@wrongstack/cli 0.292.0 → 0.293.0

package/dist/index.js

@@ -864,7 +864,7 @@ async function runUpdateCommand(args, deps) {
   deps.renderer.write(`Running: ${updateCommand.display}
 `);
   try {
-    const result = await new Promise((resolve15, reject) => {
+    const result = await new Promise((resolve16, reject) => {
       const child = spawn5(updateCommand.executable, updateCommand.args, {
         cwd,
         stdio: "pipe",
@@ -881,7 +881,7 @@ async function runUpdateCommand(args, deps) {
         stderr = appendOutputTail(stderr, data);
       });
       child.on("error", reject);
-      child.on("close", (code, signal) => resolve15({ code, signal, stdout, stderr }));
+      child.on("close", (code, signal) => resolve16({ code, signal, stdout, stderr }));
     });
     if (result.code === 0 && result.signal === null) {
       deps.renderer.write(
@@ -3676,7 +3676,7 @@ function displayHost(host) {
   return host === "0.0.0.0" ? "127.0.0.1" : host;
 }
 function readRequestBody(req2, maxBytes = 1e6) {
-  return new Promise((resolve15, reject) => {
+  return new Promise((resolve16, reject) => {
     const chunks = [];
     let size = 0;
     let settled = false;
@@ -3692,7 +3692,7 @@ function readRequestBody(req2, maxBytes = 1e6) {
       chunks.push(chunk);
     });
     req2.on("end", () => {
-      if (!settled) resolve15(Buffer.concat(chunks).toString("utf8"));
+      if (!settled) resolve16(Buffer.concat(chunks).toString("utf8"));
     });
     req2.on("error", (error) => {
       if (!settled) reject(error);
@@ -5038,7 +5038,10 @@ async function handleMailboxGateway(_req, res, match, authorizeMailboxGateway, g
     return;
   }
   const suffix = match[2];
-  const canonicalPath = suffix ? `/mailbox/${suffix}` : "/mailbox";
+  const rawUrl = _req.url ?? "";
+  const queryIndex = rawUrl.indexOf("?");
+  const querySuffix = queryIndex === -1 ? "" : rawUrl.slice(queryIndex);
+  const canonicalPath = suffix ? `/mailbox/${suffix}${querySuffix}` : `/mailbox${querySuffix}`;
   const projectDir = resolveProjectDir(projectRoot, gatewayGlobalRoot);
   await getMailboxGateway(projectDir).router.handle(_req, res, canonicalPath);
 }
@@ -5673,6 +5676,7 @@ import {
   createHqPersistence as createHqPersistence2,
   createMailboxHttpRouter as createMailboxHttpRouter2,
   DEFAULT_HQ_REDACTION_POLICY as DEFAULT_HQ_REDACTION_POLICY2,
+  MAILBOX_HTTP_DEFAULT_MAX_AGE_MS,
   ensureHqFirstRunAuthFile,
   GlobalMailbox as GlobalMailbox2,
   HqAlertEngine as HqAlertEngine2,
@@ -5845,7 +5849,7 @@ function startHqServerWithAuth(options, host, port, dataDir, firstRunAuth) {
       timestamp: (/* @__PURE__ */ new Date()).toISOString()
     })
   );
-  return new Promise((resolve15, reject) => {
+  return new Promise((resolve16, reject) => {
     const trustedPublicOrigins = /* @__PURE__ */ new Set();
     let listeningPort = port;
     const clients = /* @__PURE__ */ new Map();
@@ -5916,7 +5920,13 @@ function startHqServerWithAuth(options, host, port, dataDir, firstRunAuth) {
         mailbox,
         eventEmitter,
         rateLimiter: mailboxGatewayRateLimiter,
-        authorize: (request) => authorizeMailboxGateway(request, projectDir)
+        authorize: (request) => authorizeMailboxGateway(request, projectDir),
+        // Wire the 1h look-back that the router's docs promise at
+        // mailbox-http-router.ts:25-32 / :47-62. The router itself is
+        // opt-in (L146-152): without this option, every retained
+        // message would be returned. Per-request opt-in to the full
+        // history remains available via `?sinceMs=0`.
+        defaultMaxAgeMs: MAILBOX_HTTP_DEFAULT_MAX_AGE_MS
       });
       const gateway = { mailbox, router };
       mailboxGateways.set(projectDir, gateway);
@@ -6211,7 +6221,7 @@ function startHqServerWithAuth(options, host, port, dataDir, firstRunAuth) {
           port: actualPort,
           firstRunSetup: startupInfo
         });
-        resolve15(handle);
+        resolve16(handle);
       })();
     });
   });
@@ -6320,7 +6330,7 @@ async function startServer(deps) {
     }
   }
   writeStartupInfo(deps, handle);
-  await new Promise((resolve15) => {
+  await new Promise((resolve16) => {
     const shutdown = async () => {
       try {
         await handle.close();
@@ -6328,7 +6338,7 @@ async function startServer(deps) {
         deps.renderer.write(`HQ server close error: ${String(err)}
 `);
       }
-      resolve15();
+      resolve16();
     };
     process.on("SIGINT", shutdown);
     process.on("SIGTERM", shutdown);
@@ -7854,7 +7864,7 @@ function tail(current, chunk) {
   return `${current}${String(chunk)}`.slice(-MAX_LOG_CHARS);
 }
 function startHqQuickTunnel(originUrl, options = {}) {
-  return new Promise((resolve15, reject) => {
+  return new Promise((resolve16, reject) => {
     const executable = options.executable ?? "cloudflared";
     let child;
     try {
@@ -7886,7 +7896,7 @@ function startHqQuickTunnel(originUrl, options = {}) {
       const readyUrl = publicUrl;
       settled = true;
       clearTimeout(timer);
-      resolve15({
+      resolve16({
         url: readyUrl,
         close: () => new Promise((done) => {
           if (child.exitCode !== null || child.signalCode !== null) {
@@ -9946,10 +9956,11 @@ import {
 function sendStatus(ctx, ws, kind, phase, extra = {}) {
   ctx.send(ws, { type: "auth.oauth.status", payload: { kind, phase, ...extra } });
 }
-async function persistOutcome(ctx, outcome) {
+async function persistOutcome(ctx, outcome, customProviderId) {
   const providers = await ctx.providerStore.load();
-  const existing = providers[outcome.providerId];
-  const p = existing ? { ...existing } : { type: outcome.providerId };
+  const providerId = customProviderId ?? outcome.providerId;
+  const existing = providers[providerId];
+  const p = existing ? { ...existing } : { type: providerId };
   p.family = outcome.family;
   if (!p.baseUrl) p.baseUrl = outcome.baseUrl;
   p.models = [...outcome.models];
@@ -9957,27 +9968,33 @@ async function persistOutcome(ctx, outcome) {
   keys.push(outcome.apiKey);
   writeKeysBack(p, keys);
   p.activeKey = outcome.apiKey.label;
-  providers[outcome.providerId] = p;
+  providers[providerId] = p;
   await ctx.providerStore.save(providers);
   broadcastSaved(ctx, providers);
 }
-async function finish(ctx, ws, kind, outcome) {
+async function finish(ctx, ws, kind, outcome, customProviderId) {
   if (!outcome) {
     sendStatus(ctx, ws, kind, "error", { message: "Sign-in cancelled or timed out." });
     return;
   }
-  sendStatus(ctx, ws, kind, "fetching_models", { providerId: outcome.providerId });
-  await persistOutcome(ctx, outcome);
+  sendStatus(ctx, ws, kind, "fetching_models", { providerId: customProviderId ?? outcome.providerId });
+  await persistOutcome(ctx, outcome, customProviderId);
   sendStatus(ctx, ws, kind, "success", {
-    providerId: outcome.providerId,
-    message: `Signed in \u2014 saved as ${outcome.providerId} (${outcome.models.length} models).`
+    providerId: customProviderId ?? outcome.providerId,
+    message: `Signed in \u2014 saved as ${customProviderId ?? outcome.providerId} (${outcome.models.length} models).`
   });
 }
-async function handleOAuthStart(ctx, ws, kind) {
+async function handleOAuthStart(ctx, ws, kind, customProviderId) {
   try {
     oauthSessions.get(kind)?.close();
     oauthSessions.delete(kind);
     const session = await beginOAuthLogin(kind, { modelsRegistry: ctx.modelsRegistry });
+    if (customProviderId) {
+      session.providerId = customProviderId;
+      customProviderIds.set(kind, customProviderId);
+    } else {
+      customProviderIds.delete(kind);
+    }
     oauthSessions.set(kind, session);
     if (kind === "copilot") {
       sendStatus(ctx, ws, kind, "awaiting_code", {
@@ -9998,7 +10015,7 @@ async function handleOAuthStart(ctx, ws, kind) {
       void (async () => {
         try {
           const outcome = await session.waitForCompletion();
-          await finish(ctx, ws, kind, outcome);
+          await finish(ctx, ws, kind, outcome, customProviderIds.get(kind));
         } catch (err) {
           sendStatus(ctx, ws, kind, "error", { message: toErrorMessage18(err) });
         } finally {
@@ -10021,7 +10038,7 @@ async function handleOAuthCode(ctx, ws, kind, input) {
   try {
     sendStatus(ctx, ws, kind, "exchanging", { providerId: session.providerId });
     const outcome = await session.completeWithCode(input);
-    await finish(ctx, ws, kind, outcome);
+    await finish(ctx, ws, kind, outcome, customProviderIds.get(kind));
   } catch (err) {
     sendStatus(ctx, ws, kind, "error", { message: toErrorMessage18(err) });
   } finally {
@@ -10034,13 +10051,14 @@ function handleOAuthCancel(ctx, ws, kind) {
   oauthSessions.delete(kind);
   sendStatus(ctx, ws, kind, "error", { message: "Sign-in cancelled." });
 }
-var oauthSessions;
+var oauthSessions, customProviderIds;
 var init_oauth = __esm({
   "src/webui-server/ws-handlers/oauth.ts"() {
     "use strict";
     init_provider_config();
     init_providers();
     oauthSessions = /* @__PURE__ */ new Map();
+    customProviderIds = /* @__PURE__ */ new Map();
   }
 });
 
@@ -12970,7 +12988,8 @@ function createMessageRouter(deps) {
     // ── Subscription OAuth login (ChatGPT / Claude / Copilot) ──
     "auth.oauth.start": (msg, ws) => {
       const kind = oauthKindOf(msg);
-      if (kind) void handleOAuthStart(wsHandlerCtx, ws, kind);
+      const providerId = msg.payload?.providerId;
+      if (kind) void handleOAuthStart(wsHandlerCtx, ws, kind, typeof providerId === "string" ? providerId : void 0);
     },
     "auth.oauth.code": (msg, ws) => {
       const kind = oauthKindOf(msg);
@@ -13607,7 +13626,7 @@ async function seedConfigToMeta(opts) {
   meta["yolo"] = autonomyCfg["yolo"] ?? cfg.yolo ?? false;
   meta["chime"] = autonomyCfg["chime"] ?? false;
   meta["confirmExit"] = autonomyCfg["confirmExit"] !== false;
-  meta["streamFleet"] = autonomyCfg["streamFleet"] !== false;
+  meta["fleetChatVerbosity"] = autonomyCfg["fleetChatVerbosity"] ?? "off";
   meta["enhanceEnabled"] = autonomyCfg["enhance"] ?? true;
   meta["enhanceDelayMs"] = autonomyCfg["enhanceDelayMs"] ?? 6e4;
   meta["enhanceLanguage"] = autonomyCfg["enhanceLanguage"] ?? "original";
@@ -13762,9 +13781,8 @@ function createPrefsSeeding(opts) {
       }
       if ("chime" in payload) autonomy["chime"] = payload["chime"];
       if ("confirmExit" in payload) autonomy["confirmExit"] = payload["confirmExit"];
-      if ("streamFleet" in payload) {
-        autonomy["streamFleet"] = payload["streamFleet"];
-        autonomy["fleetChatVerbosity"] = payload["streamFleet"] ? "full" : "off";
+      if ("fleetChatVerbosity" in payload) {
+        autonomy["fleetChatVerbosity"] = payload["fleetChatVerbosity"];
       }
       if ("enhanceEnabled" in payload) autonomy["enhance"] = payload["enhanceEnabled"];
       if ("enhanceDelayMs" in payload) autonomy["enhanceDelayMs"] = payload["enhanceDelayMs"];
@@ -14000,7 +14018,7 @@ var init_prefs_seeding = __esm({
       "maxIterations",
       "chime",
       "confirmExit",
-      "streamFleet",
+      "fleetChatVerbosity",
       "nextPrediction",
       "fallbackModels",
       "fallbackProfiles",
@@ -15789,7 +15807,7 @@ async function runWebUI(opts) {
     kanbanRunMirror: kanbanRunMirror ?? void 0,
     kanbanSupervisor: kanbanSupervisor ?? void 0
   });
-  const stopped = new Promise((resolve15) => {
+  const stopped = new Promise((resolve16) => {
     wss.on("listening", () => {
       console.log(`[WebUI] WebSocket server running on ws://${host}:${port}`);
       setupEvents();
@@ -15879,7 +15897,7 @@ async function runWebUI(opts) {
       wss,
       pid: process.pid,
       registryBaseDir,
-      onStopped: resolve15
+      onStopped: resolve16
     });
     registerWebuiSignalHandlers(signalShutdown);
   });
@@ -16148,7 +16166,7 @@ async function runProjectPicker(opts) {
   const reservedBottom = 3;
   const headerHeight = reservedTop + reservedBottom;
   const baseVisibleHeight = Math.max(5, terminalHeight() - headerHeight);
-  return new Promise((resolve15) => {
+  return new Promise((resolve16) => {
     const wasRaw = stdin.isRaw;
     const wasPaused = stdin.isPaused();
     let filter = "";
@@ -16272,7 +16290,7 @@ async function runProjectPicker(opts) {
           cleanup();
           out.write(CURSOR_SHOW);
           out.write("\n");
-          resolve15(void 0);
+          resolve16(void 0);
           return;
         }
         if (ch === ESC) {
@@ -16285,7 +16303,7 @@ async function runProjectPicker(opts) {
           cleanup();
           out.write(CURSOR_SHOW);
           out.write("\n");
-          resolve15(void 0);
+          resolve16(void 0);
           return;
         }
         if (ch === BS || ch === "\b") {
@@ -16302,22 +16320,22 @@ async function runProjectPicker(opts) {
           out.write(CURSOR_SHOW);
           out.write("\n");
           if (!item || item.key === "__divider__") {
-            resolve15(void 0);
+            resolve16(void 0);
             return;
           }
           if (item.key === "quit") {
-            resolve15(void 0);
+            resolve16(void 0);
             return;
           }
           if (item.key === "new-session") {
-            resolve15({ kind: "action", key: "new-session", action: "new-session" });
+            resolve16({ kind: "action", key: "new-session", action: "new-session" });
             return;
           }
           if (item.key === "prev-sessions") {
-            resolve15({ kind: "action", key: "prev-sessions", action: "prev-sessions" });
+            resolve16({ kind: "action", key: "prev-sessions", action: "prev-sessions" });
             return;
           }
-          resolve15({ kind: "project", key: item.key });
+          resolve16({ kind: "project", key: item.key });
           return;
         }
         if (filter.length === 0) {
@@ -16325,7 +16343,7 @@ async function runProjectPicker(opts) {
             cleanup();
             out.write(CURSOR_SHOW);
             out.write("\n");
-            resolve15(void 0);
+            resolve16(void 0);
             return;
           }
           if (ch === "j") {
@@ -16354,7 +16372,7 @@ async function runProjectPicker(opts) {
     try {
       stdin.setRawMode(true);
     } catch {
-      resolve15(void 0);
+      resolve16(void 0);
       return;
     }
     stdin.resume();
@@ -16365,7 +16383,7 @@ async function runProjectPicker(opts) {
     stdin.once("close", () => {
       cleanup();
       out.write(CURSOR_SHOW);
-      resolve15(void 0);
+      resolve16(void 0);
     });
   });
 }
@@ -18577,12 +18595,12 @@ function callbackHtml(ok2, message) {
 function startLoopbackServer(expectedState, signal) {
   let resolveCode = () => {
   };
-  const codePromise = new Promise((resolve15) => {
+  const codePromise = new Promise((resolve16) => {
     let settled = false;
     resolveCode = (v) => {
       if (settled) return;
       settled = true;
-      resolve15(v);
+      resolve16(v);
     };
   });
   const server = createServer((req2, res) => {
@@ -18636,10 +18654,10 @@ function startLoopbackServer(expectedState, signal) {
     if (signal.aborted) onAbort();
     else signal.addEventListener("abort", onAbort, { once: true });
   }
-  return new Promise((resolve15) => {
+  return new Promise((resolve16) => {
     server.on("error", () => {
       resolveCode(null);
-      resolve15({
+      resolve16({
         bound: false,
         waitForCode: () => Promise.resolve(null),
         close: () => {
@@ -18651,7 +18669,7 @@ function startLoopbackServer(expectedState, signal) {
       });
     });
     server.listen(REDIRECT_PORT, REDIRECT_HOST, () => {
-      resolve15({
+      resolve16({
         bound: true,
         waitForCode: () => codePromise,
         close: () => {
@@ -18823,9 +18841,9 @@ function openBrowser2(url) {
   }
 }
 function sleep(ms, signal) {
-  return new Promise((resolve15, reject) => {
+  return new Promise((resolve16, reject) => {
     if (signal.aborted) return reject(new DOMException("Aborted", "AbortError"));
-    const t = setTimeout(resolve15, ms);
+    const t = setTimeout(resolve16, ms);
     signal.addEventListener(
       "abort",
       () => {
@@ -19213,12 +19231,12 @@ function callbackHtml2(ok2, message) {
 function startLoopbackServer2(state, signal) {
   let resolveCode = () => {
   };
-  const codePromise = new Promise((resolve15) => {
+  const codePromise = new Promise((resolve16) => {
     let settled = false;
     resolveCode = (v) => {
       if (settled) return;
       settled = true;
-      resolve15(v);
+      resolve16(v);
     };
   });
   const server = createServer2((req2, res) => {
@@ -19271,7 +19289,7 @@ function startLoopbackServer2(state, signal) {
     if (signal.aborted) onAbort();
     else signal.addEventListener("abort", onAbort, { once: true });
   }
-  return new Promise((resolve15) => {
+  return new Promise((resolve16) => {
     const ports = [REDIRECT_PORT2, FALLBACK_REDIRECT_PORT];
     let index = 0;
     const close = () => {
@@ -19283,7 +19301,7 @@ function startLoopbackServer2(state, signal) {
     };
     const fail2 = () => {
       resolveCode(null);
-      resolve15({
+      resolve16({
         bound: false,
         port: REDIRECT_PORT2,
         waitForCode: () => Promise.resolve(null),
@@ -19302,7 +19320,7 @@ function startLoopbackServer2(state, signal) {
     server.on("listening", () => {
       const address = server.address();
       const port = typeof address === "object" && address ? address.port : ports[index] ?? REDIRECT_PORT2;
-      resolve15({
+      resolve16({
         bound: true,
         port,
         waitForCode: () => codePromise,
@@ -20336,7 +20354,7 @@ async function runLiveProviderPicker(displayList, savedSet) {
   writeOut(frame);
   writeOut("\x1B7");
   cursorToQuery(frame, state.query);
-  return new Promise((resolve15) => {
+  return new Promise((resolve16) => {
     const wasRaw = stdin.isRaw;
     const wasPaused = stdin.isPaused();
     setRawMode(stdin, true);
@@ -20366,7 +20384,7 @@ async function runLiveProviderPicker(displayList, savedSet) {
       if (state.status === "cancelled") {
         cleanup();
         writeOut("\n");
-        resolve15(void 0);
+        resolve16(void 0);
         return;
       }
       if (state.status === "submitted") {
@@ -20378,7 +20396,7 @@ async function runLiveProviderPicker(displayList, savedSet) {
         const pick = ordered[state.selected] ?? ordered[0];
         cleanup();
         writeOut("\n");
-        resolve15(pick);
+        resolve16(pick);
         return;
       }
       repaint();
@@ -20591,7 +20609,7 @@ async function runLiveModelPicker(provider, defaultModel) {
   if (preamble) writeOut(preamble);
   let frame = renderLiveModelList(state.query, ordered, state.selected, header);
   writeOut(frame);
-  return new Promise((resolve15) => {
+  return new Promise((resolve16) => {
     const wasRaw = stdin.isRaw;
     const wasPaused = stdin.isPaused();
     setRawMode(stdin, true);
@@ -20618,7 +20636,7 @@ async function runLiveModelPicker(provider, defaultModel) {
       if (state.status === "cancelled") {
         cleanup();
         writeOut("\n");
-        resolve15(void 0);
+        resolve16(void 0);
         return;
       }
       if (state.status === "submitted") {
@@ -20630,7 +20648,7 @@ async function runLiveModelPicker(provider, defaultModel) {
         const pick = ordered[state.selected] ?? ordered[0];
         cleanup();
         writeOut("\n");
-        resolve15(pick);
+        resolve16(pick);
         return;
       }
       repaint();
@@ -22345,7 +22363,7 @@ function resolveTaskConcurrency() {
 var WORKTREE_PHASE_CONCURRENCY = 4;
 var MAX_CMD_OUTPUT = 2e5;
 function gitText(args, cwd) {
-  return new Promise((resolve15, reject) => {
+  return new Promise((resolve16, reject) => {
     let child;
     try {
       child = spawn4("git", args, {
@@ -22370,8 +22388,8 @@ function gitText(args, cwd) {
     };
     child.stdout?.on("data", emit);
     child.stderr?.on("data", emit);
-    child.on("error", () => resolve15({ code: 1, out: chunks.join("") }));
-    child.on("close", (code) => resolve15({ code: code ?? 1, out: chunks.join("").trim() }));
+    child.on("error", () => resolve16({ code: 1, out: chunks.join("") }));
+    child.on("close", (code) => resolve16({ code: code ?? 1, out: chunks.join("").trim() }));
   });
 }
 async function isGitRepo(cwd) {
@@ -22420,7 +22438,7 @@ function runCmd(cmd, args, cwd, shell = false) {
       });
     }
   }
-  return new Promise((resolve15, reject) => {
+  return new Promise((resolve16, reject) => {
     const chunks = [];
     let child;
     try {
@@ -22443,11 +22461,11 @@ function runCmd(cmd, args, cwd, shell = false) {
     };
     child.stdout?.on("data", append);
     child.stderr?.on("data", append);
-    child.on("error", (e) => resolve15({ code: 1, out: `${chunks.join("")}${String(e)}` }));
+    child.on("error", (e) => resolve16({ code: 1, out: `${chunks.join("")}${String(e)}` }));
     child.on("close", (code) => {
       let out = chunks.join("");
       if (out.length > MAX_CMD_OUTPUT) out = out.slice(-MAX_CMD_OUTPUT);
-      resolve15({ code: code ?? 1, out: out.trim() });
+      resolve16({ code: code ?? 1, out: out.trim() });
     });
   });
 }
@@ -23464,25 +23482,25 @@ var ReadlineInputReader = class {
   async readLine(prompt, timeoutOpts) {
     if (this.history.length === 0) await this.loadHistory();
     while (this.pending) {
-      await new Promise((resolve15) => setTimeout(resolve15, 50));
+      await new Promise((resolve16) => setTimeout(resolve16, 50));
     }
     this.pending = true;
     try {
       if (this.rl) {
         const old = this.rl;
         this.rl = void 0;
-        await new Promise((resolve15) => {
+        await new Promise((resolve16) => {
           if (old.closed) {
-            resolve15();
+            resolve16();
           } else {
-            old.once("close", resolve15);
+            old.once("close", resolve16);
             old.close();
           }
         });
       }
       const fresh = this.ensure();
       this.installPromptGuard(fresh);
-      return new Promise((resolve15) => {
+      return new Promise((resolve16) => {
         let settled = false;
         let timeoutHandle;
         const settle = (line) => {
@@ -23490,7 +23508,7 @@ var ReadlineInputReader = class {
           settled = true;
           if (timeoutHandle) clearTimeout(timeoutHandle);
           setOutputLineGuard2(null);
-          resolve15(line);
+          resolve16(line);
         };
         if (timeoutOpts) {
           timeoutHandle = setTimeout(() => {
@@ -23554,7 +23572,7 @@ var ReadlineInputReader = class {
   async readKey(prompt, options) {
     setOutputLineGuard2(null);
     writeOut2(prompt);
-    return new Promise((resolve15) => {
+    return new Promise((resolve16) => {
       const stdin = process.stdin;
       const wasRaw = stdin.isRaw;
       const wasPaused = stdin.isPaused();
@@ -23565,7 +23583,7 @@ var ReadlineInputReader = class {
         if (key === "") {
           cleanup();
           writeOut2("\n");
-          resolve15("");
+          resolve16("");
           return;
         }
         const opt = options.find(
@@ -23575,12 +23593,12 @@ var ReadlineInputReader = class {
           cleanup();
           writeOut2(`${opt.key}
 `);
-          resolve15(opt.value);
+          resolve16(opt.value);
         }
       };
       const onClose = () => {
         cleanup();
-        resolve15("");
+        resolve16("");
       };
       const cleanup = () => {
         stdin.off("data", onData);
@@ -23612,7 +23630,7 @@ var ReadlineInputReader = class {
     this.rl?.close();
     this.rl = void 0;
     writeOut2(prompt);
-    return new Promise((resolve15) => {
+    return new Promise((resolve16) => {
       let buf = "";
       const wasRaw = stdin.isRaw;
       const cleanup = () => {
@@ -23641,13 +23659,13 @@ var ReadlineInputReader = class {
             cleanup();
             writeOut2(`  ${dim(`[${buf.length} chars]`)}
 `);
-            resolve15(buf);
+            resolve16(buf);
             return;
           }
           if (ch === "") {
             cleanup();
             writeOut2("\n");
-            resolve15("");
+            resolve16("");
             return;
           }
           if (ch === "") {
@@ -24047,7 +24065,7 @@ async function runProjectCheck(opts) {
     if (answer2 === "y" || answer2 === "yes") {
       try {
         const { spawn: spawn17 } = await import("node:child_process");
-        await new Promise((resolve15, reject) => {
+        await new Promise((resolve16, reject) => {
           const child = spawn17("git", ["init"], {
             cwd,
             signal: AbortSignal.timeout(1e4),
@@ -24056,7 +24074,7 @@ async function runProjectCheck(opts) {
           child.on("error", reject);
           child.on(
             "close",
-            (code) => code === 0 ? resolve15() : reject(new Error(`git init failed with ${code}`))
+            (code) => code === 0 ? resolve16() : reject(new Error(`git init failed with ${code}`))
           );
         });
         renderer.write(`  ${color14.green("\u2713")} Git repository initialized
@@ -24761,6 +24779,7 @@ init_update();
 
 // src/subcommands/handlers/acp.ts
 import {
+  defaultPermissionPolicy,
   EnsembleRegistry,
   probeAcpAgents,
   renderAcpBenchText,
@@ -25258,11 +25277,11 @@ async function runACPWebSocketServer(deps, port) {
 ` : `WrongStack ACP server listening on ws://${host}:${port} (${deps.config.provider}/${deps.config.model}). Press Ctrl+C to stop.
 `
   );
-  await new Promise((resolve15) => {
+  await new Promise((resolve16) => {
     const shutdown = () => {
       deps.renderer.writeWarning("\nShutting down ACP WebSocket server...");
       wss.close();
-      resolve15();
+      resolve16();
     };
     process.on("SIGINT", shutdown);
     process.on("SIGTERM", shutdown);
@@ -25416,6 +25435,7 @@ async function spawnACPAgent(args, deps) {
       role: subagentId,
       task,
       signal: ac.signal,
+      permissionPolicy: defaultPermissionPolicy,
       onProgress: (event) => {
         const line = formatProgress(event);
         if (line) deps.renderer.writeInfo(`  ${line}
@@ -26917,6 +26937,7 @@ import {
   authorizeMailboxBearerToken,
   createMailboxHttpRouter as createMailboxHttpRouter3,
   GlobalMailbox as GlobalMailbox3,
+  MAILBOX_HTTP_DEFAULT_MAX_AGE_MS as MAILBOX_HTTP_DEFAULT_MAX_AGE_MS2,
   MailboxEventEmitter as MailboxEventEmitter2,
   MailboxHttpRateLimiter as MailboxHttpRateLimiter3,
   resolveProjectDir as resolveProjectDir2,
@@ -27003,21 +27024,32 @@ or stop the conflicting process and retry.
     mailbox,
     eventEmitter,
     rateLimiter,
-    authorize: (request) => authorizeMailboxBearerToken(request, tentative.token)
+    authorize: (request) => authorizeMailboxBearerToken(request, tentative.token),
+    // Wire the 1h look-back that the router's docs promise at
+    // mailbox-http-router.ts:25-32 / :47-62. The router itself is
+    // opt-in (L146-152): without this option, every retained
+    // message would be returned.
+    //
+    // Per-request override contract (mailbox-http-router.ts:64-80):
+    //   - `?sinceMs=0`         → no filter (full retained history)
+    //   - `?sinceMs > 7d`      → silently clamped to
+    //                            MAILBOX_HTTP_MAX_AGE_CEILING_MS (7d)
+    //   - `?sinceMs=-1/NaN/∞`  → disable sentinel (same as `undefined`)
+    defaultMaxAgeMs: MAILBOX_HTTP_DEFAULT_MAX_AGE_MS2
   });
   const server = createServer4((request, response) => {
     void router.handle(request, response);
   });
   let boundPort = -1;
   try {
-    await new Promise((resolve15, reject) => {
+    await new Promise((resolve16, reject) => {
       const onError = (err) => {
         server.off("listening", onListening);
         reject(err);
       };
       const onListening = () => {
         server.off("error", onError);
-        resolve15();
+        resolve16();
       };
       server.once("error", onError);
       server.once("listening", onListening);
@@ -27030,14 +27062,14 @@ or stop the conflicting process and retry.
     const msg = err.message;
     if (portExplicitlySet && !strictPort) {
       try {
-        await new Promise((resolve15, reject) => {
+        await new Promise((resolve16, reject) => {
           const onError = (e) => {
             server.off("listening", onListening);
             reject(e);
           };
           const onListening = () => {
             server.off("error", onError);
-            resolve15();
+            resolve16();
           };
           server.once("error", onError);
           server.once("listening", onListening);
@@ -27090,7 +27122,7 @@ This usually means no port is available (extremely rare). Retry or pick an expli
     }
   });
   writeStartupInfo2(deps, { host, port: boundPort, projectDir, tokenPath: acquireResult.tokenPath });
-  await new Promise((resolve15) => {
+  await new Promise((resolve16) => {
     let shuttingDown = false;
     const shutdown = async (sig) => {
       if (shuttingDown) return;
@@ -27105,7 +27137,7 @@ This usually means no port is available (extremely rare). Retry or pick an expli
 `);
       });
       await release2(projectDir, finalized.generation);
-      resolve15();
+      resolve16();
     };
     process.on("SIGINT", shutdown);
     process.on("SIGTERM", shutdown);
@@ -27443,8 +27475,8 @@ async function serveMcpStdio(deps) {
     log(
       `wrongstack MCP server ready at ${handle2.url} \u2014 exposing ${allowed.length} tool(s), ${selectedContent.resources.length} resource(s), ${selectedContent.prompts.length} prompt(s) (${mode})${token ? " [token auth]" : ""}.`
     );
-    await new Promise((resolve15) => {
-      const stop = () => resolve15();
+    await new Promise((resolve16) => {
+      const stop = () => resolve16();
       process.once("SIGINT", stop);
       process.once("SIGTERM", stop);
     });
@@ -29944,6 +29976,10 @@ function resolveBundledPromptsDir() {
     return void 0;
   }
 }
+function isHomeDirectory(cwd, userHome) {
+  if (!cwd || !userHome) return false;
+  return path25.resolve(cwd) === path25.resolve(userHome);
+}
 function shouldPrintYoloNotice(lastChoices, yoloPinned, yolo) {
   return !lastChoices && yoloPinned === void 0 && yolo;
 }
@@ -30071,6 +30107,17 @@ async function boot(argv) {
     await reader.close();
     return code;
   }
+  if (isHomeDirectory(cwd, userHome)) {
+    writeErr3(
+      `
+  ${color36.red(color36.bold("\u26A0 This is not a working directory."))}
+  ${color36.red("Please open wstack in a project folder.")}
+
+`
+    );
+    await reader.close();
+    return 1;
+  }
   if (!flags["no-models-refresh"]) {
     try {
       await modelsRegistry.refresh();
@@ -30339,7 +30386,7 @@ async function checkGitInCwd(opts) {
     if (answer === "y" || answer === "yes") {
       try {
         const { spawn: spawn17 } = await import("node:child_process");
-        await new Promise((resolve15, reject) => {
+        await new Promise((resolve16, reject) => {
           const child = spawn17("git", ["init"], {
             cwd,
             signal: AbortSignal.timeout(1e4),
@@ -30348,7 +30395,7 @@ async function checkGitInCwd(opts) {
           child.on("error", reject);
           child.on(
             "close",
-            (code) => code === 0 ? resolve15() : reject(new Error(`git init failed with ${code}`))
+            (code) => code === 0 ? resolve16() : reject(new Error(`git init failed with ${code}`))
           );
         });
         renderer.write(`  ${color36.green("\u2713")} Git repository initialized
@@ -30431,7 +30478,7 @@ async function launchDesktop(args) {
     );
     return 1;
   }
-  return await new Promise((resolve15) => {
+  return await new Promise((resolve16) => {
     const child = spawn6(process.execPath, [launcherPath, ...args], {
       stdio: "inherit",
       env: process.env,
@@ -30440,11 +30487,11 @@ async function launchDesktop(args) {
     child.once("error", (err) => {
       process.stderr.write(`${color37.red("\u2717 Failed to start WrongStack Desktop:")} ${err.message}
 `);
-      resolve15(1);
+      resolve16(1);
     });
     child.once("exit", (code, signal) => {
-      if (typeof code === "number") resolve15(code);
-      else resolve15(signal ? 1 : 0);
+      if (typeof code === "number") resolve16(code);
+      else resolve16(signal ? 1 : 0);
     });
   });
 }
@@ -30478,17 +30525,17 @@ async function isHqAlreadyRunning(dataDir) {
   }
 }
 async function isPortInUse(host, port) {
-  return new Promise((resolve15) => {
+  return new Promise((resolve16) => {
     const server = net.createServer();
     server.once("error", (err) => {
       if (err.code === "EADDRINUSE") {
-        resolve15(true);
+        resolve16(true);
       } else {
-        resolve15(false);
+        resolve16(false);
       }
     });
     server.once("listening", () => {
-      server.close(() => resolve15(false));
+      server.close(() => resolve16(false));
     });
     server.listen(port, host);
   });
@@ -30626,7 +30673,7 @@ ${color38.green("Cloudflare Quick Tunnel ready:")} ${browserUrl}
     } catch {
     }
   }
-  await new Promise((resolve15) => {
+  await new Promise((resolve16) => {
     const shutdown = async () => {
       const results = await Promise.allSettled([
         ...tunnel ? [tunnel.close()] : [],
@@ -30645,7 +30692,7 @@ ${color38.green("Cloudflare Quick Tunnel ready:")} ${browserUrl}
           })
         );
       }
-      resolve15();
+      resolve16();
     };
     process.on("SIGINT", shutdown);
     process.on("SIGTERM", shutdown);
@@ -31077,8 +31124,6 @@ function wireContainer(deps) {
     events,
     permission: {
       yolo: deps.config.yolo,
-      yoloDestructive: deps.yoloDestructive,
-      confirmDestructive: deps.confirmDestructive,
       promptDelegate: makePromptDelegate(deps.reader)
     },
     compactor: {
@@ -31221,9 +31266,7 @@ async function initializeCli(argv) {
     logger,
     reader,
     renderer,
-    modelsRegistry,
-    yoloDestructive: ctx.flags["yolo-destructive"] === true || ctx.flags["force-all-yolo"] === true,
-    confirmDestructive: false
+    modelsRegistry
   });
   const replayFlag = ctx.flags["replay"];
   const recordFlag = ctx.flags["record"];
@@ -31711,18 +31754,18 @@ async function runWebUIDispatch(ctx) {
       applyLiveSettings?.({ yolo: enabled });
     }
   });
-  const webuiExit = new Promise((resolve15) => {
+  const webuiExit = new Promise((resolve16) => {
     webuiPromise.then(() => {
       renderer.setSilent(false);
       renderer.write("\n");
       renderer.writeInfo(
         color44.yellow(`  Shutting down ${isSimpleUi ? "SimpleUI" : "WebUI"} server\u2026`)
       );
-      resolve15(0);
+      resolve16(0);
     }).catch((err) => {
       renderer.setSilent(false);
       console.debug(`[execution] webui error: ${err}`);
-      resolve15(1);
+      resolve16(1);
     });
   });
   return webuiExit;
@@ -32700,8 +32743,6 @@ function createSettingsAdapter(ctx) {
       delayMs: autonomy?.autoProceedDelayMs ?? 45e3,
       titleAnimation: autonomy?.terminalTitleAnimation !== false,
       yolo: cfg.yolo ?? (autonomy?.yolo ?? false),
-      // Legacy boolean kept for readers that predate the enum (webui prefs).
-      streamFleet: autonomy?.streamFleet !== false,
       fleetChatVerbosity: resolveFleetChatVerbosity(cfg.autonomy),
       chime: autonomy?.chime ?? false,
       confirmExit: autonomy?.confirmExit !== false,
@@ -32749,7 +32790,7 @@ function createSettingsAdapter(ctx) {
   }
   async function saveSettings(s) {
     try {
-      if (s.mode !== void 0 || s.delayMs !== void 0 || s.titleAnimation !== void 0 || s.yolo !== void 0 || s.streamFleet !== void 0 || s.fleetChatVerbosity !== void 0 || s.chime !== void 0 || s.confirmExit !== void 0 || s.mouseMode !== void 0 || s.featureMcp !== void 0 || s.featurePlugins !== void 0 || s.featureMemory !== void 0 || s.featureSkills !== void 0 || s.featureModelsRegistry !== void 0 || s.featureTokenSaving !== void 0 || s.allowOutsideProjectRoot !== void 0 || s.contextAutoCompact !== void 0 || s.contextStrategy !== void 0 || s.contextMode !== void 0 || s.maxConcurrent !== void 0 || s.logLevel !== void 0 || s.auditLevel !== void 0 || s.indexOnStart !== void 0 || s.maxIterations !== void 0 || s.restrictFsToRoot !== void 0 || s.nextPrediction !== void 0 || s.debugStream !== void 0 || s.shellBangWarningDontShowAgain !== void 0 || s.configScope !== void 0 || s.enhanceDelayMs !== void 0 || s.enhanceEnabled !== void 0 || s.enhanceLanguage !== void 0 || s.midRunSendPicker !== void 0 || s.statuslineMode !== void 0 || s.thinkingWord !== void 0 || s.animationStyle !== void 0 || s.autonomyNextPrompt !== void 0 || s.autoProceedMaxIterations !== void 0 || s.reasoningMode !== void 0 || s.reasoningEffort !== void 0 || s.reasoningPreserve !== void 0 || s.cacheTtl !== void 0 || s.breakerEnabled !== void 0 || s.breakerAutoKillResetMs !== void 0 || s.showModelReasoning !== void 0) {
+      if (s.mode !== void 0 || s.delayMs !== void 0 || s.titleAnimation !== void 0 || s.yolo !== void 0 || s.fleetChatVerbosity !== void 0 || s.chime !== void 0 || s.confirmExit !== void 0 || s.mouseMode !== void 0 || s.featureMcp !== void 0 || s.featurePlugins !== void 0 || s.featureMemory !== void 0 || s.featureSkills !== void 0 || s.featureModelsRegistry !== void 0 || s.featureTokenSaving !== void 0 || s.allowOutsideProjectRoot !== void 0 || s.contextAutoCompact !== void 0 || s.contextStrategy !== void 0 || s.contextMode !== void 0 || s.maxConcurrent !== void 0 || s.logLevel !== void 0 || s.auditLevel !== void 0 || s.indexOnStart !== void 0 || s.maxIterations !== void 0 || s.restrictFsToRoot !== void 0 || s.nextPrediction !== void 0 || s.debugStream !== void 0 || s.shellBangWarningDontShowAgain !== void 0 || s.configScope !== void 0 || s.enhanceDelayMs !== void 0 || s.enhanceEnabled !== void 0 || s.enhanceLanguage !== void 0 || s.midRunSendPicker !== void 0 || s.statuslineMode !== void 0 || s.thinkingWord !== void 0 || s.animationStyle !== void 0 || s.autonomyNextPrompt !== void 0 || s.autoProceedMaxIterations !== void 0 || s.reasoningMode !== void 0 || s.reasoningEffort !== void 0 || s.reasoningPreserve !== void 0 || s.cacheTtl !== void 0 || s.breakerEnabled !== void 0 || s.breakerAutoKillResetMs !== void 0 || s.showModelReasoning !== void 0) {
         const cfg = configStore.get();
         const activeProfileName2 = cfg.activeProfile ?? "default";
         const persistDeps = {
@@ -32782,10 +32823,6 @@ function createSettingsAdapter(ctx) {
         if (s.yolo !== void 0) autonomy.yolo = s.yolo;
         if (s.fleetChatVerbosity !== void 0) {
           autonomy.fleetChatVerbosity = s.fleetChatVerbosity;
-          autonomy.streamFleet = s.fleetChatVerbosity !== "off";
-        } else if (s.streamFleet !== void 0) {
-          autonomy.fleetChatVerbosity = s.streamFleet ? "full" : "off";
-          autonomy.streamFleet = s.streamFleet;
         }
         if (s.chime !== void 0) autonomy.chime = s.chime;
         if (s.confirmExit !== void 0) autonomy.confirmExit = s.confirmExit;
@@ -32960,9 +32997,6 @@ function createSettingsAdapter(ctx) {
       }
       if (s.fleetChatVerbosity !== void 0) {
         if (fleetStreamController?.setMode) fleetStreamController.setMode(s.fleetChatVerbosity);
-        else fleetStreamController?.setEnabled(s.fleetChatVerbosity !== "off");
-      } else if (s.streamFleet !== void 0) {
-        fleetStreamController?.setEnabled(s.streamFleet);
       }
       applyLiveSettings?.(s);
       return null;
@@ -33575,7 +33609,7 @@ async function runRepl(opts) {
               `[eternal] ${toErrorMessage21(err)}`
             );
           }
-          await new Promise((resolve15) => setTimeout(resolve15, 250));
+          await new Promise((resolve16) => setTimeout(resolve16, 250));
           continue;
         }
       } else if (opts.getAutonomy?.() === "eternal-parallel") {
@@ -33651,7 +33685,7 @@ async function runRepl(opts) {
               `[parallel] ${toErrorMessage21(err)}`
             );
           }
-          await new Promise((resolve15) => setTimeout(resolve15, 250));
+          await new Promise((resolve16) => setTimeout(resolve16, 250));
           continue;
         }
       }
@@ -34297,12 +34331,12 @@ ${color51.cyan("\u23F3 Auto")}  ${color51.dim("(Ctrl+C to cancel)")}
   let interval;
   let lastTickedSecond = sec + 1;
   let onAbort;
-  return new Promise((resolve15) => {
-    onAbort = () => resolve15(false);
+  return new Promise((resolve16) => {
+    onAbort = () => resolve16(false);
     signal.addEventListener("abort", onAbort, { once: true });
     interval = setInterval(() => {
       if (signal.aborted) {
-        resolve15(false);
+        resolve16(false);
         return;
       }
       const elapsed = Date.now() - start;
@@ -34310,7 +34344,7 @@ ${color51.cyan("\u23F3 Auto")}  ${color51.dim("(Ctrl+C to cancel)")}
       if (remaining <= 0) {
         opts.renderer.write(color51.dim(`  \u21B3 ${truncated}
 `));
-        resolve15(true);
+        resolve16(true);
         return;
       }
       if (opts.onCountdownTick && remaining !== lastTickedSecond) {
@@ -34321,7 +34355,7 @@ ${color51.cyan("\u23F3 Auto")}  ${color51.dim("(Ctrl+C to cancel)")}
             opts.renderer.write(
               color51.yellow("  \u21B3 Countdown cancelled \u2014 switching to manual mode\n")
             );
-            resolve15(false);
+            resolve16(false);
             return;
           }
         } catch {
@@ -36190,6 +36224,7 @@ init_helpers();
 
 // src/slash-commands/acp.ts
 import {
+  defaultPermissionPolicy as defaultPermissionPolicy2,
   EnsembleRegistry as EnsembleRegistry2,
   probeAcpAgents as probeAcpAgents2,
   renderAcpBenchText as renderAcpBenchText2,
@@ -36446,6 +36481,7 @@ ${summary}` };
       task,
       cwd: opts.cwd,
       projectRoot: opts.projectRoot,
+      permissionPolicy: defaultPermissionPolicy2,
       onProgress: (event) => {
         const line = formatProgress2(event);
         if (line) opts.renderer.writeInfo(`  ${line}
@@ -38652,7 +38688,7 @@ The following characters are not allowed: ; & | < > ^ $ , ( ) { } [ ] ! # % ' "
   }
 }
 function runCommand(cmd, cwd, timeout) {
-  return new Promise((resolve15) => {
+  return new Promise((resolve16) => {
     validateCommand(cmd);
     const opts = {
       cwd,
@@ -38665,7 +38701,7 @@ function runCommand(cmd, cwd, timeout) {
       shell: process.platform === "win32"
     };
     execFile(cmd, [], opts, (error, stdout, stderr) => {
-      resolve15({
+      resolve16({
         stdout,
         stderr,
         exitCode: typeof error?.code === "number" ? error.code : 0,
@@ -41187,7 +41223,7 @@ import { assessCommitSafety } from "@wrongstack/core";
 import { color as color69, toErrorMessage as toErrorMessage29 } from "@wrongstack/core";
 async function runGit(args, cwd) {
   try {
-    return await new Promise((resolve15, reject) => {
+    return await new Promise((resolve16, reject) => {
       const child = spawn9("git", args, {
         cwd,
         stdio: ["ignore", "pipe", "pipe"],
@@ -41205,7 +41241,7 @@ async function runGit(args, cwd) {
       child.on("error", (err) => {
         reject(new Error(`Failed to run git: ${err.message}`));
       });
-      child.on("close", (code) => resolve15({ stdout, stderr, code: code ?? 0 }));
+      child.on("close", (code) => resolve16({ stdout, stderr, code: code ?? 0 }));
     });
   } catch (err) {
     throw new Error(toErrorMessage29(err));
@@ -48652,7 +48688,6 @@ function buildAgentsCommand(opts) {
               },
               (autonomy) => {
                 autonomy.fleetChatVerbosity = mode;
-                autonomy.streamFleet = mode !== "off";
               }
             );
           }
@@ -49492,7 +49527,7 @@ import { spawn as spawn12 } from "node:child_process";
 import * as fsp6 from "node:fs/promises";
 import * as path63 from "node:path";
 async function runGit2(args, cwd) {
-  return new Promise((resolve15) => {
+  return new Promise((resolve16) => {
     const child = spawn12("git", args, {
       cwd,
       stdio: ["ignore", "pipe", "pipe"],
@@ -49503,8 +49538,8 @@ async function runGit2(args, cwd) {
     child.stdout?.on("data", (d) => {
       stdout += d;
     });
-    child.on("error", () => resolve15({ stdout, code: 1 }));
-    child.on("close", (code) => resolve15({ stdout, code: code ?? 0 }));
+    child.on("error", () => resolve16({ stdout, code: 1 }));
+    child.on("close", (code) => resolve16({ stdout, code: code ?? 0 }));
   });
 }
 async function getChangedFiles(cwd) {
@@ -49662,7 +49697,7 @@ function buildSecurityCommand(opts) {
   };
 }
 function auditDepsCommand(opts, json) {
-  return new Promise((resolve15) => {
+  return new Promise((resolve16) => {
     const cwd = opts.cwd;
     const child = spawn13("pnpm", ["audit", "--json"], {
       cwd,
@@ -49679,7 +49714,7 @@ function auditDepsCommand(opts, json) {
       stderr += c.toString("utf8");
     });
     child.on("error", (err) => {
-      resolve15(
+      resolve16(
         securityResult(
           color89.red(`/security audit-deps: failed to spawn pnpm: ${err.message}`),
           {
@@ -49727,7 +49762,7 @@ function auditDepsCommand(opts, json) {
         if (stderr.trim()) summary = color89.dim(stderr.trim().slice(0, 200));
       }
       const exit = code === 0 ? color89.green("clean") : color89.yellow(`exit ${code}`);
-      resolve15(
+      resolve16(
         securityResult(
           `${summary}
   pnpm audit ${exit}`,
@@ -50563,7 +50598,6 @@ function buildSettingsCommand(opts) {
           if (!mode) return { message: `${color90.amber("Usage:")} /settings stream-fleet off|full (on = full)` };
           await persistAutonomySetting(persistDeps, (autonomy) => {
             autonomy.fleetChatVerbosity = mode;
-            autonomy.streamFleet = mode !== "off";
           });
           opts.fleetStreamController?.setMode(mode);
           const desc = mode === "full" ? "every subagent tool call and message in chat" : "subagent chat lines hidden (F2/F3 stay live)";
@@ -54199,7 +54233,7 @@ function buildProviderForId(args, providerId) {
 // src/fleet/host.ts
 import { randomUUID as randomUUID11 } from "node:crypto";
 import * as path68 from "node:path";
-import { ACP_AGENT_COMMANDS, findAgentDescriptor, makeACPSubagentRunner } from "@wrongstack/acp";
+import { ACP_AGENT_COMMANDS, defaultPermissionPolicy as defaultPermissionPolicy3, findAgentDescriptor, makeACPSubagentRunner } from "@wrongstack/acp";
 import {
   AdaptiveConcurrencyController,
   Agent as Agent2,
@@ -55288,7 +55322,7 @@ ${audienceMemory.map((text) => `- ${text}`).join("\n")}`
       const oldest = this.acpRunnerAccessOrder.shift();
       if (oldest) this.acpRunnerCache.delete(oldest);
     }
-    const p = makeACPSubagentRunner(cmd);
+    const p = makeACPSubagentRunner({ ...cmd, permissionPolicy: defaultPermissionPolicy3 });
     this.acpRunnerCache.set(subagentId, p);
     this.acpRunnerAccessOrder.push(subagentId);
     return p;
@@ -56309,14 +56343,9 @@ async function setupCodebaseIndexing(deps) {
 // src/wiring/controllers.ts
 function createFleetStreamController(initialMode = "off") {
   return {
-    enabled: initialMode !== "off",
     mode: initialMode,
-    setEnabled(enabled) {
-      this.setMode(enabled ? "full" : "off");
-    },
     setMode(mode) {
       this.mode = mode;
-      this.enabled = mode !== "off";
     }
   };
 }
@@ -57744,12 +57773,12 @@ function createSddHandlers(deps) {
     const sddApi = await import("@wrongstack/sdd");
     let worktrees;
     if (process.env["WRONGSTACK_SDD_WORKTREES"] !== "0") {
-      const inGit = await new Promise((resolve15) => {
+      const inGit = await new Promise((resolve16) => {
         let resolved = false;
         const settle = (v) => {
           if (resolved) return;
           resolved = true;
-          resolve15(v);
+          resolve16(v);
         };
         try {
           const child = spawn15("git", ["rev-parse", "--is-inside-work-tree"], {
@@ -58284,12 +58313,12 @@ async function main(argv) {
       requestInput: async (prompt) => {
         const { createInterface: createInterface2 } = await import("node:readline");
         const rl = createInterface2({ input: process.stdin, output: process.stdout });
-        return new Promise((resolve15) => {
+        return new Promise((resolve16) => {
           rl.question(`
 ${prompt}
 > `, (answer) => {
             rl.close();
-            resolve15(answer);
+            resolve16(answer);
           });
         });
       }
@@ -58382,8 +58411,8 @@ ${prompt}
     const projectName = path77.basename(projectRoot);
     let gitBranch;
     try {
-      const { execSync } = await import("node:child_process");
-      gitBranch = execSync("git rev-parse --abbrev-ref HEAD", {
+      const { execFileSync: execFileSync2 } = await import("node:child_process");
+      gitBranch = execFileSync2("git", ["rev-parse", "--abbrev-ref", "HEAD"], {
         cwd: projectRoot,
         timeout: 3e3,
         stdio: ["ignore", "pipe", "ignore"],
@@ -59532,7 +59561,7 @@ Restart WrongStack to load or unload plugin code in this session.`;
     onBeforeExit: async () => {
       const cwd2 = projectRoot;
       const statusResult = await new Promise(
-        (resolve15, reject) => {
+        (resolve16, reject) => {
           const child = spawn16("git", ["status", "--porcelain"], {
             cwd: cwd2,
             stdio: ["ignore", "pipe", "pipe"],
@@ -59544,7 +59573,7 @@ Restart WrongStack to load or unload plugin code in this session.`;
             stdout += d;
           });
           child.on("error", reject);
-          child.on("close", (code) => resolve15({ stdout, code: code ?? 0 }));
+          child.on("close", (code) => resolve16({ stdout, code: code ?? 0 }));
         }
       );
       if (statusResult.stdout.trim().length > 0) {