@wrongstack/cli 1.0.24 → 1.0.27

package/dist/{cli-context-34Q5IJRA.js → cli-context-C7RBSWHF.js}

@@ -1,35 +1,43 @@
 import {
+  activateRestrictedMode,
+  announceSafeMode,
   applySimpleUiFullAutoProfile,
   detectProjectFacts,
   isSimpleUiFullAuto,
-  makePromptDelegate,
+  makeStdinPromptDelegate,
   renderAgentsTemplate,
-  renderDiff
-} from "./chunk-U46QR4WR.js";
+  renderDiff,
+  resolveLaunchAllowedTools,
+  resolveToolRestriction
+} from "./chunk-TI7KLHYX.js";
+import {
+  parseOutputFormat,
+  resolveJsonSchemaFlag
+} from "./chunk-LKPEBZBE.js";
 import {
   theme as theme2
 } from "./chunk-QD544J2B.js";
-import {
-  fmtTok,
-  patchConfig
-} from "./chunk-EWKESL4L.js";
 import {
   parseWebuiSessionChildOptions,
   writeWebuiSessionChildError
 } from "./chunk-ZMX5HRLI.js";
+import {
+  fmtTok,
+  patchConfig
+} from "./chunk-EWKESL4L.js";
 import {
   subcommands
-} from "./chunk-424ORSE7.js";
+} from "./chunk-N57IU5FG.js";
 import {
   renderDeepHelp,
   renderFocusedHelp
-} from "./chunk-SKPDE62W.js";
+} from "./chunk-EPR42SWM.js";
 import {
   handleHelpVersionShortCircuit
-} from "./chunk-PGKJ2OQP.js";
+} from "./chunk-HFZH2XJN.js";
 import {
   DEFAULT_PORT
-} from "./chunk-DRM7PSW7.js";
+} from "./chunk-ENRYW73H.js";
 import "./chunk-HXJYHAR4.js";
 import {
   resolveHqPasswordInput
@@ -38,20 +46,34 @@ import {
   normalizeHqPublicOrigin
 } from "./chunk-5EA6OTLJ.js";
 import {
-  parseHqIpAllowlist
-} from "./chunk-Q7E3BPDU.js";
+  resolveLaunchMcpServers
+} from "./chunk-HLSHFXTO.js";
 import {
   installProviderPersisters
-} from "./chunk-3OCUS3VN.js";
+} from "./chunk-LDCGZJTC.js";
+import {
+  parseHqIpAllowlist
+} from "./chunk-Q7E3BPDU.js";
 import {
   discoverAndMergeProviders
 } from "./chunk-D5GB5MHA.js";
+import {
+  runUpdateCommand
+} from "./chunk-KOEO4CJG.js";
+import "./chunk-U3SS4NRH.js";
 import {
   applyNodeEnvDefault,
   applySessionShellDefault,
   runPreflight
-} from "./chunk-QBBF7GIK.js";
-import "./chunk-2BKFWIER.js";
+} from "./chunk-LBPLTTZ6.js";
+import "./chunk-RZ4ZDRYA.js";
+import {
+  applyAsciiMode
+} from "./chunk-PZQBGUVZ.js";
+import "./chunk-5JYDKG5B.js";
+import {
+  CLI_VERSION
+} from "./chunk-F5DCFAKI.js";
 import {
   addFromCatalog,
   boxBottom,
@@ -63,31 +85,23 @@ import {
   runPicker,
   saveToGlobalConfig,
   theme
-} from "./chunk-LFMVHT3R.js";
+} from "./chunk-2ERX3RPN.js";
 import "./chunk-YTEOAWOJ.js";
 import {
   isKeylessLocalProvider,
   visibleModelIds
-} from "./chunk-3VXYY5JC.js";
+} from "./chunk-5UZBUV2H.js";
+import {
+  resolveActiveApiKey
+} from "./chunk-LUMETJFO.js";
+import "./chunk-DAKVBMD4.js";
 import {
   activeProfileConfigPath
 } from "./chunk-YMXXOOFN.js";
 import "./chunk-WSTVGC2C.js";
 import {
   parseArgs
-} from "./chunk-MHEBWVXL.js";
-import "./chunk-DAKVBMD4.js";
-import {
-  resolveActiveApiKey
-} from "./chunk-LUMETJFO.js";
-import {
-  runUpdateCommand
-} from "./chunk-QFPQXKCG.js";
-import "./chunk-U3SS4NRH.js";
-import "./chunk-ZZRSG7VK.js";
-import {
-  CLI_VERSION
-} from "./chunk-YBUCXXYZ.js";
+} from "./chunk-Q4INH2DG.js";
 
 // src/cli-context.ts
 import { TOKENS as TOKENS3 } from "@wrongstack/core/kernel";
@@ -192,12 +206,13 @@ function wireContainer(deps) {
     events,
     permission: {
       yolo: deps.config.yolo,
+      launchAllowedTools: deps.launchAllowedTools,
       // Wrapped so the REPL's terminal prompt also appears on the HQ
       // dashboard and can be answered from there. The wrapper is a no-op
       // until `approvalMirror.current` is populated (HQ telemetry boot), and
       // the terminal prompt itself behaves exactly as it always has.
       promptDelegate: makeMirroredPromptDelegate({
-        inner: makePromptDelegate(deps.reader),
+        inner: makeStdinPromptDelegate(deps.reader),
         getRegistry: () => approvalMirror.current,
         getSessionId: () => approvalMirror.sessionId?.()
       })
@@ -475,7 +490,7 @@ async function promptModeArrow(deps) {
   const { renderer } = deps;
   const stdin = process.stdin;
   const out = (s) => renderer.write(s);
-  return await new Promise((resolve2) => {
+  return await new Promise((resolve3) => {
     let index = 0;
     let drawn = 0;
     let remaining = Math.round(MENU_TIMEOUT_MS / 1e3);
@@ -530,7 +545,7 @@ async function promptModeArrow(deps) {
       out("\x1B[0J");
       out(finalLine);
       out("\x1B[?25h");
-      resolve2(result);
+      resolve3(result);
     };
     const pick = () => {
       const opt = MODE_OPTIONS[index];
@@ -589,7 +604,7 @@ async function promptModeArrow(deps) {
       setRawMode(stdin, true);
       stdin.resume();
     } catch {
-      resolve2(null);
+      resolve3(null);
       return;
     }
     out("\x1B[?25l");
@@ -854,7 +869,7 @@ async function launchDesktop(args) {
       );
       return 1;
     }
-  return await new Promise((resolve2) => {
+  return await new Promise((resolve3) => {
     const env = { ...process.env };
     if (native) delete env["ELECTRON_RUN_AS_NODE"];
     const child = spawn(executable, launchArgs, {
@@ -867,11 +882,11 @@ async function launchDesktop(args) {
         `${color2.red("\u2717 Failed to start WrongStack Desktop:")} ${err.message}
 `
       );
-      resolve2(1);
+      resolve3(1);
     });
     child.once("exit", (code, signal) => {
-      if (typeof code === "number") resolve2(code);
-      else resolve2(signal ? 1 : 0);
+      if (typeof code === "number") resolve3(code);
+      else resolve3(signal ? 1 : 0);
     });
   });
 }
@@ -896,24 +911,24 @@ async function isHqAlreadyRunning(dataDir) {
   return null;
 }
 async function isPortInUse(host, port) {
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     const server = net.createServer();
     server.once("error", (err) => {
       if (err.code === "EADDRINUSE") {
-        resolve2(true);
+        resolve3(true);
       } else {
-        resolve2(false);
+        resolve3(false);
       }
     });
     server.once("listening", () => {
-      server.close(() => resolve2(false));
+      server.close(() => resolve3(false));
     });
     server.listen(port, host);
   });
 }
 async function handleHqShortCircuit(flags) {
   if (flags["hq"] !== true) return null;
-  const { startHqServer } = await import("./hq-server-PC7GZMPT.js");
+  const { startHqServer } = await import("./hq-server-UIB24LU6.js");
   const tunnelRequested = flags["tunnel"] === true;
   const rawPublicUrl = typeof flags["hq-public-url"] === "string" ? flags["hq-public-url"] : process.env.WRONGSTACK_HQ_PUBLIC_URL;
   let publicOrigin;
@@ -1127,7 +1142,7 @@ ${color3.green("Cloudflare Quick Tunnel ready:")} ${browserUrl}
     } catch {
     }
   }
-  await new Promise((resolve2) => {
+  await new Promise((resolve3) => {
     const shutdown = async () => {
       const results = await Promise.allSettled([
         ...tunnel ? [tunnel.close()] : [],
@@ -1146,7 +1161,7 @@ ${color3.green("Cloudflare Quick Tunnel ready:")} ${browserUrl}
           })
         );
       }
-      resolve2();
+      resolve3();
     };
     process.on("SIGINT", shutdown);
     process.on("SIGTERM", shutdown);
@@ -1155,26 +1170,195 @@ ${color3.green("Cloudflare Quick Tunnel ready:")} ${browserUrl}
 }
 
 // src/boot.ts
-import * as fs6 from "node:fs/promises";
-import { createRequire as createRequire4 } from "node:module";
 import * as os from "node:os";
-import * as path7 from "node:path";
+import * as path9 from "node:path";
+import { toErrorMessage as toErrorMessage5 } from "@wrongstack/core/utils";
+
+// src/boot-provider-selection.ts
+import * as fs2 from "node:fs/promises";
+import { createRequire as createRequire4 } from "node:module";
+import * as path4 from "node:path";
 import { fileURLToPath } from "node:url";
-import { moduleUrlFor, toErrorMessage as toErrorMessage4, wrongstackPackageJsonPath as wrongstackPackageJsonPath3 } from "@wrongstack/core/utils";
+import {
+  color as color4,
+  moduleUrlFor,
+  toErrorMessage,
+  wrongstackPackageJsonPath as wrongstackPackageJsonPath3
+} from "@wrongstack/core/utils";
+import { isSetupProvider } from "@wrongstack/providers";
+function resolveBundledOverlayFile() {
+  try {
+    return fileURLToPath(
+      new URL("../data/providers.json", moduleUrlFor(import.meta.url, "@wrongstack/cli"))
+    );
+  } catch {
+    return void 0;
+  }
+}
+async function validateSavedProviderModel(config, modelsRegistry) {
+  const providerId = config.provider;
+  const modelId = config.model;
+  if (!providerId || !modelId) return { ok: false, reason: "missing provider/model" };
+  if (isSetupProvider(providerId)) return { ok: true };
+  const saved = config.providers?.[providerId];
+  const lookupId = saved?.type && saved.type !== providerId ? saved.type : providerId;
+  const catalogProvider = await modelsRegistry.getProvider(lookupId).catch(() => void 0);
+  if (!catalogProvider && !saved?.family)
+    return { ok: false, reason: `provider "${providerId}" is no longer available` };
+  const hasCredential = (catalogProvider?.envVars ?? saved?.envVars ?? []).some(
+    (envVar) => Boolean(process.env[envVar])
+  ) || saved !== void 0 && resolveActiveApiKey(saved) !== void 0 || isKeylessLocalProvider({
+    apiBase: saved?.baseUrl ?? catalogProvider?.apiBase,
+    envVars: saved?.envVars ?? catalogProvider?.envVars
+  });
+  if (!hasCredential) return { ok: false, reason: `provider "${providerId}" has no usable key` };
+  const visible = visibleModelIds(
+    providerId,
+    config,
+    (catalogProvider?.models ?? []).map((m) => m.id),
+    saved
+  );
+  if (visible.length > 0 && !visible.includes(modelId)) {
+    return {
+      ok: false,
+      reason: `model "${modelId}" is no longer available for provider "${providerId}"`
+    };
+  }
+  return { ok: true };
+}
+async function autoSelectSavedProvider(config, modelsRegistry) {
+  const providers = config.providers ?? {};
+  const entries = config.provider && providers[config.provider] ? [[config.provider, providers[config.provider]]] : Object.entries(providers);
+  for (const [id, cfg] of entries) {
+    if (!cfg) continue;
+    let model = cfg.models?.[0];
+    if (!model) {
+      const catalogId = cfg.type && cfg.type !== id ? cfg.type : id;
+      const catalog = await modelsRegistry.getProvider(catalogId).catch(() => void 0);
+      model = catalog?.models?.[0]?.id;
+    }
+    if (model) return { provider: id, model };
+  }
+  return void 0;
+}
+function resolveBundledSkillsDir2() {
+  try {
+    const req = createRequire4(import.meta.url);
+    const corePkg = wrongstackPackageJsonPath3("@wrongstack/core", (id) => req.resolve(id));
+    return path4.join(path4.dirname(corePkg), "skills");
+  } catch {
+    return void 0;
+  }
+}
+function resolveBundledPromptsDir2() {
+  try {
+    const req = createRequire4(import.meta.url);
+    const corePkg = wrongstackPackageJsonPath3("@wrongstack/core", (id) => req.resolve(id));
+    return path4.join(path4.dirname(corePkg), "data", "prompts");
+  } catch {
+    return void 0;
+  }
+}
+function isHomeDirectory(cwd, userHome) {
+  if (!cwd || !userHome) return false;
+  return path4.resolve(cwd) === path4.resolve(userHome);
+}
+function shouldPrintYoloNotice(lastChoices, yoloPinned, yolo) {
+  return !lastChoices && yoloPinned === void 0 && yolo;
+}
+async function checkGitInCwd(opts) {
+  const { cwd, renderer, reader } = opts;
+  const cwdGit = path4.join(cwd, ".git");
+  let hasCwdGit = false;
+  try {
+    await fs2.access(cwdGit);
+    hasCwdGit = true;
+  } catch {
+  }
+  if (!hasCwdGit) {
+    renderer.write(
+      `
+  ${color4.amber("\u25CB")} This folder has no ${color4.bold(".git")} repository.
+`
+    );
+    const answer = (await reader.readLine(`  ${color4.amber("?")} Initialize one here? ${color4.dim("[y/N]")} `)).trim().toLowerCase();
+    if (answer === "y" || answer === "yes") {
+      try {
+        const { spawn: spawn2 } = await import("node:child_process");
+        await new Promise((resolve3, reject) => {
+          const child = spawn2("git", ["init"], {
+            cwd,
+            signal: AbortSignal.timeout(1e4),
+            windowsHide: true
+          });
+          child.on("error", reject);
+          child.on(
+            "close",
+            (code) => code === 0 ? resolve3() : reject(new Error(`git init failed with ${code}`))
+          );
+        });
+        renderer.write(`  ${color4.green("\u2713")} Git repository initialized
+`);
+        hasCwdGit = true;
+      } catch (err) {
+        renderer.writeError(`git init failed: ${toErrorMessage(err)}
+`);
+      }
+    }
+  }
+  const parentDir = path4.dirname(cwd);
+  if (parentDir !== cwd) {
+    try {
+      await fs2.access(path4.join(parentDir, ".git"));
+      renderer.write(
+        `  ${color4.dim("\u2139")} A ${color4.bold(".git")} repo exists in the parent directory: ${color4.dim(parentDir)}
+`
+      );
+    } catch {
+    }
+  }
+}
+
+// src/boot.ts
 import { DefaultLogger } from "@wrongstack/core/infrastructure";
 import { TOKENS as TOKENS2 } from "@wrongstack/core/kernel";
-import { DefaultModelsRegistry } from "@wrongstack/core/models";
+import { DefaultModelsRegistry, startCatalog } from "@wrongstack/core/models";
 import { ToolRegistry } from "@wrongstack/core/registry";
 import { normalizeTokenSavingTier } from "@wrongstack/core/types";
-import { color as color10, isStdinTTY as isStdinTTY2, writeErr } from "@wrongstack/core/utils";
-import { isSetupProvider, SETUP_MODEL_ID, SETUP_PROVIDER_ID } from "@wrongstack/providers";
+import { color as color11, isStdinTTY as isStdinTTY2, writeErr } from "@wrongstack/core/utils";
+import { isSetupProvider as isSetupProvider2, SETUP_MODEL_ID, SETUP_PROVIDER_ID } from "@wrongstack/providers";
 import { createDefaultContainer as createDefaultContainer2 } from "@wrongstack/runtime";
 import { registerBuiltinToolTier } from "@wrongstack/tools/tool-tier";
 
+// src/boot/append-system-prompt.ts
+import * as fs3 from "node:fs/promises";
+import * as path5 from "node:path";
+async function resolveAppendedSystemPrompt(flags, cwd) {
+  const parts = [];
+  const inline = flags["append-system-prompt"];
+  if (typeof inline === "string" && inline.trim()) parts.push(inline.trim());
+  const file = flags["append-system-prompt-file"];
+  if (file === true) {
+    throw new Error("--append-system-prompt-file needs a path");
+  }
+  if (typeof file === "string" && file.trim()) {
+    const resolved = path5.resolve(cwd, file.trim());
+    let text;
+    try {
+      text = await fs3.readFile(resolved, "utf8");
+    } catch (err) {
+      const reason = err.code ?? String(err);
+      throw new Error(`--append-system-prompt-file: cannot read ${resolved} (${reason})`);
+    }
+    if (text.trim()) parts.push(text.trim());
+  }
+  return parts.length > 0 ? parts.join("\n\n") : void 0;
+}
+
 // src/boot/config-backup-recovery.ts
-import * as fs2 from "node:fs/promises";
-import * as path4 from "node:path";
-import { atomicWrite as atomicWrite2, backupConfigFile, color as color4, toErrorMessage } from "@wrongstack/core/utils";
+import * as fs4 from "node:fs/promises";
+import * as path6 from "node:path";
+import { atomicWrite as atomicWrite2, backupConfigFile, color as color5, toErrorMessage as toErrorMessage2 } from "@wrongstack/core/utils";
 function isRecord(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
@@ -1185,7 +1369,7 @@ function providerIds(value) {
 }
 async function defaultProfileProvidersAreEmpty(profilePath) {
   try {
-    const parsed = JSON.parse(await fs2.readFile(profilePath, "utf8"));
+    const parsed = JSON.parse(await fs4.readFile(profilePath, "utf8"));
     return providerIds(parsed).length === 0;
   } catch {
     return false;
@@ -1208,7 +1392,7 @@ function profileSnapshotTimestamp(fileName, fallback) {
   );
 }
 async function findLatestProviderBackup(globalRoot, profileName = "default") {
-  const directory = path4.join(globalRoot, "config-history");
+  const directory = path6.join(globalRoot, "config-history");
   const escapedProfile = profileName.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
   const filePattern = new RegExp(
     `^profiles-${escapedProfile}-config-\\d{4}-\\d{2}-\\d{2}T\\d{2}-\\d{2}-\\d{2}-\\d{3}\\.json$`,
@@ -1217,7 +1401,7 @@ async function findLatestProviderBackup(globalRoot, profileName = "default") {
   const candidates = [];
   let entries;
   try {
-    entries = await fs2.readdir(directory, { withFileTypes: true });
+    entries = await fs4.readdir(directory, { withFileTypes: true });
   } catch {
     return void 0;
   }
@@ -1225,9 +1409,9 @@ async function findLatestProviderBackup(globalRoot, profileName = "default") {
     if (!entry.isFile() || !filePattern.test(entry.name)) {
       continue;
     }
-    const filePath = path4.join(directory, entry.name);
+    const filePath = path6.join(directory, entry.name);
     try {
-      const stat2 = await fs2.stat(filePath);
+      const stat2 = await fs4.stat(filePath);
       candidates.push({
         filePath,
         fileName: entry.name,
@@ -1239,7 +1423,7 @@ async function findLatestProviderBackup(globalRoot, profileName = "default") {
   candidates.sort((a, b) => b.modifiedAtMs - a.modifiedAtMs);
   for (const candidate of candidates) {
     try {
-      const raw = await fs2.readFile(candidate.filePath, "utf8");
+      const raw = await fs4.readFile(candidate.filePath, "utf8");
       const parsed = JSON.parse(raw);
       const ids = providerIds(parsed);
       if (ids.length === 0) continue;
@@ -1251,7 +1435,7 @@ async function findLatestProviderBackup(globalRoot, profileName = "default") {
 }
 async function restoreDefaultProfileBackup(opts) {
   await backupConfigFile(opts.profilePath, { globalRoot: opts.globalRoot });
-  await fs2.mkdir(path4.dirname(opts.profilePath), { recursive: true });
+  await fs4.mkdir(path6.dirname(opts.profilePath), { recursive: true });
   await atomicWrite2(opts.profilePath, opts.backup.raw, { mode: 384 });
 }
 async function maybeRestoreDefaultProfileFromBackup(opts) {
@@ -1264,12 +1448,12 @@ async function maybeRestoreDefaultProfileFromBackup(opts) {
   const providerSummary = remainder > 0 ? `${shownProviders} +${remainder}` : shownProviders;
   opts.renderer.write(
     `
-  ${color4.amber("\u25CB")} ${color4.bold(profileName)} profile has no saved providers.
-  ${color4.dim("Latest usable backup:")} ${color4.bold(backup.fileName)} ${color4.dim(`(${backup.providerIds.length} provider: ${providerSummary})`)}
+  ${color5.amber("\u25CB")} ${color5.bold(profileName)} profile has no saved providers.
+  ${color5.dim("Latest usable backup:")} ${color5.bold(backup.fileName)} ${color5.dim(`(${backup.providerIds.length} provider: ${providerSummary})`)}
 `
   );
   const answer = (await opts.reader.readLine(
-    `  ${color4.amber("?")} Restore all settings from this backup? ${color4.dim("[Y/n]")} `
+    `  ${color5.amber("?")} Restore all settings from this backup? ${color5.dim("[Y/n]")} `
   )).trim().toLowerCase();
   if (answer === "n" || answer === "no") return false;
   try {
@@ -1279,17 +1463,25 @@ async function maybeRestoreDefaultProfileFromBackup(opts) {
       profilePath: opts.profilePath
     });
     opts.renderer.write(
-      `  ${color4.green("\u2713")} Restored all settings from ${color4.dim(backup.fileName)}
+      `  ${color5.green("\u2713")} Restored all settings from ${color5.dim(backup.fileName)}
 `
     );
     return true;
   } catch (err) {
-    opts.renderer.writeWarning(`Could not restore config backup: ${toErrorMessage(err)}
+    opts.renderer.writeWarning(`Could not restore config backup: ${toErrorMessage2(err)}
 `);
     return false;
   }
 }
 
+// src/boot/goal-tui-default.ts
+function applyGoalTuiDefault(flags, positional) {
+  const prompt = flags["prompt"];
+  if ((typeof flags["goal"] === "string" || typeof flags["ask"] === "string") && positional.length === 0 && !(typeof prompt === "string" && prompt.length > 0)) {
+    flags["tui"] = true;
+  }
+}
+
 // src/boot/system-prompt-menu.ts
 import {
   countSystemPromptTokens,
@@ -1298,11 +1490,11 @@ import {
   SYSTEM_PROMPT_VARIANT_OPTIONS,
   SYSTEM_PROMPT_VARIANTS
 } from "@wrongstack/core/agent";
-import { color as color8 } from "@wrongstack/core/utils";
+import { color as color9 } from "@wrongstack/core/utils";
 
 // src/pre-launch/first-run.ts
 import { hasProviderCredential } from "@wrongstack/core/models";
-import { color as color5, toErrorMessage as toErrorMessage2 } from "@wrongstack/core/utils";
+import { color as color6, toErrorMessage as toErrorMessage3 } from "@wrongstack/core/utils";
 import { PROVIDER_DEFINITIONS } from "@wrongstack/providers/definitions";
 async function hasAnyCredential(config, modelsRegistry, env = process.env) {
   for (const cfg of Object.values(config.providers ?? {})) {
@@ -1328,39 +1520,39 @@ function renderWelcome(renderer) {
   renderer.write(`${boxTop("Welcome to WrongStack")}
 `);
   renderer.write(
-    `${boxRow(color5.dim("No model is connected yet. Pick how you want to connect one:"))}
+    `${boxRow(color6.dim("No model is connected yet. Pick how you want to connect one:"))}
 `
   );
   renderer.write(`${boxDivider()}
 `);
   renderer.write(
     `${boxRow(
-      `${theme.accent("1")}  ${color5.bold("Sign in with a subscription")}  ${color5.dim("ChatGPT \xB7 Claude \xB7 GitHub Copilot")}`
+      `${theme.accent("1")}  ${color6.bold("Sign in with a subscription")}  ${color6.dim("ChatGPT \xB7 Claude \xB7 GitHub Copilot")}`
     )}
 `
   );
   renderer.write(
     `${boxRow(
-      `${theme.accent("2")}  ${color5.bold("Add an API key")}              ${color5.dim("Anthropic \xB7 OpenAI \xB7 Google \xB7 OpenRouter \xB7 \u2026")}`
+      `${theme.accent("2")}  ${color6.bold("Add an API key")}              ${color6.dim("Anthropic \xB7 OpenAI \xB7 Google \xB7 OpenRouter \xB7 \u2026")}`
     )}
 `
   );
   renderer.write(
     `${boxRow(
-      `${theme.accent("3")}  ${color5.bold("Use a local server")}          ${color5.dim("Ollama \xB7 LM Studio \xB7 vLLM \xB7 OmniRoute")}`
+      `${theme.accent("3")}  ${color6.bold("Use a local server")}          ${color6.dim("Ollama \xB7 LM Studio \xB7 vLLM \xB7 OmniRoute")}`
     )}
 `
   );
   renderer.write(
     `${boxRow(
-      `${theme.accent("4")}  ${color5.bold("Continue without a key")}      ${color5.dim("setup mode \u2014 explore the app, no model")}`
+      `${theme.accent("4")}  ${color6.bold("Continue without a key")}      ${color6.dim("setup mode \u2014 explore the app, no model")}`
     )}
 `
   );
   renderer.write(`${boxDivider()}
 `);
   renderer.write(
-    `${boxRow(color5.dim("You can change this any time with /auth inside the app, or `wstack auth`."))}
+    `${boxRow(color6.dim("You can change this any time with /auth inside the app, or `wstack auth`."))}
 `
   );
   renderer.write(`${boxBottom()}
@@ -1379,12 +1571,12 @@ async function runFirstRunSetup(deps) {
     renderWelcome(renderer);
     const answer = (await reader.readLine(
       `
-${color5.amber("?")} Choose ${color5.dim("(1-4)")} ${color5.dim("[q to quit]")}: `
+${color6.amber("?")} Choose ${color6.dim("(1-4)")} ${color6.dim("[q to quit]")}: `
     )).trim().toLowerCase();
     if (!answer || answer === "q" || answer === "quit" || answer === "exit") {
       renderer.write(
         `
-  ${color5.dim("No provider configured. Run")} ${color5.bold("wstack auth")} ${color5.dim("when you are ready.")}
+  ${color6.dim("No provider configured. Run")} ${color6.bold("wstack auth")} ${color6.dim("when you are ready.")}
 
 `
       );
@@ -1401,14 +1593,14 @@ ${color5.amber("?")} Choose ${color5.dim("(1-4)")} ${color5.dim("[q to quit]")}:
     try {
       await flow();
     } catch (err) {
-      renderer.writeWarning(`Setup step did not complete: ${toErrorMessage2(err)}
+      renderer.writeWarning(`Setup step did not complete: ${toErrorMessage3(err)}
 `);
     }
     let updated;
     try {
       updated = await deps.reloadConfig();
     } catch (err) {
-      renderer.writeWarning(`Could not re-read config: ${toErrorMessage2(err)}
+      renderer.writeWarning(`Could not re-read config: ${toErrorMessage3(err)}
 `);
       continue;
     }
@@ -1420,8 +1612,8 @@ ${color5.amber("?")} Choose ${color5.dim("(1-4)")} ${color5.dim("[q to quit]")}:
 }
 
 // src/pre-launch/launch-prompts.ts
-import * as fs3 from "node:fs/promises";
-import { atomicWrite as atomicWrite3, color as color6 } from "@wrongstack/core/utils";
+import * as fs5 from "node:fs/promises";
+import { atomicWrite as atomicWrite3, color as color7 } from "@wrongstack/core/utils";
 var LaunchAbortedError = class extends Error {
   exitCode = 0;
   constructor() {
@@ -1452,19 +1644,19 @@ async function runLaunchPrompts(opts) {
       yolo: yoloPinned ?? lastChoices.yolo,
       autonomy: autonomyPinned ?? lastChoices.autonomy
     };
-    const onOff = (v) => v ? color6.green("on") : color6.dim("off");
+    const onOff = (v) => v ? color7.green("on") : color7.dim("off");
     const modeLabel = effective.mode.toUpperCase();
     renderer.write(
       `
-  ${color6.dim("Last settings:")} ${color6.bold(modeLabel)} \xB7 YOLO ${onOff(effective.yolo)} \xB7 Autonomy ${effective.autonomy === "auto" ? color6.green("auto") : color6.dim("off")}
+  ${color7.dim("Last settings:")} ${color7.bold(modeLabel)} \xB7 YOLO ${onOff(effective.yolo)} \xB7 Autonomy ${effective.autonomy === "auto" ? color7.green("auto") : color7.dim("off")}
 `
     );
     const answer = (await reader.readLine(
-      `  ${color6.amber("?")} Continue with these? ${color6.dim("[Y/n/q]")} ${color6.dim("(auto Y in 5s)")} `,
+      `  ${color7.amber("?")} Continue with these? ${color7.dim("[Y/n/q]")} ${color7.dim("(auto Y in 5s)")} `,
       { timeoutMs: 5e3, defaultAnswer: "y" }
     )).trim().toLowerCase();
     if (answer === "q") {
-      renderer.write(color6.dim("  Goodbye!\n"));
+      renderer.write(color7.dim("  Goodbye!\n"));
       throw new LaunchAbortedError();
     }
     if (answer !== "n" && answer !== "no") {
@@ -1472,7 +1664,7 @@ async function runLaunchPrompts(opts) {
       const badgeStr2 = badges2.length > 0 ? ` (${badges2.join(" \xB7 ")})` : "";
       renderer.write(
         `
-  ${color6.green("\u25B6")} Launching in ${color6.bold(modeLabel)} mode${badgeStr2}
+  ${color7.green("\u25B6")} Launching in ${color7.bold(modeLabel)} mode${badgeStr2}
 
 `
       );
@@ -1485,10 +1677,10 @@ async function runLaunchPrompts(opts) {
   } else {
     const answer = (await reader.readLine(
       `
-  ${color6.amber("?")} Interactive mode: ${color6.bold("T")}UI / ${color6.bold("R")}EPL ${color6.dim("[T/r/q]")} `
+  ${color7.amber("?")} Interactive mode: ${color7.bold("T")}UI / ${color7.bold("R")}EPL ${color7.dim("[T/r/q]")} `
     )).trim().toLowerCase();
     if (answer === "q") {
-      renderer.write(color6.dim("  Goodbye!\n"));
+      renderer.write(color7.dim("  Goodbye!\n"));
       throw new LaunchAbortedError();
     }
     mode = answer === "r" || answer === "repl" ? "repl" : "tui";
@@ -1498,10 +1690,10 @@ async function runLaunchPrompts(opts) {
     yolo = yoloPinned;
   } else {
     const answer = (await reader.readLine(
-      `  ${color6.amber("?")} YOLO mode ${color6.dim("(auto-approve tool calls)")} ${color6.dim("[Y/n/q]")} `
+      `  ${color7.amber("?")} YOLO mode ${color7.dim("(auto-approve tool calls)")} ${color7.dim("[Y/n/q]")} `
     )).trim().toLowerCase();
     if (answer === "q") {
-      renderer.write(color6.dim("  Goodbye!\n"));
+      renderer.write(color7.dim("  Goodbye!\n"));
       throw new LaunchAbortedError();
     }
     yolo = answer !== "n" && answer !== "no";
@@ -1511,10 +1703,10 @@ async function runLaunchPrompts(opts) {
     autonomy = autonomyPinned;
   } else {
     const answer = (await reader.readLine(
-      `  ${color6.amber("?")} Autonomy mode ${color6.dim("(auto-continue \u2014 agent picks next step)")} ${color6.dim("[Y/n/q]")} `
+      `  ${color7.amber("?")} Autonomy mode ${color7.dim("(auto-continue \u2014 agent picks next step)")} ${color7.dim("[Y/n/q]")} `
     )).trim().toLowerCase();
     if (answer === "q") {
-      renderer.write(color6.dim("  Goodbye!\n"));
+      renderer.write(color7.dim("  Goodbye!\n"));
       throw new LaunchAbortedError();
     }
     autonomy = answer !== "n" && answer !== "no" ? "auto" : "off";
@@ -1523,7 +1715,7 @@ async function runLaunchPrompts(opts) {
   const badgeStr = badges.length > 0 ? ` (${badges.join(" \xB7 ")})` : "";
   renderer.write(
     `
-  ${color6.green("\u25B6")} Launching in ${color6.bold(mode.toUpperCase())} mode${badgeStr}
+  ${color7.green("\u25B6")} Launching in ${color7.bold(mode.toUpperCase())} mode${badgeStr}
 
 `
   );
@@ -1531,21 +1723,21 @@ async function runLaunchPrompts(opts) {
 }
 function buildBadges(chosen) {
   const badges = [];
-  if (chosen.yolo) badges.push(color6.yellow("YOLO"));
+  if (chosen.yolo) badges.push(color7.yellow("YOLO"));
   if (chosen.autonomy !== "off")
-    badges.push(color6.magenta(`AUTONOMY:${chosen.autonomy.toUpperCase()}`));
+    badges.push(color7.magenta(`AUTONOMY:${chosen.autonomy.toUpperCase()}`));
   return badges;
 }
 async function persistLaunchChoices(configPath, choices) {
   let fileExists = false;
   try {
-    await fs3.access(configPath);
+    await fs5.access(configPath);
     fileExists = true;
   } catch {
   }
   let existing = {};
   try {
-    const raw = await fs3.readFile(configPath, "utf8");
+    const raw = await fs5.readFile(configPath, "utf8");
     existing = JSON.parse(raw);
   } catch (err) {
     if (fileExists) {
@@ -1565,9 +1757,9 @@ async function persistLaunchChoices(configPath, choices) {
 }
 
 // src/pre-launch/project-check.ts
-import * as fs4 from "node:fs/promises";
-import * as path5 from "node:path";
-import { color as color7, toErrorMessage as toErrorMessage3 } from "@wrongstack/core/utils";
+import * as fs6 from "node:fs/promises";
+import * as path7 from "node:path";
+import { color as color8, toErrorMessage as toErrorMessage4 } from "@wrongstack/core/utils";
 var MANIFESTS = [
   "package.json",
   "pyproject.toml",
@@ -1582,13 +1774,13 @@ var MANIFESTS = [
 ];
 async function detectProjectKind(projectRoot) {
   try {
-    await fs4.access(path5.join(projectRoot, ".wrongstack", "AGENTS.md"));
+    await fs6.access(path7.join(projectRoot, ".wrongstack", "AGENTS.md"));
     return "initialized";
   } catch {
   }
   for (const m of MANIFESTS) {
     try {
-      await fs4.access(path5.join(projectRoot, m));
+      await fs6.access(path7.join(projectRoot, m));
       return "project";
     } catch {
     }
@@ -1596,12 +1788,12 @@ async function detectProjectKind(projectRoot) {
   return "empty";
 }
 async function scaffoldAgentsMd(projectRoot) {
-  const dir = path5.join(projectRoot, ".wrongstack");
-  const file = path5.join(dir, "AGENTS.md");
+  const dir = path7.join(projectRoot, ".wrongstack");
+  const file = path7.join(dir, "AGENTS.md");
   const facts = await detectProjectFacts(projectRoot);
   const body = renderAgentsTemplate(facts);
-  await fs4.mkdir(dir, { recursive: true });
-  await fs4.writeFile(file, body, "utf8");
+  await fs6.mkdir(dir, { recursive: true });
+  await fs6.writeFile(file, body, "utf8");
   return file;
 }
 async function runProjectCheck(opts) {
@@ -1610,7 +1802,7 @@ async function runProjectCheck(opts) {
   if (kind === "initialized") {
     renderer.write(
       `
-  ${color7.green("\u2713")} Project initialized ${color7.dim(`(${path5.join(projectRoot, ".wrongstack", "AGENTS.md")})`)}
+  ${color8.green("\u2713")} Project initialized ${color8.dim(`(${path7.join(projectRoot, ".wrongstack", "AGENTS.md")})`)}
 `
     );
     return true;
@@ -1618,51 +1810,51 @@ async function runProjectCheck(opts) {
   if (kind === "project") {
     renderer.write(
       `
-  ${color7.amber("\u25CF")} Project detected ${color7.dim(`(${projectRoot})`)} but ${color7.bold(".wrongstack/AGENTS.md")} is missing.
+  ${color8.amber("\u25CF")} Project detected ${color8.dim(`(${projectRoot})`)} but ${color8.bold(".wrongstack/AGENTS.md")} is missing.
 `
     );
     const answer2 = (await reader.readLine(
-      `  ${color7.amber("?")} Scaffold ${color7.bold("AGENTS.md")} now? ${color7.dim("[y/N/q]")} `
+      `  ${color8.amber("?")} Scaffold ${color8.bold("AGENTS.md")} now? ${color8.dim("[y/N/q]")} `
     )).trim().toLowerCase();
     if (answer2 === "q") {
-      renderer.write(color7.dim("  Cancelled.\n"));
+      renderer.write(color8.dim("  Cancelled.\n"));
       return false;
     }
     if (answer2 === "y" || answer2 === "yes") {
       try {
         const file = await scaffoldAgentsMd(projectRoot);
-        renderer.write(`  ${color7.green("\u2713")} Wrote ${color7.dim(file)}
+        renderer.write(`  ${color8.green("\u2713")} Wrote ${color8.dim(file)}
 `);
       } catch (err) {
-        renderer.writeError(`Failed to scaffold AGENTS.md: ${toErrorMessage3(err)}`);
+        renderer.writeError(`Failed to scaffold AGENTS.md: ${toErrorMessage4(err)}`);
       }
     }
     return true;
   }
-  const gitDir = path5.join(projectRoot, ".git");
+  const gitDir = path7.join(projectRoot, ".git");
   let hasGit = false;
   try {
-    await fs4.access(gitDir);
+    await fs6.access(gitDir);
     hasGit = true;
   } catch {
   }
   if (!hasGit) {
     renderer.write(
       `
-  ${color7.dim("\u25CB")} ${color7.dim(`No project manifest in ${projectRoot} \u2014 running in a scratch directory.`)}
+  ${color8.dim("\u25CB")} ${color8.dim(`No project manifest in ${projectRoot} \u2014 running in a scratch directory.`)}
 `
     );
     const answer2 = (await reader.readLine(
-      `  ${color7.amber("?")} No git repo found. ${color7.bold("Initialize git?")} ${color7.dim("[y/N/q]")} `
+      `  ${color8.amber("?")} No git repo found. ${color8.bold("Initialize git?")} ${color8.dim("[y/N/q]")} `
     )).trim().toLowerCase();
     if (answer2 === "q") {
-      renderer.write(color7.dim("  Cancelled.\n"));
+      renderer.write(color8.dim("  Cancelled.\n"));
       return false;
     }
     if (answer2 === "y" || answer2 === "yes") {
       try {
         const { spawn: spawn2 } = await import("node:child_process");
-        await new Promise((resolve2, reject) => {
+        await new Promise((resolve3, reject) => {
           const child = spawn2("git", ["init"], {
             cwd,
             signal: AbortSignal.timeout(1e4),
@@ -1671,26 +1863,26 @@ async function runProjectCheck(opts) {
           child.on("error", reject);
           child.on(
             "close",
-            (code) => code === 0 ? resolve2() : reject(new Error(`git init failed with ${code}`))
+            (code) => code === 0 ? resolve3() : reject(new Error(`git init failed with ${code}`))
           );
         });
-        renderer.write(`  ${color7.green("\u2713")} Git repository initialized
+        renderer.write(`  ${color8.green("\u2713")} Git repository initialized
 `);
       } catch (err) {
-        renderer.writeError(`git init failed: ${toErrorMessage3(err)}
+        renderer.writeError(`git init failed: ${toErrorMessage4(err)}
 `);
       }
     }
   } else {
     renderer.write(
       `
-  ${color7.dim("\u25CB")} ${color7.dim(`No project manifest in ${projectRoot} \u2014 running in a scratch directory.`)}
+  ${color8.dim("\u25CB")} ${color8.dim(`No project manifest in ${projectRoot} \u2014 running in a scratch directory.`)}
 `
     );
   }
-  const answer = (await reader.readLine(`  ${color7.amber("?")} Continue anyway? ${color7.dim("[Y/n/q]")} `)).trim().toLowerCase();
+  const answer = (await reader.readLine(`  ${color8.amber("?")} Continue anyway? ${color8.dim("[Y/n/q]")} `)).trim().toLowerCase();
   if (answer === "q" || answer === "n" || answer === "no") {
-    renderer.write(color7.dim("  Cancelled.\n"));
+    renderer.write(color8.dim("  Cancelled.\n"));
     return false;
   }
   return true;
@@ -1725,28 +1917,28 @@ async function runSystemPromptMenu(deps) {
   const defaultVariant = lastVariant ?? "default";
   if (lastVariant) {
     const answer2 = (await reader.readLine(
-      `  ${color8.amber("?")} Continue with ${color8.bold(labelFor(lastVariant))} system prompt ${color8.dim(`(~${fmtTok(tokens[lastVariant])} tokens)`)}? ${color8.dim("[Y/n/q]")} ${color8.dim("(auto Y in 5s)")} `,
+      `  ${color9.amber("?")} Continue with ${color9.bold(labelFor(lastVariant))} system prompt ${color9.dim(`(~${fmtTok(tokens[lastVariant])} tokens)`)}? ${color9.dim("[Y/n/q]")} ${color9.dim("(auto Y in 5s)")} `,
       { timeoutMs: SUMMARY_TIMEOUT_MS2, defaultAnswer: "y" }
     )).trim().toLowerCase();
     if (answer2 === "q" || answer2 === "quit") throw new LaunchAbortedError();
     if (answer2 !== "n" && answer2 !== "no") return lastVariant;
   }
   renderer.write(`
-  ${color8.amber("?")} System prompt:
+  ${color9.amber("?")} System prompt:
 `);
   for (const [index, opt] of SYSTEM_PROMPT_OPTIONS.entries()) {
     const num2 = index + 1;
     const isDefault = opt.variant === defaultVariant;
-    const marker = isDefault ? color8.cyan("\u25CF") : color8.dim("\u25CB");
-    const label = isDefault ? color8.bold(opt.label) : opt.label;
+    const marker = isDefault ? color9.cyan("\u25CF") : color9.dim("\u25CB");
+    const label = isDefault ? color9.bold(opt.label) : opt.label;
     renderer.write(
-      `    ${color8.dim(`${num2}.`)} ${marker} ${label.padEnd(9)} ${color8.dim(`~${fmtTok(tokens[opt.variant])} tokens`)}  ${color8.dim(opt.hint)}
+      `    ${color9.dim(`${num2}.`)} ${marker} ${label.padEnd(9)} ${color9.dim(`~${fmtTok(tokens[opt.variant])} tokens`)}  ${color9.dim(opt.hint)}
 `
     );
   }
   const answer = (await reader.readLine(
     `
-  ${color8.amber("?")} Select system prompt ${color8.dim(`[1-${SYSTEM_PROMPT_OPTIONS.length}, Enter = ${labelFor(defaultVariant)}, q to quit]`)}: `
+  ${color9.amber("?")} Select system prompt ${color9.dim(`[1-${SYSTEM_PROMPT_OPTIONS.length}, Enter = ${labelFor(defaultVariant)}, q to quit]`)}: `
   )).trim().toLowerCase();
   if (answer === "q" || answer === "quit") throw new LaunchAbortedError();
   if (!answer) return defaultVariant;
@@ -1803,8 +1995,8 @@ async function bootConfig(flags) {
 }
 
 // src/input-reader.ts
-import * as fs5 from "node:fs/promises";
-import * as path6 from "node:path";
+import * as fs7 from "node:fs/promises";
+import * as path8 from "node:path";
 import * as readline from "node:readline";
 import {
   resolveWstackPaths,
@@ -1823,7 +2015,7 @@ var ReadlineInputReader = class {
   }
   async loadHistory() {
     try {
-      const raw = await fs5.readFile(this.historyFile, "utf8");
+      const raw = await fs7.readFile(this.historyFile, "utf8");
       this.history = raw.split("\n").filter(Boolean).slice(-1e3);
     } catch {
       this.history = [];
@@ -1831,8 +2023,8 @@ var ReadlineInputReader = class {
   }
   async saveHistory() {
     try {
-      await fs5.mkdir(path6.dirname(this.historyFile), { recursive: true });
-      await fs5.writeFile(this.historyFile, this.history.slice(-1e3).join("\n"));
+      await fs7.mkdir(path8.dirname(this.historyFile), { recursive: true });
+      await fs7.writeFile(this.historyFile, this.history.slice(-1e3).join("\n"));
     } catch {
     }
   }
@@ -1853,25 +2045,25 @@ var ReadlineInputReader = class {
   async readLine(prompt, timeoutOpts) {
     if (this.history.length === 0) await this.loadHistory();
     while (this.pending) {
-      await new Promise((resolve2) => setTimeout(resolve2, 50));
+      await new Promise((resolve3) => setTimeout(resolve3, 50));
     }
     this.pending = true;
     try {
       if (this.rl) {
         const old = this.rl;
         this.rl = void 0;
-        await new Promise((resolve2) => {
+        await new Promise((resolve3) => {
           if (old.closed) {
-            resolve2();
+            resolve3();
           } else {
-            old.once("close", resolve2);
+            old.once("close", resolve3);
             old.close();
           }
         });
       }
       const fresh = this.ensure();
       this.installPromptGuard(fresh);
-      const line = await new Promise((resolve2) => {
+      const line = await new Promise((resolve3) => {
         let settled = false;
         let timeoutHandle;
         const settle = (line2) => {
@@ -1879,7 +2071,7 @@ var ReadlineInputReader = class {
           settled = true;
           if (timeoutHandle) clearTimeout(timeoutHandle);
           setOutputLineGuard(null);
-          resolve2(line2);
+          resolve3(line2);
         };
         if (timeoutOpts) {
           timeoutHandle = setTimeout(() => {
@@ -1946,7 +2138,7 @@ var ReadlineInputReader = class {
     const signal = opts.signal;
     if (signal?.aborted) return "";
     writeOut(prompt);
-    return new Promise((resolve2) => {
+    return new Promise((resolve3) => {
       const stdin = process.stdin;
       const wasRaw = stdin.isRaw;
       const wasPaused = stdin.isPaused();
@@ -1957,7 +2149,7 @@ var ReadlineInputReader = class {
         if (key === "") {
           cleanup();
           writeOut("\n");
-          resolve2("");
+          resolve3("");
           return;
         }
         const opt = options.find(
@@ -1967,17 +2159,17 @@ var ReadlineInputReader = class {
           cleanup();
           writeOut(`${opt.key}
 `);
-          resolve2(opt.value);
+          resolve3(opt.value);
         }
       };
       const onClose = () => {
         cleanup();
-        resolve2("");
+        resolve3("");
       };
       const onAbort = () => {
         cleanup();
         writeOut("\n");
-        resolve2("");
+        resolve3("");
       };
       const cleanup = () => {
         stdin.off("data", onData);
@@ -2011,7 +2203,7 @@ var ReadlineInputReader = class {
     this.rl?.close();
     this.rl = void 0;
     writeOut(prompt);
-    return new Promise((resolve2) => {
+    return new Promise((resolve3) => {
       let buf = "";
       const wasRaw = stdin.isRaw;
       const cleanup = () => {
@@ -2034,19 +2226,36 @@ var ReadlineInputReader = class {
       const eraseAll = () => {
         for (let i = 0; i < buf.length; i++) eraseChar();
       };
+      let escState = 0;
       const onData = (chunk) => {
         for (const ch of chunk) {
+          if (escState === 1) {
+            escState = ch === "[" ? 2 : ch === "O" ? 3 : 0;
+            continue;
+          }
+          if (escState === 2) {
+            if (ch >= "@" && ch <= "~") escState = 0;
+            continue;
+          }
+          if (escState === 3) {
+            escState = 0;
+            continue;
+          }
+          if (ch === "\x1B") {
+            escState = 1;
+            continue;
+          }
           if (ch === "\r" || ch === "\n") {
             cleanup();
             writeOut(`  ${dim(`[${buf.length} chars]`)}
 `);
-            resolve2(buf);
+            resolve3(buf);
             return;
           }
           if (ch === "") {
             cleanup();
             writeOut("\n");
-            resolve2("");
+            resolve3("");
             return;
           }
           if (ch === "") {
@@ -2072,6 +2281,7 @@ var ReadlineInputReader = class {
           buf += ch;
           writeOut("\u2022");
         }
+        if (escState === 1) escState = 0;
       };
       stdin.on("data", onData);
     });
@@ -2089,7 +2299,7 @@ function dim(s) {
 }
 
 // src/renderer.ts
-import { color as color9 } from "@wrongstack/core/utils";
+import { color as color10 } from "@wrongstack/core/utils";
 var TerminalRenderer = class _TerminalRenderer {
   out;
   err;
@@ -2202,7 +2412,7 @@ var TerminalRenderer = class _TerminalRenderer {
     if (!this.lineStart) this.out.write("\n");
     const arrow = theme2.primary("\u2192");
     const display = formatInputSummary(input);
-    this.out.write(`${arrow} ${theme2.bold(name)}${display ? color9.dim(` ${display}`) : ""}
+    this.out.write(`${arrow} ${theme2.bold(name)}${display ? color10.dim(` ${display}`) : ""}
 `);
     this.lineStart = true;
   }
@@ -2219,7 +2429,7 @@ var TerminalRenderer = class _TerminalRenderer {
     if (isError) {
       const firstLine = txt.split("\n")[0] ?? "";
       const truncated = firstLine.length > 200 ? `${firstLine.slice(0, 197)}\u2026` : firstLine;
-      this.out.write(`  ${prefix} ${color9.dim(truncated)}
+      this.out.write(`  ${prefix} ${color10.dim(truncated)}
 `);
       this.lineStart = true;
       return;
@@ -2227,7 +2437,7 @@ var TerminalRenderer = class _TerminalRenderer {
     const isEditLike = name === "edit" || name === "write";
     const diff = extractDiff(content);
     if (isEditLike && diff) {
-      this.out.write(`  ${prefix} ${color9.dim(summarize(content, name))}
+      this.out.write(`  ${prefix} ${color10.dim(summarize(content, name))}
 `);
       const rendered = renderDiff(diff).split("\n").map((l) => `      ${l}`).join("\n");
       this.out.write(`${rendered}
@@ -2238,7 +2448,7 @@ var TerminalRenderer = class _TerminalRenderer {
     const summary = summarize(content, name);
     const isReadLike = name === "read" || name === "grep" || name === "glob" || name === "bash" || name === "exec";
     if (renderMode === "simple") {
-      this.out.write(`  ${prefix} ${color9.dim(summary || compactSingleLine(bodyText))}
+      this.out.write(`  ${prefix} ${color10.dim(summary || compactSingleLine(bodyText))}
 `);
       this.lineStart = true;
       return;
@@ -2247,16 +2457,16 @@ var TerminalRenderer = class _TerminalRenderer {
     const lines = bodyText.split("\n");
     const head = lines.slice(0, previewLines).map((l) => l.replace(/\s+$/, ""));
     const moreCount = Math.max(0, lines.length - head.length);
-    this.out.write(`  ${prefix} ${color9.dim(summary)}
+    this.out.write(`  ${prefix} ${color10.dim(summary)}
 `);
     for (const l of head) {
       const capped = l.length > 200 ? `${l.slice(0, 197)}\u2026` : l;
-      this.out.write(`      ${color9.dim(capped)}
+      this.out.write(`      ${color10.dim(capped)}
 `);
     }
     if (moreCount > 0) {
       this.out.write(
-        `      ${color9.dim(`+${moreCount} more line${moreCount === 1 ? "" : "s"}`)}
+        `      ${color10.dim(`+${moreCount} more line${moreCount === 1 ? "" : "s"}`)}
 `
       );
     }
@@ -2395,7 +2605,7 @@ function renderMarkdown(s) {
     return theme2.primary(theme2.bold(`${hashes} ${text}`));
   });
   out = out.replace(/```([a-zA-Z0-9_+-]*)\n([\s\S]*?)```/g, (_m, _lang, code) => {
-    return color9.gray(`
+    return color10.gray(`
 \u250C\u2500
 ${code.replace(/^/gm, "\u2502 ")}\u2514\u2500`);
   });
@@ -2403,7 +2613,7 @@ ${code.replace(/^/gm, "\u2502 ")}\u2514\u2500`);
   out = out.replace(/\*\*([^*]+)\*\*/g, (_m, text) => theme2.bold(text));
   out = out.replace(
     /(^|[^*])\*([^*\n]+)\*([^*]|$)/g,
-    (_m, l, t, r) => `${l}${color9.italic(t)}${r}`
+    (_m, l, t, r) => `${l}${color10.italic(t)}${r}`
   );
   return out;
 }
@@ -2496,14 +2706,14 @@ function summarize(value, name) {
   if (typeof v === "object" && v !== null) {
     const o = v;
     if (name === "edit") {
-      const path8 = typeof o["path"] === "string" ? o["path"] : "";
+      const path10 = typeof o["path"] === "string" ? o["path"] : "";
       const reps = typeof o["replacements"] === "number" ? o["replacements"] : 0;
-      return `${path8}  ${reps} replacement${reps === 1 ? "" : "s"}`.trim();
+      return `${path10}  ${reps} replacement${reps === 1 ? "" : "s"}`.trim();
     }
     if (name === "write") {
-      const path8 = typeof o["path"] === "string" ? o["path"] : "";
+      const path10 = typeof o["path"] === "string" ? o["path"] : "";
       const bytes = typeof o["bytes"] === "number" ? o["bytes"] : void 0;
-      return bytes !== void 0 ? `${path8}  ${bytes}B` : path8;
+      return bytes !== void 0 ? `${path10}  ${bytes}B` : path10;
     }
     if (name === "read") {
       return summarizeRead(o);
@@ -2521,13 +2731,13 @@ function summarize(value, name) {
   return "";
 }
 function summarizeRead(o) {
-  const path8 = typeof o["path"] === "string" ? o["path"] : "";
+  const path10 = typeof o["path"] === "string" ? o["path"] : "";
   const total = typeof o["total_lines"] === "number" ? o["total_lines"] : void 0;
   const truncated = o["truncated"] === true;
   const cached = o["cached"] === true;
   const note = typeof o["note"] === "string" ? o["note"] : void 0;
   const parts = [];
-  if (path8) parts.push(path8);
+  if (path10) parts.push(path10);
   if (total !== void 0) parts.push(`${total} line${total === 1 ? "" : "s"}`);
   const flags = [];
   if (truncated) flags.push("truncated");
@@ -2575,86 +2785,6 @@ function compactSingleLine(text) {
 
 // src/boot.ts
 var GITHUB_PROVIDERS_OVERLAY_URL = "https://raw.githubusercontent.com/WrongStack/WrongStack/main/packages/cli/data/providers.json";
-function resolveBundledOverlayFile() {
-  try {
-    return fileURLToPath(
-      new URL("../data/providers.json", moduleUrlFor(import.meta.url, "@wrongstack/cli"))
-    );
-  } catch {
-    return void 0;
-  }
-}
-async function validateSavedProviderModel(config, modelsRegistry) {
-  const providerId = config.provider;
-  const modelId = config.model;
-  if (!providerId || !modelId) return { ok: false, reason: "missing provider/model" };
-  if (isSetupProvider(providerId)) return { ok: true };
-  const saved = config.providers?.[providerId];
-  const lookupId = saved?.type && saved.type !== providerId ? saved.type : providerId;
-  const catalogProvider = await modelsRegistry.getProvider(lookupId).catch(() => void 0);
-  if (!catalogProvider && !saved?.family)
-    return { ok: false, reason: `provider "${providerId}" is no longer available` };
-  const hasCredential = (catalogProvider?.envVars ?? saved?.envVars ?? []).some(
-    (envVar) => Boolean(process.env[envVar])
-  ) || saved !== void 0 && resolveActiveApiKey(saved) !== void 0 || isKeylessLocalProvider({
-    apiBase: saved?.baseUrl ?? catalogProvider?.apiBase,
-    envVars: saved?.envVars ?? catalogProvider?.envVars
-  });
-  if (!hasCredential) return { ok: false, reason: `provider "${providerId}" has no usable key` };
-  const visible = visibleModelIds(
-    providerId,
-    config,
-    (catalogProvider?.models ?? []).map((m) => m.id),
-    saved
-  );
-  if (visible.length > 0 && !visible.includes(modelId)) {
-    return {
-      ok: false,
-      reason: `model "${modelId}" is no longer available for provider "${providerId}"`
-    };
-  }
-  return { ok: true };
-}
-async function autoSelectSavedProvider(config, modelsRegistry) {
-  const providers = config.providers ?? {};
-  const entries = config.provider && providers[config.provider] ? [[config.provider, providers[config.provider]]] : Object.entries(providers);
-  for (const [id, cfg] of entries) {
-    if (!cfg) continue;
-    let model = cfg.models?.[0];
-    if (!model) {
-      const catalogId = cfg.type && cfg.type !== id ? cfg.type : id;
-      const catalog = await modelsRegistry.getProvider(catalogId).catch(() => void 0);
-      model = catalog?.models?.[0]?.id;
-    }
-    if (model) return { provider: id, model };
-  }
-  return void 0;
-}
-function resolveBundledSkillsDir2() {
-  try {
-    const req = createRequire4(import.meta.url);
-    const corePkg = wrongstackPackageJsonPath3("@wrongstack/core", (id) => req.resolve(id));
-    return path7.join(path7.dirname(corePkg), "skills");
-  } catch {
-    return void 0;
-  }
-}
-function resolveBundledPromptsDir2() {
-  try {
-    const req = createRequire4(import.meta.url);
-    const corePkg = wrongstackPackageJsonPath3("@wrongstack/core", (id) => req.resolve(id));
-    return path7.join(path7.dirname(corePkg), "data", "prompts");
-  } catch {
-    return void 0;
-  }
-}
-function isHomeDirectory(cwd, userHome) {
-  if (!cwd || !userHome) return false;
-  return path7.resolve(cwd) === path7.resolve(userHome);
-}
-function shouldPrintYoloNotice(lastChoices, yoloPinned, yolo) {
-  return !lastChoices && yoloPinned === void 0 && yolo;
-}
 async function boot(argv) {
   const { flags, positional } = parseArgs(argv);
   if (positional[0] === "update") {
@@ -2666,6 +2796,14 @@ async function boot(argv) {
       flags
     });
   }
+  if (positional[0] === "remote" || typeof flags["remote"] === "string") {
+    const { runRemoteCommand } = await import("./remote-GB5VXCCT.js");
+    return runRemoteCommand(
+      positional[0] === "remote" ? positional.slice(1) : positional,
+      flags,
+      new TerminalRenderer()
+    );
+  }
   if (positional[0] === "resume" && positional[1] && !subcommands["__noop_resume_marker"]) {
     flags["resume"] = positional[1];
     positional.splice(0, 2);
@@ -2674,14 +2812,34 @@ async function boot(argv) {
   try {
     bootResult = await bootConfig(flags);
   } catch (err) {
-    writeErr(`Config error: ${toErrorMessage4(err)}
+    writeErr(`Config error: ${toErrorMessage5(err)}
 `);
     return 2;
   }
   let { paths, config, vault } = bootResult;
+  try {
+    resolveToolRestriction(flags);
+    resolveLaunchAllowedTools(flags);
+    parseOutputFormat(flags["output-format"]);
+    announceSafeMode(flags, writeErr);
+    activateRestrictedMode(flags, writeErr);
+    const launchMcp = await resolveLaunchMcpServers(flags, paths.cwd);
+    if (launchMcp) flags["mcp-config"] = JSON.stringify({ mcpServers: launchMcp });
+    const schema = await resolveJsonSchemaFlag(flags["json-schema"], paths.cwd);
+    if (schema) flags["json-schema"] = JSON.stringify(schema);
+    const appended = await resolveAppendedSystemPrompt(flags, paths.cwd);
+    delete flags["append-system-prompt-file"];
+    if (appended) flags["append-system-prompt"] = appended;
+    else delete flags["append-system-prompt"];
+  } catch (err) {
+    writeErr(`wstack: ${toErrorMessage5(err)}
+`);
+    return 2;
+  }
   let first = positional[0];
   const mayOfferConfigRecovery = isStdinTTY2() && (positional.length === 0 || first === "quick") && typeof flags["prompt"] !== "string" && !flags["webui"] && !flags["no-interactive"] && !flags["skip"];
-  const renderer = new TerminalRenderer();
+  const machineOutput = flags["output-json"] === true || flags["output-format"] === "json" || flags["output-format"] === "stream-json";
+  const renderer = new TerminalRenderer(machineOutput ? { out: process.stderr } : void 0);
   const reader = new ReadlineInputReader({ historyFile: paths.wpaths.historyFile });
   if (mayOfferConfigRecovery) {
     const recoveryProfile = config.activeProfile ?? "default";
@@ -2697,7 +2855,7 @@ async function boot(argv) {
         bootResult = await bootConfig(flags);
         ({ paths, config, vault } = bootResult);
       } catch (err) {
-        writeErr(`Config error after backup restore: ${toErrorMessage4(err)}
+        writeErr(`Config error after backup restore: ${toErrorMessage5(err)}
 `);
         await reader.close();
         return 2;
@@ -2798,8 +2956,8 @@ async function boot(argv) {
   if (isHomeDirectory(cwd, userHome)) {
     writeErr(
       `
-  ${color10.red(color10.bold("\u26A0 This is not a working directory."))}
-  ${color10.red("Please open wstack in a project folder.")}
+  ${color11.red(color11.bold("\u26A0 This is not a working directory."))}
+  ${color11.red("Please open wstack in a project folder.")}
 
 `
     );
@@ -2807,23 +2965,21 @@ async function boot(argv) {
     return 1;
   }
   if (!flags["no-models-refresh"]) {
-    try {
-      await modelsRegistry.refresh();
-      logger.info("models.dev catalog refreshed");
-    } catch (err) {
-      const msg = toErrorMessage4(err);
-      logger.warn(`models.dev refresh failed (${msg}); using cached catalog`);
-    }
+    await startCatalog({
+      registry: modelsRegistry,
+      logger,
+      shortLived: positional.length > 0 || typeof flags["prompt"] === "string"
+    });
   }
   try {
     await discoverAndMergeProviders({
       config,
       registry: modelsRegistry,
-      cacheDir: path7.dirname(wpaths.modelsCache),
+      cacheDir: path9.dirname(wpaths.modelsCache),
       logger
     });
   } catch (err) {
-    logger.debug(`provider auto-discovery skipped: ${toErrorMessage4(err)}`);
+    logger.debug(`provider auto-discovery skipped: ${toErrorMessage5(err)}`);
   }
   const isSingleShot = positional.length > 0 || typeof flags["prompt"] === "string";
   const isInteractiveTTY = isStdinTTY2() && !isSingleShot && !flags["webui"] && !flags["no-interactive"] && !flags["skip"];
@@ -2858,11 +3014,11 @@ async function boot(argv) {
     if (isStdinTTY2() && !noInteractiveMode) {
       let picked;
       let skipPicker = false;
-      if (isSetupProvider(config.provider)) {
+      if (isSetupProvider2(config.provider)) {
         skipPicker = true;
         renderer.write(
           `
-  ${color10.amber("\u25B6")} ${color10.bold("Setup mode")} ${color10.dim("\u2014 no model connected. Run")} ${color10.bold("/auth")} ${color10.dim("to connect one.")}
+  ${color11.amber("\u25B6")} ${color11.bold("Setup mode")} ${color11.dim("\u2014 no model connected. Run")} ${color11.bold("/auth")} ${color11.dim("to connect one.")}
 
 `
         );
@@ -2889,7 +3045,7 @@ async function boot(argv) {
             config = reloaded.config;
             vault = reloaded.vault;
           } catch (err) {
-            writeErr(`Config error after setup: ${toErrorMessage4(err)}
+            writeErr(`Config error after setup: ${toErrorMessage5(err)}
 `);
             await reader.close();
             return 2;
@@ -2902,7 +3058,7 @@ async function boot(argv) {
         const savedStatus = await validateSavedProviderModel(config, modelsRegistry);
         renderer.write(
           `
-  ${color10.dim("Last settings:")} ${color10.bold(savedProvider)} / ${color10.bold(savedModel)}
+  ${color11.dim("Last settings:")} ${color11.bold(savedProvider)} / ${color11.bold(savedModel)}
 `
         );
         if (!savedStatus.ok) {
@@ -2912,11 +3068,11 @@ async function boot(argv) {
           );
         } else {
           const answer = (await reader.readLine(
-            `  ${color10.amber("?")} Continue with these? ${color10.dim("[Y/n/q]")} ${color10.dim("(auto Y in 5s)")} `,
+            `  ${color11.amber("?")} Continue with these? ${color11.dim("[Y/n/q]")} ${color11.dim("(auto Y in 5s)")} `,
             { timeoutMs: 5e3, defaultAnswer: "y" }
           )).trim().toLowerCase();
           if (answer === "q") {
-            renderer.write(color10.dim("  Goodbye!\n"));
+            renderer.write(color11.dim("  Goodbye!\n"));
             await reader.close();
             return 0;
           }
@@ -2924,7 +3080,7 @@ async function boot(argv) {
             skipPicker = true;
             renderer.write(
               `
-  ${color10.green("\u25B6")} ${color10.bold(savedProvider)} / ${color10.bold(savedModel)}
+  ${color11.green("\u25B6")} ${color11.bold(savedProvider)} / ${color11.bold(savedModel)}
 
 `
             );
@@ -2945,9 +3101,9 @@ async function boot(argv) {
         if (!config.provider || !config.model) {
           renderer.write(
             `
-  ${color10.dim("No provider selected.")}
-  ${color10.dim("Run")} ${color10.bold("wstack auth")} ${color10.dim("to add a key or sign in, or start with no model:")}
-  ${color10.bold(`wstack --provider ${SETUP_PROVIDER_ID} --model ${SETUP_MODEL_ID}`)}
+  ${color11.dim("No provider selected.")}
+  ${color11.dim("Run")} ${color11.bold("wstack auth")} ${color11.dim("to add a key or sign in, or start with no model:")}
+  ${color11.bold(`wstack --provider ${SETUP_PROVIDER_ID} --model ${SETUP_MODEL_ID}`)}
 
 `
           );
@@ -3017,7 +3173,7 @@ To start the app with no model connected, pass --provider ${SETUP_PROVIDER_ID} -
     }
     if (promptMenu.persistError) {
       renderer.writeWarning(
-        `Could not save system prompt variant to config: ${toErrorMessage4(promptMenu.persistError)}
+        `Could not save system prompt variant to config: ${toErrorMessage5(promptMenu.persistError)}
 `
       );
     }
@@ -3069,8 +3225,8 @@ To start the app with no model connected, pass --provider ${SETUP_PROVIDER_ID} -
     if (shouldPrintYoloNotice(lastChoices, yoloPinned, choices.yolo)) {
       writeErr(
         `
-  ${color10.yellow("YOLO is on")}: non-denied tool calls, including shell and file writes, run without confirmation.
-  ${color10.dim("Explicit deny rules still apply. Use")} --no-yolo ${color10.dim("or")} /yolo off ${color10.dim("to require prompts.")}
+  ${color11.yellow("YOLO is on")}: non-denied tool calls, including shell and file writes, run without confirmation.
+  ${color11.dim("Explicit deny rules still apply. Use")} --no-yolo ${color11.dim("or")} /yolo off ${color11.dim("to require prompts.")}
 
 `
       );
@@ -3104,6 +3260,7 @@ To start the app with no model connected, pass --provider ${SETUP_PROVIDER_ID} -
     }
     flags["autonomy"] = effectiveChoices.autonomy;
   }
+  applyGoalTuiDefault(flags, positional);
   flags["director"] = true;
   return {
     config,
@@ -3121,64 +3278,13 @@ To start the app with no model connected, pass --provider ${SETUP_PROVIDER_ID} -
     needsSetup: !noInteractiveMode ? false : !config.provider || !config.model
   };
 }
-async function checkGitInCwd(opts) {
-  const { cwd, renderer, reader } = opts;
-  const cwdGit = path7.join(cwd, ".git");
-  let hasCwdGit = false;
-  try {
-    await fs6.access(cwdGit);
-    hasCwdGit = true;
-  } catch {
-  }
-  if (!hasCwdGit) {
-    renderer.write(
-      `
-  ${color10.amber("\u25CB")} This folder has no ${color10.bold(".git")} repository.
-`
-    );
-    const answer = (await reader.readLine(`  ${color10.amber("?")} Initialize one here? ${color10.dim("[y/N]")} `)).trim().toLowerCase();
-    if (answer === "y" || answer === "yes") {
-      try {
-        const { spawn: spawn2 } = await import("node:child_process");
-        await new Promise((resolve2, reject) => {
-          const child = spawn2("git", ["init"], {
-            cwd,
-            signal: AbortSignal.timeout(1e4),
-            windowsHide: true
-          });
-          child.on("error", reject);
-          child.on(
-            "close",
-            (code) => code === 0 ? resolve2() : reject(new Error(`git init failed with ${code}`))
-          );
-        });
-        renderer.write(`  ${color10.green("\u2713")} Git repository initialized
-`);
-        hasCwdGit = true;
-      } catch (err) {
-        renderer.writeError(`git init failed: ${toErrorMessage4(err)}
-`);
-      }
-    }
-  }
-  const parentDir = path7.dirname(cwd);
-  if (parentDir !== cwd) {
-    try {
-      await fs6.access(path7.join(parentDir, ".git"));
-      renderer.write(
-        `  ${color10.dim("\u2139")} A ${color10.bold(".git")} repo exists in the parent directory: ${color10.dim(parentDir)}
-`
-      );
-    } catch {
-    }
-  }
-}
 
 // src/cli-context.ts
 async function initializeCli(argv) {
   applyNodeEnvDefault();
   applySessionShellDefault();
   const earlyFlags = parseArgs(argv).flags;
+  applyAsciiMode(earlyFlags);
   const earlyExit = await handleHelpVersionShortCircuit(argv);
   if (earlyExit !== null) return earlyExit;
   const desktopExit = await handleDesktopShortCircuit(earlyFlags, argv);
@@ -3319,7 +3425,8 @@ async function initializeCli(argv) {
     logger,
     reader,
     renderer,
-    modelsRegistry
+    modelsRegistry,
+    launchAllowedTools: resolveLaunchAllowedTools(ctx.flags)
   });
   const configStore = container.resolve(TOKENS3.ConfigStore);
   return {
@@ -3335,4 +3442,4 @@ async function initializeCli(argv) {
 export {
   initializeCli
 };
-//# sourceMappingURL=cli-context-34Q5IJRA.js.map
+//# sourceMappingURL=cli-context-C7RBSWHF.js.map