@wrongstack/cli 0.284.1 → 0.286.0

package/dist/input-reader.d.ts

@@ -0,0 +1,45 @@
+import { type InputReader, type PromptOption } from '@wrongstack/core';
+export interface ReadlineInputReaderOptions {
+    historyFile?: string | undefined;
+    prompt?: string | undefined;
+}
+export declare class ReadlineInputReader implements InputReader {
+    private rl?;
+    private readonly historyFile;
+    private history;
+    private pending;
+    constructor(opts?: ReadlineInputReaderOptions);
+    private loadHistory;
+    private saveHistory;
+    private ensure;
+    readLine(prompt?: string, timeoutOpts?: {
+        timeoutMs: number;
+        defaultAnswer: string;
+    } | undefined): Promise<string>;
+    /**
+     * Install the out-of-band write guard for the active prompt. When a log
+     * line or other async output lands while the user is mid-type, the guard
+     * clears the draft row, lets the message print, then repaints the prompt
+     * and the in-progress draft (cursor preserved) via readline's own
+     * refresh. Without it, each async write leaves the half-typed line
+     * stranded as a fresh scrollback row.
+     *
+     * No-op on non-TTY output (piped/redirected) — there's no draft to
+     * protect and the ANSI clear/repaint would be noise in a file.
+     */
+    private installPromptGuard;
+    readKey(prompt: string, options: PromptOption[]): Promise<string>;
+    /**
+     * Read a line of input while masking each character with a bullet so the
+     * user gets visual confirmation that bytes are arriving (especially on
+     * paste, which previously felt like nothing happened). Pasted chunks
+     * are echoed as a run of bullets, Backspace/DEL erases one bullet, and
+     * Ctrl+U / Ctrl+T are honored. Non-TTY input is read normally — there's
+     * nothing to hide when piped, and echoing bullets to a file is noise.
+     *
+     * Returns the raw entered string (no trim — caller decides).
+     */
+    readSecret(prompt: string): Promise<string>;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=input-reader.d.ts.map

package/dist/input-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-reader.d.ts","sourceRoot":"","sources":["../src/input-reader.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,YAAY,EAKlB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,0BAA0B;IACzC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B;AAED,qBAAa,mBAAoB,YAAW,WAAW;IACrD,OAAO,CAAC,EAAE,CAAC,CAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,OAAO,CAAS;IAExB,YAAY,IAAI,GAAE,0BAA+B,EAEhD;YAEa,WAAW;YASX,WAAW;IASzB,OAAO,CAAC,MAAM;IAYR,QAAQ,CACZ,MAAM,CAAC,EAAE,MAAM,EACf,WAAW,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,GACrE,OAAO,CAAC,MAAM,CAAC,CAyFjB;IAED;;;;;;;;;;OAUG;IACH,OAAO,CAAC,kBAAkB;IA2BpB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAyCtE;IAED;;;;;;;;;OASG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAwFhD;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAK3B;CACF"}

package/dist/launch-hints.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Launch-time feature hints. Shown once per CLI launch — after the
+ * provider/model/mode/YOLO prompts have resolved and right before the
+ * REPL or TUI starts — to remind users what slash commands, flags, and
+ * runtime controls this build ships with. Suppress with `--no-hints` or
+ * `WRONGSTACK_NO_HINTS=1`.
+ *
+ * Rather than dumping every category at once, each launch shows ONE
+ * category and rotates to the next on the following launch (round-robin
+ * via a tiny persisted cursor). So you see Autonomy one boot, the fleet
+ * the next, MCP/plugins after that — bite-sized, and the whole set still
+ * comes around quickly. `/help` lists everything on demand.
+ *
+ * The list is intentionally hand-curated rather than auto-derived from
+ * the slash-command registry: a one-line blurb tuned for each entry
+ * lands better than `command.description` boilerplate.
+ */
+import type { TerminalRenderer } from './renderer.js';
+/**
+ * Total number of hints across all groups. Exported so callers can
+ * assert "≥ 20" in tests without re-counting.
+ */
+export declare const HINT_COUNT: number;
+/** Number of rotating categories. */
+export declare const HINT_GROUP_COUNT: number;
+/** Category titles, in rotation order. Exported for tests. */
+export declare const HINT_GROUP_TITLES: readonly string[];
+export interface LaunchHintOptions {
+    /**
+     * File holding the rotation cursor. When set, each call advances it so
+     * consecutive launches show different categories (round-robin). Missing
+     * or unreadable file starts the rotation at the first category.
+     */
+    readonly cursorFile?: string | undefined;
+    /**
+     * Force a specific category index (wraps around). Overrides the cursor.
+     * Mainly for tests and `--hints`-style explicit selection.
+     */
+    readonly groupIndex?: number | undefined;
+}
+/**
+ * Print one rotating category of launch hints to `renderer`. No-op when
+ * suppressed via `--no-hints` or `WRONGSTACK_NO_HINTS=1`.
+ */
+export declare function printLaunchHints(renderer: Pick<TerminalRenderer, 'write'>, flags: Record<string, string | boolean>, opts?: LaunchHintOptions): Promise<void>;
+//# sourceMappingURL=launch-hints.d.ts.map

package/dist/launch-hints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-hints.d.ts","sourceRoot":"","sources":["../src/launch-hints.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAyGtD;;;GAGG;AACH,eAAO,MAAM,UAAU,EAAE,MAAuD,CAAC;AAEjF,qCAAqC;AACrC,eAAO,MAAM,gBAAgB,EAAE,MAAsB,CAAC;AAEtD,8DAA8D;AAC9D,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAA+B,CAAC;AAU/E,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAgCD;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,EACzC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,EACvC,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAsBf"}

package/dist/mailbox-bridge-bootstrap.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Mailbox-bridge auto-bootstrap.
+ *
+ * Called by REPL/TUI/WebUI/eternal-autonomy at startup. If a mailbox
+ * bridge is already running for the current project, we discover it
+ * via the lock file + /healthz probe and return its URL + token.
+ * Otherwise we spawn `wstack mailbox serve` as a detached child
+ * process and wait up to BOOTSTRAP_TIMEOUT_MS for the new bridge to
+ * come up. The result is a `MailboxBridgeHandle` that callers can
+ * use without re-doing the discovery.
+ *
+ * This is a CLIENT of the single-instance-mailbox contract — it
+ * never touches the lock itself except to read. The spawned
+ * `wstack mailbox serve` instance is the sole writer; we just
+ * wait for it.
+ *
+ * Failure modes (all graceful — REPL starts anyway):
+ *  - bridge already up but unreachable → return its URL/token
+ *    anyway, hoping the caller's request timeout will catch a real
+ *    outage. Don't crash REPL because /healthz is flaky.
+ *  - spawn fails or bridge doesn't come up in time → return null,
+ *    log a warning, REPL runs without mailbox-bridge. The user
+ *    can run `wstack mailbox serve` manually later.
+ */
+import { readLiveLock, type MailboxBridgeLock } from '@wrongstack/core/coordination';
+export declare const MAILBOX_BRIDGE_BOOTSTRAP_TIMEOUT_MS = 5000;
+export declare const MAILBOX_BRIDGE_HEALTHZ_PROBE_MS = 500;
+export interface MailboxBridgeHandle {
+    /** Bound URL — empty string if we couldn't bring the bridge up. */
+    url: string;
+    /** Bearer token. Empty string on failure. */
+    token: string;
+    /** Lock file path on disk. Always set, even on failure. */
+    lockPath: string;
+    /** Where the spawned process is, if we spawned one. */
+    childPid: number | null;
+    /**
+     * How the handle was acquired:
+     *  - 'joined'    — found an existing instance via lock + /healthz
+     *  - 'spawned'   — we spawned a fresh `wstack mailbox serve`
+     *  - 'unhealthy' — found a live lock but /healthz failed; returned
+     *                   the recorded URL/token anyway so the caller's
+     *                   fetch layer can retry.
+     *  - 'failed'    — could not bring up a bridge; caller should run
+     *                   `wstack mailbox serve` manually.
+     */
+    source: 'joined' | 'spawned' | 'unhealthy' | 'failed';
+}
+export interface BootstrapOptions {
+    projectDir: string;
+    /**
+     * Function used to spawn `wstack mailbox serve` if no live
+     * instance is found. Defaults to a real `child_process.spawn`
+     * call; tests pass a stub.
+     *
+     * The function must return a child-like object with at least
+     * `pid` and `unref()`. We do not stream stdout/stderr — the
+     * bridge writes its own status to stdout, and the caller (or
+     * the user's terminal) handles display.
+     */
+    spawnFn?: SpawnFn;
+    /**
+     * Function used to probe /healthz on a given URL. Defaults to
+     * the global `fetch` with a 500 ms AbortSignal; tests pass a stub.
+     */
+    probeFn?: ProbeFn;
+    /** Maximum time to wait for a freshly-spawned bridge. */
+    timeoutMs?: number;
+}
+export type SpawnFn = (args: string[], cwd: string) => SpawnedChild;
+export interface SpawnedChild {
+    pid: number | undefined;
+    unref(): void;
+}
+export type ProbeFn = (url: string, timeoutMs: number) => Promise<boolean>;
+/**
+ * Try to ensure a mailbox bridge is up for `projectDir`. Returns a
+ * handle describing how it was obtained (or that the attempt
+ * failed). Never throws — callers are usually startup code paths
+ * that prefer to log a warning over crashing the host process.
+ */
+export declare function tryAcquireMailboxBridge(opts: BootstrapOptions): Promise<MailboxBridgeHandle>;
+export { readLiveLock, type MailboxBridgeLock };
+export declare function readTokenFromFile(tokenPath: string): Promise<string | null>;
+//# sourceMappingURL=mailbox-bridge-bootstrap.d.ts.map

package/dist/mailbox-bridge-bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mailbox-bridge-bootstrap.d.ts","sourceRoot":"","sources":["../src/mailbox-bridge-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAKH,OAAO,EAAE,YAAY,EAAE,KAAK,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAGrF,eAAO,MAAM,mCAAmC,OAAQ,CAAC;AACzD,eAAO,MAAM,+BAA+B,MAAM,CAAC;AAEnD,MAAM,WAAW,mBAAmB;IAClC,mEAAmE;IACnE,GAAG,EAAE,MAAM,CAAC;IACZ,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;;;;;;;OASG;IACH,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;CACvD;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,KAAK,YAAY,CAAC;AAEpE,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAE3E;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,mBAAmB,CAAC,CAuF9B;AAiDD,OAAO,EAAE,YAAY,EAAE,KAAK,iBAAiB,EAAE,CAAC;AAKhD,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAMjF"}

package/dist/mcp-serve.d.ts

@@ -0,0 +1,21 @@
+import { Context, type PermissionPolicy, type Tool, ToolRegistry } from '@wrongstack/core';
+import { type MCPServerPrompt, type MCPServerResource } from '@wrongstack/mcp';
+import type { SubcommandDeps } from './subcommands/index.js';
+export interface SelectedMcpServeContent {
+    resources: MCPServerResource[];
+    prompts: MCPServerPrompt[];
+}
+/** Load only files explicitly named by trusted CLI flags; nothing is auto-discovered. */
+export declare function loadSelectedMcpServeContent(flags: Record<string, string | boolean>, cwd: string): Promise<SelectedMcpServeContent>;
+/** Minimal run context — tools read cwd/projectRoot/signal; provider/session are stubs. */
+export declare function makeServeContext(cwd: string, projectRoot: string, signal: AbortSignal, restrictFsToRoot?: boolean): Context;
+/**
+ * Compute the set of tools an MCP-serve session exposes: a tool is included
+ * only if it passes the whitelist (when set) AND the permission policy returns
+ * `auto`. With `AutoApprovePermissionPolicy` this withholds shell/write/edit and
+ * dangerous-capability tools; with the `--yolo` policy everything passes.
+ * Exported for testing — the live path calls it inside `serveMcpStdio`.
+ */
+export declare function selectExposedTools(registry: ToolRegistry, ctx: Context, policy: PermissionPolicy, whitelist: Set<string> | null): Promise<Tool[]>;
+export declare function serveMcpStdio(deps: SubcommandDeps): Promise<number>;
+//# sourceMappingURL=mcp-serve.d.ts.map

package/dist/mcp-serve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-serve.d.ts","sourceRoot":"","sources":["../src/mcp-serve.ts"],"names":[],"mappings":"AAYA,OAAO,EAEL,OAAO,EAEP,KAAK,gBAAgB,EAIrB,KAAK,IAAI,EACT,YAAY,EACb,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,iBAAiB,EAIvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAqB7D,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,OAAO,EAAE,eAAe,EAAE,CAAC;CAC5B;AAED,yFAAyF;AACzF,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,EACvC,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,uBAAuB,CAAC,CA+ClC;AAyED,2FAA2F;AAC3F,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,WAAW,EACnB,gBAAgB,UAAO,GACtB,OAAO,CA6BT;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,YAAY,EACtB,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,gBAAgB,EACxB,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,GAC5B,OAAO,CAAC,IAAI,EAAE,CAAC,CAQjB;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAuIzE"}

package/dist/multi-agent.d.ts

@@ -0,0 +1,4 @@
+export type { MultiAgentDeps, MultiAgentHostOptions } from './fleet/host.js';
+export { MultiAgentHost } from './fleet/host.js';
+export { buildRoutingRunner } from './fleet/routing.js';
+//# sourceMappingURL=multi-agent.d.ts.map

package/dist/multi-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multi-agent.d.ts","sourceRoot":"","sources":["../src/multi-agent.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/next-task-predictor.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Next-task prediction — a lightweight, single-shot LLM call that guesses the
+ * user's most likely next steps after an agent turn completes.
+ *
+ * Unlike `/autonomy suggest` (which replays a full `agent.run` with every tool
+ * available), this issues ONE direct `provider.complete` with a tiny prompt and
+ * a low token cap. No tools, no context replay — cheap and fast. It mirrors the
+ * one-shot pattern used by `generateCommitMessageWithLLM` and `dispatch-llm`.
+ *
+ * The result is display-only: predictions are shown to the user, never executed.
+ */
+import { type TodoItem } from '@wrongstack/core';
+import type { CommitLLMProvider } from './slash-commands/commit-llm.js';
+/** Provider shape required to predict — same structural contract as commit-llm. */
+export type PredictLLMProvider = CommitLLMProvider;
+export interface PredictionInput {
+    /** The user's request that kicked off the turn we just finished. */
+    userRequest: string;
+    /** The agent's final assistant text for the turn (its summary of what it did). */
+    assistantSummary: string;
+    /** The current live todo list, used as a strong signal for what's left. */
+    todos: readonly TodoItem[];
+}
+export interface PredictOpts {
+    provider: PredictLLMProvider;
+    model: string;
+    /** Max predictions to return. Default 3. */
+    maxPredictions?: number | undefined;
+    /** Abort signal — when omitted, an internal 12s timeout is used. */
+    signal?: AbortSignal | undefined;
+}
+/** Build the user-message text from the turn context. Pure + testable. */
+export declare function buildPredictionPrompt(input: PredictionInput): string;
+/**
+ * Parse a numbered/bulleted list of predictions out of raw model text.
+ * Pure + testable. Returns [] for the NONE sentinel or unparseable output.
+ */
+export declare function parsePredictions(raw: string, max?: number): string[];
+/**
+ * Predict the user's likely next steps. Best-effort: any failure (timeout,
+ * provider error, abort) resolves to `[]` so the caller can stay silent and
+ * never let prediction break the turn.
+ */
+export declare function predictNextTasks(input: PredictionInput, opts: PredictOpts): Promise<string[]>;
+//# sourceMappingURL=next-task-predictor.d.ts.map

package/dist/next-task-predictor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"next-task-predictor.d.ts","sourceRoot":"","sources":["../src/next-task-predictor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAA8B,KAAK,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAExE,mFAAmF;AACnF,MAAM,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,oEAAoE;IACpE,WAAW,EAAE,MAAM,CAAC;IACpB,kFAAkF;IAClF,gBAAgB,EAAE,MAAM,CAAC;IACzB,2EAA2E;IAC3E,KAAK,EAAE,SAAS,QAAQ,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,oEAAoE;IACpE,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CAClC;AAaD,0EAA0E;AAC1E,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAkBpE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,SAAI,GAAG,MAAM,EAAE,CAmB/D;AAYD;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,eAAe,EACtB,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,MAAM,EAAE,CAAC,CA6BnB"}

package/dist/permission-prompt.d.ts

@@ -0,0 +1,11 @@
+import type { InputReader, Tool } from '@wrongstack/core';
+export type PromptDecision = 'yes' | 'no' | 'always' | 'deny';
+/** Signature the Agent expects for confirming tool calls. */
+export type ConfirmAwaiter = (tool: Tool, input: unknown, toolUseId: string, suggestedPattern: string) => Promise<'yes' | 'no' | 'always' | 'deny'>;
+export declare function makePromptDelegate(reader: InputReader): (tool: Tool, input: unknown, suggestedPattern: string) => Promise<PromptDecision>;
+/**
+ * Create a ConfirmAwaiter for the CLI path. Wraps makePromptDelegate
+ * with the ConfirmAwaiter type signature expected by the Agent.
+ */
+export declare function makeConfirmAwaiter(reader: InputReader): ConfirmAwaiter;
+//# sourceMappingURL=permission-prompt.d.ts.map

package/dist/permission-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-prompt.d.ts","sourceRoot":"","sources":["../src/permission-prompt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAK1D,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,IAAI,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE9D,6DAA6D;AAC7D,MAAM,MAAM,cAAc,GAAG,CAC3B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,KACrB,OAAO,CAAC,KAAK,GAAG,IAAI,GAAG,QAAQ,GAAG,MAAM,CAAC,CAAC;AAE/C,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,UAChC,IAAI,SAAS,OAAO,oBAAoB,MAAM,KAAG,OAAO,CAAC,cAAc,CAAC,CA4B7F;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,GAAG,cAAc,CAMtE"}

package/dist/picker.d.ts

@@ -0,0 +1,86 @@
+import type { Config, ModelsDevModel, ModelsRegistry, ResolvedProvider } from '@wrongstack/core';
+import type { ReadlineInputReader } from './input-reader.js';
+import type { TerminalRenderer } from './renderer.js';
+/**
+ * Filter providers by a free-text query: case-insensitive substring match
+ * against the provider id OR display name. An empty/whitespace query returns
+ * all providers (as a copy). Input order is preserved. Powers the live
+ * type-to-filter provider picker.
+ */
+/**
+ * Append synthetic entries for the built-in local-server presets
+ * (OmniRoute / Ollama / vLLM / LM Studio) that aren't already present in
+ * the merged list. These are keyless loopback gateways, so they pass the
+ * `isKeylessLocalProvider` filter and become immediately selectable even
+ * on a fresh install with no config and no catalog entry — mirroring the
+ * `wstack auth local` shortcut. An entry is skipped when an id-match
+ * already exists (catalog or saved config), so a user's customized
+ * provider always wins over the preset default. Mutates and returns
+ * `merged` for call-site convenience. Pure aside from the push.
+ */
+export declare function appendLocalPresetProviders(merged: ResolvedProvider[]): ResolvedProvider[];
+export declare function filterProviders(query: string, providers: ResolvedProvider[]): ResolvedProvider[];
+export interface ProviderPickerState {
+    query: string;
+    selected: number;
+    status: 'typing' | 'submitted' | 'cancelled';
+}
+/**
+ * Advance the live type-to-filter provider picker by one raw input chunk.
+ * Pure: given the current state, a key chunk (a single keystroke, a paste, or
+ * a multi-byte arrow escape sequence), and the number of providers matching
+ * the CURRENT query, returns the next state. The raw-stdin loop in
+ * runLiveProviderPicker is a thin shell around this so the input logic is
+ * fully unit-testable.
+ */
+export declare function applyPickerKey(state: ProviderPickerState, chunk: string, matchCount: number): ProviderPickerState;
+/** Max providers rendered in one live-picker frame (keeps a frame in-viewport). */
+export declare const LIVE_PICKER_MAX_VISIBLE = 15;
+/**
+ * Render the live type-to-filter provider view as one string: the query line,
+ * providers grouped by wire family (preferred order, alphabetical within each
+ * family), the selected provider marked with ▶, and a key hint. Capped to
+ * LIVE_PICKER_MAX_VISIBLE rows so a frame always fits the viewport (the raw
+ * loop redraws by moving the cursor up and clearing). Pure.
+ */
+export declare function renderLiveProviderList(query: string, filtered: ResolvedProvider[], selectedIdx: number, savedSet?: Set<string>): string;
+/**
+ * Filter models by a free-text query: case-insensitive substring match against
+ * the model id OR display name. Empty/whitespace query returns all (copy).
+ * Powers the live type-to-filter model picker.
+ */
+export declare function filterModels(query: string, models: ModelsDevModel[]): ModelsDevModel[];
+/**
+ * Render the live type-to-filter model view as one string: the provider header,
+ * the query line, models sorted newest-first (release_date desc) with context /
+ * cost / capability columns, the selected model marked with ▶, and a key hint.
+ * Capped to LIVE_PICKER_MAX_VISIBLE rows so a frame fits the viewport. Pure.
+ */
+export declare function renderLiveModelList(query: string, filtered: ModelsDevModel[], selectedIdx: number, header: string): string;
+/**
+ * openai-codex picker preamble — the "Select Model and Effort" header + the
+ * legacy-models note, rendered above the live type-to-filter list (and mirrored
+ * by the numbered picker's codex block). Returns an empty string for any other
+ * provider. Pure so it can be unit-tested without a TTY.
+ */
+export declare function codexPickerPreamble(provider: ResolvedProvider): string;
+/**
+ * Save provider + model to the global config file.
+ * Creates backups + history entries before writing.
+ * Returns true if saved successfully.
+ */
+export declare function saveToGlobalConfig(configPath: string, provider: string, model: string, homeFn?: () => string): Promise<boolean>;
+export interface PickerResult {
+    provider: string;
+    model: string;
+}
+export declare function runLiveProviderPicker(displayList: ResolvedProvider[], savedSet?: Set<string>): Promise<ResolvedProvider | undefined>;
+export declare function runPicker(deps: {
+    modelsRegistry: ModelsRegistry;
+    renderer: TerminalRenderer;
+    reader: ReadlineInputReader;
+    config?: Config | undefined;
+    defaultProvider?: string | undefined;
+    defaultModel?: string | undefined;
+}): Promise<PickerResult | undefined>;
+//# sourceMappingURL=picker.d.ts.map

package/dist/picker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"picker.d.ts","sourceRoot":"","sources":["../src/picker.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAYjG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AA+HtD;;;;;GAKG;AACH;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,gBAAgB,EAAE,CAoBzF;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,gBAAgB,EAAE,CAMhG;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;CAC9C;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,mBAAmB,EAC1B,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,GACjB,mBAAmB,CAiCrB;AAaD,mFAAmF;AACnF,eAAO,MAAM,uBAAuB,KAAK,CAAC;AA6B1C;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,gBAAgB,EAAE,EAC5B,WAAW,EAAE,MAAM,EACnB,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GACrB,MAAM,CA8DR;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,cAAc,EAAE,CAItF;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,cAAc,EAAE,EAC1B,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,GACb,MAAM,CA6DR;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,CAGtE;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,MAAM,GAAE,MAAM,MAA+C,GAC5D,OAAO,CAAC,OAAO,CAAC,CAyDlB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAiDD,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,gBAAgB,EAAE,EAC/B,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GACrB,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAwEvC;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE;IACpC,cAAc,EAAE,cAAc,CAAC;IAC/B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CA6OpC"}

package/dist/plugin-api-factory.d.ts

@@ -0,0 +1,3 @@
+import { type PluginAPI, type PluginAPIInit } from '@wrongstack/core';
+export default function createApi(ownerName: string, base: Omit<PluginAPIInit, 'ownerName'>): PluginAPI;
+//# sourceMappingURL=plugin-api-factory.d.ts.map

package/dist/plugin-api-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-api-factory.d.ts","sourceRoot":"","sources":["../src/plugin-api-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,KAAK,SAAS,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAExF,MAAM,CAAC,OAAO,UAAU,SAAS,CAC/B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,GACrC,SAAS,CAEX"}

package/dist/plugin-management.d.ts

@@ -0,0 +1,43 @@
+import { type Config, type PluginConfig } from '@wrongstack/core';
+export declare const OFFICIAL_PLUGINS: readonly [{
+    readonly alias: 'telegram';
+    readonly specifier: '@wrongstack/telegram';
+    readonly description: 'Telegram bridge for prompts, notifications, and slash commands.';
+}, {
+    readonly alias: 'lsp';
+    readonly specifier: '@wrongstack/plug-lsp';
+    readonly description: 'Language Server Protocol tools for code intelligence.';
+}];
+export interface PluginAuditEntry {
+    name: string;
+    risk: 'low' | 'medium' | 'high';
+    summary: string;
+    defaultState: 'active' | 'inactive';
+    canDisable: boolean;
+}
+export declare const PLUGIN_AUDIT_ENTRIES: readonly PluginAuditEntry[];
+export interface PluginManagementDeps {
+    config: Config;
+    configPath: string;
+}
+export interface PluginManagementResult {
+    code: number;
+    level: 'output' | 'info' | 'error';
+    message: string;
+    patch?: {
+        plugins?: (string | PluginConfig)[] | undefined;
+        features?: Record<string, unknown>;
+        /**
+         * Full replacement `extensions` map (patchConfig is a SHALLOW merge,
+         * so per-plugin llm overrides must ship the whole merged object).
+         */
+        extensions?: Record<string, Record<string, unknown>> | undefined;
+    };
+    restartRequired?: boolean | undefined;
+}
+export declare function runPluginManagementCommand(args: string[], deps: PluginManagementDeps): Promise<PluginManagementResult>;
+export declare function resolvePluginSpecifier(input: string): string;
+export declare function renderOfficialPlugins(config?: Config): string;
+export declare function renderConfiguredPlugins(config: Config): string;
+export declare function renderPluginAuditReport(config: Config): string;
+//# sourceMappingURL=plugin-management.d.ts.map

package/dist/plugin-management.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-management.d.ts","sourceRoot":"","sources":["../src/plugin-management.ts"],"names":[],"mappings":"AACA,OAAO,EAAe,KAAK,MAAM,EAAE,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAE/E,eAAO,MAAM,gBAAgB;aAEzB,KAAK,EAAE,UAAU;aACjB,SAAS,EAAE,sBAAsB;aACjC,WAAW,EAAE,iEAAiE;;aAG9E,KAAK,EAAE,KAAK;aACZ,SAAS,EAAE,sBAAsB;aACjC,WAAW,EAAE,uDAAuD;EAE9D,CAAC;AAEX,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,QAAQ,GAAG,UAAU,CAAC;IACpC,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,eAAO,MAAM,oBAAoB,EAAE,SAAS,gBAAgB,EAggB3D,CAAC;AAEF,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE;QACN,OAAO,CAAC,EAAE,CAAC,MAAM,GAAG,YAAY,CAAC,EAAE,GAAG,SAAS,CAAC;QAChD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC;;;WAGG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;KAClE,CAAC;IACF,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACvC;AASD,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,sBAAsB,CAAC,CAmEjC;AA6LD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE5D;AAQD,wBAAgB,qBAAqB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAW7D;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAiB9D;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAqC9D"}

package/dist/pre-launch/indexing-question.d.ts

@@ -0,0 +1,28 @@
+import type { ReadlineInputReader } from '../input-reader.js';
+import type { TerminalRenderer } from '../renderer.js';
+/**
+ * Resolve the indexing question threshold from the env var
+ * `WRONGSTACK_INDEX_QUESTION_THRESHOLD`. Falls back to 500 when unset or invalid.
+ *
+ * Exported for testing only — callers should use {@link maybeAskAboutIndexing}.
+ */
+export declare function resolveIndexThreshold(): number;
+/**
+ * When the project has many indexable files, ask the user whether to run
+ * startup codebase indexing now. Large codebases can take a while to index
+ * on first launch — this lets the user skip it for the current session.
+ *
+ * The answer is **not persisted** — it affects only this session.
+ *
+ * @returns `true` (yes, index), `false` (skip), or `undefined` when
+ *   no question was asked (codebase is small enough or indexing isn't
+ *   configured).
+ */
+export declare function maybeAskAboutIndexing(opts: {
+    projectRoot: string;
+    renderer: TerminalRenderer;
+    reader: ReadlineInputReader;
+    /** Only ask when the config has an `indexing` block (non-bare mode). */
+    indexingConfigured: boolean;
+}): Promise<boolean | undefined>;
+//# sourceMappingURL=indexing-question.d.ts.map

package/dist/pre-launch/indexing-question.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexing-question.d.ts","sourceRoot":"","sources":["../../src/pre-launch/indexing-question.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAsCvD;;;;;GAKG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CAM9C;AAgCD;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,wEAAwE;IACxE,kBAAkB,EAAE,OAAO,CAAC;CAC7B,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CA0C/B"}

package/dist/pre-launch/launch-prompts.d.ts

@@ -0,0 +1,52 @@
+import type { ReadlineInputReader } from '../input-reader.js';
+import type { TerminalRenderer } from '../renderer.js';
+export interface LaunchModeChoices {
+    /** TUI or plain REPL. */
+    mode: 'tui' | 'repl';
+    /** Auto-approve tool calls except explicit deny rules. */
+    yolo: boolean;
+    /** Start with Director mode on (fleet manifest + scratchpad enabled). */
+    director: boolean;
+    /** Initial autonomy mode. 'off' = stops after each turn; 'auto' = self-driving. */
+    autonomy: 'off' | 'auto';
+}
+/**
+ * Thrown by runLaunchPrompts when the user presses q to cancel.
+ * Caught by boot.ts so it can exit cleanly without process.exit().
+ */
+export declare class LaunchAbortedError extends Error {
+    readonly exitCode = 0;
+    constructor();
+}
+/**
+ * Ask for interactive mode (TUI vs REPL), YOLO, Director, and Autonomy.
+ * Each prompt is skipped when the corresponding option is pinned via CLI
+ * flag. Returns the resolved set.
+ *
+ * When `lastChoices` is provided (from saved config), the function shows a
+ * one-line summary and asks **one** question: "Continue with these?" instead
+ * of re-asking every prompt individually.
+ *
+ * @throws LaunchAbortedError when the user presses q to cancel.
+ */
+export declare function runLaunchPrompts(opts: {
+    renderer: TerminalRenderer;
+    reader: ReadlineInputReader;
+    modePinned?: 'tui' | 'repl' | undefined;
+    yoloPinned?: boolean | undefined;
+    directorPinned?: boolean | undefined;
+    autonomyPinned?: 'off' | 'auto' | undefined;
+    /** Saved launch preferences from a previous session (persisted to config). */
+    lastChoices?: LaunchModeChoices | undefined;
+}): Promise<LaunchModeChoices>;
+/**
+ * Persist the user's launch-mode choices (mode, yolo, director, autonomy)
+ * back to the global config file so the next boot can offer a one-line
+ * "Continue with these?" summary instead of re-asking every question.
+ *
+ * Reads the existing config, updates only the `yolo` and `launch` keys,
+ * and writes back atomically. Other fields (including encrypted secrets)
+ * pass through round-trip unchanged.
+ */
+export declare function persistLaunchChoices(configPath: string, choices: LaunchModeChoices): Promise<void>;
+//# sourceMappingURL=launch-prompts.d.ts.map

package/dist/pre-launch/launch-prompts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-prompts.d.ts","sourceRoot":"","sources":["../../src/pre-launch/launch-prompts.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,WAAW,iBAAiB;IAChC,yBAAyB;IACzB,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC;IACrB,0DAA0D;IAC1D,IAAI,EAAE,OAAO,CAAC;IACd,yEAAyE;IACzE,QAAQ,EAAE,OAAO,CAAC;IAClB,mFAAmF;IACnF,QAAQ,EAAE,KAAK,GAAG,MAAM,CAAC;CAC1B;AAED;;;GAGG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,QAAQ,KAAK;IACtB,cAGC;CACF;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,UAAU,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;IACxC,UAAU,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACjC,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACrC,cAAc,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;IAC5C,8EAA8E;IAC9E,WAAW,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;CAC7C,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAyK7B;AAYD;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,IAAI,CAAC,CA+Bf"}

package/dist/pre-launch/project-check.d.ts

@@ -0,0 +1,25 @@
+import type { ReadlineInputReader } from '../input-reader.js';
+import type { TerminalRenderer } from '../renderer.js';
+export type ProjectKind = 
+/** `.wrongstack/AGENTS.md` exists — fully set up. */
+'initialized'
+/** Has a recognizable manifest (package.json, pyproject.toml, etc.) but no AGENTS.md yet. */
+ | 'project'
+/** No manifest, no AGENTS.md — probably an empty/scratch directory. */
+ | 'empty';
+export declare function detectProjectKind(projectRoot: string): Promise<ProjectKind>;
+/**
+ * Print a one-line project status banner and, when relevant, prompt the
+ * user about scaffolding `AGENTS.md` or continuing in a directory that
+ * doesn't look like a project. Returns `false` if the user bailed out.
+ */
+export declare function runProjectCheck(opts: {
+    projectRoot: string;
+    /** The actual working directory — where the user is standing. Git init
+     *  always happens here, never in a parent projectRoot that the walk-up
+     *  detected. */
+    cwd: string;
+    renderer: TerminalRenderer;
+    reader: ReadlineInputReader;
+}): Promise<boolean>;
+//# sourceMappingURL=project-check.d.ts.map

package/dist/pre-launch/project-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-check.d.ts","sourceRoot":"","sources":["../../src/pre-launch/project-check.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGvD,MAAM,MAAM,WAAW;AACrB,qDAAqD;AACnD,aAAa;AACf,6FAA6F;GAC3F,SAAS;AACX,uEAAuE;GACrE,OAAO,CAAC;AAeZ,wBAAsB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAgBjF;AAYD;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB;;oBAEgB;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,MAAM,EAAE,mBAAmB,CAAC;CAC7B,GAAG,OAAO,CAAC,OAAO,CAAC,CAqGnB"}

package/dist/pre-launch.d.ts

@@ -0,0 +1,4 @@
+export { type ProjectKind, detectProjectKind, runProjectCheck, } from './pre-launch/project-check.js';
+export { type LaunchModeChoices, LaunchAbortedError, persistLaunchChoices, runLaunchPrompts, } from './pre-launch/launch-prompts.js';
+export { maybeAskAboutIndexing, resolveIndexThreshold, } from './pre-launch/indexing-question.js';
+//# sourceMappingURL=pre-launch.d.ts.map

package/dist/pre-launch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-launch.d.ts","sourceRoot":"","sources":["../src/pre-launch.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,KAAK,WAAW,EAChB,iBAAiB,EACjB,eAAe,GAChB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,KAAK,iBAAiB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,mCAAmC,CAAC"}

package/dist/preflight.d.ts

@@ -0,0 +1,58 @@
+import type { Config } from '@wrongstack/core';
+import type { UpdateInfo } from './update-check.js';
+export interface PreflightResult {
+    /** The (possibly refreshed) update info, after the 2-second
+     *  quick-check. Undefined if the check was aborted. */
+    updateInfo: UpdateInfo | undefined;
+    /** Whether `setDebugStreamEnabled(true)` was called. Callers
+     *  don't need this today, but exporting it makes the
+     *  orchestrator's effect explicit. */
+    debugStreamEnabled: boolean;
+}
+/**
+ * Default `NODE_ENV=production` when unset, so the React/Ink
+ * `react-reconciler.development.js` path (which ticks
+ * `performance.measure()` per render and leaks ~200 user-timing
+ * entries/sec into Node's global timeline) is never picked.
+ *
+ * Must run before the lazy `--tui` import evaluates ink/react.
+ * The marker flag lets `buildChildEnv()` strip the injected
+ * value from child processes \u2014 a leaked `NODE_ENV=production`
+ * would make `pnpm install` skip devDependencies and flip
+ * test-runner behavior.
+ */
+export declare function applyNodeEnvDefault(): void;
+/**
+ * Pin one stable shell for the session on Windows via `WRONGSTACK_SHELL`, so
+ * the bash tool's shell routing and the system-prompt Environment block agree
+ * on a single target the model can write syntax for. No-op on POSIX and when
+ * the user already set a valid `WRONGSTACK_SHELL`. Defaults Windows to
+ * PowerShell (pwsh 7+ when present); `WRONGSTACK_SHELL=cmd` opts back to cmd.exe.
+ *
+ * Like `applyNodeEnvDefault()`, this is idempotent — once the env var is set the
+ * second call (inside `runPreflight()`) is a no-op.
+ */
+export declare function applySessionShellDefault(): void;
+/**
+ * Best-effort `printUpdateNotice()` wrapper. The 2-second
+ * quick-check is a network call that must not block boot;
+ * callers get back the (possibly refreshed) `UpdateInfo`
+ * so version-aware UI can render without re-fetching.
+ */
+export declare function applyPrintUpdateNotice(initialUpdateInfo: UpdateInfo | undefined): Promise<UpdateInfo | undefined>;
+/**
+ * Seed the stream-debug singleton from persisted config so
+ * `WireAdapter` picks it up on construction. Runtime toggles
+ * (e.g. `/diag-stats stream-debug on`) update this singleton
+ * directly; the config file is the source of truth for
+ * restarts. The default debug-stream callback is intentionally
+ * left unset \u2014 see the module-level docstring for why.
+ */
+export declare function applyDebugStreamSeed(config: Config): Promise<void>;
+/**
+ * Apply every pre-boot side effect, in dependency order. Returns
+ * the (possibly refreshed) update info so the caller can write
+ * it back into the `BootContext` for downstream consumers.
+ */
+export declare function runPreflight(config: Config, initialUpdateInfo: UpdateInfo | undefined): Promise<PreflightResult>;
+//# sourceMappingURL=preflight.d.ts.map