@wrongstack/cli 0.63.4 → 0.66.13

package/dist/index.js

@@ -2,12 +2,13 @@
 import * as path8 from 'path';
 import { join } from 'path';
 import * as fsp3 from 'fs/promises';
-import { color, writeErr, DefaultTaskStore, TaskTracker, renderProgress, SpecStore, TaskGraphStore, analyzeCriticalPath, getTemplate, listTemplates, templateToMarkdown, SpecParser, renderSpecAnalysis, AISpecBuilder, renderTaskGraph, SpecVersioning, DefaultSecretScrubber, atomicWrite, DefaultPathResolver, TOKENS, mergeCustomModelDefs, DefaultSystemPromptBuilder, makeAutonomyPromptContributor, ToolRegistry, createContextManagerTool, EventBus, HookRegistry, HookRunner, SlashCommandRegistry, BrainDecisionQueue, ObservableBrainArbiter, HumanEscalatingBrainArbiter, DefaultBrainArbiter, createDelegateTool, FLEET_ROSTER, createMcpControlTool, DefaultLogger, DefaultModelsRegistry, isStdinTTY, writeOut, runProviderWithRetry, ReplayLogStore, ReplayProviderRunner, ProviderRegistry, InMemoryMetricsSink, wireMetricsToEvents, DefaultHealthRegistry, startMetricsServer, RecoveryLock, DefaultAttachmentStore, QueueStore, Context, loadTodosCheckpoint, attachTodosCheckpoint, loadDirectorState, loadPlan, createDefaultPipelines, resolveContextWindowPolicy, AutoCompactionMiddleware, estimateRequestTokensCalibrated, Agent, loadPlugins, FleetManager, makeDirectorSessionFactory, Director, makeFleetEmitTool, makeFleetStatusTool, resolveModelMatrix, AutoApprovePermissionPolicy, PhaseStore, AutoPhasePlanner, PhaseGraphBuilder, WorktreeManager, PhaseOrchestrator, makeLLMClassifier, ParallelEternalEngine, EternalAutonomyEngine, allServers as allServers$1, bootConfig as bootConfig$1, setRawMode, DefaultSessionReader, resolveWstackPaths, ToolAuditLog, DefaultSessionRewinder, DefaultSessionStore, DefaultPluginAPI, ProviderError, makeAgentSubagentRunner, NULL_FLEET_BUS, buildChildEnv, formatContextWindowModeList, repairToolUseAdjacency, getContextWindowMode, AGENTS_BY_PHASE, dispatchAgent, formatTodosList, SessionRecovery, loadGoal, goalFilePath, summarizeUsage, saveGoal, emptyGoal, buildGoalPreamble, formatGoal, pendingBtwCount, setBtwNote, MATRIX_PHASE_KEYS, AGENT_CATALOG, matrixKeyKind, onResize, ERROR_CODES, decryptConfigSecrets as decryptConfigSecrets$1, encryptConfigSecrets as encryptConfigSecrets$1, InputBuilder, FsError } from '@wrongstack/core';
+import { color, writeErr, DefaultTaskStore, TaskTracker, renderProgress, SpecStore, TaskGraphStore, analyzeCriticalPath, getTemplate, listTemplates, templateToMarkdown, SpecParser, renderSpecAnalysis, AISpecBuilder, renderTaskGraph, SpecVersioning, DefaultSecretScrubber, atomicWrite, DefaultPathResolver, TOKENS, mergeCustomModelDefs, DefaultSystemPromptBuilder, makeAutonomyPromptContributor, ToolRegistry, createContextManagerTool, EventBus, resolveSessionLoggingConfig, createSessionEventBridge, HookRegistry, HookRunner, SlashCommandRegistry, BrainDecisionQueue, ObservableBrainArbiter, HumanEscalatingBrainArbiter, DefaultBrainArbiter, createDelegateTool, FLEET_ROSTER, createMcpControlTool, DefaultLogger, DefaultModelsRegistry, isStdinTTY, writeOut, runProviderWithRetry, ReplayLogStore, ReplayProviderRunner, ProviderRegistry, InMemoryMetricsSink, wireMetricsToEvents, DefaultHealthRegistry, startMetricsServer, RecoveryLock, DefaultAttachmentStore, QueueStore, Context, loadTodosCheckpoint, attachTodosCheckpoint, loadDirectorState, loadPlan, createDefaultPipelines, resolveContextWindowPolicy, resolveAuditLevel, AutoCompactionMiddleware, estimateRequestTokensCalibrated, Agent, loadPlugins, FleetManager, makeDirectorSessionFactory, Director, makeFleetEmitTool, makeFleetStatusTool, resolveModelMatrix, AutoApprovePermissionPolicy, PhaseStore, AutoPhasePlanner, PhaseGraphBuilder, WorktreeManager, PhaseOrchestrator, makeLLMClassifier, ParallelEternalEngine, EternalAutonomyEngine, allServers as allServers$1, bootConfig as bootConfig$1, setRawMode, DefaultSessionReader, resolveWstackPaths, ToolAuditLog, DefaultSessionRewinder, DefaultSessionStore, DefaultPluginAPI, ProviderError, makeAgentSubagentRunner, NULL_FLEET_BUS, buildChildEnv, formatContextWindowModeList, repairToolUseAdjacency, getContextWindowMode, AGENTS_BY_PHASE, dispatchAgent, formatTodosList, SessionRecovery, loadGoal, goalFilePath, summarizeUsage, saveGoal, emptyGoal, buildGoalPreamble, formatGoal, pendingBtwCount, setBtwNote, MATRIX_PHASE_KEYS, AGENT_CATALOG, matrixKeyKind, onResize, ERROR_CODES, decryptConfigSecrets as decryptConfigSecrets$1, encryptConfigSecrets as encryptConfigSecrets$1, InputBuilder, FsError } from '@wrongstack/core';
 import { createRequire } from 'module';
 import * as os2 from 'os';
 import os2__default from 'os';
 import * as crypto2 from 'crypto';
 import { randomUUID } from 'crypto';
+import { findFreePort, createHttpServer, openBrowser, registerInstance, unregisterInstance } from '@wrongstack/webui/server';
 import { DefaultSecretVault, decryptConfigSecrets, encryptConfigSecrets, isSecretField } from '@wrongstack/core/security';
 import { WebSocketServer, WebSocket } from 'ws';
 import { MCPRegistry, MCPServer, serveHttp, serveStdio } from '@wrongstack/mcp';
@@ -1694,13 +1695,63 @@ __export(webui_server_exports, {
   runWebUI: () => runWebUI
 });
 async function runWebUI(opts) {
-  const port = opts.port ?? 3457;
+  const host = "127.0.0.1";
+  const requestedWsPort = opts.port ?? 3457;
+  const requestedHttpPort = opts.httpPort ?? 3456;
+  const strictPort = process.env["WEBUI_STRICT_PORT"] === "1" || process.env["WEBUI_STRICT_PORT"] === "true";
+  let httpPort = requestedHttpPort;
+  let wsPort = requestedWsPort;
+  if (!strictPort) {
+    httpPort = await findFreePort(host, requestedHttpPort);
+    wsPort = await findFreePort(host, requestedWsPort, { exclude: /* @__PURE__ */ new Set([httpPort]) });
+  }
+  const port = wsPort;
+  const rateLimitMax = Number.parseInt(process.env["WEBUI_RATE_LIMIT"] ?? "0", 10);
   const clients = /* @__PURE__ */ new Map();
+  const pendingConfirms = /* @__PURE__ */ new Map();
   const secretScrubber = new DefaultSecretScrubber();
   let abortController = null;
   const authToken = crypto2.randomBytes(16).toString("hex");
-  const wss = new WebSocketServer({ port, host: "127.0.0.1", maxPayload: 1 * 1024 * 1024 });
-  console.log(`[WebUI] WebSocket server starting on ws://127.0.0.1:${port}`);
+  const wss = new WebSocketServer({ port, host, maxPayload: 1 * 1024 * 1024 });
+  console.log(`[WebUI] WebSocket server starting on ws://${host}:${port}`);
+  let httpServer = null;
+  try {
+    const requireFromHere = createRequire(import.meta.url);
+    const serverEntry = requireFromHere.resolve("@wrongstack/webui/server");
+    const distDir = path8.resolve(path8.dirname(serverEntry), "..");
+    httpServer = createHttpServer({ host, distDir, wsPort });
+    const openUrl = `http://${host}:${httpPort}`;
+    httpServer.listen(httpPort, host, () => {
+      console.log(
+        `
+  \u25B8 WebUI ready \u2014 open \x1B[1m${openUrl}\x1B[0m in your browser
+    (same agent as this terminal \xB7 ws:${wsPort})
+`
+      );
+      if (opts.open) openBrowser(openUrl);
+    });
+  } catch (err) {
+    console.warn(
+      `[WebUI] Frontend not served (run \`pnpm --filter @wrongstack/webui build\`): ${err instanceof Error ? err.message : String(err)}. WS bridge still active on ws://${host}:${wsPort}.`
+    );
+  }
+  const registryBaseDir = opts.globalConfigPath ? path8.dirname(opts.globalConfigPath) : void 0;
+  if (opts.projectRoot) {
+    void registerInstance(
+      {
+        pid: process.pid,
+        httpPort,
+        wsPort,
+        host,
+        projectRoot: opts.projectRoot,
+        projectName: path8.basename(opts.projectRoot) || opts.projectRoot,
+        startedAt: (/* @__PURE__ */ new Date()).toISOString(),
+        url: `http://${host}:${httpPort}`
+      },
+      registryBaseDir
+    ).catch(() => {
+    });
+  }
   const eventUnsubscribers = [];
   function setupEvents() {
     for (const unsub of eventUnsubscribers) unsub();
@@ -1794,6 +1845,88 @@ async function runWebUI(opts) {
         });
       })
     );
+    eventUnsubscribers.push(
+      opts.events.on("tool.confirm_needed", (e) => {
+        const id = e.toolUseId ?? `confirm_${Date.now()}`;
+        pendingConfirms.set(id, e.resolve);
+        broadcast({
+          type: "tool.confirm_needed",
+          payload: {
+            id,
+            toolName: e.tool?.name ?? "unknown",
+            input: secretScrubber.scrubObject(e.input),
+            suggestedPattern: e.suggestedPattern
+          }
+        });
+      })
+    );
+    const forwardSubagent = (kind, payload) => broadcast({ type: "subagent.event", payload: { kind, ...payload } });
+    eventUnsubscribers.push(
+      opts.events.on(
+        "subagent.spawned",
+        (e) => forwardSubagent("spawned", {
+          subagentId: e.subagentId,
+          taskId: e.taskId,
+          name: e.name,
+          provider: e.provider,
+          model: e.model,
+          description: e.description
+        })
+      ),
+      opts.events.on(
+        "subagent.task_started",
+        (e) => forwardSubagent("task_started", {
+          subagentId: e.subagentId,
+          taskId: e.taskId,
+          description: e.description
+        })
+      ),
+      opts.events.on(
+        "subagent.tool_executed",
+        (e) => forwardSubagent("tool_executed", {
+          subagentId: e.subagentId,
+          toolName: e.name,
+          durationMs: e.durationMs,
+          ok: e.ok
+        })
+      ),
+      opts.events.on(
+        "subagent.iteration_summary",
+        (e) => forwardSubagent("iteration_summary", {
+          subagentId: e.subagentId,
+          iteration: e.iteration,
+          toolCalls: e.toolCalls,
+          costUsd: e.costUsd,
+          currentTool: e.currentTool
+        })
+      ),
+      opts.events.on(
+        "subagent.budget_extended",
+        (e) => forwardSubagent("budget_extended", {
+          subagentId: e.subagentId,
+          totalExtensions: e.totalExtensions
+        })
+      ),
+      opts.events.on(
+        "subagent.ctx_pct",
+        (e) => forwardSubagent("ctx_pct", {
+          subagentId: e.subagentId,
+          load: e.load,
+          tokens: e.tokens,
+          maxContext: e.maxContext
+        })
+      ),
+      opts.events.on(
+        "subagent.task_completed",
+        (e) => forwardSubagent("task_completed", {
+          subagentId: e.subagentId,
+          status: e.status,
+          iterations: e.iterations,
+          toolCalls: e.toolCalls,
+          error: e.error ? { kind: e.error.kind, message: e.error.message } : void 0
+        })
+      )
+    );
     if (opts.subscribeEternalIteration) {
       eventUnsubscribers.push(
         opts.subscribeEternalIteration((entry) => {
@@ -1814,10 +1947,11 @@ async function runWebUI(opts) {
       );
     }
   }
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     wss.on("listening", () => {
-      console.log(`[WebUI] WebSocket server running on ws://127.0.0.1:${port}`);
+      console.log(`[WebUI] WebSocket server running on ws://${host}:${port}`);
       setupEvents();
+      opts.onListening?.({ httpPort, wsPort, host });
     });
     wss.on("connection", (ws, req2) => {
       const isLoopback = (hostname) => hostname === "localhost" || hostname === "127.0.0.1" || hostname === "::1" || hostname === "[::1]";
@@ -1870,17 +2004,19 @@ async function runWebUI(opts) {
       let msgCount = 0;
       let windowResetAt = Date.now() + 6e4;
       ws.on("message", async (data) => {
-        const now = Date.now();
-        if (now > windowResetAt) {
-          msgCount = 0;
-          windowResetAt = now + 6e4;
-        }
-        if (++msgCount > 60) {
-          send(ws, {
-            type: "error",
-            payload: { phase: "rate_limit", message: "Too many messages. Please wait." }
-          });
-          return;
+        if (rateLimitMax > 0) {
+          const now = Date.now();
+          if (now > windowResetAt) {
+            msgCount = 0;
+            windowResetAt = now + 6e4;
+          }
+          if (++msgCount > rateLimitMax) {
+            send(ws, {
+              type: "error",
+              payload: { phase: "rate_limit", message: "Too many messages. Please wait." }
+            });
+            return;
+          }
         }
         try {
           const msg = JSON.parse(data.toString());
@@ -1892,6 +2028,12 @@ async function runWebUI(opts) {
       ws.on("close", () => {
         console.log("[WebUI] Client disconnected");
         clients.delete(ws);
+        if (clients.size === 0 && pendingConfirms.size > 0) {
+          for (const [id, resolve5] of pendingConfirms) {
+            resolve5("no");
+            pendingConfirms.delete(id);
+          }
+        }
       });
       send(ws, {
         type: "session.start",
@@ -1913,9 +2055,12 @@ async function runWebUI(opts) {
         ws.close();
       }
       clients.clear();
+      void unregisterInstance(process.pid, registryBaseDir).catch(() => {
+      });
+      httpServer?.close();
       wss.close(() => {
         console.log("[WebUI] Server stopped");
-        resolve3();
+        resolve4();
       });
     }
     process.on("SIGINT", shutdown);
@@ -1940,6 +2085,15 @@ async function runWebUI(opts) {
       case "ping":
         send(ws, { type: "pong", payload: {} });
         break;
+      case "tool.confirm_result": {
+        const { id, decision } = msg.payload;
+        const resolve4 = pendingConfirms.get(id);
+        if (resolve4) {
+          pendingConfirms.delete(id);
+          resolve4(decision);
+        }
+        break;
+      }
       case "providers.list":
         await handleProvidersList(ws);
         break;
@@ -2396,6 +2550,7 @@ function positiveNumber(value) {
 var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "yolo",
   "yolo-destructive",
+  "confirm-destructive",
   "force-all-yolo",
   "verbose",
   "trace",
@@ -2414,6 +2569,7 @@ var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "prompt",
   "metrics",
   "webui",
+  "open",
   "no-check",
   "no-models-refresh",
   "director",
@@ -6529,13 +6685,13 @@ function buildYoloCommand(opts) {
     description: "Toggle or query YOLO (auto-approve) mode.",
     help: [
       "Usage:",
-      "  /yolo          Show current YOLO status",
-      "  /yolo on       Enable YOLO mode (auto-approve normal project work)",
-      "  /yolo off      Disable YOLO mode (restore permission prompts)",
-      "  /yolo toggle   Toggle YOLO mode",
+      "  /yolo              Show current YOLO status",
+      "  /yolo on           Enable YOLO mode (auto-approve all tool calls)",
+      "  /yolo off          Disable YOLO mode (restore permission prompts)",
+      "  /yolo destructive  Toggle destructive confirmation gate (YOLO mode only)",
       "",
-      "YOLO mode auto-approves normal in-project tool calls, including simple shell commands.",
-      "Clearly destructive calls may still ask unless --yolo-destructive is enabled."
+      "YOLO mode auto-approves everything, including destructive calls.",
+      "Use /yolo destructive to re-enable confirmation for risky operations."
     ].join("\n"),
     async run(args) {
       const arg = args.trim().toLowerCase();
@@ -6717,10 +6873,10 @@ async function runProjectCheck(opts) {
     if (answer2 === "y" || answer2 === "yes") {
       try {
         const { spawn: spawn3 } = await import('child_process');
-        await new Promise((resolve3, reject) => {
+        await new Promise((resolve4, reject) => {
           const child = spawn3("git", ["init"], { cwd: projectRoot });
           child.on("error", reject);
-          child.on("close", (code) => code === 0 ? resolve3() : reject(new Error(`git init failed with ${code}`)));
+          child.on("close", (code) => code === 0 ? resolve4() : reject(new Error(`git init failed with ${code}`)));
         });
         renderer.write(`  ${color.green("\u2713")} Git repository initialized
 `);
@@ -6864,7 +7020,7 @@ var ReadlineInputReader = class {
   async readLine(prompt) {
     if (this.history.length === 0) await this.loadHistory();
     while (this.pending) {
-      await new Promise((resolve3) => setTimeout(resolve3, 50));
+      await new Promise((resolve4) => setTimeout(resolve4, 50));
     }
     this.pending = true;
     try {
@@ -6874,15 +7030,15 @@ var ReadlineInputReader = class {
         this.rl = void 0;
       }
       const fresh = this.ensure();
-      return new Promise((resolve3) => {
+      return new Promise((resolve4) => {
         fresh.question(prompt ?? "> ", (line) => {
           if (line.trim()) {
             this.history.push(line);
             void this.saveHistory();
           }
-          resolve3(line);
+          resolve4(line);
         });
-        fresh.once("close", () => resolve3(""));
+        fresh.once("close", () => resolve4(""));
       }).then((result) => {
         this.rl?.close();
         this.rl = void 0;
@@ -6894,7 +7050,7 @@ var ReadlineInputReader = class {
   }
   async readKey(prompt, options) {
     writeOut(prompt);
-    return new Promise((resolve3) => {
+    return new Promise((resolve4) => {
       const stdin = process.stdin;
       const wasRaw = stdin.isRaw;
       const wasPaused = stdin.isPaused();
@@ -6905,7 +7061,7 @@ var ReadlineInputReader = class {
         if (key === "") {
           cleanup();
           writeOut("\n");
-          resolve3("");
+          resolve4("");
           return;
         }
         const opt = options.find(
@@ -6915,12 +7071,12 @@ var ReadlineInputReader = class {
           cleanup();
           writeOut(`${opt.key}
 `);
-          resolve3(opt.value);
+          resolve4(opt.value);
         }
       };
       const onClose = () => {
         cleanup();
-        resolve3("");
+        resolve4("");
       };
       const cleanup = () => {
         stdin.off("data", onData);
@@ -6948,7 +7104,7 @@ var ReadlineInputReader = class {
     this.rl?.close();
     this.rl = void 0;
     writeOut(prompt);
-    return new Promise((resolve3) => {
+    return new Promise((resolve4) => {
       let buf = "";
       const wasRaw = stdin.isRaw;
       setRawMode(stdin, true);
@@ -6966,7 +7122,7 @@ var ReadlineInputReader = class {
             cleanup();
             writeOut(`  ${dim(`[${buf.length} chars]`)}
 `);
-            resolve3(buf);
+            resolve4(buf);
             return;
           }
           if (ch === "") {
@@ -8870,8 +9026,9 @@ var updateCmd = async (args, deps) => {
   deps.renderer.write(`Updating wrongstack from v${info.current} to v${info.latest}...
 `);
   try {
-    const result = await new Promise((resolve3, reject) => {
-      const child = spawn("npm", ["install", "-g", "wrongstack@latest"], {
+    const result = await new Promise((resolve4, reject) => {
+      const npmCommand = process.platform === "win32" ? "npm.cmd" : "npm";
+      const child = spawn(npmCommand, ["install", "-g", "wrongstack@latest"], {
         cwd,
         stdio: "pipe"
       });
@@ -8880,7 +9037,7 @@ var updateCmd = async (args, deps) => {
         _stderr += d;
       });
       child.on("error", reject);
-      child.on("close", (code) => resolve3({ code: code ?? 0 }));
+      child.on("close", (code) => resolve4({ code: code ?? 0 }));
     });
     if (result.code === 0) {
       deps.renderer.write(`
@@ -9337,8 +9494,8 @@ async function serveMcpStdio(deps) {
     log(
       `wrongstack MCP server ready at ${handle2.url} \u2014 exposing ${allowed.length} tool(s) (${mode})${token ? " [token auth]" : ""}.`
     );
-    await new Promise((resolve3) => {
-      const stop = () => resolve3();
+    await new Promise((resolve4) => {
+      const stop = () => resolve4();
       process.once("SIGINT", stop);
       process.once("SIGTERM", stop);
     });
@@ -10700,10 +10857,13 @@ var helpCmd = async (_args, deps) => {
     "  wstack version               Print version",
     "",
     color.bold("Common flags"),
-    "  --yolo                       Auto-approve normal in-project tool calls",
-    "  --yolo-destructive           Also auto-approve clearly destructive YOLO-gated calls",
-    "  --force-all-yolo             Deprecated alias for --yolo-destructive",
+    "  --yolo                       Auto-approve all tool calls (including destructive)",
+    "  --confirm-destructive         In YOLO mode, still prompt for destructive operations",
+    "  --yolo-destructive            Deprecated \u2014 YOLO now auto-approves everything by default",
     "  --tui / --no-tui             Force or disable TUI mode",
+    "  --webui [--port <n>] [--open] Serve the browser UI + WS bridge (prints a URL,",
+    "                               --open pops the browser; shares this terminal's",
+    "                               agent; auto-picks free ports)",
     '  --eternal "<mission>"        Start an eternal-autonomy loop',
     "  --no-hints                   Hide launch hints"
   ];
@@ -10932,6 +11092,10 @@ async function boot(argv) {
       return 2;
     }
   }
+  if (flags["webui"]) {
+    flags["tui"] = false;
+    flags["no-tui"] = true;
+  }
   if (isInteractiveTTY) {
     let modePinned;
     if (flags["no-tui"]) modePinned = "repl";
@@ -11370,7 +11534,7 @@ async function runRepl(opts) {
               `[eternal] ${err instanceof Error ? err.message : String(err)}`
             );
           }
-          await new Promise((resolve3) => setTimeout(resolve3, 250));
+          await new Promise((resolve4) => setTimeout(resolve4, 250));
           continue;
         }
       } else if (opts.getAutonomy?.() === "eternal-parallel") {
@@ -11416,7 +11580,7 @@ async function runRepl(opts) {
               `[parallel] ${err instanceof Error ? err.message : String(err)}`
             );
           }
-          await new Promise((resolve3) => setTimeout(resolve3, 250));
+          await new Promise((resolve4) => setTimeout(resolve4, 250));
           continue;
         }
       }
@@ -12066,7 +12230,7 @@ async function execute(deps) {
           ) + "\n"
         );
       }
-    } else if (flags.tui && !flags["no-tui"]) {
+    } else if (flags.tui && !flags["no-tui"] && !flags.webui) {
       agent.disableInteractiveConfirmation();
       const { runTui } = await import('@wrongstack/tui');
       renderer.setSilent(true);
@@ -12255,12 +12419,15 @@ async function execute(deps) {
         renderer.setSilent(false);
       }
     } else if (flags.webui) {
+      agent.disableInteractiveConfirmation();
       const { runWebUI: runWebUI2 } = await Promise.resolve().then(() => (init_webui_server(), webui_server_exports));
       const webuiPromise = runWebUI2({
         agent,
         events,
         session,
         port: Number.parseInt(String(flags.port ?? "3457"), 10),
+        projectRoot,
+        open: !!flags.open,
         modelsRegistry,
         globalConfigPath: wpaths.globalConfig,
         subscribeEternalIteration
@@ -13191,7 +13358,7 @@ function samplePaths(set) {
 }
 var WORKTREE_PHASE_CONCURRENCY = 4;
 function gitText(args, cwd) {
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     let out = "";
     const child = spawn("git", args, {
       cwd,
@@ -13204,8 +13371,8 @@ function gitText(args, cwd) {
     child.stderr?.on("data", (c) => {
       out += c.toString();
     });
-    child.on("error", () => resolve3({ code: 1, out }));
-    child.on("close", (code) => resolve3({ code: code ?? 1, out: out.trim() }));
+    child.on("error", () => resolve4({ code: 1, out }));
+    child.on("close", (code) => resolve4({ code: code ?? 1, out: out.trim() }));
   });
 }
 async function isGitRepo(cwd) {
@@ -13213,7 +13380,7 @@ async function isGitRepo(cwd) {
   return code === 0 && out.trim() === "true";
 }
 function runCmd(cmd, args, cwd, shell = false) {
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     let out = "";
     const child = spawn(cmd, args, {
       cwd,
@@ -13227,8 +13394,8 @@ function runCmd(cmd, args, cwd, shell = false) {
     child.stderr?.on("data", (c) => {
       out += c.toString();
     });
-    child.on("error", (e) => resolve3({ code: 1, out: `${out}${String(e)}` }));
-    child.on("close", (code) => resolve3({ code: code ?? 1, out: out.trim() }));
+    child.on("error", (e) => resolve4({ code: 1, out: `${out}${String(e)}` }));
+    child.on("close", (code) => resolve4({ code: code ?? 1, out: out.trim() }));
   });
 }
 function detectPackageManager2(root) {
@@ -13621,13 +13788,6 @@ function renderProgress3(ratio, width) {
   const capped = Math.min(width, filled);
   return FILLED2.repeat(capped) + EMPTY2.repeat(width - capped);
 }
-var createSessionEventBridge = (_writer, level) => ({
-  append: async (_e) => {
-  },
-  level: level ?? "standard",
-  allows: () => true
-});
-var resolveAuditLevel = (cfg) => cfg?.session?.auditLevel ?? "standard";
 function setupPipelines(params) {
   const { events, logger } = params;
   const pipelines = createDefaultPipelines();
@@ -14316,21 +14476,6 @@ async function launchEternalFromFlag(deps) {
 }
 
 // src/index.ts
-var createSessionEventBridge2 = (_writer, level, _opts) => ({
-  append: async (_e) => {
-  },
-  level: level ?? "standard",
-  allows: () => true
-});
-var resolveAuditLevel2 = (cfg) => cfg?.session?.auditLevel ?? "standard";
-var resolveSessionLoggingConfig = (cfg) => ({
-  auditLevel: resolveAuditLevel2(cfg),
-  sampling: {
-    toolProgress: {
-      sampleRate: cfg?.session?.sampling?.toolProgress?.sampleRate ?? 8
-    }
-  }
-});
 async function main(argv) {
   const ctx = await boot(argv);
   if (typeof ctx === "number") return ctx;
@@ -14358,6 +14503,7 @@ async function main(argv) {
     permission: {
       yolo: config.yolo,
       yoloDestructive: flags["yolo-destructive"] === true || flags["force-all-yolo"] === true,
+      confirmDestructive: flags["confirm-destructive"] === true,
       promptDelegate: makePromptDelegate(reader)
     },
     compactor: {
@@ -14548,9 +14694,13 @@ async function main(argv) {
   const detachTodosCheckpoint = sessResult.detachTodosCheckpoint;
   const priorFleetState = sessResult.priorFleetState;
   const sessionConfig = resolveSessionLoggingConfig(config);
-  const sessionBridge = createSessionEventBridge2(
+  const sessionBridge = createSessionEventBridge(
     session,
-    sessionConfig.auditLevel);
+    sessionConfig.auditLevel,
+    {
+      sampling: sessionConfig.sampling
+    }
+  );
   const stats = new SessionStats(events, tokenCounter);
   const errorRing = [];
   events.on("error", (e) => {
@@ -15460,7 +15610,7 @@ Restart WrongStack to load or unload plugin code in this session.`;
       const { spawn: spawn3 } = await import('child_process');
       const cwd2 = projectRoot;
       const statusResult = await new Promise(
-        (resolve3, reject) => {
+        (resolve4, reject) => {
           const child = spawn3("git", ["status", "--porcelain"], {
             cwd: cwd2,
             stdio: ["ignore", "pipe", "pipe"]
@@ -15470,7 +15620,7 @@ Restart WrongStack to load or unload plugin code in this session.`;
             stdout += d;
           });
           child.on("error", reject);
-          child.on("close", (code) => resolve3({ stdout, code: code ?? 0 }));
+          child.on("close", (code) => resolve4({ stdout, code: code ?? 0 }));
         }
       );
       if (statusResult.stdout.trim().length > 0) {