}: provider "${entry.provider}" has no API key`
               );
@@ -18311,7 +18359,7 @@ ${parts.join("\n")}
     return false;
   }
   if (fleetRunning > 0) {
-    const killed = opts.onFleetKill?.() ?? 0;
+    const killed = opts.onFleetKill ? await opts.onFleetKill() : 0;
     if (killed > 0) {
       opts.renderer.write(color.dim(`  Stopped ${killed} subagent(s).
 `));
@@ -20495,6 +20543,150 @@ function buildTodosCommand(opts) {
     }
   };
 }
+function fit(text, width) {
+  if (text.length <= width) return text.padEnd(width);
+  return `${text.slice(0, Math.max(0, width - 3))}...`;
+}
+function formatDescriptionMode(mode) {
+  const raw = `desc:${mode}`;
+  return mode === "simple" ? color.amber(raw) : color.cyan(raw);
+}
+function buildToolCommand(opts) {
+  const help = [
+    "Usage:",
+    "  /tool                         Show tool description-mode overrides",
+    "  /tool list                    List every tool and its description mode",
+    "  /tool <name>                  Show one tool mode",
+    "  /tool <name> simple           Use a 1-2 line tool description",
+    "  /tool <name> extend           Use the full/extended tool description",
+    "",
+    "Modes:",
+    "  simple   Short top-level description and usage hint",
+    "  extend   Full description (default)",
+    "",
+    "Examples:",
+    "  /tool read simple",
+    "  /tool bash extend"
+  ].join("\n");
+  function getCurrentTools() {
+    return opts.configStore.get().tools;
+  }
+  function nextToolsConfig(name, mode) {
+    const current = getCurrentTools();
+    const descriptionMode = { ...current.descriptionMode ?? {} };
+    if (mode === "simple") {
+      descriptionMode[name] = "simple";
+    } else {
+      delete descriptionMode[name];
+    }
+    return { ...current, descriptionMode };
+  }
+  async function persistMode(name, mode) {
+    const nextTools = nextToolsConfig(name, mode);
+    if (!opts.paths) {
+      opts.configStore.update({ tools: nextTools });
+      return false;
+    }
+    await persistConfigSetting(
+      {
+        configStore: opts.configStore,
+        globalConfigPath: opts.paths.globalConfig,
+        inProjectConfigPath: opts.paths.inProjectConfig,
+        vault: noOpVault
+      },
+      (cfg) => {
+        cfg.tools = nextTools;
+      }
+    );
+    return true;
+  }
+  function formatOverrides() {
+    const configured = opts.configStore.get().tools.descriptionMode ?? {};
+    const simple = Object.entries(configured).filter(([, mode]) => normalizeToolDescriptionMode(mode) === "simple").map(([name]) => name).sort();
+    return [
+      `${color.bold("Tool descriptions")} ${color.dim(`(default: desc:extend)`)}`,
+      "",
+      simple.length > 0 ? `  ${formatDescriptionMode("simple")}: ${simple.map((name) => color.cyan(name)).join(", ")}` : `  ${formatDescriptionMode("simple")}: ${color.dim("none")}`,
+      "",
+      color.dim("  /tool <name> simple \xB7 /tool <name> extend \xB7 /tool list")
+    ].join("\n");
+  }
+  function formatList() {
+    const header = `  ${color.dim(fit("tool", 28))} ${color.dim(fit("owner", 28))} ` + color.dim("description");
+    const rows = opts.toolRegistry.listWithOwner().map(({ tool }) => {
+      const mode = getToolDescriptionMode(opts.toolRegistry, tool.name);
+      const owner = opts.toolRegistry.ownerOf(tool.name) ?? "core";
+      return `  ${fit(tool.name, 28)} ${color.dim(fit(`[${owner}]`, 28))} ` + formatDescriptionMode(mode);
+    });
+    return [
+      `${color.bold("Tool description modes")} ${color.dim("(default: desc:extend)")}`,
+      "",
+      header,
+      ...rows
+    ].join("\n");
+  }
+  function formatOne(name) {
+    const tool = opts.toolRegistry.get(name);
+    if (!tool) {
+      return `${color.red("Unknown tool")}: ${name}. Use ${color.dim("/tools")} to list registered tools.`;
+    }
+    const mode = getToolDescriptionMode(opts.toolRegistry, name);
+    return [
+      `${color.bold(name)} description mode: ${formatDescriptionMode(mode)}`,
+      "",
+      color.dim(tool.description)
+    ].join("\n");
+  }
+  return {
+    name: "tool",
+    category: "Config",
+    description: "Set per-tool description detail: simple or extend.",
+    argsHint: "[<name> simple|extend]",
+    help,
+    async run(args) {
+      if (!opts.configStore) {
+        return { message: `${color.red("Error")} config store not available.` };
+      }
+      const parts = args.trim().split(/\s+/).filter(Boolean);
+      const sub = (parts[0] ?? "").toLowerCase();
+      if (!sub) return { message: formatOverrides() };
+      if (sub === "help" || sub === "--help") return { message: this.help ?? "" };
+      if (sub === "list") return { message: formatList() };
+      const name = parts[0] ?? "";
+      const tool = opts.toolRegistry.get(name);
+      if (!tool) {
+        return {
+          message: `${color.red("Unknown tool")}: ${name}. Use ${color.dim("/tools")} to list registered tools.`
+        };
+      }
+      if (parts.length === 1) return { message: formatOne(name) };
+      const mode = normalizeToolDescriptionMode(parts[1]);
+      if (!mode) {
+        return { message: `${color.amber("Usage:")} /tool ${name} simple|extend` };
+      }
+      try {
+        const persisted = await persistMode(name, mode);
+        setToolDescriptionMode(opts.toolRegistry, name, mode);
+        const persistence = persisted ? color.dim("saved") : color.dim("runtime only; config paths unavailable");
+        return {
+          message: `${color.green("\u2713")} ${color.cyan(name)} description mode -> ${formatDescriptionMode(mode)} ${persistence}`
+        };
+      } catch (err) {
+        return {
+          message: `${color.red("Could not save tool setting")}: ${toErrorMessage(err)}`
+        };
+      }
+    }
+  };
+}
+function fit2(text, width) {
+  if (text.length <= width) return text.padEnd(width);
+  return `${text.slice(0, Math.max(0, width - 3))}...`;
+}
+function formatDescriptionMode2(mode) {
+  const raw = `desc:${mode}`;
+  return mode === "simple" ? color.amber(raw) : color.dim(raw);
+}
 function buildToolsCommand(opts) {
   return {
     name: "tools",
@@ -20502,10 +20694,14 @@ function buildToolsCommand(opts) {
     description: "List registered tools.",
     async run() {
       const all = opts.toolRegistry.listWithOwner();
-      const lines = all.map(
-        ({ tool, owner }) => `  ${tool.name.padEnd(28)} ${color.dim(`[${owner}]`)} ${tool.mutating ? color.yellow("mut") : color.cyan("ro")} ${color.dim(tool.permission)}`
-      );
-      const msg = `${color.bold("Tools")} (${all.length}):
+      const header = `  ${color.dim(fit2("tool", 28))} ${color.dim(fit2("owner", 28))} ${color.dim(fit2("rw", 4))} ${color.dim(fit2("perm", 8))} ` + color.dim("description");
+      const lines = all.map(({ tool, owner }) => {
+        const mode = getToolDescriptionMode(opts.toolRegistry, tool.name);
+        const rw = tool.mutating ? color.yellow(fit2("mut", 4)) : color.cyan(fit2("ro", 4));
+        return `  ${fit2(tool.name, 28)} ${color.dim(fit2(`[${owner}]`, 28))} ${rw} ${color.dim(fit2(tool.permission, 8))} ` + formatDescriptionMode2(mode);
+      });
+      const msg = `${color.bold("Tools")} (${all.length}) ${color.dim("description detail via /tool <name> simple|extend")}:
+${header}
 ${lines.join("\n")}
 `;
       opts.renderer.write(msg);
@@ -20688,6 +20884,9 @@ function buildYoloCommand(opts) {
     }
   };
 }
+var DEFAULT_SHADOW_PROVIDER = "anthropic";
+var DEFAULT_SHADOW_INTERVAL_MS = 3e4;
+var MIN_SHADOW_INTERVAL_MS = 5e3;
 function buildShadowCommand(opts) {
   return {
     name: "shadow",
@@ -20697,8 +20896,8 @@ function buildShadowCommand(opts) {
     argsHint: "<start|stop|status|hoop|model|interval> [--flag=value]",
     help: [
       "Usage:",
-      "  /shadow start [--interval=<ms>] [--model=<provider/model>]",
-      "        Start Shadow Agent with optional interval and model",
+      "  /shadow start [--model=<provider/model>]",
+      "        Run one quiet Shadow Agent fleet check",
       "  /shadow stop",
       "        Stop the Shadow Agent",
       "  /shadow status",
@@ -20708,19 +20907,21 @@ function buildShadowCommand(opts) {
       "  /shadow model <provider/model>",
       "        Change Shadow Agent analysis model",
       "  /shadow interval <ms>",
-      "        Change heartbeat interval",
+      "        Change the legacy interval default kept for compatibility",
       "",
       "The Shadow Agent monitors:",
       "  \u2022 All fleet agents and their current tasks",
       "  \u2022 Mailbox state and message flow",
       "  \u2022 Spike tasks (starting/stopping instantly)",
       "  \u2022 Fleet-wide activity across all terminals",
-      "  \u2022 Uses deterministic rules first, LLM only for complex cases",
+      "  \u2022 Uses deterministic host rules first; LLM only for manual/problem cases",
+      "  \u2022 Does not post routine healthy reports",
       "",
       "Model must be specified as provider/model, e.g. anthropic/claude-3-5-sonnet",
+      "When omitted, Shadow uses the current leader provider/model.",
       "",
       "Examples:",
-      "  /shadow start --interval=15000",
+      "  /shadow start",
       "  /shadow start --model=anthropic/claude-3-5-sonnet",
       "  /shadow status                       Show all agent activity",
       "  /shadow hoop subagent-abc123        Stop agent and notify",
@@ -20733,14 +20934,24 @@ function buildShadowCommand(opts) {
           if (!opts.onSpawn) {
             return { message: "/shadow requires a running director with subagent support." };
           }
-          const flags = Object.fromEntries(
-            rest.filter((f) => f.startsWith("--")).map((f) => [f.slice(2).split("=")[0], f.slice(2).split("=")[1] ?? true])
-          );
-          const intervalMs = flags["interval"] ?? 3e4;
-          let model;
-          const modelRaw = flags["model"] ?? "default";
+          const flags = parseFlags2(rest);
+          const shadowDefaults = opts.shadowController?.getDefaults?.();
+          let intervalMs;
+          try {
+            intervalMs = parseInterval(
+              flags["interval"] ?? String(shadowDefaults?.intervalMs ?? DEFAULT_SHADOW_INTERVAL_MS)
+            );
+          } catch (e) {
+            return { message: `/shadow start: ${e.message}` };
+          }
+          const defaultModelRef = getDefaultModelRef(opts);
+          let modelRef;
+          const modelRaw = flags["model"];
+          if (modelRaw === true) {
+            return { message: "/shadow start: --model requires a provider/model value" };
+          }
           try {
-            model = requireProviderModelFormat(modelRaw);
+            modelRef = parseProviderModelRef(modelRaw ?? "default", defaultModelRef);
           } catch (e) {
             return { message: `/shadow start: ${e.message}` };
           }
@@ -20755,10 +20966,10 @@ function buildShadowCommand(opts) {
             };
           }
           const spawnId = await opts.onSpawn(
-            `Shadow Agent \u2014 background fleet monitor at ${intervalMs}ms interval`,
+            `Shadow Agent \u2014 one-shot quiet fleet check`,
             {
-              provider: "anthropic",
-              model,
+              provider: modelRef.provider,
+              model: modelRef.model,
               tools: [
                 "fleet_status",
                 "fleet_health",
@@ -20766,30 +20977,33 @@ function buildShadowCommand(opts) {
                 "mailbox",
                 "mail_inbox",
                 "mail_send",
-                "cron_schedule",
-                "cron_list",
-                "cron_cancel",
-                "spawn_subagent",
-                "assign_task",
                 "terminate_subagent"
               ],
               name: "shadow",
-              allowedCapabilities: ["net", "shell"]
+              shadowIntervalMs: intervalMs
             }
           );
-          return { message: `${color.green("\u2713")} Shadow Agent spawned: ${spawnId}
-${color.dim("Interval:")} ${intervalMs}ms
-${color.dim("Model:")} ${model}` };
+          return { message: `${color.green("\u2713")} Shadow Agent queued: ${spawnId}
+${color.dim("Mode:")} one-shot quiet check
+${color.dim("Model:")} ${modelRef.label}` };
         }
         case "stop": {
+          const activeId = opts.shadowController?.activeId;
+          if (!activeId) {
+            return { message: `${color.yellow("\u26A0")} No active Shadow Agent is registered for this session.` };
+          }
+          if (!opts.onFleetTerminate) {
+            return { message: "/shadow stop requires fleet termination support in this session." };
+          }
+          const ok = await opts.onFleetTerminate(activeId);
+          if (ok) {
+            opts.shadowController?.clear();
+            return { message: `${color.green("\u2713")} Shadow Agent stopped: ${activeId}` };
+          }
           return {
             message: [
-              `${color.yellow("\u26A0")} Shadow Agent cannot be stopped manually.`,
-              "",
-              `It auto-starts on first LLM request and runs until session end.`,
-              "",
-              `To stop a specific agent: ${color.bold("/hoop <agent-id>")}`,
-              `To stop all agents: ${color.bold("/hoop all")}`
+              `${color.red("\u2717")} Failed to stop Shadow Agent ${color.bold(activeId)}.`,
+              `It may already be stopped. Use ${color.bold("/shadow status")} to inspect active agents.`
             ].join("\n")
           };
         }
@@ -20807,44 +21021,71 @@ ${color.dim("Model:")} ${model}` };
           }
           const reasonFlag = extraArgs.find((f) => f.startsWith("--reason="));
           const reason = reasonFlag ? reasonFlag.slice("--reason=".length) : "Agent flagged by Shadow Agent";
-          const agentInfo = opts.onAgents?.() ?? "";
-          const agentLine = agentInfo.split("\n").find((l) => l.includes(targetId));
+          if (targetId.toLowerCase() === "all") {
+            if (!opts.onFleetKill) {
+              return { message: "/shadow hoop all requires fleet kill support in this session." };
+            }
+            const killed = await opts.onFleetKill();
+            opts.shadowController?.clear();
+            return {
+              message: [
+                `${color.red("\u26A0")} HOOP: Stopped ${killed} running agent(s)`,
+                "",
+                `Target: ${color.bold("all")}`,
+                `Reason: ${color.yellow(reason)}`
+              ].join("\n")
+            };
+          }
+          if (!opts.onFleetTerminate) {
+            return { message: "/shadow hoop requires fleet termination support in this session." };
+          }
+          const agentInfo = opts.onAgents?.(targetId) ?? "";
+          const ok = await opts.onFleetTerminate(targetId);
+          if (ok && opts.shadowController?.activeId === targetId) {
+            opts.shadowController.clear();
+          }
           return {
             message: [
-              `${color.red("\u26A0")} HOOP: Stopping rogue agent`,
+              ok ? `${color.red("\u26A0")} HOOP: Stopped agent` : `${color.red("\u2717")} HOOP: Failed to stop agent`,
               "",
               `Target: ${color.bold(targetId)}`,
               `Reason: ${color.yellow(reason)}`,
-              agentLine ? `
-Agent info: ${agentLine}` : "",
-              "",
-              `${color.dim("Sending termination signal...")}`,
-              `${color.dim("Notification will be sent to project mailbox.")}`
+              agentInfo ? `
+Agent info:
+${agentInfo}` : ""
             ].join("\n")
           };
         }
         case "model": {
           const [modelId] = rest;
+          const defaultModelRef = getDefaultModelRef(opts);
           if (!modelId) {
-            return { message: "/shadow model <provider/model> \u2014 change Shadow Agent analysis model.\nCurrent: anthropic/claude-3-5-sonnet (default)" };
+            return { message: `/shadow model <provider/model> \u2014 change Shadow Agent analysis model.
+Current default: ${defaultModelRef.label}` };
           }
+          let parsed;
           try {
-            requireProviderModelFormat(modelId);
+            parsed = parseProviderModelRef(modelId, defaultModelRef);
           } catch (e) {
             return { message: `/shadow model: ${e.message}` };
           }
-          return { message: `/shadow model ${modelId}
+          opts.shadowController?.setDefaults?.({ provider: parsed.provider, model: parsed.model });
+          return { message: `/shadow model ${parsed.label}
 ${color.dim("Model will be applied on next /shadow start")}` };
         }
         case "interval": {
           const [msStr] = rest;
           if (!msStr) {
-            return { message: "/shadow interval <ms> \u2014 change heartbeat interval.\nCurrent: 30000ms (30 seconds)" };
+            return { message: `/shadow interval <ms> \u2014 update the legacy Shadow interval default.
+Current default: ${DEFAULT_SHADOW_INTERVAL_MS}ms (30 seconds)` };
           }
-          const ms = parseInt(msStr, 10);
-          if (isNaN(ms) || ms < 5e3) {
-            return { message: "/shadow interval: must be >= 5000ms" };
+          let ms;
+          try {
+            ms = parseInterval(msStr);
+          } catch (e) {
+            return { message: `/shadow interval: ${e.message}` };
           }
+          opts.shadowController?.setDefaults?.({ intervalMs: ms });
           return { message: `/shadow interval ${ms}ms
 ${color.dim("Interval will be applied on next /shadow start")}` };
         }
@@ -20855,12 +21096,49 @@ ${color.dim("Interval will be applied on next /shadow start")}` };
     }
   };
 }
-function requireProviderModelFormat(model) {
-  if (model === "default") return model;
-  if (!/^[^/]+\/[^/]+$/.test(model)) {
+function getDefaultModelRef(opts) {
+  const shadowDefaults = opts.shadowController?.getDefaults?.();
+  const liveConfig = opts.configStore?.get?.();
+  const provider = shadowDefaults?.provider?.trim() || liveConfig?.provider?.trim() || opts.llmProvider?.id?.trim() || DEFAULT_SHADOW_PROVIDER;
+  const model = shadowDefaults?.model?.trim() || liveConfig?.model?.trim() || opts.llmModel?.trim() || "";
+  return {
+    provider,
+    model,
+    label: model ? `${provider}/${model}` : provider
+  };
+}
+function parseProviderModelRef(model, defaultRef) {
+  if (model === "default") {
+    return defaultRef;
+  }
+  const slash = model.indexOf("/");
+  if (slash <= 0 || slash === model.length - 1) {
     throw new Error(`Model must be in provider/model format (e.g. anthropic/claude-3-5-sonnet), got: "${model}"`);
   }
-  return model;
+  return {
+    provider: model.slice(0, slash),
+    model: model.slice(slash + 1),
+    label: model
+  };
+}
+function parseInterval(value) {
+  if (value === true || !/^\d+$/.test(value)) {
+    throw new Error(`interval must be an integer >= ${MIN_SHADOW_INTERVAL_MS}ms`);
+  }
+  const ms = Number.parseInt(value, 10);
+  if (!Number.isFinite(ms) || ms < MIN_SHADOW_INTERVAL_MS) {
+    throw new Error(`interval must be an integer >= ${MIN_SHADOW_INTERVAL_MS}ms`);
+  }
+  return ms;
+}
+function parseFlags2(args) {
+  return Object.fromEntries(
+    args.filter((f) => f.startsWith("--")).map((f) => {
+      const raw = f.slice(2);
+      const eq = raw.indexOf("=");
+      return eq >= 0 ? [raw.slice(0, eq), raw.slice(eq + 1)] : [raw, true];
+    })
+  );
 }
 
 // src/slash-commands/index.ts
@@ -20877,6 +21155,7 @@ function buildBuiltinSlashCommands(opts) {
     buildDoctorCommand(opts),
     buildCodebaseReindexCommand(opts),
     buildTechStackCommand(opts),
+    buildToolCommand(opts),
     buildToolsCommand(opts),
     buildPluginCommand(opts),
     buildPruneCommand(opts),
@@ -21191,11 +21470,24 @@ function buildBadges(chosen) {
   return badges;
 }
 async function persistLaunchChoices(configPath2, choices) {
+  let fileExists2 = false;
+  try {
+    await fs4.access(configPath2);
+    fileExists2 = true;
+  } catch {
+  }
   let existing = {};
   try {
     const raw = await fs4.readFile(configPath2, "utf8");
     existing = JSON.parse(raw);
-  } catch {
+  } catch (err) {
+    if (fileExists2) {
+      throw new Error(
+        `Refusing to overwrite corrupt config at ${configPath2} (${err.message}). Fix or move the file aside before retrying.`,
+        { cause: err }
+      );
+    }
+    existing = {};
   }
   existing.yolo = choices.yolo;
   existing.launch = {
@@ -24187,7 +24479,7 @@ var diagCmd = async (_args, deps) => {
     `  modelsCache:   ${deps.paths.modelsCache}`,
     `  cacheAge:      ${isFinite(age) ? `${Math.round(age / 60)}m` : "never"}`,
     `  node:          ${process.version}`,
-    `  os:            ${os.platform()} ${os.release()}`,
+    `  os:            ${os7.platform()} ${os7.release()}`,
     `  provider:      ${cfg.provider ?? "<unset>"}`,
     `  model:         ${cfg.model ?? "<unset>"}`,
     `  tools:         ${deps.toolRegistry?.list().length ?? 0}`,
@@ -26039,6 +26331,9 @@ var projectsCmd = async (_args, deps) => {
     return 0;
   }
 };
+
+// src/subcommands/handlers/providers-models.ts
+init_provider_config_utils();
 var providersCmd = async (args, deps) => {
   const showAll = args.includes("--all");
   const showUnsupported = args.includes("--unsupported");
@@ -26086,7 +26381,7 @@ ${color.dim(`Current: ${deps.config.provider ?? "<unset>"} / ${deps.config.model
     return 1;
   }
 };
-function parseFlags2(args) {
+function parseFlags3(args) {
   const flags = {};
   for (let i = 0; i < args.length; i++) {
     const a = expectDefined(args[i]);
@@ -26131,6 +26426,10 @@ function fmtPrice3(usdPer1M) {
 }
 var modelsCmd = async (args, deps) => {
   const sub = args[0];
+  if (sub === "hide") return modelsHide(args.slice(1), deps);
+  if (sub === "show") return modelsShow(args.slice(1), deps);
+  if (sub === "hidden") return modelsHidden(args.slice(1), deps);
+  if (sub === "reset") return modelsReset(args.slice(1), deps);
   if (sub === "add") return modelsAdd(args.slice(1), deps);
   if (sub === "remove") return modelsRemove(args.slice(1), deps);
   if (sub === "list") return modelsList(args.slice(1), deps);
@@ -26148,7 +26447,7 @@ var modelsCmd = async (args, deps) => {
       return 1;
     }
   }
-  const flags = parseFlags2(args);
+  const flags = parseFlags3(args);
   const search = typeof flags["search"] === "string" ? flags["search"].toLowerCase() : "";
   const perPage = Number(flags["per-page"]) > 0 ? Number(flags["per-page"]) : DEFAULT_PER_PAGE;
   const page = Math.max(1, Number(flags["page"]) || 1);
@@ -26180,12 +26479,17 @@ var modelsCmd = async (args, deps) => {
 `));
   const userModels = deps.config.providers?.[providerId]?.models;
   const catalogById = new Map(provider.models.map((m) => [m.id, m]));
-  const allSorted = userModels && userModels.length > 0 ? userModels.map((id) => catalogById.get(id) ?? { id, name: id }) : [...provider.models].sort(
+  const allKnownSorted = [...provider.models].sort(
     (a, b) => (b.release_date ?? "").localeCompare(a.release_date ?? "")
   );
-  if (userModels && userModels.length > 0)
-    deps.renderer.write(color.dim(`(${userModels.length} model(s) from your saved config)
-`));
+  const allSorted = userModels !== void 0 ? userModels.map((id) => catalogById.get(id) ?? { id, name: id }) : allKnownSorted;
+  if (userModels !== void 0) {
+    const hiddenCount = Math.max(0, allKnownSorted.length - userModels.length);
+    deps.renderer.write(
+      color.dim(`(${userModels.length} visible model(s) from your saved config${hiddenCount > 0 ? `, ${hiddenCount} hidden` : ""})
+`)
+    );
+  }
   const filtered = search ? allSorted.filter((m) => m.id.toLowerCase().includes(search)) : allSorted;
   const total = filtered.length;
   const totalPages = Math.max(1, Math.ceil(total / perPage));
@@ -26237,6 +26541,164 @@ ${navLines.join(" \xB7 ")}
   );
   return 0;
 };
+function aliasProviderId(configProviderId, cfg) {
+  return cfg?.type && cfg.type !== configProviderId ? cfg.type : configProviderId;
+}
+async function getCatalogProviderForConfigProvider(providerId, deps) {
+  const cfg = deps.config.providers?.[providerId];
+  const lookupId = aliasProviderId(providerId, cfg);
+  const provider = await deps.modelsRegistry.getProvider(lookupId);
+  return { providerId: lookupId, provider };
+}
+function uniqueStrings(values) {
+  return [...new Set(values.map((v) => v.trim()).filter(Boolean))];
+}
+async function modelsHide(args, deps) {
+  const providerId = args[0];
+  const modelId = args[1];
+  if (!providerId || !modelId) {
+    deps.renderer.writeError("Usage: wstack models hide <provider> <model>");
+    return 1;
+  }
+  const saved = deps.config.providers?.[providerId];
+  if (!saved) {
+    deps.renderer.writeError(`Provider "${providerId}" is not configured.`);
+    return 1;
+  }
+  const { providerId: lookupId, provider } = await getCatalogProviderForConfigProvider(providerId, deps);
+  if (!provider) {
+    deps.renderer.writeError(
+      lookupId !== providerId ? `Alias "${providerId}" points at catalog id "${lookupId}" which is not in the cache.` : `Provider "${providerId}" not in catalog.`
+    );
+    return 1;
+  }
+  const knownIds = provider.models.map((m) => m.id);
+  const visible = saved.models !== void 0 ? [...saved.models] : [...knownIds];
+  if (!visible.includes(modelId)) {
+    deps.renderer.writeInfo(`${providerId}/${modelId} is already hidden.`);
+    return 0;
+  }
+  const nextVisible = visible.filter((id) => id !== modelId);
+  await mutateConfigProviders(deps.paths.globalConfig, deps.vault, (providers) => {
+    const p = providers[providerId];
+    if (!p) return;
+    p.models = nextVisible;
+  });
+  deps.config.providers = {
+    ...deps.config.providers ?? {},
+    [providerId]: { ...saved, models: nextVisible }
+  };
+  deps.renderer.writeInfo(
+    `Hidden ${providerId}/${modelId}. Visible: ${nextVisible.length}, hidden: ${Math.max(0, knownIds.length - nextVisible.length)}.`
+  );
+  if (nextVisible.length === 0) {
+    deps.renderer.write(color.dim("This provider now has no visible models. Use `wstack models show` or `wstack models reset` to restore.\n"));
+  }
+  return 0;
+}
+async function modelsShow(args, deps) {
+  const providerId = args[0];
+  const modelId = args[1];
+  if (!providerId || !modelId) {
+    deps.renderer.writeError("Usage: wstack models show <provider> <model>");
+    return 1;
+  }
+  const saved = deps.config.providers?.[providerId];
+  if (!saved) {
+    deps.renderer.writeError(`Provider "${providerId}" is not configured.`);
+    return 1;
+  }
+  const { providerId: lookupId, provider } = await getCatalogProviderForConfigProvider(providerId, deps);
+  if (!provider) {
+    deps.renderer.writeError(
+      lookupId !== providerId ? `Alias "${providerId}" points at catalog id "${lookupId}" which is not in the cache.` : `Provider "${providerId}" not in catalog.`
+    );
+    return 1;
+  }
+  const knownIds = provider.models.map((m) => m.id);
+  if (saved.models === void 0) {
+    deps.renderer.writeInfo(`${providerId}/${modelId} is already visible.`);
+    return 0;
+  }
+  const nextVisible = uniqueStrings([...saved.models, modelId]);
+  await mutateConfigProviders(deps.paths.globalConfig, deps.vault, (providers) => {
+    const p = providers[providerId];
+    if (!p) return;
+    p.models = nextVisible;
+  });
+  deps.config.providers = {
+    ...deps.config.providers ?? {},
+    [providerId]: { ...saved, models: nextVisible }
+  };
+  const isKnown = knownIds.includes(modelId);
+  deps.renderer.writeInfo(
+    `Visible ${providerId}/${modelId}${isKnown ? "" : " (not in current catalog)"}. Visible: ${nextVisible.length}.`
+  );
+  return 0;
+}
+async function modelsHidden(args, deps) {
+  const providerId = args[0] ?? deps.config.provider;
+  if (!providerId) {
+    deps.renderer.writeError("Usage: wstack models hidden <provider>");
+    return 1;
+  }
+  const saved = deps.config.providers?.[providerId];
+  if (!saved) {
+    deps.renderer.writeError(`Provider "${providerId}" is not configured.`);
+    return 1;
+  }
+  const { providerId: lookupId, provider } = await getCatalogProviderForConfigProvider(providerId, deps);
+  if (!provider) {
+    deps.renderer.writeError(
+      lookupId !== providerId ? `Alias "${providerId}" points at catalog id "${lookupId}" which is not in the cache.` : `Provider "${providerId}" not in catalog.`
+    );
+    return 1;
+  }
+  const knownIds = provider.models.map((m) => m.id);
+  const visible = saved.models;
+  const hidden = visible === void 0 ? [] : knownIds.filter((id) => !visible.includes(id));
+  deps.renderer.write(`${color.bold("Hidden models")} ${color.dim(`(${providerId})`)}
+`);
+  if (hidden.length === 0) {
+    deps.renderer.write(color.dim("(none hidden)\n"));
+    return 0;
+  }
+  for (const id of hidden) deps.renderer.write(`  ${id}
+`);
+  deps.renderer.write(color.dim(`
+Restore: wstack models show ${providerId} <model> \xB7 reset ${providerId}
+`));
+  return 0;
+}
+async function modelsReset(args, deps) {
+  const providerId = args[0];
+  if (!providerId) {
+    deps.renderer.writeError("Usage: wstack models reset <provider>");
+    return 1;
+  }
+  const saved = deps.config.providers?.[providerId];
+  if (!saved) {
+    deps.renderer.writeError(`Provider "${providerId}" is not configured.`);
+    return 1;
+  }
+  if (saved.models === void 0) {
+    deps.renderer.writeInfo(`${providerId} already shows the full catalog model list.`);
+    return 0;
+  }
+  await mutateConfigProviders(deps.paths.globalConfig, deps.vault, (providers) => {
+    const p = providers[providerId];
+    if (!p) return;
+    delete p.models;
+  });
+  const nextProvider = { ...saved };
+  delete nextProvider.models;
+  deps.config.providers = {
+    ...deps.config.providers ?? {},
+    [providerId]: nextProvider
+  };
+  deps.renderer.writeInfo(`Reset visible model list for ${providerId} to the full catalog default.`);
+  return 0;
+}
 async function modelsCaps(args, deps) {
   const providerId = args[0] ?? deps.config.provider;
   const modelId = args[1] ?? deps.config.model;
@@ -26330,7 +26792,7 @@ function parseBoolFlag(flags, key) {
   return void 0;
 }
 async function modelsAdd(args, deps) {
-  const flags = parseFlags2(args);
+  const flags = parseFlags3(args);
   const pos = positionals2(args);
   const modelId = pos[0];
   if (!modelId) {
@@ -27183,7 +27645,7 @@ function installWarningSummary(output) {
 }
 var versionCmd = async (_args, deps) => {
   deps.renderer.write(
-    `WrongStack ${CLI_VERSION} (apiVersion ${API_VERSION}, node ${process.version}, ${os.platform()})
+    `WrongStack ${CLI_VERSION} (apiVersion ${API_VERSION}, node ${process.version}, ${os7.platform()})
 `
   );
   return 0;
@@ -27725,6 +28187,7 @@ function registerBuiltinTools(deps) {
   deps.toolRegistry.register(
     makeMailInboxTool({ projectDir: deps.wpaths.projectDir, events: deps.events })
   );
+  applyToolDescriptionModes(deps.toolRegistry, deps.config.tools?.descriptionMode);
 }
 
 // src/cli-eternal-flag.ts
@@ -28317,7 +28780,8 @@ async function runWebUIDispatch(ctx) {
     renderer,
     onAutonomy,
     onModelContextResolved,
-    activeRecoveryLock
+    activeRecoveryLock,
+    sddSubagentFactory
   } = ctx;
   agent.disableInteractiveConfirmation();
   renderer.setSilent(true);
@@ -28348,6 +28812,7 @@ async function runWebUIDispatch(ctx) {
     modeStore,
     modeId,
     needsSetup,
+    sddSubagentFactory,
     // Print the "open this" banner only once the server is actually
     // listening, using the RESOLVED ports. The requested port
     // (flags.port) auto-advances past busy ports inside runWebUI, so a
@@ -28404,9 +28869,13 @@ var AUTO_PHASE_EVENTS = [
   "phase.completed",
   "phase.failed",
   "phase.statusChange",
+  "phase.taskStarted",
   "phase.taskCompleted",
   "phase.taskFailed",
   "phase.taskRetrying",
+  "phase.taskAssigned",
+  "phase.taskAdded",
+  "phase.taskMoved",
   "phase.verifying",
   "phase.verifyFailed",
   "phase.repairing",
@@ -28417,6 +28886,8 @@ var AUTO_PHASE_EVENTS = [
   "graph.failed",
   "agent.assigned",
   "agent.released",
+  // Live multi-agent SDD board snapshot → TUI board overlay (Ctrl+B).
+  "sdd.board.snapshot",
   // Git-worktree isolation lifecycle → TUI worktree panel/monitor.
   "worktree.allocated",
   "worktree.committed",
@@ -29539,6 +30010,13 @@ async function runRepl(opts) {
       interrupts = 0;
       return;
     }
+    const sddRun = opts.getSddRun?.();
+    if (sddRun?.isRunning()) {
+      sddRun.stop();
+      opts.renderer.writeWarning("SDD run stop requested. Press Ctrl+C again to exit.");
+      interrupts = 0;
+      return;
+    }
     if (activeCtrl) {
       activeCtrl.abort();
       const killed = opts.onInterruptFleet?.() ?? 0;
@@ -30387,6 +30865,7 @@ async function execute(deps) {
     tokenCounter,
     config,
     configStore,
+    sddSubagentFactory,
     renderer,
     reader,
     session,
@@ -30438,6 +30917,7 @@ async function execute(deps) {
     onValidateAutoProceed,
     getEternalEngine,
     getParallelEngine,
+    getSddRun,
     subscribeEternalIteration,
     subscribeEternalStage,
     skillLoader,
@@ -30716,6 +31196,7 @@ async function execute(deps) {
           // can access them (entry.tsx parses from rendered messages).
           setSuggestions,
           getEternalEngine,
+          getSddRun,
           subscribeEternalIteration,
           subscribeEternalStage,
           subscribeAutoPhase,
@@ -30953,7 +31434,8 @@ async function execute(deps) {
         renderer,
         onAutonomy,
         activeRecoveryLock,
-        onModelContextResolved
+        onModelContextResolved,
+        sddSubagentFactory
       });
     } else {
       code = await runRepl({
@@ -30983,6 +31465,7 @@ async function execute(deps) {
         autoProceedMaxIterations,
         getEternalEngine,
         getParallelEngine,
+        getSddRun,
         skillLoader,
         agentsMonitorController,
         fleetStreamController,
@@ -31096,6 +31579,19 @@ function buildRoutingRunner(config, host) {
 }
 
 // src/fleet/host.ts
+function buildShadowAgentTaskDescription(reason) {
+  return `Shadow Agent one-shot fleet monitor. Reason: ${reason}.
+
+Run exactly one quiet pass:
+- Call fleet_status and fleet_health.
+- Inspect mail_inbox only for explicit hoop/shadow control messages.
+- Do not broadcast startup, heartbeat, shutdown, or healthy status messages.
+- Use mail_send only for high/critical anomalies or explicit control replies.
+- Terminate agents only when explicitly commanded.
+- If the fleet is healthy and no command needs a reply, keep the final answer to "shadow: quiet".
+
+The host will stop this Shadow Agent after this pass. Do not schedule follow-up work.`;
+}
 var MultiAgentHost = class _MultiAgentHost {
   constructor(deps, opts = {}) {
     this.deps = deps;
@@ -31111,10 +31607,9 @@ var MultiAgentHost = class _MultiAgentHost {
    *  critic.evaluation) onto the fleet bus without needing the tool registered
    *  in the host's ToolRegistry. */
   fleetEmitTool;
-  /** Own FleetStatusTool — created in buildDirector() so subagents in director
-   *  mode can read fleet state (subagent statuses, task progress) without the
-   *  tool being in the host's ToolRegistry. */
-  fleetStatusTool;
+  /** Director-owned tools available to scoped subagents even when the leader
+   * ToolRegistry was not populated because director mode was promoted lazily. */
+  directorToolsByName = /* @__PURE__ */ new Map();
   /** Lazily built alongside the director — produces per-subagent JSONL
    *  writers under `<sessionsRoot>/<runId>/`. Null without sessionsRoot. */
   sessionFactory;
@@ -31142,6 +31637,23 @@ var MultiAgentHost = class _MultiAgentHost {
    *  adaptiveConcurrency.enabled = true. Monitors FleetBus for 429 errors and
    *  automatically adjusts maxConcurrent to prevent rate limiting. */
   adaptiveConcurrencyController;
+  /** Active Shadow Agent spawned by the host or /shadow start. */
+  shadowAgentId = null;
+  /** Assigned monitoring task for the active Shadow Agent. */
+  shadowTaskId = null;
+  /** All internal Shadow Agent startup/heartbeat task ids, excluded from fleet summaries. */
+  shadowTaskIds = /* @__PURE__ */ new Set();
+  /** Shadow task ids assigned but not yet completed. Prevents heartbeat backlog. */
+  shadowOutstandingTaskIds = /* @__PURE__ */ new Set();
+  /** Shadow task ids whose subagent should stop immediately after the one-shot pass. */
+  shadowStopAfterTaskIds = /* @__PURE__ */ new Set();
+  shadowHeartbeatIntervalMs = 3e4;
+  /** Suppresses buildDirector() auto-start while /shadow start is explicitly spawning one. */
+  shadowAutoStartSuppressions = 0;
+  shadowObservedWorkDepth = 0;
+  shadowPassInFlight = false;
+  shadowQueuedProblem = null;
+  shadowActivityOffHandles = [];
   /**
    * Force the lazy build path to run *now* and return the live Director,
    * or null when director mode is off. Used by the CLI to register the
@@ -31224,6 +31736,14 @@ var MultiAgentHost = class _MultiAgentHost {
     });
     this.director.on("task.completed", ({ task, result }) => {
       this.fleetManager?.removePendingTask(task.id);
+      const isShadowTask = this.shadowTaskIds.has(task.id);
+      if (isShadowTask) {
+        this.shadowOutstandingTaskIds.delete(task.id);
+        if (this.shadowStopAfterTaskIds.delete(task.id)) {
+          void this.stopShadowAfterTask(result.subagentId);
+        }
+        return;
+      }
       this.emitLifecycleCompleted(task.id, result);
       const monitor = this.opts.agentMonitor;
       if (monitor) {
@@ -31292,17 +31812,33 @@ var MultiAgentHost = class _MultiAgentHost {
       task,
       subagentId
     }) => {
+      if (this.shadowTaskIds.has(task.id)) return;
       this.deps.events.emit("subagent.task_started", {
         subagentId,
         taskId: task.id,
         description: task.description
       });
     };
+    const coordinatorSubagentStoppedHandler = ({ subagentId }) => {
+      this.clearShadowAgent(subagentId);
+    };
+    this.directorOffHandles.push(
+      this.director.fleet.filter("subagent.removed", (e) => {
+        const payload = e.payload;
+        this.clearShadowAgent(payload.subagentId ?? e.subagentId);
+      })
+    );
     const coordinator = this.getCoordinator();
     coordinator.on("task.assigned", coordinatorTaskAssignedHandler);
-    this.coordinatorOffHandle = () => coordinator.off("task.assigned", coordinatorTaskAssignedHandler);
+    coordinator.on("subagent.stopped", coordinatorSubagentStoppedHandler);
+    this.coordinatorOffHandle = () => {
+      coordinator.off("task.assigned", coordinatorTaskAssignedHandler);
+      coordinator.off("subagent.stopped", coordinatorSubagentStoppedHandler);
+    };
     this.fleetEmitTool = makeFleetEmitTool(this.director);
-    this.fleetStatusTool = makeFleetStatusTool(this.director);
+    this.directorToolsByName = new Map(
+      this.director.tools(FLEET_ROSTER).map((tool) => [tool.name, tool])
+    );
     const adaptiveConfig = this.deps.configStore.get().adaptiveConcurrency;
     if (adaptiveConfig?.enabled) {
       this.adaptiveConcurrencyController = new AdaptiveConcurrencyController(
@@ -31316,55 +31852,135 @@ var MultiAgentHost = class _MultiAgentHost {
       this.getCoordinator().setRunner(runner);
       this.directorRunnerSet = true;
     }
-    await this.spawnShadowAgentIfNeeded();
+    this.armShadowAgentIfNeeded();
   }
   /**
-   * Spawn Shadow Agent automatically on first Director build.
-   * Shadow Agent monitors the fleet, detects anomalies, and can intervene via 'hoop'.
+   * Arm host-owned Shadow observation. Healthy work windows stay fully
+   * deterministic; a one-shot LLM Shadow pass runs only after problematic work
+   * finishes, or when the user explicitly invokes /shadow start.
    */
-  async spawnShadowAgentIfNeeded() {
-    const intervalMs = 3e4;
+  armShadowAgentIfNeeded() {
+    if (this.shadowActivityOffHandles.length > 0) return;
+    this.shadowActivityOffHandles.push(
+      this.deps.events.on("agent.run.started", () => this.noteShadowWorkStarted()),
+      this.deps.events.on("agent.run.completed", (e) => {
+        const problem = e.status === "failed" || e.status === "max_iterations" ? `leader run ended with ${e.status}` : void 0;
+        this.noteShadowWorkCompleted(problem);
+      }),
+      this.deps.events.on("subagent.task_started", () => this.noteShadowWorkStarted()),
+      this.deps.events.on("subagent.task_completed", (e) => {
+        const problem = e.status === "failed" || e.status === "timeout" ? `subagent ${e.subagentId} task ${e.taskId} ended with ${e.status}${e.error?.message ? `: ${e.error.message}` : ""}` : void 0;
+        this.noteShadowWorkCompleted(problem);
+      })
+    );
+  }
+  recordShadowAgent(subagentId, taskId, intervalMs = this.shadowHeartbeatIntervalMs) {
+    this.shadowAgentId = subagentId;
+    this.shadowTaskId = taskId;
+    this.shadowHeartbeatIntervalMs = intervalMs;
+    this.markShadowTask(taskId);
+    this.opts.onShadowAgentStarted?.(subagentId);
+  }
+  clearShadowAgent(subagentId) {
+    if (subagentId && this.shadowAgentId !== subagentId) return;
+    const stoppedId = this.shadowAgentId;
+    this.shadowAgentId = null;
+    this.shadowTaskId = null;
+    this.shadowOutstandingTaskIds.clear();
+    this.shadowStopAfterTaskIds.clear();
+    if (stoppedId) this.opts.onShadowAgentStopped?.(stoppedId);
+  }
+  markShadowTask(taskId) {
+    this.shadowTaskIds.add(taskId);
+    this.shadowOutstandingTaskIds.add(taskId);
+  }
+  isActiveSubagent(subagentId) {
+    if (!this.director) return false;
+    const status = this.getCoordinator().getStatus().subagents.find((a) => a.id === subagentId)?.status;
+    return status === "running" || status === "idle";
+  }
+  noteShadowWorkStarted() {
+    if (this.shadowAutoStartSuppressions > 0) return;
+    this.shadowObservedWorkDepth++;
+  }
+  noteShadowWorkCompleted(problem) {
+    if (problem) {
+      this.shadowQueuedProblem = this.shadowQueuedProblem ? `${this.shadowQueuedProblem}; ${problem}` : problem;
+    }
+    if (this.shadowObservedWorkDepth > 0) {
+      this.shadowObservedWorkDepth--;
+    }
+    if (this.shadowObservedWorkDepth === 0 && this.shadowQueuedProblem) {
+      const queued = this.shadowQueuedProblem;
+      this.shadowQueuedProblem = null;
+      this.requestShadowPass(queued);
+    }
+  }
+  requestShadowPass(reason) {
+    if (!this.director) return;
+    if (this.shadowObservedWorkDepth > 0) {
+      this.shadowQueuedProblem = this.shadowQueuedProblem ? `${this.shadowQueuedProblem}; ${reason}` : reason;
+      return;
+    }
+    if (this.shadowPassInFlight || this.shadowAgentId && this.isActiveSubagent(this.shadowAgentId)) {
+      this.shadowQueuedProblem = this.shadowQueuedProblem ? `${this.shadowQueuedProblem}; ${reason}` : reason;
+      return;
+    }
+    this.shadowPassInFlight = true;
+    queueMicrotask(() => {
+      void this.runShadowPass(reason);
+    });
+  }
+  async runShadowPass(reason) {
     try {
-      const subagentId = await this.director.spawn({
-        name: "shadow",
-        role: "shadow-agent",
-        prompt: `You are the Shadow Agent \u2014 a silent background monitor for the WrongStack fleet.
-
-Your job: observe, detect anomalies, and intervene when commanded via 'hoop'.
-
-## Behavior
-
-1. **Start immediately** \u2014 broadcast 'shadow:started' to all agents via mailbox
-2. **Heartbeat every ${intervalMs}ms**:
-   - Call \`fleet_status\` + \`fleet_health\` to track all agents
-   - Call \`mail_inbox\` to monitor broadcasts and status messages
-   - Detect: stuck agents (>5min no events), spike tasks (<5s), orphan assigns
-3. **Deterministic evaluation first** \u2014 use rules-based detection before LLM
-4. **LLM only when needed** \u2014 for complex anomaly classification or decision-making
-5. **'hoop <agentId>' command** \u2014 when received via mailbox:
-   - Terminate the target agent immediately via \`terminate_subagent\`
-   - Send email/telegram notification: "Shadow Agent: terminated rogue agent <id>"
-   - Log the action with timestamp and reason
-
-## Operating Rules
-- Silent by default \u2014 only speak when anomaly detected or commanded
-- Use \`mailbox\` to communicate with other agents
-- Log all interventions with full context
-
-Start your heartbeat loop now.`,
-        maxTokens: 4096,
-        maxCostUsd: 5,
-        timeoutMs: 36e5,
-        // 1 hour max
-        idleTimeoutMs: intervalMs * 2,
-        maxIterations: 1e3,
-        maxToolCalls: 500,
-        provider: "anthropic",
-        model: "claude-sonnet-4-20250514"
-      });
-      console.log(`[shadow] Auto-started ${subagentId} with interval=${intervalMs}ms`);
-    } catch (err) {
-      console.warn(`[shadow] Auto-start failed: ${err}`);
+      if (!this.director) return;
+      if (this.shadowObservedWorkDepth > 0) {
+        this.shadowQueuedProblem = this.shadowQueuedProblem ? `${this.shadowQueuedProblem}; ${reason}` : reason;
+        return;
+      }
+      const liveConfig = this.deps.configStore.get();
+      await this._spawnAndAssign(
+        {
+          name: "shadow",
+          role: "shadow-agent",
+          provider: liveConfig.provider,
+          model: liveConfig.model,
+          tools: [
+            "fleet_status",
+            "fleet_health",
+            "fleet_usage",
+            "mailbox",
+            "mail_inbox",
+            "mail_send",
+            "terminate_subagent"
+          ]
+        },
+        buildShadowAgentTaskDescription(reason),
+        {
+          internalTask: true,
+          stopShadowAfterTask: true,
+          shadowIntervalMs: this.shadowHeartbeatIntervalMs
+        }
+      );
+    } finally {
+      this.shadowPassInFlight = false;
+      if (this.shadowObservedWorkDepth === 0 && this.shadowQueuedProblem) {
+        const queued = this.shadowQueuedProblem;
+        this.shadowQueuedProblem = null;
+        this.requestShadowPass(queued);
+      }
+    }
+  }
+  async stopShadowAfterTask(subagentId) {
+    try {
+      await this.getCoordinator().stop(subagentId);
+    } finally {
+      this.clearShadowAgent(subagentId);
+      if (this.shadowObservedWorkDepth === 0 && this.shadowQueuedProblem) {
+        const queued = this.shadowQueuedProblem;
+        this.shadowQueuedProblem = null;
+        this.requestShadowPass(queued);
+      }
     }
   }
   /**
@@ -31453,20 +32069,6 @@ Start your heartbeat loop now.`,
         };
       }
       const tools = subCfg.tools ? [...subCfg.tools] : void 0;
-      let injectedFleetEmit;
-      let injectedFleetStatus;
-      if (tools) {
-        const emitIdx = tools.indexOf("fleet_emit");
-        if (emitIdx >= 0 && this.fleetEmitTool) {
-          tools.splice(emitIdx, 1);
-          injectedFleetEmit = this.fleetEmitTool;
-        }
-        const statusIdx = tools.indexOf("fleet_status");
-        if (statusIdx >= 0 && this.fleetStatusTool) {
-          tools.splice(statusIdx, 1);
-          injectedFleetStatus = this.fleetStatusTool;
-        }
-      }
       const ctx = new Context({
         systemPrompt: baseSystem,
         provider,
@@ -31487,8 +32089,6 @@ Start your heartbeat loop now.`,
       });
       if (subCfg.role) ctx.meta["agentRole"] = subCfg.role;
       const baseRegistry = this.subagentToolRegistry(tools);
-      if (injectedFleetEmit) baseRegistry.register(injectedFleetEmit);
-      if (injectedFleetStatus) baseRegistry.register(injectedFleetStatus);
       const subAllowedCaps = this.resolveSubagentCapabilities(subCfg);
       const toolExecutor = new ToolExecutor(baseRegistry, {
         permissionPolicy: new AutoApprovePermissionPolicy(subAllowedCaps),
@@ -31516,7 +32116,13 @@ Start your heartbeat loop now.`,
       });
       agent.extensions.register(
         createFallbackModelExtension({
-          getConfig: () => this.deps.configStore.get(),
+          // A per-task `fallbackModels` (set from the SDD board) overrides the
+          // leader's chain for this subagent; otherwise it inherits the config's
+          // explicit list or smart default. Mirrors the runtime light factory.
+          getConfig: () => {
+            const live = this.deps.configStore.get();
+            return subCfg.fallbackModels?.length ? { ...live, fallbackModels: subCfg.fallbackModels } : live;
+          },
           buildProvider: (id) => this.buildSubagentProvider(config, id, effModel),
           events
         })
@@ -31659,7 +32265,15 @@ Start your heartbeat loop now.`,
     const all = this.deps.toolRegistry.list();
     if (!allow || allow.length === 0) return all;
     const allowSet = new Set(allow);
-    return all.filter((t) => allowSet.has(t.name));
+    const result = /* @__PURE__ */ new Map();
+    for (const tool of all) {
+      if (allowSet.has(tool.name)) result.set(tool.name, tool);
+    }
+    for (const name of allowSet) {
+      const directorTool = this.directorToolsByName.get(name);
+      if (directorTool && !result.has(name)) result.set(name, directorTool);
+    }
+    return Array.from(result.values());
   }
   /**
    * Resolve the capability allowlist for a subagent's auto-approve policy.
@@ -31707,17 +32321,36 @@ Start your heartbeat loop now.`,
    * the full tool registry.
    */
   async spawn(description, opts) {
-    await this.buildDirector();
+    const isShadowSpawn = opts?.name === "shadow";
+    if (isShadowSpawn) this.shadowAutoStartSuppressions++;
+    try {
+      await this.buildDirector();
+    } finally {
+      if (isShadowSpawn) this.shadowAutoStartSuppressions--;
+    }
+    if (isShadowSpawn && this.shadowAgentId && this.isActiveSubagent(this.shadowAgentId)) {
+      return { subagentId: this.shadowAgentId, taskId: this.shadowTaskId ?? "shadow-active" };
+    }
     const subagentConfig = {
       name: opts?.name ?? "adhoc",
-      role: "general",
+      role: isShadowSpawn ? "shadow-agent" : "general",
       provider: opts?.provider,
       model: opts?.model,
       tools: opts?.tools,
       allowedCapabilities: opts?.allowedCapabilities
     };
-    const { subagentId, taskId } = await this._spawnAndAssign(subagentConfig, description);
-    this.fleetManager?.addPendingTask(taskId, subagentId, description);
+    const { subagentId, taskId } = await this._spawnAndAssign(
+      subagentConfig,
+      description,
+      {
+        internalTask: isShadowSpawn,
+        stopShadowAfterTask: isShadowSpawn,
+        shadowIntervalMs: opts?.shadowIntervalMs
+      }
+    );
+    if (!isShadowSpawn) {
+      this.fleetManager?.addPendingTask(taskId, subagentId, description);
+    }
     return { subagentId, taskId };
   }
   /**
@@ -31750,11 +32383,32 @@ Start your heartbeat loop now.`,
    * Returns `{ subagentId, taskId }`. Caller holds `pending` tracking
    * and event emission — the helper only talks to the coordinator.
    */
-  async _spawnAndAssign(subagentConfig, description = "") {
+  async _spawnAndAssign(subagentConfig, description = "", opts) {
     const taskId = randomUUID();
     if (!this.director) throw new Error("Director is not initialized");
     const subagentId = await this.director.spawn(subagentConfig);
-    await this.director.assign({ id: taskId, description, subagentId });
+    const task = { id: taskId, description, subagentId };
+    if (opts?.internalTask) {
+      this.markShadowTask(taskId);
+      if (opts.stopShadowAfterTask) this.shadowStopAfterTaskIds.add(taskId);
+      if (subagentConfig.name === "shadow" || subagentConfig.role === "shadow-agent") {
+        this.recordShadowAgent(subagentId, taskId, opts.shadowIntervalMs);
+      }
+      try {
+        await this.director.assignInternal(task);
+      } catch (err) {
+        this.shadowTaskIds.delete(taskId);
+        this.shadowOutstandingTaskIds.delete(taskId);
+        this.shadowStopAfterTaskIds.delete(taskId);
+        if (subagentConfig.name === "shadow" || subagentConfig.role === "shadow-agent") {
+          this.clearShadowAgent(subagentId);
+          await this.director.remove(subagentId).catch(() => void 0);
+        }
+        throw err;
+      }
+    } else {
+      await this.director.assign(task);
+    }
     return { subagentId, taskId };
   }
   /**
@@ -31791,7 +32445,7 @@ Start your heartbeat loop now.`,
     }
     const fleetStatus = this.fleetManager?.getFleetStatus() ?? { pending: []};
     const pending = fleetStatus.pending.filter((p) => activeSubagentIds.has(p.subagentId));
-    const completed = this.director ? this.director.completedResults() : [];
+    const completed = this.director ? this.director.completedResults().filter((r) => !this.shadowTaskIds.has(r.taskId)) : [];
     const completedCount = completed.length;
     const liveCount = live.filter((s) => s.status === "running" || s.status === "idle").length;
     const summary = !this.director ? "No subagents have been spawned." : liveCount > 0 ? `${pending.length} pending, ${liveCount} active, ${completedCount} completed.` : `${pending.length} pending, ${completedCount} completed.`;
@@ -31808,7 +32462,7 @@ Start your heartbeat loop now.`,
    * the table renders the most interesting subagent at the top.
    */
   usage() {
-    const completed = this.director ? this.director.completedResults() : [];
+    const completed = this.director ? this.director.completedResults().filter((r) => !this.shadowTaskIds.has(r.taskId)) : [];
     const bySubagent = /* @__PURE__ */ new Map();
     for (const r of completed) {
       const cur = bySubagent.get(r.subagentId) ?? {
@@ -31912,9 +32566,11 @@ Start your heartbeat loop now.`,
   async kill(subagentId) {
     if (!this.director) return false;
     await this.getCoordinator().stop(subagentId);
+    if (this.shadowAgentId === subagentId) this.clearShadowAgent(subagentId);
     return true;
   }
   async stopAll() {
+    this.clearShadowAgent();
     if (this.director) {
       await this.getCoordinator().stopAll();
     }
@@ -31958,6 +32614,11 @@ Start your heartbeat loop now.`,
    * Safe to call multiple times — subsequent calls are no-ops.
    */
   async dispose() {
+    this.clearShadowAgent();
+    for (const off of this.shadowActivityOffHandles) {
+      off();
+    }
+    this.shadowActivityOffHandles.length = 0;
     for (const off of this.directorOffHandles) {
       off();
     }
@@ -33690,6 +34351,22 @@ async function main(argv) {
     }
   });
   brainMonitor.start();
+  let shadowDefaults = {};
+  const shadowController = {
+    activeId: null,
+    register(id) {
+      this.activeId = id;
+    },
+    clear() {
+      this.activeId = null;
+    },
+    getDefaults() {
+      return { ...shadowDefaults };
+    },
+    setDefaults(defaults) {
+      shadowDefaults = { ...shadowDefaults, ...defaults };
+    }
+  };
   const multiAgentHost = new MultiAgentHost(
     {
       container,
@@ -33718,7 +34395,11 @@ async function main(argv) {
       getLeaderMaxContext: () => effectiveMaxContext,
       brain,
       agentMonitor,
-      traceId: sessResult.traceId
+      traceId: sessResult.traceId,
+      onShadowAgentStarted: (subagentId) => shadowController.register(subagentId),
+      onShadowAgentStopped: (subagentId) => {
+        if (shadowController.activeId === subagentId) shadowController.clear();
+      }
     }
   );
   toolRegistry.register(
@@ -33903,15 +34584,7 @@ async function main(argv) {
 `)
   });
   const coordinatorController = {};
-  const shadowController = {
-    activeId: null,
-    register(id) {
-      this.activeId = id;
-    },
-    clear() {
-      this.activeId = null;
-    }
-  };
+  const sddRunRegistry = new SddRunRegistry();
   const slashCmds = buildBuiltinSlashCommands({
     registry: slashRegistry,
     toolRegistry,
@@ -33971,9 +34644,6 @@ async function main(argv) {
     },
     onSpawn: async (description, spawnOpts) => {
       const { subagentId, taskId } = await multiAgentHost.spawn(description, spawnOpts);
-      if (shadowController && spawnOpts?.name === "shadow") {
-        shadowController.register(subagentId);
-      }
       const tags = [];
       if (spawnOpts?.provider) tags.push(spawnOpts.provider);
       if (spawnOpts?.model) tags.push(spawnOpts.model);
@@ -34156,14 +34826,14 @@ ${color.dim("\u2500".repeat(40))}` : "";
       if (!director) return null;
       return director.snapshot();
     },
-    onFleetKill: () => {
+    onFleetKill: async () => {
       if (!director) return 0;
       const s = director.status();
       let killed = 0;
       for (const sa of s.subagents) {
         if (sa.status === "running" || sa.status === "idle") {
           try {
-            director.remove(sa.id);
+            await director.remove(sa.id);
             killed++;
           } catch {
           }
@@ -34171,10 +34841,10 @@ ${color.dim("\u2500".repeat(40))}` : "";
       }
       return killed;
     },
-    onFleetTerminate: (subagentId) => {
+    onFleetTerminate: async (subagentId) => {
       if (!director) return false;
       try {
-        director.terminate(subagentId);
+        await director.terminate(subagentId);
         return true;
       } catch {
         return false;
@@ -34591,7 +35261,6 @@ Restart WrongStack to load or unload plugin code in this session.`;
       context.model
     ),
     onSddParallelRun: async (opts) => {
-      const { SddParallelRun } = await import('@wrongstack/core');
       const sdd = await Promise.resolve().then(() => (init_sdd(), sdd_exports));
       const tracker2 = sdd.getTaskTracker();
       const builder = sdd.getActiveBuilder();
@@ -34610,14 +35279,58 @@ Restart WrongStack to load or unload plugin code in this session.`;
       if (!graph) {
         return "No task graph found for the current SDD session.";
       }
-      const subagentFactory = multiAgentHost.makeSubagentFactory(config);
-      const run = new SddParallelRun({
+      const core = await import('@wrongstack/core');
+      let worktrees;
+      if (process.env["WRONGSTACK_SDD_WORKTREES"] !== "0") {
+        const { spawnSync } = await import('child_process');
+        const inGit = spawnSync("git", ["rev-parse", "--is-inside-work-tree"], {
+          cwd: projectRoot,
+          encoding: "utf8",
+          windowsHide: true
+        }).stdout?.trim() === "true";
+        if (inGit) worktrees = new core.WorktreeManager({ projectRoot, events });
+      }
+      const boardStore = new core.SddBoardStore({ baseDir: wpaths.projectSddBoards });
+      const verifyTask = core.makeCommandVerifier();
+      const sddSupervisor = new core.SddSupervisor({
+        brain,
+        reassignModels: core.effectiveFallbackChain(config)
+      });
+      const sddSubagentFactory = multiAgentHost.makeSubagentFactory(config);
+      const conflictMode = process.env["WRONGSTACK_SDD_CONFLICT_RESOLVER"];
+      const conflictResolver = conflictMode === "prefer-incoming" ? core.makePreferSideConflictResolver("incoming") : conflictMode === "prefer-base" ? core.makePreferSideConflictResolver("base") : conflictMode === "llm" ? core.makeLlmConflictResolver({
+        run: async (prompt) => {
+          const r = await sddSubagentFactory({
+            id: `sdd-conflict-${Date.now()}`,
+            role: "executor",
+            name: "Conflict Resolver",
+            disabledTools: ["delegate"],
+            // Only returns the resolved text; the core helper writes the
+            // file. Keep it on the read-only capability floor.
+            allowedCapabilities: ["fs.read", "net.outbound"]
+          });
+          try {
+            const res = await r.agent.run([{ type: "text", text: prompt }]);
+            return res.finalText ?? "";
+          } finally {
+            await r.dispose?.();
+          }
+        }
+      }) : void 0;
+      const handle = core.startSddRun({
         tracker: tracker2,
         graph,
         agent,
         projectRoot,
+        events,
         parallelSlots: opts?.parallelSlots,
-        subagentFactory,
+        subagentFactory: sddSubagentFactory,
+        worktrees,
+        boardStore,
+        registry: sddRunRegistry,
+        verifyTask,
+        conflictResolver,
+        superviseFailure: sddSupervisor.superviseFailure,
         onProgress: (p) => {
           renderer.write(
             `  \u2591 wave ${p.wave + 1} \xB7 ${p.completed}/${p.total} tasks \xB7 ${p.percent}% done
@@ -34625,27 +35338,70 @@ Restart WrongStack to load or unload plugin code in this session.`;
           );
         }
       });
-      globalThis.__sddParallelRun = run;
-      const result = await run.run();
-      globalThis.__sddParallelRun = void 0;
-      const lines = [
-        `SDD parallel run complete:`,
-        `  ${result.totalWaves} waves \xB7 ${result.totalCompleted} done \xB7 ${result.totalFailed} failed`,
-        `  ${(result.totalDurationMs / 1e3).toFixed(1)}s total`
-      ];
-      if (result.deadlocked) lines.push(color.red("  \u26A0 deadlock \u2014 tasks blocked by failed tasks."));
-      if (result.stopRequested) lines.push(color.yellow("  \u26A1 stopped by user."));
-      return lines.join("\n");
+      globalThis.__sddParallelRun = handle.run;
+      try {
+        const result = await handle.completion;
+        const lines = [
+          `SDD parallel run complete:`,
+          `  ${result.totalWaves} waves \xB7 ${result.totalCompleted} done \xB7 ${result.totalFailed} failed`,
+          `  ${(result.totalDurationMs / 1e3).toFixed(1)}s total`
+        ];
+        if (result.deadlocked) lines.push(color.red("  \u26A0 deadlock \u2014 tasks blocked by failed tasks."));
+        if (result.stopRequested) lines.push(color.yellow("  \u26A1 stopped by user."));
+        return lines.join("\n");
+      } finally {
+        globalThis.__sddParallelRun = void 0;
+      }
     },
     onSddParallelStop: () => {
       const run = globalThis.__sddParallelRun;
       run?.stop();
     },
+    onSddRetryAllFailed: () => sddRunRegistry.getActive()?.retryAllFailed() ?? 0,
+    onSddSplitTask: (taskId, subtasks) => {
+      const active = sddRunRegistry.getActive();
+      if (!active) return null;
+      const snap = active.snapshot();
+      const match = snap.tasks.find((t) => t.id === taskId || t.shortId === taskId);
+      const ids = active.splitTask(match?.id ?? taskId, subtasks);
+      return ids.length ? ids : null;
+    },
+    // ── SDD lifecycle: clean worktrees · rollback commits · destroy project ──
+    onSddCleanWorktrees: async () => {
+      const active = sddRunRegistry.getActive();
+      if (active) return active.cleanupWorktrees();
+      const core = await import('@wrongstack/core');
+      const { removed } = await core.cleanupSddWorktrees(projectRoot);
+      return removed;
+    },
+    onSddRollback: async () => {
+      const active = sddRunRegistry.getActive();
+      if (active) return active.rollback();
+      const core = await import('@wrongstack/core');
+      return core.rollbackSddRunFromDisk({ projectRoot, boardsDir: wpaths.projectSddBoards });
+    },
+    onSddDestroy: async () => {
+      sddRunRegistry.getActive()?.stop();
+      const core = await import('@wrongstack/core');
+      return core.destroySddProject({
+        projectRoot,
+        paths: {
+          projectSpecs: wpaths.projectSpecs,
+          projectTaskGraphs: wpaths.projectTaskGraphs,
+          projectSddSession: wpaths.projectSddSession,
+          projectSddBoards: wpaths.projectSddBoards
+        }
+      });
+    },
     onAutoPhaseStart: autoPhaseHost.onAutoPhaseStart,
     onAutoPhasePause: autoPhaseHost.onAutoPhasePause,
     onAutoPhaseResume: autoPhaseHost.onAutoPhaseResume,
     onAutoPhaseStop: autoPhaseHost.onAutoPhaseStop,
     getAutoPhaseRunner: autoPhaseHost.getAutoPhaseRunner,
+    onAutoPhaseMoveTask: autoPhaseHost.onAutoPhaseMoveTask,
+    onAutoPhaseAssignTask: autoPhaseHost.onAutoPhaseAssignTask,
+    onAutoPhaseAddTask: autoPhaseHost.onAutoPhaseAddTask,
+    onAutoPhaseRetryTask: autoPhaseHost.onAutoPhaseRetryTask,
     onWorktree: autoPhaseHost.onWorktree
   });
   for (const cmd of slashCmds) slashRegistry.register(cmd);
@@ -34683,6 +35439,9 @@ Restart WrongStack to load or unload plugin code in this session.`;
     tokenCounter,
     config,
     configStore,
+    // Real director-backed per-task agent factory — threaded to the CLI-hosted
+    // WebUI so its "New SDD Project" wizard runs the same multi-agent fleet.
+    sddSubagentFactory: multiAgentHost.makeSubagentFactory(config),
     // Project-scoped mailbox — the AutonomousCoordinator in execution.ts
     // subscribes to it so goals/tasks/knowledge are shared with other
     // terminals working on the same project.
@@ -34834,6 +35593,10 @@ Reply YES to auto-proceed, NO to wait for human input.`
     },
     getEternalEngine: () => eternalEngine,
     getParallelEngine: () => parallelEngine,
+    // Active SDD parallel run (if any). Lets the REPL/TUI SIGINT handler stop a
+    // running `/sdd parallel` mid-flight — without this the run is unreachable
+    // from Ctrl+C (it has its own coordinator, not the autonomy engines).
+    getSddRun: () => sddRunRegistry.getActive(),
     subscribeEternalIteration: (fn) => {
       eternalListeners.add(fn);
       return () => eternalListeners.delete(fn);