@wrongstack/cli 0.306.2 → 0.306.4

package/dist/{chunk-5N34EWJR.js → chunk-2ZNBRZ4W.js}

@@ -1,6 +1,6 @@
 import {
   loadManifest
-} from "./chunk-JUHRI6OV.js";
+} from "./chunk-G7337TTK.js";
 
 // src/project-picker.ts
 import { color } from "@wrongstack/core/utils";
@@ -415,4 +415,4 @@ export {
   skipDivider,
   runProjectPicker
 };
-//# sourceMappingURL=chunk-5N34EWJR.js.map
+//# sourceMappingURL=chunk-2ZNBRZ4W.js.map

package/dist/{chunk-JUHRI6OV.js → chunk-G7337TTK.js}

@@ -15,12 +15,31 @@ function projectsDataDir(globalConfigPath) {
 }
 async function loadManifest(globalConfigPath) {
   const file = projectsJsonPath(globalConfigPath);
+  let raw;
+  try {
+    raw = await fs.readFile(file, "utf8");
+  } catch (error) {
+    if (error.code === "ENOENT") return { projects: [] };
+    throw new ConfigError({
+      message: `Unable to read projects manifest: ${file}`,
+      code: "CONFIG_INVALID",
+      context: { file, phase: "manifest-read" },
+      cause: error
+    });
+  }
   try {
-    const raw = await fs.readFile(file, "utf8");
     const parsed = JSON.parse(raw);
-    return { projects: parsed.projects ?? [] };
-  } catch {
-    return { projects: [] };
+    if (!parsed || typeof parsed !== "object" || !Array.isArray(parsed.projects)) {
+      throw new Error("projects must be an array");
+    }
+    return { projects: parsed.projects };
+  } catch (error) {
+    throw new ConfigError({
+      message: `Unable to parse projects manifest: ${file}`,
+      code: "CONFIG_PARSE_FAILED",
+      context: { file, phase: "manifest-parse" },
+      cause: error
+    });
   }
 }
 async function saveManifest(manifest, globalConfigPath) {
@@ -97,4 +116,4 @@ export {
   ensureProjectDataDir,
   touchProjectInManifest
 };
-//# sourceMappingURL=chunk-JUHRI6OV.js.map
+//# sourceMappingURL=chunk-G7337TTK.js.map

package/dist/{cli-main-3PUWFKSL.js → cli-main-4TZCCZR6.js}

@@ -3,14 +3,14 @@ import {
 } from "./chunk-KV6DNQT6.js";
 import {
   runProjectPicker
-} from "./chunk-5N34EWJR.js";
+} from "./chunk-2ZNBRZ4W.js";
 import {
   ensureProjectDataDir,
   findProject,
   generateSlug,
   loadManifest,
   saveManifest
-} from "./chunk-JUHRI6OV.js";
+} from "./chunk-G7337TTK.js";
 import {
   createHqCommandDispatcher
 } from "./chunk-7YLN7YUA.js";
@@ -2977,7 +2977,11 @@ function buildAcpSubagentRunner(subagentId) {
 // src/fleet/host-helpers.ts
 import * as path2 from "node:path";
 import { makeSubagentResultTool } from "@wrongstack/core/coordination";
-import { ToolCapabilities, WIDE_SUBAGENT_CAPABILITIES } from "@wrongstack/core/security";
+import {
+  ToolCapabilities,
+  WIDE_SUBAGENT_CAPABILITIES,
+  clampSubagentCapabilities
+} from "@wrongstack/core/security";
 import { makePreferSideConflictResolver } from "@wrongstack/sdd";
 function isInsideDirectory(root, candidate) {
   const relative5 = path2.relative(path2.resolve(root), path2.resolve(candidate));
@@ -3085,9 +3089,10 @@ function selectSubagentTools(allTools, directorToolsByName, allow) {
 }
 function resolveSubagentCapabilities(subCfg, toolsForAllow) {
   if (subCfg.allowedCapabilities) {
-    return Array.from(
-      /* @__PURE__ */ new Set([...subCfg.allowedCapabilities, ToolCapabilities.COORDINATION_RESULT_SUBMIT])
-    );
+    return clampSubagentCapabilities([
+      ...subCfg.allowedCapabilities,
+      ToolCapabilities.COORDINATION_RESULT_SUBMIT
+    ]).granted;
   }
   const allow = subCfg.tools;
   if (!allow || allow.length === 0) return WIDE_SUBAGENT_CAPABILITIES;
@@ -3095,7 +3100,7 @@ function resolveSubagentCapabilities(subCfg, toolsForAllow) {
   for (const tool of toolsForAllow([...allow])) {
     for (const capability of tool.capabilities ?? []) caps.add(capability);
   }
-  return [...caps];
+  return clampSubagentCapabilities([...caps]).granted;
 }
 function resolveFleetWorktreePolicy(config) {
   const env = process.env["WRONGSTACK_FLEET_WORKTREES"]?.trim().toLowerCase();
@@ -4589,9 +4594,9 @@ ${audienceMemory.map((text) => `- ${text}`).join("\n")}`
         // so the waiting-room transition never fires along the subagent
         // dispatch path. The tracker is the same singleton the leader uses,
         // populated by brain-and-orchestration.ts into host.opts.statusTracker.
-        ...host.opts.statusTracker ? { statusTracker: host.opts.statusTracker } : {},
-        ...mergedConfig.fallbackStickiness?.primaryProbeInterval !== void 0 ? { primaryCooldownMs: mergedConfig.fallbackStickiness.primaryProbeInterval } : {},
-        ...mergedConfig.fallbackStickiness?.stickyFallbackTurns !== void 0 ? { stickyFallbackTurns: mergedConfig.fallbackStickiness.stickyFallbackTurns } : {}
+        ...host.opts.statusTracker ? { statusTracker: host.opts.statusTracker } : {}
+        // `fallbackStickiness` is read live from `getConfig()` inside the
+        // extension — forwarding it here would pin the spawn-time value.
       })
     );
     const disposeBridge = installSubagentEventBridge({
@@ -8516,6 +8521,7 @@ function runGate(events, gateParams) {
       }
     };
     events.on("provider.fallback_choice", handler);
+    timer = setTimeout(() => finish(null), Math.round(autoSwitchSeconds * 1e3));
     deadline = setTimeout(() => finish(null), Math.round(autoSwitchSeconds * 1500));
     events.emit("provider.fallback_pending", {
       ...sessionId ? { sessionId } : {},
@@ -8561,6 +8567,11 @@ function setupProviderRuntime(deps) {
     fallbackProfileManager.reload(next);
     onConfigUpdate(next);
   };
+  teardownHandlers.push(
+    configStore.watch((next) => {
+      fallbackProfileManager.reload(next);
+    })
+  );
   const resolveProviderCfg2 = (providerId) => resolveProviderCfgRuntime(cfg, providerId);
   const buildProviderForId2 = (providerId) => buildProviderForIdRuntime({ config: cfg, providerRegistry }, providerId);
   const buildProviderForModel = async (providerId, modelId) => {
@@ -8599,9 +8610,10 @@ function setupProviderRuntime(deps) {
       // emits provider.fallback_pending and waits for provider.fallback_choice
       // or the auto-switch countdown.
       fallbackGate: createFallbackGate(events),
-      fallbackGateSeconds: 7,
-      ...cfg.fallbackStickiness?.primaryProbeInterval !== void 0 ? { primaryCooldownMs: cfg.fallbackStickiness.primaryProbeInterval } : {},
-      ...cfg.fallbackStickiness?.stickyFallbackTurns !== void 0 ? { stickyFallbackTurns: cfg.fallbackStickiness.stickyFallbackTurns } : {}
+      fallbackGateSeconds: 7
+      // `fallbackStickiness` is NOT forwarded here on purpose: the extension
+      // reads it from `getConfig()` on every use, so an edit takes effect
+      // without a restart. Passing it as a dep would pin the boot-time value.
     })
   );
   if (cfg.features.memory && cfg.features.memoryConsolidation !== false) {
@@ -8637,26 +8649,35 @@ function setupProviderRuntime(deps) {
     "fallbackModels",
     "fallbackBridge",
     "fallbackProfiles",
+    "fallbackProfile",
     "favoriteModels",
     "favoriteModelsOnly",
     "modelAvailabilitySchedule",
     "modelMatrix",
     "fallbackAuto",
+    "fallbackStickiness",
+    "fallbackMaxLastResortCandidates",
     "uiLocale"
   ];
+  const activeProfileOf = (c) => typeof c.activeProfile === "string" && c.activeProfile ? c.activeProfile : "default";
   if (process.env["WRONGSTACK_DISABLE_CONFIG_WATCH"] !== "1") {
-    const activeProfile = typeof cfg.activeProfile === "string" && cfg.activeProfile ? cfg.activeProfile : "default";
-    const configLayers = [
-      { path: wpaths.profileConfig(activeProfile), priority: 1, trusted: true },
-      { path: wpaths.projectLocalConfig, priority: 2, trusted: true },
-      { path: wpaths.inProjectConfig, priority: 3, trusted: false }
-    ];
+    let activeProfile = activeProfileOf(cfg);
+    let configLayers = [];
+    const rebuildLayers = () => {
+      configLayers = [
+        { path: wpaths.profileConfig(activeProfile), priority: 1, trusted: true },
+        { path: wpaths.projectLocalConfig, priority: 2, trusted: true },
+        { path: wpaths.inProjectConfig, priority: 3, trusted: false }
+      ];
+    };
+    rebuildLayers();
     const sanitizeUntrustedSnapshot = (snap, path32) => {
-      const { providers, apiKey, baseUrl, ...rest } = snap;
+      const { providers, apiKey, baseUrl, fallbackMaxLastResortCandidates, ...rest } = snap;
       const dropped = [
         ...Object.keys(providers ?? {}).length > 0 ? ["providers"] : [],
         ...apiKey !== void 0 ? ["apiKey"] : [],
-        ...baseUrl !== void 0 ? ["baseUrl"] : []
+        ...baseUrl !== void 0 ? ["baseUrl"] : [],
+        ...fallbackMaxLastResortCandidates !== void 0 ? ["fallbackMaxLastResortCandidates"] : []
       ];
       if (dropped.length > 0) {
         logger.warn(
@@ -8682,23 +8703,20 @@ function setupProviderRuntime(deps) {
             snapshotHasProviders: snap.snapshotHasProviders
           };
         } else {
-          merged = {
+          const next = {
             providers: { ...merged.providers, ...snap.providers },
-            ...snap.apiKey !== void 0 ? { apiKey: snap.apiKey } : merged.apiKey !== void 0 ? { apiKey: merged.apiKey } : {},
-            ...snap.baseUrl !== void 0 ? { baseUrl: snap.baseUrl } : merged.baseUrl !== void 0 ? { baseUrl: merged.baseUrl } : {},
-            ...snap.fallbackModels !== void 0 ? { fallbackModels: snap.fallbackModels } : merged.fallbackModels !== void 0 ? { fallbackModels: merged.fallbackModels } : {},
-            ...snap.fallbackBridge !== void 0 ? { fallbackBridge: snap.fallbackBridge } : merged.fallbackBridge !== void 0 ? { fallbackBridge: merged.fallbackBridge } : {},
-            ...snap.fallbackProfiles !== void 0 ? { fallbackProfiles: snap.fallbackProfiles } : merged.fallbackProfiles !== void 0 ? { fallbackProfiles: merged.fallbackProfiles } : {},
-            ...snap.favoriteModels !== void 0 ? { favoriteModels: snap.favoriteModels } : merged.favoriteModels !== void 0 ? { favoriteModels: merged.favoriteModels } : {},
-            ...snap.favoriteModelsOnly !== void 0 ? { favoriteModelsOnly: snap.favoriteModelsOnly } : merged.favoriteModelsOnly !== void 0 ? { favoriteModelsOnly: merged.favoriteModelsOnly } : {},
-            ...snap.modelAvailabilitySchedule !== void 0 ? { modelAvailabilitySchedule: snap.modelAvailabilitySchedule } : merged.modelAvailabilitySchedule !== void 0 ? { modelAvailabilitySchedule: merged.modelAvailabilitySchedule } : {},
-            ...snap.modelMatrix !== void 0 ? { modelMatrix: snap.modelMatrix } : merged.modelMatrix !== void 0 ? { modelMatrix: merged.modelMatrix } : {},
-            ...snap.fallbackAuto !== void 0 ? { fallbackAuto: snap.fallbackAuto } : merged.fallbackAuto !== void 0 ? { fallbackAuto: merged.fallbackAuto } : {},
-            ...snap.uiLocale !== void 0 ? { uiLocale: snap.uiLocale } : merged.uiLocale !== void 0 ? { uiLocale: merged.uiLocale } : {},
             // Carry forward the snapshotHasProviders flag from the higher-priority layer.
             // When a layer has providers, merged knows providers were found somewhere.
             snapshotHasProviders: snap.snapshotHasProviders || merged.snapshotHasProviders
           };
+          const snapRec = snap;
+          const mergedRec = merged;
+          const nextRec = next;
+          for (const key of ["apiKey", "baseUrl", ...ROUTING_FIELDS]) {
+            const winner = snapRec[key] ?? mergedRec[key];
+            if (winner !== void 0) nextRec[key] = winner;
+          }
+          merged = next;
         }
       }
       return merged;
@@ -8717,7 +8735,7 @@ function setupProviderRuntime(deps) {
       if (merged.apiKey !== void 0) mergedPatch.apiKey = merged.apiKey;
       if (merged.baseUrl !== void 0) mergedPatch.baseUrl = merged.baseUrl;
       for (const key of ROUTING_FIELDS) {
-        mergedPatch[key] = merged[key] ?? null;
+        mergedPatch[key] = merged[key];
       }
       const before = JSON.stringify(resolveProviderCfg2(activeId).cfg);
       sync(patchConfig(cfg, mergedPatch));
@@ -8733,20 +8751,37 @@ function setupProviderRuntime(deps) {
         );
       }
     };
-    const watchers = configLayers.map((layer) => {
-      const w = watchProviderConfig(
-        layer.path,
-        vault,
-        () => {
-          void onAnyConfigChange();
-        },
-        { warn: (msg) => logger.warn(`Config watcher (${layer.path}): ${msg}`) }
+    let watchers = [];
+    const openWatchers = () => {
+      watchers = configLayers.map(
+        (layer) => watchProviderConfig(
+          layer.path,
+          vault,
+          () => {
+            void onAnyConfigChange();
+          },
+          { warn: (msg) => logger.warn(`Config watcher (${layer.path}): ${msg}`) }
+        )
       );
-      return w;
-    });
-    teardownHandlers.push(() => {
+    };
+    const closeWatchers = () => {
       for (const w of watchers) w.close();
-    });
+      watchers = [];
+    };
+    openWatchers();
+    teardownHandlers.push(
+      configStore.watch((next) => {
+        const nextProfile = activeProfileOf(next);
+        if (nextProfile === activeProfile) return;
+        activeProfile = nextProfile;
+        closeWatchers();
+        rebuildLayers();
+        openWatchers();
+        previousSnapshotSerialized = void 0;
+        void onAnyConfigChange();
+      })
+    );
+    teardownHandlers.push(closeWatchers);
   }
   return {
     resolveProviderCfg: resolveProviderCfg2,
@@ -14728,6 +14763,7 @@ import * as fs9 from "node:fs/promises";
 import {
   normalizeModelRef,
   parseModelRef as parseModelRef2,
+  runtimeFallbackChain,
   smartDefaultFallbackChain
 } from "@wrongstack/core/agent";
 import { decryptConfigSecrets, encryptConfigSecrets, noOpVault as noOpVault2 } from "@wrongstack/core/security";
@@ -14736,11 +14772,6 @@ import { atomicWrite as atomicWrite5, color as color24, toErrorMessage as toErro
 function refInvalidReason(ref, config) {
   const parsed = parseModelRef2(ref);
   if (!parsed.model) return "no model in reference";
-  const providerId = parsed.provider ?? config.provider;
-  const entry = config.providers?.[providerId];
-  if (entry?.models && !entry.models.includes(parsed.model)) {
-    return `"${parsed.model}" not in ${providerId} model list`;
-  }
   const favorites = config.favoriteModels ?? [];
   if (favorites.length === 0) return void 0;
   const canonical = normalizeModelRef(ref, config.provider);
@@ -14748,13 +14779,13 @@ function refInvalidReason(ref, config) {
   if (!inFavorites) return "not in favorites";
   return void 0;
 }
-function refInactiveReason(ref, config) {
+function refStaleModelListWarning(ref, config) {
   const parsed = parseModelRef2(ref);
   if (!parsed.model) return "no model in reference";
   const providerId = parsed.provider ?? config.provider;
   const entry = config.providers?.[providerId];
-  if (entry?.models && !entry.models.includes(parsed.model)) {
-    return `"${parsed.model}" not in ${providerId} model list`;
+  if (Array.isArray(entry?.models) && !entry.models.includes(parsed.model)) {
+    return `not in ${providerId} saved model list \u2014 will still be tried`;
   }
   return void 0;
 }
@@ -14804,7 +14835,8 @@ function buildFallbackCommand(opts) {
     "  /fallback bridge clear          Disable the continuity route",
     "  /fallback auto on|off           Toggle the auto-derived smart default",
     "  /fallback profile set <name> <ref,ref,...>  Create or replace a named chain",
-    "  /fallback profile use <name>     Make a profile the leader fallback chain",
+    "  /fallback profile use <name>     Select a profile for failover",
+    "  /fallback profile none           Deselect (explicit chain / smart default apply)",
     "  /fallback profile remove <name>  Delete a named chain",
     "  /fallback fav add <provider/model>          Add a favorite model",
     "  /fallback fav remove <n|ref>     Remove a favorite model",
@@ -14825,12 +14857,14 @@ function buildFallbackCommand(opts) {
     const rawCap = config.fallbackMaxLastResortCandidates;
     const capValue = typeof rawCap === "number" && Number.isFinite(rawCap) && rawCap >= 0 ? Math.floor(rawCap) : 12;
     const capLabel = capValue === 0 ? color24.dim("disabled") : color24.green(String(capValue));
-    const filteredReason = (ref) => refInactiveReason(ref, config);
+    const filteredReason = (ref) => refStaleModelListWarning(ref, config);
+    const activeProfile = typeof config.fallbackProfile === "string" && profiles[config.fallbackProfile] ? config.fallbackProfile : void 0;
     const lines = [
       `${color24.bold("WrongStack")} ${color24.dim("\u2014 Fallback chain")}`,
       "",
       `  ${color24.bold("leader")}  ${color24.cyan(`${config.provider}/${config.model}`)}`,
       `  ${color24.bold("bridge")}  ${bridge ? color24.cyan(bridge) : color24.dim("(disabled)")}  ${color24.dim("/fallback bridge set <provider/model>")}`,
+      `  ${color24.bold("profile")} ${activeProfile ? color24.amber(activeProfile) : color24.dim("(none)")}  ${color24.dim("/fallback profile use <name> | none")}`,
       ""
     ];
     if (explicit.length > 0) {
@@ -14838,8 +14872,8 @@ function buildFallbackCommand(opts) {
         `  ${color24.bold("explicit chain")} ${color24.dim("(tried in order after the leader)")}`
       );
       explicit.forEach((ref, i) => {
-        const inactive = filteredReason(ref);
-        const suffix = inactive ? `  ${color24.red(`\u26A0 inactive \u2014 ${inactive}`)}` : "";
+        const note = filteredReason(ref);
+        const suffix = note ? `  ${color24.amber(`\u26A0 ${note}`)}` : "";
         lines.push(`    ${color24.amber(String(i + 1).padStart(2))}. ${color24.cyan(ref)}${suffix}`);
       });
     } else {
@@ -14858,6 +14892,17 @@ function buildFallbackCommand(opts) {
         }
       }
     }
+    const runtime = runtimeFallbackChain(config);
+    lines.push("", `  ${color24.bold("effective order")} ${color24.dim("(what will actually be tried)")}`);
+    if (runtime.length === 0) {
+      lines.push(
+        `    ${color24.red("empty")} ${color24.dim("\u2014 a failure on the leader has nowhere to go")}`
+      );
+    } else {
+      runtime.forEach((ref, i) => {
+        lines.push(`    ${color24.amber(String(i + 1).padStart(2))}. ${color24.cyan(ref)}`);
+      });
+    }
     lines.push(
       "",
       `  ${color24.bold("auto")}  ${auto ? color24.green("on") : color24.dim("off")}  ${color24.dim("/fallback auto on|off")}`,
@@ -14872,8 +14917,8 @@ function buildFallbackCommand(opts) {
         return [
           `    ${color24.amber(name)} \u2192`,
           ...chain.map((ref) => {
-            const inactive = filteredReason(ref);
-            const suffix = inactive ? `  ${color24.red(`\u26A0 inactive \u2014 ${inactive}`)}` : "";
+            const note = filteredReason(ref);
+            const suffix = note ? `  ${color24.amber(`\u26A0 ${note}`)}` : "";
             return `      ${color24.cyan(ref)}${suffix}`;
           })
         ];
@@ -14881,8 +14926,8 @@ function buildFallbackCommand(opts) {
       "",
       `  ${color24.bold("favorites")} ${favorites.length ? "" : color24.dim("(none)")}`,
       ...favorites.map((ref, i) => {
-        const inactive = filteredReason(ref);
-        const suffix = inactive ? `  ${color24.red(`\u26A0 inactive \u2014 ${inactive}`)}` : "";
+        const note = filteredReason(ref);
+        const suffix = note ? `  ${color24.amber(`\u26A0 ${note}`)}` : "";
         return `    ${color24.amber(String(i + 1).padStart(2))}. ${color24.cyan(ref)}${suffix}`;
       }),
       "",
@@ -14952,18 +14997,18 @@ function buildFallbackCommand(opts) {
           const invalid = refInvalidReason(ref, config);
           if (invalid) {
             return {
-              message: `${color24.red("Cannot add")}: "${ref}" \u2014 ${invalid}. ` + (invalid === "not in favorites" ? `${color24.dim("Add it first: /fallback fav add " + ref)}` : invalid.startsWith('"') && invalid.includes("not in") ? color24.dim(
-                "Update the provider models list via provider_manage or pick a different model"
-              ) : "")
+              message: `${color24.red("Cannot add")}: "${ref}" \u2014 ${invalid}. ` + (invalid === "not in favorites" ? `${color24.dim("Add it first: /fallback fav add " + ref)}` : "")
             };
           }
+          const stale = refStaleModelListWarning(ref, config);
           explicit.push(ref);
           const decrypted = await patchGlobalConfig(globalConfigPath, (cfg) => {
             cfg.fallbackModels = explicit;
           });
           opts.configStore.update({ fallbackModels: decrypted.fallbackModels });
           return {
-            message: `${color24.green("\u2713")} added ${color24.cyan(ref)} ${color24.dim(`(chain length ${explicit.length})`)}`
+            message: `${color24.green("\u2713")} added ${color24.cyan(ref)} ${color24.dim(`(chain length ${explicit.length})`)}` + (stale ? `
+  ${color24.amber("\u26A0")} ${color24.dim(stale)}` : "")
           };
         }
         if (sub === "remove") {
@@ -15022,12 +15067,21 @@ function buildFallbackCommand(opts) {
         if (sub === "profile") {
           const action = (parts[1] ?? "").toLowerCase();
           const name = parts[2];
-          if (!["set", "use", "remove", "list"].includes(action)) {
+          if (!["set", "use", "remove", "list", "none", "clear"].includes(action)) {
             return {
-              message: `${color24.amber("Usage:")} /fallback profile set <name> <ref,ref,...> | use <name> | remove <name>`
+              message: `${color24.amber("Usage:")} /fallback profile set <name> <ref,ref,...> | use <name> | none | remove <name>`
             };
           }
           if (action === "list") return { message: currentView() };
+          if (action === "none" || action === "clear") {
+            await patchGlobalConfig(globalConfigPath, (cfg) => {
+              delete cfg.fallbackProfile;
+            });
+            opts.configStore.update({ fallbackProfile: void 0 });
+            return {
+              message: `${color24.green("\u2713")} no fallback profile selected ${color24.dim("(explicit chain / smart default apply)")}`
+            };
+          }
           if (!name) {
             return { message: `${color24.amber("Usage:")} /fallback profile ${action} <name>` };
           }
@@ -15065,23 +15119,33 @@ ${color24.dim("Add favorites first: /fallback fav add <ref>, or fix provider mod
             return { message: `${color24.red("Profile not found")}: ${color24.amber(name)}` };
           }
           if (action === "use") {
-            const chain = profiles[name] ?? [];
             const decrypted = await patchGlobalConfig(globalConfigPath, (cfg) => {
-              cfg.fallbackModels = chain;
+              cfg.fallbackProfile = name;
+            });
+            opts.configStore.update({
+              fallbackProfile: decrypted.fallbackProfile
             });
-            opts.configStore.update({ fallbackModels: decrypted.fallbackModels });
-            return { message: `${color24.green("\u2713")} active chain \u2190 profile ${color24.amber(name)}` };
+            const explicitActive = (config.fallbackModels ?? []).length > 0;
+            return {
+              message: `${color24.green("\u2713")} fallback profile \u2192 ${color24.amber(name)}` + (explicitActive ? `
+  ${color24.dim("Note: your explicit chain still takes precedence. Run /fallback clear to let the profile drive failover.")}` : "")
+            };
           }
           if (action === "remove") {
+            const wasSelected = config.fallbackProfile === name;
             const decrypted = await patchGlobalConfig(globalConfigPath, (cfg) => {
               const next = { ...cfg.fallbackProfiles ?? {} };
               delete next[name];
               cfg.fallbackProfiles = next;
+              if (cfg.fallbackProfile === name) delete cfg.fallbackProfile;
             });
             opts.configStore.update({
-              fallbackProfiles: decrypted.fallbackProfiles
+              fallbackProfiles: decrypted.fallbackProfiles,
+              ...wasSelected ? { fallbackProfile: void 0 } : {}
             });
-            return { message: `${color24.green("\u2713")} removed profile ${color24.amber(name)}` };
+            return {
+              message: `${color24.green("\u2713")} removed profile ${color24.amber(name)}` + (wasSelected ? color24.dim(" (it was the selected profile \u2014 selection cleared)") : "")
+            };
           }
         }
         if (sub === "fav" || sub === "favorite" || sub === "favorites") {
@@ -32268,7 +32332,7 @@ async function runInteractive(cliCtx) {
     onEvent: evOn
   });
   const savedProviderCfg = config.providers?.[config.provider];
-  const { execute } = await import("./execution-4IG5XKOL.js");
+  const { execute } = await import("./execution-547PM3NI.js");
   const stopHeapWatchdog = startSharedHeapWatchdog({
     collectStats: () => {
       const hqQueue = hqPublisherRef.current?.getQueueStats();
@@ -32506,4 +32570,4 @@ export {
   CLI_VERSION,
   runInteractive
 };
-//# sourceMappingURL=cli-main-3PUWFKSL.js.map
+//# sourceMappingURL=cli-main-4TZCCZR6.js.map

package/dist/{execution-4IG5XKOL.js → execution-547PM3NI.js}

@@ -870,7 +870,7 @@ function onSwitchToSession(ctx, _sessionId, targetRoot, projectName) {
 import * as path4 from "node:path";
 import { color as color3 } from "@wrongstack/core/utils";
 async function getProjectPickerItems(ctx) {
-  const { buildPickerItems } = await import("./project-picker-BOCWHBXP.js");
+  const { buildPickerItems } = await import("./project-picker-R5TYAE3Q.js");
   return buildPickerItems({
     globalConfigPath: ctx.state.wpaths.globalConfig,
     currentProjectRoot: ctx.state.projectRoot
@@ -888,7 +888,7 @@ async function onProjectSelect(ctx, slug, kind) {
       }
       return;
     }
-    const { loadManifest, saveManifest } = await import("./project-manifest-GE25PW4S.js");
+    const { loadManifest, saveManifest } = await import("./project-manifest-YFTJ3D5N.js");
     const manifest = await loadManifest(state.wpaths.globalConfig);
     const project = manifest.projects.find((p) => p.slug === slug);
     if (!project) return;
@@ -5998,4 +5998,4 @@ export {
   execute,
   resolveReviewerFallbackModels
 };
-//# sourceMappingURL=execution-4IG5XKOL.js.map
+//# sourceMappingURL=execution-547PM3NI.js.map

package/dist/index.js

@@ -729,7 +729,7 @@ var loaders = {
   skills: async () => (await import("./tools-skills-UNKLOB7M.js")).skillsCmd,
   providers: async () => (await import("./providers-models-HQN3AT3K.js")).providersCmd,
   models: async () => (await import("./providers-models-HQN3AT3K.js")).modelsCmd,
-  mcp: async () => (await import("./mcp-MSARYOPN.js")).mcpCmd,
+  mcp: async () => (await import("./mcp-W7HHN7IA.js")).mcpCmd,
   plugin: async () => (await import("./plugin-usage-PTEETL3J.js")).pluginCmd,
   plugins: async () => (await import("./plugin-usage-PTEETL3J.js")).pluginCmd,
   diag: async () => (await import("./diag-doctor-WTBHPOMB.js")).diagCmd,
@@ -3302,7 +3302,7 @@ async function initializeCli(argv) {
 async function main(argv) {
   const cliCtx = await initializeCli(argv);
   if (typeof cliCtx === "number") return cliCtx;
-  const { runInteractive } = await import("./cli-main-3PUWFKSL.js");
+  const { runInteractive } = await import("./cli-main-4TZCCZR6.js");
   return runInteractive(cliCtx);
 }
 

package/dist/{mcp-MSARYOPN.js → mcp-W7HHN7IA.js}

@@ -146,6 +146,9 @@ function mimeTypeFor(file) {
 function isTextMime(mimeType) {
   return mimeType.startsWith("text/") || mimeType === "application/json" || mimeType === "application/yaml";
 }
+function resolveServeFsRestriction(config) {
+  return config.tools?.restrictToProjectRoot ?? true;
+}
 function makeServeContext(cwd, projectRoot, signal, restrictFsToRoot = true) {
   const provider = {
     id: "mcp-serve",
@@ -209,11 +212,11 @@ async function serveMcpStdio(deps) {
     });
   }
   const controller = new AbortController();
-  const ctx = makeServeContext(
+  const selectionCtx = makeServeContext(
     deps.cwd,
     deps.projectRoot,
     controller.signal,
-    deps.config.tools?.restrictToProjectRoot ?? false
+    resolveServeFsRestriction(deps.config)
   );
   const permissionPolicy = yolo ? new AllowAllPermissionPolicy() : new AutoApprovePermissionPolicy();
   const executor = new ToolExecutor(registry, {
@@ -225,7 +228,7 @@ async function serveMcpStdio(deps) {
     // See wiring/pipeline.ts for why all four hosts must agree.
     requireKanbanGovernance: deps.config.tools?.kanbanGovernance ?? false
   });
-  const allowed = await selectExposedTools(registry, ctx, permissionPolicy, whitelist);
+  const allowed = await selectExposedTools(registry, selectionCtx, permissionPolicy, whitelist);
   const allowedNames = new Set(allowed.map((t) => t.name));
   if (allowed.length === 0) {
     log(
@@ -249,7 +252,13 @@ async function serveMcpStdio(deps) {
         name,
         input: callArgs
       };
-      const batch = await executor.executeBatch([use], ctx, "sequential");
+      const requestCtx = makeServeContext(
+        deps.cwd,
+        deps.projectRoot,
+        controller.signal,
+        resolveServeFsRestriction(deps.config)
+      );
+      const batch = await executor.executeBatch([use], requestCtx, "sequential");
       const result = batch.outputs[0]?.result;
       if (!result || result.type === "tool_confirm_pending") {
         return {
@@ -270,7 +279,13 @@ async function serveMcpStdio(deps) {
   if (flags["http"] === true || typeof flags["http"] === "string" || flags["port"] || flags["host"]) {
     const port = Number(flags["port"] ?? flags["http"] ?? 0) || 0;
     const httpHost = typeof flags["host"] === "string" ? flags["host"] : "127.0.0.1";
-    const token = typeof flags["token"] === "string" ? flags["token"] : void 0;
+    const tokenFromArg = typeof flags["token"] === "string" ? flags["token"] : void 0;
+    const token = tokenFromArg ?? process.env.WRONGSTACK_MCP_TOKEN?.trim() ?? void 0;
+    if (tokenFromArg) {
+      log(
+        "[mcp-serve] --token puts the auth token in this process command line, which other local processes can read. Prefer WRONGSTACK_MCP_TOKEN."
+      );
+    }
     let handle2;
     try {
       handle2 = await serveHttp(server, {
@@ -417,4 +432,4 @@ function isRecord(value) {
 export {
   mcpCmd
 };
-//# sourceMappingURL=mcp-MSARYOPN.js.map
+//# sourceMappingURL=mcp-W7HHN7IA.js.map

package/dist/mcp-serve.d.ts

@@ -9,6 +9,25 @@ export interface SelectedMcpServeContent {
 }
 /** Load only files explicitly named by trusted CLI flags; nothing is auto-discovered. */
 export declare function loadSelectedMcpServeContent(flags: Record<string, string | boolean>, cwd: string): Promise<SelectedMcpServeContent>;
+/**
+ * Whether the file tools are confined to the project root for `mcp serve`.
+ *
+ * `mcp serve` is the one surface where the file tools are driven by a REMOTE
+ * caller, so an unset config must inherit containment rather than invert it —
+ * an unset value here previously became `false`, which short-circuited
+ * `ensureInsideRoot` and let `tools/call read` return `~/.ssh/id_rsa`.
+ *
+ * This lives in one exported function rather than as a literal repeated at each
+ * call site so the invariant is testable and a third call site cannot quietly
+ * reintroduce the wrong default. Only a trusted user config can opt out:
+ * `tools.restrictToProjectRoot` is on the in-project denylist, so a
+ * checked-out repository cannot reach it.
+ */
+export declare function resolveServeFsRestriction(config: {
+    tools?: {
+        restrictToProjectRoot?: boolean | undefined;
+    } | undefined;
+}): boolean;
 /** Minimal run context — tools read cwd/projectRoot/signal; provider/session are stubs. */
 export declare function makeServeContext(cwd: string, projectRoot: string, signal: AbortSignal, restrictFsToRoot?: boolean): Context;
 /**

package/dist/{project-manifest-GE25PW4S.js → project-manifest-YFTJ3D5N.js}

@@ -5,7 +5,7 @@ import {
   loadManifest,
   saveManifest,
   touchProjectInManifest
-} from "./chunk-JUHRI6OV.js";
+} from "./chunk-G7337TTK.js";
 import "./chunk-7OCVIDC7.js";
 export {
   ensureProjectDataDir,
@@ -15,4 +15,4 @@ export {
   saveManifest,
   touchProjectInManifest
 };
-//# sourceMappingURL=project-manifest-GE25PW4S.js.map
+//# sourceMappingURL=project-manifest-YFTJ3D5N.js.map

package/dist/{project-picker-BOCWHBXP.js → project-picker-R5TYAE3Q.js}

@@ -4,8 +4,8 @@ import {
   filterItems,
   runProjectPicker,
   skipDivider
-} from "./chunk-5N34EWJR.js";
-import "./chunk-JUHRI6OV.js";
+} from "./chunk-2ZNBRZ4W.js";
+import "./chunk-G7337TTK.js";
 import "./chunk-7OCVIDC7.js";
 export {
   buildPickerItems,
@@ -14,4 +14,4 @@ export {
   runProjectPicker,
   skipDivider
 };
-//# sourceMappingURL=project-picker-BOCWHBXP.js.map
+//# sourceMappingURL=project-picker-R5TYAE3Q.js.map

package/dist/slash-commands/fallback.d.ts

@@ -17,6 +17,12 @@ import type { SlashCommandContext } from './command-context.js';
  *   bridge set <ref>    Set the single continuity route tried before the chain.
  *   bridge clear        Disable the continuity bridge.
  *   auto on|off         Toggle the smart default (config.fallbackAuto).
+ *   profile use <name>  Select a named profile (config.fallbackProfile).
+ *   profile none        Deselect it.
+ *
+ * Resolution order at runtime: explicit `fallbackModels` → selected profile →
+ * smart default. The view renders the real `resolveCandidates` order, not just
+ * the explicit list.
  */
 export declare function buildFallbackCommand(opts: SlashCommandContext): SlashCommand;
 //# sourceMappingURL=fallback.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/cli",
-  "version": "0.306.2",
+  "version": "0.306.4",
   "license": "MIT",
   "description": "WrongStack CLI — terminal AI coding agent with provider catalog from models.dev. Provides `wrongstack` and `wstack` binaries.",
   "keywords": [
@@ -42,31 +42,31 @@
   ],
   "dependencies": {
     "ws": "^8.21.1",
-    "@wrongstack/acp": "0.306.2",
-    "@wrongstack/mcp": "0.306.2",
-    "@wrongstack/kanban": "0.306.2",
-    "@wrongstack/core": "0.306.2",
-    "@wrongstack/providers": "0.306.2",
-    "@wrongstack/bench": "0.306.2",
-    "@wrongstack/plug-lsp": "0.306.2",
-    "@wrongstack/persistence": "0.306.2",
-    "@wrongstack/requirement-intake": "0.306.2",
-    "@wrongstack/plugins": "0.306.2",
-    "@wrongstack/sdd": "0.306.2",
-    "@wrongstack/security-scanner": "0.306.2",
-    "@wrongstack/sage": "0.306.2",
-    "@wrongstack/runtime": "0.306.2",
-    "@wrongstack/telegram": "0.306.2",
-    "@wrongstack/simpleui": "0.306.2",
-    "@wrongstack/techstack": "0.306.2",
-    "@wrongstack/webui-hq": "0.306.2",
-    "@wrongstack/webui": "0.306.2",
-    "@wrongstack/tui": "0.306.2",
-    "@wrongstack/webui-server": "0.306.2",
-    "@wrongstack/tools": "0.306.2"
+    "@wrongstack/acp": "0.306.4",
+    "@wrongstack/mcp": "0.306.4",
+    "@wrongstack/kanban": "0.306.4",
+    "@wrongstack/persistence": "0.306.4",
+    "@wrongstack/core": "0.306.4",
+    "@wrongstack/bench": "0.306.4",
+    "@wrongstack/plug-lsp": "0.306.4",
+    "@wrongstack/requirement-intake": "0.306.4",
+    "@wrongstack/plugins": "0.306.4",
+    "@wrongstack/providers": "0.306.4",
+    "@wrongstack/sage": "0.306.4",
+    "@wrongstack/sdd": "0.306.4",
+    "@wrongstack/security-scanner": "0.306.4",
+    "@wrongstack/runtime": "0.306.4",
+    "@wrongstack/simpleui": "0.306.4",
+    "@wrongstack/techstack": "0.306.4",
+    "@wrongstack/telegram": "0.306.4",
+    "@wrongstack/tui": "0.306.4",
+    "@wrongstack/webui": "0.306.4",
+    "@wrongstack/tools": "0.306.4",
+    "@wrongstack/webui-server": "0.306.4",
+    "@wrongstack/webui-hq": "0.306.4"
   },
   "optionalDependencies": {
-    "@wrongstack/desktop": "0.306.2"
+    "@wrongstack/desktop": "0.306.4"
   },
   "devDependencies": {
     "@types/node": "^26.1.2",