@wrongstack/cli 0.7.5 → 0.7.7

package/dist/index.js

@@ -1,21 +1,23 @@
 #!/usr/bin/env node
-import * as path23 from 'path';
+import * as path24 from 'path';
 import { join } from 'path';
 import * as fsp2 from 'fs/promises';
 import { readdir, readFile } from 'fs/promises';
-import { color, DefaultPathResolver, TOKENS, DefaultSystemPromptBuilder, makeAutonomyPromptContributor, ToolRegistry, createContextManagerTool, EventBus, SlashCommandRegistry, createDelegateTool, FLEET_ROSTER, createMcpControlTool, EternalAutonomyEngine, DefaultLogger, DefaultModelsRegistry, ProviderRegistry, InMemoryMetricsSink, wireMetricsToEvents, DefaultHealthRegistry, startMetricsServer, RecoveryLock, DefaultAttachmentStore, QueueStore, Context, loadTodosCheckpoint, attachTodosCheckpoint, loadDirectorState, loadPlan, createDefaultPipelines, AutoCompactionMiddleware, estimateRequestTokens, Agent, loadPlugins, FleetManager, makeDirectorSessionFactory, Director, AutoApprovePermissionPolicy, makeLLMClassifier, resolveWstackPaths, DefaultSecretVault, migratePlaintextSecrets, DefaultConfigLoader, DefaultSessionReader, DefaultSessionRewinder, DefaultSessionStore, atomicWrite, DefaultPluginAPI, makeAgentSubagentRunner, NULL_FLEET_BUS, formatContextWindowModeList, repairToolUseAdjacency, getContextWindowMode, resolveContextWindowPolicy, AGENTS_BY_PHASE, dispatchAgent, formatTodosList, emptyPlan, clearPlan, savePlan, formatPlanTemplates, getPlanTemplate, addPlanItem, formatPlan, deriveTodosFromPlanItem, removePlanItem, setPlanItemStatus, SpecStore, TaskGraphStore, analyzeCriticalPath, getTemplate, listTemplates, templateToMarkdown, SpecParser, renderSpecAnalysis, AISpecBuilder, DefaultTaskStore, TaskTracker, renderProgress, renderTaskGraph, loadGoal, goalFilePath, summarizeUsage, saveGoal, emptyGoal, buildGoalPreamble, formatGoal, InputBuilder, FsError, ERROR_CODES, projectHash, WrongStackError, defaultOrchestrator, decryptConfigSecrets, encryptConfigSecrets as encryptConfigSecrets$1, SpecVersioning, ParallelEternalEngine, allServers as allServers$1 } from '@wrongstack/core';
+import { color, DefaultPathResolver, TOKENS, DefaultSystemPromptBuilder, makeAutonomyPromptContributor, ToolRegistry, createContextManagerTool, EventBus, SlashCommandRegistry, createDelegateTool, FLEET_ROSTER, createMcpControlTool, EternalAutonomyEngine, DefaultLogger, DefaultModelsRegistry, ProviderRegistry, InMemoryMetricsSink, wireMetricsToEvents, DefaultHealthRegistry, startMetricsServer, RecoveryLock, DefaultAttachmentStore, QueueStore, Context, loadTodosCheckpoint, attachTodosCheckpoint, loadDirectorState, loadPlan, createDefaultPipelines, AutoCompactionMiddleware, estimateRequestTokens, Agent, loadPlugins, FleetManager, makeDirectorSessionFactory, Director, AutoApprovePermissionPolicy, makeLLMClassifier, resolveWstackPaths, DefaultSecretVault, migratePlaintextSecrets, DefaultConfigLoader, DefaultSessionReader, DefaultSessionRewinder, DefaultSessionStore, atomicWrite, DefaultPluginAPI, makeAgentSubagentRunner, NULL_FLEET_BUS, formatContextWindowModeList, repairToolUseAdjacency, getContextWindowMode, resolveContextWindowPolicy, AGENTS_BY_PHASE, dispatchAgent, formatTodosList, emptyPlan, clearPlan, savePlan, formatPlanTemplates, getPlanTemplate, addPlanItem, formatPlan, deriveTodosFromPlanItem, removePlanItem, setPlanItemStatus, SpecStore, TaskGraphStore, analyzeCriticalPath, getTemplate, listTemplates, templateToMarkdown, SpecParser, renderSpecAnalysis, AISpecBuilder, DefaultTaskStore, TaskTracker, renderProgress, renderTaskGraph, loadGoal, goalFilePath, summarizeUsage, saveGoal, emptyGoal, buildGoalPreamble, formatGoal, pendingBtwCount, setBtwNote, InputBuilder, FsError, ERROR_CODES, projectHash, WrongStackError, defaultOrchestrator, decryptConfigSecrets, encryptConfigSecrets as encryptConfigSecrets$1, SpecVersioning, ParallelEternalEngine, allServers as allServers$1 } from '@wrongstack/core';
 import { createRequire } from 'module';
 import * as os6 from 'os';
 import os6__default from 'os';
 import * as crypto2 from 'crypto';
 import { randomUUID } from 'crypto';
-import { DefaultSecretVault as DefaultSecretVault$1, encryptConfigSecrets, decryptConfigSecrets as decryptConfigSecrets$1 } from '@wrongstack/core/security';
+import { DefaultSecretVault as DefaultSecretVault$1, encryptConfigSecrets, isSecretField, decryptConfigSecrets as decryptConfigSecrets$1 } from '@wrongstack/core/security';
 import { WebSocketServer, WebSocket } from 'ws';
 import { MCPRegistry } from '@wrongstack/mcp';
 import { buildProviderFactoriesFromRegistry, makeProviderFromConfig, capabilitiesFor } from '@wrongstack/providers';
 import { createDefaultContainer, routeImagesForModel, readClipboardImage } from '@wrongstack/runtime';
 import { builtinToolsPack, rememberTool, forgetTool } from '@wrongstack/tools';
 import * as readline from 'readline';
+import * as fs4 from 'fs';
+import { writeFileSync } from 'fs';
 import { spawn } from 'child_process';
 import { SkillInstaller } from '@wrongstack/core/skills';
 import { WrongStackACPServer } from '@wrongstack/acp/agent';
@@ -24,7 +26,6 @@ import { ACP_AGENTS, SubagentBudget } from '@wrongstack/core/coordination';
 import { allServers } from '@wrongstack/core/infrastructure';
 import { createToolVisionAdapters } from '@wrongstack/runtime/vision';
 import { ToolExecutor } from '@wrongstack/core/execution';
-import { writeFileSync } from 'fs';
 
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -64,8 +65,10 @@ __export(sdd_exports, {
   getActiveSDDPhase: () => getActiveSDDPhase,
   getCurrentExecutingContext: () => getCurrentExecutingContext,
   getCurrentTask: () => getCurrentTask,
+  getTaskGraphId: () => getTaskGraphId,
   getTaskListText: () => getTaskListText,
   getTaskProgress: () => getTaskProgress,
+  getTaskTracker: () => getTaskTracker,
   markTaskCompleted: () => markTaskCompleted,
   renderTaskListWithProgress: () => renderTaskListWithProgress,
   trySaveImplementationPlan: () => trySaveImplementationPlan,
@@ -380,10 +383,9 @@ function buildSddCommand(opts) {
     name: "sdd",
     description: "AI-driven SDD: /sdd [new|approve|execute|cancel|status|list|show|templates]",
     async run(args) {
-      const ctx = opts.context;
-      const projectRoot = ctx?.projectRoot ?? process.cwd();
-      const specsDir = path23.join(projectRoot, ".wrongstack", "specs");
-      const graphsDir = path23.join(projectRoot, ".wrongstack", "task-graphs");
+      opts.context;
+      const specsDir = opts.paths.projectSpecs;
+      const graphsDir = opts.paths.projectTaskGraphs;
       const specStore = new SpecStore({ baseDir: specsDir });
       new TaskGraphStore({ baseDir: graphsDir });
       const versioning = sddState.getVersioning();
@@ -399,10 +401,10 @@ function buildSddCommand(opts) {
           const forceFlag = rest.includes("--force") || rest.includes("-f");
           const title = rest.filter((a) => !a.startsWith("-")).join(" ").trim() || "Untitled Feature";
           if (!sessionState.getBuilder() && !forceFlag) {
-            const sessionPath = path23.join(projectRoot, ".wrongstack", "sdd-session.json");
+            const sessionPath = opts.paths.projectSddSession;
             try {
               await fsp2.access(sessionPath);
-              const projectContext2 = await gatherProjectContext(projectRoot);
+              const projectContext2 = await gatherProjectContext(opts.context?.projectRoot ?? process.cwd());
               const tempBuilder = new AISpecBuilder({
                 store: specStore,
                 projectContext: projectContext2,
@@ -428,13 +430,13 @@ function buildSddCommand(opts) {
             }
           }
           sddState.clearTaskState();
-          const projectContext = await gatherProjectContext(projectRoot);
+          const projectContext = await gatherProjectContext(opts.context?.projectRoot ?? process.cwd());
           sddState.setBuilder(new AISpecBuilder({
             store: specStore,
             projectContext,
             minQuestions: 2,
             maxQuestions: 10,
-            sessionPath: path23.join(projectRoot, ".wrongstack", "sdd-session.json")
+            sessionPath: opts.paths.projectSddSession
           }));
           sddState.setSessionStartTime(Date.now());
           sddState.setPhaseStartTime(Date.now());
@@ -547,8 +549,16 @@ Start executing the tasks one by one.`
           };
         }
         // ── Task Execution ─────────────────────────────────────────────────
-        case "execute":
-        case "run": {
+        case "run":
+        case "execute": {
+          if (opts.onSddParallelRun) {
+            const slotsArg = restJoined.trim();
+            const slots = slotsArg ? Number.parseInt(slotsArg, 10) : void 0;
+            const message = await opts.onSddParallelRun(
+              slots && Number.isFinite(slots) ? { parallelSlots: Math.min(16, Math.max(1, slots)) } : {}
+            );
+            return { message };
+          }
           const runBuilder = sddState.getBuilder();
           if (!runBuilder) {
             return {
@@ -572,6 +582,21 @@ User message:
 Start executing the tasks one by one.`
           };
         }
+        case "parallel": {
+          if (!opts.onSddParallelRun) {
+            return { message: "SDD parallel run is not available in this session." };
+          }
+          const slotsArg = restJoined.trim();
+          const slots = slotsArg ? Number.parseInt(slotsArg, 10) : void 0;
+          const message = await opts.onSddParallelRun(
+            slots && Number.isFinite(slots) ? { parallelSlots: Math.min(16, Math.max(1, slots)) } : {}
+          );
+          return { message };
+        }
+        case "stop": {
+          opts.onSddParallelStop?.();
+          return { message: "SDD parallel run stopped." };
+        }
         case "plan":
         case "impl": {
           const planBuilder = sddState.getBuilder();
@@ -1001,7 +1026,7 @@ Start executing the tasks one by one.`
             return { message: lines2.join("\n") };
           }
           try {
-            const graphStore2 = new TaskGraphStore({ baseDir: path23.join(projectRoot, ".wrongstack", "task-graphs") });
+            const graphStore2 = new TaskGraphStore({ baseDir: opts.paths.projectTaskGraphs });
             const stored = await graphStore2.load(graphId);
             if (stored) {
               return { message: renderTaskGraph(stored, { compact: false }) };
@@ -1026,7 +1051,7 @@ Start executing the tasks one by one.`
           return { message: lines.join("\n") };
         }
         case "cancel": {
-          const sessionPath = path23.join(projectRoot, ".wrongstack", "sdd-session.json");
+          const sessionPath = opts.paths.projectSddSession;
           let deletedFromDisk = false;
           try {
             await fsp2.unlink(sessionPath);
@@ -1034,11 +1059,11 @@ Start executing the tasks one by one.`
           } catch {
           }
           try {
-            await fsp2.rm(path23.join(projectRoot, ".wrongstack", "specs"), { recursive: true, force: true });
+            await fsp2.rm(opts.paths.projectSpecs, { recursive: true, force: true });
           } catch {
           }
           try {
-            await fsp2.rm(path23.join(projectRoot, ".wrongstack", "task-graphs"), { recursive: true, force: true });
+            await fsp2.rm(opts.paths.projectTaskGraphs, { recursive: true, force: true });
           } catch {
           }
           const cancelBuilder = sddState.getBuilder();
@@ -1058,8 +1083,8 @@ Start executing the tasks one by one.`
           if (sddState.getBuilder()) {
             return { message: "An SDD session is already active. Use /sdd cancel first." };
           }
-          const sessionPath = path23.join(projectRoot, ".wrongstack", "sdd-session.json");
-          const projectContext = await gatherProjectContext(projectRoot);
+          const sessionPath = opts.paths.projectSddSession;
+          const projectContext = await gatherProjectContext(opts.context?.projectRoot ?? process.cwd());
           sddState.setBuilder(new AISpecBuilder({
             store: specStore,
             projectContext,
@@ -1222,7 +1247,7 @@ ${lines.join("\n")}`
             return { message: "No task graph found. Generate tasks first." };
           }
           try {
-            const graphStore2 = new TaskGraphStore({ baseDir: path23.join(projectRoot, ".wrongstack", "task-graphs") });
+            const graphStore2 = new TaskGraphStore({ baseDir: opts.paths.projectTaskGraphs });
             const graph = await graphStore2.load(graphId);
             if (!graph) {
               return { message: "Could not load task graph." };
@@ -1373,7 +1398,7 @@ function sddHelp() {
 async function gatherProjectContext(projectRoot) {
   const parts = [];
   try {
-    const pkgPath = path23.join(projectRoot, "package.json");
+    const pkgPath = path24.join(projectRoot, "package.json");
     const pkgRaw = await fsp2.readFile(pkgPath, "utf8");
     const pkg = JSON.parse(pkgRaw);
     parts.push(`Project: ${String(pkg.name ?? "unknown")}`);
@@ -1389,13 +1414,13 @@ async function gatherProjectContext(projectRoot) {
   } catch {
   }
   try {
-    const tsconfigPath = path23.join(projectRoot, "tsconfig.json");
+    const tsconfigPath = path24.join(projectRoot, "tsconfig.json");
     await fsp2.access(tsconfigPath);
     parts.push("Language: TypeScript");
   } catch {
   }
   try {
-    const srcDir = path23.join(projectRoot, "src");
+    const srcDir = path24.join(projectRoot, "src");
     const entries = await fsp2.readdir(srcDir, { withFileTypes: true });
     const dirs = entries.filter((e) => e.isDirectory()).map((e) => e.name);
     if (dirs.length > 0) {
@@ -1416,6 +1441,12 @@ async function findSpec(store, idOrTitle) {
   if (match) return store.load(match.id);
   return null;
 }
+function getTaskGraphId() {
+  return sddState.getTaskGraphId();
+}
+function getTaskTracker() {
+  return sddState.getTaskTracker();
+}
 var SDD_META_KEY, SDDState, sddState;
 var init_sdd = __esm({
   "src/slash-commands/sdd.ts"() {
@@ -1545,7 +1576,7 @@ __export(update_check_exports, {
   getUpdateNotification: () => getUpdateNotification
 });
 function cachePath(homeFn = defaultHomeDir2) {
-  return path23.join(homeFn(), ".wrongstack", "update-cache.json");
+  return path24.join(homeFn(), ".wrongstack", "update-cache.json");
 }
 function currentVersion() {
   const req2 = createRequire(import.meta.url);
@@ -1582,7 +1613,7 @@ async function readCache(homeFn = defaultHomeDir2) {
 }
 async function writeCache(entry, homeFn = defaultHomeDir2) {
   try {
-    const dir = path23.dirname(cachePath(homeFn));
+    const dir = path24.dirname(cachePath(homeFn));
     await fsp2.mkdir(dir, { recursive: true });
     await fsp2.writeFile(cachePath(homeFn), JSON.stringify(entry, null, 2), "utf8");
   } catch {
@@ -1821,7 +1852,21 @@ async function runWebUI(opts) {
       const client = { ws, sessionId: opts.session.id };
       clients.set(ws, client);
       console.log("[WebUI] Client connected");
+      let msgCount = 0;
+      let windowResetAt = Date.now() + 6e4;
       ws.on("message", async (data) => {
+        const now = Date.now();
+        if (now > windowResetAt) {
+          msgCount = 0;
+          windowResetAt = now + 6e4;
+        }
+        if (++msgCount > 60) {
+          send(ws, {
+            type: "error",
+            payload: { phase: "rate_limit", message: "Too many messages. Please wait." }
+          });
+          return;
+        }
         try {
           const msg = JSON.parse(data.toString());
           await handleMessage(ws, client, msg);
@@ -2172,7 +2217,7 @@ async function runWebUI(opts) {
       return {};
     }
     if (!parsed.providers) return {};
-    const keyFile = path23.join(path23.dirname(opts.globalConfigPath), ".key");
+    const keyFile = path24.join(path24.dirname(opts.globalConfigPath), ".key");
     const vault = new DefaultSecretVault$1({ keyFile });
     return decryptConfigSecrets$1(parsed.providers, vault);
   }
@@ -2205,7 +2250,7 @@ async function runWebUI(opts) {
       parsed = {};
     }
     parsed.providers = providers;
-    const keyFile = path23.join(path23.dirname(opts.globalConfigPath), ".key");
+    const keyFile = path24.join(path24.dirname(opts.globalConfigPath), ".key");
     const vault = new DefaultSecretVault$1({ keyFile });
     const encrypted = encryptConfigSecrets(parsed, vault);
     await atomicWrite(opts.globalConfigPath, JSON.stringify(encrypted, null, 2), { mode: 384 });
@@ -2409,7 +2454,7 @@ function parseSpawnFlags(input) {
   return { description: rest.trim(), opts };
 }
 async function bootConfig(flags) {
-  const cwd = typeof flags["cwd"] === "string" ? path23.resolve(flags["cwd"]) : process.cwd();
+  const cwd = typeof flags["cwd"] === "string" ? path24.resolve(flags["cwd"]) : process.cwd();
   const pathResolver = new DefaultPathResolver(cwd);
   const projectRoot = pathResolver.projectRoot;
   const userHome = os6.homedir();
@@ -2476,7 +2521,7 @@ var ReadlineInputReader = class {
   history = [];
   pending = false;
   constructor(opts = {}) {
-    this.historyFile = opts.historyFile ?? path23.join(os6.homedir(), ".wrongstack", "history");
+    this.historyFile = opts.historyFile ?? path24.join(os6.homedir(), ".wrongstack", "history");
   }
   async loadHistory() {
     try {
@@ -2488,7 +2533,7 @@ var ReadlineInputReader = class {
   }
   async saveHistory() {
     try {
-      await fsp2.mkdir(path23.dirname(this.historyFile), { recursive: true });
+      await fsp2.mkdir(path24.dirname(this.historyFile), { recursive: true });
       await fsp2.writeFile(this.historyFile, this.history.slice(-1e3).join("\n"));
     } catch {
     }
@@ -2715,20 +2760,20 @@ function assertSafeToDelete(filename, parentDir) {
   if (PROTECTED_BASENAMES.has(filename)) {
     throw new Error(`Refusing to delete protected file: ${filename}`);
   }
-  if (filename !== path23.basename(filename)) {
+  if (filename !== path24.basename(filename)) {
     throw new Error(`Refusing to delete path with traversal: ${filename}`);
   }
   if (!filename.startsWith("config.json.") || !filename.endsWith(".bak")) {
     throw new Error(`Refusing to delete unknown file: ${filename}`);
   }
-  const resolvedParent = path23.resolve(parentDir);
+  const resolvedParent = path24.resolve(parentDir);
   if (!resolvedParent.endsWith(".wrongstack")) {
     throw new Error(`Unexpected parent directory for bak prune: ${resolvedParent}`);
   }
 }
 async function safeDelete(filePath) {
-  const dir = path23.dirname(filePath);
-  const filename = path23.basename(filePath);
+  const dir = path24.dirname(filePath);
+  const filename = path24.basename(filePath);
   try {
     assertSafeToDelete(filename, dir);
     await fsp2.unlink(filePath);
@@ -2743,7 +2788,7 @@ function maskConfigSecrets(cfg) {
   if (typeof cfg !== "object" || cfg === null) return {};
   const out = {};
   for (const [k, v] of Object.entries(cfg)) {
-    if (k === "apiKey" || k === "apiKeys" || k === "secret" || k === "secrets") {
+    if (isSecretField(k)) {
       out[k] = "[REDACTED]";
     } else if (typeof v === "object" && v !== null && !Array.isArray(v)) {
       out[k] = maskConfigSecrets(v);
@@ -2760,7 +2805,7 @@ function diffSummary(oldCfg, newCfg) {
     const o = JSON.stringify(oldCfg[k]);
     const n = JSON.stringify(newCfg[k]);
     if (o !== n) {
-      if (k === "apiKey" || k === "apiKeys" || k === "secret") {
+      if (isSecretField(k)) {
         changes.push(`${k}: [CHANGED]`);
       } else if (typeof newCfg[k] !== "object") {
         changes.push(`${k}: ${oldCfg[k] ?? "(unset)"} \u2192 ${newCfg[k]}`);
@@ -2773,16 +2818,16 @@ function diffSummary(oldCfg, newCfg) {
 }
 var defaultHomeDir = () => os6__default.homedir();
 function historyDir(homeFn = defaultHomeDir) {
-  return path23.join(homeFn(), ".wrongstack", "config.history", "entries");
+  return path24.join(homeFn(), ".wrongstack", "config.history", "entries");
 }
 function historyIndexPath(homeFn = defaultHomeDir) {
-  return path23.join(homeFn(), ".wrongstack", "config.history", "index.json");
+  return path24.join(homeFn(), ".wrongstack", "config.history", "index.json");
 }
 function configPath(homeFn = defaultHomeDir) {
-  return path23.join(homeFn(), ".wrongstack", "config.json");
+  return path24.join(homeFn(), ".wrongstack", "config.json");
 }
 function backupLastPath(homeFn = defaultHomeDir) {
-  return path23.join(homeFn(), ".wrongstack", "config.json.last");
+  return path24.join(homeFn(), ".wrongstack", "config.json.last");
 }
 function entryId(ts) {
   return ts.replace(/[:.]/g, "-").slice(0, 19);
@@ -2837,17 +2882,17 @@ async function backupCurrent(homeFn = defaultHomeDir) {
   }
   if (content !== void 0) {
     try {
-      const bakPath = path23.join(homeFn(), ".wrongstack", `config.json.${ts}.bak`);
+      const bakPath = path24.join(homeFn(), ".wrongstack", `config.json.${ts}.bak`);
       await atomicWrite(bakPath, content);
     } catch {
     }
   }
   try {
-    const dir = path23.join(homeFn(), ".wrongstack");
+    const dir = path24.join(homeFn(), ".wrongstack");
     const files = await fsp2.readdir(dir);
     const baks = files.filter((f) => f.startsWith("config.json.") && f.endsWith(".bak")).sort().reverse();
     for (const f of baks.slice(10)) {
-      await safeDelete(path23.join(dir, f));
+      await safeDelete(path24.join(dir, f));
     }
   } catch {
   }
@@ -2865,7 +2910,7 @@ async function appendHistory(oldCfg, newCfg, description, homeFn = defaultHomeDi
   };
   try {
     await fsp2.writeFile(
-      path23.join(historyDir(homeFn), `${id}.json`),
+      path24.join(historyDir(homeFn), `${id}.json`),
       JSON.stringify(entry, null, 2),
       "utf8"
     );
@@ -2873,7 +2918,7 @@ async function appendHistory(oldCfg, newCfg, description, homeFn = defaultHomeDi
     throw new FsError({
       message: err instanceof Error ? err.message : String(err),
       code: ERROR_CODES.FS_WRITE_FAILED,
-      path: path23.join(historyDir(homeFn), `${id}.json`),
+      path: path24.join(historyDir(homeFn), `${id}.json`),
       cause: err
     });
   }
@@ -2888,7 +2933,7 @@ async function listHistory(homeFn = defaultHomeDir) {
 }
 async function getHistoryEntry(id, homeFn = defaultHomeDir) {
   try {
-    const raw = await fsp2.readFile(path23.join(historyDir(homeFn), `${id}.json`), "utf8");
+    const raw = await fsp2.readFile(path24.join(historyDir(homeFn), `${id}.json`), "utf8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -2948,10 +2993,10 @@ var theme = { primary: color.amber };
 async function saveToGlobalConfig(configPath2, provider, model, homeFn = () => process.env.HOME ?? __require("os").homedir()) {
   try {
     const { atomicWrite: atomicWrite8 } = await import('@wrongstack/core');
-    const fs20 = await import('fs/promises');
+    const fs21 = await import('fs/promises');
     let existing = {};
     try {
-      const raw = await fs20.readFile(configPath2, "utf8");
+      const raw = await fs21.readFile(configPath2, "utf8");
       existing = JSON.parse(raw);
     } catch {
     }
@@ -3240,6 +3285,7 @@ var GROUPS = [
     items: [
       { key: "Esc (while busy)", blurb: "soft interrupt \u2014 next message carries a STEERING preamble" },
       { key: "/steer <text>", blurb: "mid-flight redirect, works when Esc is eaten by tmux" },
+      { key: "/btw <note>", blurb: "non-aborting nudge \u2014 agent folds it in at its next step" },
       { key: "Ctrl+C \xD7 1 / \xD7 2 / \xD7 3", blurb: "cancel iteration \xB7 force-exit Ink \xB7 hard exit(130)" }
     ]
   },
@@ -3265,7 +3311,8 @@ var GROUPS = [
     ]
   }
 ];
-var HINT_COUNT = GROUPS.reduce((n, g) => n + g.items.length, 0);
+GROUPS.reduce((n, g) => n + g.items.length, 0);
+GROUPS.map((g) => g.title);
 function shouldSuppress(flags) {
   if (flags["no-hints"] === true) return true;
   if (flags["hints"] === false) return true;
@@ -3273,22 +3320,41 @@ function shouldSuppress(flags) {
   if (env && env !== "0" && env.toLowerCase() !== "false") return true;
   return false;
 }
-function printLaunchHints(renderer, flags) {
+var wrap = (n) => (n % GROUPS.length + GROUPS.length) % GROUPS.length;
+function pickGroupIndex(opts) {
+  if (typeof opts.groupIndex === "number") return wrap(opts.groupIndex);
+  if (opts.cursorFile) {
+    try {
+      let current = 0;
+      try {
+        const parsed = Number.parseInt(fs4.readFileSync(opts.cursorFile, "utf8").trim(), 10);
+        if (Number.isFinite(parsed)) current = wrap(parsed);
+      } catch {
+      }
+      fs4.mkdirSync(path24.dirname(opts.cursorFile), { recursive: true });
+      fs4.writeFileSync(opts.cursorFile, String(wrap(current + 1)));
+      return current;
+    } catch {
+    }
+  }
+  return Math.floor(Math.random() * GROUPS.length);
+}
+function printLaunchHints(renderer, flags, opts = {}) {
   if (shouldSuppress(flags)) return;
+  const idx = pickGroupIndex(opts);
+  const group = GROUPS[idx];
+  if (!group) return;
   const lines = [];
   lines.push("");
   lines.push(
-    `  ${color.cyan("\u25C6")} ${color.bold(`WrongStack \u2014 ${HINT_COUNT} things you can do here`)}`
+    `  ${color.cyan("\u25C6")} ${color.bold(group.title)} ${color.dim(`(${idx + 1}/${GROUPS.length} \xB7 more each launch)`)}`
   );
-  for (const group of GROUPS) {
-    lines.push(`  ${color.dim("\u2500")} ${color.cyan(group.title)}`);
-    for (const item of group.items) {
-      lines.push(`     ${color.bold(item.key)}  ${color.dim("\u2014")} ${color.dim(item.blurb)}`);
-    }
+  for (const item of group.items) {
+    lines.push(`     ${color.bold(item.key)}  ${color.dim("\u2014")} ${color.dim(item.blurb)}`);
   }
   lines.push("");
   lines.push(
-    `  ${color.dim(`tip: hide this with ${color.bold("--no-hints")} or ${color.bold("WRONGSTACK_NO_HINTS=1")}`)}`
+    `  ${color.dim(`${color.bold("/help")} lists everything \xB7 hide with ${color.bold("--no-hints")}`)}`
   );
   lines.push("");
   renderer.write(`${lines.join("\n")}
@@ -3307,10 +3373,10 @@ async function detectPackageManager(root, declared) {
     const name = declared.split("@")[0];
     if (name) return name;
   }
-  if (await pathExists(path23.join(root, "pnpm-lock.yaml"))) return "pnpm";
-  if (await pathExists(path23.join(root, "bun.lockb"))) return "bun";
-  if (await pathExists(path23.join(root, "bun.lock"))) return "bun";
-  if (await pathExists(path23.join(root, "yarn.lock"))) return "yarn";
+  if (await pathExists(path24.join(root, "pnpm-lock.yaml"))) return "pnpm";
+  if (await pathExists(path24.join(root, "bun.lockb"))) return "bun";
+  if (await pathExists(path24.join(root, "bun.lock"))) return "bun";
+  if (await pathExists(path24.join(root, "yarn.lock"))) return "yarn";
   return "npm";
 }
 function hasUsableScript(scripts, name) {
@@ -3331,7 +3397,7 @@ function parseMakeTargets(makefile) {
 async function detectProjectFacts(root) {
   const facts = { hints: [] };
   try {
-    const pkg = JSON.parse(await fsp2.readFile(path23.join(root, "package.json"), "utf8"));
+    const pkg = JSON.parse(await fsp2.readFile(path24.join(root, "package.json"), "utf8"));
     const scripts = pkg.scripts ?? {};
     const pm = await detectPackageManager(root, pkg.packageManager);
     if (hasUsableScript(scripts, "build")) facts.build = `${pm} run build`;
@@ -3345,14 +3411,14 @@ async function detectProjectFacts(root) {
   } catch {
   }
   try {
-    if (!await pathExists(path23.join(root, "pyproject.toml"))) throw new Error("not python");
+    if (!await pathExists(path24.join(root, "pyproject.toml"))) throw new Error("not python");
     facts.test ??= "pytest";
     facts.lint ??= "ruff check .";
     facts.hints.push("pyproject.toml");
   } catch {
   }
   try {
-    if (!await pathExists(path23.join(root, "go.mod"))) throw new Error("not go");
+    if (!await pathExists(path24.join(root, "go.mod"))) throw new Error("not go");
     facts.build ??= "go build ./...";
     facts.test ??= "go test ./...";
     facts.run ??= "go run .";
@@ -3360,7 +3426,7 @@ async function detectProjectFacts(root) {
   } catch {
   }
   try {
-    if (!await pathExists(path23.join(root, "Cargo.toml"))) throw new Error("not rust");
+    if (!await pathExists(path24.join(root, "Cargo.toml"))) throw new Error("not rust");
     facts.build ??= "cargo build";
     facts.test ??= "cargo test";
     facts.lint ??= "cargo clippy";
@@ -3369,7 +3435,7 @@ async function detectProjectFacts(root) {
   } catch {
   }
   try {
-    const makefile = await fsp2.readFile(path23.join(root, "Makefile"), "utf8");
+    const makefile = await fsp2.readFile(path24.join(root, "Makefile"), "utf8");
     const targets = parseMakeTargets(makefile);
     facts.build ??= targets.has("build") ? "make build" : "make";
     if (targets.has("test")) facts.test ??= "make test";
@@ -4261,8 +4327,8 @@ function buildInitCommand(opts) {
     name: "init",
     description: "Create or update .wrongstack/AGENTS.md project context for the system prompt.",
     async run(_args, ctx) {
-      const dir = path23.join(ctx.projectRoot, ".wrongstack");
-      const file = path23.join(dir, "AGENTS.md");
+      const dir = path24.join(ctx.projectRoot, ".wrongstack");
+      const file = path24.join(dir, "AGENTS.md");
       const detected = await detectProjectFacts(ctx.projectRoot);
       const body = renderAgentsTemplate(detected);
       await fsp2.mkdir(dir, { recursive: true });
@@ -4453,18 +4519,18 @@ function stateBadge(state) {
       return color.dim(state);
   }
 }
-async function readConfig(path24) {
+async function readConfig(path25) {
   try {
-    return JSON.parse(await fsp2.readFile(path24, "utf8"));
+    return JSON.parse(await fsp2.readFile(path25, "utf8"));
   } catch {
     return {};
   }
 }
-async function writeConfig(path24, cfg) {
+async function writeConfig(path25, cfg) {
   const raw = JSON.stringify(cfg, null, 2);
-  const tmp = path24 + ".tmp";
+  const tmp = path25 + ".tmp";
   await fsp2.writeFile(tmp, raw, "utf8");
-  await fsp2.rename(tmp, path24);
+  await fsp2.rename(tmp, path25);
 }
 
 // src/slash-commands/mcp.ts
@@ -4583,7 +4649,7 @@ function buildPlanCommand(opts) {
     name: "plan",
     description: "Strategic plan board: /plan [show|add <title>|start <id|#>|done <id|#>|remove <id|#>|promote <id|#> [subtask ...]|derive <id|#>|template [list|use <name>]|clear]",
     async run(args) {
-      const planPath = opts.planPath;
+      const planPath = opts.paths?.projectPlan ?? opts.planPath;
       if (!planPath) return { message: "Plan storage is not configured for this session." };
       const ctx = opts.context;
       const sessionId = ctx?.session.id ?? "unknown";
@@ -5150,6 +5216,38 @@ ${color.dim("YOLO forced ON. Use /autonomy stop to end. Journal at /goal journal
     }
   };
 }
+function buildBtwCommand(opts) {
+  return {
+    name: "btw",
+    description: 'Drop a "by the way" note for the running agent without interrupting it \u2014 delivered at the next step',
+    argsHint: "<note>",
+    help: [
+      "/btw <note>   Stash a note; the agent reads it at the start of its next",
+      "              iteration (between tool calls) without restarting.",
+      "/btw          Show how many notes are pending.",
+      "",
+      "Use `/steer` instead when you need to abort the current work immediately."
+    ].join("\n"),
+    async run(args) {
+      const ctx = opts.context;
+      if (!ctx) {
+        return { message: "No active session \u2014 start a turn first, then use /btw to nudge it." };
+      }
+      const text = args.trim();
+      if (!text) {
+        const n = pendingBtwCount(ctx);
+        return {
+          message: n === 0 ? "No notes pending. Usage: /btw <note>" : `${n} note(s) pending \u2014 will reach the agent at its next step.`
+        };
+      }
+      const pending = setBtwNote(ctx, text);
+      return {
+        message: `\u21AF Noted (${pending} pending) \u2014 the agent will fold this in at its next step:
+  ${text}`
+      };
+    }
+  };
+}
 var KNOWN_VERBS = /* @__PURE__ */ new Set([
   "",
   "show",
@@ -5180,7 +5278,7 @@ function buildGoalCommand(opts) {
       "Stage flow: decide \u2192 execute \u2192 reflect \u2192 sleep | paused | stopped",
       "Pausing stops after current iteration completes. Resume continues from next iteration.",
       "",
-      "Goals live in <projectRoot>/.wrongstack/goal.json and persist across sessions.",
+      "Goals live in ~/.wrongstack/projects/<hash>/goal.json and persist across sessions.",
       "A goal is the prerequisite for /autonomy eternal \u2014 the engine consults it on",
       "every iteration to decide what to do next."
     ].join("\n"),
@@ -5189,7 +5287,7 @@ function buildGoalCommand(opts) {
       const [verbRaw, ...rest] = trimmed.split(/\s+/);
       const verb = (verbRaw ?? "").toLowerCase();
       const restJoined = rest.join(" ").trim();
-      const goalPath = goalFilePath(opts.projectRoot);
+      const goalPath = opts.paths.projectGoal;
       const verbForDispatch = verb && !KNOWN_VERBS.has(verb) ? "set" : verb;
       const setText = verbForDispatch === "set" && !KNOWN_VERBS.has(verb) ? trimmed : restJoined;
       switch (verbForDispatch) {
@@ -5661,7 +5759,7 @@ var DEFAULTS = {
   cost: true
 };
 function resolveConfigPath() {
-  return process.env[CONFIG_ENV] ?? path23.join(process.env.HOME ?? "", ".wrongstack", "statusline.json");
+  return process.env[CONFIG_ENV] ?? path24.join(process.env.HOME ?? "", ".wrongstack", "statusline.json");
 }
 async function loadStatuslineConfig() {
   const p = resolveConfigPath();
@@ -5675,7 +5773,7 @@ async function loadStatuslineConfig() {
 async function saveStatuslineConfig(cfg) {
   const p = resolveConfigPath();
   try {
-    await fsp2.mkdir(path23.dirname(p), { recursive: true });
+    await fsp2.mkdir(path24.dirname(p), { recursive: true });
     await atomicWrite(p, JSON.stringify(cfg, null, 2));
   } catch (err) {
     throw new FsError({
@@ -6574,11 +6672,11 @@ When the error confidence is low (< 0.85) or the problem spans multiple files,
   };
 }
 function makeInstaller(opts, projectRoot, global) {
-  const globalRoot = path23.join(os6.homedir(), ".wrongstack");
+  const globalRoot = path24.join(os6.homedir(), ".wrongstack");
   return new SkillInstaller({
-    manifestPath: path23.join(globalRoot, "installed-skills.json"),
-    projectSkillsDir: path23.join(projectRoot, ".wrongstack", "skills"),
-    globalSkillsDir: path23.join(globalRoot, "skills"),
+    manifestPath: path24.join(globalRoot, "installed-skills.json"),
+    projectSkillsDir: path24.join(projectRoot, ".wrongstack", "skills"),
+    globalSkillsDir: path24.join(globalRoot, "skills"),
     projectHash: projectHash(projectRoot),
     skillLoader: opts.skillLoader
   });
@@ -6768,6 +6866,7 @@ function buildBuiltinSlashCommands(opts) {
     buildYoloCommand(opts),
     buildAutonomyCommand(opts),
     buildGoalCommand(opts),
+    buildBtwCommand(opts),
     buildModeCommand(opts),
     buildExitCommand(opts),
     buildCommitCommand(),
@@ -6802,13 +6901,13 @@ var MANIFESTS = [
 ];
 async function detectProjectKind(projectRoot) {
   try {
-    await fsp2.access(path23.join(projectRoot, ".wrongstack", "AGENTS.md"));
+    await fsp2.access(path24.join(projectRoot, ".wrongstack", "AGENTS.md"));
     return "initialized";
   } catch {
   }
   for (const m of MANIFESTS) {
     try {
-      await fsp2.access(path23.join(projectRoot, m));
+      await fsp2.access(path24.join(projectRoot, m));
       return "project";
     } catch {
     }
@@ -6816,8 +6915,8 @@ async function detectProjectKind(projectRoot) {
   return "empty";
 }
 async function scaffoldAgentsMd(projectRoot) {
-  const dir = path23.join(projectRoot, ".wrongstack");
-  const file = path23.join(dir, "AGENTS.md");
+  const dir = path24.join(projectRoot, ".wrongstack");
+  const file = path24.join(dir, "AGENTS.md");
   const facts = await detectProjectFacts(projectRoot);
   const body = renderAgentsTemplate(facts);
   await fsp2.mkdir(dir, { recursive: true });
@@ -6830,7 +6929,7 @@ async function runProjectCheck(opts) {
   if (kind === "initialized") {
     renderer.write(
       `
-  ${color.green("\u2713")} Project initialized ${color.dim(`(${path23.join(projectRoot, ".wrongstack", "AGENTS.md")})`)}
+  ${color.green("\u2713")} Project initialized ${color.dim(`(${path24.join(projectRoot, ".wrongstack", "AGENTS.md")})`)}
 `
     );
     return true;
@@ -6861,7 +6960,7 @@ async function runProjectCheck(opts) {
     }
     return true;
   }
-  const gitDir = path23.join(projectRoot, ".git");
+  const gitDir = path24.join(projectRoot, ".git");
   let hasGit = false;
   try {
     await fsp2.access(gitDir);
@@ -7254,14 +7353,14 @@ function summarize(value, name) {
   if (typeof v === "object" && v !== null) {
     const o = v;
     if (name === "edit") {
-      const path24 = typeof o["path"] === "string" ? o["path"] : "";
+      const path25 = typeof o["path"] === "string" ? o["path"] : "";
       const reps = typeof o["replacements"] === "number" ? o["replacements"] : 0;
-      return `${path24}  ${reps} replacement${reps === 1 ? "" : "s"}`.trim();
+      return `${path25}  ${reps} replacement${reps === 1 ? "" : "s"}`.trim();
     }
     if (name === "write") {
-      const path24 = typeof o["path"] === "string" ? o["path"] : "";
+      const path25 = typeof o["path"] === "string" ? o["path"] : "";
       const bytes = typeof o["bytes"] === "number" ? o["bytes"] : void 0;
-      return bytes !== void 0 ? `${path24}  ${bytes}B` : path24;
+      return bytes !== void 0 ? `${path25}  ${bytes}B` : path25;
     }
     if (typeof o["count"] === "number") {
       return `${o["count"]} match${o["count"] === 1 ? "" : "es"}`;
@@ -8271,7 +8370,7 @@ var doctorCmd = async (_args, deps) => {
   }
   try {
     await fsp2.mkdir(deps.paths.projectSessions, { recursive: true });
-    const probe = path23.join(deps.paths.projectSessions, `.probe-${Date.now()}`);
+    const probe = path24.join(deps.paths.projectSessions, `.probe-${Date.now()}`);
     await fsp2.writeFile(probe, "");
     await fsp2.unlink(probe);
     checks.push({ name: "sessions writable", status: "ok", detail: deps.paths.projectSessions });
@@ -8374,8 +8473,8 @@ var exportCmd = async (args, deps) => {
     return 1;
   }
   if (output) {
-    await fsp2.mkdir(path23.dirname(path23.resolve(deps.cwd, output)), { recursive: true });
-    await fsp2.writeFile(path23.resolve(deps.cwd, output), rendered, "utf8");
+    await fsp2.mkdir(path24.dirname(path24.resolve(deps.cwd, output)), { recursive: true });
+    await fsp2.writeFile(path24.resolve(deps.cwd, output), rendered, "utf8");
     deps.renderer.write(`Wrote ${rendered.length} bytes to ${output}
 `);
   } else {
@@ -8445,12 +8544,11 @@ var initCmd = async (_args, deps) => {
   await fsp2.mkdir(deps.paths.globalRoot, { recursive: true });
   const config = { version: 1, provider: providerId, model: modelId };
   if (apiKey) config.apiKey = apiKey;
-  const keyFile = path23.join(path23.dirname(deps.paths.globalConfig), ".key");
-  const vault = new DefaultSecretVault$1({ keyFile });
+  const vault = new DefaultSecretVault$1({ keyFile: deps.paths.secretsKey });
   const encrypted = encryptConfigSecrets(config, vault);
   await atomicWrite(deps.paths.globalConfig, JSON.stringify(encrypted, null, 2));
-  await fsp2.mkdir(path23.join(deps.projectRoot, ".wrongstack"), { recursive: true });
-  const agentsFile = path23.join(deps.projectRoot, ".wrongstack", "AGENTS.md");
+  await fsp2.mkdir(path24.join(deps.projectRoot, ".wrongstack"), { recursive: true });
+  const agentsFile = path24.join(deps.projectRoot, ".wrongstack", "AGENTS.md");
   const projectFacts = await detectProjectFacts(deps.projectRoot);
   await atomicWrite(agentsFile, renderAgentsTemplate(projectFacts));
   deps.renderer.writeInfo(`Wrote ${deps.paths.globalConfig}`);
@@ -8756,7 +8854,7 @@ var usageCmd = async (_args, deps) => {
   return 0;
 };
 var projectsCmd = async (_args, deps) => {
-  const projectsRoot = path23.join(deps.paths.globalRoot, "projects");
+  const projectsRoot = path24.join(deps.paths.globalRoot, "projects");
   try {
     const entries = await fsp2.readdir(projectsRoot);
     if (entries.length === 0) {
@@ -8766,7 +8864,7 @@ var projectsCmd = async (_args, deps) => {
     for (const hash of entries) {
       try {
         const meta = JSON.parse(
-          await fsp2.readFile(path23.join(projectsRoot, hash, "meta.json"), "utf8")
+          await fsp2.readFile(path24.join(projectsRoot, hash, "meta.json"), "utf8")
         );
         deps.renderer.write(
           `  ${color.dim(hash)}  ${color.dim(meta.lastSeen ?? "")}  ${meta.root ?? "?"}
@@ -8896,14 +8994,12 @@ Cache age: ${isFinite(age) ? `${Math.round(age / 60)}m` : "never fetched"}. Run
   );
   return 0;
 };
-
-// src/subcommands/handlers/helpers.ts
 function redactKeys(obj) {
   if (!obj || typeof obj !== "object") return obj;
   if (Array.isArray(obj)) return obj.map(redactKeys);
   const out = {};
   for (const [k, v] of Object.entries(obj)) {
-    if (/api.?key|secret|token|pass/i.test(k) && typeof v === "string" && v.length > 0)
+    if (isSecretField(k) && typeof v === "string" && v.length > 0)
       out[k] = "[REDACTED]";
     else out[k] = redactKeys(v);
   }
@@ -8927,7 +9023,7 @@ async function listFleetRuns(deps) {
   }
   const runs = [];
   for (const id of entries) {
-    const runDir = path23.join(deps.paths.projectSessions, id);
+    const runDir = path24.join(deps.paths.projectSessions, id);
     let stat3;
     try {
       stat3 = await fsp2.stat(runDir);
@@ -8940,17 +9036,17 @@ async function listFleetRuns(deps) {
     let subagentCount = 0;
     let subagentsDir;
     try {
-      await fsp2.access(path23.join(runDir, "fleet.json"));
+      await fsp2.access(path24.join(runDir, "fleet.json"));
       manifest = true;
     } catch {
     }
     try {
-      await fsp2.access(path23.join(runDir, "checkpoint.json"));
+      await fsp2.access(path24.join(runDir, "checkpoint.json"));
       checkpoint = true;
     } catch {
     }
     try {
-      subagentsDir = path23.join(runDir, "subagents");
+      subagentsDir = path24.join(runDir, "subagents");
       const files = await fsp2.readdir(subagentsDir);
       subagentCount = files.filter((f) => f.endsWith(".jsonl")).length;
     } catch {
@@ -8979,7 +9075,7 @@ async function listFleetRuns(deps) {
   return 0;
 }
 async function showFleetRun(runId, deps) {
-  const runDir = path23.join(deps.paths.projectSessions, runId);
+  const runDir = path24.join(deps.paths.projectSessions, runId);
   let stat3;
   try {
     stat3 = await fsp2.stat(runDir);
@@ -8996,7 +9092,7 @@ async function showFleetRun(runId, deps) {
   deps.renderer.write(color.bold(`
 Fleet Run: ${runId}
 `) + "\n");
-  const manifestPath = path23.join(runDir, "fleet.json");
+  const manifestPath = path24.join(runDir, "fleet.json");
   let manifestData = null;
   try {
     manifestData = await fsp2.readFile(manifestPath, "utf8");
@@ -9012,7 +9108,7 @@ Fleet Run: ${runId}
     deps.renderer.write(`  ${color.dim("\u25CB")} fleet.json \u2014 not found
 `);
   }
-  const checkpointPath = path23.join(runDir, "checkpoint.json");
+  const checkpointPath = path24.join(runDir, "checkpoint.json");
   let checkpointData = null;
   try {
     checkpointData = await fsp2.readFile(checkpointPath, "utf8");
@@ -9059,7 +9155,7 @@ Fleet Run: ${runId}
     } catch {
     }
   }
-  const subagentsDir = path23.join(runDir, "subagents");
+  const subagentsDir = path24.join(runDir, "subagents");
   let subagentFiles = [];
   try {
     subagentFiles = await fsp2.readdir(subagentsDir);
@@ -9071,7 +9167,7 @@ Fleet Run: ${runId}
   Subagent transcripts (${subagentFiles.length}):
 `);
     for (const f of subagentFiles.sort()) {
-      const filePath = path23.join(subagentsDir, f);
+      const filePath = path24.join(subagentsDir, f);
       let size;
       try {
         const s = await fsp2.stat(filePath);
@@ -9088,7 +9184,7 @@ Fleet Run: ${runId}
   ${color.dim("\u25CB")} No subagent transcripts
 `);
   }
-  const sharedDir = path23.join(runDir, "shared");
+  const sharedDir = path24.join(runDir, "shared");
   try {
     const files = await fsp2.readdir(sharedDir);
     deps.renderer.write(`
@@ -9255,7 +9351,7 @@ function findSessionId(args) {
 var rewindCmd = async (args, deps) => {
   const flags = parseRewindFlags(args);
   const wpaths = resolveWstackPaths({ projectRoot: deps.projectRoot });
-  const sessionsDir = path23.join(wpaths.globalRoot, "sessions");
+  const sessionsDir = path24.join(wpaths.globalRoot, "sessions");
   const rewind = new DefaultSessionRewinder(sessionsDir);
   let sessionId = findSessionId(args);
   if (!sessionId) {
@@ -9492,7 +9588,7 @@ function resolveBundledSkillsDir() {
   try {
     const req2 = createRequire(import.meta.url);
     const corePkg = req2.resolve("@wrongstack/core/package.json");
-    return path23.join(path23.dirname(corePkg), "skills");
+    return path24.join(path24.dirname(corePkg), "skills");
   } catch {
     return void 0;
   }
@@ -9623,7 +9719,9 @@ async function boot(argv) {
       flags["no-tui"] = true;
     }
     if (choices.yolo !== config.yolo) config = patchConfig(config, { yolo: choices.yolo });
-    printLaunchHints(renderer, flags);
+    printLaunchHints(renderer, flags, {
+      cursorFile: path24.join(wpaths.cacheDir, "hint-cursor")
+    });
   }
   return {
     config,
@@ -10653,7 +10751,7 @@ async function execute(deps) {
           supportsVision,
           attachments,
           effectiveMaxContext,
-          projectName: path23.basename(projectRoot) || void 0,
+          projectName: path24.basename(projectRoot) || void 0,
           projectRoot,
           getAutonomy,
           onAutonomy,
@@ -10675,7 +10773,7 @@ async function execute(deps) {
         supportsVision,
         attachments,
         effectiveMaxContext,
-        projectName: path23.basename(projectRoot) || void 0,
+        projectName: path24.basename(projectRoot) || void 0,
         getAutonomy,
         onAutonomy,
         getEternalEngine,
@@ -10777,7 +10875,7 @@ var MultiAgentHost = class {
       doneCondition: { type: "all_tasks_done" },
       maxConcurrent: this.opts.maxConcurrent ?? 4
     };
-    const defaultScratchpad = this.opts.sharedScratchpadPath || (this.opts.sessionsRoot && this.opts.directorRunId ? path23.join(this.opts.sessionsRoot, this.opts.directorRunId, "shared") : void 0);
+    const defaultScratchpad = this.opts.sharedScratchpadPath || (this.opts.sessionsRoot && this.opts.directorRunId ? path24.join(this.opts.sessionsRoot, this.opts.directorRunId, "shared") : void 0);
     this.director = new Director({
       config: coordinatorConfig,
       manifestPath: this.opts.manifestPath,
@@ -11022,7 +11120,7 @@ var MultiAgentHost = class {
       model: opts?.model,
       tools: opts?.tools
     };
-    const transcriptPath = this.sessionFactory ? path23.join(this.sessionFactory.dir, `${subagentConfig.name}.jsonl`) : void 0;
+    const transcriptPath = this.sessionFactory ? path24.join(this.sessionFactory.dir, `${subagentConfig.name}.jsonl`) : void 0;
     const { subagentId, taskId } = await this._spawnAndAssign(subagentConfig);
     this.fleetManager?.addPendingTask(taskId, subagentId, description);
     this.deps.events.emit("subagent.spawned", {
@@ -11165,16 +11263,16 @@ var MultiAgentHost = class {
     if (this.director) return this.director;
     this.opts.directorMode = true;
     if (this.opts.fleetRoot && !this.opts.manifestPath) {
-      this.opts.manifestPath = path23.join(this.opts.fleetRoot, "fleet.json");
+      this.opts.manifestPath = path24.join(this.opts.fleetRoot, "fleet.json");
     }
     if (this.opts.fleetRoot && !this.opts.sharedScratchpadPath) {
-      this.opts.sharedScratchpadPath = path23.join(this.opts.fleetRoot, "shared");
+      this.opts.sharedScratchpadPath = path24.join(this.opts.fleetRoot, "shared");
     }
     if (this.opts.fleetRoot && !this.opts.sessionsRoot) {
-      this.opts.sessionsRoot = path23.join(this.opts.fleetRoot, "subagents");
+      this.opts.sessionsRoot = path24.join(this.opts.fleetRoot, "subagents");
     }
     if (this.opts.fleetRoot && !this.opts.stateCheckpointPath) {
-      this.opts.stateCheckpointPath = path23.join(this.opts.fleetRoot, "director-state.json");
+      this.opts.stateCheckpointPath = path24.join(this.opts.fleetRoot, "director-state.json");
     }
     await this.ensureDirector();
     return this.director ?? null;
@@ -11340,11 +11438,11 @@ var SessionStats = class {
       if (e.name === "bash") this.bashCommands++;
       else if (e.name === "fetch") this.fetches++;
       if (!e.ok) return;
-      const path24 = typeof input?.path === "string" ? input.path : void 0;
-      if (e.name === "read" && path24) this.readPaths.add(path24);
-      else if (e.name === "edit" && path24) this.editedPaths.add(path24);
-      else if (e.name === "write" && path24) {
-        this.writtenPaths.add(path24);
+      const path25 = typeof input?.path === "string" ? input.path : void 0;
+      if (e.name === "read" && path25) this.readPaths.add(path25);
+      else if (e.name === "edit" && path25) this.editedPaths.add(path25);
+      else if (e.name === "write" && path25) {
+        this.writtenPaths.add(path25);
         const content = typeof input?.content === "string" ? input.content : "";
         this.bytesWritten += Buffer.byteLength(content, "utf8");
       }
@@ -11632,7 +11730,7 @@ function setupMetrics(params) {
   const dumpMetrics = () => {
     if (!metricsSink) return;
     try {
-      const out = path23.join(wpaths.projectSessions, "metrics.json");
+      const out = path24.join(wpaths.projectSessions, "metrics.json");
       const snap = metricsSink.snapshot();
       writeFileSync(out, JSON.stringify(snap, null, 2));
     } catch {
@@ -11823,12 +11921,12 @@ async function setupSession(params) {
   }
   const sessionRef = { current: session };
   await recoveryLock.write(session.id).catch(() => void 0);
-  const attachments = new DefaultAttachmentStore({ spoolDir: path23.join(wpaths.projectSessions, session.id, "attachments") });
-  const queueStore = new QueueStore({ dir: path23.join(wpaths.projectSessions, session.id) });
+  const attachments = new DefaultAttachmentStore({ spoolDir: path24.join(wpaths.projectSessions, session.id, "attachments") });
+  const queueStore = new QueueStore({ dir: path24.join(wpaths.projectSessions, session.id) });
   const ctxSignal = new AbortController().signal;
   const context = new Context({ systemPrompt, provider, session, signal: ctxSignal, tokenCounter, cwd, projectRoot, model: config.model });
   if (restoredMessages.length > 0) context.state.replaceMessages(restoredMessages);
-  const todosCheckpointPath = path23.join(wpaths.projectSessions, `${session.id}.todos.json`);
+  const todosCheckpointPath = path24.join(wpaths.projectSessions, `${session.id}.todos.json`);
   if (resumeId) {
     try {
       const restoredTodos = await loadTodosCheckpoint(todosCheckpointPath);
@@ -11840,13 +11938,13 @@ async function setupSession(params) {
     }
   }
   const detachTodosCheckpoint = attachTodosCheckpoint(context.state, todosCheckpointPath, session.id);
-  const planPath = path23.join(wpaths.projectSessions, `${session.id}.plan.json`);
+  const planPath = path24.join(wpaths.projectSessions, `${session.id}.plan.json`);
   context.state.setMeta("plan.path", planPath);
   let dirState;
   if (resumeId) {
     try {
-      const fleetRoot = path23.join(wpaths.projectSessions, session.id);
-      dirState = await loadDirectorState(path23.join(fleetRoot, "director-state.json"));
+      const fleetRoot = path24.join(wpaths.projectSessions, session.id);
+      dirState = await loadDirectorState(path24.join(fleetRoot, "director-state.json"));
       if (dirState) {
         const tCounts = {};
         for (const t of dirState.tasks) tCounts[t.status] = (tCounts[t.status] ?? 0) + 1;
@@ -11873,7 +11971,7 @@ function resolveBundledSkillsDir2() {
   try {
     const req2 = createRequire(import.meta.url);
     const corePkg = req2.resolve("@wrongstack/core/package.json");
-    return path23.join(path23.dirname(corePkg), "skills");
+    return path24.join(path24.dirname(corePkg), "skills");
   } catch {
     return void 0;
   }
@@ -11963,7 +12061,7 @@ async function main(argv) {
   const skillLoader = container.resolve(TOKENS.SkillLoader);
   const sessionRef = {};
   const autonomyModeRef = { current: "off" };
-  const goalPathForPrompt = path23.join(projectRoot, ".wrongstack", "goal.json");
+  const goalPathForPrompt = wpaths.projectGoal;
   container.bind(
     TOKENS.SystemPromptBuilder,
     () => new DefaultSystemPromptBuilder({
@@ -11973,7 +12071,7 @@ async function main(argv) {
       modeId,
       modePrompt,
       modelCapabilities,
-      planPath: () => sessionRef.current ? path23.join(wpaths.projectSessions, `${sessionRef.current.id}.plan.json`) : void 0,
+      planPath: () => sessionRef.current ? path24.join(wpaths.projectSessions, `${sessionRef.current.id}.plan.json`) : void 0,
       contributors: [
         // Injects the ETERNAL AUTONOMY block when the user has activated
         // `/autonomy eternal`. Without this, the per-iteration directive
@@ -12172,12 +12270,12 @@ async function main(argv) {
       }
     }
   };
-  const fleetRoot = directorMode ? path23.join(wpaths.projectSessions, session.id) : void 0;
-  const manifestPath = directorMode ? typeof process.env["WRONGSTACK_FLEET_MANIFEST"] === "string" ? process.env["WRONGSTACK_FLEET_MANIFEST"] : path23.join(fleetRoot, "fleet.json") : void 0;
-  const sharedScratchpadPath = directorMode ? path23.join(fleetRoot, "shared") : void 0;
-  const subagentSessionsRoot = directorMode ? path23.join(fleetRoot, "subagents") : void 0;
-  const stateCheckpointPath = directorMode ? path23.join(fleetRoot, "director-state.json") : void 0;
-  const fleetRootForPromotion = path23.join(wpaths.projectSessions, session.id);
+  const fleetRoot = directorMode ? path24.join(wpaths.projectSessions, session.id) : void 0;
+  const manifestPath = directorMode ? typeof process.env["WRONGSTACK_FLEET_MANIFEST"] === "string" ? process.env["WRONGSTACK_FLEET_MANIFEST"] : path24.join(fleetRoot, "fleet.json") : void 0;
+  const sharedScratchpadPath = directorMode ? path24.join(fleetRoot, "shared") : void 0;
+  const subagentSessionsRoot = directorMode ? path24.join(fleetRoot, "subagents") : void 0;
+  const stateCheckpointPath = directorMode ? path24.join(fleetRoot, "director-state.json") : void 0;
+  const fleetRootForPromotion = path24.join(wpaths.projectSessions, session.id);
   const multiAgentHost = new MultiAgentHost(
     {
       container,
@@ -12269,6 +12367,7 @@ async function main(argv) {
   const slashCmds = buildBuiltinSlashCommands({
     registry: slashRegistry,
     toolRegistry,
+    paths: wpaths,
     compactor: container.resolve(TOKENS.Compactor),
     sessionStore,
     skillLoader,
@@ -12486,7 +12585,7 @@ async function main(argv) {
       return director.spawn(cfg);
     },
     onFleetLog: async (subagentId, mode) => {
-      const subagentsRoot = path23.join(fleetRootForPromotion, "subagents");
+      const subagentsRoot = path24.join(fleetRootForPromotion, "subagents");
       let runDirs;
       try {
         runDirs = await fsp2.readdir(subagentsRoot);
@@ -12495,7 +12594,7 @@ async function main(argv) {
       }
       const found = [];
       for (const runId of runDirs) {
-        const runDir = path23.join(subagentsRoot, runId);
+        const runDir = path24.join(subagentsRoot, runId);
         let files;
         try {
           files = await fsp2.readdir(runDir);
@@ -12504,7 +12603,7 @@ async function main(argv) {
         }
         for (const f of files) {
           if (!f.endsWith(".jsonl")) continue;
-          const full = path23.join(runDir, f);
+          const full = path24.join(runDir, f);
           try {
             const stat3 = await fsp2.stat(full);
             found.push({
@@ -12601,7 +12700,7 @@ async function main(argv) {
       }
       const dir = await multiAgentHost.ensureDirector();
       if (!dir) return "Director is not available.";
-      const dirStatePath = path23.join(fleetRootForPromotion, "director-state.json");
+      const dirStatePath = path24.join(fleetRootForPromotion, "director-state.json");
       const prior = await loadDirectorState(dirStatePath);
       if (!prior) {
         return "No prior director-state.json found \u2014 nothing to retry.";
@@ -12672,9 +12771,9 @@ async function main(argv) {
       for (const tool of director2.tools(FLEET_ROSTER)) {
         toolRegistry.register(tool);
       }
-      const mp = path23.join(fleetRootForPromotion, "fleet.json");
-      const sp = path23.join(fleetRootForPromotion, "shared");
-      const ss = path23.join(fleetRootForPromotion, "subagents");
+      const mp = path24.join(fleetRootForPromotion, "fleet.json");
+      const sp = path24.join(fleetRootForPromotion, "shared");
+      const ss = path24.join(fleetRootForPromotion, "subagents");
       const lines = [
         `${color.green("\u2713")} Promoted to director mode.`,
         `  Roster: ${Object.keys(FLEET_ROSTER).join(", ")}`,
@@ -12828,13 +12927,62 @@ Restart WrongStack to load or unload plugin code in this session.`;
     onDispatchClassify: makeProviderClassifier(
       context.provider,
       context.model
-    )
+    ),
+    onSddParallelRun: async (opts) => {
+      const { SddParallelRun } = await import('@wrongstack/core');
+      const sdd = await Promise.resolve().then(() => (init_sdd(), sdd_exports));
+      const tracker = sdd.getTaskTracker();
+      const builder = sdd.getActiveBuilder();
+      if (!tracker || !builder) {
+        return "No active SDD session with tasks. Use /sdd new to start one.";
+      }
+      const session2 = builder.getSession();
+      if (session2.phase !== "executing" && session2.phase !== "task_review") {
+        return `Cannot run parallel in phase "${session2.phase}". Use /sdd approve first.`;
+      }
+      const graphId = sdd.getTaskGraphId();
+      const graphStore = new (await import('@wrongstack/core')).TaskGraphStore({
+        baseDir: wpaths.projectTaskGraphs
+      });
+      const graph = graphId ? await graphStore.load(graphId) : null;
+      if (!graph) {
+        return "No task graph found for the current SDD session.";
+      }
+      const subagentFactory = multiAgentHost.makeSubagentFactory(config);
+      const run = new SddParallelRun({
+        tracker,
+        graph,
+        agent,
+        projectRoot,
+        parallelSlots: opts?.parallelSlots,
+        subagentFactory,
+        onProgress: (p) => {
+          renderer.write(`  \u2591 wave ${p.wave + 1} \xB7 ${p.completed}/${p.total} tasks \xB7 ${p.percent}% done
+`);
+        }
+      });
+      globalThis.__sddParallelRun = run;
+      const result = await run.run();
+      delete globalThis.__sddParallelRun;
+      const lines = [
+        `SDD parallel run complete:`,
+        `  ${result.totalWaves} waves \xB7 ${result.totalCompleted} done \xB7 ${result.totalFailed} failed`,
+        `  ${(result.totalDurationMs / 1e3).toFixed(1)}s total`
+      ];
+      if (result.deadlocked) lines.push(color.red("  \u26A0 deadlock \u2014 tasks blocked by failed tasks."));
+      if (result.stopRequested) lines.push(color.yellow("  \u26A1 stopped by user."));
+      return lines.join("\n");
+    },
+    onSddParallelStop: () => {
+      const run = globalThis.__sddParallelRun;
+      run?.stop();
+    }
   });
   for (const cmd of slashCmds) slashRegistry.register(cmd);
   const eternalFlag = typeof flags["eternal"] === "string" ? flags["eternal"].trim() : "";
   if (eternalFlag.length > 0) {
-    const { saveGoal: saveGoal2, emptyGoal: emptyGoal2, goalFilePath: goalFilePath4, loadGoal: loadGoal4 } = await import('@wrongstack/core');
-    const goalPath = goalFilePath4(projectRoot);
+    const { saveGoal: saveGoal2, emptyGoal: emptyGoal2, goalFilePath: goalFilePath3, loadGoal: loadGoal4 } = await import('@wrongstack/core');
+    const goalPath = goalFilePath3(projectRoot);
     const prior = await loadGoal4(goalPath);
     const next = prior ? { ...prior, goal: eternalFlag, setAt: (/* @__PURE__ */ new Date()).toISOString(), lastActivityAt: (/* @__PURE__ */ new Date()).toISOString() } : emptyGoal2(eternalFlag);
     await saveGoal2(goalPath, next);