@wrongstack/cli 0.308.6 → 0.309.0

package/dist/{execution-6HIKTAUB.js → execution-TYUXABWI.js}

@@ -2203,7 +2203,15 @@ function applyChimeraReviewerReadOnlyPolicy(config) {
     // mutation tools/capabilities so Chimera reviewers cannot repair files.
     tools: [...CHIMERA_REVIEW_READ_ONLY_TOOLS],
     allowedCapabilities: ["fs.read"],
-    worktree: "off"
+    worktree: "off",
+    // Mandatory model-driven completion: a reviewer must never be killed by
+    // the wall-clock watchdog. At its deadline (or when the leader's session
+    // ends and `Director.requestFinish()` fires) it receives an in-band
+    // `subagent.finish_requested` notification between tool batches and
+    // finishes its report in its own turn within the granted grace window.
+    // Only if that window also elapses does the terminal stop apply — the
+    // reviewer's bounded maximum lifetime.
+    gracefulFinish: true
   };
 }
 
@@ -2284,10 +2292,30 @@ async function finalizeExecutionCleanup(input) {
       sessionEndProducers.add(tracked);
     }
   });
+  if (director) {
+    try {
+      director.requestFinish("leader session ended \u2014 finish your review now");
+    } catch (finishErr) {
+      console.warn(
+        JSON.stringify({
+          level: "warn",
+          event: "shutdown.subagent_finish_notify_failed",
+          message: finishErr instanceof Error ? finishErr.message : String(finishErr),
+          timestamp: (/* @__PURE__ */ new Date()).toISOString()
+        })
+      );
+    }
+  }
   try {
     while (sessionEndProducers.size > 0) {
       await Promise.allSettled([...sessionEndProducers]);
     }
+    if (director) {
+      try {
+        director.requestFinish("leader session ended \u2014 finish your review now");
+      } catch {
+      }
+    }
     await chimeraWork?.drainAndClose();
   } catch (err) {
     console.warn(
@@ -2300,6 +2328,18 @@ async function finalizeExecutionCleanup(input) {
     );
   }
   if (director) {
+    try {
+      director.requestFinish("leader session ended \u2014 finish your review now");
+    } catch (finishErr) {
+      console.warn(
+        JSON.stringify({
+          level: "warn",
+          event: "shutdown.subagent_finish_notify_failed",
+          message: finishErr instanceof Error ? finishErr.message : String(finishErr),
+          timestamp: (/* @__PURE__ */ new Date()).toISOString()
+        })
+      );
+    }
     try {
       await director.terminateAll();
     } catch (termErr) {
@@ -3212,6 +3252,15 @@ function installChimeraCascadeHandler({
               // Cascade agents are ephemeral infrastructure: like reviewers,
               // they must not consume the leader's lifetime maxSpawns budget.
               spawnBudgetExempt: true,
+              // Model-driven completion (see core coordination/subagent-finish.ts):
+              // a rung crossing its wall-clock budget is notified in-band
+              // between tool batches and finishes its own turn within the
+              // grace window instead of being killed. Ladder-retry semantics
+              // are intact: a rung that still exhausts the grace window lands
+              // as a `timeout` task result, which advances the ladder, and
+              // `buildRetryPreamble` below already warns the successor that
+              // the tree may hold the dead rung's partial edits.
+              gracefulFinish: true,
               // Rung 0 stays unpinned so the role model matrix still decides;
               // later rungs pin a model precisely because it just failed.
               ...attempt.tier === "inherit" ? {} : {
@@ -6045,4 +6094,4 @@ export {
   execute,
   resolveReviewerFallbackModels
 };
-//# sourceMappingURL=execution-6HIKTAUB.js.map
+//# sourceMappingURL=execution-TYUXABWI.js.map

package/dist/fleet/host-explore-companion.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Host wiring for the ExploreCompanion — the state-triggered background
+ * codebase explorer behind the leader agent.
+ *
+ * Mirrors `host-supervisor.ts`: a thin builder that wires the core
+ * `ExploreCompanion` observer (coordination/explore-companion.ts) to the
+ * director, the project mailbox, and the host session. Built in
+ * `buildDirector()`, stopped in `dispose()`.
+ *
+ * Resident model: one `explore-companion` subagent is spawned lazily on the
+ * FIRST probe (never eagerly — an idle session pays nothing) and holds a
+ * stable subagent id so subsequent probes reuse it. When the resident is
+ * gone (removed/reaped/never spawned), the next probe spawns a fresh one.
+ * Probes are `assignInternal`ed, never awaited — the leader is never
+ * blocked, and internal tasks stay out of the leader-visible task surface
+ * (same treatment as shadow passes).
+ *
+ * @module host-explore-companion
+ */
+import { type Director, ExploreCompanion } from '@wrongstack/core/coordination';
+import type { EventBus } from '@wrongstack/core/kernel';
+import type { SubagentConfig } from '@wrongstack/core/types';
+/** Config block for the explore-companion host wiring (FleetConfig.exploreCompanion). */
+export interface HostExploreCompanionConfig {
+    /** Kill switch. Default true. */
+    enabled?: boolean | undefined;
+    /** Min gap between probes on the same subject (ms). Default 120_000. */
+    cooldownMs?: number | undefined;
+    /** Pending probe queue cap. Default 8. */
+    maxPending?: number | undefined;
+    /** Mailbox poll interval for explicit asks (ms). Default 5_000. */
+    pollIntervalMs?: number | undefined;
+}
+export interface HostExploreCompanionInput {
+    director: Director;
+    events: EventBus;
+    sessionId: string;
+    mailboxProjectDir: string;
+    roster: Record<string, SubagentConfig>;
+    config?: HostExploreCompanionConfig | undefined;
+}
+export declare function createHostExploreCompanion(input: HostExploreCompanionInput): ExploreCompanion | null;
+//# sourceMappingURL=host-explore-companion.d.ts.map

package/dist/fleet/host.d.ts

@@ -53,6 +53,11 @@ export declare class MultiAgentHost {
      *  buildDirector() (when a BrainArbiter is available), stopped in
      *  dispose(). Also published to the supervisor registry for /supervisor. */
     private fleetSupervisor;
+    /** ExploreCompanion — state-triggered background codebase explorer behind
+     *  the leader. Built in buildDirector() (unless disabled via
+     *  fleet.exploreCompanion.enabled=false), stopped in dispose(). Probes are
+     *  assigned to a lazily-spawned resident `explore-companion` subagent. */
+    private exploreCompanion;
     /** Built-ins plus lazily-resolved project-created roles. */
     private readonly roster;
     constructor(deps: MultiAgentDeps, opts?: MultiAgentHostOptions);

package/dist/index.js

@@ -1860,15 +1860,15 @@ var loaders = {
   audit: async () => (await import("./audit-BBR22QH3.js")).auditCmd,
   tools: async () => (await import("./tools-skills-UNKLOB7M.js")).toolsCmd,
   skills: async () => (await import("./tools-skills-UNKLOB7M.js")).skillsCmd,
-  providers: async () => (await import("./providers-models-4FAKM2WO.js")).providersCmd,
-  models: async () => (await import("./providers-models-4FAKM2WO.js")).modelsCmd,
+  providers: async () => (await import("./providers-models-D23WUD74.js")).providersCmd,
+  models: async () => (await import("./providers-models-D23WUD74.js")).modelsCmd,
   mcp: async () => (await import("./mcp-CMLFHRG2.js")).mcpCmd,
-  plugin: async () => (await import("./plugin-usage-PTEETL3J.js")).pluginCmd,
-  plugins: async () => (await import("./plugin-usage-PTEETL3J.js")).pluginCmd,
+  plugin: async () => (await import("./plugin-usage-26LIIW3P.js")).pluginCmd,
+  plugins: async () => (await import("./plugin-usage-26LIIW3P.js")).pluginCmd,
   diag: async () => (await import("./diag-doctor-WTBHPOMB.js")).diagCmd,
   doctor: async () => (await import("./diag-doctor-WTBHPOMB.js")).doctorCmd,
   export: async () => (await import("./export-CCUXRJOU.js")).exportCmd,
-  usage: async () => (await import("./plugin-usage-PTEETL3J.js")).usageCmd,
+  usage: async () => (await import("./plugin-usage-26LIIW3P.js")).usageCmd,
   version: async () => (await import("./version-help-TFD6VPF3.js")).versionCmd,
   help: async () => (await import("./version-help-TFD6VPF3.js")).helpCmd,
   projects: async () => (await import("./projects-XE76NFNZ.js")).projectsCmd,
@@ -4466,7 +4466,7 @@ async function initializeCli(argv) {
 async function main(argv) {
   const cliCtx = await initializeCli(argv);
   if (typeof cliCtx === "number") return cliCtx;
-  const { runInteractive } = await import("./cli-main-HCCYX3D5.js");
+  const { runInteractive } = await import("./cli-main-RG2PTQ6S.js");
   return runInteractive(cliCtx);
 }
 

package/dist/plugin-management.d.ts

@@ -14,6 +14,15 @@ export declare const OFFICIAL_PLUGINS: readonly [{
 export interface PluginManagementDeps {
     config: Config;
     configPath: string;
+    /** Override `~/.wrongstack` for tests. Defaults to the real home dir. */
+    globalRoot?: string | undefined;
+    /** Injectable package-manager runner for tests. */
+    runPackageManager?: ((pm: string, args: readonly string[], cwd: string) => Promise<PackageManagerRunResult>) | undefined;
+}
+export interface PackageManagerRunResult {
+    code: number | null;
+    stdout: string;
+    stderr: string;
 }
 export interface PluginManagementResult {
     code: number;

package/dist/{plugin-usage-PTEETL3J.js → plugin-usage-26LIIW3P.js}

@@ -1,6 +1,6 @@
 import {
   runPluginManagementCommand
-} from "./chunk-RK7E3IXT.js";
+} from "./chunk-H6C7SO5H.js";
 import {
   restoreFlags
 } from "./chunk-CSAPOCBP.js";
@@ -41,4 +41,4 @@ export {
   pluginCmd,
   usageCmd
 };
-//# sourceMappingURL=plugin-usage-PTEETL3J.js.map
+//# sourceMappingURL=plugin-usage-26LIIW3P.js.map

package/dist/{plugins-XRGWC3NJ.js → plugins-EEKHCMBE.js}

@@ -7,8 +7,8 @@ import {
   pluginNameFromSpec,
   setupPlugins,
   warnIfDeprecatedPluginName
-} from "./chunk-KV6DNQT6.js";
-import "./chunk-RK7E3IXT.js";
+} from "./chunk-BZJ4MP32.js";
+import "./chunk-H6C7SO5H.js";
 import "./chunk-TYO2OVAD.js";
 import "./chunk-7OCVIDC7.js";
 export {
@@ -21,4 +21,4 @@ export {
   setupPlugins,
   warnIfDeprecatedPluginName
 };
-//# sourceMappingURL=plugins-XRGWC3NJ.js.map
+//# sourceMappingURL=plugins-EEKHCMBE.js.map

package/dist/{providers-models-4FAKM2WO.js → providers-models-D23WUD74.js}

@@ -496,7 +496,7 @@ async function modelsCaps(args, deps) {
       "    disable:    " + (rc.disableSupported ? "supported" : "unsupported") + "\n"
     );
     deps.renderer.write(
-      "    effort:     " + (rc.effortSupported ? rc.effortLevels.join(", ") : "unsupported") + "\n"
+      "    effort:     " + (rc.effortSupported === void 0 ? "not enumerated (model reasons; any level forwarded)" : rc.effortSupported ? rc.effortLevels.join(", ") : "unsupported") + "\n"
     );
     deps.renderer.write("    preserve:   " + rc.preserveThinking + "\n");
   } else if (caps.reasoning) {
@@ -661,4 +661,4 @@ export {
   modelsCmd,
   providersCmd
 };
-//# sourceMappingURL=providers-models-4FAKM2WO.js.map
+//# sourceMappingURL=providers-models-D23WUD74.js.map

package/dist/slash-commands/effort.d.ts

@@ -0,0 +1,33 @@
+import { type ReasoningEffort, type SlashCommand } from '@wrongstack/core/types';
+import type { SlashCommandContext } from './command-context.js';
+import type { WstackPaths } from '@wrongstack/core/utils';
+/**
+ * `/effort` — view or set the SESSION-WIDE reasoning effort applied to the
+ * active leader model. This is the quick, discoverable front-end for
+ * `Config.modelRuntime.reasoning.effort` — the same field `/settings
+ * reasoning-effort` writes and the WebUI "Reasoning effort" dropdown edits.
+ *
+ * Distinct from `/setmodel reasoning-effort <key>`, which pins effort onto a
+ * model-matrix entry (role/phase/*) for spawned subagents.
+ *
+ * Model-aware: when the active model's catalog entry advertises
+ * `effortLevels`, only those values are accepted and the view highlights the
+ * supported set. When capabilities are unknown, any canonical value is
+ * accepted (the runtime resolver drops unsupported values with a warning
+ * instead of erroring), and the view says so.
+ *
+ * Subcommands:
+ *   (none)        Show current effort, model-supported levels, and usage.
+ *   <level>       Set the session effort.
+ *   clear         Remove the setting (provider default applies).
+ *   matrix        Show per-key (role/phase/*) effort overrides, if any.
+ */
+export declare function buildEffortCommand(opts: SlashCommandContext): SlashCommand;
+/**
+ * Persist `Config.modelRuntime.reasoning.effort` to the active profile config.
+ * `undefined` removes the key entirely (JSON has no undefined). Uses the same
+ * read → decrypt → mutate → encrypt → atomicWrite cycle as `/setmodel` and
+ * `persistConfigSetting` so encrypted secrets round-trip byte-for-byte.
+ */
+export declare function patchSessionEffort(effort: ReasoningEffort | undefined, paths: WstackPaths, activeProfile: string): Promise<void>;
+//# sourceMappingURL=effort.d.ts.map

package/dist/wiring/external-plugins.d.ts

@@ -0,0 +1,58 @@
+/**
+ * External (third-party) plugin loading for the CLI host.
+ *
+ * Three source kinds, in precedence order:
+ *   1. `config.plugins` entries with a bare/npm specifier — dynamically
+ *      imported exactly as before (module resolution via the host).
+ *   2. `config.plugins` entries with an explicit `path` — resolved against
+ *      the project root and imported via `file:` URL.
+ *   3. Directory discovery — `<globalRoot>/plugins/*` (user-global, active
+ *      by default) and `<projectRoot>/.wrongstack/plugins/*` (project-local,
+ *      INACTIVE by default: a cloned repo must not auto-execute plugin code
+ *      the user never opted into).
+ *
+ * Every external plugin passes through, in order:
+ *   - enablement resolution (same `resolvePluginEnablement` as built-ins),
+ *   - deprecation + builtin-spec guards (passed in by the wiring so this
+ *     module stays acyclic with wiring/plugins.ts),
+ *   - a PRE-IMPORT TOFU trust gate keyed by the resolved entry file:
+ *     the module is hashed before any of its code executes, first load
+ *     pins the hash, a changed hash refuses the load until the user
+ *     re-pins with `wstack plugin trust <name>`,
+ *   - a shape check (default-exported object with name/apiVersion/setup),
+ *   - a spoof guard (external plugins may not claim built-in names).
+ *
+ * First-party/built-in plugins never enter this module.
+ */
+import type { Config, Logger, Plugin } from '@wrongstack/core/types';
+/** Resolve a `file:` URL / absolute / relative path to an absolute fs path. */
+export declare function normalizeConfigPath(raw: string, projectRoot: string): string;
+/**
+ * Resolve a bare/npm specifier to its entry file WITHOUT importing it.
+ * Returns undefined when resolution is unavailable (bundled hosts, exotic
+ * specs) — callers then proceed without the pre-import trust gate.
+ */
+export declare function resolveSpecifierEntry(spec: string): string | undefined;
+export interface ExternalPluginHooks {
+    /** Normalize a config spec to its bare plugin name (null for paths/URLs). */
+    nameFromSpec(spec: string): string | null;
+    /** True when the spec refers to a built-in plugin (loaded elsewhere). */
+    isBuiltinSpec(spec: string): boolean;
+    /** Warn-once deprecation check; returns true when the spec is deprecated. */
+    warnIfDeprecated(name: string): boolean;
+}
+export interface LoadExternalPluginsContext {
+    config: Config;
+    log: Logger;
+    /** `~/.wrongstack` — anchors global discovery + the default trust store. */
+    globalRoot?: string | undefined;
+    projectRoot: string;
+    /** Plugin names claimed by built-ins — external plugins may not spoof them. */
+    reservedNames: ReadonlySet<string>;
+    /** Override for tests. Defaults to `~/.wrongstack/plugin-trust.json`. */
+    trustStorePath?: string | undefined;
+    /** Override for tests. Defaults to native dynamic import. */
+    importModule?: ((url: string) => Promise<unknown>) | undefined;
+}
+export declare function loadExternalPlugins(ctx: LoadExternalPluginsContext, hooks: ExternalPluginHooks): Promise<Plugin[]>;
+//# sourceMappingURL=external-plugins.d.ts.map

package/dist/wiring/plugins.d.ts

@@ -103,6 +103,14 @@ export interface PluginsWiringDeps {
         projectDir?: string;
         /** Per-project goal.json path. Useful as a sibling anchor. */
         projectGoal?: string;
+        /**
+         * The actual code project root (the directory containing
+         * `<projectRoot>/.wrongstack/`). Anchors relative `path` entries in
+         * `config.plugins` and the project-local plugin discovery root.
+         * Optional — minimal hosts may omit it, in which case only
+         * config-specifier user plugins load.
+         */
+        projectRoot?: string;
     };
 }
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/cli",
-  "version": "0.308.6",
+  "version": "0.309.0",
   "license": "MIT",
   "description": "WrongStack CLI — terminal AI coding agent with provider catalog from models.dev. Provides `wrongstack` and `wstack` binaries.",
   "keywords": [
@@ -42,32 +42,32 @@
   ],
   "dependencies": {
     "ws": "^8.21.3",
-    "@wrongstack/bench": "0.308.6",
-    "@wrongstack/acp": "0.308.6",
-    "@wrongstack/core": "0.308.6",
-    "@wrongstack/plug-lsp": "0.308.6",
-    "@wrongstack/mcp": "0.308.6",
-    "@wrongstack/kanban": "0.308.6",
-    "@wrongstack/providers": "0.308.6",
-    "@wrongstack/persistence": "0.308.6",
-    "@wrongstack/sage": "0.308.6",
-    "@wrongstack/plugins": "0.308.6",
-    "@wrongstack/requirement-intake": "0.308.6",
-    "@wrongstack/runtime": "0.308.6",
-    "@wrongstack/techstack": "0.308.6",
-    "@wrongstack/sdd": "0.308.6",
-    "@wrongstack/simpleui": "0.308.6",
-    "@wrongstack/telegram": "0.308.6",
-    "@wrongstack/tui": "0.308.6",
-    "@wrongstack/tools": "0.308.6",
-    "@wrongstack/vector-memory": "0.308.6",
-    "@wrongstack/security-scanner": "0.308.6",
-    "@wrongstack/webui": "0.308.6",
-    "@wrongstack/webui-hq": "0.308.6",
-    "@wrongstack/webui-server": "0.308.6"
+    "@wrongstack/acp": "0.309.0",
+    "@wrongstack/core": "0.309.0",
+    "@wrongstack/kanban": "0.309.0",
+    "@wrongstack/bench": "0.309.0",
+    "@wrongstack/mcp": "0.309.0",
+    "@wrongstack/providers": "0.309.0",
+    "@wrongstack/requirement-intake": "0.309.0",
+    "@wrongstack/persistence": "0.309.0",
+    "@wrongstack/plug-lsp": "0.309.0",
+    "@wrongstack/sage": "0.309.0",
+    "@wrongstack/runtime": "0.309.0",
+    "@wrongstack/plugins": "0.309.0",
+    "@wrongstack/security-scanner": "0.309.0",
+    "@wrongstack/simpleui": "0.309.0",
+    "@wrongstack/sdd": "0.309.0",
+    "@wrongstack/telegram": "0.309.0",
+    "@wrongstack/techstack": "0.309.0",
+    "@wrongstack/tui": "0.309.0",
+    "@wrongstack/tools": "0.309.0",
+    "@wrongstack/vector-memory": "0.309.0",
+    "@wrongstack/webui": "0.309.0",
+    "@wrongstack/webui-hq": "0.309.0",
+    "@wrongstack/webui-server": "0.309.0"
   },
   "optionalDependencies": {
-    "@wrongstack/desktop": "0.308.6"
+    "@wrongstack/desktop": "0.309.0"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",