@wrongstack/cli 1.0.19 → 1.0.26

package/dist/{cli-context-33F74CSZ.js → cli-context-UVGAN3NO.js}

@@ -1,35 +1,43 @@
 import {
+  activateRestrictedMode,
+  announceSafeMode,
   applySimpleUiFullAutoProfile,
   detectProjectFacts,
   isSimpleUiFullAuto,
-  makePromptDelegate,
+  makeStdinPromptDelegate,
   renderAgentsTemplate,
-  renderDiff
-} from "./chunk-RMQNCHGO.js";
+  renderDiff,
+  resolveLaunchAllowedTools,
+  resolveToolRestriction
+} from "./chunk-TI7KLHYX.js";
+import {
+  parseOutputFormat,
+  resolveJsonSchemaFlag
+} from "./chunk-LKPEBZBE.js";
 import {
   theme as theme2
 } from "./chunk-QD544J2B.js";
+import {
+  parseWebuiSessionChildOptions,
+  writeWebuiSessionChildError
+} from "./chunk-ZMX5HRLI.js";
 import {
   fmtTok,
   patchConfig
 } from "./chunk-EWKESL4L.js";
-import {
-  parseWebuiSessionChildOptions,
-  writeWebuiSessionChildError
-} from "./chunk-GPPRNAKW.js";
 import {
   subcommands
-} from "./chunk-2CZEORLV.js";
+} from "./chunk-BEHGRNOQ.js";
 import {
   renderDeepHelp,
   renderFocusedHelp
-} from "./chunk-JX6KL7OF.js";
+} from "./chunk-EPR42SWM.js";
 import {
   handleHelpVersionShortCircuit
-} from "./chunk-2ENZU66X.js";
+} from "./chunk-WQV2NP57.js";
 import {
   DEFAULT_PORT
-} from "./chunk-KK2LB3ZS.js";
+} from "./chunk-OAVBM55Q.js";
 import "./chunk-HXJYHAR4.js";
 import {
   resolveHqPasswordInput
@@ -37,21 +45,35 @@ import {
 import {
   normalizeHqPublicOrigin
 } from "./chunk-5EA6OTLJ.js";
+import {
+  resolveLaunchMcpServers
+} from "./chunk-HLSHFXTO.js";
+import {
+  installProviderPersisters
+} from "./chunk-LDCGZJTC.js";
 import {
   parseHqIpAllowlist
 } from "./chunk-Q7E3BPDU.js";
 import {
   discoverAndMergeProviders
 } from "./chunk-D5GB5MHA.js";
+import {
+  runUpdateCommand
+} from "./chunk-KOEO4CJG.js";
+import "./chunk-U3SS4NRH.js";
 import {
   applyNodeEnvDefault,
   applySessionShellDefault,
   runPreflight
-} from "./chunk-672UXYL3.js";
-import "./chunk-6WRKAACA.js";
+} from "./chunk-LBPLTTZ6.js";
+import "./chunk-RZ4ZDRYA.js";
+import {
+  applyAsciiMode
+} from "./chunk-PZQBGUVZ.js";
+import "./chunk-5JYDKG5B.js";
 import {
   CLI_VERSION
-} from "./chunk-XJXDOF63.js";
+} from "./chunk-F5DCFAKI.js";
 import {
   addFromCatalog,
   boxBottom,
@@ -63,36 +85,27 @@ import {
   runPicker,
   saveToGlobalConfig,
   theme
-} from "./chunk-RDHFXOJM.js";
-import "./chunk-2VMJ3E5Z.js";
-import "./chunk-B4JLSXZB.js";
+} from "./chunk-2ERX3RPN.js";
+import "./chunk-YTEOAWOJ.js";
 import {
   isKeylessLocalProvider,
   visibleModelIds
-} from "./chunk-3VXYY5JC.js";
+} from "./chunk-5UZBUV2H.js";
+import {
+  resolveActiveApiKey
+} from "./chunk-LUMETJFO.js";
+import "./chunk-DAKVBMD4.js";
 import {
   activeProfileConfigPath
 } from "./chunk-YMXXOOFN.js";
+import "./chunk-WSTVGC2C.js";
 import {
   parseArgs
-} from "./chunk-C3Z4N6A6.js";
-import "./chunk-DAKVBMD4.js";
-import {
-  mutateConfigProviders,
-  normalizeKeys,
-  resolveActiveApiKey,
-  writeKeysBack
-} from "./chunk-DR2OXU46.js";
-import {
-  runUpdateCommand
-} from "./chunk-DE7BZDNK.js";
-import "./chunk-U3SS4NRH.js";
-import "./chunk-YLQEGYV4.js";
+} from "./chunk-Q4INH2DG.js";
 
 // src/cli-context.ts
 import { TOKENS as TOKENS3 } from "@wrongstack/core/kernel";
 import { writeErr as writeErr2 } from "@wrongstack/core/utils";
-import { setOAuthTokenPersister, setProviderModelPersister } from "@wrongstack/providers";
 
 // src/boot/container-wiring.ts
 import { DefaultPathResolver } from "@wrongstack/core/infrastructure";
@@ -102,10 +115,11 @@ import { createDefaultContainer } from "@wrongstack/runtime";
 // src/cli-bundled-prompts.ts
 import { createRequire } from "node:module";
 import * as path from "node:path";
+import { wrongstackPackageJsonPath } from "@wrongstack/core/utils";
 function resolveBundledPromptsDir() {
   try {
     const req = createRequire(import.meta.url);
-    const corePkg = req.resolve("@wrongstack/core/package.json");
+    const corePkg = wrongstackPackageJsonPath("@wrongstack/core", (id) => req.resolve(id));
     return path.join(path.dirname(corePkg), "data", "prompts");
   } catch {
     return void 0;
@@ -115,10 +129,11 @@ function resolveBundledPromptsDir() {
 // src/cli-bundled-skills.ts
 import { createRequire as createRequire2 } from "node:module";
 import * as path2 from "node:path";
+import { wrongstackPackageJsonPath as wrongstackPackageJsonPath2 } from "@wrongstack/core/utils";
 function resolveBundledSkillsDir() {
   try {
     const req = createRequire2(import.meta.url);
-    const corePkg = req.resolve("@wrongstack/core/package.json");
+    const corePkg = wrongstackPackageJsonPath2("@wrongstack/core", (id) => req.resolve(id));
     return path2.join(path2.dirname(corePkg), "skills");
   } catch {
     return void 0;
@@ -167,7 +182,7 @@ function makeMirroredPromptDelegate(deps) {
       const typed = await deps.inner(tool, input, suggestedPattern, controller.signal);
       if (remoteDecision !== void 0) return remoteDecision;
       settled = true;
-      const decision = typed === "yes" || typed === "always" || typed === "deny" ? typed : "no";
+      const decision = typed === "yes" || typed === "always" || typed === "always-exact" || typed === "always-command" || typed === "always-tool" || typed === "deny" ? typed : "no";
       finish(decision);
       return decision;
     } finally {
@@ -191,12 +206,13 @@ function wireContainer(deps) {
     events,
     permission: {
       yolo: deps.config.yolo,
+      launchAllowedTools: deps.launchAllowedTools,
       // Wrapped so the REPL's terminal prompt also appears on the HQ
       // dashboard and can be answered from there. The wrapper is a no-op
       // until `approvalMirror.current` is populated (HQ telemetry boot), and
       // the terminal prompt itself behaves exactly as it always has.
       promptDelegate: makeMirroredPromptDelegate({
-        inner: makePromptDelegate(deps.reader),
+        inner: makeStdinPromptDelegate(deps.reader),
         getRegistry: () => approvalMirror.current,
         getSessionId: () => approvalMirror.sessionId?.()
       })
@@ -474,7 +490,7 @@ async function promptModeArrow(deps) {
   const { renderer } = deps;
   const stdin = process.stdin;
   const out = (s) => renderer.write(s);
-  return await new Promise((resolve2) => {
+  return await new Promise((resolve3) => {
     let index = 0;
     let drawn = 0;
     let remaining = Math.round(MENU_TIMEOUT_MS / 1e3);
@@ -529,7 +545,7 @@ async function promptModeArrow(deps) {
       out("\x1B[0J");
       out(finalLine);
       out("\x1B[?25h");
-      resolve2(result);
+      resolve3(result);
     };
     const pick = () => {
       const opt = MODE_OPTIONS[index];
@@ -588,7 +604,7 @@ async function promptModeArrow(deps) {
       setRawMode(stdin, true);
       stdin.resume();
     } catch {
-      resolve2(null);
+      resolve3(null);
       return;
     }
     out("\x1B[?25l");
@@ -761,9 +777,40 @@ async function persistMenuChoice(globalConfigPath, choice) {
 
 // src/boot/short-circuit-desktop.ts
 import { spawn } from "node:child_process";
+import { statSync } from "node:fs";
 import { createRequire as createRequire3 } from "node:module";
+import { homedir } from "node:os";
 import * as path3 from "node:path";
 import { color as color2 } from "@wrongstack/core/utils";
+function desktopExecutableCandidates(platform, home, env) {
+  const join7 = platform === "win32" ? path3.win32.join : path3.posix.join;
+  const managed = join7(home, ".wrongstack", "desktop");
+  if (platform === "win32") {
+    const local = env["LOCALAPPDATA"] || join7(home, "AppData", "Local");
+    return [
+      join7(managed, "WrongStack.exe"),
+      join7(local, "Programs", "WrongStack", "WrongStack.exe")
+    ];
+  }
+  if (platform === "darwin") {
+    return [
+      join7(managed, "WrongStack.app", "Contents", "MacOS", "WrongStack"),
+      join7(home, "Applications", "WrongStack.app", "Contents", "MacOS", "WrongStack"),
+      "/Applications/WrongStack.app/Contents/MacOS/WrongStack"
+    ];
+  }
+  if (platform === "linux") {
+    return [join7(managed, "WrongStack.AppImage"), "/opt/WrongStack/wrongstack-desktop"];
+  }
+  return [];
+}
+function isFile(candidate) {
+  try {
+    return statSync(candidate).isFile();
+  } catch {
+    return false;
+  }
+}
 function stripDesktopLauncherArgs(argv) {
   const out = [];
   for (let i = 0; i < argv.length; i++) {
@@ -784,35 +831,50 @@ async function handleDesktopShortCircuit(flags, argv) {
   return launchDesktop(stripDesktopLauncherArgs(argv));
 }
 async function launchDesktop(args) {
-  const req = createRequire3(import.meta.url);
-  let launcherPath;
-  try {
-    const desktopPkgPath = req.resolve("@wrongstack/desktop/package.json");
-    launcherPath = path3.join(path3.dirname(desktopPkgPath), "bin", "wrongstack-desktop.js");
-  } catch {
+  const override = process.env["WRONGSTACK_DESKTOP_EXECUTABLE"]?.trim();
+  if (override && (!path3.isAbsolute(override) || !isFile(override))) {
     process.stderr.write(
-      [
-        color2.red("\u2717 WrongStack Desktop is not installed."),
-        "",
-        "Install the desktop package:",
-        "  npm install -g @wrongstack/desktop",
-        "",
-        "The umbrella package also supports desktop when installed with optional dependencies:",
-        "  npm install -g wrongstack",
-        ""
-      ].join("\n")
+      "WRONGSTACK_DESKTOP_EXECUTABLE must point to an existing absolute executable path.\n"
     );
     return 1;
   }
-  return await new Promise((resolve2) => {
-    const executable = selectDesktopLauncherExecutable(
-      process.execPath,
-      typeof globalThis.Bun !== "undefined",
-      process.env["NODE"]
-    );
-    const child = spawn(executable, [launcherPath, ...args], {
+  const native = override || desktopExecutableCandidates(process.platform, homedir(), process.env).find(isFile);
+  let executable = native;
+  let launchArgs = args;
+  if (!executable)
+    try {
+      const req = createRequire3(import.meta.url);
+      const desktopPkgPath = req.resolve("@wrongstack/desktop/package.json");
+      launchArgs = [
+        path3.join(path3.dirname(desktopPkgPath), "bin", "wrongstack-desktop.js"),
+        ...args
+      ];
+      executable = selectDesktopLauncherExecutable(
+        process.execPath,
+        typeof globalThis.Bun !== "undefined",
+        process.env["NODE"]
+      );
+    } catch {
+      process.stderr.write(
+        [
+          color2.red("\u2717 WrongStack Desktop is not installed."),
+          "",
+          "Download WrongStack Desktop from GitHub Releases:",
+          "  https://github.com/WrongStack/WrongStack/releases/latest",
+          "",
+          "For a portable or custom installation, set WRONGSTACK_DESKTOP_EXECUTABLE",
+          "to the absolute path of the Desktop executable (on macOS: WrongStack.app/Contents/MacOS/WrongStack).",
+          ""
+        ].join("\n")
+      );
+      return 1;
+    }
+  return await new Promise((resolve3) => {
+    const env = { ...process.env };
+    if (native) delete env["ELECTRON_RUN_AS_NODE"];
+    const child = spawn(executable, launchArgs, {
       stdio: "inherit",
-      env: process.env,
+      env,
       windowsHide: false
     });
     child.once("error", (err) => {
@@ -820,11 +882,11 @@ async function launchDesktop(args) {
         `${color2.red("\u2717 Failed to start WrongStack Desktop:")} ${err.message}
 `
       );
-      resolve2(1);
+      resolve3(1);
     });
     child.once("exit", (code, signal) => {
-      if (typeof code === "number") resolve2(code);
-      else resolve2(signal ? 1 : 0);
+      if (typeof code === "number") resolve3(code);
+      else resolve3(signal ? 1 : 0);
     });
   });
 }
@@ -849,24 +911,24 @@ async function isHqAlreadyRunning(dataDir) {
   return null;
 }
 async function isPortInUse(host, port) {
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     const server = net.createServer();
     server.once("error", (err) => {
       if (err.code === "EADDRINUSE") {
-        resolve2(true);
+        resolve3(true);
       } else {
-        resolve2(false);
+        resolve3(false);
       }
     });
     server.once("listening", () => {
-      server.close(() => resolve2(false));
+      server.close(() => resolve3(false));
     });
     server.listen(port, host);
   });
 }
 async function handleHqShortCircuit(flags) {
   if (flags["hq"] !== true) return null;
-  const { startHqServer } = await import("./hq-server-IIBZQZU4.js");
+  const { startHqServer } = await import("./hq-server-YTKDVQPY.js");
   const tunnelRequested = flags["tunnel"] === true;
   const rawPublicUrl = typeof flags["hq-public-url"] === "string" ? flags["hq-public-url"] : process.env.WRONGSTACK_HQ_PUBLIC_URL;
   let publicOrigin;
@@ -1080,7 +1142,7 @@ ${color3.green("Cloudflare Quick Tunnel ready:")} ${browserUrl}
     } catch {
     }
   }
-  await new Promise((resolve2) => {
+  await new Promise((resolve3) => {
     const shutdown = async () => {
       const results = await Promise.allSettled([
         ...tunnel ? [tunnel.close()] : [],
@@ -1099,7 +1161,7 @@ ${color3.green("Cloudflare Quick Tunnel ready:")} ${browserUrl}
           })
         );
       }
-      resolve2();
+      resolve3();
     };
     process.on("SIGINT", shutdown);
     process.on("SIGTERM", shutdown);
@@ -1108,26 +1170,195 @@ ${color3.green("Cloudflare Quick Tunnel ready:")} ${browserUrl}
 }
 
 // src/boot.ts
-import * as fs6 from "node:fs/promises";
-import { createRequire as createRequire4 } from "node:module";
 import * as os from "node:os";
-import * as path7 from "node:path";
+import * as path9 from "node:path";
+import { toErrorMessage as toErrorMessage5 } from "@wrongstack/core/utils";
+
+// src/boot-provider-selection.ts
+import * as fs2 from "node:fs/promises";
+import { createRequire as createRequire4 } from "node:module";
+import * as path4 from "node:path";
 import { fileURLToPath } from "node:url";
-import { toErrorMessage as toErrorMessage4 } from "@wrongstack/core/utils";
+import {
+  color as color4,
+  moduleUrlFor,
+  toErrorMessage,
+  wrongstackPackageJsonPath as wrongstackPackageJsonPath3
+} from "@wrongstack/core/utils";
+import { isSetupProvider } from "@wrongstack/providers";
+function resolveBundledOverlayFile() {
+  try {
+    return fileURLToPath(
+      new URL("../data/providers.json", moduleUrlFor(import.meta.url, "@wrongstack/cli"))
+    );
+  } catch {
+    return void 0;
+  }
+}
+async function validateSavedProviderModel(config, modelsRegistry) {
+  const providerId = config.provider;
+  const modelId = config.model;
+  if (!providerId || !modelId) return { ok: false, reason: "missing provider/model" };
+  if (isSetupProvider(providerId)) return { ok: true };
+  const saved = config.providers?.[providerId];
+  const lookupId = saved?.type && saved.type !== providerId ? saved.type : providerId;
+  const catalogProvider = await modelsRegistry.getProvider(lookupId).catch(() => void 0);
+  if (!catalogProvider && !saved?.family)
+    return { ok: false, reason: `provider "${providerId}" is no longer available` };
+  const hasCredential = (catalogProvider?.envVars ?? saved?.envVars ?? []).some(
+    (envVar) => Boolean(process.env[envVar])
+  ) || saved !== void 0 && resolveActiveApiKey(saved) !== void 0 || isKeylessLocalProvider({
+    apiBase: saved?.baseUrl ?? catalogProvider?.apiBase,
+    envVars: saved?.envVars ?? catalogProvider?.envVars
+  });
+  if (!hasCredential) return { ok: false, reason: `provider "${providerId}" has no usable key` };
+  const visible = visibleModelIds(
+    providerId,
+    config,
+    (catalogProvider?.models ?? []).map((m) => m.id),
+    saved
+  );
+  if (visible.length > 0 && !visible.includes(modelId)) {
+    return {
+      ok: false,
+      reason: `model "${modelId}" is no longer available for provider "${providerId}"`
+    };
+  }
+  return { ok: true };
+}
+async function autoSelectSavedProvider(config, modelsRegistry) {
+  const providers = config.providers ?? {};
+  const entries = config.provider && providers[config.provider] ? [[config.provider, providers[config.provider]]] : Object.entries(providers);
+  for (const [id, cfg] of entries) {
+    if (!cfg) continue;
+    let model = cfg.models?.[0];
+    if (!model) {
+      const catalogId = cfg.type && cfg.type !== id ? cfg.type : id;
+      const catalog = await modelsRegistry.getProvider(catalogId).catch(() => void 0);
+      model = catalog?.models?.[0]?.id;
+    }
+    if (model) return { provider: id, model };
+  }
+  return void 0;
+}
+function resolveBundledSkillsDir2() {
+  try {
+    const req = createRequire4(import.meta.url);
+    const corePkg = wrongstackPackageJsonPath3("@wrongstack/core", (id) => req.resolve(id));
+    return path4.join(path4.dirname(corePkg), "skills");
+  } catch {
+    return void 0;
+  }
+}
+function resolveBundledPromptsDir2() {
+  try {
+    const req = createRequire4(import.meta.url);
+    const corePkg = wrongstackPackageJsonPath3("@wrongstack/core", (id) => req.resolve(id));
+    return path4.join(path4.dirname(corePkg), "data", "prompts");
+  } catch {
+    return void 0;
+  }
+}
+function isHomeDirectory(cwd, userHome) {
+  if (!cwd || !userHome) return false;
+  return path4.resolve(cwd) === path4.resolve(userHome);
+}
+function shouldPrintYoloNotice(lastChoices, yoloPinned, yolo) {
+  return !lastChoices && yoloPinned === void 0 && yolo;
+}
+async function checkGitInCwd(opts) {
+  const { cwd, renderer, reader } = opts;
+  const cwdGit = path4.join(cwd, ".git");
+  let hasCwdGit = false;
+  try {
+    await fs2.access(cwdGit);
+    hasCwdGit = true;
+  } catch {
+  }
+  if (!hasCwdGit) {
+    renderer.write(
+      `
+  ${color4.amber("\u25CB")} This folder has no ${color4.bold(".git")} repository.
+`
+    );
+    const answer = (await reader.readLine(`  ${color4.amber("?")} Initialize one here? ${color4.dim("[y/N]")} `)).trim().toLowerCase();
+    if (answer === "y" || answer === "yes") {
+      try {
+        const { spawn: spawn2 } = await import("node:child_process");
+        await new Promise((resolve3, reject) => {
+          const child = spawn2("git", ["init"], {
+            cwd,
+            signal: AbortSignal.timeout(1e4),
+            windowsHide: true
+          });
+          child.on("error", reject);
+          child.on(
+            "close",
+            (code) => code === 0 ? resolve3() : reject(new Error(`git init failed with ${code}`))
+          );
+        });
+        renderer.write(`  ${color4.green("\u2713")} Git repository initialized
+`);
+        hasCwdGit = true;
+      } catch (err) {
+        renderer.writeError(`git init failed: ${toErrorMessage(err)}
+`);
+      }
+    }
+  }
+  const parentDir = path4.dirname(cwd);
+  if (parentDir !== cwd) {
+    try {
+      await fs2.access(path4.join(parentDir, ".git"));
+      renderer.write(
+        `  ${color4.dim("\u2139")} A ${color4.bold(".git")} repo exists in the parent directory: ${color4.dim(parentDir)}
+`
+      );
+    } catch {
+    }
+  }
+}
+
+// src/boot.ts
 import { DefaultLogger } from "@wrongstack/core/infrastructure";
 import { TOKENS as TOKENS2 } from "@wrongstack/core/kernel";
-import { DefaultModelsRegistry } from "@wrongstack/core/models";
+import { DefaultModelsRegistry, startCatalog } from "@wrongstack/core/models";
 import { ToolRegistry } from "@wrongstack/core/registry";
 import { normalizeTokenSavingTier } from "@wrongstack/core/types";
-import { isSetupProvider, SETUP_MODEL_ID, SETUP_PROVIDER_ID } from "@wrongstack/providers";
-import { color as color10, isStdinTTY as isStdinTTY2, writeErr } from "@wrongstack/core/utils";
+import { color as color11, isStdinTTY as isStdinTTY2, writeErr } from "@wrongstack/core/utils";
+import { isSetupProvider as isSetupProvider2, SETUP_MODEL_ID, SETUP_PROVIDER_ID } from "@wrongstack/providers";
 import { createDefaultContainer as createDefaultContainer2 } from "@wrongstack/runtime";
 import { registerBuiltinToolTier } from "@wrongstack/tools/tool-tier";
 
+// src/boot/append-system-prompt.ts
+import * as fs3 from "node:fs/promises";
+import * as path5 from "node:path";
+async function resolveAppendedSystemPrompt(flags, cwd) {
+  const parts = [];
+  const inline = flags["append-system-prompt"];
+  if (typeof inline === "string" && inline.trim()) parts.push(inline.trim());
+  const file = flags["append-system-prompt-file"];
+  if (file === true) {
+    throw new Error("--append-system-prompt-file needs a path");
+  }
+  if (typeof file === "string" && file.trim()) {
+    const resolved = path5.resolve(cwd, file.trim());
+    let text;
+    try {
+      text = await fs3.readFile(resolved, "utf8");
+    } catch (err) {
+      const reason = err.code ?? String(err);
+      throw new Error(`--append-system-prompt-file: cannot read ${resolved} (${reason})`);
+    }
+    if (text.trim()) parts.push(text.trim());
+  }
+  return parts.length > 0 ? parts.join("\n\n") : void 0;
+}
+
 // src/boot/config-backup-recovery.ts
-import * as fs2 from "node:fs/promises";
-import * as path4 from "node:path";
-import { atomicWrite as atomicWrite2, backupConfigFile, color as color4, toErrorMessage } from "@wrongstack/core/utils";
+import * as fs4 from "node:fs/promises";
+import * as path6 from "node:path";
+import { atomicWrite as atomicWrite2, backupConfigFile, color as color5, toErrorMessage as toErrorMessage2 } from "@wrongstack/core/utils";
 function isRecord(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
@@ -1138,7 +1369,7 @@ function providerIds(value) {
 }
 async function defaultProfileProvidersAreEmpty(profilePath) {
   try {
-    const parsed = JSON.parse(await fs2.readFile(profilePath, "utf8"));
+    const parsed = JSON.parse(await fs4.readFile(profilePath, "utf8"));
     return providerIds(parsed).length === 0;
   } catch {
     return false;
@@ -1160,22 +1391,27 @@ function profileSnapshotTimestamp(fileName, fallback) {
     Number(millisecond)
   );
 }
-async function findLatestProviderBackup(globalRoot) {
-  const directory = path4.join(globalRoot, "config-history");
+async function findLatestProviderBackup(globalRoot, profileName = "default") {
+  const directory = path6.join(globalRoot, "config-history");
+  const escapedProfile = profileName.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  const filePattern = new RegExp(
+    `^profiles-${escapedProfile}-config-\\d{4}-\\d{2}-\\d{2}T\\d{2}-\\d{2}-\\d{2}-\\d{3}\\.json$`,
+    "i"
+  );
   const candidates = [];
   let entries;
   try {
-    entries = await fs2.readdir(directory, { withFileTypes: true });
+    entries = await fs4.readdir(directory, { withFileTypes: true });
   } catch {
     return void 0;
   }
   for (const entry of entries) {
-    if (!entry.isFile() || !/^profiles-default-config-\d{4}-\d{2}-\d{2}T\d{2}-\d{2}-\d{2}-\d{3}\.json$/i.test(entry.name)) {
+    if (!entry.isFile() || !filePattern.test(entry.name)) {
       continue;
     }
-    const filePath = path4.join(directory, entry.name);
+    const filePath = path6.join(directory, entry.name);
     try {
-      const stat2 = await fs2.stat(filePath);
+      const stat2 = await fs4.stat(filePath);
       candidates.push({
         filePath,
         fileName: entry.name,
@@ -1187,7 +1423,7 @@ async function findLatestProviderBackup(globalRoot) {
   candidates.sort((a, b) => b.modifiedAtMs - a.modifiedAtMs);
   for (const candidate of candidates) {
     try {
-      const raw = await fs2.readFile(candidate.filePath, "utf8");
+      const raw = await fs4.readFile(candidate.filePath, "utf8");
       const parsed = JSON.parse(raw);
       const ids = providerIds(parsed);
       if (ids.length === 0) continue;
@@ -1199,24 +1435,25 @@ async function findLatestProviderBackup(globalRoot) {
 }
 async function restoreDefaultProfileBackup(opts) {
   await backupConfigFile(opts.profilePath, { globalRoot: opts.globalRoot });
-  await fs2.mkdir(path4.dirname(opts.profilePath), { recursive: true });
+  await fs4.mkdir(path6.dirname(opts.profilePath), { recursive: true });
   await atomicWrite2(opts.profilePath, opts.backup.raw, { mode: 384 });
 }
 async function maybeRestoreDefaultProfileFromBackup(opts) {
   if (!await defaultProfileProvidersAreEmpty(opts.profilePath)) return false;
-  const backup = await findLatestProviderBackup(opts.globalRoot);
+  const profileName = opts.profileName ?? "default";
+  const backup = await findLatestProviderBackup(opts.globalRoot, profileName);
   if (!backup) return false;
   const shownProviders = backup.providerIds.slice(0, 5).join(", ");
   const remainder = backup.providerIds.length - 5;
   const providerSummary = remainder > 0 ? `${shownProviders} +${remainder}` : shownProviders;
   opts.renderer.write(
     `
-  ${color4.amber("\u25CB")} ${color4.bold("default")} profile has no saved providers.
-  ${color4.dim("Latest usable backup:")} ${color4.bold(backup.fileName)} ${color4.dim(`(${backup.providerIds.length} provider: ${providerSummary})`)}
+  ${color5.amber("\u25CB")} ${color5.bold(profileName)} profile has no saved providers.
+  ${color5.dim("Latest usable backup:")} ${color5.bold(backup.fileName)} ${color5.dim(`(${backup.providerIds.length} provider: ${providerSummary})`)}
 `
   );
   const answer = (await opts.reader.readLine(
-    `  ${color4.amber("?")} Restore all settings from this backup? ${color4.dim("[Y/n]")} `
+    `  ${color5.amber("?")} Restore all settings from this backup? ${color5.dim("[Y/n]")} `
   )).trim().toLowerCase();
   if (answer === "n" || answer === "no") return false;
   try {
@@ -1226,12 +1463,12 @@ async function maybeRestoreDefaultProfileFromBackup(opts) {
       profilePath: opts.profilePath
     });
     opts.renderer.write(
-      `  ${color4.green("\u2713")} Restored all settings from ${color4.dim(backup.fileName)}
+      `  ${color5.green("\u2713")} Restored all settings from ${color5.dim(backup.fileName)}
 `
     );
     return true;
   } catch (err) {
-    opts.renderer.writeWarning(`Could not restore config backup: ${toErrorMessage(err)}
+    opts.renderer.writeWarning(`Could not restore config backup: ${toErrorMessage2(err)}
 `);
     return false;
   }
@@ -1245,11 +1482,11 @@ import {
   SYSTEM_PROMPT_VARIANT_OPTIONS,
   SYSTEM_PROMPT_VARIANTS
 } from "@wrongstack/core/agent";
-import { color as color8 } from "@wrongstack/core/utils";
+import { color as color9 } from "@wrongstack/core/utils";
 
 // src/pre-launch/first-run.ts
 import { hasProviderCredential } from "@wrongstack/core/models";
-import { color as color5, toErrorMessage as toErrorMessage2 } from "@wrongstack/core/utils";
+import { color as color6, toErrorMessage as toErrorMessage3 } from "@wrongstack/core/utils";
 import { PROVIDER_DEFINITIONS } from "@wrongstack/providers/definitions";
 async function hasAnyCredential(config, modelsRegistry, env = process.env) {
   for (const cfg of Object.values(config.providers ?? {})) {
@@ -1275,39 +1512,39 @@ function renderWelcome(renderer) {
   renderer.write(`${boxTop("Welcome to WrongStack")}
 `);
   renderer.write(
-    `${boxRow(color5.dim("No model is connected yet. Pick how you want to connect one:"))}
+    `${boxRow(color6.dim("No model is connected yet. Pick how you want to connect one:"))}
 `
   );
   renderer.write(`${boxDivider()}
 `);
   renderer.write(
     `${boxRow(
-      `${theme.accent("1")}  ${color5.bold("Sign in with a subscription")}  ${color5.dim("ChatGPT \xB7 Claude \xB7 GitHub Copilot")}`
+      `${theme.accent("1")}  ${color6.bold("Sign in with a subscription")}  ${color6.dim("ChatGPT \xB7 Claude \xB7 GitHub Copilot")}`
     )}
 `
   );
   renderer.write(
     `${boxRow(
-      `${theme.accent("2")}  ${color5.bold("Add an API key")}              ${color5.dim("Anthropic \xB7 OpenAI \xB7 Google \xB7 OpenRouter \xB7 \u2026")}`
+      `${theme.accent("2")}  ${color6.bold("Add an API key")}              ${color6.dim("Anthropic \xB7 OpenAI \xB7 Google \xB7 OpenRouter \xB7 \u2026")}`
     )}
 `
   );
   renderer.write(
     `${boxRow(
-      `${theme.accent("3")}  ${color5.bold("Use a local server")}          ${color5.dim("Ollama \xB7 LM Studio \xB7 vLLM \xB7 OmniRoute")}`
+      `${theme.accent("3")}  ${color6.bold("Use a local server")}          ${color6.dim("Ollama \xB7 LM Studio \xB7 vLLM \xB7 OmniRoute")}`
     )}
 `
   );
   renderer.write(
     `${boxRow(
-      `${theme.accent("4")}  ${color5.bold("Continue without a key")}      ${color5.dim("setup mode \u2014 explore the app, no model")}`
+      `${theme.accent("4")}  ${color6.bold("Continue without a key")}      ${color6.dim("setup mode \u2014 explore the app, no model")}`
     )}
 `
   );
   renderer.write(`${boxDivider()}
 `);
   renderer.write(
-    `${boxRow(color5.dim("You can change this any time with /auth inside the app, or `wstack auth`."))}
+    `${boxRow(color6.dim("You can change this any time with /auth inside the app, or `wstack auth`."))}
 `
   );
   renderer.write(`${boxBottom()}
@@ -1326,12 +1563,12 @@ async function runFirstRunSetup(deps) {
     renderWelcome(renderer);
     const answer = (await reader.readLine(
       `
-${color5.amber("?")} Choose ${color5.dim("(1-4)")} ${color5.dim("[q to quit]")}: `
+${color6.amber("?")} Choose ${color6.dim("(1-4)")} ${color6.dim("[q to quit]")}: `
     )).trim().toLowerCase();
     if (!answer || answer === "q" || answer === "quit" || answer === "exit") {
       renderer.write(
         `
-  ${color5.dim("No provider configured. Run")} ${color5.bold("wstack auth")} ${color5.dim("when you are ready.")}
+  ${color6.dim("No provider configured. Run")} ${color6.bold("wstack auth")} ${color6.dim("when you are ready.")}
 
 `
       );
@@ -1348,14 +1585,14 @@ ${color5.amber("?")} Choose ${color5.dim("(1-4)")} ${color5.dim("[q to quit]")}:
     try {
       await flow();
     } catch (err) {
-      renderer.writeWarning(`Setup step did not complete: ${toErrorMessage2(err)}
+      renderer.writeWarning(`Setup step did not complete: ${toErrorMessage3(err)}
 `);
     }
     let updated;
     try {
       updated = await deps.reloadConfig();
     } catch (err) {
-      renderer.writeWarning(`Could not re-read config: ${toErrorMessage2(err)}
+      renderer.writeWarning(`Could not re-read config: ${toErrorMessage3(err)}
 `);
       continue;
     }
@@ -1367,8 +1604,8 @@ ${color5.amber("?")} Choose ${color5.dim("(1-4)")} ${color5.dim("[q to quit]")}:
 }
 
 // src/pre-launch/launch-prompts.ts
-import * as fs3 from "node:fs/promises";
-import { atomicWrite as atomicWrite3, color as color6 } from "@wrongstack/core/utils";
+import * as fs5 from "node:fs/promises";
+import { atomicWrite as atomicWrite3, color as color7 } from "@wrongstack/core/utils";
 var LaunchAbortedError = class extends Error {
   exitCode = 0;
   constructor() {
@@ -1399,19 +1636,19 @@ async function runLaunchPrompts(opts) {
       yolo: yoloPinned ?? lastChoices.yolo,
       autonomy: autonomyPinned ?? lastChoices.autonomy
     };
-    const onOff = (v) => v ? color6.green("on") : color6.dim("off");
+    const onOff = (v) => v ? color7.green("on") : color7.dim("off");
     const modeLabel = effective.mode.toUpperCase();
     renderer.write(
       `
-  ${color6.dim("Last settings:")} ${color6.bold(modeLabel)} \xB7 YOLO ${onOff(effective.yolo)} \xB7 Autonomy ${effective.autonomy === "auto" ? color6.green("auto") : color6.dim("off")}
+  ${color7.dim("Last settings:")} ${color7.bold(modeLabel)} \xB7 YOLO ${onOff(effective.yolo)} \xB7 Autonomy ${effective.autonomy === "auto" ? color7.green("auto") : color7.dim("off")}
 `
     );
     const answer = (await reader.readLine(
-      `  ${color6.amber("?")} Continue with these? ${color6.dim("[Y/n/q]")} ${color6.dim("(auto Y in 5s)")} `,
+      `  ${color7.amber("?")} Continue with these? ${color7.dim("[Y/n/q]")} ${color7.dim("(auto Y in 5s)")} `,
       { timeoutMs: 5e3, defaultAnswer: "y" }
     )).trim().toLowerCase();
     if (answer === "q") {
-      renderer.write(color6.dim("  Goodbye!\n"));
+      renderer.write(color7.dim("  Goodbye!\n"));
       throw new LaunchAbortedError();
     }
     if (answer !== "n" && answer !== "no") {
@@ -1419,7 +1656,7 @@ async function runLaunchPrompts(opts) {
       const badgeStr2 = badges2.length > 0 ? ` (${badges2.join(" \xB7 ")})` : "";
       renderer.write(
         `
-  ${color6.green("\u25B6")} Launching in ${color6.bold(modeLabel)} mode${badgeStr2}
+  ${color7.green("\u25B6")} Launching in ${color7.bold(modeLabel)} mode${badgeStr2}
 
 `
       );
@@ -1432,10 +1669,10 @@ async function runLaunchPrompts(opts) {
   } else {
     const answer = (await reader.readLine(
       `
-  ${color6.amber("?")} Interactive mode: ${color6.bold("T")}UI / ${color6.bold("R")}EPL ${color6.dim("[T/r/q]")} `
+  ${color7.amber("?")} Interactive mode: ${color7.bold("T")}UI / ${color7.bold("R")}EPL ${color7.dim("[T/r/q]")} `
     )).trim().toLowerCase();
     if (answer === "q") {
-      renderer.write(color6.dim("  Goodbye!\n"));
+      renderer.write(color7.dim("  Goodbye!\n"));
       throw new LaunchAbortedError();
     }
     mode = answer === "r" || answer === "repl" ? "repl" : "tui";
@@ -1445,10 +1682,10 @@ async function runLaunchPrompts(opts) {
     yolo = yoloPinned;
   } else {
     const answer = (await reader.readLine(
-      `  ${color6.amber("?")} YOLO mode ${color6.dim("(auto-approve tool calls)")} ${color6.dim("[Y/n/q]")} `
+      `  ${color7.amber("?")} YOLO mode ${color7.dim("(auto-approve tool calls)")} ${color7.dim("[Y/n/q]")} `
     )).trim().toLowerCase();
     if (answer === "q") {
-      renderer.write(color6.dim("  Goodbye!\n"));
+      renderer.write(color7.dim("  Goodbye!\n"));
       throw new LaunchAbortedError();
     }
     yolo = answer !== "n" && answer !== "no";
@@ -1458,10 +1695,10 @@ async function runLaunchPrompts(opts) {
     autonomy = autonomyPinned;
   } else {
     const answer = (await reader.readLine(
-      `  ${color6.amber("?")} Autonomy mode ${color6.dim("(auto-continue \u2014 agent picks next step)")} ${color6.dim("[Y/n/q]")} `
+      `  ${color7.amber("?")} Autonomy mode ${color7.dim("(auto-continue \u2014 agent picks next step)")} ${color7.dim("[Y/n/q]")} `
     )).trim().toLowerCase();
     if (answer === "q") {
-      renderer.write(color6.dim("  Goodbye!\n"));
+      renderer.write(color7.dim("  Goodbye!\n"));
       throw new LaunchAbortedError();
     }
     autonomy = answer !== "n" && answer !== "no" ? "auto" : "off";
@@ -1470,7 +1707,7 @@ async function runLaunchPrompts(opts) {
   const badgeStr = badges.length > 0 ? ` (${badges.join(" \xB7 ")})` : "";
   renderer.write(
     `
-  ${color6.green("\u25B6")} Launching in ${color6.bold(mode.toUpperCase())} mode${badgeStr}
+  ${color7.green("\u25B6")} Launching in ${color7.bold(mode.toUpperCase())} mode${badgeStr}
 
 `
   );
@@ -1478,21 +1715,21 @@ async function runLaunchPrompts(opts) {
 }
 function buildBadges(chosen) {
   const badges = [];
-  if (chosen.yolo) badges.push(color6.yellow("YOLO"));
+  if (chosen.yolo) badges.push(color7.yellow("YOLO"));
   if (chosen.autonomy !== "off")
-    badges.push(color6.magenta(`AUTONOMY:${chosen.autonomy.toUpperCase()}`));
+    badges.push(color7.magenta(`AUTONOMY:${chosen.autonomy.toUpperCase()}`));
   return badges;
 }
 async function persistLaunchChoices(configPath, choices) {
   let fileExists = false;
   try {
-    await fs3.access(configPath);
+    await fs5.access(configPath);
     fileExists = true;
   } catch {
   }
   let existing = {};
   try {
-    const raw = await fs3.readFile(configPath, "utf8");
+    const raw = await fs5.readFile(configPath, "utf8");
     existing = JSON.parse(raw);
   } catch (err) {
     if (fileExists) {
@@ -1512,9 +1749,9 @@ async function persistLaunchChoices(configPath, choices) {
 }
 
 // src/pre-launch/project-check.ts
-import * as fs4 from "node:fs/promises";
-import * as path5 from "node:path";
-import { color as color7, toErrorMessage as toErrorMessage3 } from "@wrongstack/core/utils";
+import * as fs6 from "node:fs/promises";
+import * as path7 from "node:path";
+import { color as color8, toErrorMessage as toErrorMessage4 } from "@wrongstack/core/utils";
 var MANIFESTS = [
   "package.json",
   "pyproject.toml",
@@ -1529,13 +1766,13 @@ var MANIFESTS = [
 ];
 async function detectProjectKind(projectRoot) {
   try {
-    await fs4.access(path5.join(projectRoot, ".wrongstack", "AGENTS.md"));
+    await fs6.access(path7.join(projectRoot, ".wrongstack", "AGENTS.md"));
     return "initialized";
   } catch {
   }
   for (const m of MANIFESTS) {
     try {
-      await fs4.access(path5.join(projectRoot, m));
+      await fs6.access(path7.join(projectRoot, m));
       return "project";
     } catch {
     }
@@ -1543,12 +1780,12 @@ async function detectProjectKind(projectRoot) {
   return "empty";
 }
 async function scaffoldAgentsMd(projectRoot) {
-  const dir = path5.join(projectRoot, ".wrongstack");
-  const file = path5.join(dir, "AGENTS.md");
+  const dir = path7.join(projectRoot, ".wrongstack");
+  const file = path7.join(dir, "AGENTS.md");
   const facts = await detectProjectFacts(projectRoot);
   const body = renderAgentsTemplate(facts);
-  await fs4.mkdir(dir, { recursive: true });
-  await fs4.writeFile(file, body, "utf8");
+  await fs6.mkdir(dir, { recursive: true });
+  await fs6.writeFile(file, body, "utf8");
   return file;
 }
 async function runProjectCheck(opts) {
@@ -1557,7 +1794,7 @@ async function runProjectCheck(opts) {
   if (kind === "initialized") {
     renderer.write(
       `
-  ${color7.green("\u2713")} Project initialized ${color7.dim(`(${path5.join(projectRoot, ".wrongstack", "AGENTS.md")})`)}
+  ${color8.green("\u2713")} Project initialized ${color8.dim(`(${path7.join(projectRoot, ".wrongstack", "AGENTS.md")})`)}
 `
     );
     return true;
@@ -1565,51 +1802,51 @@ async function runProjectCheck(opts) {
   if (kind === "project") {
     renderer.write(
       `
-  ${color7.amber("\u25CF")} Project detected ${color7.dim(`(${projectRoot})`)} but ${color7.bold(".wrongstack/AGENTS.md")} is missing.
+  ${color8.amber("\u25CF")} Project detected ${color8.dim(`(${projectRoot})`)} but ${color8.bold(".wrongstack/AGENTS.md")} is missing.
 `
     );
     const answer2 = (await reader.readLine(
-      `  ${color7.amber("?")} Scaffold ${color7.bold("AGENTS.md")} now? ${color7.dim("[y/N/q]")} `
+      `  ${color8.amber("?")} Scaffold ${color8.bold("AGENTS.md")} now? ${color8.dim("[y/N/q]")} `
     )).trim().toLowerCase();
     if (answer2 === "q") {
-      renderer.write(color7.dim("  Cancelled.\n"));
+      renderer.write(color8.dim("  Cancelled.\n"));
       return false;
     }
     if (answer2 === "y" || answer2 === "yes") {
       try {
         const file = await scaffoldAgentsMd(projectRoot);
-        renderer.write(`  ${color7.green("\u2713")} Wrote ${color7.dim(file)}
+        renderer.write(`  ${color8.green("\u2713")} Wrote ${color8.dim(file)}
 `);
       } catch (err) {
-        renderer.writeError(`Failed to scaffold AGENTS.md: ${toErrorMessage3(err)}`);
+        renderer.writeError(`Failed to scaffold AGENTS.md: ${toErrorMessage4(err)}`);
       }
     }
     return true;
   }
-  const gitDir = path5.join(projectRoot, ".git");
+  const gitDir = path7.join(projectRoot, ".git");
   let hasGit = false;
   try {
-    await fs4.access(gitDir);
+    await fs6.access(gitDir);
     hasGit = true;
   } catch {
   }
   if (!hasGit) {
     renderer.write(
       `
-  ${color7.dim("\u25CB")} ${color7.dim(`No project manifest in ${projectRoot} \u2014 running in a scratch directory.`)}
+  ${color8.dim("\u25CB")} ${color8.dim(`No project manifest in ${projectRoot} \u2014 running in a scratch directory.`)}
 `
     );
     const answer2 = (await reader.readLine(
-      `  ${color7.amber("?")} No git repo found. ${color7.bold("Initialize git?")} ${color7.dim("[y/N/q]")} `
+      `  ${color8.amber("?")} No git repo found. ${color8.bold("Initialize git?")} ${color8.dim("[y/N/q]")} `
     )).trim().toLowerCase();
     if (answer2 === "q") {
-      renderer.write(color7.dim("  Cancelled.\n"));
+      renderer.write(color8.dim("  Cancelled.\n"));
       return false;
     }
     if (answer2 === "y" || answer2 === "yes") {
       try {
         const { spawn: spawn2 } = await import("node:child_process");
-        await new Promise((resolve2, reject) => {
+        await new Promise((resolve3, reject) => {
           const child = spawn2("git", ["init"], {
             cwd,
             signal: AbortSignal.timeout(1e4),
@@ -1618,26 +1855,26 @@ async function runProjectCheck(opts) {
           child.on("error", reject);
           child.on(
             "close",
-            (code) => code === 0 ? resolve2() : reject(new Error(`git init failed with ${code}`))
+            (code) => code === 0 ? resolve3() : reject(new Error(`git init failed with ${code}`))
           );
         });
-        renderer.write(`  ${color7.green("\u2713")} Git repository initialized
+        renderer.write(`  ${color8.green("\u2713")} Git repository initialized
 `);
       } catch (err) {
-        renderer.writeError(`git init failed: ${toErrorMessage3(err)}
+        renderer.writeError(`git init failed: ${toErrorMessage4(err)}
 `);
       }
     }
   } else {
     renderer.write(
       `
-  ${color7.dim("\u25CB")} ${color7.dim(`No project manifest in ${projectRoot} \u2014 running in a scratch directory.`)}
+  ${color8.dim("\u25CB")} ${color8.dim(`No project manifest in ${projectRoot} \u2014 running in a scratch directory.`)}
 `
     );
   }
-  const answer = (await reader.readLine(`  ${color7.amber("?")} Continue anyway? ${color7.dim("[Y/n/q]")} `)).trim().toLowerCase();
+  const answer = (await reader.readLine(`  ${color8.amber("?")} Continue anyway? ${color8.dim("[Y/n/q]")} `)).trim().toLowerCase();
   if (answer === "q" || answer === "n" || answer === "no") {
-    renderer.write(color7.dim("  Cancelled.\n"));
+    renderer.write(color8.dim("  Cancelled.\n"));
     return false;
   }
   return true;
@@ -1672,28 +1909,28 @@ async function runSystemPromptMenu(deps) {
   const defaultVariant = lastVariant ?? "default";
   if (lastVariant) {
     const answer2 = (await reader.readLine(
-      `  ${color8.amber("?")} Continue with ${color8.bold(labelFor(lastVariant))} system prompt ${color8.dim(`(~${fmtTok(tokens[lastVariant])} tokens)`)}? ${color8.dim("[Y/n/q]")} ${color8.dim("(auto Y in 5s)")} `,
+      `  ${color9.amber("?")} Continue with ${color9.bold(labelFor(lastVariant))} system prompt ${color9.dim(`(~${fmtTok(tokens[lastVariant])} tokens)`)}? ${color9.dim("[Y/n/q]")} ${color9.dim("(auto Y in 5s)")} `,
       { timeoutMs: SUMMARY_TIMEOUT_MS2, defaultAnswer: "y" }
     )).trim().toLowerCase();
     if (answer2 === "q" || answer2 === "quit") throw new LaunchAbortedError();
     if (answer2 !== "n" && answer2 !== "no") return lastVariant;
   }
   renderer.write(`
-  ${color8.amber("?")} System prompt:
+  ${color9.amber("?")} System prompt:
 `);
   for (const [index, opt] of SYSTEM_PROMPT_OPTIONS.entries()) {
     const num2 = index + 1;
     const isDefault = opt.variant === defaultVariant;
-    const marker = isDefault ? color8.cyan("\u25CF") : color8.dim("\u25CB");
-    const label = isDefault ? color8.bold(opt.label) : opt.label;
+    const marker = isDefault ? color9.cyan("\u25CF") : color9.dim("\u25CB");
+    const label = isDefault ? color9.bold(opt.label) : opt.label;
     renderer.write(
-      `    ${color8.dim(`${num2}.`)} ${marker} ${label.padEnd(9)} ${color8.dim(`~${fmtTok(tokens[opt.variant])} tokens`)}  ${color8.dim(opt.hint)}
+      `    ${color9.dim(`${num2}.`)} ${marker} ${label.padEnd(9)} ${color9.dim(`~${fmtTok(tokens[opt.variant])} tokens`)}  ${color9.dim(opt.hint)}
 `
     );
   }
   const answer = (await reader.readLine(
     `
-  ${color8.amber("?")} Select system prompt ${color8.dim(`[1-${SYSTEM_PROMPT_OPTIONS.length}, Enter = ${labelFor(defaultVariant)}, q to quit]`)}: `
+  ${color9.amber("?")} Select system prompt ${color9.dim(`[1-${SYSTEM_PROMPT_OPTIONS.length}, Enter = ${labelFor(defaultVariant)}, q to quit]`)}: `
   )).trim().toLowerCase();
   if (answer === "q" || answer === "quit") throw new LaunchAbortedError();
   if (!answer) return defaultVariant;
@@ -1750,8 +1987,8 @@ async function bootConfig(flags) {
 }
 
 // src/input-reader.ts
-import * as fs5 from "node:fs/promises";
-import * as path6 from "node:path";
+import * as fs7 from "node:fs/promises";
+import * as path8 from "node:path";
 import * as readline from "node:readline";
 import {
   resolveWstackPaths,
@@ -1770,7 +2007,7 @@ var ReadlineInputReader = class {
   }
   async loadHistory() {
     try {
-      const raw = await fs5.readFile(this.historyFile, "utf8");
+      const raw = await fs7.readFile(this.historyFile, "utf8");
       this.history = raw.split("\n").filter(Boolean).slice(-1e3);
     } catch {
       this.history = [];
@@ -1778,8 +2015,8 @@ var ReadlineInputReader = class {
   }
   async saveHistory() {
     try {
-      await fs5.mkdir(path6.dirname(this.historyFile), { recursive: true });
-      await fs5.writeFile(this.historyFile, this.history.slice(-1e3).join("\n"));
+      await fs7.mkdir(path8.dirname(this.historyFile), { recursive: true });
+      await fs7.writeFile(this.historyFile, this.history.slice(-1e3).join("\n"));
     } catch {
     }
   }
@@ -1800,25 +2037,25 @@ var ReadlineInputReader = class {
   async readLine(prompt, timeoutOpts) {
     if (this.history.length === 0) await this.loadHistory();
     while (this.pending) {
-      await new Promise((resolve2) => setTimeout(resolve2, 50));
+      await new Promise((resolve3) => setTimeout(resolve3, 50));
     }
     this.pending = true;
     try {
       if (this.rl) {
         const old = this.rl;
         this.rl = void 0;
-        await new Promise((resolve2) => {
+        await new Promise((resolve3) => {
           if (old.closed) {
-            resolve2();
+            resolve3();
           } else {
-            old.once("close", resolve2);
+            old.once("close", resolve3);
             old.close();
           }
         });
       }
       const fresh = this.ensure();
       this.installPromptGuard(fresh);
-      const line = await new Promise((resolve2) => {
+      const line = await new Promise((resolve3) => {
         let settled = false;
         let timeoutHandle;
         const settle = (line2) => {
@@ -1826,7 +2063,7 @@ var ReadlineInputReader = class {
           settled = true;
           if (timeoutHandle) clearTimeout(timeoutHandle);
           setOutputLineGuard(null);
-          resolve2(line2);
+          resolve3(line2);
         };
         if (timeoutOpts) {
           timeoutHandle = setTimeout(() => {
@@ -1893,7 +2130,7 @@ var ReadlineInputReader = class {
     const signal = opts.signal;
     if (signal?.aborted) return "";
     writeOut(prompt);
-    return new Promise((resolve2) => {
+    return new Promise((resolve3) => {
       const stdin = process.stdin;
       const wasRaw = stdin.isRaw;
       const wasPaused = stdin.isPaused();
@@ -1904,7 +2141,7 @@ var ReadlineInputReader = class {
         if (key === "") {
           cleanup();
           writeOut("\n");
-          resolve2("");
+          resolve3("");
           return;
         }
         const opt = options.find(
@@ -1914,17 +2151,17 @@ var ReadlineInputReader = class {
           cleanup();
           writeOut(`${opt.key}
 `);
-          resolve2(opt.value);
+          resolve3(opt.value);
         }
       };
       const onClose = () => {
         cleanup();
-        resolve2("");
+        resolve3("");
       };
       const onAbort = () => {
         cleanup();
         writeOut("\n");
-        resolve2("");
+        resolve3("");
       };
       const cleanup = () => {
         stdin.off("data", onData);
@@ -1958,7 +2195,7 @@ var ReadlineInputReader = class {
     this.rl?.close();
     this.rl = void 0;
     writeOut(prompt);
-    return new Promise((resolve2) => {
+    return new Promise((resolve3) => {
       let buf = "";
       const wasRaw = stdin.isRaw;
       const cleanup = () => {
@@ -1987,13 +2224,13 @@ var ReadlineInputReader = class {
             cleanup();
             writeOut(`  ${dim(`[${buf.length} chars]`)}
 `);
-            resolve2(buf);
+            resolve3(buf);
             return;
           }
           if (ch === "") {
             cleanup();
             writeOut("\n");
-            resolve2("");
+            resolve3("");
             return;
           }
           if (ch === "") {
@@ -2036,7 +2273,7 @@ function dim(s) {
 }
 
 // src/renderer.ts
-import { color as color9 } from "@wrongstack/core/utils";
+import { color as color10 } from "@wrongstack/core/utils";
 var TerminalRenderer = class _TerminalRenderer {
   out;
   err;
@@ -2149,7 +2386,7 @@ var TerminalRenderer = class _TerminalRenderer {
     if (!this.lineStart) this.out.write("\n");
     const arrow = theme2.primary("\u2192");
     const display = formatInputSummary(input);
-    this.out.write(`${arrow} ${theme2.bold(name)}${display ? color9.dim(` ${display}`) : ""}
+    this.out.write(`${arrow} ${theme2.bold(name)}${display ? color10.dim(` ${display}`) : ""}
 `);
     this.lineStart = true;
   }
@@ -2166,7 +2403,7 @@ var TerminalRenderer = class _TerminalRenderer {
     if (isError) {
       const firstLine = txt.split("\n")[0] ?? "";
       const truncated = firstLine.length > 200 ? `${firstLine.slice(0, 197)}\u2026` : firstLine;
-      this.out.write(`  ${prefix} ${color9.dim(truncated)}
+      this.out.write(`  ${prefix} ${color10.dim(truncated)}
 `);
       this.lineStart = true;
       return;
@@ -2174,7 +2411,7 @@ var TerminalRenderer = class _TerminalRenderer {
     const isEditLike = name === "edit" || name === "write";
     const diff = extractDiff(content);
     if (isEditLike && diff) {
-      this.out.write(`  ${prefix} ${color9.dim(summarize(content, name))}
+      this.out.write(`  ${prefix} ${color10.dim(summarize(content, name))}
 `);
       const rendered = renderDiff(diff).split("\n").map((l) => `      ${l}`).join("\n");
       this.out.write(`${rendered}
@@ -2185,7 +2422,7 @@ var TerminalRenderer = class _TerminalRenderer {
     const summary = summarize(content, name);
     const isReadLike = name === "read" || name === "grep" || name === "glob" || name === "bash" || name === "exec";
     if (renderMode === "simple") {
-      this.out.write(`  ${prefix} ${color9.dim(summary || compactSingleLine(bodyText))}
+      this.out.write(`  ${prefix} ${color10.dim(summary || compactSingleLine(bodyText))}
 `);
       this.lineStart = true;
       return;
@@ -2194,16 +2431,16 @@ var TerminalRenderer = class _TerminalRenderer {
     const lines = bodyText.split("\n");
     const head = lines.slice(0, previewLines).map((l) => l.replace(/\s+$/, ""));
     const moreCount = Math.max(0, lines.length - head.length);
-    this.out.write(`  ${prefix} ${color9.dim(summary)}
+    this.out.write(`  ${prefix} ${color10.dim(summary)}
 `);
     for (const l of head) {
       const capped = l.length > 200 ? `${l.slice(0, 197)}\u2026` : l;
-      this.out.write(`      ${color9.dim(capped)}
+      this.out.write(`      ${color10.dim(capped)}
 `);
     }
     if (moreCount > 0) {
       this.out.write(
-        `      ${color9.dim(`+${moreCount} more line${moreCount === 1 ? "" : "s"}`)}
+        `      ${color10.dim(`+${moreCount} more line${moreCount === 1 ? "" : "s"}`)}
 `
       );
     }
@@ -2342,7 +2579,7 @@ function renderMarkdown(s) {
     return theme2.primary(theme2.bold(`${hashes} ${text}`));
   });
   out = out.replace(/```([a-zA-Z0-9_+-]*)\n([\s\S]*?)```/g, (_m, _lang, code) => {
-    return color9.gray(`
+    return color10.gray(`
 \u250C\u2500
 ${code.replace(/^/gm, "\u2502 ")}\u2514\u2500`);
   });
@@ -2350,7 +2587,7 @@ ${code.replace(/^/gm, "\u2502 ")}\u2514\u2500`);
   out = out.replace(/\*\*([^*]+)\*\*/g, (_m, text) => theme2.bold(text));
   out = out.replace(
     /(^|[^*])\*([^*\n]+)\*([^*]|$)/g,
-    (_m, l, t, r) => `${l}${color9.italic(t)}${r}`
+    (_m, l, t, r) => `${l}${color10.italic(t)}${r}`
   );
   return out;
 }
@@ -2443,14 +2680,14 @@ function summarize(value, name) {
   if (typeof v === "object" && v !== null) {
     const o = v;
     if (name === "edit") {
-      const path8 = typeof o["path"] === "string" ? o["path"] : "";
+      const path10 = typeof o["path"] === "string" ? o["path"] : "";
       const reps = typeof o["replacements"] === "number" ? o["replacements"] : 0;
-      return `${path8}  ${reps} replacement${reps === 1 ? "" : "s"}`.trim();
+      return `${path10}  ${reps} replacement${reps === 1 ? "" : "s"}`.trim();
     }
     if (name === "write") {
-      const path8 = typeof o["path"] === "string" ? o["path"] : "";
+      const path10 = typeof o["path"] === "string" ? o["path"] : "";
       const bytes = typeof o["bytes"] === "number" ? o["bytes"] : void 0;
-      return bytes !== void 0 ? `${path8}  ${bytes}B` : path8;
+      return bytes !== void 0 ? `${path10}  ${bytes}B` : path10;
     }
     if (name === "read") {
       return summarizeRead(o);
@@ -2468,13 +2705,13 @@ function summarize(value, name) {
   return "";
 }
 function summarizeRead(o) {
-  const path8 = typeof o["path"] === "string" ? o["path"] : "";
+  const path10 = typeof o["path"] === "string" ? o["path"] : "";
   const total = typeof o["total_lines"] === "number" ? o["total_lines"] : void 0;
   const truncated = o["truncated"] === true;
   const cached = o["cached"] === true;
   const note = typeof o["note"] === "string" ? o["note"] : void 0;
   const parts = [];
-  if (path8) parts.push(path8);
+  if (path10) parts.push(path10);
   if (total !== void 0) parts.push(`${total} line${total === 1 ? "" : "s"}`);
   const flags = [];
   if (truncated) flags.push("truncated");
@@ -2522,84 +2759,6 @@ function compactSingleLine(text) {
 
 // src/boot.ts
 var GITHUB_PROVIDERS_OVERLAY_URL = "https://raw.githubusercontent.com/WrongStack/WrongStack/main/packages/cli/data/providers.json";
-function resolveBundledOverlayFile() {
-  try {
-    return fileURLToPath(new URL("../data/providers.json", import.meta.url));
-  } catch {
-    return void 0;
-  }
-}
-async function validateSavedProviderModel(config, modelsRegistry) {
-  const providerId = config.provider;
-  const modelId = config.model;
-  if (!providerId || !modelId) return { ok: false, reason: "missing provider/model" };
-  if (isSetupProvider(providerId)) return { ok: true };
-  const saved = config.providers?.[providerId];
-  const lookupId = saved?.type && saved.type !== providerId ? saved.type : providerId;
-  const catalogProvider = await modelsRegistry.getProvider(lookupId).catch(() => void 0);
-  if (!catalogProvider && !saved?.family)
-    return { ok: false, reason: `provider "${providerId}" is no longer available` };
-  const hasCredential = (catalogProvider?.envVars ?? saved?.envVars ?? []).some(
-    (envVar) => Boolean(process.env[envVar])
-  ) || saved !== void 0 && resolveActiveApiKey(saved) !== void 0 || isKeylessLocalProvider({
-    apiBase: saved?.baseUrl ?? catalogProvider?.apiBase,
-    envVars: saved?.envVars ?? catalogProvider?.envVars
-  });
-  if (!hasCredential) return { ok: false, reason: `provider "${providerId}" has no usable key` };
-  const visible = visibleModelIds(
-    providerId,
-    config,
-    (catalogProvider?.models ?? []).map((m) => m.id),
-    saved
-  );
-  if (visible.length > 0 && !visible.includes(modelId)) {
-    return {
-      ok: false,
-      reason: `model "${modelId}" is no longer available for provider "${providerId}"`
-    };
-  }
-  return { ok: true };
-}
-async function autoSelectSavedProvider(config, modelsRegistry) {
-  const providers = config.providers ?? {};
-  const entries = config.provider && providers[config.provider] ? [[config.provider, providers[config.provider]]] : Object.entries(providers);
-  for (const [id, cfg] of entries) {
-    if (!cfg) continue;
-    let model = cfg.models?.[0];
-    if (!model) {
-      const catalogId = cfg.type && cfg.type !== id ? cfg.type : id;
-      const catalog = await modelsRegistry.getProvider(catalogId).catch(() => void 0);
-      model = catalog?.models?.[0]?.id;
-    }
-    if (model) return { provider: id, model };
-  }
-  return void 0;
-}
-function resolveBundledSkillsDir2() {
-  try {
-    const req = createRequire4(import.meta.url);
-    const corePkg = req.resolve("@wrongstack/core/package.json");
-    return path7.join(path7.dirname(corePkg), "skills");
-  } catch {
-    return void 0;
-  }
-}
-function resolveBundledPromptsDir2() {
-  try {
-    const req = createRequire4(import.meta.url);
-    const corePkg = req.resolve("@wrongstack/core/package.json");
-    return path7.join(path7.dirname(corePkg), "data", "prompts");
-  } catch {
-    return void 0;
-  }
-}
-function isHomeDirectory(cwd, userHome) {
-  if (!cwd || !userHome) return false;
-  return path7.resolve(cwd) === path7.resolve(userHome);
-}
-function shouldPrintYoloNotice(lastChoices, yoloPinned, yolo) {
-  return !lastChoices && yoloPinned === void 0 && yolo;
-}
 async function boot(argv) {
   const { flags, positional } = parseArgs(argv);
   if (positional[0] === "update") {
@@ -2611,6 +2770,14 @@ async function boot(argv) {
       flags
     });
   }
+  if (positional[0] === "remote" || typeof flags["remote"] === "string") {
+    const { runRemoteCommand } = await import("./remote-O5WXHLWV.js");
+    return runRemoteCommand(
+      positional[0] === "remote" ? positional.slice(1) : positional,
+      flags,
+      new TerminalRenderer()
+    );
+  }
   if (positional[0] === "resume" && positional[1] && !subcommands["__noop_resume_marker"]) {
     flags["resume"] = positional[1];
     positional.splice(0, 2);
@@ -2619,19 +2786,41 @@ async function boot(argv) {
   try {
     bootResult = await bootConfig(flags);
   } catch (err) {
-    writeErr(`Config error: ${toErrorMessage4(err)}
+    writeErr(`Config error: ${toErrorMessage5(err)}
 `);
     return 2;
   }
   let { paths, config, vault } = bootResult;
+  try {
+    resolveToolRestriction(flags);
+    resolveLaunchAllowedTools(flags);
+    parseOutputFormat(flags["output-format"]);
+    announceSafeMode(flags, writeErr);
+    activateRestrictedMode(flags, writeErr);
+    const launchMcp = await resolveLaunchMcpServers(flags, paths.cwd);
+    if (launchMcp) flags["mcp-config"] = JSON.stringify({ mcpServers: launchMcp });
+    const schema = await resolveJsonSchemaFlag(flags["json-schema"], paths.cwd);
+    if (schema) flags["json-schema"] = JSON.stringify(schema);
+    const appended = await resolveAppendedSystemPrompt(flags, paths.cwd);
+    delete flags["append-system-prompt-file"];
+    if (appended) flags["append-system-prompt"] = appended;
+    else delete flags["append-system-prompt"];
+  } catch (err) {
+    writeErr(`wstack: ${toErrorMessage5(err)}
+`);
+    return 2;
+  }
   let first = positional[0];
-  const mayOfferConfigRecovery = isStdinTTY2() && (positional.length === 0 || first === "quick") && (!config.activeProfile || config.activeProfile === "default") && typeof flags["prompt"] !== "string" && !flags["webui"] && !flags["no-interactive"] && !flags["skip"];
-  const renderer = new TerminalRenderer();
+  const mayOfferConfigRecovery = isStdinTTY2() && (positional.length === 0 || first === "quick") && typeof flags["prompt"] !== "string" && !flags["webui"] && !flags["no-interactive"] && !flags["skip"];
+  const machineOutput = flags["output-json"] === true || flags["output-format"] === "json" || flags["output-format"] === "stream-json";
+  const renderer = new TerminalRenderer(machineOutput ? { out: process.stderr } : void 0);
   const reader = new ReadlineInputReader({ historyFile: paths.wpaths.historyFile });
   if (mayOfferConfigRecovery) {
+    const recoveryProfile = config.activeProfile ?? "default";
     const restored = await maybeRestoreDefaultProfileFromBackup({
       globalRoot: paths.wpaths.globalRoot,
-      profilePath: paths.wpaths.profileConfig("default"),
+      profilePath: paths.wpaths.profileConfig(recoveryProfile),
+      profileName: recoveryProfile,
       renderer,
       reader
     });
@@ -2640,7 +2829,7 @@ async function boot(argv) {
         bootResult = await bootConfig(flags);
         ({ paths, config, vault } = bootResult);
       } catch (err) {
-        writeErr(`Config error after backup restore: ${toErrorMessage4(err)}
+        writeErr(`Config error after backup restore: ${toErrorMessage5(err)}
 `);
         await reader.close();
         return 2;
@@ -2693,6 +2882,7 @@ async function boot(argv) {
   });
   const subcommandHandler = first ? subcommands[first] : void 0;
   if (first && subcommandHandler) {
+    installProviderPersisters({ config, paths: wpaths, vault, logger });
     if (flags["help"] === true || flags["h"] === true) {
       const deepSub = positional[1];
       if (deepSub && renderDeepHelp(`${first}:${deepSub}`, renderer)) {
@@ -2740,8 +2930,8 @@ async function boot(argv) {
   if (isHomeDirectory(cwd, userHome)) {
     writeErr(
       `
-  ${color10.red(color10.bold("\u26A0 This is not a working directory."))}
-  ${color10.red("Please open wstack in a project folder.")}
+  ${color11.red(color11.bold("\u26A0 This is not a working directory."))}
+  ${color11.red("Please open wstack in a project folder.")}
 
 `
     );
@@ -2749,23 +2939,21 @@ async function boot(argv) {
     return 1;
   }
   if (!flags["no-models-refresh"]) {
-    try {
-      await modelsRegistry.refresh();
-      logger.info("models.dev catalog refreshed");
-    } catch (err) {
-      const msg = toErrorMessage4(err);
-      logger.warn(`models.dev refresh failed (${msg}); using cached catalog`);
-    }
+    await startCatalog({
+      registry: modelsRegistry,
+      logger,
+      shortLived: positional.length > 0 || typeof flags["prompt"] === "string"
+    });
   }
   try {
     await discoverAndMergeProviders({
       config,
       registry: modelsRegistry,
-      cacheDir: path7.dirname(wpaths.modelsCache),
+      cacheDir: path9.dirname(wpaths.modelsCache),
       logger
     });
   } catch (err) {
-    logger.debug(`provider auto-discovery skipped: ${toErrorMessage4(err)}`);
+    logger.debug(`provider auto-discovery skipped: ${toErrorMessage5(err)}`);
   }
   const isSingleShot = positional.length > 0 || typeof flags["prompt"] === "string";
   const isInteractiveTTY = isStdinTTY2() && !isSingleShot && !flags["webui"] && !flags["no-interactive"] && !flags["skip"];
@@ -2800,11 +2988,11 @@ async function boot(argv) {
     if (isStdinTTY2() && !noInteractiveMode) {
       let picked;
       let skipPicker = false;
-      if (isSetupProvider(config.provider)) {
+      if (isSetupProvider2(config.provider)) {
         skipPicker = true;
         renderer.write(
           `
-  ${color10.amber("\u25B6")} ${color10.bold("Setup mode")} ${color10.dim("\u2014 no model connected. Run")} ${color10.bold("/auth")} ${color10.dim("to connect one.")}
+  ${color11.amber("\u25B6")} ${color11.bold("Setup mode")} ${color11.dim("\u2014 no model connected. Run")} ${color11.bold("/auth")} ${color11.dim("to connect one.")}
 
 `
         );
@@ -2831,7 +3019,7 @@ async function boot(argv) {
             config = reloaded.config;
             vault = reloaded.vault;
           } catch (err) {
-            writeErr(`Config error after setup: ${toErrorMessage4(err)}
+            writeErr(`Config error after setup: ${toErrorMessage5(err)}
 `);
             await reader.close();
             return 2;
@@ -2844,7 +3032,7 @@ async function boot(argv) {
         const savedStatus = await validateSavedProviderModel(config, modelsRegistry);
         renderer.write(
           `
-  ${color10.dim("Last settings:")} ${color10.bold(savedProvider)} / ${color10.bold(savedModel)}
+  ${color11.dim("Last settings:")} ${color11.bold(savedProvider)} / ${color11.bold(savedModel)}
 `
         );
         if (!savedStatus.ok) {
@@ -2854,11 +3042,11 @@ async function boot(argv) {
           );
         } else {
           const answer = (await reader.readLine(
-            `  ${color10.amber("?")} Continue with these? ${color10.dim("[Y/n/q]")} ${color10.dim("(auto Y in 5s)")} `,
+            `  ${color11.amber("?")} Continue with these? ${color11.dim("[Y/n/q]")} ${color11.dim("(auto Y in 5s)")} `,
             { timeoutMs: 5e3, defaultAnswer: "y" }
           )).trim().toLowerCase();
           if (answer === "q") {
-            renderer.write(color10.dim("  Goodbye!\n"));
+            renderer.write(color11.dim("  Goodbye!\n"));
             await reader.close();
             return 0;
           }
@@ -2866,7 +3054,7 @@ async function boot(argv) {
             skipPicker = true;
             renderer.write(
               `
-  ${color10.green("\u25B6")} ${color10.bold(savedProvider)} / ${color10.bold(savedModel)}
+  ${color11.green("\u25B6")} ${color11.bold(savedProvider)} / ${color11.bold(savedModel)}
 
 `
             );
@@ -2887,9 +3075,9 @@ async function boot(argv) {
         if (!config.provider || !config.model) {
           renderer.write(
             `
-  ${color10.dim("No provider selected.")}
-  ${color10.dim("Run")} ${color10.bold("wstack auth")} ${color10.dim("to add a key or sign in, or start with no model:")}
-  ${color10.bold(`wstack --provider ${SETUP_PROVIDER_ID} --model ${SETUP_MODEL_ID}`)}
+  ${color11.dim("No provider selected.")}
+  ${color11.dim("Run")} ${color11.bold("wstack auth")} ${color11.dim("to add a key or sign in, or start with no model:")}
+  ${color11.bold(`wstack --provider ${SETUP_PROVIDER_ID} --model ${SETUP_MODEL_ID}`)}
 
 `
           );
@@ -2959,7 +3147,7 @@ To start the app with no model connected, pass --provider ${SETUP_PROVIDER_ID} -
     }
     if (promptMenu.persistError) {
       renderer.writeWarning(
-        `Could not save system prompt variant to config: ${toErrorMessage4(promptMenu.persistError)}
+        `Could not save system prompt variant to config: ${toErrorMessage5(promptMenu.persistError)}
 `
       );
     }
@@ -3011,8 +3199,8 @@ To start the app with no model connected, pass --provider ${SETUP_PROVIDER_ID} -
     if (shouldPrintYoloNotice(lastChoices, yoloPinned, choices.yolo)) {
       writeErr(
         `
-  ${color10.yellow("YOLO is on")}: non-denied tool calls, including shell and file writes, run without confirmation.
-  ${color10.dim("Explicit deny rules still apply. Use")} --no-yolo ${color10.dim("or")} /yolo off ${color10.dim("to require prompts.")}
+  ${color11.yellow("YOLO is on")}: non-denied tool calls, including shell and file writes, run without confirmation.
+  ${color11.dim("Explicit deny rules still apply. Use")} --no-yolo ${color11.dim("or")} /yolo off ${color11.dim("to require prompts.")}
 
 `
       );
@@ -3063,64 +3251,13 @@ To start the app with no model connected, pass --provider ${SETUP_PROVIDER_ID} -
     needsSetup: !noInteractiveMode ? false : !config.provider || !config.model
   };
 }
-async function checkGitInCwd(opts) {
-  const { cwd, renderer, reader } = opts;
-  const cwdGit = path7.join(cwd, ".git");
-  let hasCwdGit = false;
-  try {
-    await fs6.access(cwdGit);
-    hasCwdGit = true;
-  } catch {
-  }
-  if (!hasCwdGit) {
-    renderer.write(
-      `
-  ${color10.amber("\u25CB")} This folder has no ${color10.bold(".git")} repository.
-`
-    );
-    const answer = (await reader.readLine(`  ${color10.amber("?")} Initialize one here? ${color10.dim("[y/N]")} `)).trim().toLowerCase();
-    if (answer === "y" || answer === "yes") {
-      try {
-        const { spawn: spawn2 } = await import("node:child_process");
-        await new Promise((resolve2, reject) => {
-          const child = spawn2("git", ["init"], {
-            cwd,
-            signal: AbortSignal.timeout(1e4),
-            windowsHide: true
-          });
-          child.on("error", reject);
-          child.on(
-            "close",
-            (code) => code === 0 ? resolve2() : reject(new Error(`git init failed with ${code}`))
-          );
-        });
-        renderer.write(`  ${color10.green("\u2713")} Git repository initialized
-`);
-        hasCwdGit = true;
-      } catch (err) {
-        renderer.writeError(`git init failed: ${toErrorMessage4(err)}
-`);
-      }
-    }
-  }
-  const parentDir = path7.dirname(cwd);
-  if (parentDir !== cwd) {
-    try {
-      await fs6.access(path7.join(parentDir, ".git"));
-      renderer.write(
-        `  ${color10.dim("\u2139")} A ${color10.bold(".git")} repo exists in the parent directory: ${color10.dim(parentDir)}
-`
-      );
-    } catch {
-    }
-  }
-}
 
 // src/cli-context.ts
 async function initializeCli(argv) {
   applyNodeEnvDefault();
   applySessionShellDefault();
   const earlyFlags = parseArgs(argv).flags;
+  applyAsciiMode(earlyFlags);
   const earlyExit = await handleHelpVersionShortCircuit(argv);
   if (earlyExit !== null) return earlyExit;
   const desktopExit = await handleDesktopShortCircuit(earlyFlags, argv);
@@ -3253,33 +3390,7 @@ async function initializeCli(argv) {
   }
   const { config, vault, wpaths, cwd, modelsRegistry, renderer, reader, logger } = ctx;
   const { updateInfo: refreshedUpdateInfo } = await runPreflight(config, ctx.updateInfo);
-  const profileConfigPath = activeProfileConfigPath(wpaths, config);
-  setOAuthTokenPersister((providerId, creds) => {
-    void mutateConfigProviders(profileConfigPath, vault, (all) => {
-      const p = all[providerId];
-      if (!p) return;
-      const keys = normalizeKeys(p);
-      const active = p.activeKey ? keys.find((k) => k.label === p.activeKey) : keys[0];
-      if (!active) return;
-      active.apiKey = creds.accessToken;
-      active.refreshToken = creds.refreshToken;
-      active.expiresAt = new Date(creds.expiresAt).toISOString();
-      if (creds.accountId) active.accountId = creds.accountId;
-      writeKeysBack(p, keys);
-    }).catch(() => {
-    });
-  });
-  setProviderModelPersister((providerId, models) => {
-    if (models.length === 0) return;
-    void mutateConfigProviders(profileConfigPath, vault, (all) => {
-      const p = all[providerId];
-      if (!p) return;
-      const live = models.map((m) => m.id);
-      if (p.models?.length === live.length && p.models.every((id, i) => id === live[i])) return;
-      p.models = live;
-    }).catch(() => {
-    });
-  });
+  installProviderPersisters({ config, paths: wpaths, vault, logger });
   const { events, container, approvalMirror } = wireContainer({
     config,
     wpaths,
@@ -3287,7 +3398,8 @@ async function initializeCli(argv) {
     logger,
     reader,
     renderer,
-    modelsRegistry
+    modelsRegistry,
+    launchAllowedTools: resolveLaunchAllowedTools(ctx.flags)
   });
   const configStore = container.resolve(TOKENS3.ConfigStore);
   return {
@@ -3303,4 +3415,4 @@ async function initializeCli(argv) {
 export {
   initializeCli
 };
-//# sourceMappingURL=cli-context-33F74CSZ.js.map
+//# sourceMappingURL=cli-context-UVGAN3NO.js.map