@wrongstack/cli 0.291.0 → 0.291.2

package/dist/index.js

@@ -6804,6 +6804,13 @@ var init_plugin_management = __esm({
         defaultState: "inactive",
         canDisable: true
       },
+      {
+        name: "process-guard",
+        risk: "high",
+        summary: "Blocks commands that target active WrongStack processes or host terminals.",
+        defaultState: "active",
+        canDisable: true
+      },
       {
         name: "context-pins",
         risk: "low",
@@ -12000,6 +12007,7 @@ import {
   handleSuperMemoryDelete,
   handleSuperMemoryGet,
   handleSuperMemoryList,
+  handleSuperMemoryListPage,
   handleSuperMemoryRemember,
   handleSuperMemoryUpdate,
   handleSuperMemoryRecover,
@@ -12537,6 +12545,16 @@ function createMessageRouter(deps) {
       }
       return handleSuperMemoryList(ws, opts.memoryStore);
     },
+    "memory.super.listPage": (msg, ws) => {
+      if (!opts.memoryStore) {
+        send2(ws, {
+          type: "memory.super.listPage",
+          payload: { error: "Memory store not available" }
+        });
+        return;
+      }
+      return handleSuperMemoryListPage(ws, msg, opts.memoryStore);
+    },
     "memory.super.get": (msg, ws) => {
       if (!opts.memoryStore) {
         send2(ws, {
@@ -12769,118 +12787,122 @@ import {
   FallbackProfileManager
 } from "@wrongstack/core";
 async function seedConfigToMeta(opts) {
-  const configPath2 = opts.globalConfigPath;
-  if (!configPath2) return;
-  try {
-    const raw = await fs29.readFile(configPath2, "utf8");
-    const cfg = JSON.parse(raw);
-    const autonomyCfg = cfg.autonomy ?? {};
-    const features = cfg.features ?? {};
-    const meta = opts.agent.ctx.meta;
-    const rawMode = autonomyCfg["defaultMode"];
-    meta["autonomy"] = rawMode === "suggest" || rawMode === "auto" ? rawMode : "off";
-    meta["autonomyDelayMs"] = autonomyCfg["autoProceedDelayMs"] ?? 45e3;
-    meta["autoProceedMaxIterations"] = autonomyCfg["autoProceedMaxIterations"] ?? 50;
-    meta["yolo"] = autonomyCfg["yolo"] ?? cfg.yolo ?? false;
-    meta["chime"] = autonomyCfg["chime"] ?? false;
-    meta["confirmExit"] = autonomyCfg["confirmExit"] !== false;
-    meta["streamFleet"] = autonomyCfg["streamFleet"] !== false;
-    meta["enhanceEnabled"] = autonomyCfg["enhance"] ?? true;
-    meta["enhanceDelayMs"] = autonomyCfg["enhanceDelayMs"] ?? 6e4;
-    meta["enhanceLanguage"] = autonomyCfg["enhanceLanguage"] ?? "original";
-    meta["nextPrediction"] = cfg.nextPrediction ?? false;
-    meta["fallbackModels"] = cfg.fallbackModels ?? [];
-    meta["fallbackProfiles"] = cfg.fallbackProfiles ?? {};
-    meta["favoriteModels"] = cfg.favoriteModels ?? [];
-    meta["favoriteModelsOnly"] = cfg.favoriteModelsOnly === true;
-    meta["modelAvailabilitySchedule"] = cfg.modelAvailabilitySchedule ?? [];
-    meta["modelMatrix"] = cfg.modelMatrix ?? {};
-    meta["fallbackAuto"] = cfg.fallbackAuto !== false;
-    if (typeof cfg.uiLocale === "string" && cfg.uiLocale) meta["uiLocale"] = cfg.uiLocale;
-    meta["featureMcp"] = features["mcp"] !== false;
-    meta["featurePlugins"] = features["plugins"] !== false;
-    meta["featureMemory"] = features["memory"] !== false;
-    meta["featureSkills"] = features["skills"] !== false;
-    meta["featureModelsRegistry"] = features["modelsRegistry"] !== false;
-    meta["indexOnStart"] = cfg.indexing?.["onSessionStart"] !== false;
-    meta["contextAutoCompact"] = cfg.context?.["autoCompact"] !== false;
-    meta["contextStrategy"] = cfg.context?.["strategy"] ?? "hybrid";
-    meta["contextMode"] = cfg.context?.["mode"] ?? "balanced";
-    {
-      const tsm = features["tokenSavingMode"];
-      meta["tokenSavingTier"] = typeof tsm === "string" ? tsm : tsm ? "medium" : "off";
+  let cfg = opts.appConfig;
+  if (!cfg || Object.keys(cfg).length === 0) {
+    const configPath2 = opts.profileConfigPath ?? opts.globalConfigPath;
+    if (!configPath2) return;
+    try {
+      const raw = await fs29.readFile(configPath2, "utf8");
+      cfg = JSON.parse(raw);
+    } catch {
+      return;
     }
-    meta["maxConcurrent"] = typeof cfg.maxConcurrent === "number" ? cfg.maxConcurrent : 10;
-    meta["titleAnimation"] = autonomyCfg["terminalTitleAnimation"] !== false;
-    {
-      const mr = cfg.modelRuntime ?? {};
-      const reasoning = mr["reasoning"] ?? {};
-      const cache = mr["cache"] ?? {};
-      meta["reasoningMode"] = reasoning["mode"] ?? "auto";
-      meta["reasoningEffort"] = reasoning["effort"] ?? "high";
-      meta["reasoningPreserve"] = reasoning["preserve"] === true;
-      meta["cacheTtl"] = cache["ttl"] ?? "default";
-    }
-    meta["logLevel"] = cfg.log?.["level"] ?? "info";
-    meta["auditLevel"] = cfg.session?.["auditLevel"] ?? "standard";
-    meta["maxIterations"] = cfg.tools?.["maxIterations"] ?? 500;
-    const hqCfg = cfg.hq ?? {};
-    meta["hqEnabled"] = hqCfg["enabled"] === true;
-    meta["hqUrl"] = typeof hqCfg["url"] === "string" ? hqCfg["url"] : "";
-    meta["hqToken"] = typeof hqCfg["token"] === "string" ? hqCfg["token"] : "";
-    meta["hqRawContent"] = hqCfg["rawContent"] === true;
-    meta["refinerProvider"] = autonomyCfg["refinerProvider"] ?? "";
-    meta["refinerModel"] = autonomyCfg["refinerModel"] ?? "";
-    meta["refinerFallbackProfile"] = autonomyCfg["refinerFallbackProfile"] ?? "";
-    meta["thinkingWord"] = autonomyCfg["thinkingWord"] ?? "thinking";
-    meta["statuslineMode"] = autonomyCfg["statuslineMode"] ?? "detailed";
-    meta["animationStyle"] = autonomyCfg["animationStyle"] ?? "rainbow";
-    const tgExt = cfg.extensions?.["telegram"];
-    meta["tgConfigured"] = typeof tgExt?.["botToken"] === "string" && tgExt["botToken"].length > 0;
-    meta["tgSessionEnd"] = tgExt?.["notifyOnSessionEnd"] === true;
-    meta["tgDelegate"] = tgExt?.["notifyOnDelegate"] !== false;
-    const tgMs = tgExt?.["longToolThresholdMs"];
-    meta["tgLongToolMs"] = typeof tgMs === "number" ? tgMs : 3e4;
-    const cbCfg = cfg.circuitBreaker ?? {};
-    meta["breakerEnabled"] = cbCfg["enabled"] === true;
-    meta["breakerAutoKillResetMs"] = typeof cbCfg["autoKillResetMs"] === "number" ? cbCfg["autoKillResetMs"] : 6e4;
-    {
-      const featuresAllow = features["allowOutsideProjectRoot"];
-      const toolsRestrict = cfg.tools?.["restrictToProjectRoot"];
-      const allow = featuresAllow !== void 0 ? featuresAllow === true : toolsRestrict !== void 0 ? toolsRestrict !== true : true;
-      meta["fsAccess"] = allow ? "unrestricted" : "project";
-    }
-    meta["debugStream"] = cfg.debugStream === true;
-    const chimeraExt = cfg.extensions?.["wstack-chimera"];
-    meta["chimeraEnabled"] = chimeraExt?.["enabled"] !== false;
-    meta["chimeraProvider"] = chimeraExt?.["provider"] ?? "";
-    meta["chimeraModel"] = chimeraExt?.["model"] ?? "";
-    meta["chimeraMaxFiles"] = typeof chimeraExt?.["maxFiles"] === "number" && chimeraExt["maxFiles"] >= 1 ? chimeraExt["maxFiles"] : 15;
-    const autoFix = chimeraExt?.["autoFix"];
-    meta["chimeraAutoFix"] = autoFix === "off" || autoFix === "ask" || autoFix === "auto" ? autoFix : "off";
-    const autoReviewExt = cfg.extensions?.["wstack-auto-review"];
-    meta["autoReviewEnabled"] = autoReviewExt?.["enabled"] === true;
-    meta["autoReviewProvider"] = autoReviewExt?.["provider"] ?? "";
-    meta["autoReviewModel"] = autoReviewExt?.["model"] ?? "";
-    meta["autoReviewFallbackProfile"] = autoReviewExt?.["fallbackProfile"] ?? "";
-    {
-      let resolvedChain = [];
-      try {
-        const mgr = new FallbackProfileManager(cfg);
-        const named = autoReviewExt?.["fallbackProfile"];
-        resolvedChain = typeof named === "string" && named.length > 0 ? mgr.resolve(named) : mgr.resolveEffective({ fallbackAuto: true });
-      } catch {
-        resolvedChain = [];
-      }
-      meta["autoReviewFallbackModels"] = resolvedChain.map((e) => `${e.providerId}/${e.model}`);
+  }
+  const autonomyCfg = cfg.autonomy ?? {};
+  const features = cfg.features ?? {};
+  const meta = opts.agent.ctx.meta ??= {};
+  const rawMode = autonomyCfg["defaultMode"];
+  meta["autonomy"] = rawMode === "suggest" || rawMode === "auto" ? rawMode : "off";
+  meta["autonomyDelayMs"] = autonomyCfg["autoProceedDelayMs"] ?? 45e3;
+  meta["autoProceedMaxIterations"] = autonomyCfg["autoProceedMaxIterations"] ?? 50;
+  meta["yolo"] = autonomyCfg["yolo"] ?? cfg.yolo ?? false;
+  meta["chime"] = autonomyCfg["chime"] ?? false;
+  meta["confirmExit"] = autonomyCfg["confirmExit"] !== false;
+  meta["streamFleet"] = autonomyCfg["streamFleet"] !== false;
+  meta["enhanceEnabled"] = autonomyCfg["enhance"] ?? true;
+  meta["enhanceDelayMs"] = autonomyCfg["enhanceDelayMs"] ?? 6e4;
+  meta["enhanceLanguage"] = autonomyCfg["enhanceLanguage"] ?? "original";
+  meta["nextPrediction"] = cfg.nextPrediction ?? false;
+  meta["fallbackModels"] = cfg.fallbackModels ?? [];
+  meta["fallbackProfiles"] = cfg.fallbackProfiles ?? {};
+  meta["favoriteModels"] = cfg.favoriteModels ?? [];
+  meta["favoriteModelsOnly"] = cfg.favoriteModelsOnly === true;
+  meta["modelAvailabilitySchedule"] = cfg.modelAvailabilitySchedule ?? [];
+  meta["modelMatrix"] = cfg.modelMatrix ?? {};
+  meta["fallbackAuto"] = cfg.fallbackAuto !== false;
+  if (typeof cfg.uiLocale === "string" && cfg.uiLocale) meta["uiLocale"] = cfg.uiLocale;
+  meta["featureMcp"] = features["mcp"] !== false;
+  meta["featurePlugins"] = features["plugins"] !== false;
+  meta["featureMemory"] = features["memory"] !== false;
+  meta["featureSkills"] = features["skills"] !== false;
+  meta["featureModelsRegistry"] = features["modelsRegistry"] !== false;
+  meta["indexOnStart"] = cfg.indexing?.["onSessionStart"] !== false;
+  meta["contextAutoCompact"] = cfg.context?.["autoCompact"] !== false;
+  meta["contextStrategy"] = cfg.context?.["strategy"] ?? "hybrid";
+  meta["contextMode"] = cfg.context?.["mode"] ?? "balanced";
+  {
+    const tsm = features["tokenSavingMode"];
+    meta["tokenSavingTier"] = typeof tsm === "string" ? tsm : tsm ? "medium" : "off";
+  }
+  meta["maxConcurrent"] = typeof cfg.maxConcurrent === "number" ? cfg.maxConcurrent : 10;
+  meta["titleAnimation"] = autonomyCfg["terminalTitleAnimation"] !== false;
+  {
+    const mr = cfg.modelRuntime ?? {};
+    const reasoning = mr["reasoning"] ?? {};
+    const cache = mr["cache"] ?? {};
+    meta["reasoningMode"] = reasoning["mode"] ?? "auto";
+    meta["reasoningEffort"] = reasoning["effort"] ?? "high";
+    meta["reasoningPreserve"] = reasoning["preserve"] === true;
+    meta["cacheTtl"] = cache["ttl"] ?? "default";
+  }
+  meta["logLevel"] = cfg.log?.["level"] ?? "info";
+  meta["auditLevel"] = cfg.session?.["auditLevel"] ?? "standard";
+  meta["maxIterations"] = cfg.tools?.["maxIterations"] ?? 500;
+  const hqCfg = cfg.hq ?? {};
+  meta["hqEnabled"] = hqCfg["enabled"] === true;
+  meta["hqUrl"] = typeof hqCfg["url"] === "string" ? hqCfg["url"] : "";
+  meta["hqToken"] = typeof hqCfg["token"] === "string" ? hqCfg["token"] : "";
+  meta["hqRawContent"] = hqCfg["rawContent"] === true;
+  meta["refinerProvider"] = autonomyCfg["refinerProvider"] ?? "";
+  meta["refinerModel"] = autonomyCfg["refinerModel"] ?? "";
+  meta["refinerFallbackProfile"] = autonomyCfg["refinerFallbackProfile"] ?? "";
+  meta["thinkingWord"] = autonomyCfg["thinkingWord"] ?? "thinking";
+  meta["statuslineMode"] = autonomyCfg["statuslineMode"] ?? "detailed";
+  meta["animationStyle"] = autonomyCfg["animationStyle"] ?? "rainbow";
+  const tgExt = cfg.extensions?.["telegram"];
+  meta["tgConfigured"] = typeof tgExt?.["botToken"] === "string" && tgExt["botToken"].length > 0;
+  meta["tgSessionEnd"] = tgExt?.["notifyOnSessionEnd"] === true;
+  meta["tgDelegate"] = tgExt?.["notifyOnDelegate"] !== false;
+  const tgMs = tgExt?.["longToolThresholdMs"];
+  meta["tgLongToolMs"] = typeof tgMs === "number" ? tgMs : 3e4;
+  const cbCfg = cfg.circuitBreaker ?? {};
+  meta["breakerEnabled"] = cbCfg["enabled"] === true;
+  meta["breakerAutoKillResetMs"] = typeof cbCfg["autoKillResetMs"] === "number" ? cbCfg["autoKillResetMs"] : 6e4;
+  {
+    const featuresAllow = features["allowOutsideProjectRoot"];
+    const toolsRestrict = cfg.tools?.["restrictToProjectRoot"];
+    const allow = featuresAllow !== void 0 ? featuresAllow === true : toolsRestrict !== void 0 ? toolsRestrict !== true : true;
+    meta["fsAccess"] = allow ? "unrestricted" : "project";
+  }
+  meta["debugStream"] = cfg.debugStream === true;
+  const chimeraExt = cfg.extensions?.["wstack-chimera"];
+  meta["chimeraEnabled"] = chimeraExt?.["enabled"] !== false;
+  meta["chimeraProvider"] = chimeraExt?.["provider"] ?? "";
+  meta["chimeraModel"] = chimeraExt?.["model"] ?? "";
+  meta["chimeraMaxFiles"] = typeof chimeraExt?.["maxFiles"] === "number" && chimeraExt["maxFiles"] >= 1 ? chimeraExt["maxFiles"] : 15;
+  const autoFix = chimeraExt?.["autoFix"];
+  meta["chimeraAutoFix"] = autoFix === "off" || autoFix === "ask" || autoFix === "auto" ? autoFix : "off";
+  const autoReviewExt = cfg.extensions?.["wstack-auto-review"];
+  meta["autoReviewEnabled"] = autoReviewExt?.["enabled"] === true;
+  meta["autoReviewProvider"] = autoReviewExt?.["provider"] ?? "";
+  meta["autoReviewModel"] = autoReviewExt?.["model"] ?? "";
+  meta["autoReviewFallbackProfile"] = autoReviewExt?.["fallbackProfile"] ?? "";
+  {
+    let resolvedChain = [];
+    try {
+      const mgr = new FallbackProfileManager(cfg);
+      const named = autoReviewExt?.["fallbackProfile"];
+      resolvedChain = typeof named === "string" && named.length > 0 ? mgr.resolve(named) : mgr.resolveEffective({ fallbackAuto: true });
+    } catch {
+      resolvedChain = [];
     }
-    meta["autoReviewDebounceMs"] = typeof autoReviewExt?.["debounceMs"] === "number" && autoReviewExt["debounceMs"] >= 0 ? autoReviewExt["debounceMs"] : 5e3;
-    meta["autoReviewMaxFilesPerBatch"] = typeof autoReviewExt?.["maxFilesPerBatch"] === "number" && autoReviewExt["maxFilesPerBatch"] >= 1 ? autoReviewExt["maxFilesPerBatch"] : 15;
-    meta["autoReviewMaxConcurrentReviews"] = typeof autoReviewExt?.["maxConcurrentReviews"] === "number" && autoReviewExt["maxConcurrentReviews"] >= 1 ? autoReviewExt["maxConcurrentReviews"] : 2;
-    const cascade = autoReviewExt?.["cascadeOn"];
-    meta["autoReviewCascadeOn"] = cascade === "critical" || cascade === "high" ? cascade : "off";
-  } catch {
+    meta["autoReviewFallbackModels"] = resolvedChain.map((e) => `${e.providerId}/${e.model}`);
   }
+  meta["autoReviewDebounceMs"] = typeof autoReviewExt?.["debounceMs"] === "number" && autoReviewExt["debounceMs"] >= 0 ? autoReviewExt["debounceMs"] : 5e3;
+  meta["autoReviewMaxFilesPerBatch"] = typeof autoReviewExt?.["maxFilesPerBatch"] === "number" && autoReviewExt["maxFilesPerBatch"] >= 1 ? autoReviewExt["maxFilesPerBatch"] : 15;
+  meta["autoReviewMaxConcurrentReviews"] = typeof autoReviewExt?.["maxConcurrentReviews"] === "number" && autoReviewExt["maxConcurrentReviews"] >= 1 ? autoReviewExt["maxConcurrentReviews"] : 2;
+  const cascade = autoReviewExt?.["cascadeOn"];
+  meta["autoReviewCascadeOn"] = cascade === "critical" || cascade === "high" ? cascade : "off";
 }
 function createPrefsSeeding(opts) {
   let prefWriteLock = Promise.resolve();
@@ -12896,7 +12918,7 @@ function createPrefsSeeding(opts) {
     return snapshot;
   };
   const persistPrefs = async (payload) => {
-    const configPath2 = opts.globalConfigPath;
+    const configPath2 = opts.profileConfigPath ?? opts.globalConfigPath;
     if (Array.isArray(payload["fallbackModels"]))
       patchLiveAppConfig({ fallbackModels: payload["fallbackModels"] });
     if (payload["fallbackProfiles"] && typeof payload["fallbackProfiles"] === "object" && !Array.isArray(payload["fallbackProfiles"])) {
@@ -12923,8 +12945,9 @@ function createPrefsSeeding(opts) {
     const write = async () => {
       const raw = await fs29.readFile(configPath2, "utf8");
       const parsed = JSON.parse(raw);
+      const globalRoot = opts.globalConfigPath ? path35.dirname(opts.globalConfigPath) : void 0;
       const vault = new DefaultSecretVault2({
-        keyFile: path35.join(path35.dirname(configPath2), ".key")
+        keyFile: globalRoot ? path35.join(globalRoot, ".key") : path35.join(path35.dirname(configPath2), ".key")
       });
       const decrypted = decryptConfigSecrets3(parsed, vault);
       const autonomy = decrypted.autonomy ?? {};
@@ -14730,14 +14753,17 @@ async function runWebUI(opts) {
     broadcast,
     log: (m) => console.log(m)
   };
+  const watchConfigPath = opts.profileConfigPath ?? opts.globalConfigPath;
   let credentialWatcherClose;
-  if (opts.globalConfigPath && process.env["WRONGSTACK_DISABLE_CONFIG_WATCH"] !== "1") {
+  if (watchConfigPath && process.env["WRONGSTACK_DISABLE_CONFIG_WATCH"] !== "1") {
     let lastActiveCfg = JSON.stringify(
       opts.appConfig?.providers?.[opts.agent.ctx.provider.id] ?? null
     );
     let lastUiLocale = opts.appConfig?.uiLocale;
     const watcher = watchProviderConfig(
-      opts.globalConfigPath,
+      watchConfigPath,
+      // Vault key lives at ~/.wrongstack/.key (derived from globalConfigPath),
+      // not inside the profile directory — resolve via global root to stay correct.
       getVault(opts.globalConfigPath),
       (snapshot) => {
         try {
@@ -17514,6 +17540,7 @@ var init_plugins = __esm({
       async () => (await import("@wrongstack/plugins/spec-linker")).default,
       async () => (await import("@wrongstack/plugins/loop-breaker")).default,
       async () => (await import("@wrongstack/plugins/path-guard")).default,
+      async () => (await import("@wrongstack/plugins/process-guard")).default,
       async () => (await import("@wrongstack/plugins/context-pins")).default,
       async () => (await import("@wrongstack/plugins/checkpoint")).default,
       async () => (await import("@wrongstack/plugins/error-lens")).default,
@@ -22183,6 +22210,7 @@ import { builtinToolsPack as builtinToolsPack3 } from "@wrongstack/tools";
 // src/arg-parser.ts
 var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "yolo",
+  "no-yolo",
   "yolo-destructive",
   "confirm-destructive",
   "force-all-yolo",
@@ -22560,7 +22588,8 @@ var ReadlineInputReader = class {
         fresh.once("close", () => settle(""));
         fresh.on?.("error", (_e) => settle(""));
       }).then((result) => {
-        this.rl?.close();
+        if (this.rl === fresh) this.rl = void 0;
+        fresh.close();
         return result;
       });
     } finally {
@@ -29217,7 +29246,7 @@ var helpCmd = async (_args, deps) => {
     "  wstack version               Print version",
     "",
     color34.bold("Common flags"),
-    "  --yolo                       Auto-approve tool calls unless explicitly denied",
+    "  --yolo / --no-yolo           Force auto-approval on or off at startup",
     "  --confirm-destructive         Deprecated \u2014 YOLO no longer prompts by destructiveness",
     "  --yolo-destructive            Deprecated compatibility flag; YOLO no longer prompts by destructiveness",
     "  --tui / --no-tui             Force or disable TUI mode",
@@ -29342,6 +29371,9 @@ function resolveBundledPromptsDir() {
     return void 0;
   }
 }
+function shouldPrintYoloNotice(lastChoices, yoloPinned, yolo) {
+  return !lastChoices && yoloPinned === void 0 && yolo;
+}
 async function boot(argv) {
   const { flags, positional } = parseArgs(argv);
   if (positional[0] === "update") {
@@ -29584,7 +29616,7 @@ async function boot(argv) {
     let modePinned;
     if (flags["no-tui"]) modePinned = "repl";
     else if (flags["tui"]) modePinned = "tui";
-    const yoloPinned = flags["yolo"] === true ? true : void 0;
+    const yoloPinned = flags["no-yolo"] === true ? false : flags["yolo"] === true ? true : void 0;
     let autonomyPinned;
     if (flags["no-autonomy"] === true) autonomyPinned = "off";
     else if (flags["eternal"] === true)
@@ -29626,6 +29658,15 @@ async function boot(argv) {
     }
     if (choices.yolo !== config.yolo) config = patchConfig(config, { yolo: choices.yolo });
     flags["autonomy"] = choices.autonomy;
+    if (shouldPrintYoloNotice(lastChoices, yoloPinned, choices.yolo)) {
+      writeErr3(
+        `
+  ${color35.yellow("YOLO is on")}: non-denied tool calls, including shell and file writes, run without confirmation.
+  ${color35.dim("Explicit deny rules still apply. Use")} --no-yolo ${color35.dim("or")} /yolo off ${color35.dim("to require prompts.")}
+
+`
+      );
+    }
     let indexingAnswer;
     if (flags["skip-index"] || flags["skip"]) {
       indexingAnswer = false;
@@ -30491,21 +30532,27 @@ async function initializeCli(argv) {
   const desktopExit = await handleDesktopShortCircuit(earlyFlags, argv);
   if (desktopExit !== null) return desktopExit;
   const { flags: _earlyForMenu, positional: _positionalForMenu } = parseArgs(argv);
-  const menuResult = await runLaunchMenu({
-    argv,
-    flags: _earlyForMenu,
-    positional: _positionalForMenu,
-    renderer: new TerminalRenderer(),
-    reader: new ReadlineInputReader(),
-    // Last-saved menu choice wiring is intentionally minimal here:
-    // we only honor it when the user has *also* chosen no other
-    // surface flag. The persisted record is updated lazily inside
-    // boot() via a follow-up patch in the wiring layer, but the
-    // menu itself stays stateless so unit tests don't need to mock
-    // a ConfigStore. Users who want the saved-port shortcut without
-    // the menu can pass `--no-menu --webui --port=<saved>`.
-    lastChoice: void 0
-  });
+  const launchMenuReader = new ReadlineInputReader();
+  let menuResult;
+  try {
+    menuResult = await runLaunchMenu({
+      argv,
+      flags: _earlyForMenu,
+      positional: _positionalForMenu,
+      renderer: new TerminalRenderer(),
+      reader: launchMenuReader,
+      // Last-saved menu choice wiring is intentionally minimal here:
+      // we only honor it when the user has *also* chosen no other
+      // surface flag. The persisted record is updated lazily inside
+      // boot() via a follow-up patch in the wiring layer, but the
+      // menu itself stays stateless so unit tests don't need to mock
+      // a ConfigStore. Users who want the saved-port shortcut without
+      // the menu can pass `--no-menu --webui --port=<saved>`.
+      lastChoice: void 0
+    });
+  } finally {
+    await launchMenuReader.close();
+  }
   let effectiveArgv = argv;
   if (menuResult !== null) {
     if (menuResult.cancelled) {
@@ -30775,6 +30822,7 @@ import * as path51 from "node:path";
 import {
   attachTodosCheckpoint as attachTodosCheckpoint2,
   CHIMERA_REVIEW_PROMPT,
+  DEFAULT_REVIEW_FALLBACK_MODELS,
   fallbackProfileChain,
   mergeCustomModelDefs as mergeCustomModelDefs3,
   normalizeTokenSavingTier as normalizeTokenSavingTier3,
@@ -31009,6 +31057,7 @@ async function runWebUIDispatch(ctx) {
     hqAllowExec: flagBoolean(["hq-allow-exec"]) ?? false,
     modelsRegistry,
     globalConfigPath,
+    profileConfigPath: ctx.profileConfigPath,
     mcpRegistry,
     subscribeEternalIteration,
     sessionStore,
@@ -33740,6 +33789,13 @@ function printBanner(renderer, projectName) {
 
 // src/execution.ts
 init_kanban_run_mirror();
+function resolveReviewerFallbackModels(reviewFallbackModels, sessionRef) {
+  const base = reviewFallbackModels && reviewFallbackModels.length > 0 ? [...reviewFallbackModels] : [...DEFAULT_REVIEW_FALLBACK_MODELS];
+  if (sessionRef && !base.includes(sessionRef)) {
+    base.push(sessionRef);
+  }
+  return base;
+}
 async function execute(deps) {
   const {
     core: {
@@ -33864,6 +33920,7 @@ async function execute(deps) {
   const activeRecoveryLock = initialRecoveryLock;
   let currentRecoveryLock = activeRecoveryLock;
   const detachActiveTodosCheckpoint = detachTodosCheckpoint;
+  const profileName = config.activeProfile ?? "default";
   const rootTraceId = context.traceId;
   const storageLog = (event, payload) => {
     const traceId = payload.traceId ?? rootTraceId;
@@ -33974,13 +34031,12 @@ async function execute(deps) {
         lines.push("Check for bugs, type issues, security problems, and produce a");
         lines.push("structured review report.");
         const taskDesc = lines.join("\n");
-        const defaultReviewFallbackModels = [
-          "opencode/deepseek-chat",
-          "opencode-go/deepseek-v4-pro",
-          "deepseek/deepseek-chat",
-          "anthropic-oauth/claude-opus-4-8",
-          "openai-codex/gpt-5.3-codex-spark"
-        ];
+        const tProvider = config.provider?.trim() || void 0;
+        const tModel = config.model?.trim() || void 0;
+        const rawProvider = p.reviewFallbackModels ? p.config.provider?.trim() || void 0 : tProvider;
+        const rawModel = p.reviewFallbackModels ? p.config.model?.trim() || void 0 : tModel;
+        const effectiveProvider = rawProvider || tProvider;
+        const effectiveModel = rawModel || tModel;
         const cfg = {
           name: "chimera-review",
           role: "reviewer",
@@ -33988,13 +34044,9 @@ async function execute(deps) {
           maxIterations: 50,
           maxToolCalls: 250,
           timeoutMs: 9e5,
-          // Auto-review resolves its configured profile before emitting the bundle.
-          // Ordinary Chimera/manual reviews retain the established reviewer defaults.
-          ...p.reviewFallbackModels ? {
-            provider: p.config.provider,
-            model: p.config.model,
-            fallbackModels: p.reviewFallbackModels
-          } : { fallbackModels: defaultReviewFallbackModels }
+          provider: effectiveProvider,
+          model: effectiveModel,
+          ...p.reviewFallbackModels ? { fallbackModels: p.reviewFallbackModels } : { fallbackModels: resolveReviewerFallbackModels(void 0) }
         };
         const subagentId = await dir.spawn(cfg);
         const { randomUUID: randomUUID11 } = await import("node:crypto");
@@ -34485,6 +34537,7 @@ async function execute(deps) {
           provider: config.provider,
           family: banneredFamily,
           keyTail: banneredKeyTail,
+          profile: profileName,
           getPickableProviders,
           switchProviderAndModel,
           switchAutonomy: (mode) => {
@@ -34757,6 +34810,7 @@ async function execute(deps) {
         flags,
         projectRoot,
         globalConfigPath: wpaths.globalConfig,
+        profileConfigPath: wpaths.profileConfig(profileName),
         projectSessionsDir: wpaths.projectSessions,
         modelsRegistry,
         mcpRegistry,
@@ -53618,6 +53672,10 @@ var MultiAgentHost = class _MultiAgentHost {
       taskResultNotifier: (n) => this.reportTaskResultToLeader(n),
       subagentIdleTimeoutMs,
       ...this.opts.statusTracker ? { statusTracker: this.opts.statusTracker } : {},
+      // Session's own working provider/model — absolute last-resort fallback
+      // for every subagent when matrix resolution leaves model undefined.
+      sessionProvider: this.deps.configStore.get().provider,
+      sessionModel: this.deps.configStore.get().model,
       retireSubagentOnTaskComplete: this.opts.retireSubagentOnTaskComplete ?? fleetLifecycle?.retireOnTaskComplete ?? true
     });
     this.director.on("task.completed", ({ task, result }) => {
@@ -56590,10 +56648,16 @@ function setupProviderRuntime(deps) {
     "uiLocale"
   ];
   if (process.env["WRONGSTACK_DISABLE_CONFIG_WATCH"] !== "1") {
+    const activeProfile = typeof cfg.activeProfile === "string" && cfg.activeProfile ? cfg.activeProfile : "default";
     const configLayers = [
       { path: wpaths.globalConfig, priority: 1 },
-      { path: wpaths.projectLocalConfig, priority: 2 },
-      { path: wpaths.inProjectConfig, priority: 3 }
+      // Profile config (~/.wrongstack/profiles/<name>/config.json) sits between
+      // the thin global bootstrap (version + activeProfile only) and the
+      // project-local override. All user settings, providers, and routing configs
+      // live in the profile — without this layer, hot-reload never reads them.
+      { path: wpaths.profileConfig(activeProfile), priority: 2 },
+      { path: wpaths.projectLocalConfig, priority: 3 },
+      { path: wpaths.inProjectConfig, priority: 4 }
     ];
     const readMergedSnapshot = async () => {
       let merged;
@@ -56605,7 +56669,11 @@ function setupProviderRuntime(deps) {
         );
         if (!snap) continue;
         if (!merged) {
-          merged = { ...snap, providers: { ...snap.providers } };
+          merged = {
+            ...snap,
+            providers: { ...snap.providers },
+            snapshotHasProviders: snap.snapshotHasProviders
+          };
         } else {
           merged = {
             providers: { ...merged.providers, ...snap.providers },
@@ -56618,7 +56686,10 @@ function setupProviderRuntime(deps) {
             ...snap.modelAvailabilitySchedule !== void 0 ? { modelAvailabilitySchedule: snap.modelAvailabilitySchedule } : merged.modelAvailabilitySchedule !== void 0 ? { modelAvailabilitySchedule: merged.modelAvailabilitySchedule } : {},
             ...snap.modelMatrix !== void 0 ? { modelMatrix: snap.modelMatrix } : merged.modelMatrix !== void 0 ? { modelMatrix: merged.modelMatrix } : {},
             ...snap.fallbackAuto !== void 0 ? { fallbackAuto: snap.fallbackAuto } : merged.fallbackAuto !== void 0 ? { fallbackAuto: merged.fallbackAuto } : {},
-            ...snap.uiLocale !== void 0 ? { uiLocale: snap.uiLocale } : merged.uiLocale !== void 0 ? { uiLocale: merged.uiLocale } : {}
+            ...snap.uiLocale !== void 0 ? { uiLocale: snap.uiLocale } : merged.uiLocale !== void 0 ? { uiLocale: merged.uiLocale } : {},
+            // Carry forward the snapshotHasProviders flag from the higher-priority layer.
+            // When a layer has providers, merged knows providers were found somewhere.
+            snapshotHasProviders: snap.snapshotHasProviders || merged.snapshotHasProviders
           };
         }
       }