@wrongstack/cli 0.9.0 → 0.9.4

package/dist/index.js

@@ -1,12 +1,10 @@
 #!/usr/bin/env node
-import * as path25 from 'path';
-import { join } from 'path';
+import * as path24 from 'path';
 import * as fsp3 from 'fs/promises';
-import { readdir, readFile } from 'fs/promises';
-import { color, DefaultPathResolver, TOKENS, DefaultSystemPromptBuilder, makeAutonomyPromptContributor, ToolRegistry, createContextManagerTool, EventBus, SlashCommandRegistry, createDelegateTool, FLEET_ROSTER, createMcpControlTool, EternalAutonomyEngine, DefaultLogger, DefaultModelsRegistry, ProviderRegistry, InMemoryMetricsSink, wireMetricsToEvents, DefaultHealthRegistry, startMetricsServer, RecoveryLock, DefaultAttachmentStore, QueueStore, Context, loadTodosCheckpoint, attachTodosCheckpoint, loadDirectorState, loadPlan, createDefaultPipelines, AutoCompactionMiddleware, estimateRequestTokens, Agent, loadPlugins, FleetManager, makeDirectorSessionFactory, Director, AutoApprovePermissionPolicy, PhaseStore, AutoPhasePlanner, PhaseGraphBuilder, WorktreeManager, PhaseOrchestrator, makeLLMClassifier, resolveWstackPaths, DefaultSecretVault, migratePlaintextSecrets, DefaultConfigLoader, DefaultSessionReader, DefaultSessionRewinder, DefaultSessionStore, atomicWrite, DefaultPluginAPI, makeAgentSubagentRunner, NULL_FLEET_BUS, buildChildEnv, formatContextWindowModeList, repairToolUseAdjacency, getContextWindowMode, resolveContextWindowPolicy, AGENTS_BY_PHASE, dispatchAgent, formatTodosList, emptyPlan, clearPlan, savePlan, formatPlanTemplates, getPlanTemplate, addPlanItem, formatPlan, deriveTodosFromPlanItem, removePlanItem, setPlanItemStatus, SpecStore, TaskGraphStore, analyzeCriticalPath, getTemplate, listTemplates, templateToMarkdown, SpecParser, renderSpecAnalysis, AISpecBuilder, DefaultTaskStore, TaskTracker, renderProgress, renderTaskGraph, loadGoal, goalFilePath, summarizeUsage, saveGoal, emptyGoal, buildGoalPreamble, formatGoal, pendingBtwCount, setBtwNote, InputBuilder, FsError, ERROR_CODES, projectHash, WrongStackError, defaultOrchestrator, decryptConfigSecrets, encryptConfigSecrets as encryptConfigSecrets$1, SpecVersioning, ParallelEternalEngine, allServers as allServers$1 } from '@wrongstack/core';
+import { color, DefaultPathResolver, TOKENS, DefaultSystemPromptBuilder, makeAutonomyPromptContributor, ToolRegistry, createContextManagerTool, EventBus, SlashCommandRegistry, createDelegateTool, FLEET_ROSTER, createMcpControlTool, EternalAutonomyEngine, DefaultLogger, DefaultModelsRegistry, ProviderRegistry, InMemoryMetricsSink, wireMetricsToEvents, DefaultHealthRegistry, startMetricsServer, RecoveryLock, DefaultAttachmentStore, QueueStore, Context, loadTodosCheckpoint, attachTodosCheckpoint, loadDirectorState, loadPlan, createDefaultPipelines, AutoCompactionMiddleware, estimateRequestTokens, Agent, loadPlugins, FleetManager, makeDirectorSessionFactory, Director, AutoApprovePermissionPolicy, PhaseStore, AutoPhasePlanner, PhaseGraphBuilder, WorktreeManager, PhaseOrchestrator, makeLLMClassifier, resolveWstackPaths, DefaultSecretVault, migratePlaintextSecrets, DefaultConfigLoader, DefaultSessionReader, DefaultSessionRewinder, DefaultSessionStore, atomicWrite, DefaultPluginAPI, makeAgentSubagentRunner, NULL_FLEET_BUS, buildChildEnv, formatContextWindowModeList, repairToolUseAdjacency, getContextWindowMode, resolveContextWindowPolicy, AGENTS_BY_PHASE, dispatchAgent, formatTodosList, SpecStore, TaskGraphStore, analyzeCriticalPath, getTemplate, listTemplates, templateToMarkdown, SpecParser, renderSpecAnalysis, AISpecBuilder, DefaultTaskStore, TaskTracker, renderProgress, renderTaskGraph, loadGoal, goalFilePath, summarizeUsage, saveGoal, emptyGoal, buildGoalPreamble, formatGoal, pendingBtwCount, setBtwNote, decryptConfigSecrets, encryptConfigSecrets as encryptConfigSecrets$1, InputBuilder, FsError, ERROR_CODES, SpecVersioning, ParallelEternalEngine, allServers as allServers$1 } from '@wrongstack/core';
 import { createRequire } from 'module';
-import * as os6 from 'os';
-import os6__default from 'os';
+import * as os3 from 'os';
+import os3__default from 'os';
 import * as crypto2 from 'crypto';
 import { randomUUID } from 'crypto';
 import { DefaultSecretVault as DefaultSecretVault$1, encryptConfigSecrets, isSecretField, decryptConfigSecrets as decryptConfigSecrets$1 } from '@wrongstack/core/security';
@@ -15,14 +13,13 @@ import { MCPRegistry } from '@wrongstack/mcp';
 import { buildProviderFactoriesFromRegistry, makeProviderFromConfig, capabilitiesFor } from '@wrongstack/providers';
 import { createDefaultContainer, routeImagesForModel, readClipboardImage } from '@wrongstack/runtime';
 import { builtinToolsPack, rememberTool, forgetTool } from '@wrongstack/tools';
-import { spawn } from 'child_process';
-import { SkillInstaller } from '@wrongstack/core/skills';
 import * as readline from 'readline';
-import * as fs9 from 'fs';
+import * as fs10 from 'fs';
 import { writeFileSync } from 'fs';
 import { WrongStackACPServer } from '@wrongstack/acp/agent';
 import { ACP_AGENT_COMMANDS, makeACPSubagentRunner, makeACPSubagentRunnerWithStop } from '@wrongstack/acp';
 import { ACP_AGENTS, SubagentBudget } from '@wrongstack/core/coordination';
+import { spawn } from 'child_process';
 import { allServers } from '@wrongstack/core/infrastructure';
 import { createToolVisionAdapters } from '@wrongstack/runtime/vision';
 import { ToolExecutor } from '@wrongstack/core/execution';
@@ -384,6 +381,7 @@ function buildSddCommand(opts) {
     description: "AI-driven SDD: /sdd [new|approve|execute|cancel|status|list|show|templates]",
     async run(args) {
       opts.context;
+      if (!opts.paths) return { message: "SDD not available \u2014 paths not configured." };
       const specsDir = opts.paths.projectSpecs;
       const graphsDir = opts.paths.projectTaskGraphs;
       const specStore = new SpecStore({ baseDir: specsDir });
@@ -1398,7 +1396,7 @@ function sddHelp() {
 async function gatherProjectContext(projectRoot) {
   const parts = [];
   try {
-    const pkgPath = path25.join(projectRoot, "package.json");
+    const pkgPath = path24.join(projectRoot, "package.json");
     const pkgRaw = await fsp3.readFile(pkgPath, "utf8");
     const pkg = JSON.parse(pkgRaw);
     parts.push(`Project: ${String(pkg.name ?? "unknown")}`);
@@ -1414,13 +1412,13 @@ async function gatherProjectContext(projectRoot) {
   } catch {
   }
   try {
-    const tsconfigPath = path25.join(projectRoot, "tsconfig.json");
+    const tsconfigPath = path24.join(projectRoot, "tsconfig.json");
     await fsp3.access(tsconfigPath);
     parts.push("Language: TypeScript");
   } catch {
   }
   try {
-    const srcDir = path25.join(projectRoot, "src");
+    const srcDir = path24.join(projectRoot, "src");
     const entries = await fsp3.readdir(srcDir, { withFileTypes: true });
     const dirs = entries.filter((e) => e.isDirectory()).map((e) => e.name);
     if (dirs.length > 0) {
@@ -1576,7 +1574,7 @@ __export(update_check_exports, {
   getUpdateNotification: () => getUpdateNotification
 });
 function cachePath(homeFn = defaultHomeDir2) {
-  return path25.join(homeFn(), ".wrongstack", "update-cache.json");
+  return path24.join(homeFn(), ".wrongstack", "update-cache.json");
 }
 function currentVersion() {
   const req2 = createRequire(import.meta.url);
@@ -1613,7 +1611,7 @@ async function readCache(homeFn = defaultHomeDir2) {
 }
 async function writeCache(entry, homeFn = defaultHomeDir2) {
   try {
-    const dir = path25.dirname(cachePath(homeFn));
+    const dir = path24.dirname(cachePath(homeFn));
     await fsp3.mkdir(dir, { recursive: true });
     await fsp3.writeFile(cachePath(homeFn), JSON.stringify(entry, null, 2), "utf8");
   } catch {
@@ -1686,7 +1684,7 @@ async function getUpdateNotification(signal, homeFn) {
 var defaultHomeDir2, CACHE_TTL_MS;
 var init_update_check = __esm({
   "src/update-check.ts"() {
-    defaultHomeDir2 = () => os6.homedir();
+    defaultHomeDir2 = () => os3.homedir();
     CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
   }
 });
@@ -2234,7 +2232,7 @@ async function runWebUI(opts) {
       return {};
     }
     if (!parsed.providers) return {};
-    const keyFile = path25.join(path25.dirname(opts.globalConfigPath), ".key");
+    const keyFile = path24.join(path24.dirname(opts.globalConfigPath), ".key");
     const vault = new DefaultSecretVault$1({ keyFile });
     return decryptConfigSecrets$1(parsed.providers, vault);
   }
@@ -2267,7 +2265,7 @@ async function runWebUI(opts) {
       parsed = {};
     }
     parsed.providers = providers;
-    const keyFile = path25.join(path25.dirname(opts.globalConfigPath), ".key");
+    const keyFile = path24.join(path24.dirname(opts.globalConfigPath), ".key");
     const vault = new DefaultSecretVault$1({ keyFile });
     const encrypted = encryptConfigSecrets(parsed, vault);
     await atomicWrite(opts.globalConfigPath, JSON.stringify(encrypted, null, 2), { mode: 384 });
@@ -2487,10 +2485,10 @@ async function detectPackageManager(root, declared) {
     const name = declared.split("@")[0];
     if (name) return name;
   }
-  if (await pathExists(path25.join(root, "pnpm-lock.yaml"))) return "pnpm";
-  if (await pathExists(path25.join(root, "bun.lockb"))) return "bun";
-  if (await pathExists(path25.join(root, "bun.lock"))) return "bun";
-  if (await pathExists(path25.join(root, "yarn.lock"))) return "yarn";
+  if (await pathExists(path24.join(root, "pnpm-lock.yaml"))) return "pnpm";
+  if (await pathExists(path24.join(root, "bun.lockb"))) return "bun";
+  if (await pathExists(path24.join(root, "bun.lock"))) return "bun";
+  if (await pathExists(path24.join(root, "yarn.lock"))) return "yarn";
   return "npm";
 }
 function hasUsableScript(scripts, name) {
@@ -2511,7 +2509,7 @@ function parseMakeTargets(makefile) {
 async function detectProjectFacts(root) {
   const facts = { hints: [] };
   try {
-    const pkg = JSON.parse(await fsp3.readFile(path25.join(root, "package.json"), "utf8"));
+    const pkg = JSON.parse(await fsp3.readFile(path24.join(root, "package.json"), "utf8"));
     const scripts = pkg.scripts ?? {};
     const pm = await detectPackageManager(root, pkg.packageManager);
     if (hasUsableScript(scripts, "build")) facts.build = `${pm} run build`;
@@ -2525,14 +2523,14 @@ async function detectProjectFacts(root) {
   } catch {
   }
   try {
-    if (!await pathExists(path25.join(root, "pyproject.toml"))) throw new Error("not python");
+    if (!await pathExists(path24.join(root, "pyproject.toml"))) throw new Error("not python");
     facts.test ??= "pytest";
     facts.lint ??= "ruff check .";
     facts.hints.push("pyproject.toml");
   } catch {
   }
   try {
-    if (!await pathExists(path25.join(root, "go.mod"))) throw new Error("not go");
+    if (!await pathExists(path24.join(root, "go.mod"))) throw new Error("not go");
     facts.build ??= "go build ./...";
     facts.test ??= "go test ./...";
     facts.run ??= "go run .";
@@ -2540,7 +2538,7 @@ async function detectProjectFacts(root) {
   } catch {
   }
   try {
-    if (!await pathExists(path25.join(root, "Cargo.toml"))) throw new Error("not rust");
+    if (!await pathExists(path24.join(root, "Cargo.toml"))) throw new Error("not rust");
     facts.build ??= "cargo build";
     facts.test ??= "cargo test";
     facts.lint ??= "cargo clippy";
@@ -2549,7 +2547,7 @@ async function detectProjectFacts(root) {
   } catch {
   }
   try {
-    const makefile = await fsp3.readFile(path25.join(root, "Makefile"), "utf8");
+    const makefile = await fsp3.readFile(path24.join(root, "Makefile"), "utf8");
     const targets = parseMakeTargets(makefile);
     facts.build ??= targets.has("build") ? "make build" : "make";
     if (targets.has("test")) facts.test ??= "make test";
@@ -2674,11 +2672,6 @@ function estimateTokens(messages) {
   }
   return total;
 }
-function statusIcon(status) {
-  if (status === "healthy") return color.green("\u25CF");
-  if (status === "degraded") return color.yellow("\u25CF");
-  return color.red("\u25CF");
-}
 
 // src/slash-commands/clear.ts
 function buildClearCommand(opts) {
@@ -2717,203 +2710,6 @@ function buildClearCommand(opts) {
     }
   };
 }
-async function runGit(args, cwd) {
-  try {
-    return await new Promise((resolve4, reject) => {
-      const child = spawn("git", args, {
-        cwd,
-        stdio: ["ignore", "pipe", "pipe"]
-      });
-      let stdout = "";
-      let stderr = "";
-      child.stdout?.on("data", (d) => {
-        stdout += d;
-      });
-      child.stderr?.on("data", (d) => {
-        stderr += d;
-      });
-      child.on("error", (err) => {
-        reject(new WrongStackError({
-          message: `Failed to run git: ${err.message}`,
-          code: ERROR_CODES.TOOL_EXECUTION_FAILED,
-          subsystem: "tool",
-          context: { command: "git", args, cwd },
-          cause: err
-        }));
-      });
-      child.on("close", (code) => resolve4({ stdout, stderr, code: code ?? 0 }));
-    });
-  } catch (err) {
-    if (err instanceof WrongStackError) throw err;
-    throw new WrongStackError({
-      message: err instanceof Error ? err.message : String(err),
-      code: ERROR_CODES.TOOL_EXECUTION_FAILED,
-      subsystem: "tool",
-      context: { command: "git", args, cwd },
-      cause: err
-    });
-  }
-}
-function detectCommitType(stats) {
-  const lines = stats.split("\n");
-  const hasTestFiles = lines.some(
-    (l) => l.includes("_test.") || l.includes(".test.") || l.includes(".spec.")
-  );
-  const hasDocs = lines.some(
-    (l) => l.includes("README") || l.includes("CHANGELOG") || l.includes("docs/") || l.includes(".md")
-  );
-  const hasConfig = lines.some(
-    (l) => l.includes("config") || l.includes("tsconfig") || l.includes(".json")
-  );
-  if (hasTestFiles) return "test";
-  if (hasDocs) return "docs";
-  if (hasConfig) return "chore";
-  return "feat";
-}
-async function generateCommitMessageHeuristics(cwd) {
-  const statsResult = await runGit(["diff", "--stat"], cwd);
-  if (statsResult.code !== 0) return "chore: update";
-  const nameResult = await runGit(["diff", "--name-only"], cwd);
-  const files = nameResult.stdout.split("\n").filter(Boolean);
-  const commitType = detectCommitType(statsResult.stdout);
-  let scope = "";
-  if (files.length > 0) {
-    const primary = files[0].split("/")[0];
-    if (primary && primary !== "packages" && primary !== "apps" && primary !== "node_modules") {
-      scope = `(${primary})`;
-    }
-  }
-  if (files.length === 0) {
-    return `${commitType}${scope}: update`;
-  }
-  if (files.length <= 3) {
-    const summary2 = files.map((f) => f.split("/").pop()).join(", ");
-    return `${commitType}${scope}: ${summary2}`;
-  }
-  const summary = files.slice(0, 3).map((f) => f.split("/").pop()).join(", ") + ` and ${files.length - 3} more`;
-  return `${commitType}${scope}: ${summary}`;
-}
-async function hasUncommittedChanges(cwd) {
-  const result = await runGit(["status", "--porcelain"], cwd);
-  return result.stdout.trim().length > 0;
-}
-async function isGitRepo(cwd) {
-  const result = await runGit(["rev-parse", "--git-dir"], cwd);
-  return result.code === 0;
-}
-function buildCommitCommand(_opts, generateCommitMessage) {
-  return {
-    name: "commit",
-    description: "Stage all changes and commit with auto-generated message.",
-    aliases: ["gc"],
-    async run(args, ctx) {
-      const cwd = ctx?.cwd ?? process.cwd();
-      if (!await isGitRepo(cwd)) {
-        return { message: "Not a git repository." };
-      }
-      if (!await hasUncommittedChanges(cwd)) {
-        return { message: "Nothing to commit (working tree clean)." };
-      }
-      const dryRun = args.includes("--dry-run") || args.includes("-n");
-      args.includes("--no-llm");
-      let message;
-      {
-        message = await generateCommitMessageHeuristics(cwd);
-      }
-      if (dryRun) {
-        return {
-          message: `Would commit:
-
-  ${color.green(message)}
-
-${color.dim("(dry-run \u2014 no actual commit)")}`
-        };
-      }
-      const stageResult = await runGit(["add", "."], cwd);
-      if (stageResult.code !== 0) {
-        return { message: `Stage failed: ${stageResult.stderr}` };
-      }
-      const commitResult = await runGit(["commit", "-m", message], cwd);
-      if (commitResult.code !== 0) {
-        return { message: `Commit failed: ${commitResult.stderr}` };
-      }
-      const hashResult = await runGit(["rev-parse", "--short", "HEAD"], cwd);
-      const hash = hashResult.stdout.trim();
-      const pushResult = await runGit(["remote"], cwd);
-      const hasRemote = pushResult.stdout.trim().length > 0;
-      let pushMsg = "";
-      if (hasRemote) {
-        pushMsg = `
-
-${color.dim("Tip: Run /push to push to remote")}`;
-      }
-      return {
-        message: `${color.green("\u2713")} Committed: ${color.bold(message)}
-  ${color.dim(hash)}${pushMsg}`
-      };
-    }
-  };
-}
-function buildGitcheckCommand(_opts) {
-  return {
-    name: "gitcheck",
-    description: "Check for uncommitted changes (for system prompt integration).",
-    aliases: ["gcstatus"],
-    async run(_args, ctx) {
-      const cwd = ctx?.cwd ?? process.cwd();
-      if (!await isGitRepo(cwd)) {
-        return { message: "" };
-      }
-      if (!await hasUncommittedChanges(cwd)) {
-        return { message: "" };
-      }
-      const statusResult = await runGit(["status", "--porcelain"], cwd);
-      const lines = statusResult.stdout.split("\n").filter(Boolean);
-      const count = lines.length;
-      if (count === 0) return { message: "" };
-      return {
-        message: `\u26A0 ${color.yellow(`${count} uncommitted change${count > 1 ? "s" : ""}`)} \u2014 consider /commit`
-      };
-    }
-  };
-}
-function buildPushCommand(_opts) {
-  return {
-    name: "push",
-    description: "Push to remote after commit.",
-    async run(args, ctx) {
-      const cwd = ctx?.cwd ?? process.cwd();
-      if (!await isGitRepo(cwd)) {
-        return { message: "Not a git repository." };
-      }
-      const dryRun = args.includes("--dry-run") || args.includes("-n");
-      const force = args.includes("--force") || args.includes("-f");
-      const remoteResult = await runGit(["remote"], cwd);
-      const remotes = remoteResult.stdout.split("\n").filter(Boolean);
-      if (remotes.length === 0) {
-        return { message: "No remote configured. Add one with: git remote add origin <url>" };
-      }
-      if (dryRun) {
-        return {
-          message: `Would push to ${remotes.join(", ")}${force ? " (force)" : ""}
-${color.dim("(dry-run)")}`
-        };
-      }
-      const branchResult = await runGit(["rev-parse", "--abbrev-ref", "HEAD"], cwd);
-      const branch = branchResult.stdout.trim() || "main";
-      const pushArgs = ["push"];
-      if (force) pushArgs.push("--force");
-      pushArgs.push(...remotes, branch);
-      const pushResult = await runGit(pushArgs, cwd);
-      if (pushResult.code !== 0) {
-        return { message: `Push failed: ${pushResult.stderr}` };
-      }
-      return {
-        message: `${color.green("\u2713")} Pushed to ${remotes.join(", ")} (${branch})`
-      };
-    }
-  };
-}
 
 // src/slash-commands/compact.ts
 function buildCompactCommand(opts) {
@@ -3355,25 +3151,6 @@ function buildFleetCommand(opts) {
     }
   };
 }
-function buildHealthCommand(opts) {
-  return {
-    name: "health",
-    description: "Run health checks (requires --metrics flag).",
-    async run() {
-      if (!opts.healthRegistry)
-        return { message: "Health checks not enabled. Restart with --metrics." };
-      const result = await opts.healthRegistry.run();
-      const lines = [
-        `${statusIcon(result.status)} overall: ${result.status}`,
-        ...result.checks.map((c) => {
-          const detail = c.detail ? color.dim(` \u2014 ${c.detail}`) : "";
-          return `  ${statusIcon(c.status)} ${c.name}: ${c.status}${detail}`;
-        })
-      ];
-      return { message: lines.join("\n") };
-    }
-  };
-}
 
 // src/slash-commands/help.ts
 function buildHelpCommand(opts) {
@@ -3441,8 +3218,8 @@ function buildInitCommand(opts) {
     name: "init",
     description: "Create or update .wrongstack/AGENTS.md project context for the system prompt.",
     async run(_args, ctx) {
-      const dir = path25.join(ctx.projectRoot, ".wrongstack");
-      const file = path25.join(dir, "AGENTS.md");
+      const dir = path24.join(ctx.projectRoot, ".wrongstack");
+      const file = path24.join(dir, "AGENTS.md");
       const detected = await detectProjectFacts(ctx.projectRoot);
       const body = renderAgentsTemplate(detected);
       await fsp3.mkdir(dir, { recursive: true });
@@ -3633,18 +3410,18 @@ function stateBadge(state) {
       return color.dim(state);
   }
 }
-async function readConfig(path26) {
+async function readConfig(path25) {
   try {
-    return JSON.parse(await fsp3.readFile(path26, "utf8"));
+    return JSON.parse(await fsp3.readFile(path25, "utf8"));
   } catch {
     return {};
   }
 }
-async function writeConfig(path26, cfg) {
+async function writeConfig(path25, cfg) {
   const raw = JSON.stringify(cfg, null, 2);
-  const tmp = path26 + ".tmp";
+  const tmp = path25 + ".tmp";
   await fsp3.writeFile(tmp, raw, "utf8");
-  await fsp3.rename(tmp, path26);
+  await fsp3.rename(tmp, path25);
 }
 
 // src/slash-commands/mcp.ts
@@ -3726,150 +3503,6 @@ function buildMemoryCommand(opts) {
     }
   };
 }
-function buildMetricsCommand(opts) {
-  return {
-    name: "metrics",
-    description: "Show metrics snapshot (requires --metrics flag).",
-    async run() {
-      if (!opts.metricsSink)
-        return { message: "Metrics not enabled. Restart with --metrics to collect." };
-      const snap = opts.metricsSink.snapshot();
-      if (snap.series.length === 0) return { message: "No metrics recorded yet." };
-      const lines = [];
-      const byName = /* @__PURE__ */ new Map();
-      for (const s of snap.series) {
-        const bucket = byName.get(s.name) ?? [];
-        bucket.push(s);
-        byName.set(s.name, bucket);
-      }
-      for (const [name, series] of [...byName.entries()].sort()) {
-        lines.push(color.dim(`# ${name}`));
-        for (const s of series) {
-          const labels = Object.entries(s.labels).map(([k, v]) => `${k}=${v}`).join(" ");
-          const labelStr = labels ? color.dim(` {${labels}}`) : "";
-          if (s.type === "histogram")
-            lines.push(
-              `  count=${s.values.count} sum=${s.values.sum} min=${s.values.min} max=${s.values.max} p50=${s.values.p50} p95=${s.values.p95} p99=${s.values.p99}${labelStr}`
-            );
-          else lines.push(`  ${s.values.value}${labelStr}`);
-        }
-      }
-      return { message: lines.join("\n") };
-    }
-  };
-}
-function buildPlanCommand(opts) {
-  return {
-    name: "plan",
-    description: "Strategic plan board: /plan [show|add <title>|start <id|#>|done <id|#>|remove <id|#>|promote <id|#> [subtask ...]|derive <id|#>|template [list|use <name>]|clear]",
-    async run(args) {
-      const planPath = opts.paths?.projectPlan ?? opts.planPath;
-      if (!planPath) return { message: "Plan storage is not configured for this session." };
-      const ctx = opts.context;
-      const sessionId = ctx?.session.id ?? "unknown";
-      const [verb, ...rest] = args.trim().split(/\s+/);
-      const restJoined = rest.join(" ").trim();
-      const plan = await loadPlan(planPath) ?? emptyPlan(sessionId);
-      switch (verb) {
-        case "":
-        case "show":
-        case "list": {
-          return { message: formatPlan(plan) };
-        }
-        case "add": {
-          if (!restJoined) return { message: "Usage: /plan add <title>" };
-          const { plan: updated, item } = addPlanItem(plan, restJoined);
-          await savePlan(planPath, updated);
-          return { message: `Added: ${item.title}
-${formatPlan(updated)}` };
-        }
-        case "start":
-        case "progress": {
-          if (!restJoined) return { message: "Usage: /plan start <id|index>" };
-          const updated = setPlanItemStatus(plan, restJoined, "in_progress");
-          await savePlan(planPath, updated);
-          return { message: formatPlan(updated) };
-        }
-        case "done":
-        case "complete": {
-          if (!restJoined) return { message: "Usage: /plan done <id|index>" };
-          const updated = setPlanItemStatus(plan, restJoined, "done");
-          await savePlan(planPath, updated);
-          return { message: formatPlan(updated) };
-        }
-        case "remove":
-        case "delete":
-        case "rm": {
-          if (!restJoined) return { message: "Usage: /plan remove <id|index>" };
-          const updated = removePlanItem(plan, restJoined);
-          await savePlan(planPath, updated);
-          return { message: formatPlan(updated) };
-        }
-        case "promote": {
-          if (!restJoined) return { message: "Usage: /plan promote <id|index> [subtask ...]" };
-          const [target, ...subtasks] = restJoined.split(/\s+/);
-          if (!target) return { message: "Usage: /plan promote <id|index> [subtask ...]" };
-          const derived = deriveTodosFromPlanItem(plan, target, subtasks.length > 0 ? subtasks : void 0);
-          if (!derived) return { message: `No plan item matched "${target}".` };
-          await savePlan(planPath, derived.plan);
-          if (ctx) {
-            ctx.state.replaceTodos(derived.todos);
-          }
-          return {
-            message: `Promoted to ${derived.todos.length} todo(s):
-${formatTodosList(derived.todos)}
-
-${formatPlan(derived.plan)}`
-          };
-        }
-        case "derive": {
-          if (!restJoined) return { message: "Usage: /plan derive <id|index>" };
-          const derived = deriveTodosFromPlanItem(plan, restJoined);
-          if (!derived) return { message: `No plan item matched "${restJoined}".` };
-          await savePlan(planPath, derived.plan);
-          if (ctx) {
-            ctx.state.replaceTodos(derived.todos);
-          }
-          return {
-            message: `Derived ${derived.todos.length} todo(s):
-${formatTodosList(derived.todos)}
-
-${formatPlan(derived.plan)}`
-          };
-        }
-        case "template": {
-          const subVerb = rest[0] ?? "";
-          const subRest = rest.slice(1).join(" ").trim();
-          if (subVerb === "" || subVerb === "list") {
-            return { message: formatPlanTemplates() };
-          }
-          if (subVerb === "use") {
-            if (!subRest) return { message: "Usage: /plan template use <template-name>" };
-            const template = getPlanTemplate(subRest);
-            if (!template) return { message: `Unknown template "${subRest}". Use /plan template list to see available templates.` };
-            let updated = plan;
-            for (const item of template.items) {
-              ({ plan: updated } = addPlanItem(updated, item.title, item.details));
-            }
-            await savePlan(planPath, updated);
-            return { message: `Applied template "${template.name}" (${template.items.length} items):
-${formatPlan(updated)}` };
-          }
-          return { message: `Unknown template subcommand "${subVerb}". Try: list | use <name>` };
-        }
-        case "clear": {
-          const updated = clearPlan(plan);
-          await savePlan(planPath, updated);
-          return { message: "Plan cleared." };
-        }
-        default:
-          return {
-            message: `Unknown subcommand "${verb}". Try: show | add <title> | start <id|#> | done <id|#> | remove <id|#> | promote <id|#> | derive <id|#> | template [list|use <name>] | clear`
-          };
-      }
-    }
-  };
-}
 
 // src/slash-commands/plugin.ts
 function buildPluginCommand(opts) {
@@ -3956,30 +3589,6 @@ function buildExitCommand(opts) {
     }
   };
 }
-function buildSkillCommand(opts) {
-  return {
-    name: "skill",
-    description: "Show skill details or list available skills. Use /skill-gen to create new skills.",
-    async run(args) {
-      if (!opts.skillLoader) return { message: "No skill loader configured." };
-      if (!args.trim()) {
-        const entries = await opts.skillLoader.listEntries();
-        if (entries.length === 0) return { message: "No skills found." };
-        const lines = entries.map((e) => {
-          const scopeTag = e.scope.length > 0 ? `  ${color.dim(`(${e.scope.slice(0, 3).join(", ")})`)}` : "";
-          return `  ${color.bold(e.name)}${scopeTag}
-    Use when: ${e.trigger}`;
-        });
-        return { message: `Available skills:
-${lines.join("\n\n")}
-` };
-      }
-      const skill = await opts.skillLoader.find(args.trim());
-      if (!skill) return { message: `Skill "${args.trim()}" not found.` };
-      return { message: await opts.skillLoader.readBody(skill.name) };
-    }
-  };
-}
 
 // src/slash-commands/spawn-agents.ts
 function buildSpawnCommand(opts) {
@@ -4439,6 +4048,7 @@ function buildGoalCommand(opts) {
       const [verbRaw, ...rest] = trimmed.split(/\s+/);
       const verb = (verbRaw ?? "").toLowerCase();
       const restJoined = rest.join(" ").trim();
+      if (!opts.paths) return { message: "Goal not available \u2014 paths not configured." };
       const goalPath = opts.paths.projectGoal;
       const verbForDispatch = verb && !KNOWN_VERBS.has(verb) ? "set" : verb;
       const setText = verbForDispatch === "set" && !KNOWN_VERBS.has(verb) ? trimmed : restJoined;
@@ -4616,290 +4226,6 @@ ${targetMode.description}`
 
 // src/slash-commands/index.ts
 init_sdd();
-
-// src/slash-commands/skill-generator.ts
-function buildSkillGeneratorCommand(opts) {
-  return {
-    name: "skill-gen",
-    description: "Create a new AI skill interactively. The AI will guide you.",
-    help: [
-      "\u2554\u2550\u2550\u2550 Skill Generator \u2550\u2550\u2550\u2557",
-      "",
-      "Create new AI skills with AI guidance.",
-      "",
-      "Usage:",
-      "  /skill-gen              Start skill creation",
-      "  /skill-gen list         List existing skills",
-      "  /skill-gen edit <name>  View an existing skill",
-      "",
-      "The AI will ask you questions and create the skill file.",
-      "Skills are saved to .wrongstack/skills/<name>/SKILL.md"
-    ].join("\n"),
-    async run(args) {
-      const trimmed = args.trim();
-      if (trimmed === "list" || trimmed === "ls") {
-        if (!opts.skillLoader) return { message: "No skill loader configured." };
-        const entries = await opts.skillLoader.listEntries();
-        if (entries.length === 0) return { message: "No skills found." };
-        const lines = entries.map((e) => {
-          const src = e.source === "project" ? "\u{1F4C1}" : e.source === "user" ? "\u{1F464}" : "\u{1F4E6}";
-          return `  ${src} ${e.name}
-     ${e.trigger}`;
-        });
-        return { message: `Available Skills:
-${lines.join("\n\n")}
-` };
-      }
-      if (trimmed.startsWith("edit ")) {
-        const skillName = trimmed.slice(5).trim();
-        if (!opts.skillLoader) return { message: "No skill loader configured." };
-        const skill = await opts.skillLoader.find(skillName);
-        if (!skill) return { message: `Skill "${skillName}" not found.` };
-        const body = await opts.skillLoader.readBody(skillName);
-        return {
-          message: [
-            `Skill: ${skillName}`,
-            `Path: ${skill.path}`,
-            "",
-            body
-          ].join("\n")
-        };
-      }
-      return {
-        message: "\u2554\u2550\u2550\u2550 Skill Generator \u2550\u2550\u2550\u2557\n\nThe AI will guide you through creating a new skill.\nAnswer its questions naturally.",
-        runText: "I want to create a new AI skill. Read the skill-creator skill and guide me through the process. Ask me questions one at a time \u2014 name, description, what to cover \u2014 then create the SKILL.md file."
-      };
-    }
-  };
-}
-function getProviderFromContext(ctx, opts) {
-  if (opts.llmProvider && typeof opts.llmProvider.complete === "function") {
-    return { provider: opts.llmProvider, model: opts.llmModel };
-  }
-  if (ctx.provider && typeof ctx.provider.complete === "function") {
-    return { provider: ctx.provider, model: ctx.model };
-  }
-  return null;
-}
-function buildSecurityCommand(opts) {
-  return {
-    name: "security",
-    description: "Security scanning: scan, audit, report",
-    argsHint: "[scan|audit|report] [options]",
-    help: `
-# /security \u2014 Security Scanner
-
-Automated security scanning with tech stack detection.
-
-## Commands
-
-### /security scan [options]
-Run a full security scan on the current project.
-Options:
-  --depth quick|standard|deep  Scan depth (default: standard)
-  --format markdown|json|html  Report format (default: markdown)
-
-### /security audit
-Run dependency audit + security scan.
-
-### /security report [id]
-List or view security reports.
-
-## Examples
-
-/security scan
-/security scan --depth deep --format html
-/security audit
-/security report
-`,
-    async run(args, ctx) {
-      const parts = args.trim().split(/\s+/);
-      const subcommand = parts[0] || "";
-      switch (subcommand) {
-        case "scan":
-          return handleScan(parts.slice(1).join(" "), ctx, opts);
-        case "audit":
-          return handleAudit(ctx, opts);
-        case "report":
-          return handleReport(parts[1] || "");
-        default:
-          return { message: getHelpMessage() };
-      }
-    }
-  };
-}
-async function handleScan(args, ctx, opts) {
-  const options = parseArgs2(args);
-  const projectRoot = ctx.projectRoot || opts.projectRoot;
-  try {
-    const providerInfo = getProviderFromContext(ctx, opts);
-    if (!providerInfo) {
-      return { message: "\u274C Security scan requires an active LLM provider. No provider configured." };
-    }
-    const result = await defaultOrchestrator.run(providerInfo, {
-      projectRoot,
-      scanOptions: {
-        depth: options.depth || "standard",
-        includeSecrets: true,
-        includeInjection: true,
-        includeConfig: true
-      },
-      reportOptions: {
-        format: options.format || "markdown"
-      }
-    });
-    const summary = result.scanResult.summary;
-    const status = summary.total === 0 ? "\u2705 No issues found" : `\u26A0\uFE0F Found ${summary.total} issues`;
-    const reportContent = result.synthesizedReport || `# Security Scan Complete
-
-**Project:** ${projectRoot}
-**Tech Stack:** ${result.detectionResult.detectedStacks[0]?.stack || "unknown"}
-**Scanned Files:** ${result.scanResult.scannedFiles}
-**Duration:** ${result.scanResult.scanDurationMs}ms
-
-## Summary
-
-| Severity | Count |
-|----------|-------|
-| \u{1F534} Critical | ${summary.critical} |
-| \u{1F7E0} High | ${summary.high} |
-| \u{1F7E1} Medium | ${summary.medium} |
-| \u{1F7E2} Low | ${summary.low} |
-
-**Status:** ${status}
-
-**Report:** ${result.reportPath}
-`;
-    return {
-      message: reportContent,
-      metadata: {
-        scanResult: result.scanResult,
-        reportPath: result.reportPath,
-        techStack: result.detectionResult.detectedStacks[0]
-      }
-    };
-  } catch (error) {
-    return { message: `\u274C Scan failed: ${error}` };
-  }
-}
-async function handleAudit(ctx, opts) {
-  const projectRoot = ctx.projectRoot || opts.projectRoot;
-  try {
-    const providerInfo = getProviderFromContext(ctx, opts);
-    if (!providerInfo) {
-      return { message: "\u274C Security audit requires an active LLM provider. No provider configured." };
-    }
-    const result = await defaultOrchestrator.run(providerInfo, {
-      projectRoot,
-      reportOptions: { format: "markdown" }
-    });
-    const summary = result.scanResult.summary;
-    const depIssues = summary.critical + summary.high;
-    const reportContent = result.synthesizedReport || `# Security Audit Complete
-
-**Project:** ${projectRoot}
-**Tech Stack:** ${result.detectionResult.detectedStacks[0]?.stack || "unknown"}
-
-## Dependency Health
-
-| Status | Count |
-|--------|-------|
-| Critical Issues | ${summary.critical} |
-| High Priority | ${summary.high} |
-| Medium Priority | ${summary.medium} |
-| Low Priority | ${summary.low} |
-
-${depIssues === 0 ? "\u2705 No known vulnerabilities detected" : `\u26A0\uFE0F ${depIssues} vulnerabilities need attention`}
-
-**Full Report:** ${result.reportPath}
-`;
-    return {
-      message: reportContent,
-      metadata: {
-        scanResult: result.scanResult,
-        reportPath: result.reportPath
-      }
-    };
-  } catch (error) {
-    return { message: `\u274C Audit failed: ${error}` };
-  }
-}
-async function handleReport(reportId) {
-  const reportsDir = "security-reports";
-  try {
-    const files = await readdir(reportsDir);
-    const reports = files.filter((f) => f.startsWith("security-report-") && (f.endsWith(".md") || f.endsWith(".json"))).sort().reverse();
-    if (!reportId) {
-      if (reports.length === 0) {
-        return { message: "\u{1F4ED} No security reports found. Run `/security scan` first." };
-      }
-      const list = reports.map((r, i) => {
-        const date = r.replace("security-report-", "").replace(/\.(md|json)$/, "");
-        return `  ${i + 1}. ${date}`;
-      }).join("\n");
-      return { message: `# Available Security Reports
-
-${list}
-
-Use \`/security report <number>\` to view a specific report.` };
-    }
-    const index = Number.parseInt(reportId, 10) - 1;
-    if (!Number.isNaN(index) && reports[index]) {
-      const content = await readFile(join(reportsDir, reports[index]), "utf-8");
-      return { message: `# Security Report
-
-${content}` };
-    }
-    const match = reports.find((r) => r.includes(reportId));
-    if (match) {
-      const content = await readFile(join(reportsDir, match), "utf-8");
-      return { message: `# Security Report
-
-${content}` };
-    }
-    return { message: `\u274C Report "${reportId}" not found. Use \`/security report\` to see available reports.` };
-  } catch {
-    return { message: "\u{1F4ED} No security reports found. Run `/security scan` first." };
-  }
-}
-function parseArgs2(args) {
-  const result = {};
-  const parts = args.split(/\s+/);
-  for (let i = 0; i < parts.length; i++) {
-    const part = parts[i];
-    if (!part || !part.startsWith("--")) continue;
-    const key = part.slice(2);
-    const next = parts[i + 1];
-    if (next && !next.startsWith("--")) {
-      result[key] = next;
-      i++;
-    } else {
-      result[key] = "true";
-    }
-  }
-  return result;
-}
-function getHelpMessage() {
-  return `# /security \u2014 Security Scanner
-
-**Available Commands:**
-
-1. **/security scan** \u2014 Run full security scan
-   \`/security scan --depth deep --format html\`
-
-2. **/security audit** \u2014 Run dependency audit + security scan
-
-3. **/security report** \u2014 List available reports
-
-**Features:**
-- Automatic tech stack detection
-- Dynamic security skill generation
-- Secrets, injection, and config vulnerability scanning
-- Markdown/JSON/HTML reports
-- .gitignore auto-update
-
-Run \`/security scan\` to start.`;
-}
 var CONFIG_ENV = "WRONGSTACK_STATUSLINE_CONFIG";
 var DEFAULTS = {
   todos: true,
@@ -4911,7 +4237,7 @@ var DEFAULTS = {
   cost: true
 };
 function resolveConfigPath() {
-  return process.env[CONFIG_ENV] ?? path25.join(process.env.HOME ?? "", ".wrongstack", "statusline.json");
+  return process.env[CONFIG_ENV] ?? path24.join(process.env.HOME ?? "", ".wrongstack", "statusline.json");
 }
 async function loadStatuslineConfig() {
   const p = resolveConfigPath();
@@ -4925,7 +4251,7 @@ async function loadStatuslineConfig() {
 async function saveStatuslineConfig(cfg) {
   const p = resolveConfigPath();
   try {
-    await fsp3.mkdir(path25.dirname(p), { recursive: true });
+    await fsp3.mkdir(path24.dirname(p), { recursive: true });
     await atomicWrite(p, JSON.stringify(cfg, null, 2));
   } catch (err) {
     throw new FsError({
@@ -5823,168 +5149,8 @@ When the error confidence is low (< 0.85) or the problem spans multiple files,
     }
   };
 }
-function makeInstaller(opts, projectRoot, global) {
-  const globalRoot = path25.join(os6.homedir(), ".wrongstack");
-  return new SkillInstaller({
-    manifestPath: path25.join(globalRoot, "installed-skills.json"),
-    projectSkillsDir: path25.join(projectRoot, ".wrongstack", "skills"),
-    globalSkillsDir: path25.join(globalRoot, "skills"),
-    projectHash: projectHash(projectRoot),
-    skillLoader: opts.skillLoader
-  });
-}
-function buildSkillInstallCommand(opts) {
-  return {
-    name: "skill-install",
-    description: "Install skills from a GitHub repository.",
-    argsHint: "<user/repo[@ref]> [--global]",
-    help: [
-      "\u2554\u2550\u2550\u2550 Skill Install \u2550\u2550\u2550\u2557",
-      "",
-      "Install skills from a GitHub repository.",
-      "",
-      "Usage:",
-      "  /skill-install <user/repo>              Install from default branch (main)",
-      "  /skill-install <user/repo@ref>          Install specific tag/branch/commit",
-      "  /skill-install <user/repo> --global     Install to user-global skills",
-      "",
-      "Supports both single-skill repos (SKILL.md at root)",
-      "and multi-skill repos (skills/ subdirectory).",
-      "",
-      "Examples:",
-      "  /skill-install wrongstack/awesome-skills",
-      "  /skill-install wrongstack/skills@v1.0",
-      "  /skill-install user/my-skills --global"
-    ].join("\n"),
-    async run(args, ctx) {
-      const parts = args.trim().split(/\s+/);
-      const ref = parts.find((p) => !p.startsWith("--"));
-      const isGlobal = parts.includes("--global");
-      if (!ref) {
-        return { message: "Usage: /skill-install <user/repo[@ref]> [--global]" };
-      }
-      const installer = makeInstaller(opts, ctx.projectRoot);
-      try {
-        const results = await installer.install(ref, { global: isGlobal });
-        if (results.length === 0) {
-          return { message: "No skills found in the repository." };
-        }
-        const scope = isGlobal ? "user-global" : "project";
-        const lines = [`Installed ${results.length} skill(s) [${scope}]:`];
-        for (const r of results) {
-          lines.push(`  \u2713 ${r.name} (${r.source}@${r.ref})`);
-          lines.push(`    \u2192 ${r.path}`);
-        }
-        return { message: lines.join("\n") };
-      } catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        opts.renderer.writeError(`Install failed: ${msg}`);
-        return { message: `\u2717 Install failed: ${msg}` };
-      }
-    }
-  };
-}
-function buildSkillUpdateCommand(opts) {
-  return {
-    name: "skill-update",
-    description: "Update installed skills from their GitHub source.",
-    argsHint: "[name|ref] [--global]",
-    help: [
-      "\u2554\u2550\u2550\u2550 Skill Update \u2550\u2550\u2550\u2557",
-      "",
-      "Update installed skills from their GitHub source.",
-      "",
-      "Usage:",
-      "  /skill-update                  Update all installed skills",
-      "  /skill-update <name>           Update a specific skill",
-      "  /skill-update <user/repo@ref>  Update to a different ref",
-      "  /skill-update <name> --global  Update a global skill"
-    ].join("\n"),
-    async run(args, ctx) {
-      const parts = args.trim().split(/\s+/);
-      const nameOrRef = parts.find((p) => !p.startsWith("--"));
-      const isGlobal = parts.includes("--global");
-      const installer = makeInstaller(opts, ctx.projectRoot);
-      try {
-        const result = await installer.update(nameOrRef, { global: isGlobal });
-        const lines = [];
-        if (result.updated.length > 0) {
-          lines.push(`Updated ${result.updated.length} skill(s):`);
-          for (const u of result.updated) {
-            if (u.oldRef !== u.newRef) {
-              lines.push(`  \u2713 ${u.name} (${u.oldRef} \u2192 ${u.newRef})`);
-            } else {
-              lines.push(`  \u2713 ${u.name} (refreshed)`);
-            }
-          }
-        }
-        if (result.unchanged.length > 0) {
-          lines.push(`Up to date: ${result.unchanged.join(", ")}`);
-        }
-        if (result.errors.length > 0) {
-          for (const e of result.errors) {
-            lines.push(`  \u2717 ${e.name}: ${e.error}`);
-          }
-        }
-        if (lines.length === 0) {
-          return { message: "No installed skills to update." };
-        }
-        return { message: lines.join("\n") };
-      } catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        return { message: `\u2717 Update failed: ${msg}` };
-      }
-    }
-  };
-}
-function buildSkillUninstallCommand(opts) {
-  return {
-    name: "skill-uninstall",
-    description: "Remove an installed skill.",
-    argsHint: "<name> [--global]",
-    help: [
-      "\u2554\u2550\u2550\u2550 Skill Uninstall \u2550\u2550\u2550\u2557",
-      "",
-      "Remove an installed skill and its files.",
-      "",
-      "Usage:",
-      "  /skill-uninstall <name>             Remove from project skills",
-      "  /skill-uninstall <name> --global    Remove from user-global skills"
-    ].join("\n"),
-    async run(args, ctx) {
-      const parts = args.trim().split(/\s+/);
-      const name = parts.find((p) => !p.startsWith("--"));
-      const isGlobal = parts.includes("--global");
-      if (!name) {
-        const installer2 = makeInstaller(opts, ctx.projectRoot);
-        const installed = await installer2.listInstalled();
-        if (installed.length === 0) {
-          return { message: "No installed skills found." };
-        }
-        const scope = isGlobal ? "user" : "project";
-        const filtered = installed.filter((s) => s.scope === scope);
-        if (filtered.length === 0) {
-          return { message: `No installed skills found (${scope} scope).` };
-        }
-        const lines = [`Installed skills (${scope}):`];
-        for (const s of filtered) {
-          lines.push(`  ${s.name}  ${s.source}@${s.ref}  (${s.installedAt.slice(0, 10)})`);
-        }
-        lines.push("", "Use /skill-uninstall <name> to remove.");
-        return { message: lines.join("\n") };
-      }
-      const installer = makeInstaller(opts, ctx.projectRoot);
-      try {
-        await installer.uninstall(name, { global: isGlobal });
-        return { message: `\u2713 Skill "${name}" uninstalled.` };
-      } catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        return { message: `\u2717 Uninstall failed: ${msg}` };
-      }
-    }
-  };
-}
 function getStore(opts) {
+  if (!opts.paths) throw new Error("PhaseStore not available \u2014 paths not configured.");
   return new PhaseStore({ baseDir: opts.paths.projectAutophase });
 }
 function formatProgress(p) {
@@ -6022,7 +5188,7 @@ function formatPhaseList(graph) {
 }
 async function gatherProjectContext2(projectRoot) {
   try {
-    const raw = await fsp3.readFile(path25.join(projectRoot, "package.json"), "utf8");
+    const raw = await fsp3.readFile(path24.join(projectRoot, "package.json"), "utf8");
     const pkg = JSON.parse(raw);
     const parts = [
       `Project: ${String(pkg.name ?? "unknown")}`,
@@ -6185,6 +5351,146 @@ function buildWorktreeCommand(opts) {
     }
   };
 }
+async function persistAutonomySetting(deps, mutator) {
+  let raw;
+  let fileExists = true;
+  try {
+    raw = await fsp3.readFile(deps.globalConfigPath, "utf8");
+  } catch (err) {
+    if (err.code !== "ENOENT") {
+      throw new Error(`Could not read ${deps.globalConfigPath}: ${err.message}`);
+    }
+    fileExists = false;
+    raw = "{}";
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (err) {
+    if (fileExists) {
+      throw new Error(`Config at ${deps.globalConfigPath} is not valid JSON: ${err.message}`);
+    }
+    parsed = {};
+  }
+  const decrypted = decryptConfigSecrets(parsed, deps.vault);
+  const autonomy = decrypted.autonomy ?? {};
+  mutator(autonomy);
+  decrypted.autonomy = autonomy;
+  const encrypted = encryptConfigSecrets$1(decrypted, deps.vault);
+  await atomicWrite(deps.globalConfigPath, JSON.stringify(encrypted, null, 2), { mode: 384 });
+  deps.configStore.update({ autonomy: decrypted.autonomy });
+}
+
+// src/slash-commands/settings.ts
+var noOpVault = {
+  encrypt: (v) => v,
+  decrypt: (v) => v,
+  isEncrypted: () => false
+};
+function formatDelay(ms) {
+  if (ms >= 6e4) return `${Math.round(ms / 6e4)}m`;
+  if (ms === 0) return "disabled";
+  return `${Math.round(ms / 1e3)}s`;
+}
+function buildSettingsCommand(opts) {
+  const help = [
+    "Usage:",
+    "  /settings                     Show current settings",
+    "  /settings delay <seconds>     Auto-proceed delay in auto mode (0 disables)",
+    "  /settings mode <off|suggest|auto>   Default autonomy mode at startup",
+    "  /settings defaults            Show built-in default values",
+    "",
+    "Settings are persisted to ~/.wrongstack/config.json."
+  ].join("\n");
+  function currentView() {
+    const autonomy = opts.configStore.get().autonomy;
+    const delay = autonomy?.autoProceedDelayMs ?? 45e3;
+    const mode = autonomy?.defaultMode ?? "off";
+    return [
+      `${color.bold("WrongStack")} ${color.dim("\u2014 Settings")}`,
+      "",
+      `  auto-proceed delay:    ${color.cyan(formatDelay(delay))}   ${color.dim("change: /settings delay <seconds>")}`,
+      `  default autonomy mode: ${color.cyan(mode)}   ${color.dim("change: /settings mode off|suggest|auto")}`,
+      "",
+      color.dim("  Persisted to ~/.wrongstack/config.json \xB7 /settings help for more")
+    ].join("\n");
+  }
+  return {
+    name: "settings",
+    description: "View or change settings (auto-proceed delay, default autonomy mode).",
+    help,
+    async run(args) {
+      const parts = args.trim().split(/\s+/).filter(Boolean);
+      const sub = (parts[0] ?? "").toLowerCase();
+      if (sub === "help" || sub === "--help") {
+        return { message: this.help ?? "" };
+      }
+      if (!opts.configStore || !opts.paths) {
+        return { message: `${color.red("Error")} config store not available.` };
+      }
+      if (!sub) {
+        return { message: currentView() };
+      }
+      if (sub === "defaults") {
+        return {
+          message: [
+            `${color.bold("Default Values")}`,
+            "",
+            `  auto-proceed delay:    ${color.cyan("45s")} ${color.dim("(WRONGSTACK_AUTO_PROCEED_DELAY_MS env)")}`,
+            `  default autonomy mode: ${color.cyan("off")}`,
+            `  iteration timeout:     ${color.cyan("5 min")}`,
+            `  session timeout:       ${color.cyan("30 min")}`,
+            `  max iterations:        ${color.cyan("100")}`
+          ].join("\n")
+        };
+      }
+      const persistDeps = {
+        configStore: opts.configStore,
+        globalConfigPath: opts.paths.globalConfig,
+        vault: noOpVault
+      };
+      try {
+        if (sub === "delay") {
+          const raw = parts[1];
+          if (raw === void 0) {
+            return {
+              message: `${color.amber("Usage:")} /settings delay <seconds>   ${color.dim("(0 disables)")}`
+            };
+          }
+          const seconds = Number.parseFloat(raw);
+          if (Number.isNaN(seconds) || seconds < 0) {
+            return {
+              message: `${color.red("Invalid number")}: "${raw}". Enter seconds, e.g. /settings delay 30`
+            };
+          }
+          const ms = Math.round(seconds * 1e3);
+          await persistAutonomySetting(persistDeps, (autonomy) => {
+            autonomy.autoProceedDelayMs = ms;
+          });
+          return { message: `${color.green("\u2713")} auto-proceed delay \u2192 ${formatDelay(ms)}` };
+        }
+        if (sub === "mode") {
+          const raw = (parts[1] ?? "").toLowerCase();
+          const modes = ["off", "suggest", "auto"];
+          if (!modes.includes(raw)) {
+            return { message: `${color.amber("Usage:")} /settings mode off|suggest|auto` };
+          }
+          await persistAutonomySetting(persistDeps, (autonomy) => {
+            autonomy.defaultMode = raw;
+          });
+          return { message: `${color.green("\u2713")} default autonomy \u2192 ${color.bold(raw)}` };
+        }
+        return {
+          message: `${color.red("Unknown setting")} "${sub}". Try ${color.dim("/settings")}, ${color.dim("/settings delay <s>")}, or ${color.dim("/settings mode <m>")}.`
+        };
+      } catch (err) {
+        return {
+          message: `${color.red("Settings error")}: ${err instanceof Error ? err.message : String(err)}`
+        };
+      }
+    }
+  };
+}
 
 // src/slash-commands/index.ts
 function buildBuiltinSlashCommands(opts) {
@@ -6195,11 +5501,6 @@ function buildBuiltinSlashCommands(opts) {
     buildCompactCommand(opts),
     buildContextCommand(opts),
     buildToolsCommand(opts),
-    buildSkillCommand(opts),
-    buildSkillGeneratorCommand(opts),
-    buildSkillInstallCommand(opts),
-    buildSkillUpdateCommand(opts),
-    buildSkillUninstallCommand(opts),
     buildPluginCommand(opts),
     buildMcpSlashCommand(opts),
     buildDiagCommand(opts),
@@ -6208,11 +5509,8 @@ function buildBuiltinSlashCommands(opts) {
     buildAgentsCommand(opts),
     buildDirectorCommand(opts),
     buildFleetCommand(opts),
-    buildMetricsCommand(opts),
-    buildHealthCommand(opts),
     buildMemoryCommand(opts),
     buildTodosCommand(opts),
-    buildPlanCommand(opts),
     buildSddCommand(opts),
     buildSaveCommand(opts),
     buildLoadCommand(opts),
@@ -6222,13 +5520,10 @@ function buildBuiltinSlashCommands(opts) {
     buildBtwCommand(opts),
     buildModeCommand(opts),
     buildExitCommand(opts),
-    buildCommitCommand(),
-    buildGitcheckCommand(),
-    buildPushCommand(),
-    buildSecurityCommand(opts),
     buildFixCommand(opts),
     buildAutoPhaseCommand(opts),
     buildWorktreeCommand(opts),
+    buildSettingsCommand(opts),
     buildStatuslineCommand({
       cwd: opts.cwd,
       hiddenItems: opts.statuslineHiddenItems ?? [],
@@ -6256,13 +5551,13 @@ var MANIFESTS = [
 ];
 async function detectProjectKind(projectRoot) {
   try {
-    await fsp3.access(path25.join(projectRoot, ".wrongstack", "AGENTS.md"));
+    await fsp3.access(path24.join(projectRoot, ".wrongstack", "AGENTS.md"));
     return "initialized";
   } catch {
   }
   for (const m of MANIFESTS) {
     try {
-      await fsp3.access(path25.join(projectRoot, m));
+      await fsp3.access(path24.join(projectRoot, m));
       return "project";
     } catch {
     }
@@ -6270,8 +5565,8 @@ async function detectProjectKind(projectRoot) {
   return "empty";
 }
 async function scaffoldAgentsMd(projectRoot) {
-  const dir = path25.join(projectRoot, ".wrongstack");
-  const file = path25.join(dir, "AGENTS.md");
+  const dir = path24.join(projectRoot, ".wrongstack");
+  const file = path24.join(dir, "AGENTS.md");
   const facts = await detectProjectFacts(projectRoot);
   const body = renderAgentsTemplate(facts);
   await fsp3.mkdir(dir, { recursive: true });
@@ -6284,7 +5579,7 @@ async function runProjectCheck(opts) {
   if (kind === "initialized") {
     renderer.write(
       `
-  ${color.green("\u2713")} Project initialized ${color.dim(`(${path25.join(projectRoot, ".wrongstack", "AGENTS.md")})`)}
+  ${color.green("\u2713")} Project initialized ${color.dim(`(${path24.join(projectRoot, ".wrongstack", "AGENTS.md")})`)}
 `
     );
     return true;
@@ -6315,7 +5610,7 @@ async function runProjectCheck(opts) {
     }
     return true;
   }
-  const gitDir = path25.join(projectRoot, ".git");
+  const gitDir = path24.join(projectRoot, ".git");
   let hasGit = false;
   try {
     await fsp3.access(gitDir);
@@ -6337,9 +5632,9 @@ async function runProjectCheck(opts) {
     }
     if (answer2 === "y" || answer2 === "yes") {
       try {
-        const { spawn: spawn4 } = await import('child_process');
+        const { spawn: spawn3 } = await import('child_process');
         await new Promise((resolve4, reject) => {
-          const child = spawn4("git", ["init"], { cwd: projectRoot });
+          const child = spawn3("git", ["init"], { cwd: projectRoot });
           child.on("error", reject);
           child.on("close", (code) => code === 0 ? resolve4() : reject(new Error(`git init failed with ${code}`)));
         });
@@ -6440,10 +5735,10 @@ async function runLaunchPrompts(opts) {
   return { mode, yolo, director, autonomy };
 }
 async function bootConfig(flags) {
-  const cwd = typeof flags["cwd"] === "string" ? path25.resolve(flags["cwd"]) : process.cwd();
+  const cwd = typeof flags["cwd"] === "string" ? path24.resolve(flags["cwd"]) : process.cwd();
   const pathResolver = new DefaultPathResolver(cwd);
   const projectRoot = pathResolver.projectRoot;
-  const userHome = os6.homedir();
+  const userHome = os3.homedir();
   const wpaths = resolveWstackPaths({ projectRoot, userHome });
   await ensureProjectMeta(wpaths, projectRoot);
   const vault = new DefaultSecretVault({ keyFile: wpaths.secretsKey });
@@ -6507,7 +5802,7 @@ var ReadlineInputReader = class {
   history = [];
   pending = false;
   constructor(opts = {}) {
-    this.historyFile = opts.historyFile ?? path25.join(os6.homedir(), ".wrongstack", "history");
+    this.historyFile = opts.historyFile ?? path24.join(os3.homedir(), ".wrongstack", "history");
   }
   async loadHistory() {
     try {
@@ -6519,7 +5814,7 @@ var ReadlineInputReader = class {
   }
   async saveHistory() {
     try {
-      await fsp3.mkdir(path25.dirname(this.historyFile), { recursive: true });
+      await fsp3.mkdir(path24.dirname(this.historyFile), { recursive: true });
       await fsp3.writeFile(this.historyFile, this.history.slice(-1e3).join("\n"));
     } catch {
     }
@@ -6737,6 +6032,24 @@ async function buildPickableProviders(modelsRegistry, config) {
   }
   return out;
 }
+var defaultUidFn = () => os3__default.userInfo().uid;
+async function getFileUid(filePath) {
+  try {
+    const stat4 = await fsp3.stat(filePath);
+    return stat4.uid;
+  } catch {
+    return void 0;
+  }
+}
+async function checkConfigOwnership(homeFn, uidFn = defaultUidFn) {
+  if (os3__default.platform() === "win32") return true;
+  const cfg = configPath(homeFn);
+  const fileUid = await getFileUid(cfg);
+  if (fileUid === void 0) return true;
+  const callerUid = uidFn();
+  if (callerUid === void 0) return true;
+  return fileUid === callerUid;
+}
 var PROTECTED_BASENAMES = /* @__PURE__ */ new Set([
   "config.json",
   ".key",
@@ -6746,20 +6059,20 @@ function assertSafeToDelete(filename, parentDir) {
   if (PROTECTED_BASENAMES.has(filename)) {
     throw new Error(`Refusing to delete protected file: ${filename}`);
   }
-  if (filename !== path25.basename(filename)) {
+  if (filename !== path24.basename(filename)) {
     throw new Error(`Refusing to delete path with traversal: ${filename}`);
   }
   if (!filename.startsWith("config.json.") || !filename.endsWith(".bak")) {
     throw new Error(`Refusing to delete unknown file: ${filename}`);
   }
-  const resolvedParent = path25.resolve(parentDir);
+  const resolvedParent = path24.resolve(parentDir);
   if (!resolvedParent.endsWith(".wrongstack")) {
     throw new Error(`Unexpected parent directory for bak prune: ${resolvedParent}`);
   }
 }
 async function safeDelete(filePath) {
-  const dir = path25.dirname(filePath);
-  const filename = path25.basename(filePath);
+  const dir = path24.dirname(filePath);
+  const filename = path24.basename(filePath);
   try {
     assertSafeToDelete(filename, dir);
     await fsp3.unlink(filePath);
@@ -6802,18 +6115,18 @@ function diffSummary(oldCfg, newCfg) {
   }
   return changes.length > 0 ? changes.slice(0, 5).join(", ") : "no changes";
 }
-var defaultHomeDir = () => os6__default.homedir();
+var defaultHomeDir = () => os3__default.homedir();
 function historyDir(homeFn = defaultHomeDir) {
-  return path25.join(homeFn(), ".wrongstack", "config.history", "entries");
+  return path24.join(homeFn(), ".wrongstack", "config.history", "entries");
 }
 function historyIndexPath(homeFn = defaultHomeDir) {
-  return path25.join(homeFn(), ".wrongstack", "config.history", "index.json");
+  return path24.join(homeFn(), ".wrongstack", "config.history", "index.json");
 }
 function configPath(homeFn = defaultHomeDir) {
-  return path25.join(homeFn(), ".wrongstack", "config.json");
+  return path24.join(homeFn(), ".wrongstack", "config.json");
 }
 function backupLastPath(homeFn = defaultHomeDir) {
-  return path25.join(homeFn(), ".wrongstack", "config.json.last");
+  return path24.join(homeFn(), ".wrongstack", "config.json.last");
 }
 function entryId(ts) {
   return ts.replace(/[:.]/g, "-").slice(0, 19);
@@ -6868,17 +6181,17 @@ async function backupCurrent(homeFn = defaultHomeDir) {
   }
   if (content !== void 0) {
     try {
-      const bakPath = path25.join(homeFn(), ".wrongstack", `config.json.${ts}.bak`);
+      const bakPath = path24.join(homeFn(), ".wrongstack", `config.json.${ts}.bak`);
       await atomicWrite(bakPath, content);
     } catch {
     }
   }
   try {
-    const dir = path25.join(homeFn(), ".wrongstack");
+    const dir = path24.join(homeFn(), ".wrongstack");
     const files = await fsp3.readdir(dir);
     const baks = files.filter((f) => f.startsWith("config.json.") && f.endsWith(".bak")).sort().reverse();
     for (const f of baks.slice(10)) {
-      await safeDelete(path25.join(dir, f));
+      await safeDelete(path24.join(dir, f));
     }
   } catch {
   }
@@ -6896,7 +6209,7 @@ async function appendHistory(oldCfg, newCfg, description, homeFn = defaultHomeDi
   };
   try {
     await fsp3.writeFile(
-      path25.join(historyDir(homeFn), `${id}.json`),
+      path24.join(historyDir(homeFn), `${id}.json`),
       JSON.stringify(entry, null, 2),
       "utf8"
     );
@@ -6904,7 +6217,7 @@ async function appendHistory(oldCfg, newCfg, description, homeFn = defaultHomeDi
     throw new FsError({
       message: err instanceof Error ? err.message : String(err),
       code: ERROR_CODES.FS_WRITE_FAILED,
-      path: path25.join(historyDir(homeFn), `${id}.json`),
+      path: path24.join(historyDir(homeFn), `${id}.json`),
       cause: err
     });
   }
@@ -6919,7 +6232,7 @@ async function listHistory(homeFn = defaultHomeDir) {
 }
 async function getHistoryEntry(id, homeFn = defaultHomeDir) {
   try {
-    const raw = await fsp3.readFile(path25.join(historyDir(homeFn), `${id}.json`), "utf8");
+    const raw = await fsp3.readFile(path24.join(historyDir(homeFn), `${id}.json`), "utf8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -6928,6 +6241,9 @@ async function getHistoryEntry(id, homeFn = defaultHomeDir) {
 async function restoreFromHistory(id, homeFn = defaultHomeDir) {
   const entry = await getHistoryEntry(id, homeFn);
   if (!entry) return { ok: false, backupId: null, error: "History entry not found" };
+  if (!await checkConfigOwnership(homeFn)) {
+    return { ok: false, backupId: null, error: "Operation denied: config file is not owned by current user" };
+  }
   await backupCurrent(homeFn);
   let oldCfg = {};
   try {
@@ -6964,6 +6280,9 @@ async function restoreLast(homeFn = defaultHomeDir) {
   } catch {
     return { ok: false, error: "No prior backup found" };
   }
+  if (!await checkConfigOwnership(homeFn)) {
+    return { ok: false, error: "Operation denied: config file is not owned by current user" };
+  }
   await backupCurrent(homeFn);
   try {
     await atomicWrite(cfg, JSON.stringify(lastCfg, null, 2));
@@ -6978,11 +6297,11 @@ async function restoreLast(homeFn = defaultHomeDir) {
 var theme = { primary: color.amber };
 async function saveToGlobalConfig(configPath2, provider, model, homeFn = () => process.env.HOME ?? __require("os").homedir()) {
   try {
-    const { atomicWrite: atomicWrite8 } = await import('@wrongstack/core');
-    const fs21 = await import('fs/promises');
+    const { atomicWrite: atomicWrite9 } = await import('@wrongstack/core');
+    const fs22 = await import('fs/promises');
     let existing = {};
     try {
-      const raw = await fs21.readFile(configPath2, "utf8");
+      const raw = await fs22.readFile(configPath2, "utf8");
       existing = JSON.parse(raw);
     } catch {
     }
@@ -6990,7 +6309,7 @@ async function saveToGlobalConfig(configPath2, provider, model, homeFn = () => p
     existing.provider = provider;
     existing.model = model;
     await backupCurrent(homeFn);
-    await atomicWrite8(configPath2, JSON.stringify(existing, null, 2), { mode: 384 });
+    await atomicWrite9(configPath2, JSON.stringify(existing, null, 2), { mode: 384 });
     try {
       await appendHistory(
         oldCfg,
@@ -7313,12 +6632,12 @@ function pickGroupIndex(opts) {
     try {
       let current = 0;
       try {
-        const parsed = Number.parseInt(fs9.readFileSync(opts.cursorFile, "utf8").trim(), 10);
+        const parsed = Number.parseInt(fs10.readFileSync(opts.cursorFile, "utf8").trim(), 10);
         if (Number.isFinite(parsed)) current = wrap(parsed);
       } catch {
       }
-      fs9.mkdirSync(path25.dirname(opts.cursorFile), { recursive: true });
-      fs9.writeFileSync(opts.cursorFile, String(wrap(current + 1)));
+      fs10.mkdirSync(path24.dirname(opts.cursorFile), { recursive: true });
+      fs10.writeFileSync(opts.cursorFile, String(wrap(current + 1)));
       return current;
     } catch {
     }
@@ -7653,14 +6972,14 @@ function summarize(value, name) {
   if (typeof v === "object" && v !== null) {
     const o = v;
     if (name === "edit") {
-      const path26 = typeof o["path"] === "string" ? o["path"] : "";
+      const path25 = typeof o["path"] === "string" ? o["path"] : "";
       const reps = typeof o["replacements"] === "number" ? o["replacements"] : 0;
-      return `${path26}  ${reps} replacement${reps === 1 ? "" : "s"}`.trim();
+      return `${path25}  ${reps} replacement${reps === 1 ? "" : "s"}`.trim();
     }
     if (name === "write") {
-      const path26 = typeof o["path"] === "string" ? o["path"] : "";
+      const path25 = typeof o["path"] === "string" ? o["path"] : "";
       const bytes = typeof o["bytes"] === "number" ? o["bytes"] : void 0;
-      return bytes !== void 0 ? `${path26}  ${bytes}B` : path26;
+      return bytes !== void 0 ? `${path25}  ${bytes}B` : path25;
     }
     if (typeof o["count"] === "number") {
       return `${o["count"]} match${o["count"] === 1 ? "" : "es"}`;
@@ -8591,7 +7910,7 @@ var diagCmd = async (_args, deps) => {
     `  modelsCache:   ${deps.paths.modelsCache}`,
     `  cacheAge:      ${isFinite(age) ? `${Math.round(age / 60)}m` : "never"}`,
     `  node:          ${process.version}`,
-    `  os:            ${os6.platform()} ${os6.release()}`,
+    `  os:            ${os3.platform()} ${os3.release()}`,
     `  provider:      ${cfg.provider ?? "<unset>"}`,
     `  model:         ${cfg.model ?? "<unset>"}`,
     `  tools:         ${deps.toolRegistry?.list().length ?? 0}`,
@@ -8670,7 +7989,7 @@ var doctorCmd = async (_args, deps) => {
   }
   try {
     await fsp3.mkdir(deps.paths.projectSessions, { recursive: true });
-    const probe = path25.join(deps.paths.projectSessions, `.probe-${Date.now()}`);
+    const probe = path24.join(deps.paths.projectSessions, `.probe-${Date.now()}`);
     await fsp3.writeFile(probe, "");
     await fsp3.unlink(probe);
     checks.push({ name: "sessions writable", status: "ok", detail: deps.paths.projectSessions });
@@ -8773,8 +8092,8 @@ var exportCmd = async (args, deps) => {
     return 1;
   }
   if (output) {
-    await fsp3.mkdir(path25.dirname(path25.resolve(deps.cwd, output)), { recursive: true });
-    await fsp3.writeFile(path25.resolve(deps.cwd, output), rendered, "utf8");
+    await fsp3.mkdir(path24.dirname(path24.resolve(deps.cwd, output)), { recursive: true });
+    await fsp3.writeFile(path24.resolve(deps.cwd, output), rendered, "utf8");
     deps.renderer.write(`Wrote ${rendered.length} bytes to ${output}
 `);
   } else {
@@ -8847,8 +8166,8 @@ var initCmd = async (_args, deps) => {
   const vault = new DefaultSecretVault$1({ keyFile: deps.paths.secretsKey });
   const encrypted = encryptConfigSecrets(config, vault);
   await atomicWrite(deps.paths.globalConfig, JSON.stringify(encrypted, null, 2), { mode: 384 });
-  await fsp3.mkdir(path25.join(deps.projectRoot, ".wrongstack"), { recursive: true });
-  const agentsFile = path25.join(deps.projectRoot, ".wrongstack", "AGENTS.md");
+  await fsp3.mkdir(path24.join(deps.projectRoot, ".wrongstack"), { recursive: true });
+  const agentsFile = path24.join(deps.projectRoot, ".wrongstack", "AGENTS.md");
   const projectFacts = await detectProjectFacts(deps.projectRoot);
   await atomicWrite(agentsFile, renderAgentsTemplate(projectFacts));
   deps.renderer.writeInfo(`Wrote ${deps.paths.globalConfig}`);
@@ -9154,7 +8473,7 @@ var usageCmd = async (_args, deps) => {
   return 0;
 };
 var projectsCmd = async (_args, deps) => {
-  const projectsRoot = path25.join(deps.paths.globalRoot, "projects");
+  const projectsRoot = path24.join(deps.paths.globalRoot, "projects");
   try {
     const entries = await fsp3.readdir(projectsRoot);
     if (entries.length === 0) {
@@ -9164,7 +8483,7 @@ var projectsCmd = async (_args, deps) => {
     for (const hash of entries) {
       try {
         const meta = JSON.parse(
-          await fsp3.readFile(path25.join(projectsRoot, hash, "meta.json"), "utf8")
+          await fsp3.readFile(path24.join(projectsRoot, hash, "meta.json"), "utf8")
         );
         deps.renderer.write(
           `  ${color.dim(hash)}  ${color.dim(meta.lastSeen ?? "")}  ${meta.root ?? "?"}
@@ -9323,30 +8642,30 @@ async function listFleetRuns(deps) {
   }
   const runs = [];
   for (const id of entries) {
-    const runDir = path25.join(deps.paths.projectSessions, id);
-    let stat3;
+    const runDir = path24.join(deps.paths.projectSessions, id);
+    let stat4;
     try {
-      stat3 = await fsp3.stat(runDir);
+      stat4 = await fsp3.stat(runDir);
     } catch {
       continue;
     }
-    if (!stat3.isDirectory()) continue;
+    if (!stat4.isDirectory()) continue;
     let manifest = false;
     let checkpoint = false;
     let subagentCount = 0;
     let subagentsDir;
     try {
-      await fsp3.access(path25.join(runDir, "fleet.json"));
+      await fsp3.access(path24.join(runDir, "fleet.json"));
       manifest = true;
     } catch {
     }
     try {
-      await fsp3.access(path25.join(runDir, "checkpoint.json"));
+      await fsp3.access(path24.join(runDir, "checkpoint.json"));
       checkpoint = true;
     } catch {
     }
     try {
-      subagentsDir = path25.join(runDir, "subagents");
+      subagentsDir = path24.join(runDir, "subagents");
       const files = await fsp3.readdir(subagentsDir);
       subagentCount = files.filter((f) => f.endsWith(".jsonl")).length;
     } catch {
@@ -9375,16 +8694,16 @@ async function listFleetRuns(deps) {
   return 0;
 }
 async function showFleetRun(runId, deps) {
-  const runDir = path25.join(deps.paths.projectSessions, runId);
-  let stat3;
+  const runDir = path24.join(deps.paths.projectSessions, runId);
+  let stat4;
   try {
-    stat3 = await fsp3.stat(runDir);
+    stat4 = await fsp3.stat(runDir);
   } catch {
     deps.renderer.writeError(`Fleet run not found: ${runId}
 `);
     return 1;
   }
-  if (!stat3.isDirectory()) {
+  if (!stat4.isDirectory()) {
     deps.renderer.writeError(`Not a directory: ${runId}
 `);
     return 1;
@@ -9392,7 +8711,7 @@ async function showFleetRun(runId, deps) {
   deps.renderer.write(color.bold(`
 Fleet Run: ${runId}
 `) + "\n");
-  const manifestPath = path25.join(runDir, "fleet.json");
+  const manifestPath = path24.join(runDir, "fleet.json");
   let manifestData = null;
   try {
     manifestData = await fsp3.readFile(manifestPath, "utf8");
@@ -9408,7 +8727,7 @@ Fleet Run: ${runId}
     deps.renderer.write(`  ${color.dim("\u25CB")} fleet.json \u2014 not found
 `);
   }
-  const checkpointPath = path25.join(runDir, "checkpoint.json");
+  const checkpointPath = path24.join(runDir, "checkpoint.json");
   let checkpointData = null;
   try {
     checkpointData = await fsp3.readFile(checkpointPath, "utf8");
@@ -9455,7 +8774,7 @@ Fleet Run: ${runId}
     } catch {
     }
   }
-  const subagentsDir = path25.join(runDir, "subagents");
+  const subagentsDir = path24.join(runDir, "subagents");
   let subagentFiles = [];
   try {
     subagentFiles = await fsp3.readdir(subagentsDir);
@@ -9467,7 +8786,7 @@ Fleet Run: ${runId}
   Subagent transcripts (${subagentFiles.length}):
 `);
     for (const f of subagentFiles.sort()) {
-      const filePath = path25.join(subagentsDir, f);
+      const filePath = path24.join(subagentsDir, f);
       let size;
       try {
         const s = await fsp3.stat(filePath);
@@ -9484,7 +8803,7 @@ Fleet Run: ${runId}
   ${color.dim("\u25CB")} No subagent transcripts
 `);
   }
-  const sharedDir = path25.join(runDir, "shared");
+  const sharedDir = path24.join(runDir, "shared");
   try {
     const files = await fsp3.readdir(sharedDir);
     deps.renderer.write(`
@@ -9651,7 +8970,7 @@ function findSessionId(args) {
 var rewindCmd = async (args, deps) => {
   const flags = parseRewindFlags(args);
   const wpaths = resolveWstackPaths({ projectRoot: deps.projectRoot });
-  const sessionsDir = path25.join(wpaths.globalRoot, "sessions");
+  const sessionsDir = path24.join(wpaths.globalRoot, "sessions");
   const rewind = new DefaultSessionRewinder(sessionsDir, deps.projectRoot);
   let sessionId = findSessionId(args);
   if (!sessionId) {
@@ -9783,7 +9102,7 @@ var skillsCmd = async (_args, deps) => {
 };
 var versionCmd = async (_args, deps) => {
   deps.renderer.write(
-    `WrongStack ${CLI_VERSION} (apiVersion ${API_VERSION}, node ${process.version}, ${os6.platform()})
+    `WrongStack ${CLI_VERSION} (apiVersion ${API_VERSION}, node ${process.version}, ${os3.platform()})
 `
   );
   return 0;
@@ -9863,22 +9182,22 @@ function fmtDuration(ms) {
   const remMin = m - h * 60;
   return `${h}h${remMin}m`;
 }
-function fmtTaskResultLine(r, color39) {
+function fmtTaskResultLine(r, color37) {
   const stats = `${r.iterations}it ${r.toolCalls}tc ${fmtDuration(r.durationMs)}`;
   const errMsg = typeof r.error === "string" ? r.error : r.error?.message;
   const errKind = typeof r.error === "object" ? r.error?.kind : void 0;
   const errTail = errMsg ? ` \u2014 ${errMsg.replace(/\s+/g, " ").slice(0, 80)}${errMsg.length > 80 ? "\u2026" : ""}` : "";
-  const errKindChip = errKind ? color39.dim(` [${errKind}]`) : "";
-  const errSnip = errMsg || errKind ? `${errKindChip}${color39.dim(errTail)}` : "";
+  const errKindChip = errKind ? color37.dim(` [${errKind}]`) : "";
+  const errSnip = errMsg || errKind ? `${errKindChip}${color37.dim(errTail)}` : "";
   switch (r.status) {
     case "success":
-      return { mark: color39.green("\u2713"), stats, tail: "" };
+      return { mark: color37.green("\u2713"), stats, tail: "" };
     case "timeout":
-      return { mark: color39.yellow("\u23F1"), stats: `${color39.yellow("timeout")} ${stats}`, tail: errSnip };
+      return { mark: color37.yellow("\u23F1"), stats: `${color37.yellow("timeout")} ${stats}`, tail: errSnip };
     case "stopped":
-      return { mark: color39.dim("\u2298"), stats: `${color39.dim("stopped")} ${stats}`, tail: errSnip };
+      return { mark: color37.dim("\u2298"), stats: `${color37.dim("stopped")} ${stats}`, tail: errSnip };
     case "failed":
-      return { mark: color39.red("\u2717"), stats: `${color39.red("failed")} ${stats}`, tail: errSnip };
+      return { mark: color37.red("\u2717"), stats: `${color37.red("failed")} ${stats}`, tail: errSnip };
   }
 }
 
@@ -9888,7 +9207,7 @@ function resolveBundledSkillsDir() {
   try {
     const req2 = createRequire(import.meta.url);
     const corePkg = req2.resolve("@wrongstack/core/package.json");
-    return path25.join(path25.dirname(corePkg), "skills");
+    return path24.join(path24.dirname(corePkg), "skills");
   } catch {
     return void 0;
   }
@@ -10050,7 +9369,7 @@ async function boot(argv) {
     if (choices.director) flags["director"] = true;
     flags["autonomy"] = choices.autonomy;
     printLaunchHints(renderer, flags, {
-      cursorFile: path25.join(wpaths.cacheDir, "hint-cursor")
+      cursorFile: path24.join(wpaths.cacheDir, "hint-cursor")
     });
   }
   return {
@@ -10735,9 +10054,9 @@ async function renderGoalBanner(opts) {
   );
   if (goal.journal.length > 0) {
     const lastEntry = goal.journal[goal.journal.length - 1];
-    const statusIcon2 = lastEntry.status === "success" ? "\u2713" : lastEntry.status === "failure" ? "\u2717" : lastEntry.status === "aborted" ? "\u2298" : lastEntry.status === "skipped" ? "\u229D" : "\xB7";
+    const statusIcon = lastEntry.status === "success" ? "\u2713" : lastEntry.status === "failure" ? "\u2717" : lastEntry.status === "aborted" ? "\u2298" : lastEntry.status === "skipped" ? "\u229D" : "\xB7";
     opts.renderer.write(
-      color.dim(`  Last: ${statusIcon2} ${lastEntry.task} (${lastEntry.status})`) + "\n"
+      color.dim(`  Last: ${statusIcon} ${lastEntry.task} (${lastEntry.status})`) + "\n"
     );
   }
   if (goal.engineState === "running") {
@@ -10840,6 +10159,7 @@ async function execute(deps) {
     attachments,
     tokenCounter,
     config,
+    configStore,
     renderer,
     reader,
     session,
@@ -11039,6 +10359,30 @@ async function execute(deps) {
             onAutonomy?.(mode);
             return null;
           },
+          getSettings: () => {
+            const autonomy = configStore.get().autonomy;
+            const rawMode = autonomy?.defaultMode;
+            const mode = rawMode === "suggest" || rawMode === "auto" ? rawMode : "off";
+            return { mode, delayMs: autonomy?.autoProceedDelayMs ?? 45e3 };
+          },
+          async saveSettings(s) {
+            try {
+              await persistAutonomySetting(
+                {
+                  configStore,
+                  globalConfigPath: wpaths.globalConfig,
+                  vault: { encrypt: (v) => v, decrypt: (v) => v, isEncrypted: () => false }
+                },
+                (autonomy) => {
+                  autonomy.defaultMode = s.mode;
+                  autonomy.autoProceedDelayMs = s.delayMs;
+                }
+              );
+              return null;
+            } catch (err) {
+              return err instanceof Error ? err.message : String(err);
+            }
+          },
           effectiveMaxContext,
           // Default OFF so the terminal's native scrollback works for chat
           // history out of the box (mouse wheel / Shift+PgUp). Users who hit
@@ -11119,7 +10463,7 @@ async function execute(deps) {
           supportsVision,
           attachments,
           effectiveMaxContext,
-          projectName: path25.basename(projectRoot) || void 0,
+          projectName: path24.basename(projectRoot) || void 0,
           projectRoot,
           getAutonomy,
           onAutonomy,
@@ -11143,7 +10487,7 @@ async function execute(deps) {
         supportsVision,
         attachments,
         effectiveMaxContext,
-        projectName: path25.basename(projectRoot) || void 0,
+        projectName: path24.basename(projectRoot) || void 0,
         getAutonomy,
         onAutonomy,
         getEternalEngine,
@@ -11247,7 +10591,7 @@ var MultiAgentHost = class {
       doneCondition: { type: "all_tasks_done" },
       maxConcurrent: this.opts.maxConcurrent ?? 4
     };
-    const defaultScratchpad = this.opts.sharedScratchpadPath || (this.opts.sessionsRoot && this.opts.directorRunId ? path25.join(this.opts.sessionsRoot, this.opts.directorRunId, "shared") : void 0);
+    const defaultScratchpad = this.opts.sharedScratchpadPath || (this.opts.sessionsRoot && this.opts.directorRunId ? path24.join(this.opts.sessionsRoot, this.opts.directorRunId, "shared") : void 0);
     this.director = new Director({
       config: coordinatorConfig,
       manifestPath: this.opts.manifestPath,
@@ -11493,7 +10837,7 @@ var MultiAgentHost = class {
       model: opts?.model,
       tools: opts?.tools
     };
-    const transcriptPath = this.sessionFactory ? path25.join(this.sessionFactory.dir, `${subagentConfig.name}.jsonl`) : void 0;
+    const transcriptPath = this.sessionFactory ? path24.join(this.sessionFactory.dir, `${subagentConfig.name}.jsonl`) : void 0;
     const { subagentId, taskId } = await this._spawnAndAssign(subagentConfig);
     this.fleetManager?.addPendingTask(taskId, subagentId, description);
     this.deps.events.emit("subagent.spawned", {
@@ -11636,16 +10980,16 @@ var MultiAgentHost = class {
     if (this.director) return this.director;
     this.opts.directorMode = true;
     if (this.opts.fleetRoot && !this.opts.manifestPath) {
-      this.opts.manifestPath = path25.join(this.opts.fleetRoot, "fleet.json");
+      this.opts.manifestPath = path24.join(this.opts.fleetRoot, "fleet.json");
     }
     if (this.opts.fleetRoot && !this.opts.sharedScratchpadPath) {
-      this.opts.sharedScratchpadPath = path25.join(this.opts.fleetRoot, "shared");
+      this.opts.sharedScratchpadPath = path24.join(this.opts.fleetRoot, "shared");
     }
     if (this.opts.fleetRoot && !this.opts.sessionsRoot) {
-      this.opts.sessionsRoot = path25.join(this.opts.fleetRoot, "subagents");
+      this.opts.sessionsRoot = path24.join(this.opts.fleetRoot, "subagents");
     }
     if (this.opts.fleetRoot && !this.opts.stateCheckpointPath) {
-      this.opts.stateCheckpointPath = path25.join(this.opts.fleetRoot, "director-state.json");
+      this.opts.stateCheckpointPath = path24.join(this.opts.fleetRoot, "director-state.json");
     }
     await this.ensureDirector();
     return this.director ?? null;
@@ -11811,11 +11155,11 @@ var SessionStats = class {
       if (e.name === "bash") this.bashCommands++;
       else if (e.name === "fetch") this.fetches++;
       if (!e.ok) return;
-      const path26 = typeof input?.path === "string" ? input.path : void 0;
-      if (e.name === "read" && path26) this.readPaths.add(path26);
-      else if (e.name === "edit" && path26) this.editedPaths.add(path26);
-      else if (e.name === "write" && path26) {
-        this.writtenPaths.add(path26);
+      const path25 = typeof input?.path === "string" ? input.path : void 0;
+      if (e.name === "read" && path25) this.readPaths.add(path25);
+      else if (e.name === "edit" && path25) this.editedPaths.add(path25);
+      else if (e.name === "write" && path25) {
+        this.writtenPaths.add(path25);
         const content = typeof input?.content === "string" ? input.content : "";
         this.bytesWritten += Buffer.byteLength(content, "utf8");
       }
@@ -11934,7 +11278,7 @@ function gitText(args, cwd) {
     child.on("close", (code) => resolve4({ code: code ?? 1, out: out.trim() }));
   });
 }
-async function isGitRepo2(cwd) {
+async function isGitRepo(cwd) {
   const { code, out } = await gitText(["rev-parse", "--is-inside-work-tree"], cwd);
   return code === 0 && out.trim() === "true";
 }
@@ -12011,7 +11355,7 @@ function createAutoPhaseHost(deps) {
       await persist(graph);
       const worktreesEnabled = deps.worktrees !== false && process.env["WRONGSTACK_AUTOPHASE_WORKTREES"] !== "0";
       let worktrees;
-      if (worktreesEnabled && await isGitRepo2(deps.projectRoot)) {
+      if (worktreesEnabled && await isGitRepo(deps.projectRoot)) {
         worktrees = new WorktreeManager({ projectRoot: deps.projectRoot, events: deps.events });
         log(`\u{1F33F} Worktree isolation on \u2014 up to ${deps.maxConcurrentPhases ?? WORKTREE_PHASE_CONCURRENCY} phases run in parallel.`);
       }
@@ -12091,7 +11435,7 @@ function createAutoPhaseHost(deps) {
     },
     async onWorktree(action, target) {
       const root = deps.projectRoot;
-      if (!await isGitRepo2(root)) return "\u26A0 Not a git repository \u2014 worktrees unavailable.";
+      if (!await isGitRepo(root)) return "\u26A0 Not a git repository \u2014 worktrees unavailable.";
       switch (action) {
         case "list": {
           const { out } = await gitText(["worktree", "list"], root);
@@ -12315,7 +11659,7 @@ function setupMetrics(params) {
   const dumpMetrics = () => {
     if (!metricsSink) return;
     try {
-      const out = path25.join(wpaths.projectSessions, "metrics.json");
+      const out = path24.join(wpaths.projectSessions, "metrics.json");
       const snap = metricsSink.snapshot();
       writeFileSync(out, JSON.stringify(snap, null, 2));
     } catch {
@@ -12350,6 +11694,36 @@ function createApi(ownerName, base) {
 }
 
 // src/wiring/plugins.ts
+var BUILTIN_PLUGIN_FACTORIES = [
+  async () => {
+    const { createPromptsPlugin } = await import('@wrongstack/core');
+    return createPromptsPlugin();
+  },
+  async () => {
+    const { createSyncPlugin } = await import('@wrongstack/core');
+    return createSyncPlugin();
+  },
+  async () => {
+    const { createGitPlugin } = await import('@wrongstack/core');
+    return createGitPlugin();
+  },
+  async () => {
+    const { createObservabilityPlugin } = await import('@wrongstack/core');
+    return createObservabilityPlugin();
+  },
+  async () => {
+    const { createSecurityPlugin } = await import('@wrongstack/core');
+    return createSecurityPlugin();
+  },
+  async () => {
+    const { createSkillsPlugin } = await import('@wrongstack/core');
+    return createSkillsPlugin();
+  },
+  async () => {
+    const { createPlanPlugin } = await import('@wrongstack/core');
+    return createPlanPlugin();
+  }
+];
 async function setupPlugins(params) {
   const {
     config,
@@ -12363,28 +11737,65 @@ async function setupPlugins(params) {
     agent,
     sessionWriter,
     metricsSink,
+    healthRegistry,
+    skillLoader,
     configStore,
-    pipelines
+    pipelines,
+    paths
   } = params;
-  if (!config.features.plugins || !config.plugins || config.plugins.length === 0) return;
-  const resolvedPlugins = [];
-  for (const p of config.plugins) {
-    if (typeof p === "object" && p.enabled === false) continue;
-    const spec = typeof p === "string" ? p : p.name;
-    try {
-      const mod = await import(spec);
-      if (mod.default) resolvedPlugins.push(mod.default);
-    } catch (err) {
-      log.warn(`Plugin "${spec}" failed to load`, err);
+  const builtinPlugins = [];
+  const disabledBuiltins = new Set(
+    (config.plugins ?? []).filter(
+      (p) => typeof p === "object" && p.enabled === false
+    ).map((p) => p.name)
+  );
+  if (paths && config.features?.plugins !== false) {
+    for (const factory of BUILTIN_PLUGIN_FACTORIES) {
+      try {
+        const plugin = await factory();
+        if (!plugin) continue;
+        if (disabledBuiltins.has(plugin.name)) {
+          log.info(`[setupPlugins] built-in plugin "${plugin.name}" disabled by config`);
+          continue;
+        }
+        builtinPlugins.push(plugin);
+      } catch (err) {
+        log.warn("[setupPlugins] builtin plugin failed to load:", err);
+      }
     }
   }
-  if (resolvedPlugins.length === 0) return;
+  const userPlugins = [];
+  if (config.features?.plugins !== false) {
+    for (const p of config.plugins ?? []) {
+      if (typeof p === "object" && p.enabled === false) continue;
+      const spec = typeof p === "string" ? p : p.name;
+      try {
+        const mod = await import(spec);
+        if (mod.default) userPlugins.push(mod.default);
+      } catch (err) {
+        log.warn(`Plugin "${spec}" failed to load`, err);
+      }
+    }
+  }
+  const allPlugins = [...builtinPlugins, ...userPlugins];
+  if (allPlugins.length === 0) return;
   const pluginOptions = buildPluginOptions(config);
-  const pluginConfig = Object.keys(pluginOptions).length > 0 ? patchConfig(config, { extensions: pluginOptions }) : config;
-  await loadPlugins(resolvedPlugins, {
+  const pluginConfig = patchConfig(config, {
+    extensions: pluginOptions,
+    paths,
+    configStore,
+    metricsSink,
+    healthRegistry,
+    skillLoader
+  });
+  await loadPlugins(allPlugins, {
     log,
     pluginOptions,
     apiFactory: (plugin) => createApi(plugin.name, {
+      // First-party plugins come from BUILTIN_PLUGIN_FACTORIES — trust them
+      // ("official") so they can claim bare slash command names (/prompts,
+      // /sync) and override built-ins. User plugins stay namespaced.
+      official: builtinPlugins.includes(plugin),
       container,
       events,
       pipelines,
@@ -12403,6 +11814,7 @@ async function setupPlugins(params) {
       configStore
     })
   });
+  log.info(`[setupPlugins] loaded ${builtinPlugins.length} built-in, ${userPlugins.length} user plugin(s)`);
 }
 function buildPluginOptions(config) {
   const options = {};
@@ -12506,12 +11918,12 @@ async function setupSession(params) {
   }
   const sessionRef = { current: session };
   await recoveryLock.write(session.id).catch(() => void 0);
-  const attachments = new DefaultAttachmentStore({ spoolDir: path25.join(wpaths.projectSessions, session.id, "attachments") });
-  const queueStore = new QueueStore({ dir: path25.join(wpaths.projectSessions, session.id) });
+  const attachments = new DefaultAttachmentStore({ spoolDir: path24.join(wpaths.projectSessions, session.id, "attachments") });
+  const queueStore = new QueueStore({ dir: path24.join(wpaths.projectSessions, session.id) });
   const ctxSignal = new AbortController().signal;
   const context = new Context({ systemPrompt, provider, session, signal: ctxSignal, tokenCounter, cwd, projectRoot, model: config.model });
   if (restoredMessages.length > 0) context.state.replaceMessages(restoredMessages);
-  const todosCheckpointPath = path25.join(wpaths.projectSessions, `${session.id}.todos.json`);
+  const todosCheckpointPath = path24.join(wpaths.projectSessions, `${session.id}.todos.json`);
   if (resumeId) {
     try {
       const restoredTodos = await loadTodosCheckpoint(todosCheckpointPath);
@@ -12523,13 +11935,13 @@ async function setupSession(params) {
     }
   }
   const detachTodosCheckpoint = attachTodosCheckpoint(context.state, todosCheckpointPath, session.id);
-  const planPath = path25.join(wpaths.projectSessions, `${session.id}.plan.json`);
+  const planPath = path24.join(wpaths.projectSessions, `${session.id}.plan.json`);
   context.state.setMeta("plan.path", planPath);
   let dirState;
   if (resumeId) {
     try {
-      const fleetRoot = path25.join(wpaths.projectSessions, session.id);
-      dirState = await loadDirectorState(path25.join(fleetRoot, "director-state.json"));
+      const fleetRoot = path24.join(wpaths.projectSessions, session.id);
+      dirState = await loadDirectorState(path24.join(fleetRoot, "director-state.json"));
       if (dirState) {
         const tCounts = {};
         for (const t of dirState.tasks) tCounts[t.status] = (tCounts[t.status] ?? 0) + 1;
@@ -12556,7 +11968,7 @@ function resolveBundledSkillsDir2() {
   try {
     const req2 = createRequire(import.meta.url);
     const corePkg = req2.resolve("@wrongstack/core/package.json");
-    return path25.join(path25.dirname(corePkg), "skills");
+    return path24.join(path24.dirname(corePkg), "skills");
   } catch {
     return void 0;
   }
@@ -12656,7 +12068,7 @@ async function main(argv) {
       modeId,
       modePrompt,
       modelCapabilities,
-      planPath: () => sessionRef.current ? path25.join(wpaths.projectSessions, `${sessionRef.current.id}.plan.json`) : void 0,
+      planPath: () => sessionRef.current ? path24.join(wpaths.projectSessions, `${sessionRef.current.id}.plan.json`) : void 0,
       contributors: [
         // Injects the ETERNAL AUTONOMY block when the user has activated
         // `/autonomy eternal`. Without this, the per-iteration directive
@@ -12815,7 +12227,10 @@ async function main(argv) {
     agent,
     sessionWriter: context.session,
     metricsSink,
-    configStore
+    healthRegistry,
+    skillLoader: config.features.skills ? skillLoader : void 0,
+    configStore,
+    paths: wpaths
   });
   const switchProviderAndModel = (providerId, modelId) => {
     try {
@@ -12860,12 +12275,12 @@ async function main(argv) {
       }
     }
   };
-  const fleetRoot = directorMode ? path25.join(wpaths.projectSessions, session.id) : void 0;
-  const manifestPath = directorMode ? typeof process.env["WRONGSTACK_FLEET_MANIFEST"] === "string" ? process.env["WRONGSTACK_FLEET_MANIFEST"] : path25.join(fleetRoot, "fleet.json") : void 0;
-  const sharedScratchpadPath = directorMode ? path25.join(fleetRoot, "shared") : void 0;
-  const subagentSessionsRoot = directorMode ? path25.join(fleetRoot, "subagents") : void 0;
-  const stateCheckpointPath = directorMode ? path25.join(fleetRoot, "director-state.json") : void 0;
-  const fleetRootForPromotion = path25.join(wpaths.projectSessions, session.id);
+  const fleetRoot = directorMode ? path24.join(wpaths.projectSessions, session.id) : void 0;
+  const manifestPath = directorMode ? typeof process.env["WRONGSTACK_FLEET_MANIFEST"] === "string" ? process.env["WRONGSTACK_FLEET_MANIFEST"] : path24.join(fleetRoot, "fleet.json") : void 0;
+  const sharedScratchpadPath = directorMode ? path24.join(fleetRoot, "shared") : void 0;
+  const subagentSessionsRoot = directorMode ? path24.join(fleetRoot, "subagents") : void 0;
+  const stateCheckpointPath = directorMode ? path24.join(fleetRoot, "director-state.json") : void 0;
+  const fleetRootForPromotion = path24.join(wpaths.projectSessions, session.id);
   const multiAgentHost = new MultiAgentHost(
     {
       container,
@@ -12988,6 +12403,8 @@ async function main(argv) {
     statuslineHiddenItems: [...currentHiddenItems],
     setStatuslineHiddenItems,
     agentsMonitorController,
+    configStore,
+    reader,
     confirm: async (question, defaultYes = true) => {
       if (!process.stdin.isTTY) return false;
       const hint = defaultYes ? "[Y/n/q]" : "[y/N/q]";
@@ -13198,7 +12615,7 @@ async function main(argv) {
       return director.spawn(cfg);
     },
     onFleetLog: async (subagentId, mode) => {
-      const subagentsRoot = path25.join(fleetRootForPromotion, "subagents");
+      const subagentsRoot = path24.join(fleetRootForPromotion, "subagents");
       let runDirs;
       try {
         runDirs = await fsp3.readdir(subagentsRoot);
@@ -13207,7 +12624,7 @@ async function main(argv) {
       }
       const found = [];
       for (const runId of runDirs) {
-        const runDir = path25.join(subagentsRoot, runId);
+        const runDir = path24.join(subagentsRoot, runId);
         let files;
         try {
           files = await fsp3.readdir(runDir);
@@ -13216,14 +12633,14 @@ async function main(argv) {
         }
         for (const f of files) {
           if (!f.endsWith(".jsonl")) continue;
-          const full = path25.join(runDir, f);
+          const full = path24.join(runDir, f);
           try {
-            const stat3 = await fsp3.stat(full);
+            const stat4 = await fsp3.stat(full);
             found.push({
               runId,
               subagentId: f.replace(/\.jsonl$/, ""),
               file: full,
-              size: stat3.size
+              size: stat4.size
             });
           } catch {
           }
@@ -13313,7 +12730,7 @@ async function main(argv) {
       }
       const dir = await multiAgentHost.ensureDirector();
       if (!dir) return "Director is not available.";
-      const dirStatePath = path25.join(fleetRootForPromotion, "director-state.json");
+      const dirStatePath = path24.join(fleetRootForPromotion, "director-state.json");
       const prior = await loadDirectorState(dirStatePath);
       if (!prior) {
         return "No prior director-state.json found \u2014 nothing to retry.";
@@ -13384,9 +12801,9 @@ async function main(argv) {
       for (const tool of director2.tools(FLEET_ROSTER)) {
         toolRegistry.register(tool);
       }
-      const mp = path25.join(fleetRootForPromotion, "fleet.json");
-      const sp = path25.join(fleetRootForPromotion, "shared");
-      const ss = path25.join(fleetRootForPromotion, "subagents");
+      const mp = path24.join(fleetRootForPromotion, "fleet.json");
+      const sp = path24.join(fleetRootForPromotion, "shared");
+      const ss = path24.join(fleetRootForPromotion, "subagents");
       const lines = [
         `${color.green("\u2713")} Promoted to director mode.`,
         `  Roster: ${Object.keys(FLEET_ROSTER).join(", ")}`,
@@ -13483,10 +12900,10 @@ Restart WrongStack to load or unload plugin code in this session.`;
       void mcpRegistry.stopAll();
     },
     onBeforeExit: async () => {
-      const { spawn: spawn4 } = await import('child_process');
+      const { spawn: spawn3 } = await import('child_process');
       const cwd2 = projectRoot;
       const statusResult = await new Promise((resolve4, reject) => {
-        const child = spawn4("git", ["status", "--porcelain"], { cwd: cwd2, stdio: ["ignore", "pipe", "pipe"] });
+        const child = spawn3("git", ["status", "--porcelain"], { cwd: cwd2, stdio: ["ignore", "pipe", "pipe"] });
         let stdout = "";
         child.stdout?.on("data", (d) => {
           stdout += d;
@@ -13630,6 +13047,7 @@ Restart WrongStack to load or unload plugin code in this session.`;
     attachments,
     tokenCounter,
     config,
+    configStore,
     renderer,
     reader,
     session,