@wrongstack/cli 0.305.1 → 0.306.2

package/dist/{cli-main-6YE423OH.js → cli-main-3PUWFKSL.js}

@@ -25,8 +25,9 @@ import {
   persistConfigSetting,
   persistTelegramConfig,
   removeSuggestions,
+  runGit,
   setSuggestions
-} from "./chunk-V3XH6XBJ.js";
+} from "./chunk-T6YAVFXA.js";
 import {
   startCliHqConnection
 } from "./chunk-FKWHSFX4.js";
@@ -44,6 +45,27 @@ import {
   PLUGIN_AUDIT_ENTRIES,
   runPluginManagementCommand
 } from "./chunk-RK7E3IXT.js";
+import {
+  configureSimpleUiRuntimeContext,
+  detectProjectFacts,
+  makeConfirmAwaiter,
+  renderAgentsTemplate
+} from "./chunk-YKBRFSGL.js";
+import "./chunk-QD544J2B.js";
+import {
+  fmtTaskResultLine,
+  fmtTok,
+  patchConfig
+} from "./chunk-TYO2OVAD.js";
+import {
+  CLI_VERSION
+} from "./chunk-XJXDOF63.js";
+import {
+  buildWin32CmdShimInvocation
+} from "./chunk-U3SS4NRH.js";
+import {
+  checkForUpdate
+} from "./chunk-NUIHRGPY.js";
 import {
   createGracefulShutdown,
   loadCachedAcpRegistry,
@@ -59,30 +81,18 @@ import {
   runClaudeOAuthLogin,
   runCopilotOAuthLogin,
   validateFamily
-} from "./chunk-5KFLLTSQ.js";
-import {
-  runCodexOAuthLogin
-} from "./chunk-SSSJQVUY.js";
-import {
-  configureSimpleUiRuntimeContext,
-  detectProjectFacts,
-  makeConfirmAwaiter,
-  renderAgentsTemplate
-} from "./chunk-YKBRFSGL.js";
-import "./chunk-QD544J2B.js";
-import {
-  fmtTaskResultLine,
-  fmtTok,
-  patchConfig
-} from "./chunk-TYO2OVAD.js";
+} from "./chunk-HITHEXE3.js";
 import {
   LOCAL_LLM_PRESETS,
   parseSpawnFlags
-} from "./chunk-2H47YMCV.js";
+} from "./chunk-KXN5HZDL.js";
 import {
   buildPickableProviders,
   visibleModelIds
-} from "./chunk-3IC4IEZC.js";
+} from "./chunk-VUVOMXWP.js";
+import {
+  runCodexOAuthLogin
+} from "./chunk-SSSJQVUY.js";
 import {
   activeLabel,
   loadConfigProviders,
@@ -97,15 +107,6 @@ import {
 import {
   activeProfileConfigPath
 } from "./chunk-YMXXOOFN.js";
-import {
-  buildWin32CmdShimInvocation
-} from "./chunk-U3SS4NRH.js";
-import {
-  checkForUpdate
-} from "./chunk-NUIHRGPY.js";
-import {
-  CLI_VERSION
-} from "./chunk-XJXDOF63.js";
 import {
   __require
 } from "./chunk-7OCVIDC7.js";
@@ -8033,6 +8034,12 @@ function registerProviderUtilityTools(input) {
     fallbackProfileManager: input.fallbackProfileManager,
     defaultProvider: config.provider,
     defaultModel: config.model,
+    // Same live router the council gets below. Without it the `role` input
+    // was inert (the orchestrator's pickForTask path no-ops), and without the
+    // tracker no llm-tool call ever recorded provider health, so blocked
+    // entries were neither skipped nor reported for this tool's traffic.
+    modelRouter: createLiveModelRouter(input.getConfig),
+    statusTracker: input.statusTracker,
     wrapProviderCall: input.wrapProviderCall
   });
   registerOrOverride(input.toolRegistry, "llm", llmTool);
@@ -8362,27 +8369,40 @@ async function setupLifecycleAndPlugins(deps) {
 }
 
 // src/wiring/management-tools.ts
-import * as fs5 from "node:fs/promises";
 import {
   createFallbackManageTools,
   createPluginManagerTool
 } from "@wrongstack/core/tools";
+import { updateJsonObjectFile } from "@wrongstack/core/utils";
 function registerCliManagementTools({
   toolRegistry,
   configStore,
   profileConfigPath,
   stdinInteractive,
-  getHookRunner
+  getHookRunner,
+  getSwitchProviderAndModel
 }) {
   const fallbackManageTools = createFallbackManageTools({
     getConfig: () => configStore.get(),
+    // updateJsonObjectFile is the same atomic read-mutate-write helper
+    // mcp_control uses on this very file — the previous bare
+    // readFile→JSON.parse→writeFile raced it and could drop concurrent
+    // updates (and tore the file on a crash mid-write).
     updateConfig: async (mutate) => {
-      const raw = await fs5.readFile(profileConfigPath, "utf8").catch(() => "{}");
-      const parsed = JSON.parse(raw);
-      mutate(parsed);
-      await fs5.writeFile(profileConfigPath, JSON.stringify(parsed, null, 2), { mode: 384 });
-      configStore.update(parsed);
+      const next = await updateJsonObjectFile(profileConfigPath, (cfg) => {
+        mutate(cfg);
+      });
+      configStore.update(next);
     },
+    ...getSwitchProviderAndModel ? {
+      switchProviderAndModel: async (providerId, modelId) => {
+        const switchFn = getSwitchProviderAndModel();
+        if (!switchFn) {
+          return "the live model switch is not ready yet (still booting) \u2014 try again shortly";
+        }
+        return switchFn(providerId, modelId);
+      }
+    } : {},
     // Interactive key entry for REPL mode reads a line from stdin without echo.
     ...stdinInteractive ? {
       requestInput: async (prompt) => {
@@ -8739,14 +8759,14 @@ function setupProviderRuntime(deps) {
 }
 
 // src/wiring/provider-status.ts
-import * as fs6 from "node:fs/promises";
+import * as fs5 from "node:fs/promises";
 import { ProviderModelStatusTracker } from "@wrongstack/core/coordination";
 import { atomicWrite as atomicWrite2, withFileLock } from "@wrongstack/core/utils";
 async function setupProviderStatus(input) {
   const tracker = new ProviderModelStatusTracker({ events: input.events });
   const statusFile = input.paths.profileProviderStatus(input.paths.profileName);
   try {
-    const saved = JSON.parse(await fs6.readFile(statusFile, "utf8"));
+    const saved = JSON.parse(await fs5.readFile(statusFile, "utf8"));
     const restored = tracker.restoreSnapshot(saved);
     if (restored > 0) input.logger.info(`Restored ${restored} provider waiting-room entries`);
   } catch (error) {
@@ -8758,7 +8778,7 @@ async function setupProviderStatus(input) {
     tracker.sweepExpired();
     if (syncRunning) return;
     syncRunning = true;
-    void fs6.readFile(statusFile, "utf8").then((raw) => tracker.restoreSnapshot(JSON.parse(raw))).catch((error) => warnUnlessMissing(input.logger, "sync", error)).finally(() => {
+    void fs5.readFile(statusFile, "utf8").then((raw) => tracker.restoreSnapshot(JSON.parse(raw))).catch((error) => warnUnlessMissing(input.logger, "sync", error)).finally(() => {
       syncRunning = false;
     });
   }, 3e4);
@@ -8773,7 +8793,7 @@ async function setupProviderStatus(input) {
       await withFileLock(statusFile, async () => {
         let statuses = [];
         try {
-          const current = JSON.parse(await fs6.readFile(statusFile, "utf8"));
+          const current = JSON.parse(await fs5.readFile(statusFile, "utf8"));
           if (Array.isArray(current.statuses)) statuses = current.statuses;
         } catch (error) {
           if (error.code !== "ENOENT") throw error;
@@ -9814,7 +9834,7 @@ import {
   readJsonObjectFile,
   removeJsonPath,
   setJsonPath,
-  updateJsonObjectFile
+  updateJsonObjectFile as updateJsonObjectFile2
 } from "@wrongstack/core/utils";
 function parseMcpArgs(args) {
   const trimmed = args.trim();
@@ -9912,7 +9932,7 @@ async function runAdd(name, enable, configured, configPath, mcpRegistry, all) {
   }
   const existing = configured[name];
   const nextCfg = existing ? { ...preset, ...existing, enabled: enable } : { ...preset, enabled: enable };
-  await updateJsonObjectFile(configPath, (full) => {
+  await updateJsonObjectFile2(configPath, (full) => {
     const current = isMcpServerRecord(full.mcpServers) ? full.mcpServers : {};
     setJsonPath(full, ["mcpServers", name], { ...current[name], ...nextCfg });
   });
@@ -9951,7 +9971,7 @@ async function runRemove(name, configured, configPath, mcpRegistry) {
     );
   }
   if (typeof mcpRegistry.forget === "function") mcpRegistry.forget(name);
-  await updateJsonObjectFile(configPath, (full) => {
+  await updateJsonObjectFile2(configPath, (full) => {
     const current = isMcpServerRecord(full.mcpServers) ? full.mcpServers : configured;
     setJsonPath(full, ["mcpServers"], { ...current });
     removeJsonPath(full, ["mcpServers", name]);
@@ -9970,7 +9990,7 @@ async function runEnable(name, configured, configPath, mcpRegistry) {
       return `${color8.green("Enabled")} "${name}" and started.`;
     }
   }
-  await updateJsonObjectFile(configPath, (full) => {
+  await updateJsonObjectFile2(configPath, (full) => {
     const current = isMcpServerRecord(full.mcpServers) ? full.mcpServers : {};
     setJsonPath(full, ["mcpServers", name], { ...cfg, ...current[name], enabled: true });
   });
@@ -9998,7 +10018,7 @@ async function runDisable(name, configured, configPath, mcpRegistry) {
       })
     );
   }
-  await updateJsonObjectFile(configPath, (full) => {
+  await updateJsonObjectFile2(configPath, (full) => {
     const current = isMcpServerRecord(full.mcpServers) ? full.mcpServers : {};
     setJsonPath(full, ["mcpServers", name], { ...cfg, ...current[name], enabled: false });
   });
@@ -11342,7 +11362,7 @@ ${color13.dim("YOLO enabled; tool calls run without approval unless an explicit
 
 // src/slash-commands/brain.ts
 import { randomUUID as randomUUID5 } from "node:crypto";
-import { readFile as readFile7 } from "node:fs/promises";
+import { readFile as readFile6 } from "node:fs/promises";
 import { parseModelRef } from "@wrongstack/core/agent";
 import { BUILTIN_COUNCIL_PERSONA_IDS, BUILTIN_COUNCIL_PERSONAS } from "@wrongstack/core/execution";
 import { color as color14 } from "@wrongstack/core/utils";
@@ -11788,7 +11808,7 @@ function buildBrainCommand(opts) {
         const n = Math.max(1, Math.min(100, Number.parseInt(rest[0] ?? "15", 10) || 15));
         let raw;
         try {
-          raw = await readFile7(ledgerPath, "utf8");
+          raw = await readFile6(ledgerPath, "utf8");
         } catch {
           const msg3 = `No ledger entries yet (${ledgerPath}).`;
           opts.renderer.write(msg3);
@@ -12667,7 +12687,7 @@ function buildCompactCommand(opts) {
 }
 
 // src/slash-commands/context.ts
-import * as fs7 from "node:fs/promises";
+import * as fs6 from "node:fs/promises";
 import {
   formatContextWindowModeList,
   getContextWindowMode,
@@ -12981,6 +13001,7 @@ var SOURCE_LABELS = {
   contributor: "contributor",
   ledger: "completed-work ledger",
   glossary: "project jargon dictionary",
+  peers: "fleet peer awareness",
   nextsteps: "next-steps gate",
   other: "other (untagged)"
 };
@@ -13029,7 +13050,7 @@ async function persistContextConfig(opts, patch) {
   const configPath = activeProfileConfigPath(opts.paths, opts.configStore.get());
   let raw = "{}";
   try {
-    raw = await fs7.readFile(configPath, "utf8");
+    raw = await fs6.readFile(configPath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") {
       return `Could not read ${configPath}: ${err.message}`;
@@ -13434,7 +13455,7 @@ function listRoles() {
 }
 
 // src/slash-commands/design.ts
-import * as fs8 from "node:fs/promises";
+import * as fs7 from "node:fs/promises";
 import * as path19 from "node:path";
 import {
   applyTokenOverrides,
@@ -13594,8 +13615,8 @@ ${menu}` };
           return { message: e.message };
         }
         try {
-          await fs8.mkdir(path19.dirname(abs), { recursive: true });
-          await fs8.writeFile(abs, result.content);
+          await fs7.mkdir(path19.dirname(abs), { recursive: true });
+          await fs7.writeFile(abs, result.content);
         } catch (e) {
           return { message: `Failed to write ${result.path}: ${e.message}` };
         }
@@ -13762,7 +13783,7 @@ function buildStatsCommand(opts) {
 }
 
 // src/slash-commands/doctor.ts
-import * as fs9 from "node:fs/promises";
+import * as fs8 from "node:fs/promises";
 import * as path20 from "node:path";
 import { atomicWrite as atomicWrite4, color as color22, toErrorMessage as toErrorMessage10 } from "@wrongstack/core/utils";
 
@@ -14327,7 +14348,7 @@ function buildDoctorCommand(opts) {
     const base = path20.basename(file);
     const candidates = [`${base}.last`];
     try {
-      const siblings = await fs9.readdir(dir);
+      const siblings = await fs8.readdir(dir);
       candidates.push(
         ...siblings.filter((f) => f.startsWith(`${base}.`) && f.endsWith(".bak")).sort().reverse()
       );
@@ -14335,7 +14356,7 @@ function buildDoctorCommand(opts) {
     }
     for (const name of candidates) {
       try {
-        const raw = await fs9.readFile(path20.join(dir, name), "utf8");
+        const raw = await fs8.readFile(path20.join(dir, name), "utf8");
         JSON.parse(raw);
         return { name, raw };
       } catch {
@@ -14388,7 +14409,7 @@ function buildDoctorCommand(opts) {
       for (const target of targets) {
         let raw;
         try {
-          raw = await fs9.readFile(target.file, "utf8");
+          raw = await fs8.readFile(target.file, "utf8");
         } catch {
           if (!target.isProject) {
             lines.push(
@@ -14703,7 +14724,7 @@ function buildFKeyAliasCommands(opts) {
 }
 
 // src/slash-commands/fallback.ts
-import * as fs10 from "node:fs/promises";
+import * as fs9 from "node:fs/promises";
 import {
   normalizeModelRef,
   parseModelRef as parseModelRef2,
@@ -14747,7 +14768,7 @@ async function patchGlobalConfig(globalConfigPath, mutate) {
   let raw = "{}";
   let fileExists2 = true;
   try {
-    raw = await fs10.readFile(globalConfigPath, "utf8");
+    raw = await fs9.readFile(globalConfigPath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") throw err;
     fileExists2 = false;
@@ -16483,35 +16504,8 @@ function handleFleetHelp(opts) {
 }
 
 // src/slash-commands/git.ts
-import { spawn as spawn5 } from "node:child_process";
 import { assessCommitSafety } from "@wrongstack/core/coordination";
-import { color as color27, toErrorMessage as toErrorMessage14 } from "@wrongstack/core/utils";
-async function runGit(args, cwd) {
-  try {
-    return await new Promise((resolve8, reject) => {
-      const child = spawn5("git", args, {
-        cwd,
-        stdio: ["ignore", "pipe", "pipe"],
-        signal: AbortSignal.timeout(3e4),
-        windowsHide: true
-      });
-      let stdout = "";
-      let stderr = "";
-      child.stdout?.on("data", (d) => {
-        stdout += d;
-      });
-      child.stderr?.on("data", (d) => {
-        stderr += d;
-      });
-      child.on("error", (err) => {
-        reject(new Error(`Failed to run git: ${err.message}`));
-      });
-      child.on("close", (code) => resolve8({ stdout, stderr, code: code ?? 0 }));
-    });
-  } catch (err) {
-    throw new Error(toErrorMessage14(err));
-  }
-}
+import { color as color27 } from "@wrongstack/core/utils";
 async function isGitRepo2(cwd) {
   const result = await runGit(["rev-parse", "--git-dir"], cwd);
   return result.code === 0;
@@ -16808,7 +16802,7 @@ ${color27.dim("(dry-run)")}`
 }
 
 // src/slash-commands/gitid.ts
-import * as fs11 from "node:fs/promises";
+import * as fs10 from "node:fs/promises";
 import { decryptConfigSecrets as decryptConfigSecrets2, encryptConfigSecrets as encryptConfigSecrets2, noOpVault as noOpVault3 } from "@wrongstack/core/security";
 import { ConfigError as ConfigError2 } from "@wrongstack/core/types";
 import {
@@ -16816,7 +16810,7 @@ import {
   color as color28,
   configureChildEnvGitIdentity as configureChildEnvGitIdentity2,
   getChildEnvGitIdentity,
-  toErrorMessage as toErrorMessage15
+  toErrorMessage as toErrorMessage14
 } from "@wrongstack/core/utils";
 function looksLikeEmail(s) {
   return /^[^\s@]+@[^\s@]+$/.test(s);
@@ -16825,7 +16819,7 @@ async function patchGlobalConfig2(globalConfigPath, mutate) {
   let raw = "{}";
   let fileExists2 = true;
   try {
-    raw = await fs11.readFile(globalConfigPath, "utf8");
+    raw = await fs10.readFile(globalConfigPath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") throw err;
     fileExists2 = false;
@@ -16951,7 +16945,7 @@ function buildGitIdCommand(opts) {
           message: `${color28.red("Unknown subcommand")} "${sub}". Try ${color28.dim("/gitid")}, ${color28.dim("/gitid set <name...> <email>")}, or ${color28.dim("/gitid help")}.`
         };
       } catch (err) {
-        return { message: `${color28.red("gitid error")}: ${toErrorMessage15(err)}` };
+        return { message: `${color28.red("gitid error")}: ${toErrorMessage14(err)}` };
       }
     }
   };
@@ -17282,7 +17276,7 @@ function buildHelpCommand(opts) {
 }
 
 // src/slash-commands/init.ts
-import * as fs12 from "node:fs/promises";
+import * as fs11 from "node:fs/promises";
 import * as path22 from "node:path";
 import { color as color30 } from "@wrongstack/core/utils";
 function buildInitCommand(opts) {
@@ -17297,19 +17291,19 @@ function buildInitCommand(opts) {
       const isFirstInit = !await fileExists(file);
       const detected = await detectProjectFacts(root);
       const body = renderAgentsTemplate(detected);
-      await fs12.mkdir(dir, { recursive: true });
+      await fs11.mkdir(dir, { recursive: true });
       let backedUp = false;
       if (!isFirstInit) {
         try {
-          await fs12.copyFile(file, `${file}.bak`);
+          await fs11.copyFile(file, `${file}.bak`);
           backedUp = true;
         } catch {
         }
       }
-      await fs12.writeFile(file, body, "utf8");
+      await fs11.writeFile(file, body, "utf8");
       let nodePkg = false;
       try {
-        await fs12.access(path22.join(root, "package.json"));
+        await fs11.access(path22.join(root, "package.json"));
         nodePkg = true;
       } catch {
       }
@@ -17347,7 +17341,7 @@ function buildInitCommand(opts) {
 }
 async function fileExists(filePath) {
   try {
-    await fs12.access(filePath);
+    await fs11.access(filePath);
     return true;
   } catch {
     return false;
@@ -17466,6 +17460,7 @@ import {
   updateTask,
   updateTaskAssignment
 } from "@wrongstack/kanban";
+import { preflightManagedTransition } from "@wrongstack/kanban/manager/lifecycle";
 import { TaskGraphStore } from "@wrongstack/sdd";
 
 // src/slash-commands/kanban-agent-helpers.ts
@@ -18237,9 +18232,9 @@ async function handleTaskSubcommand(opts, projectRoot, args, showHelp) {
       try {
         const result = await transitionTask(projectRoot, boardId, taskId, {
           to,
-          actor: "kanban-slash",
-          action: `Moved to ${resolvedColumnId} via /kanban task move`,
-          comment: moveNote ? `${moveNote} (move \u2192 ${resolvedColumnId})` : `/kanban task move ${resolvedColumnId} (was ${taskId} on board ${boardId})`,
+          actor: "kanban-slash:move",
+          action: moveNote ? `${moveNote} (move \u2192 ${resolvedColumnId})` : `Moved to ${resolvedColumnId} via /kanban task move`,
+          comment: moveNote ? `${moveNote} (move \u2192 ${resolvedColumnId})` : `Moved to ${resolvedColumnId} via /kanban task move (board=${boardId}, task=${taskId})`,
           // Reviewers require a non-empty attachment URL to advance into review.
           // Forward the caller's `--attachment`; if missing, the move must fail at
           // `validateReviewEvidence` so the audit ledger never records a fabricated
@@ -18273,7 +18268,7 @@ async function handleTaskSubcommand(opts, projectRoot, args, showHelp) {
         )
       };
     }
-    const { attachment, note, positional, warnings } = parseTaskEvidenceFlags(rest.slice(1));
+    const { attachment, note, tickChecks, positional, warnings } = parseTaskEvidenceFlags(rest.slice(1));
     if (positional.length > 0) {
       return {
         message: color32.red(
@@ -18302,73 +18297,36 @@ async function handleTaskSubcommand(opts, projectRoot, args, showHelp) {
           )
         };
       }
-      const preflightIssues = [];
-      const needsRunningEvidence = path32.includes("running");
-      const needsReviewEvidence = path32.includes("review");
-      const needsDoneEvidence = path32.includes("done");
       const currentTask = board.tasks.find((t) => t.id === taskId);
       if (!currentTask) {
         return { message: color32.red("Task not found") };
       }
-      if (needsRunningEvidence) {
-        const assignment = currentTask.assignment;
-        const hasLease = assignment?.status === "running" && [
-          assignment.leaseId,
-          assignment.claimedAt,
-          assignment.heartbeatAt,
-          assignment.leaseExpiresAt
-        ].every((value) => typeof value === "string" && value.trim().length > 0);
-        if (!hasLease) {
-          preflightIssues.push(
-            "The /kanban task done path needs the card to already be Running with lease metadata; move it into Running first via /kanban task assign or /kanban task dispatch."
-          );
-        }
-      }
-      if (needsReviewEvidence && !attachment) {
-        preflightIssues.push(
-          'Review evidence requires --attachment <url>; re-run `/kanban task done <boardId> <taskId> --attachment https://example.test/review --note "..."`.'
-        );
-      } else if (needsReviewEvidence && !currentTask.assignment?.lastResult) {
-        preflightIssues.push(
-          "Review evidence requires the card to carry an assignment.lastResult; dispatch the worker through the agentic supervisor so it records implementation output."
-        );
+      const preflightIssues = [];
+      if (!note || !note.trim()) {
+        return {
+          message: color32.red(
+            `Refusing /kanban task ${currentStage ?? "unknown"} \u2192 done without a reviewer note. Re-run with --note "<what proves the work is ready>".`
+          )
+        };
       }
-      if (needsDoneEvidence) {
-        if (!attachment) {
-          preflightIssues.push(
-            'Done requires --attachment <url>; re-run with --attachment https://example.test/review --note "verified".'
-          );
-        }
-        const criteria = currentTask.successCriteria ?? [];
-        if (criteria.length === 0 || criteria.some((check) => check.status !== "passed")) {
-          preflightIssues.push(
-            "Done requires every acceptance criterion to be explicitly passed; update them on the card before re-running."
-          );
-        }
-        if (currentTask.atomic && currentTask.verificationReport?.verdict !== "passed") {
-          preflightIssues.push(
-            "Atomic tasks require a passed verification report; run `kanban.verify_completion` on the task before `/kanban task done`."
-          );
-        }
-        if (currentTask.atomic && currentTask.childTaskIds && currentTask.childTaskIds.length > 0) {
-          const childTasks = board.tasks.filter(
-            (entry) => currentTask.childTaskIds.includes(entry.id)
-          );
-          const missingChildren = currentTask.childTaskIds.filter(
-            (childId) => !childTasks.some((entry) => entry.id === childId)
-          );
-          if (missingChildren.length > 0) {
-            preflightIssues.push(
-              `Atomic parent references unresolved children (${missingChildren.join(", ")}); resolve them via the kanban tool before retrying.`
-            );
-          }
-          const incompleteChildren = childTasks.filter((child) => child.status !== "completed");
-          if (incompleteChildren.length > 0) {
-            const ids = incompleteChildren.map((child) => child.id).join(", ");
-            preflightIssues.push(
-              `Atomic parent's children must be completed before the parent can advance to Done (pending: ${ids}).`
-            );
-          }
+      const noteText = note.trim();
+      const sharedAttachment = attachment ? {
+        url: attachment,
+        type: "url",
+        title: "Reviewer evidence (kanban-slash:done)"
+      } : void 0;
+      for (const to of path32) {
+        const transitionInput = {
+          to,
+          actor: "kanban-slash:done",
+          action: `${noteText} (${to})`,
+          comment: `${noteText} (${to})`,
+          ...sharedAttachment ? { attachment: sharedAttachment } : {},
+          ...tickChecks ? { tickChecks } : {}
+        };
+        const issues = preflightManagedTransition(board, currentTask, transitionInput);
+        for (const issue of issues) {
+          preflightIssues.push(issue.message);
         }
       }
       if (preflightIssues.length > 0) {
@@ -18383,16 +18341,17 @@ async function handleTaskSubcommand(opts, projectRoot, args, showHelp) {
         for (const to of path32) {
           await transitionTask(projectRoot, boardId, taskId, {
             to,
-            actor: "kanban-slash",
-            action: note ?? `Marked done via /kanban task done (${to})`,
-            comment: note ?? `Marked done via /kanban task done (${to})`,
+            actor: "kanban-slash:done",
+            action: noteText ? `${noteText} (${to})` : "",
+            comment: noteText ? `${noteText} (${to})` : "",
             ...attachment ? {
               attachment: {
                 url: attachment,
                 type: "url",
-                title: "Reviewer evidence (kanban-slash)"
+                title: "Reviewer evidence (kanban-slash:done)"
               }
-            } : {}
+            } : {},
+            ...tickChecks.length > 0 ? { tickChecks } : {}
           });
         }
         return { message: color32.green("\u2705 Task marked completed.") };
@@ -18815,14 +18774,17 @@ function resolveColumnReference(board, requested) {
 function parseTaskEvidenceFlags(tokens) {
   let attachment;
   let note;
+  const tickChecks = [];
   const positional = [];
   const warnings = [];
   const ATTACHMENT_KEYS = /* @__PURE__ */ new Set(["--attachment", "--evidence", "--link"]);
   const NOTE_KEYS = /* @__PURE__ */ new Set(["--note", "--comment", "--action"]);
+  const TICK_CHECK_KEYS = /* @__PURE__ */ new Set(["--tick-check", "--tick-checks"]);
+  const VALID_TICK_STATUSES = /* @__PURE__ */ new Set(["passed", "failed", "skipped"]);
   for (let i = 0; i < tokens.length; i++) {
     const token = tokens[i];
     const eq = token.indexOf("=");
-    const inline = eq > 0 && (ATTACHMENT_KEYS.has(token.slice(0, eq)) || NOTE_KEYS.has(token.slice(0, eq)));
+    const inline = eq > 0 && (ATTACHMENT_KEYS.has(token.slice(0, eq)) || NOTE_KEYS.has(token.slice(0, eq)) || TICK_CHECK_KEYS.has(token.slice(0, eq)));
     const key = inline ? token.slice(0, eq) : token;
     if (ATTACHMENT_KEYS.has(key)) {
       const value = inline ? token.slice(eq + 1) : tokens[i + 1];
@@ -18840,6 +18802,32 @@ function parseTaskEvidenceFlags(tokens) {
       attachment = value;
       continue;
     }
+    if (TICK_CHECK_KEYS.has(key)) {
+      const raw = inline ? token.slice(eq + 1) : tokens[i + 1];
+      if (!raw?.trim()) {
+        warnings.push(`${key} expects <checkId>=<status> but none was provided`);
+        i = inline ? i : i + 1;
+        continue;
+      }
+      if (!inline && raw.startsWith("-")) {
+        warnings.push(`${key} expects <checkId>=<status> but none was provided`);
+        i++;
+        continue;
+      }
+      const sep2 = raw.lastIndexOf("=");
+      const checkId = sep2 >= 0 ? raw.slice(0, sep2).trim() : "";
+      const status = sep2 >= 0 ? raw.slice(sep2 + 1).trim() : "";
+      if (!checkId || !status || !VALID_TICK_STATUSES.has(status)) {
+        warnings.push(
+          `${key} expects <checkId>=<status> where status is passed|failed|skipped (got "${raw}")`
+        );
+        i = inline ? i : i + 1;
+        continue;
+      }
+      tickChecks.push({ checkId, checkStatus: status });
+      i = inline ? i : i + 1;
+      continue;
+    }
     if (NOTE_KEYS.has(key)) {
       const inlineValue = inline ? token.slice(eq + 1) : void 0;
       if (inlineValue !== void 0) {
@@ -18867,7 +18855,7 @@ function parseTaskEvidenceFlags(tokens) {
     }
     positional.push(token);
   }
-  return { attachment, note, positional, warnings };
+  return { attachment, note, tickChecks, positional, warnings };
 }
 
 // src/slash-commands/mailbox.ts
@@ -19394,8 +19382,8 @@ function buildMailboxDemoCommand(opts) {
 }
 
 // src/slash-commands/mailbox-serve.ts
-import { spawn as spawn6 } from "node:child_process";
-import * as fs13 from "node:fs/promises";
+import { spawn as spawn5 } from "node:child_process";
+import * as fs12 from "node:fs/promises";
 import * as os2 from "node:os";
 import * as path23 from "node:path";
 import { resolveProjectDir as resolveProjectDir5 } from "@wrongstack/core/coordination";
@@ -19457,7 +19445,7 @@ function buildMailboxServeCommand(opts) {
         spawnArgs = ["mailbox", "serve", ...flags];
         if (isWin) shim = buildWin32CmdShimInvocation(wstackCmd, spawnArgs);
       }
-      const child = spawn6(shim?.command ?? wstackCmd, shim?.args ?? spawnArgs, {
+      const child = spawn5(shim?.command ?? wstackCmd, shim?.args ?? spawnArgs, {
         cwd,
         // POSIX-only: own process group so the bridge outlives the REPL.
         // On win32 `detached` opens a visible console window (project
@@ -19470,7 +19458,7 @@ function buildMailboxServeCommand(opts) {
       });
       child.unref();
       try {
-        await fs13.writeFile(pidFile, String(child.pid ?? ""), { mode: 384 });
+        await fs12.writeFile(pidFile, String(child.pid ?? ""), { mode: 384 });
       } catch {
       }
       const head = [];
@@ -19737,11 +19725,11 @@ function errorMessage(err) {
 }
 
 // src/slash-commands/memory.ts
-import { toErrorMessage as toErrorMessage18 } from "@wrongstack/core/utils";
+import { toErrorMessage as toErrorMessage17 } from "@wrongstack/core/utils";
 import { getSageSurface as getSageSurface2 } from "@wrongstack/sage";
 
 // src/slash-commands/memory-compact.ts
-import { toErrorMessage as toErrorMessage16 } from "@wrongstack/core/utils";
+import { toErrorMessage as toErrorMessage15 } from "@wrongstack/core/utils";
 import { getSageSurface } from "@wrongstack/sage";
 var COMPACT_SYSTEM_PROMPT = `You are a memory curator. Your task is to review, deduplicate, and improve a set of long-term memory entries.
 
@@ -19854,7 +19842,7 @@ async function runCompact(opts) {
     responseText = response.content.filter((b) => b.type === "text").map((b) => b.text).join("").trim();
   } catch (err) {
     return {
-      message: `LLM call failed: ${toErrorMessage16(err)}`
+      message: `LLM call failed: ${toErrorMessage15(err)}`
     };
   }
   if (!responseText) {
@@ -19870,7 +19858,7 @@ ${responseText.slice(0, 500)}` };
     parsed = JSON.parse(jsonMatch[0]);
   } catch (err) {
     return {
-      message: `Failed to parse LLM response: ${toErrorMessage16(err)}
+      message: `Failed to parse LLM response: ${toErrorMessage15(err)}
 
 Raw response:
 ${responseText.slice(0, 500)}`
@@ -19943,7 +19931,7 @@ ${responseText.slice(0, 500)}`
         }
       }
     } catch (err) {
-      errors.push(`${op.action} failed for ${op.targets.join(", ")}: ${toErrorMessage16(err)}`);
+      errors.push(`${op.action} failed for ${op.targets.join(", ")}: ${toErrorMessage15(err)}`);
     }
   }
   const lines = ["## Memory Compact \u2014 Complete"];
@@ -20349,7 +20337,7 @@ function formatSageShow(stats, memories) {
 }
 
 // src/slash-commands/memory-triage.ts
-import { toErrorMessage as toErrorMessage17 } from "@wrongstack/core/utils";
+import { toErrorMessage as toErrorMessage16 } from "@wrongstack/core/utils";
 import {
   fileTriageProposals,
   formatTriageReport,
@@ -20461,7 +20449,7 @@ Usage: /memory triage [--dry-run|--apply] [--limit N] [--max-phase3 N] [--max-ph
       verbose: false
     });
   } catch (err) {
-    return { message: `Triage failed: ${toErrorMessage17(err)}` };
+    return { message: `Triage failed: ${toErrorMessage16(err)}` };
   }
   if (!dryRun) {
     const applyReport = await applyDispatch(Sage, report);
@@ -20489,7 +20477,11 @@ async function loadActiveMemories(Sage, limit) {
     const page = await Sage.listSagePage({
       statuses: ["active", "stale"],
       limit: pageSize,
-      cursor
+      cursor,
+      // Admin surface: the user running this command owns every session in the
+      // project, so it opts out of the session filter the agent-facing tools
+      // rely on. Without this, session-scoped memories vanish from the listing.
+      includeAllSessions: true
     });
     all.push(...page.memories);
     if (limit && all.length >= limit) break;
@@ -20518,7 +20510,7 @@ async function applyDispatch(Sage, report) {
       autoOk++;
     } catch (err) {
       autoFail++;
-      lines.push(`  \u2717 Failed to update ${action.memoryId}: ${toErrorMessage17(err)}`);
+      lines.push(`  \u2717 Failed to update ${action.memoryId}: ${toErrorMessage16(err)}`);
     }
   }
   lines.push(`**Auto-apply:** ${autoOk} succeeded, ${autoFail} failed`);
@@ -20533,7 +20525,7 @@ async function applyDispatch(Sage, report) {
     } catch (err) {
       mergeFail++;
       lines.push(
-        `  \u2717 Failed to merge ${merge.supersededId} \u2192 ${merge.keeperId}: ${toErrorMessage17(err)}`
+        `  \u2717 Failed to merge ${merge.supersededId} \u2192 ${merge.keeperId}: ${toErrorMessage16(err)}`
       );
     }
   }
@@ -20619,7 +20611,7 @@ function buildMemoryCommand(opts) {
               message: `Remembered \`${memory.id}\` [${memory.kind}] ${memory.text}${tags}`
             };
           } catch (err) {
-            return { message: `Could not remember: ${toErrorMessage18(err)}` };
+            return { message: `Could not remember: ${toErrorMessage17(err)}` };
           }
         }
         case "update":
@@ -20657,7 +20649,7 @@ function buildMemoryCommand(opts) {
               message: `Updated \`${memory.id}\` [${memory.kind}|${memory.status}] ${memory.text}`
             };
           } catch (err) {
-            return { message: `Could not update: ${toErrorMessage18(err)}` };
+            return { message: `Could not update: ${toErrorMessage17(err)}` };
           }
         }
         case "delete":
@@ -20672,7 +20664,7 @@ function buildMemoryCommand(opts) {
             await Sage.deleteSage(id, reason, { force: true });
             return { message: `Deleted \`${id}\`.` };
           } catch (err) {
-            return { message: `Could not delete: ${toErrorMessage18(err)}` };
+            return { message: `Could not delete: ${toErrorMessage17(err)}` };
           }
         }
         case "forget":
@@ -20856,7 +20848,11 @@ function buildMemoryCommand(opts) {
               statuses: resolvedStatus ? [resolvedStatus] : ["active"],
               kind: kindVal,
               query: query || void 0,
-              limit
+              limit,
+              // Admin surface: the user running this command owns every session in the
+              // project, so it opts out of the session filter the agent-facing tools
+              // rely on. Without this, session-scoped memories vanish from the listing.
+              includeAllSessions: true
             });
             if (page.memories.length === 0) {
               return { message: "No memories matched the gather criteria." };
@@ -20920,7 +20916,7 @@ function buildMemoryCommand(opts) {
             }
             return { message: lines.join("\n") };
           } catch (err) {
-            return { message: `gather failed: ${toErrorMessage18(err)}` };
+            return { message: `gather failed: ${toErrorMessage17(err)}` };
           }
         }
         case "verify": {
@@ -21015,7 +21011,7 @@ function buildMemoryCommand(opts) {
 File size reduced. Audit-logged as \`memory.log_compacted\`.`
             };
           } catch (err) {
-            return { message: `Compaction failed: ${toErrorMessage18(err)}` };
+            return { message: `Compaction failed: ${toErrorMessage17(err)}` };
           }
         }
         case "stats": {
@@ -21243,7 +21239,7 @@ async function runAudienceMemory(store, rest) {
         message: `Remembered \`${memory.id}\` for ${formatAudienceSelector(memory.audience)}: ${memory.text}`
       };
     } catch (err) {
-      return { message: `Could not remember: ${toErrorMessage18(err)}` };
+      return { message: `Could not remember: ${toErrorMessage17(err)}` };
     }
   }
   if (sub === "clear") {
@@ -21255,7 +21251,7 @@ async function runAudienceMemory(store, rest) {
         message: `Cleared audience scope from \`${id}\` \u2014 it is now general project memory.`
       };
     } catch (err) {
-      return { message: `Could not clear audience: ${toErrorMessage18(err)}` };
+      return { message: `Could not clear audience: ${toErrorMessage17(err)}` };
     }
   }
   if (sub === "search" || sub === "find") {
@@ -21723,7 +21719,7 @@ ${targetMode.description}`
 }
 
 // src/slash-commands/modelcaps.ts
-import * as fs14 from "node:fs/promises";
+import * as fs13 from "node:fs/promises";
 import { hasProviderCredential } from "@wrongstack/core/models";
 import { color as color36 } from "@wrongstack/core/utils";
 function fmtTokens(n) {
@@ -21796,7 +21792,7 @@ function buildModelCapsCommand(opts) {
       }
       let providers;
       try {
-        const raw = await fs14.readFile(cachePath, "utf8");
+        const raw = await fs13.readFile(cachePath, "utf8");
         const parsed = JSON.parse(raw);
         const payload = parsed.payload ?? parsed;
         providers = Object.entries(payload).map(([id, p]) => ({
@@ -21873,19 +21869,19 @@ function buildModelCapsCommand(opts) {
 }
 
 // src/slash-commands/models.ts
-import * as fs15 from "node:fs/promises";
+import * as fs14 from "node:fs/promises";
 import { decryptConfigSecrets as decryptConfigSecrets3, encryptConfigSecrets as encryptConfigSecrets3, noOpVault as noOpVault4 } from "@wrongstack/core/security";
 import {
   ConfigError as ConfigError4,
   ToolValidationError as ToolValidationError4
 } from "@wrongstack/core/types";
-import { atomicWrite as atomicWrite7, color as color37, toErrorMessage as toErrorMessage19 } from "@wrongstack/core/utils";
+import { atomicWrite as atomicWrite7, color as color37, toErrorMessage as toErrorMessage18 } from "@wrongstack/core/utils";
 async function patchProfileConfig(mutate, profileConfigPath) {
   const targetPath = profileConfigPath;
   let raw = "{}";
   let fileExists2 = true;
   try {
-    raw = await fs15.readFile(targetPath, "utf8");
+    raw = await fs14.readFile(targetPath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") throw err;
     fileExists2 = false;
@@ -22111,7 +22107,7 @@ function buildModelsCommand(opts) {
         };
       } catch (err) {
         return {
-          message: `${color37.red("models error")}: ${toErrorMessage19(err)}`
+          message: `${color37.red("models error")}: ${toErrorMessage18(err)}`
         };
       }
     }
@@ -22983,7 +22979,7 @@ function buildPruneCommand(opts) {
 
 // src/slash-commands/refiner.ts
 import { noOpVault as noOpVault5 } from "@wrongstack/core/security";
-import { color as color42, toErrorMessage as toErrorMessage20 } from "@wrongstack/core/utils";
+import { color as color42, toErrorMessage as toErrorMessage19 } from "@wrongstack/core/utils";
 function buildRefinerCommand(opts) {
   const help = [
     "Usage:",
@@ -23083,7 +23079,7 @@ function buildRefinerCommand(opts) {
           };
         } catch (err) {
           return {
-            message: `${color42.red("refiner error")}: ${toErrorMessage20(err)}`
+            message: `${color42.red("refiner error")}: ${toErrorMessage19(err)}`
           };
         }
       }
@@ -23105,7 +23101,7 @@ function buildRefinerCommand(opts) {
           };
         } catch (err) {
           return {
-            message: `${color42.red("refiner error")}: ${toErrorMessage20(err)}`
+            message: `${color42.red("refiner error")}: ${toErrorMessage19(err)}`
           };
         }
       }
@@ -24288,7 +24284,7 @@ ${sddHelp()}`
 
 // src/slash-commands/session.ts
 import { SessionRecovery } from "@wrongstack/core/storage";
-import { color as color43, isPidAlive, toErrorMessage as toErrorMessage21 } from "@wrongstack/core/utils";
+import { color as color43, isPidAlive, toErrorMessage as toErrorMessage20 } from "@wrongstack/core/utils";
 function statusIcon2(status) {
   switch (status) {
     case "active":
@@ -24410,7 +24406,7 @@ function buildLoadCommand(opts) {
             message: name ? color43.green(`Renamed ${targetId} \u2192 "${name}"`) : color43.green(`Cleared name on ${targetId} (title: "${summary.title}")`)
           };
         } catch (err) {
-          return { message: color43.red(`Rename failed: ${toErrorMessage21(err)}`) };
+          return { message: color43.red(`Rename failed: ${toErrorMessage20(err)}`) };
         }
       }
       if (first === "delete") {
@@ -24441,7 +24437,7 @@ function buildLoadCommand(opts) {
           await opts.sessionStore.delete(targetId);
           return { message: color43.green(`Deleted session ${targetId}`) };
         } catch (err) {
-          return { message: color43.red(`Delete failed: ${toErrorMessage21(err)}`) };
+          return { message: color43.red(`Delete failed: ${toErrorMessage20(err)}`) };
         }
       }
       const showIncomplete = parts.includes("--incomplete") || parts.includes("-i");
@@ -24775,13 +24771,13 @@ async function killSession(sessionId, confirm) {
     };
   } catch (err) {
     return {
-      message: color43.red(`Failed to kill session: ${toErrorMessage21(err)}`)
+      message: color43.red(`Failed to kill session: ${toErrorMessage20(err)}`)
     };
   }
 }
 
 // src/slash-commands/setmodel.ts
-import * as fs16 from "node:fs/promises";
+import * as fs15 from "node:fs/promises";
 import { fallbackProfileChain, parseModelRef as parseModelRef3 } from "@wrongstack/core/agent";
 import { AGENT_CATALOG as AGENT_CATALOG2, AGENTS_BY_PHASE as AGENTS_BY_PHASE3 } from "@wrongstack/core/agent-catalog";
 import {
@@ -24795,7 +24791,7 @@ import { decryptConfigSecrets as decryptConfigSecrets4, encryptConfigSecrets as
 import {
   ConfigError as ConfigError5
 } from "@wrongstack/core/types";
-import { atomicWrite as atomicWrite9, color as color44, expectDefined as expectDefined8, toErrorMessage as toErrorMessage22 } from "@wrongstack/core/utils";
+import { atomicWrite as atomicWrite9, color as color44, expectDefined as expectDefined8, toErrorMessage as toErrorMessage21 } from "@wrongstack/core/utils";
 import { catalogProviderIdFor } from "@wrongstack/providers";
 async function resolveCatalogModelIds(registry, config, providerIds) {
   const out = /* @__PURE__ */ new Map();
@@ -24893,7 +24889,7 @@ async function patchProfileConfig2(mutate, profileConfigPath) {
   let raw = "{}";
   let fileExists2 = true;
   try {
-    raw = await fs16.readFile(targetPath, "utf8");
+    raw = await fs15.readFile(targetPath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") throw err;
     fileExists2 = false;
@@ -25369,7 +25365,7 @@ function buildSetModelCommand(opts) {
         };
       } catch (err) {
         return {
-          message: `${color44.red("setmodel error")}: ${toErrorMessage22(err)}`
+          message: `${color44.red("setmodel error")}: ${toErrorMessage21(err)}`
         };
       }
     }
@@ -25380,7 +25376,7 @@ function buildSetModelCommand(opts) {
 import { execFile as execFile3 } from "node:child_process";
 import { access as access4 } from "node:fs/promises";
 import * as path25 from "node:path";
-import { color as color45, toErrorMessage as toErrorMessage23 } from "@wrongstack/core/utils";
+import { color as color45, toErrorMessage as toErrorMessage22 } from "@wrongstack/core/utils";
 import { parseNextSteps } from "@wrongstack/tools/next-steps";
 function readGitStatus(projectRoot, includeBranch) {
   const args = ["status", "--short"];
@@ -25505,7 +25501,7 @@ function buildSuggestCommand(opts) {
         suggestCache = { suggestions, at: Date.now() };
         return { message: formatSuggestions(suggestions) };
       } catch (err) {
-        const msg = `Suggestion generation failed: ${toErrorMessage23(err)}`;
+        const msg = `Suggestion generation failed: ${toErrorMessage22(err)}`;
         opts.renderer.writeWarning(msg);
         return { message: msg };
       }
@@ -25517,7 +25513,7 @@ function parseSuggestions(raw) {
   if (/^none\b/i.test(trimmed) || /no (?:pending actions|further steps)/i.test(trimmed)) {
     return [];
   }
-  const { texts } = parseNextSteps(raw, false, false);
+  const { texts } = parseNextSteps(raw, false);
   if (texts.length > 0) return texts;
   return raw.split("\n").map((l) => l.trim()).filter((l) => l.length > 10 && !l.startsWith("#") && !l.startsWith("```")).slice(0, 5);
 }
@@ -25728,22 +25724,58 @@ function presetHelpLines(perLine = 4) {
   }
   return lines;
 }
+function computeWindow(total, selected, rows) {
+  const chromeRows = 5;
+  const markerRows = 2;
+  const minVisible = 3;
+  if (total <= 0) return { start: 0, end: 0, hasAbove: false, hasBelow: false };
+  const available = Math.max(1, rows - chromeRows - markerRows);
+  const visible = Math.max(minVisible, Math.min(total, Math.floor(available)));
+  const safeSelected = selected >= 0 && selected < total ? selected : 0;
+  let start;
+  if (safeSelected < visible) {
+    start = 0;
+  } else {
+    const halfWindow = Math.floor(visible / 2);
+    start = safeSelected - halfWindow;
+    start = Math.max(0, Math.min(total - visible, start));
+  }
+  const end = Math.min(total, start + visible);
+  return { start, end, hasAbove: start > 0, hasBelow: end < total };
+}
+function truncateDesc(desc, columns, active2) {
+  const markWidth = active2 ? 9 : 0;
+  const budget = Math.max(0, columns - 26 - markWidth);
+  if (desc.length <= budget) return desc;
+  if (budget <= 1) return "\u2026";
+  return `${desc.slice(0, budget - 1)}\u2026`;
+}
 async function runThemePicker(reader, activeId) {
   let cursor = THEME_OPTIONS.findIndex((p) => p.id === activeId);
   if (cursor < 0) cursor = 0;
   const render = (currentCursor) => {
+    const rows = process.stdout.rows ?? 24;
+    const columns = process.stdout.columns ?? 80;
+    const { start, end, hasAbove, hasBelow } = computeWindow(
+      THEME_OPTIONS.length,
+      currentCursor,
+      rows
+    );
     const lines = [];
-    lines.push(`
-${color46.bold(color46.amber("WrongStack") + color46.dim(" \u2014 TUI Theme Selection"))}
-`);
-    lines.push(color46.dim("  \u2191\u2193 navigate   Enter select   q quit\n"));
     lines.push("");
-    for (const [i, p] of THEME_OPTIONS.entries()) {
+    lines.push(`${color46.bold(color46.amber("WrongStack") + color46.dim(" \u2014 TUI Theme Selection"))}`);
+    lines.push(color46.dim("  \u2191\u2193 navigate   Enter select   q quit"));
+    lines.push("");
+    if (hasAbove) lines.push(color46.dim(`  \u2026 ${start} more above`));
+    for (let i = start; i < end; i++) {
+      const p = THEME_OPTIONS[i];
       const mark = p.id === activeId ? color46.green(" [active]") : "";
       const prefix = i === currentCursor ? color46.bold("\u276F ") : "  ";
       const name = i === currentCursor ? color46.bold(p.name) : p.name;
-      lines.push(`  ${prefix}${name.padEnd(21)} ${color46.dim(p.desc)}${mark}`);
+      const desc = truncateDesc(p.desc, columns, p.id === activeId);
+      lines.push(`  ${prefix}${name.padEnd(21)} ${color46.dim(desc)}${mark}`);
     }
+    if (hasBelow) lines.push(color46.dim(`  \u2026 ${THEME_OPTIONS.length - end} more below`));
     lines.push("");
     return lines.join("\n");
   };
@@ -26280,11 +26312,18 @@ function buildMouseCommand(_opts) {
       "  /mouse            Show current mouse-mode status",
       "  /mouse on         Enable full mouse mode",
       "  /mouse off        Disable scrollbar drag and clickable UI",
-      "  /mouse toggle     Flip the current state",
+      "  /mouse native     Hand the mouse back to the terminal (select + copy)",
+      "  /mouse toggle     Flip between on and off",
+      "",
+      "In both on and off the wheel scrolls virtualized chat history in-app. Full",
+      "mouse mode also makes the scrollbar drag-able and status-bar chips /",
+      "confirm buttons clickable.",
+      "",
+      "Native mode releases mouse tracking entirely, so the terminal does its own",
+      "click-drag text selection and copy again. The cost is the wheel: it scrolls",
+      "the terminal, not the transcript. PgUp/PgDn and Ctrl+U/D still page through",
+      "history. Use /mouse on or /mouse off to take the mouse back.",
       "",
-      "The wheel always scrolls virtualized chat history in-app. Full mouse mode",
-      "also makes the scrollbar drag-able and status-bar chips / confirm buttons",
-      "clickable. Shift+wheel, PgUp/PgDn, and Ctrl+U/D page through history.",
       "The setting persists."
     ].join("\n"),
     async run(args) {
@@ -26293,10 +26332,11 @@ function buildMouseCommand(_opts) {
       if (!arg || arg === "status") intent = "query";
       else if (arg === "on" || arg === "enable" || arg === "true" || arg === "1") intent = "on";
       else if (arg === "off" || arg === "disable" || arg === "false" || arg === "0") intent = "off";
+      else if (arg === "native" || arg === "none" || arg === "terminal") intent = "native";
       else if (arg === "toggle") intent = "toggle";
       else {
         return {
-          message: `Unknown argument: ${arg}. Use /mouse on, /mouse off, or /mouse toggle.`
+          message: `Unknown argument: ${arg}. Use /mouse on, /mouse off, /mouse native, or /mouse toggle.`
         };
       }
       return { metadata: { mouseToggle: intent } };
@@ -26305,8 +26345,8 @@ function buildMouseCommand(_opts) {
 }
 
 // src/slash-commands/project.ts
-import { spawn as spawn7 } from "node:child_process";
-import * as fs17 from "node:fs/promises";
+import { spawn as spawn6 } from "node:child_process";
+import * as fs16 from "node:fs/promises";
 import { createRequire } from "node:module";
 import * as path26 from "node:path";
 import {
@@ -26520,11 +26560,11 @@ async function listProjectsCommand(opts, ctx) {
 async function addProjectCommand(opts, ctx, targetPath, displayName) {
   const resolved = path26.resolve(ctx?.projectRoot ?? ctx?.cwd ?? process.cwd(), targetPath);
   try {
-    await fs17.access(resolved);
+    await fs16.access(resolved);
   } catch {
     return { message: color48.red(`Directory not found: ${resolved}`) };
   }
-  const stat5 = await fs17.stat(resolved);
+  const stat5 = await fs16.stat(resolved);
   if (!stat5.isDirectory()) {
     return { message: color48.red(`Not a directory: ${resolved}`) };
   }
@@ -26590,11 +26630,11 @@ async function removeProjectCommand(opts, _ctx, slugOrName) {
 async function switchProjectCommand(opts, ctx, target, displayName) {
   const resolved = path26.resolve(ctx?.projectRoot ?? ctx?.cwd ?? process.cwd(), target);
   try {
-    await fs17.access(resolved);
+    await fs16.access(resolved);
   } catch {
     return { message: color48.red(`Directory not found: ${resolved}`) };
   }
-  const stat5 = await fs17.stat(resolved);
+  const stat5 = await fs16.stat(resolved);
   if (!stat5.isDirectory()) {
     return { message: color48.red(`Not a directory: ${resolved}`) };
   }
@@ -26604,7 +26644,7 @@ async function switchProjectCommand(opts, ctx, target, displayName) {
     const pkgPath = req.resolve("@wrongstack/cli/package.json");
     const pkgDir = path26.dirname(pkgPath);
     cliPath = path26.join(pkgDir, "dist", "index.js");
-    await fs17.access(cliPath);
+    await fs16.access(cliPath);
   } catch {
     cliPath = process.argv[1] ?? "";
     if (!cliPath) {
@@ -26630,7 +26670,7 @@ async function switchProjectCommand(opts, ctx, target, displayName) {
   const canSwitch = await confirmProjectSwitch(opts, targetName);
   if (!canSwitch) return { message: "" };
   const nodeExe = process.execPath;
-  const child = spawn7(nodeExe, [cliPath, "--no-interactive"], {
+  const child = spawn6(nodeExe, [cliPath, "--no-interactive"], {
     cwd: resolved,
     stdio: "inherit",
     detached: false
@@ -26749,7 +26789,7 @@ async function spawnInProject(opts, _ctx, root, projectName) {
     const pkgPath = req.resolve("@wrongstack/cli/package.json");
     const pkgDir = path26.dirname(pkgPath);
     cliPath = path26.join(pkgDir, "dist", "index.js");
-    await fs17.access(cliPath);
+    await fs16.access(cliPath);
   } catch {
     cliPath = process.argv[1] ?? "";
     if (!cliPath) {
@@ -26772,7 +26812,7 @@ async function spawnInProject(opts, _ctx, root, projectName) {
   }
   await saveManifest(manifest, opts.paths?.globalConfig);
   const nodeExe = process.execPath;
-  const child = spawn7(nodeExe, [cliPath, "--no-interactive"], {
+  const child = spawn6(nodeExe, [cliPath, "--no-interactive"], {
     cwd: root,
     stdio: "inherit",
     detached: false
@@ -26804,7 +26844,7 @@ async function handleNewSession(_opts, _ctx) {
     const pkgPath = req.resolve("@wrongstack/cli/package.json");
     const pkgDir = path26.dirname(pkgPath);
     cliPath = path26.join(pkgDir, "dist", "index.js");
-    await fs17.access(cliPath);
+    await fs16.access(cliPath);
   } catch {
     cliPath = process.argv[1] ?? "";
     if (!cliPath) {
@@ -26814,7 +26854,7 @@ async function handleNewSession(_opts, _ctx) {
     }
   }
   const nodeExe = process.execPath;
-  const child = spawn7(nodeExe, [cliPath, "--no-interactive"], {
+  const child = spawn6(nodeExe, [cliPath, "--no-interactive"], {
     cwd: process.cwd(),
     stdio: "inherit",
     detached: false
@@ -26867,13 +26907,13 @@ async function handlePrevSessions(opts, _ctx) {
 }
 
 // src/slash-commands/review.ts
-import { spawn as spawn8 } from "node:child_process";
+import { spawn as spawn7 } from "node:child_process";
 import * as fsp3 from "node:fs/promises";
 import * as path27 from "node:path";
 import { emitReviewIfChanged } from "@wrongstack/core/plugin";
 async function runGit2(args, cwd) {
   return new Promise((resolve8) => {
-    const child = spawn8("git", args, {
+    const child = spawn7("git", args, {
       cwd,
       stdio: ["ignore", "pipe", "pipe"],
       signal: AbortSignal.timeout(1e4),
@@ -26967,7 +27007,9 @@ function buildReviewCommand(opts) {
           maxFiles: limit,
           autoFix: "off",
           cascadeOn: "off",
-          maxCascadeDepth: 0
+          maxCascadeDepth: 0,
+          fallbackModels: [],
+          fallbackProfile: void 0
         },
         cwd,
         files: filesWithContent
@@ -27070,7 +27112,7 @@ function buildSecurityCommand(opts) {
 // src/slash-commands/settings.ts
 import { noOpVault as noOpVault9 } from "@wrongstack/core/security";
 import { resolveFleetChatVerbosity as resolveFleetChatVerbosity2 } from "@wrongstack/core/types";
-import { color as color49, toErrorMessage as toErrorMessage24 } from "@wrongstack/core/utils";
+import { color as color49, toErrorMessage as toErrorMessage23 } from "@wrongstack/core/utils";
 import { getProcessRegistry } from "@wrongstack/tools";
 
 // src/utils/delay-format.ts
@@ -28003,7 +28045,7 @@ function buildSettingsCommand(opts) {
         };
       } catch (err) {
         return {
-          message: `${color49.red("Settings error")}: ${toErrorMessage24(err)}`
+          message: `${color49.red("Settings error")}: ${toErrorMessage23(err)}`
         };
       }
     }
@@ -28304,7 +28346,7 @@ function parseFlags2(args) {
 }
 
 // src/slash-commands/spawn-agents.ts
-import { toErrorMessage as toErrorMessage25 } from "@wrongstack/core/utils";
+import { toErrorMessage as toErrorMessage24 } from "@wrongstack/core/utils";
 function buildSpawnCommand(opts) {
   return {
     name: "spawn",
@@ -28341,7 +28383,7 @@ function buildSpawnCommand(opts) {
         const summary = Object.keys(parsed).length > 0 ? await opts.onSpawn(description, parsed) : await opts.onSpawn(description);
         return { message: summary };
       } catch (err) {
-        return { message: `Spawn failed: ${toErrorMessage25(err)}` };
+        return { message: `Spawn failed: ${toErrorMessage24(err)}` };
       }
     }
   };
@@ -29010,21 +29052,21 @@ ${formatTaskProgress(file.tasks)}`;
 }
 
 // src/slash-commands/techstack.ts
-import * as fs18 from "node:fs/promises";
+import * as fs17 from "node:fs/promises";
 import * as path28 from "node:path";
-import { color as color52, toErrorMessage as toErrorMessage26 } from "@wrongstack/core/utils";
+import { color as color52, toErrorMessage as toErrorMessage25 } from "@wrongstack/core/utils";
 async function discoverPackageFiles(projectRoot) {
   const files = [];
   const rootPkg = path28.join(projectRoot, "package.json");
   try {
-    await fs18.access(rootPkg);
+    await fs17.access(rootPkg);
     files.push(rootPkg);
   } catch {
   }
   const workspaceFile = path28.join(projectRoot, "pnpm-workspace.yaml");
   try {
-    await fs18.access(workspaceFile);
-    const content = await fs18.readFile(workspaceFile, "utf8");
+    await fs17.access(workspaceFile);
+    const content = await fs17.readFile(workspaceFile, "utf8");
     const globMatch = /packages?:\s*\[([^\]]+)\]/s.exec(content);
     const rawGlobs = globMatch?.[1];
     if (!rawGlobs) return files;
@@ -29033,12 +29075,12 @@ async function discoverPackageFiles(projectRoot) {
       const dirPrefix = g.replace(/\/?\*$/, "").replace(/\/\*$/, "");
       const dir = path28.join(projectRoot, dirPrefix);
       try {
-        const entries = await fs18.readdir(dir, { withFileTypes: true });
+        const entries = await fs17.readdir(dir, { withFileTypes: true });
         for (const e of entries) {
           if (!e.isDirectory()) continue;
           const subPkg = path28.join(dir, e.name, "package.json");
           try {
-            await fs18.access(subPkg);
+            await fs17.access(subPkg);
             files.push(subPkg);
           } catch {
           }
@@ -29220,7 +29262,7 @@ function buildTechStackCommand(opts) {
             message: `TechStack remediation finished: ${applied} applied, ${failed} failed, ${skipped} skipped.`
           };
         } catch (err) {
-          const msg = `TechStack remediation failed: ${toErrorMessage26(err)}`;
+          const msg = `TechStack remediation failed: ${toErrorMessage25(err)}`;
           opts.renderer.writeWarning(msg);
           return { message: msg };
         } finally {
@@ -29239,7 +29281,7 @@ function buildTechStackCommand(opts) {
             message: `TechStack inventory complete: ${snapshot.workspaces.length} workspaces, ${snapshot.dependencies.length} dependencies (fingerprint: ${snapshot.fingerprint})`
           };
         } catch (err) {
-          const msg = `TechStack inventory failed: ${toErrorMessage26(err)}`;
+          const msg = `TechStack inventory failed: ${toErrorMessage25(err)}`;
           opts.renderer.writeWarning(msg);
           return { message: msg };
         }
@@ -29254,7 +29296,7 @@ function buildTechStackCommand(opts) {
           );
         }
       } catch (err) {
-        discoveryNote = color52.red(`Could not scan for package files: ${toErrorMessage26(err)}`);
+        discoveryNote = color52.red(`Could not scan for package files: ${toErrorMessage25(err)}`);
       }
       const task = buildTechStackTask({
         projectRoot: opts.projectRoot,
@@ -29294,7 +29336,7 @@ function buildTechStackCommand(opts) {
         });
         return { message: summary };
       } catch (err) {
-        const msg = `Tech stack scan failed: ${toErrorMessage26(err)}`;
+        const msg = `Tech stack scan failed: ${toErrorMessage25(err)}`;
         opts.renderer.writeWarning(msg);
         return { message: msg };
       }
@@ -29303,7 +29345,7 @@ function buildTechStackCommand(opts) {
 }
 
 // src/slash-commands/telegram-settings.ts
-import { color as color54, toErrorMessage as toErrorMessage27 } from "@wrongstack/core/utils";
+import { color as color54, toErrorMessage as toErrorMessage26 } from "@wrongstack/core/utils";
 
 // src/slash-commands/telegram-setup.ts
 import { color as color53 } from "@wrongstack/core/utils";
@@ -29801,7 +29843,7 @@ function buildTelegramSettingsCommand(opts) {
         };
       } catch (err) {
         return {
-          message: `${color54.red("Settings error")}: ${toErrorMessage27(err)}`
+          message: `${color54.red("Settings error")}: ${toErrorMessage26(err)}`
         };
       }
     }
@@ -29955,7 +29997,7 @@ import {
   normalizeToolDescriptionMode,
   normalizeToolResultRenderMode,
   setToolResultRenderMode,
-  toErrorMessage as toErrorMessage28
+  toErrorMessage as toErrorMessage27
 } from "@wrongstack/core/utils";
 function fit(text, width) {
   if (text.length <= width) return text.padEnd(width);
@@ -30190,7 +30232,7 @@ function buildToolCommand(opts) {
         try {
           return { message: await cmdEnableAll() };
         } catch (err) {
-          return { message: `${color55.red("Error")}: ${toErrorMessage28(err)}` };
+          return { message: `${color55.red("Error")}: ${toErrorMessage27(err)}` };
         }
       }
       const name = parts[0] ?? "";
@@ -30204,7 +30246,7 @@ function buildToolCommand(opts) {
           for (const t of targets) results.push(await cmdDisable(t));
           return { message: results.join("\n") };
         } catch (err) {
-          return { message: `${color55.red("Error")}: ${toErrorMessage28(err)}` };
+          return { message: `${color55.red("Error")}: ${toErrorMessage27(err)}` };
         }
       }
       if (sub === "enable") {
@@ -30216,7 +30258,7 @@ function buildToolCommand(opts) {
           for (const t of targets) results.push(await cmdEnable(t));
           return { message: results.join("\n") };
         } catch (err) {
-          return { message: `${color55.red("Error")}: ${toErrorMessage28(err)}` };
+          return { message: `${color55.red("Error")}: ${toErrorMessage27(err)}` };
         }
       }
       const action = parts[1]?.toLowerCase();
@@ -30229,7 +30271,7 @@ function buildToolCommand(opts) {
         try {
           return { message: action === "disable" ? await cmdDisable(name) : await cmdEnable(name) };
         } catch (err) {
-          return { message: `${color55.red("Error")}: ${toErrorMessage28(err)}` };
+          return { message: `${color55.red("Error")}: ${toErrorMessage27(err)}` };
         }
       }
       if (!opts.toolRegistry.get(name) && !opts.toolRegistry.isDisabled(name)) {
@@ -30269,7 +30311,7 @@ function buildToolCommand(opts) {
           };
         } catch (err) {
           return {
-            message: `${color55.red("Could not save tool setting")}: ${toErrorMessage28(err)}`
+            message: `${color55.red("Could not save tool setting")}: ${toErrorMessage27(err)}`
           };
         }
       }
@@ -30289,7 +30331,7 @@ function buildToolCommand(opts) {
         };
       } catch (err) {
         return {
-          message: `${color55.red("Could not save tool setting")}: ${toErrorMessage28(err)}`
+          message: `${color55.red("Could not save tool setting")}: ${toErrorMessage27(err)}`
         };
       }
     }
@@ -30350,7 +30392,7 @@ ${lines.join("\n")}${extra}
 }
 
 // src/slash-commands/tuneup.ts
-import * as fs19 from "node:fs/promises";
+import * as fs18 from "node:fs/promises";
 import * as os3 from "node:os";
 import * as path29 from "node:path";
 import { atomicWrite as atomicWrite10, color as color57 } from "@wrongstack/core/utils";
@@ -30960,7 +31002,7 @@ async function gatherMemoryFiles(opts) {
   const out = [];
   for (const c of candidates) {
     try {
-      const content = await fs19.readFile(c.file, "utf8");
+      const content = await fs18.readFile(c.file, "utf8");
       out.push({ label: c.label, path: c.file, content, committed: c.committed });
     } catch {
     }
@@ -30978,7 +31020,7 @@ async function gatherTrust(opts) {
   const file = opts.paths?.projectTrust;
   if (!file) return void 0;
   try {
-    const raw = await fs19.readFile(file, "utf8");
+    const raw = await fs18.readFile(file, "utf8");
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed === "object") return parsed;
   } catch {
@@ -30989,7 +31031,7 @@ async function gatherConfigIssues(opts) {
   if (!opts.paths) return 0;
   const file = activeProfileConfigPath(opts.paths, opts.configStore.get());
   try {
-    const raw = await fs19.readFile(file, "utf8");
+    const raw = await fs18.readFile(file, "utf8");
     const parsed = JSON.parse(raw);
     return diagnoseConfig(parsed).findings.length;
   } catch {
@@ -31007,14 +31049,14 @@ async function gatherSessionBytes(opts) {
 }
 async function dirSize(dir) {
   let total = 0;
-  const entries = await fs19.readdir(dir, { withFileTypes: true });
+  const entries = await fs18.readdir(dir, { withFileTypes: true });
   for (const e of entries) {
     const full = path29.join(dir, e.name);
     if (e.isDirectory()) {
       total += await dirSize(full);
     } else if (e.isFile()) {
       try {
-        total += (await fs19.stat(full)).size;
+        total += (await fs18.stat(full)).size;
       } catch {
       }
     }
@@ -31027,7 +31069,7 @@ async function applyActions(actions, opts) {
   const file = activeProfileConfigPath(opts.paths, opts.configStore.get());
   let raw = "{}";
   try {
-    raw = await fs19.readFile(file, "utf8");
+    raw = await fs18.readFile(file, "utf8");
   } catch {
   }
   let parsed;
@@ -31183,9 +31225,9 @@ function summaryLine(findings, fixable, handoffs, power) {
 }
 
 // src/slash-commands/working-dir.ts
-import * as fs20 from "node:fs/promises";
+import * as fs19 from "node:fs/promises";
 import * as path30 from "node:path";
-import { color as color58, toErrorMessage as toErrorMessage29 } from "@wrongstack/core/utils";
+import { color as color58, toErrorMessage as toErrorMessage28 } from "@wrongstack/core/utils";
 function buildWorkingDirCommand(_opts) {
   return {
     name: "working_dir",
@@ -31230,7 +31272,7 @@ function buildWorkingDirCommand(_opts) {
         };
       }
       try {
-        const stat5 = await fs20.stat(resolved);
+        const stat5 = await fs19.stat(resolved);
         if (!stat5.isDirectory()) {
           return { message: color58.red(`Not a directory: ${resolved}`) };
         }
@@ -31242,7 +31284,7 @@ function buildWorkingDirCommand(_opts) {
         ctx.setWorkingDir(resolved);
       } catch (err) {
         return {
-          message: color58.red(toErrorMessage29(err))
+          message: color58.red(toErrorMessage28(err))
         };
       }
       const prevRel = path30.relative(ctx.projectRoot, previous) || ".";
@@ -31585,12 +31627,14 @@ async function runInteractive(cliCtx) {
   });
   const stdinInteractive = process.stdin.isTTY;
   const hookRunnerRef = { current: null };
+  const switchProviderAndModelRef = { current: null };
   registerCliManagementTools({
     toolRegistry,
     configStore,
     profileConfigPath,
     stdinInteractive,
-    getHookRunner: () => hookRunnerRef.current
+    getHookRunner: () => hookRunnerRef.current,
+    getSwitchProviderAndModel: () => switchProviderAndModelRef.current
   });
   const { metricsSink, healthRegistry, metricsStatus } = (() => {
     const ms = setupMetrics({
@@ -31835,6 +31879,7 @@ async function runInteractive(cliCtx) {
     buildProviderForIdRuntime: buildProviderForId,
     statusTracker
   });
+  switchProviderAndModelRef.current = switchProviderAndModel;
   await adoptResumedProvider({
     resumedProvider: sessResult.resumedProvider,
     resumedModel: sessResult.resumedModel,
@@ -32223,7 +32268,7 @@ async function runInteractive(cliCtx) {
     onEvent: evOn
   });
   const savedProviderCfg = config.providers?.[config.provider];
-  const { execute } = await import("./execution-QYFWDD3Y.js");
+  const { execute } = await import("./execution-4IG5XKOL.js");
   const stopHeapWatchdog = startSharedHeapWatchdog({
     collectStats: () => {
       const hqQueue = hqPublisherRef.current?.getQueueStats();
@@ -32461,4 +32506,4 @@ export {
   CLI_VERSION,
   runInteractive
 };
-//# sourceMappingURL=cli-main-6YE423OH.js.map
+//# sourceMappingURL=cli-main-3PUWFKSL.js.map