@wrongstack/cli 0.305.1 → 0.306.0

package/dist/{cli-main-6YE423OH.js → cli-main-DHNFGP3Z.js}

@@ -44,6 +44,27 @@ import {
   PLUGIN_AUDIT_ENTRIES,
   runPluginManagementCommand
 } from "./chunk-RK7E3IXT.js";
+import {
+  configureSimpleUiRuntimeContext,
+  detectProjectFacts,
+  makeConfirmAwaiter,
+  renderAgentsTemplate
+} from "./chunk-YKBRFSGL.js";
+import "./chunk-QD544J2B.js";
+import {
+  fmtTaskResultLine,
+  fmtTok,
+  patchConfig
+} from "./chunk-TYO2OVAD.js";
+import {
+  CLI_VERSION
+} from "./chunk-XJXDOF63.js";
+import {
+  buildWin32CmdShimInvocation
+} from "./chunk-U3SS4NRH.js";
+import {
+  checkForUpdate
+} from "./chunk-NUIHRGPY.js";
 import {
   createGracefulShutdown,
   loadCachedAcpRegistry,
@@ -59,30 +80,18 @@ import {
   runClaudeOAuthLogin,
   runCopilotOAuthLogin,
   validateFamily
-} from "./chunk-5KFLLTSQ.js";
-import {
-  runCodexOAuthLogin
-} from "./chunk-SSSJQVUY.js";
-import {
-  configureSimpleUiRuntimeContext,
-  detectProjectFacts,
-  makeConfirmAwaiter,
-  renderAgentsTemplate
-} from "./chunk-YKBRFSGL.js";
-import "./chunk-QD544J2B.js";
-import {
-  fmtTaskResultLine,
-  fmtTok,
-  patchConfig
-} from "./chunk-TYO2OVAD.js";
+} from "./chunk-WC3DK6BI.js";
 import {
   LOCAL_LLM_PRESETS,
   parseSpawnFlags
-} from "./chunk-2H47YMCV.js";
+} from "./chunk-5JW3XCRA.js";
 import {
   buildPickableProviders,
   visibleModelIds
 } from "./chunk-3IC4IEZC.js";
+import {
+  runCodexOAuthLogin
+} from "./chunk-SSSJQVUY.js";
 import {
   activeLabel,
   loadConfigProviders,
@@ -97,15 +106,6 @@ import {
 import {
   activeProfileConfigPath
 } from "./chunk-YMXXOOFN.js";
-import {
-  buildWin32CmdShimInvocation
-} from "./chunk-U3SS4NRH.js";
-import {
-  checkForUpdate
-} from "./chunk-NUIHRGPY.js";
-import {
-  CLI_VERSION
-} from "./chunk-XJXDOF63.js";
 import {
   __require
 } from "./chunk-7OCVIDC7.js";
@@ -8033,6 +8033,12 @@ function registerProviderUtilityTools(input) {
     fallbackProfileManager: input.fallbackProfileManager,
     defaultProvider: config.provider,
     defaultModel: config.model,
+    // Same live router the council gets below. Without it the `role` input
+    // was inert (the orchestrator's pickForTask path no-ops), and without the
+    // tracker no llm-tool call ever recorded provider health, so blocked
+    // entries were neither skipped nor reported for this tool's traffic.
+    modelRouter: createLiveModelRouter(input.getConfig),
+    statusTracker: input.statusTracker,
     wrapProviderCall: input.wrapProviderCall
   });
   registerOrOverride(input.toolRegistry, "llm", llmTool);
@@ -8362,27 +8368,40 @@ async function setupLifecycleAndPlugins(deps) {
 }
 
 // src/wiring/management-tools.ts
-import * as fs5 from "node:fs/promises";
 import {
   createFallbackManageTools,
   createPluginManagerTool
 } from "@wrongstack/core/tools";
+import { updateJsonObjectFile } from "@wrongstack/core/utils";
 function registerCliManagementTools({
   toolRegistry,
   configStore,
   profileConfigPath,
   stdinInteractive,
-  getHookRunner
+  getHookRunner,
+  getSwitchProviderAndModel
 }) {
   const fallbackManageTools = createFallbackManageTools({
     getConfig: () => configStore.get(),
+    // updateJsonObjectFile is the same atomic read-mutate-write helper
+    // mcp_control uses on this very file — the previous bare
+    // readFile→JSON.parse→writeFile raced it and could drop concurrent
+    // updates (and tore the file on a crash mid-write).
     updateConfig: async (mutate) => {
-      const raw = await fs5.readFile(profileConfigPath, "utf8").catch(() => "{}");
-      const parsed = JSON.parse(raw);
-      mutate(parsed);
-      await fs5.writeFile(profileConfigPath, JSON.stringify(parsed, null, 2), { mode: 384 });
-      configStore.update(parsed);
+      const next = await updateJsonObjectFile(profileConfigPath, (cfg) => {
+        mutate(cfg);
+      });
+      configStore.update(next);
     },
+    ...getSwitchProviderAndModel ? {
+      switchProviderAndModel: async (providerId, modelId) => {
+        const switchFn = getSwitchProviderAndModel();
+        if (!switchFn) {
+          return "the live model switch is not ready yet (still booting) \u2014 try again shortly";
+        }
+        return switchFn(providerId, modelId);
+      }
+    } : {},
     // Interactive key entry for REPL mode reads a line from stdin without echo.
     ...stdinInteractive ? {
       requestInput: async (prompt) => {
@@ -8739,14 +8758,14 @@ function setupProviderRuntime(deps) {
 }
 
 // src/wiring/provider-status.ts
-import * as fs6 from "node:fs/promises";
+import * as fs5 from "node:fs/promises";
 import { ProviderModelStatusTracker } from "@wrongstack/core/coordination";
 import { atomicWrite as atomicWrite2, withFileLock } from "@wrongstack/core/utils";
 async function setupProviderStatus(input) {
   const tracker = new ProviderModelStatusTracker({ events: input.events });
   const statusFile = input.paths.profileProviderStatus(input.paths.profileName);
   try {
-    const saved = JSON.parse(await fs6.readFile(statusFile, "utf8"));
+    const saved = JSON.parse(await fs5.readFile(statusFile, "utf8"));
     const restored = tracker.restoreSnapshot(saved);
     if (restored > 0) input.logger.info(`Restored ${restored} provider waiting-room entries`);
   } catch (error) {
@@ -8758,7 +8777,7 @@ async function setupProviderStatus(input) {
     tracker.sweepExpired();
     if (syncRunning) return;
     syncRunning = true;
-    void fs6.readFile(statusFile, "utf8").then((raw) => tracker.restoreSnapshot(JSON.parse(raw))).catch((error) => warnUnlessMissing(input.logger, "sync", error)).finally(() => {
+    void fs5.readFile(statusFile, "utf8").then((raw) => tracker.restoreSnapshot(JSON.parse(raw))).catch((error) => warnUnlessMissing(input.logger, "sync", error)).finally(() => {
       syncRunning = false;
     });
   }, 3e4);
@@ -8773,7 +8792,7 @@ async function setupProviderStatus(input) {
       await withFileLock(statusFile, async () => {
         let statuses = [];
         try {
-          const current = JSON.parse(await fs6.readFile(statusFile, "utf8"));
+          const current = JSON.parse(await fs5.readFile(statusFile, "utf8"));
           if (Array.isArray(current.statuses)) statuses = current.statuses;
         } catch (error) {
           if (error.code !== "ENOENT") throw error;
@@ -9814,7 +9833,7 @@ import {
   readJsonObjectFile,
   removeJsonPath,
   setJsonPath,
-  updateJsonObjectFile
+  updateJsonObjectFile as updateJsonObjectFile2
 } from "@wrongstack/core/utils";
 function parseMcpArgs(args) {
   const trimmed = args.trim();
@@ -9912,7 +9931,7 @@ async function runAdd(name, enable, configured, configPath, mcpRegistry, all) {
   }
   const existing = configured[name];
   const nextCfg = existing ? { ...preset, ...existing, enabled: enable } : { ...preset, enabled: enable };
-  await updateJsonObjectFile(configPath, (full) => {
+  await updateJsonObjectFile2(configPath, (full) => {
     const current = isMcpServerRecord(full.mcpServers) ? full.mcpServers : {};
     setJsonPath(full, ["mcpServers", name], { ...current[name], ...nextCfg });
   });
@@ -9951,7 +9970,7 @@ async function runRemove(name, configured, configPath, mcpRegistry) {
     );
   }
   if (typeof mcpRegistry.forget === "function") mcpRegistry.forget(name);
-  await updateJsonObjectFile(configPath, (full) => {
+  await updateJsonObjectFile2(configPath, (full) => {
     const current = isMcpServerRecord(full.mcpServers) ? full.mcpServers : configured;
     setJsonPath(full, ["mcpServers"], { ...current });
     removeJsonPath(full, ["mcpServers", name]);
@@ -9970,7 +9989,7 @@ async function runEnable(name, configured, configPath, mcpRegistry) {
       return `${color8.green("Enabled")} "${name}" and started.`;
     }
   }
-  await updateJsonObjectFile(configPath, (full) => {
+  await updateJsonObjectFile2(configPath, (full) => {
     const current = isMcpServerRecord(full.mcpServers) ? full.mcpServers : {};
     setJsonPath(full, ["mcpServers", name], { ...cfg, ...current[name], enabled: true });
   });
@@ -9998,7 +10017,7 @@ async function runDisable(name, configured, configPath, mcpRegistry) {
       })
     );
   }
-  await updateJsonObjectFile(configPath, (full) => {
+  await updateJsonObjectFile2(configPath, (full) => {
     const current = isMcpServerRecord(full.mcpServers) ? full.mcpServers : {};
     setJsonPath(full, ["mcpServers", name], { ...cfg, ...current[name], enabled: false });
   });
@@ -11342,7 +11361,7 @@ ${color13.dim("YOLO enabled; tool calls run without approval unless an explicit
 
 // src/slash-commands/brain.ts
 import { randomUUID as randomUUID5 } from "node:crypto";
-import { readFile as readFile7 } from "node:fs/promises";
+import { readFile as readFile6 } from "node:fs/promises";
 import { parseModelRef } from "@wrongstack/core/agent";
 import { BUILTIN_COUNCIL_PERSONA_IDS, BUILTIN_COUNCIL_PERSONAS } from "@wrongstack/core/execution";
 import { color as color14 } from "@wrongstack/core/utils";
@@ -11788,7 +11807,7 @@ function buildBrainCommand(opts) {
         const n = Math.max(1, Math.min(100, Number.parseInt(rest[0] ?? "15", 10) || 15));
         let raw;
         try {
-          raw = await readFile7(ledgerPath, "utf8");
+          raw = await readFile6(ledgerPath, "utf8");
         } catch {
           const msg3 = `No ledger entries yet (${ledgerPath}).`;
           opts.renderer.write(msg3);
@@ -12667,7 +12686,7 @@ function buildCompactCommand(opts) {
 }
 
 // src/slash-commands/context.ts
-import * as fs7 from "node:fs/promises";
+import * as fs6 from "node:fs/promises";
 import {
   formatContextWindowModeList,
   getContextWindowMode,
@@ -12981,6 +13000,7 @@ var SOURCE_LABELS = {
   contributor: "contributor",
   ledger: "completed-work ledger",
   glossary: "project jargon dictionary",
+  peers: "fleet peer awareness",
   nextsteps: "next-steps gate",
   other: "other (untagged)"
 };
@@ -13029,7 +13049,7 @@ async function persistContextConfig(opts, patch) {
   const configPath = activeProfileConfigPath(opts.paths, opts.configStore.get());
   let raw = "{}";
   try {
-    raw = await fs7.readFile(configPath, "utf8");
+    raw = await fs6.readFile(configPath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") {
       return `Could not read ${configPath}: ${err.message}`;
@@ -13434,7 +13454,7 @@ function listRoles() {
 }
 
 // src/slash-commands/design.ts
-import * as fs8 from "node:fs/promises";
+import * as fs7 from "node:fs/promises";
 import * as path19 from "node:path";
 import {
   applyTokenOverrides,
@@ -13594,8 +13614,8 @@ ${menu}` };
           return { message: e.message };
         }
         try {
-          await fs8.mkdir(path19.dirname(abs), { recursive: true });
-          await fs8.writeFile(abs, result.content);
+          await fs7.mkdir(path19.dirname(abs), { recursive: true });
+          await fs7.writeFile(abs, result.content);
         } catch (e) {
           return { message: `Failed to write ${result.path}: ${e.message}` };
         }
@@ -13762,7 +13782,7 @@ function buildStatsCommand(opts) {
 }
 
 // src/slash-commands/doctor.ts
-import * as fs9 from "node:fs/promises";
+import * as fs8 from "node:fs/promises";
 import * as path20 from "node:path";
 import { atomicWrite as atomicWrite4, color as color22, toErrorMessage as toErrorMessage10 } from "@wrongstack/core/utils";
 
@@ -14327,7 +14347,7 @@ function buildDoctorCommand(opts) {
     const base = path20.basename(file);
     const candidates = [`${base}.last`];
     try {
-      const siblings = await fs9.readdir(dir);
+      const siblings = await fs8.readdir(dir);
       candidates.push(
         ...siblings.filter((f) => f.startsWith(`${base}.`) && f.endsWith(".bak")).sort().reverse()
       );
@@ -14335,7 +14355,7 @@ function buildDoctorCommand(opts) {
     }
     for (const name of candidates) {
       try {
-        const raw = await fs9.readFile(path20.join(dir, name), "utf8");
+        const raw = await fs8.readFile(path20.join(dir, name), "utf8");
         JSON.parse(raw);
         return { name, raw };
       } catch {
@@ -14388,7 +14408,7 @@ function buildDoctorCommand(opts) {
       for (const target of targets) {
         let raw;
         try {
-          raw = await fs9.readFile(target.file, "utf8");
+          raw = await fs8.readFile(target.file, "utf8");
         } catch {
           if (!target.isProject) {
             lines.push(
@@ -14703,7 +14723,7 @@ function buildFKeyAliasCommands(opts) {
 }
 
 // src/slash-commands/fallback.ts
-import * as fs10 from "node:fs/promises";
+import * as fs9 from "node:fs/promises";
 import {
   normalizeModelRef,
   parseModelRef as parseModelRef2,
@@ -14747,7 +14767,7 @@ async function patchGlobalConfig(globalConfigPath, mutate) {
   let raw = "{}";
   let fileExists2 = true;
   try {
-    raw = await fs10.readFile(globalConfigPath, "utf8");
+    raw = await fs9.readFile(globalConfigPath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") throw err;
     fileExists2 = false;
@@ -16808,7 +16828,7 @@ ${color27.dim("(dry-run)")}`
 }
 
 // src/slash-commands/gitid.ts
-import * as fs11 from "node:fs/promises";
+import * as fs10 from "node:fs/promises";
 import { decryptConfigSecrets as decryptConfigSecrets2, encryptConfigSecrets as encryptConfigSecrets2, noOpVault as noOpVault3 } from "@wrongstack/core/security";
 import { ConfigError as ConfigError2 } from "@wrongstack/core/types";
 import {
@@ -16825,7 +16845,7 @@ async function patchGlobalConfig2(globalConfigPath, mutate) {
   let raw = "{}";
   let fileExists2 = true;
   try {
-    raw = await fs11.readFile(globalConfigPath, "utf8");
+    raw = await fs10.readFile(globalConfigPath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") throw err;
     fileExists2 = false;
@@ -17282,7 +17302,7 @@ function buildHelpCommand(opts) {
 }
 
 // src/slash-commands/init.ts
-import * as fs12 from "node:fs/promises";
+import * as fs11 from "node:fs/promises";
 import * as path22 from "node:path";
 import { color as color30 } from "@wrongstack/core/utils";
 function buildInitCommand(opts) {
@@ -17297,19 +17317,19 @@ function buildInitCommand(opts) {
       const isFirstInit = !await fileExists(file);
       const detected = await detectProjectFacts(root);
       const body = renderAgentsTemplate(detected);
-      await fs12.mkdir(dir, { recursive: true });
+      await fs11.mkdir(dir, { recursive: true });
       let backedUp = false;
       if (!isFirstInit) {
         try {
-          await fs12.copyFile(file, `${file}.bak`);
+          await fs11.copyFile(file, `${file}.bak`);
           backedUp = true;
         } catch {
         }
       }
-      await fs12.writeFile(file, body, "utf8");
+      await fs11.writeFile(file, body, "utf8");
       let nodePkg = false;
       try {
-        await fs12.access(path22.join(root, "package.json"));
+        await fs11.access(path22.join(root, "package.json"));
         nodePkg = true;
       } catch {
       }
@@ -17347,7 +17367,7 @@ function buildInitCommand(opts) {
 }
 async function fileExists(filePath) {
   try {
-    await fs12.access(filePath);
+    await fs11.access(filePath);
     return true;
   } catch {
     return false;
@@ -17466,6 +17486,7 @@ import {
   updateTask,
   updateTaskAssignment
 } from "@wrongstack/kanban";
+import { preflightManagedTransition } from "@wrongstack/kanban/manager/lifecycle";
 import { TaskGraphStore } from "@wrongstack/sdd";
 
 // src/slash-commands/kanban-agent-helpers.ts
@@ -18237,9 +18258,9 @@ async function handleTaskSubcommand(opts, projectRoot, args, showHelp) {
       try {
         const result = await transitionTask(projectRoot, boardId, taskId, {
           to,
-          actor: "kanban-slash",
-          action: `Moved to ${resolvedColumnId} via /kanban task move`,
-          comment: moveNote ? `${moveNote} (move \u2192 ${resolvedColumnId})` : `/kanban task move ${resolvedColumnId} (was ${taskId} on board ${boardId})`,
+          actor: "kanban-slash:move",
+          action: moveNote ? `${moveNote} (move \u2192 ${resolvedColumnId})` : `Moved to ${resolvedColumnId} via /kanban task move`,
+          comment: moveNote ? `${moveNote} (move \u2192 ${resolvedColumnId})` : `Moved to ${resolvedColumnId} via /kanban task move (board=${boardId}, task=${taskId})`,
           // Reviewers require a non-empty attachment URL to advance into review.
           // Forward the caller's `--attachment`; if missing, the move must fail at
           // `validateReviewEvidence` so the audit ledger never records a fabricated
@@ -18273,7 +18294,7 @@ async function handleTaskSubcommand(opts, projectRoot, args, showHelp) {
         )
       };
     }
-    const { attachment, note, positional, warnings } = parseTaskEvidenceFlags(rest.slice(1));
+    const { attachment, note, tickChecks, positional, warnings } = parseTaskEvidenceFlags(rest.slice(1));
     if (positional.length > 0) {
       return {
         message: color32.red(
@@ -18302,73 +18323,36 @@ async function handleTaskSubcommand(opts, projectRoot, args, showHelp) {
           )
         };
       }
-      const preflightIssues = [];
-      const needsRunningEvidence = path32.includes("running");
-      const needsReviewEvidence = path32.includes("review");
-      const needsDoneEvidence = path32.includes("done");
       const currentTask = board.tasks.find((t) => t.id === taskId);
       if (!currentTask) {
         return { message: color32.red("Task not found") };
       }
-      if (needsRunningEvidence) {
-        const assignment = currentTask.assignment;
-        const hasLease = assignment?.status === "running" && [
-          assignment.leaseId,
-          assignment.claimedAt,
-          assignment.heartbeatAt,
-          assignment.leaseExpiresAt
-        ].every((value) => typeof value === "string" && value.trim().length > 0);
-        if (!hasLease) {
-          preflightIssues.push(
-            "The /kanban task done path needs the card to already be Running with lease metadata; move it into Running first via /kanban task assign or /kanban task dispatch."
-          );
-        }
-      }
-      if (needsReviewEvidence && !attachment) {
-        preflightIssues.push(
-          'Review evidence requires --attachment <url>; re-run `/kanban task done <boardId> <taskId> --attachment https://example.test/review --note "..."`.'
-        );
-      } else if (needsReviewEvidence && !currentTask.assignment?.lastResult) {
-        preflightIssues.push(
-          "Review evidence requires the card to carry an assignment.lastResult; dispatch the worker through the agentic supervisor so it records implementation output."
-        );
+      const preflightIssues = [];
+      if (!note || !note.trim()) {
+        return {
+          message: color32.red(
+            `Refusing /kanban task ${currentStage ?? "unknown"} \u2192 done without a reviewer note. Re-run with --note "<what proves the work is ready>".`
+          )
+        };
       }
-      if (needsDoneEvidence) {
-        if (!attachment) {
-          preflightIssues.push(
-            'Done requires --attachment <url>; re-run with --attachment https://example.test/review --note "verified".'
-          );
-        }
-        const criteria = currentTask.successCriteria ?? [];
-        if (criteria.length === 0 || criteria.some((check) => check.status !== "passed")) {
-          preflightIssues.push(
-            "Done requires every acceptance criterion to be explicitly passed; update them on the card before re-running."
-          );
-        }
-        if (currentTask.atomic && currentTask.verificationReport?.verdict !== "passed") {
-          preflightIssues.push(
-            "Atomic tasks require a passed verification report; run `kanban.verify_completion` on the task before `/kanban task done`."
-          );
-        }
-        if (currentTask.atomic && currentTask.childTaskIds && currentTask.childTaskIds.length > 0) {
-          const childTasks = board.tasks.filter(
-            (entry) => currentTask.childTaskIds.includes(entry.id)
-          );
-          const missingChildren = currentTask.childTaskIds.filter(
-            (childId) => !childTasks.some((entry) => entry.id === childId)
-          );
-          if (missingChildren.length > 0) {
-            preflightIssues.push(
-              `Atomic parent references unresolved children (${missingChildren.join(", ")}); resolve them via the kanban tool before retrying.`
-            );
-          }
-          const incompleteChildren = childTasks.filter((child) => child.status !== "completed");
-          if (incompleteChildren.length > 0) {
-            const ids = incompleteChildren.map((child) => child.id).join(", ");
-            preflightIssues.push(
-              `Atomic parent's children must be completed before the parent can advance to Done (pending: ${ids}).`
-            );
-          }
+      const noteText = note.trim();
+      const sharedAttachment = attachment ? {
+        url: attachment,
+        type: "url",
+        title: "Reviewer evidence (kanban-slash:done)"
+      } : void 0;
+      for (const to of path32) {
+        const transitionInput = {
+          to,
+          actor: "kanban-slash:done",
+          action: `${noteText} (${to})`,
+          comment: `${noteText} (${to})`,
+          ...sharedAttachment ? { attachment: sharedAttachment } : {},
+          ...tickChecks ? { tickChecks } : {}
+        };
+        const issues = preflightManagedTransition(board, currentTask, transitionInput);
+        for (const issue of issues) {
+          preflightIssues.push(issue.message);
         }
       }
       if (preflightIssues.length > 0) {
@@ -18383,16 +18367,17 @@ async function handleTaskSubcommand(opts, projectRoot, args, showHelp) {
         for (const to of path32) {
           await transitionTask(projectRoot, boardId, taskId, {
             to,
-            actor: "kanban-slash",
-            action: note ?? `Marked done via /kanban task done (${to})`,
-            comment: note ?? `Marked done via /kanban task done (${to})`,
+            actor: "kanban-slash:done",
+            action: noteText ? `${noteText} (${to})` : "",
+            comment: noteText ? `${noteText} (${to})` : "",
             ...attachment ? {
               attachment: {
                 url: attachment,
                 type: "url",
-                title: "Reviewer evidence (kanban-slash)"
+                title: "Reviewer evidence (kanban-slash:done)"
               }
-            } : {}
+            } : {},
+            ...tickChecks.length > 0 ? { tickChecks } : {}
           });
         }
         return { message: color32.green("\u2705 Task marked completed.") };
@@ -18815,14 +18800,17 @@ function resolveColumnReference(board, requested) {
 function parseTaskEvidenceFlags(tokens) {
   let attachment;
   let note;
+  const tickChecks = [];
   const positional = [];
   const warnings = [];
   const ATTACHMENT_KEYS = /* @__PURE__ */ new Set(["--attachment", "--evidence", "--link"]);
   const NOTE_KEYS = /* @__PURE__ */ new Set(["--note", "--comment", "--action"]);
+  const TICK_CHECK_KEYS = /* @__PURE__ */ new Set(["--tick-check", "--tick-checks"]);
+  const VALID_TICK_STATUSES = /* @__PURE__ */ new Set(["passed", "failed", "skipped"]);
   for (let i = 0; i < tokens.length; i++) {
     const token = tokens[i];
     const eq = token.indexOf("=");
-    const inline = eq > 0 && (ATTACHMENT_KEYS.has(token.slice(0, eq)) || NOTE_KEYS.has(token.slice(0, eq)));
+    const inline = eq > 0 && (ATTACHMENT_KEYS.has(token.slice(0, eq)) || NOTE_KEYS.has(token.slice(0, eq)) || TICK_CHECK_KEYS.has(token.slice(0, eq)));
     const key = inline ? token.slice(0, eq) : token;
     if (ATTACHMENT_KEYS.has(key)) {
       const value = inline ? token.slice(eq + 1) : tokens[i + 1];
@@ -18840,6 +18828,32 @@ function parseTaskEvidenceFlags(tokens) {
       attachment = value;
       continue;
     }
+    if (TICK_CHECK_KEYS.has(key)) {
+      const raw = inline ? token.slice(eq + 1) : tokens[i + 1];
+      if (!raw?.trim()) {
+        warnings.push(`${key} expects <checkId>=<status> but none was provided`);
+        i = inline ? i : i + 1;
+        continue;
+      }
+      if (!inline && raw.startsWith("-")) {
+        warnings.push(`${key} expects <checkId>=<status> but none was provided`);
+        i++;
+        continue;
+      }
+      const sep2 = raw.lastIndexOf("=");
+      const checkId = sep2 >= 0 ? raw.slice(0, sep2).trim() : "";
+      const status = sep2 >= 0 ? raw.slice(sep2 + 1).trim() : "";
+      if (!checkId || !status || !VALID_TICK_STATUSES.has(status)) {
+        warnings.push(
+          `${key} expects <checkId>=<status> where status is passed|failed|skipped (got "${raw}")`
+        );
+        i = inline ? i : i + 1;
+        continue;
+      }
+      tickChecks.push({ checkId, checkStatus: status });
+      i = inline ? i : i + 1;
+      continue;
+    }
     if (NOTE_KEYS.has(key)) {
       const inlineValue = inline ? token.slice(eq + 1) : void 0;
       if (inlineValue !== void 0) {
@@ -18867,7 +18881,7 @@ function parseTaskEvidenceFlags(tokens) {
     }
     positional.push(token);
   }
-  return { attachment, note, positional, warnings };
+  return { attachment, note, tickChecks, positional, warnings };
 }
 
 // src/slash-commands/mailbox.ts
@@ -19395,7 +19409,7 @@ function buildMailboxDemoCommand(opts) {
 
 // src/slash-commands/mailbox-serve.ts
 import { spawn as spawn6 } from "node:child_process";
-import * as fs13 from "node:fs/promises";
+import * as fs12 from "node:fs/promises";
 import * as os2 from "node:os";
 import * as path23 from "node:path";
 import { resolveProjectDir as resolveProjectDir5 } from "@wrongstack/core/coordination";
@@ -19470,7 +19484,7 @@ function buildMailboxServeCommand(opts) {
       });
       child.unref();
       try {
-        await fs13.writeFile(pidFile, String(child.pid ?? ""), { mode: 384 });
+        await fs12.writeFile(pidFile, String(child.pid ?? ""), { mode: 384 });
       } catch {
       }
       const head = [];
@@ -21723,7 +21737,7 @@ ${targetMode.description}`
 }
 
 // src/slash-commands/modelcaps.ts
-import * as fs14 from "node:fs/promises";
+import * as fs13 from "node:fs/promises";
 import { hasProviderCredential } from "@wrongstack/core/models";
 import { color as color36 } from "@wrongstack/core/utils";
 function fmtTokens(n) {
@@ -21796,7 +21810,7 @@ function buildModelCapsCommand(opts) {
       }
       let providers;
       try {
-        const raw = await fs14.readFile(cachePath, "utf8");
+        const raw = await fs13.readFile(cachePath, "utf8");
         const parsed = JSON.parse(raw);
         const payload = parsed.payload ?? parsed;
         providers = Object.entries(payload).map(([id, p]) => ({
@@ -21873,7 +21887,7 @@ function buildModelCapsCommand(opts) {
 }
 
 // src/slash-commands/models.ts
-import * as fs15 from "node:fs/promises";
+import * as fs14 from "node:fs/promises";
 import { decryptConfigSecrets as decryptConfigSecrets3, encryptConfigSecrets as encryptConfigSecrets3, noOpVault as noOpVault4 } from "@wrongstack/core/security";
 import {
   ConfigError as ConfigError4,
@@ -21885,7 +21899,7 @@ async function patchProfileConfig(mutate, profileConfigPath) {
   let raw = "{}";
   let fileExists2 = true;
   try {
-    raw = await fs15.readFile(targetPath, "utf8");
+    raw = await fs14.readFile(targetPath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") throw err;
     fileExists2 = false;
@@ -24781,7 +24795,7 @@ async function killSession(sessionId, confirm) {
 }
 
 // src/slash-commands/setmodel.ts
-import * as fs16 from "node:fs/promises";
+import * as fs15 from "node:fs/promises";
 import { fallbackProfileChain, parseModelRef as parseModelRef3 } from "@wrongstack/core/agent";
 import { AGENT_CATALOG as AGENT_CATALOG2, AGENTS_BY_PHASE as AGENTS_BY_PHASE3 } from "@wrongstack/core/agent-catalog";
 import {
@@ -24893,7 +24907,7 @@ async function patchProfileConfig2(mutate, profileConfigPath) {
   let raw = "{}";
   let fileExists2 = true;
   try {
-    raw = await fs16.readFile(targetPath, "utf8");
+    raw = await fs15.readFile(targetPath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") throw err;
     fileExists2 = false;
@@ -25517,7 +25531,7 @@ function parseSuggestions(raw) {
   if (/^none\b/i.test(trimmed) || /no (?:pending actions|further steps)/i.test(trimmed)) {
     return [];
   }
-  const { texts } = parseNextSteps(raw, false, false);
+  const { texts } = parseNextSteps(raw, false);
   if (texts.length > 0) return texts;
   return raw.split("\n").map((l) => l.trim()).filter((l) => l.length > 10 && !l.startsWith("#") && !l.startsWith("```")).slice(0, 5);
 }
@@ -26306,7 +26320,7 @@ function buildMouseCommand(_opts) {
 
 // src/slash-commands/project.ts
 import { spawn as spawn7 } from "node:child_process";
-import * as fs17 from "node:fs/promises";
+import * as fs16 from "node:fs/promises";
 import { createRequire } from "node:module";
 import * as path26 from "node:path";
 import {
@@ -26520,11 +26534,11 @@ async function listProjectsCommand(opts, ctx) {
 async function addProjectCommand(opts, ctx, targetPath, displayName) {
   const resolved = path26.resolve(ctx?.projectRoot ?? ctx?.cwd ?? process.cwd(), targetPath);
   try {
-    await fs17.access(resolved);
+    await fs16.access(resolved);
   } catch {
     return { message: color48.red(`Directory not found: ${resolved}`) };
   }
-  const stat5 = await fs17.stat(resolved);
+  const stat5 = await fs16.stat(resolved);
   if (!stat5.isDirectory()) {
     return { message: color48.red(`Not a directory: ${resolved}`) };
   }
@@ -26590,11 +26604,11 @@ async function removeProjectCommand(opts, _ctx, slugOrName) {
 async function switchProjectCommand(opts, ctx, target, displayName) {
   const resolved = path26.resolve(ctx?.projectRoot ?? ctx?.cwd ?? process.cwd(), target);
   try {
-    await fs17.access(resolved);
+    await fs16.access(resolved);
   } catch {
     return { message: color48.red(`Directory not found: ${resolved}`) };
   }
-  const stat5 = await fs17.stat(resolved);
+  const stat5 = await fs16.stat(resolved);
   if (!stat5.isDirectory()) {
     return { message: color48.red(`Not a directory: ${resolved}`) };
   }
@@ -26604,7 +26618,7 @@ async function switchProjectCommand(opts, ctx, target, displayName) {
     const pkgPath = req.resolve("@wrongstack/cli/package.json");
     const pkgDir = path26.dirname(pkgPath);
     cliPath = path26.join(pkgDir, "dist", "index.js");
-    await fs17.access(cliPath);
+    await fs16.access(cliPath);
   } catch {
     cliPath = process.argv[1] ?? "";
     if (!cliPath) {
@@ -26749,7 +26763,7 @@ async function spawnInProject(opts, _ctx, root, projectName) {
     const pkgPath = req.resolve("@wrongstack/cli/package.json");
     const pkgDir = path26.dirname(pkgPath);
     cliPath = path26.join(pkgDir, "dist", "index.js");
-    await fs17.access(cliPath);
+    await fs16.access(cliPath);
   } catch {
     cliPath = process.argv[1] ?? "";
     if (!cliPath) {
@@ -26804,7 +26818,7 @@ async function handleNewSession(_opts, _ctx) {
     const pkgPath = req.resolve("@wrongstack/cli/package.json");
     const pkgDir = path26.dirname(pkgPath);
     cliPath = path26.join(pkgDir, "dist", "index.js");
-    await fs17.access(cliPath);
+    await fs16.access(cliPath);
   } catch {
     cliPath = process.argv[1] ?? "";
     if (!cliPath) {
@@ -26967,7 +26981,9 @@ function buildReviewCommand(opts) {
           maxFiles: limit,
           autoFix: "off",
           cascadeOn: "off",
-          maxCascadeDepth: 0
+          maxCascadeDepth: 0,
+          fallbackModels: [],
+          fallbackProfile: void 0
         },
         cwd,
         files: filesWithContent
@@ -29010,21 +29026,21 @@ ${formatTaskProgress(file.tasks)}`;
 }
 
 // src/slash-commands/techstack.ts
-import * as fs18 from "node:fs/promises";
+import * as fs17 from "node:fs/promises";
 import * as path28 from "node:path";
 import { color as color52, toErrorMessage as toErrorMessage26 } from "@wrongstack/core/utils";
 async function discoverPackageFiles(projectRoot) {
   const files = [];
   const rootPkg = path28.join(projectRoot, "package.json");
   try {
-    await fs18.access(rootPkg);
+    await fs17.access(rootPkg);
     files.push(rootPkg);
   } catch {
   }
   const workspaceFile = path28.join(projectRoot, "pnpm-workspace.yaml");
   try {
-    await fs18.access(workspaceFile);
-    const content = await fs18.readFile(workspaceFile, "utf8");
+    await fs17.access(workspaceFile);
+    const content = await fs17.readFile(workspaceFile, "utf8");
     const globMatch = /packages?:\s*\[([^\]]+)\]/s.exec(content);
     const rawGlobs = globMatch?.[1];
     if (!rawGlobs) return files;
@@ -29033,12 +29049,12 @@ async function discoverPackageFiles(projectRoot) {
       const dirPrefix = g.replace(/\/?\*$/, "").replace(/\/\*$/, "");
       const dir = path28.join(projectRoot, dirPrefix);
       try {
-        const entries = await fs18.readdir(dir, { withFileTypes: true });
+        const entries = await fs17.readdir(dir, { withFileTypes: true });
         for (const e of entries) {
           if (!e.isDirectory()) continue;
           const subPkg = path28.join(dir, e.name, "package.json");
           try {
-            await fs18.access(subPkg);
+            await fs17.access(subPkg);
             files.push(subPkg);
           } catch {
           }
@@ -30350,7 +30366,7 @@ ${lines.join("\n")}${extra}
 }
 
 // src/slash-commands/tuneup.ts
-import * as fs19 from "node:fs/promises";
+import * as fs18 from "node:fs/promises";
 import * as os3 from "node:os";
 import * as path29 from "node:path";
 import { atomicWrite as atomicWrite10, color as color57 } from "@wrongstack/core/utils";
@@ -30960,7 +30976,7 @@ async function gatherMemoryFiles(opts) {
   const out = [];
   for (const c of candidates) {
     try {
-      const content = await fs19.readFile(c.file, "utf8");
+      const content = await fs18.readFile(c.file, "utf8");
       out.push({ label: c.label, path: c.file, content, committed: c.committed });
     } catch {
     }
@@ -30978,7 +30994,7 @@ async function gatherTrust(opts) {
   const file = opts.paths?.projectTrust;
   if (!file) return void 0;
   try {
-    const raw = await fs19.readFile(file, "utf8");
+    const raw = await fs18.readFile(file, "utf8");
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed === "object") return parsed;
   } catch {
@@ -30989,7 +31005,7 @@ async function gatherConfigIssues(opts) {
   if (!opts.paths) return 0;
   const file = activeProfileConfigPath(opts.paths, opts.configStore.get());
   try {
-    const raw = await fs19.readFile(file, "utf8");
+    const raw = await fs18.readFile(file, "utf8");
     const parsed = JSON.parse(raw);
     return diagnoseConfig(parsed).findings.length;
   } catch {
@@ -31007,14 +31023,14 @@ async function gatherSessionBytes(opts) {
 }
 async function dirSize(dir) {
   let total = 0;
-  const entries = await fs19.readdir(dir, { withFileTypes: true });
+  const entries = await fs18.readdir(dir, { withFileTypes: true });
   for (const e of entries) {
     const full = path29.join(dir, e.name);
     if (e.isDirectory()) {
       total += await dirSize(full);
     } else if (e.isFile()) {
       try {
-        total += (await fs19.stat(full)).size;
+        total += (await fs18.stat(full)).size;
       } catch {
       }
     }
@@ -31027,7 +31043,7 @@ async function applyActions(actions, opts) {
   const file = activeProfileConfigPath(opts.paths, opts.configStore.get());
   let raw = "{}";
   try {
-    raw = await fs19.readFile(file, "utf8");
+    raw = await fs18.readFile(file, "utf8");
   } catch {
   }
   let parsed;
@@ -31183,7 +31199,7 @@ function summaryLine(findings, fixable, handoffs, power) {
 }
 
 // src/slash-commands/working-dir.ts
-import * as fs20 from "node:fs/promises";
+import * as fs19 from "node:fs/promises";
 import * as path30 from "node:path";
 import { color as color58, toErrorMessage as toErrorMessage29 } from "@wrongstack/core/utils";
 function buildWorkingDirCommand(_opts) {
@@ -31230,7 +31246,7 @@ function buildWorkingDirCommand(_opts) {
         };
       }
       try {
-        const stat5 = await fs20.stat(resolved);
+        const stat5 = await fs19.stat(resolved);
         if (!stat5.isDirectory()) {
           return { message: color58.red(`Not a directory: ${resolved}`) };
         }
@@ -31585,12 +31601,14 @@ async function runInteractive(cliCtx) {
   });
   const stdinInteractive = process.stdin.isTTY;
   const hookRunnerRef = { current: null };
+  const switchProviderAndModelRef = { current: null };
   registerCliManagementTools({
     toolRegistry,
     configStore,
     profileConfigPath,
     stdinInteractive,
-    getHookRunner: () => hookRunnerRef.current
+    getHookRunner: () => hookRunnerRef.current,
+    getSwitchProviderAndModel: () => switchProviderAndModelRef.current
   });
   const { metricsSink, healthRegistry, metricsStatus } = (() => {
     const ms = setupMetrics({
@@ -31835,6 +31853,7 @@ async function runInteractive(cliCtx) {
     buildProviderForIdRuntime: buildProviderForId,
     statusTracker
   });
+  switchProviderAndModelRef.current = switchProviderAndModel;
   await adoptResumedProvider({
     resumedProvider: sessResult.resumedProvider,
     resumedModel: sessResult.resumedModel,
@@ -32223,7 +32242,7 @@ async function runInteractive(cliCtx) {
     onEvent: evOn
   });
   const savedProviderCfg = config.providers?.[config.provider];
-  const { execute } = await import("./execution-QYFWDD3Y.js");
+  const { execute } = await import("./execution-TTE7R5UY.js");
   const stopHeapWatchdog = startSharedHeapWatchdog({
     collectStats: () => {
       const hqQueue = hqPublisherRef.current?.getQueueStats();
@@ -32461,4 +32480,4 @@ export {
   CLI_VERSION,
   runInteractive
 };
-//# sourceMappingURL=cli-main-6YE423OH.js.map
+//# sourceMappingURL=cli-main-DHNFGP3Z.js.map