@wrongstack/cli 1.0.32 → 1.0.35

package/dist/{chunk-4MDRHMX4.js → chunk-KMU7GF7X.js}

@@ -7,6 +7,7 @@ import {
 import * as fs from "node:fs/promises";
 import * as path from "node:path";
 import { decryptConfigSecretsForRewrite, encryptConfigSecrets } from "@wrongstack/core/security";
+import { listInProjectDeniedPaths } from "@wrongstack/core/storage";
 import { ConfigError, ERROR_CODES, FsError } from "@wrongstack/core/types";
 import { atomicWrite, deepMerge, withFileLock } from "@wrongstack/core/utils";
 function resolvePersistPath(deps) {
@@ -86,31 +87,7 @@ var PROJECT_SAFE_FIELDS = /* @__PURE__ */ new Set([
   "uiLocale",
   "themePreset"
 ]);
-var PROJECT_DENIED_PATHS = [
-  "tools.exec.allow",
-  "tools.exec.danger",
-  "tools.council",
-  "skills.extraDirs",
-  "skills.registryUrl",
-  "skills.suggest",
-  "Sage.storage.directory",
-  "autonomy.yolo",
-  "autonomy.defaultMode",
-  "autonomy.yoloConfirm",
-  "launch.autonomy",
-  "features.allowOutsideProjectRoot",
-  "tools.restrictToProjectRoot",
-  "tools.loopDetection",
-  "tools.maxIterations",
-  "tools.autoExtendLimit",
-  "tools.maxAutoExtensions",
-  "tools.kanbanGovernance",
-  "tools.autoThin",
-  "tools.disabledToolMeta",
-  "tools.wrongProxy",
-  "features.mailboxBridge",
-  "features.pluginsTrust"
-];
+var PROJECT_DENIED_PATHS = listInProjectDeniedPaths();
 function deleteProjectDeniedPath(target, dotted) {
   const parts = dotted.split(".");
   const leaf = parts.pop();
@@ -269,4 +246,4 @@ export {
   persistTelegramConfig,
   deriveFsAccessPair
 };
-//# sourceMappingURL=chunk-4MDRHMX4.js.map
+//# sourceMappingURL=chunk-KMU7GF7X.js.map

package/dist/{chunk-WXJH4F6K.js → chunk-LDV4ERNV.js}

@@ -1,10 +1,10 @@
 import {
   parseArgs
-} from "./chunk-MPQCHBDJ.js";
+} from "./chunk-CJSHS2K7.js";
 import {
   helpCmd,
   versionCmd
-} from "./chunk-WHEYHDIE.js";
+} from "./chunk-AKESWZH5.js";
 
 // src/boot/short-circuit-flags.ts
 async function handleHelpVersionShortCircuit(argv) {
@@ -22,7 +22,7 @@ async function handleHelpVersionShortCircuit(argv) {
   }
   if (earlyFlags["help"] === true) {
     if (positional.length > 0) {
-      const { subcommandNames } = await import("./subcommands-QO7VYTSS.js");
+      const { subcommandNames } = await import("./subcommands-DTKBXLPU.js");
       if (subcommandNames.includes(positional[0])) {
         const first = positional[0];
         const deep = positional[1];
@@ -43,4 +43,4 @@ async function handleHelpVersionShortCircuit(argv) {
 export {
   handleHelpVersionShortCircuit
 };
-//# sourceMappingURL=chunk-WXJH4F6K.js.map
+//# sourceMappingURL=chunk-LDV4ERNV.js.map

package/dist/{chunk-LIZXJHZQ.js → chunk-LDXXMPMS.js}

@@ -3,24 +3,24 @@
 var loaders = {
   automation: async () => (await import("./automation-MCDFCIMV.js")).automationCmd,
   sandbox: async () => (await import("./sandbox-TYGD6FI2.js")).sandboxCmd,
-  acp: async () => (await import("./acp-EDGUWU7N.js")).acpCmd,
+  acp: async () => (await import("./acp-T77EAEDB.js")).acpCmd,
   init: async () => (await import("./init-DRMMFG2G.js")).initCmd,
-  auth: async () => (await import("./auth-SUHKFFO4.js")).authCmd,
-  update: async () => (await import("./update-J5WHAFPE.js")).updateCmd,
+  auth: async () => (await import("./auth-M6LXZTDA.js")).authCmd,
+  update: async () => (await import("./update-6OEPAEUV.js")).updateCmd,
   remote: async () => (await import("./remote-C74BCNND.js")).remoteCmd,
   sessions: async () => (await import("./sessions-config-VE26SB56.js")).sessionsCmd,
   config: async () => (await import("./sessions-config-VE26SB56.js")).configCmd,
-  "config-export": async () => (await import("./config-transfer-UE37X4B5.js")).configExportCmd,
-  "config-import": async () => (await import("./config-transfer-UE37X4B5.js")).configImportCmd,
+  "config-export": async () => (await import("./config-transfer-VOIFY7U4.js")).configExportCmd,
+  "config-import": async () => (await import("./config-transfer-VOIFY7U4.js")).configImportCmd,
   rewind: async () => (await import("./rewind-7AULJS7F.js")).rewindCmd,
   replay: async () => (await import("./replay-JJ2NOWD6.js")).replayCmd,
   audit: async () => (await import("./audit-KCBTHUQI.js")).auditCmd,
   tools: async () => (await import("./tools-skills-33AI6K6S.js")).toolsCmd,
   skills: async () => (await import("./tools-skills-33AI6K6S.js")).skillsCmd,
-  "skill-suggest": async () => (await import("./skill-suggest-L2EVWB6R.js")).skillSuggestCmd,
+  "skill-suggest": async () => (await import("./skill-suggest-THANK3LV.js")).skillSuggestCmd,
   typesafe: async () => (await import("./typesafe-NHC322W5.js")).typesafeCmd,
-  providers: async () => (await import("./providers-models-W57I3QOA.js")).providersCmd,
-  models: async () => (await import("./providers-models-W57I3QOA.js")).modelsCmd,
+  providers: async () => (await import("./providers-models-37DUV2GW.js")).providersCmd,
+  models: async () => (await import("./providers-models-37DUV2GW.js")).modelsCmd,
   mcp: async () => (await import("./mcp-LBS45HWZ.js")).mcpCmd,
   plugin: async () => (await import("./plugin-usage-3TZGROK7.js")).pluginCmd,
   plugins: async () => (await import("./plugin-usage-3TZGROK7.js")).pluginCmd,
@@ -29,14 +29,14 @@ var loaders = {
   "proxy-status": async () => (await import("./diag-doctor-BIZAFIAT.js")).proxyCmd,
   export: async () => (await import("./export-VVRIOWFV.js")).exportCmd,
   usage: async () => (await import("./plugin-usage-3TZGROK7.js")).usageCmd,
-  version: async () => (await import("./version-help-ATOKGMTK.js")).versionCmd,
-  help: async () => (await import("./version-help-ATOKGMTK.js")).helpCmd,
+  version: async () => (await import("./version-help-JQGRPDJW.js")).versionCmd,
+  help: async () => (await import("./version-help-JQGRPDJW.js")).helpCmd,
   projects: async () => (await import("./projects-T4CZCA25.js")).projectsCmd,
-  modeldiag: async () => (await import("./modeldiag-PQILD7TN.js")).modeldiagCmd,
+  modeldiag: async () => (await import("./modeldiag-NEPTLFZW.js")).modeldiagCmd,
   quick: async () => (await import("./quick-CNB4Z3HS.js")).quickCmd,
   bench: async () => (await import("./bench-MMZHFHDL.js")).benchCmd,
   chronicle: async () => (await import("./chronicle-PBJS7BN6.js")).chronicleCmd,
-  hq: async () => (await import("./hq-KBFDKTDD.js")).hqCmd,
+  hq: async () => (await import("./hq-5OIEKB4V.js")).hqCmd,
   mailbox: async () => (await import("./mailbox-serve-S536N66F.js")).mailboxServeCmd,
   permissions: async () => (await import("./permissions-PL27UHYD.js")).permissionsCmd,
   project: async () => (await import("./project-AOQI5XTK.js")).projectCmd,
@@ -58,4 +58,4 @@ export {
   subcommands,
   subcommandNames
 };
-//# sourceMappingURL=chunk-LIZXJHZQ.js.map
+//# sourceMappingURL=chunk-LDXXMPMS.js.map

package/dist/{chunk-UQUYBDMG.js → chunk-M4G5FO7F.js}

@@ -48,4 +48,4 @@ export {
   extractBehaviorSettings,
   mergeBehaviorSettings
 };
-//# sourceMappingURL=chunk-UQUYBDMG.js.map
+//# sourceMappingURL=chunk-M4G5FO7F.js.map

package/dist/{chunk-CFHWIFXL.js → chunk-PA4VBCXS.js}

@@ -2,7 +2,12 @@
 // src/boot/auto-discover-providers.ts
 import * as fs from "node:fs/promises";
 import * as path from "node:path";
-import { discoverOpenAICompatibleModels, resolveDiscoveryTargets } from "@wrongstack/providers";
+import {
+  discoverOpenAICompatibleModels,
+  discoveryOverlay,
+  pruneDiscoveryCache,
+  resolveDiscoveryTargets
+} from "@wrongstack/providers";
 async function readCache(file) {
   try {
     return JSON.parse(await fs.readFile(file, "utf8"));
@@ -25,12 +30,12 @@ async function discoverAndMergeProviders(opts) {
         baseUrl,
         apiKey,
         modelDiscoveryPath,
-        modelDiscoveryAuthoritative,
         accountCatalog,
         copilotCatalog,
         modelsUrl,
         headers,
-        prepareApiKey
+        prepareApiKey,
+        inheritWireFamily
       } = target;
       let failureReason = "model catalog request failed";
       const provider = await discoverOpenAICompatibleModels(id, {
@@ -42,6 +47,7 @@ async function discoverAndMergeProviders(opts) {
         modelsUrl,
         providerName: id,
         modelDiscoveryPath,
+        inheritWireFamily,
         fetchImpl: opts.fetchImpl,
         prepareApiKey,
         onFailure: (reason) => {
@@ -54,15 +60,10 @@ async function discoverAndMergeProviders(opts) {
         if (accountCatalog) cfg.models = Object.keys(provider.models);
         const fetchedAt = (/* @__PURE__ */ new Date()).toISOString();
         cache[cacheKey] = { fetchedAt, provider };
+        pruneDiscoveryCache(cache, target);
         cacheDirty = true;
-        if (modelDiscoveryAuthoritative) {
-          opts.registry.mergeOverlay(
-            { [id]: provider },
-            { observedAt: fetchedAt, authoritativeProviderIds: [id] }
-          );
-        } else {
-          opts.registry.mergeOverlay({ [id]: provider });
-        }
+        const merge = discoveryOverlay(target, provider, fetchedAt);
+        opts.registry.mergeOverlay(merge.payload, merge.options);
         opts.logger?.info(
           `auto-discovered ${Object.keys(provider.models).length} models for "${id}" from ${baseUrl}`
         );
@@ -74,34 +75,25 @@ async function discoverAndMergeProviders(opts) {
           cache[cacheKey] = cached;
           cacheDirty = true;
         }
+        if (pruneDiscoveryCache(cache, target)) cacheDirty = true;
         if (accountCatalog) cfg.models = Object.keys(cached.provider.models);
-        if (modelDiscoveryAuthoritative) {
-          opts.registry.mergeOverlay(
-            { [id]: cached.provider },
-            { observedAt: cached.fetchedAt, authoritativeProviderIds: [id] }
-          );
-        } else {
-          opts.registry.mergeOverlay({ [id]: cached.provider });
-        }
+        const merge = discoveryOverlay(target, cached.provider, cached.fetchedAt);
+        opts.registry.mergeOverlay(merge.payload, merge.options);
         opts.logger?.warn(
           `auto-discovery for "${id}" failed; using ${Object.keys(cached.provider.models).length} cached models from ${cached.fetchedAt} (${failureReason})`
         );
       } else {
         if (accountCatalog) {
           cfg.models = [];
-          opts.registry.mergeOverlay(
-            {
-              [id]: {
-                id,
-                name: id,
-                npm: "@ai-sdk/openai-compatible",
-                api: baseUrl,
-                env: [],
-                models: {}
-              }
-            },
-            { authoritativeProviderIds: [id] }
-          );
+          const merge = discoveryOverlay(target, {
+            id,
+            name: id,
+            npm: "@ai-sdk/openai-compatible",
+            api: baseUrl,
+            env: [],
+            models: {}
+          });
+          opts.registry.mergeOverlay(merge.payload, merge.options);
         }
         opts.logger?.warn(
           `auto-discovery for "${id}" failed and no cache available (${failureReason}; catalog at ${baseUrl})`
@@ -120,4 +112,4 @@ async function discoverAndMergeProviders(opts) {
 export {
   discoverAndMergeProviders
 };
-//# sourceMappingURL=chunk-CFHWIFXL.js.map
+//# sourceMappingURL=chunk-PA4VBCXS.js.map

package/dist/{chunk-5UZBUV2H.js → chunk-RKU66D2O.js}

@@ -89,9 +89,11 @@ function modelDetails(models) {
         // Documented effort vocabulary, mirroring the gate
         // `getActiveModelReasoningEffortLevels` applies for the settings
         // panel: `effortSupported === false` is a documented "no effort
-        // control", and the picker must not offer a strip for it. An absent
-        // field stays absent, which the strip reads as "undocumented →
-        // canonical set".
+        // control", and the picker must not offer a strip for it — carried
+        // explicitly, because an absent `effortLevels` alone would read as
+        // "undocumented → canonical set". An absent field stays absent,
+        // which the strip reads as "undocumented → canonical set".
+        ...model.reasoningConfig?.effortSupported === false ? { effortControlSupported: false } : {},
         ...model.reasoningConfig?.effortSupported && model.reasoningConfig.effortLevels?.length ? { effortLevels: [...model.reasoningConfig.effortLevels] } : {},
         maxContext: model.limit?.context,
         maxOutput: model.limit?.output,
@@ -111,4 +113,4 @@ export {
   hasApiKey,
   buildPickableProviders
 };
-//# sourceMappingURL=chunk-5UZBUV2H.js.map
+//# sourceMappingURL=chunk-RKU66D2O.js.map

package/dist/{chunk-PGNERAZL.js → chunk-RWNI5OWT.js}

@@ -1,6 +1,6 @@
 import {
   buildWin32CmdShimInvocation
-} from "./chunk-U3SS4NRH.js";
+} from "./chunk-BHXAKTBE.js";
 import {
   checkForUpdate
 } from "./chunk-DIOODAYM.js";
@@ -406,4 +406,4 @@ export {
   detectUpdatePackageManager,
   detectUpdatePackageName
 };
-//# sourceMappingURL=chunk-PGNERAZL.js.map
+//# sourceMappingURL=chunk-RWNI5OWT.js.map

package/dist/chunk-TGSPCFBT.js

@@ -0,0 +1 @@
+//# sourceMappingURL=chunk-TGSPCFBT.js.map