@wrongstack/cli 1.0.33 → 1.0.36

package/dist/{cli-context-7HK67B2Z.js → cli-context-I6HJCVCV.js}

@@ -17,7 +17,7 @@ import {
   renderDiff,
   resolveLaunchAllowedTools,
   resolveToolRestriction
-} from "./chunk-TI7KLHYX.js";
+} from "./chunk-2CMMWRQH.js";
 import {
   theme as theme2
 } from "./chunk-QD544J2B.js";
@@ -27,33 +27,33 @@ import {
 } from "./chunk-EWKESL4L.js";
 import {
   resolveLaunchMcpServers
-} from "./chunk-HLSHFXTO.js";
+} from "./chunk-WY74MMDB.js";
 import {
   subcommands
-} from "./chunk-24C6VVLM.js";
+} from "./chunk-LPGZ3NUF.js";
 import {
   renderDeepHelp,
   renderFocusedHelp
 } from "./chunk-2EZ2DHOW.js";
 import {
   handleHelpVersionShortCircuit
-} from "./chunk-SWOPJHXI.js";
+} from "./chunk-RYTSPBNM.js";
 import {
   DEFAULT_PORT
-} from "./chunk-RQ4UBKYH.js";
+} from "./chunk-GF7LUWQS.js";
 import "./chunk-HXJYHAR4.js";
 import {
   resolveHqPasswordInput
 } from "./chunk-AUQDGU5D.js";
 import {
   normalizeHqPublicOrigin
-} from "./chunk-5EA6OTLJ.js";
+} from "./chunk-AFOH6CHO.js";
 import {
   parseHqIpAllowlist
 } from "./chunk-Q7E3BPDU.js";
 import {
   installProviderPersisters
-} from "./chunk-TWSQTQKR.js";
+} from "./chunk-4R6TVMYA.js";
 import {
   discoverAndMergeProviders
 } from "./chunk-PA4VBCXS.js";
@@ -69,44 +69,44 @@ import {
   runPicker,
   saveToGlobalConfig,
   theme
-} from "./chunk-P3GRLV47.js";
+} from "./chunk-NEWXDNF2.js";
 import "./chunk-YTEOAWOJ.js";
 import {
   isKeylessLocalProvider,
   visibleModelIds
-} from "./chunk-5UZBUV2H.js";
+} from "./chunk-RKU66D2O.js";
 import {
   resolveActiveApiKey
-} from "./chunk-ZYACRPLN.js";
+} from "./chunk-ULYAI7CP.js";
 import {
   activeProfileConfigPath
 } from "./chunk-YMXXOOFN.js";
-import "./chunk-4BX2YDTQ.js";
+import "./chunk-4JMAWKLA.js";
 import {
   runUpdateCommand
-} from "./chunk-PGNERAZL.js";
-import "./chunk-U3SS4NRH.js";
+} from "./chunk-ZWBI7ORM.js";
+import "./chunk-BHXAKTBE.js";
 import "./chunk-DAKVBMD4.js";
 import {
   applyNodeEnvDefault,
   applySessionShellDefault,
   runPreflight
-} from "./chunk-WTJDSTYD.js";
+} from "./chunk-T5KR6SNO.js";
 import {
   parseArgs
-} from "./chunk-MPQCHBDJ.js";
+} from "./chunk-CJSHS2K7.js";
 import "./chunk-DIOODAYM.js";
 import {
   applyAsciiMode
 } from "./chunk-PZQBGUVZ.js";
-import "./chunk-WHEYHDIE.js";
+import "./chunk-AKESWZH5.js";
 import {
   CLI_VERSION
 } from "./chunk-F5DCFAKI.js";
 
 // src/cli-context.ts
 import { TOKENS as TOKENS3 } from "@wrongstack/core/kernel";
-import { writeErr as writeErr2 } from "@wrongstack/core/utils";
+import { writeErr as writeErr4 } from "@wrongstack/core/utils";
 
 // src/boot/container-wiring.ts
 import { DefaultPathResolver } from "@wrongstack/core/infrastructure";
@@ -234,7 +234,7 @@ function wireContainer(deps) {
 // src/boot/launch-menu.ts
 import * as fs from "node:fs/promises";
 import { HQ_CLI_DEFAULT_HOST } from "@wrongstack/core/hq";
-import { atomicWrite, color, isStdinTTY, setRawMode } from "@wrongstack/core/utils";
+import { atomicWrite, color, isStdinTTY, setRawMode, withFileLock } from "@wrongstack/core/utils";
 
 // src/boot/launch-banner.ts
 var STACK_ORANGE = { r: 253, g: 159, b: 2 };
@@ -750,29 +750,31 @@ function toPersistedMenuChoice(result) {
   };
 }
 async function persistMenuChoice(globalConfigPath, choice) {
-  let fileExists = false;
-  try {
-    await fs.access(globalConfigPath);
-    fileExists = true;
-  } catch {
-  }
-  let existing = {};
-  try {
-    const raw = await fs.readFile(globalConfigPath, "utf8");
-    existing = JSON.parse(raw);
-  } catch (err) {
-    if (fileExists) {
-      throw new Error(
-        `Refusing to overwrite corrupt config at ${globalConfigPath} (${err.message}). Fix or move the file aside before retrying.`,
-        { cause: err }
-      );
+  await withFileLock(globalConfigPath, async () => {
+    let fileExists = false;
+    try {
+      await fs.access(globalConfigPath);
+      fileExists = true;
+    } catch {
     }
-    existing = {};
-  }
-  const launch = existing.launch ?? {};
-  existing.launch = { ...launch, menuChoice: choice };
-  await atomicWrite(globalConfigPath, JSON.stringify(existing, null, 2), {
-    mode: 384
+    let existing = {};
+    try {
+      const raw = await fs.readFile(globalConfigPath, "utf8");
+      existing = JSON.parse(raw.replace(/^\uFEFF/, ""));
+    } catch (err) {
+      if (fileExists) {
+        throw new Error(
+          `Refusing to overwrite corrupt config at ${globalConfigPath} (${err.message}). Fix or move the file aside before retrying.`,
+          { cause: err }
+        );
+      }
+      existing = {};
+    }
+    const launch = existing.launch ?? {};
+    existing.launch = { ...launch, menuChoice: choice };
+    await atomicWrite(globalConfigPath, JSON.stringify(existing, null, 2), {
+      mode: 384
+    });
   });
 }
 
@@ -929,7 +931,7 @@ async function isPortInUse(host, port) {
 }
 async function handleHqShortCircuit(flags) {
   if (flags["hq"] !== true) return null;
-  const { startHqServer } = await import("./hq-server-AVNKZ2PV.js");
+  const { startHqServer } = await import("./hq-server-5TR6NBGS.js");
   const tunnelRequested = flags["tunnel"] === true;
   const rawPublicUrl = typeof flags["hq-public-url"] === "string" ? flags["hq-public-url"] : process.env.WRONGSTACK_HQ_PUBLIC_URL;
   let publicOrigin;
@@ -1174,167 +1176,18 @@ ${color3.green("Cloudflare Quick Tunnel ready:")} ${browserUrl}
 // src/boot.ts
 import * as os from "node:os";
 import * as path9 from "node:path";
-import { toErrorMessage as toErrorMessage5 } from "@wrongstack/core/utils";
-
-// src/boot-provider-selection.ts
-import * as fs2 from "node:fs/promises";
-import { createRequire as createRequire4 } from "node:module";
-import * as path4 from "node:path";
-import { fileURLToPath } from "node:url";
-import {
-  color as color4,
-  moduleUrlFor,
-  toErrorMessage,
-  wrongstackPackageJsonPath as wrongstackPackageJsonPath3
-} from "@wrongstack/core/utils";
-import { isSetupProvider } from "@wrongstack/providers";
-function resolveBundledOverlayFile() {
-  try {
-    return fileURLToPath(
-      new URL("../data/providers.json", moduleUrlFor(import.meta.url, "@wrongstack/cli"))
-    );
-  } catch {
-    return void 0;
-  }
-}
-async function validateSavedProviderModel(config, modelsRegistry) {
-  const providerId = config.provider;
-  const modelId = config.model;
-  if (!providerId || !modelId) return { ok: false, reason: "missing provider/model" };
-  if (isSetupProvider(providerId)) return { ok: true };
-  const saved = config.providers?.[providerId];
-  const lookupId = saved?.type && saved.type !== providerId ? saved.type : providerId;
-  const catalogProvider = await modelsRegistry.getProvider(lookupId).catch(() => void 0);
-  if (!catalogProvider && !saved?.family)
-    return { ok: false, reason: `provider "${providerId}" is no longer available` };
-  const hasCredential = (catalogProvider?.envVars ?? saved?.envVars ?? []).some(
-    (envVar) => Boolean(process.env[envVar])
-  ) || saved !== void 0 && resolveActiveApiKey(saved) !== void 0 || isKeylessLocalProvider({
-    apiBase: saved?.baseUrl ?? catalogProvider?.apiBase,
-    envVars: saved?.envVars ?? catalogProvider?.envVars
-  });
-  if (!hasCredential) return { ok: false, reason: `provider "${providerId}" has no usable key` };
-  const visible = visibleModelIds(
-    providerId,
-    config,
-    (catalogProvider?.models ?? []).map((m) => m.id),
-    saved
-  );
-  if (visible.length > 0 && !visible.includes(modelId)) {
-    return {
-      ok: false,
-      reason: `model "${modelId}" is no longer available for provider "${providerId}"`
-    };
-  }
-  return { ok: true };
-}
-async function autoSelectSavedProvider(config, modelsRegistry) {
-  const providers = config.providers ?? {};
-  const entries = config.provider && providers[config.provider] ? [[config.provider, providers[config.provider]]] : Object.entries(providers);
-  for (const [id, cfg] of entries) {
-    if (!cfg) continue;
-    let model = cfg.models?.[0];
-    if (!model) {
-      const catalogId = cfg.type && cfg.type !== id ? cfg.type : id;
-      const catalog = await modelsRegistry.getProvider(catalogId).catch(() => void 0);
-      model = catalog?.models?.[0]?.id;
-    }
-    if (model) return { provider: id, model };
-  }
-  return void 0;
-}
-function resolveBundledSkillsDir2() {
-  try {
-    const req = createRequire4(import.meta.url);
-    const corePkg = wrongstackPackageJsonPath3("@wrongstack/core", (id) => req.resolve(id));
-    return path4.join(path4.dirname(corePkg), "skills");
-  } catch {
-    return void 0;
-  }
-}
-function resolveBundledPromptsDir2() {
-  try {
-    const req = createRequire4(import.meta.url);
-    const corePkg = wrongstackPackageJsonPath3("@wrongstack/core", (id) => req.resolve(id));
-    return path4.join(path4.dirname(corePkg), "data", "prompts");
-  } catch {
-    return void 0;
-  }
-}
-function isHomeDirectory(cwd, userHome) {
-  if (!cwd || !userHome) return false;
-  return path4.resolve(cwd) === path4.resolve(userHome);
-}
-function shouldPrintYoloNotice(lastChoices, yoloPinned, yolo) {
-  return !lastChoices && yoloPinned === void 0 && yolo;
-}
-async function checkGitInCwd(opts) {
-  const { cwd, renderer, reader } = opts;
-  const cwdGit = path4.join(cwd, ".git");
-  let hasCwdGit = false;
-  try {
-    await fs2.access(cwdGit);
-    hasCwdGit = true;
-  } catch {
-  }
-  if (!hasCwdGit) {
-    renderer.write(
-      `
-  ${color4.amber("\u25CB")} This folder has no ${color4.bold(".git")} repository.
-`
-    );
-    const answer = (await reader.readLine(`  ${color4.amber("?")} Initialize one here? ${color4.dim("[y/N]")} `)).trim().toLowerCase();
-    if (answer === "y" || answer === "yes") {
-      try {
-        const { spawn: spawn2 } = await import("node:child_process");
-        await new Promise((resolve3, reject) => {
-          const child = spawn2("git", ["init"], {
-            cwd,
-            signal: AbortSignal.timeout(1e4),
-            windowsHide: true
-          });
-          child.on("error", reject);
-          child.on(
-            "close",
-            (code) => code === 0 ? resolve3() : reject(new Error(`git init failed with ${code}`))
-          );
-        });
-        renderer.write(`  ${color4.green("\u2713")} Git repository initialized
-`);
-        hasCwdGit = true;
-      } catch (err) {
-        renderer.writeError(`git init failed: ${toErrorMessage(err)}
-`);
-      }
-    }
-  }
-  const parentDir = path4.dirname(cwd);
-  if (parentDir !== cwd) {
-    try {
-      await fs2.access(path4.join(parentDir, ".git"));
-      renderer.write(
-        `  ${color4.dim("\u2139")} A ${color4.bold(".git")} repo exists in the parent directory: ${color4.dim(parentDir)}
-`
-      );
-    } catch {
-    }
-  }
-}
-
-// src/boot.ts
 import { DefaultLogger } from "@wrongstack/core/infrastructure";
-import { TOKENS as TOKENS2 } from "@wrongstack/core/kernel";
 import { DefaultModelsRegistry, startCatalog } from "@wrongstack/core/models";
-import { ToolRegistry } from "@wrongstack/core/registry";
-import { normalizeTokenSavingTier } from "@wrongstack/core/types";
-import { color as color11, isStdinTTY as isStdinTTY2, writeErr } from "@wrongstack/core/utils";
-import { isSetupProvider as isSetupProvider2, SETUP_MODEL_ID, SETUP_PROVIDER_ID } from "@wrongstack/providers";
-import { createDefaultContainer as createDefaultContainer2 } from "@wrongstack/runtime";
-import { registerBuiltinToolTier } from "@wrongstack/tools/tool-tier";
+import {
+  color as color13,
+  isStdinTTY as isStdinTTY3,
+  toErrorMessage as toErrorMessage7,
+  writeErr as writeErr3
+} from "@wrongstack/core/utils";
 
 // src/boot/append-system-prompt.ts
-import * as fs3 from "node:fs/promises";
-import * as path5 from "node:path";
+import * as fs2 from "node:fs/promises";
+import * as path4 from "node:path";
 async function resolveAppendedSystemPrompt(flags, cwd) {
   const parts = [];
   const inline = flags["append-system-prompt"];
@@ -1344,10 +1197,10 @@ async function resolveAppendedSystemPrompt(flags, cwd) {
     throw new Error("--append-system-prompt-file needs a path");
   }
   if (typeof file === "string" && file.trim()) {
-    const resolved = path5.resolve(cwd, file.trim());
+    const resolved = path4.resolve(cwd, file.trim());
     let text;
     try {
-      text = await fs3.readFile(resolved, "utf8");
+      text = await fs2.readFile(resolved, "utf8");
     } catch (err) {
       const reason = err.code ?? String(err);
       throw new Error(`--append-system-prompt-file: cannot read ${resolved} (${reason})`);
@@ -1358,9 +1211,9 @@ async function resolveAppendedSystemPrompt(flags, cwd) {
 }
 
 // src/boot/config-backup-recovery.ts
-import * as fs4 from "node:fs/promises";
-import * as path6 from "node:path";
-import { atomicWrite as atomicWrite2, backupConfigFile, color as color5, toErrorMessage as toErrorMessage2 } from "@wrongstack/core/utils";
+import * as fs3 from "node:fs/promises";
+import * as path5 from "node:path";
+import { atomicWrite as atomicWrite2, backupConfigFile, color as color4, toErrorMessage } from "@wrongstack/core/utils";
 function isRecord(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
@@ -1371,7 +1224,7 @@ function providerIds(value) {
 }
 async function defaultProfileProvidersAreEmpty(profilePath) {
   try {
-    const parsed = JSON.parse(await fs4.readFile(profilePath, "utf8"));
+    const parsed = JSON.parse(await fs3.readFile(profilePath, "utf8"));
     return providerIds(parsed).length === 0;
   } catch {
     return false;
@@ -1394,7 +1247,7 @@ function profileSnapshotTimestamp(fileName, fallback) {
   );
 }
 async function findLatestProviderBackup(globalRoot, profileName = "default") {
-  const directory = path6.join(globalRoot, "config-history");
+  const directory = path5.join(globalRoot, "config-history");
   const escapedProfile = profileName.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
   const filePattern = new RegExp(
     `^profiles-${escapedProfile}-config-\\d{4}-\\d{2}-\\d{2}T\\d{2}-\\d{2}-\\d{2}-\\d{3}\\.json$`,
@@ -1403,7 +1256,7 @@ async function findLatestProviderBackup(globalRoot, profileName = "default") {
   const candidates = [];
   let entries;
   try {
-    entries = await fs4.readdir(directory, { withFileTypes: true });
+    entries = await fs3.readdir(directory, { withFileTypes: true });
   } catch {
     return void 0;
   }
@@ -1411,9 +1264,9 @@ async function findLatestProviderBackup(globalRoot, profileName = "default") {
     if (!entry.isFile() || !filePattern.test(entry.name)) {
       continue;
     }
-    const filePath = path6.join(directory, entry.name);
+    const filePath = path5.join(directory, entry.name);
     try {
-      const stat2 = await fs4.stat(filePath);
+      const stat2 = await fs3.stat(filePath);
       candidates.push({
         filePath,
         fileName: entry.name,
@@ -1425,7 +1278,7 @@ async function findLatestProviderBackup(globalRoot, profileName = "default") {
   candidates.sort((a, b) => b.modifiedAtMs - a.modifiedAtMs);
   for (const candidate of candidates) {
     try {
-      const raw = await fs4.readFile(candidate.filePath, "utf8");
+      const raw = await fs3.readFile(candidate.filePath, "utf8");
       const parsed = JSON.parse(raw);
       const ids = providerIds(parsed);
       if (ids.length === 0) continue;
@@ -1437,7 +1290,7 @@ async function findLatestProviderBackup(globalRoot, profileName = "default") {
 }
 async function restoreDefaultProfileBackup(opts) {
   await backupConfigFile(opts.profilePath, { globalRoot: opts.globalRoot });
-  await fs4.mkdir(path6.dirname(opts.profilePath), { recursive: true });
+  await fs3.mkdir(path5.dirname(opts.profilePath), { recursive: true });
   await atomicWrite2(opts.profilePath, opts.backup.raw, { mode: 384 });
 }
 async function maybeRestoreDefaultProfileFromBackup(opts) {
@@ -1450,12 +1303,12 @@ async function maybeRestoreDefaultProfileFromBackup(opts) {
   const providerSummary = remainder > 0 ? `${shownProviders} +${remainder}` : shownProviders;
   opts.renderer.write(
     `
-  ${color5.amber("\u25CB")} ${color5.bold(profileName)} profile has no saved providers.
-  ${color5.dim("Latest usable backup:")} ${color5.bold(backup.fileName)} ${color5.dim(`(${backup.providerIds.length} provider: ${providerSummary})`)}
+  ${color4.amber("\u25CB")} ${color4.bold(profileName)} profile has no saved providers.
+  ${color4.dim("Latest usable backup:")} ${color4.bold(backup.fileName)} ${color4.dim(`(${backup.providerIds.length} provider: ${providerSummary})`)}
 `
   );
   const answer = (await opts.reader.readLine(
-    `  ${color5.amber("?")} Restore all settings from this backup? ${color5.dim("[Y/n]")} `
+    `  ${color4.amber("?")} Restore all settings from this backup? ${color4.dim("[Y/n]")} `
   )).trim().toLowerCase();
   if (answer === "n" || answer === "no") return false;
   try {
@@ -1465,12 +1318,12 @@ async function maybeRestoreDefaultProfileFromBackup(opts) {
       profilePath: opts.profilePath
     });
     opts.renderer.write(
-      `  ${color5.green("\u2713")} Restored all settings from ${color5.dim(backup.fileName)}
+      `  ${color4.green("\u2713")} Restored all settings from ${color4.dim(backup.fileName)}
 `
     );
     return true;
   } catch (err) {
-    opts.renderer.writeWarning(`Could not restore config backup: ${toErrorMessage2(err)}
+    opts.renderer.writeWarning(`Could not restore config backup: ${toErrorMessage(err)}
 `);
     return false;
   }
@@ -1484,6 +1337,26 @@ function applyGoalTuiDefault(flags, positional) {
   }
 }
 
+// src/boot-config.ts
+import { bootConfig as coreBootConfig } from "@wrongstack/core/infrastructure";
+async function bootConfig(flags) {
+  const isWebui = !!flags["webui"];
+  const opts = {
+    flags,
+    appLabel: "wstack",
+    ...isWebui ? { skipIdentityValidation: true } : {}
+  };
+  const { cwd, projectRoot, userHome, wpaths, pathResolver, config, vault } = await coreBootConfig(opts);
+  return {
+    paths: { cwd, projectRoot, userHome, wpaths, pathResolver },
+    config,
+    vault
+  };
+}
+
+// src/boot-launch-choices.ts
+import { color as color10, toErrorMessage as toErrorMessage5, writeErr } from "@wrongstack/core/utils";
+
 // src/boot/system-prompt-menu.ts
 import {
   countSystemPromptTokens,
@@ -1492,11 +1365,11 @@ import {
   SYSTEM_PROMPT_VARIANT_OPTIONS,
   SYSTEM_PROMPT_VARIANTS
 } from "@wrongstack/core/agent";
-import { color as color9 } from "@wrongstack/core/utils";
+import { color as color8 } from "@wrongstack/core/utils";
 
 // src/pre-launch/first-run.ts
 import { hasProviderCredential } from "@wrongstack/core/models";
-import { color as color6, toErrorMessage as toErrorMessage3 } from "@wrongstack/core/utils";
+import { color as color5, toErrorMessage as toErrorMessage2 } from "@wrongstack/core/utils";
 import { PROVIDER_DEFINITIONS } from "@wrongstack/providers/definitions";
 async function hasAnyCredential(config, modelsRegistry, env = process.env) {
   for (const cfg of Object.values(config.providers ?? {})) {
@@ -1522,39 +1395,39 @@ function renderWelcome(renderer) {
   renderer.write(`${boxTop("Welcome to WrongStack")}
 `);
   renderer.write(
-    `${boxRow(color6.dim("No model is connected yet. Pick how you want to connect one:"))}
+    `${boxRow(color5.dim("No model is connected yet. Pick how you want to connect one:"))}
 `
   );
   renderer.write(`${boxDivider()}
 `);
   renderer.write(
     `${boxRow(
-      `${theme.accent("1")}  ${color6.bold("Sign in with a subscription")}  ${color6.dim("ChatGPT \xB7 Claude \xB7 GitHub Copilot")}`
+      `${theme.accent("1")}  ${color5.bold("Sign in with a subscription")}  ${color5.dim("ChatGPT \xB7 Claude \xB7 GitHub Copilot")}`
     )}
 `
   );
   renderer.write(
     `${boxRow(
-      `${theme.accent("2")}  ${color6.bold("Add an API key")}              ${color6.dim("Anthropic \xB7 OpenAI \xB7 Google \xB7 OpenRouter \xB7 \u2026")}`
+      `${theme.accent("2")}  ${color5.bold("Add an API key")}              ${color5.dim("Anthropic \xB7 OpenAI \xB7 Google \xB7 OpenRouter \xB7 \u2026")}`
     )}
 `
   );
   renderer.write(
     `${boxRow(
-      `${theme.accent("3")}  ${color6.bold("Use a local server")}          ${color6.dim("Ollama \xB7 LM Studio \xB7 vLLM \xB7 OmniRoute")}`
+      `${theme.accent("3")}  ${color5.bold("Use a local server")}          ${color5.dim("Ollama \xB7 LM Studio \xB7 vLLM \xB7 OmniRoute")}`
     )}
 `
   );
   renderer.write(
     `${boxRow(
-      `${theme.accent("4")}  ${color6.bold("Continue without a key")}      ${color6.dim("setup mode \u2014 explore the app, no model")}`
+      `${theme.accent("4")}  ${color5.bold("Continue without a key")}      ${color5.dim("setup mode \u2014 explore the app, no model")}`
     )}
 `
   );
   renderer.write(`${boxDivider()}
 `);
   renderer.write(
-    `${boxRow(color6.dim("You can change this any time with /auth inside the app, or `wstack auth`."))}
+    `${boxRow(color5.dim("You can change this any time with /auth inside the app, or `wstack auth`."))}
 `
   );
   renderer.write(`${boxBottom()}
@@ -1573,12 +1446,12 @@ async function runFirstRunSetup(deps) {
     renderWelcome(renderer);
     const answer = (await reader.readLine(
       `
-${color6.amber("?")} Choose ${color6.dim("(1-4)")} ${color6.dim("[q to quit]")}: `
+${color5.amber("?")} Choose ${color5.dim("(1-4)")} ${color5.dim("[q to quit]")}: `
     )).trim().toLowerCase();
     if (!answer || answer === "q" || answer === "quit" || answer === "exit") {
       renderer.write(
         `
-  ${color6.dim("No provider configured. Run")} ${color6.bold("wstack auth")} ${color6.dim("when you are ready.")}
+  ${color5.dim("No provider configured. Run")} ${color5.bold("wstack auth")} ${color5.dim("when you are ready.")}
 
 `
       );
@@ -1595,14 +1468,14 @@ ${color6.amber("?")} Choose ${color6.dim("(1-4)")} ${color6.dim("[q to quit]")}:
     try {
       await flow();
     } catch (err) {
-      renderer.writeWarning(`Setup step did not complete: ${toErrorMessage3(err)}
+      renderer.writeWarning(`Setup step did not complete: ${toErrorMessage2(err)}
 `);
     }
     let updated;
     try {
       updated = await deps.reloadConfig();
     } catch (err) {
-      renderer.writeWarning(`Could not re-read config: ${toErrorMessage3(err)}
+      renderer.writeWarning(`Could not re-read config: ${toErrorMessage2(err)}
 `);
       continue;
     }
@@ -1614,8 +1487,8 @@ ${color6.amber("?")} Choose ${color6.dim("(1-4)")} ${color6.dim("[q to quit]")}:
 }
 
 // src/pre-launch/launch-prompts.ts
-import * as fs5 from "node:fs/promises";
-import { atomicWrite as atomicWrite3, color as color7 } from "@wrongstack/core/utils";
+import * as fs4 from "node:fs/promises";
+import { atomicWrite as atomicWrite3, color as color6, withFileLock as withFileLock2 } from "@wrongstack/core/utils";
 var LaunchAbortedError = class extends Error {
   exitCode = 0;
   constructor() {
@@ -1646,19 +1519,19 @@ async function runLaunchPrompts(opts) {
       yolo: yoloPinned ?? lastChoices.yolo,
       autonomy: autonomyPinned ?? lastChoices.autonomy
     };
-    const onOff = (v) => v ? color7.green("on") : color7.dim("off");
+    const onOff = (v) => v ? color6.green("on") : color6.dim("off");
     const modeLabel = effective.mode.toUpperCase();
     renderer.write(
       `
-  ${color7.dim("Last settings:")} ${color7.bold(modeLabel)} \xB7 YOLO ${onOff(effective.yolo)} \xB7 Autonomy ${effective.autonomy === "auto" ? color7.green("auto") : color7.dim("off")}
+  ${color6.dim("Last settings:")} ${color6.bold(modeLabel)} \xB7 YOLO ${onOff(effective.yolo)} \xB7 Autonomy ${effective.autonomy === "auto" ? color6.green("auto") : color6.dim("off")}
 `
     );
     const answer = (await reader.readLine(
-      `  ${color7.amber("?")} Continue with these? ${color7.dim("[Y/n/q]")} ${color7.dim("(auto Y in 5s)")} `,
+      `  ${color6.amber("?")} Continue with these? ${color6.dim("[Y/n/q]")} ${color6.dim("(auto Y in 5s)")} `,
       { timeoutMs: 5e3, defaultAnswer: "y" }
     )).trim().toLowerCase();
     if (answer === "q") {
-      renderer.write(color7.dim("  Goodbye!\n"));
+      renderer.write(color6.dim("  Goodbye!\n"));
       throw new LaunchAbortedError();
     }
     if (answer !== "n" && answer !== "no") {
@@ -1666,7 +1539,7 @@ async function runLaunchPrompts(opts) {
       const badgeStr2 = badges2.length > 0 ? ` (${badges2.join(" \xB7 ")})` : "";
       renderer.write(
         `
-  ${color7.green("\u25B6")} Launching in ${color7.bold(modeLabel)} mode${badgeStr2}
+  ${color6.green("\u25B6")} Launching in ${color6.bold(modeLabel)} mode${badgeStr2}
 
 `
       );
@@ -1679,10 +1552,10 @@ async function runLaunchPrompts(opts) {
   } else {
     const answer = (await reader.readLine(
       `
-  ${color7.amber("?")} Interactive mode: ${color7.bold("T")}UI / ${color7.bold("R")}EPL ${color7.dim("[T/r/q]")} `
+  ${color6.amber("?")} Interactive mode: ${color6.bold("T")}UI / ${color6.bold("R")}EPL ${color6.dim("[T/r/q]")} `
     )).trim().toLowerCase();
     if (answer === "q") {
-      renderer.write(color7.dim("  Goodbye!\n"));
+      renderer.write(color6.dim("  Goodbye!\n"));
       throw new LaunchAbortedError();
     }
     mode = answer === "r" || answer === "repl" ? "repl" : "tui";
@@ -1692,10 +1565,10 @@ async function runLaunchPrompts(opts) {
     yolo = yoloPinned;
   } else {
     const answer = (await reader.readLine(
-      `  ${color7.amber("?")} YOLO mode ${color7.dim("(auto-approve tool calls)")} ${color7.dim("[Y/n/q]")} `
+      `  ${color6.amber("?")} YOLO mode ${color6.dim("(auto-approve tool calls)")} ${color6.dim("[Y/n/q]")} `
     )).trim().toLowerCase();
     if (answer === "q") {
-      renderer.write(color7.dim("  Goodbye!\n"));
+      renderer.write(color6.dim("  Goodbye!\n"));
       throw new LaunchAbortedError();
     }
     yolo = answer !== "n" && answer !== "no";
@@ -1705,10 +1578,10 @@ async function runLaunchPrompts(opts) {
     autonomy = autonomyPinned;
   } else {
     const answer = (await reader.readLine(
-      `  ${color7.amber("?")} Autonomy mode ${color7.dim("(auto-continue \u2014 agent picks next step)")} ${color7.dim("[Y/n/q]")} `
+      `  ${color6.amber("?")} Autonomy mode ${color6.dim("(auto-continue \u2014 agent picks next step)")} ${color6.dim("[Y/n/q]")} `
     )).trim().toLowerCase();
     if (answer === "q") {
-      renderer.write(color7.dim("  Goodbye!\n"));
+      renderer.write(color6.dim("  Goodbye!\n"));
       throw new LaunchAbortedError();
     }
     autonomy = answer !== "n" && answer !== "no" ? "auto" : "off";
@@ -1717,7 +1590,7 @@ async function runLaunchPrompts(opts) {
   const badgeStr = badges.length > 0 ? ` (${badges.join(" \xB7 ")})` : "";
   renderer.write(
     `
-  ${color7.green("\u25B6")} Launching in ${color7.bold(mode.toUpperCase())} mode${badgeStr}
+  ${color6.green("\u25B6")} Launching in ${color6.bold(mode.toUpperCase())} mode${badgeStr}
 
 `
   );
@@ -1725,55 +1598,57 @@ async function runLaunchPrompts(opts) {
 }
 function buildBadges(chosen) {
   const badges = [];
-  if (chosen.yolo) badges.push(color7.yellow("YOLO"));
+  if (chosen.yolo) badges.push(color6.yellow("YOLO"));
   if (chosen.autonomy !== "off")
-    badges.push(color7.magenta(`AUTONOMY:${chosen.autonomy.toUpperCase()}`));
+    badges.push(color6.magenta(`AUTONOMY:${chosen.autonomy.toUpperCase()}`));
   return badges;
 }
 async function persistLaunchChoices(configPath, choices) {
-  let fileExists = false;
-  try {
-    await fs5.access(configPath);
-    fileExists = true;
-  } catch {
-  }
-  let existing = {};
-  try {
-    const raw = await fs5.readFile(configPath, "utf8");
-    existing = JSON.parse(raw);
-  } catch (err) {
-    if (fileExists) {
-      throw new Error(
-        `Refusing to overwrite corrupt config at ${configPath} (${err.message}). Fix or move the file aside before retrying.`,
-        { cause: err }
-      );
+  await withFileLock2(configPath, async () => {
+    let fileExists = false;
+    try {
+      await fs4.access(configPath);
+      fileExists = true;
+    } catch {
     }
-    existing = {};
-  }
-  existing.yolo = choices.yolo;
-  existing.launch = {
-    mode: choices.mode,
-    autonomy: choices.autonomy
-  };
-  await atomicWrite3(configPath, JSON.stringify(existing, null, 2), { mode: 384 });
+    let existing = {};
+    try {
+      const raw = await fs4.readFile(configPath, "utf8");
+      existing = JSON.parse(raw.replace(/^\uFEFF/, ""));
+    } catch (err) {
+      if (fileExists) {
+        throw new Error(
+          `Refusing to overwrite corrupt config at ${configPath} (${err.message}). Fix or move the file aside before retrying.`,
+          { cause: err }
+        );
+      }
+      existing = {};
+    }
+    existing.yolo = choices.yolo;
+    existing.launch = {
+      mode: choices.mode,
+      autonomy: choices.autonomy
+    };
+    await atomicWrite3(configPath, JSON.stringify(existing, null, 2), { mode: 384 });
+  });
 }
 
 // src/pre-launch/project-check.ts
-import * as fs6 from "node:fs/promises";
-import * as path7 from "node:path";
+import * as fs5 from "node:fs/promises";
+import * as path6 from "node:path";
 import {
-  color as color8,
+  color as color7,
   detectProjectKind,
   isOutsideProject,
-  toErrorMessage as toErrorMessage4
+  toErrorMessage as toErrorMessage3
 } from "@wrongstack/core/utils";
 async function scaffoldAgentsMd(projectRoot) {
-  const dir = path7.join(projectRoot, ".wrongstack");
-  const file = path7.join(dir, "AGENTS.md");
+  const dir = path6.join(projectRoot, ".wrongstack");
+  const file = path6.join(dir, "AGENTS.md");
   const facts = await detectProjectFacts(projectRoot);
   const body = renderAgentsTemplate(facts);
-  await fs6.mkdir(dir, { recursive: true });
-  await fs6.writeFile(file, body, "utf8");
+  await fs5.mkdir(dir, { recursive: true });
+  await fs5.writeFile(file, body, "utf8");
   return file;
 }
 async function runProjectCheck(opts) {
@@ -1782,7 +1657,7 @@ async function runProjectCheck(opts) {
   if (kind === "initialized") {
     renderer.write(
       `
-  ${color8.green("\u2713")} Project initialized ${color8.dim(`(${path7.join(projectRoot, ".wrongstack", "AGENTS.md")})`)}
+  ${color7.green("\u2713")} Project initialized ${color7.dim(`(${path6.join(projectRoot, ".wrongstack", "AGENTS.md")})`)}
 `
     );
     return true;
@@ -1790,45 +1665,45 @@ async function runProjectCheck(opts) {
   if (kind === "project") {
     renderer.write(
       `
-  ${color8.amber("\u25CF")} Project detected ${color8.dim(`(${projectRoot})`)} but ${color8.bold(".wrongstack/AGENTS.md")} is missing.
+  ${color7.amber("\u25CF")} Project detected ${color7.dim(`(${projectRoot})`)} but ${color7.bold(".wrongstack/AGENTS.md")} is missing.
 `
     );
     const answer2 = (await reader.readLine(
-      `  ${color8.amber("?")} Scaffold ${color8.bold("AGENTS.md")} now? ${color8.dim("[y/N/q]")} `
+      `  ${color7.amber("?")} Scaffold ${color7.bold("AGENTS.md")} now? ${color7.dim("[y/N/q]")} `
     )).trim().toLowerCase();
     if (answer2 === "q") {
-      renderer.write(color8.dim("  Cancelled.\n"));
+      renderer.write(color7.dim("  Cancelled.\n"));
       return false;
     }
     if (answer2 === "y" || answer2 === "yes") {
       try {
         const file = await scaffoldAgentsMd(projectRoot);
-        renderer.write(`  ${color8.green("\u2713")} Wrote ${color8.dim(file)}
+        renderer.write(`  ${color7.green("\u2713")} Wrote ${color7.dim(file)}
 `);
       } catch (err) {
-        renderer.writeError(`Failed to scaffold AGENTS.md: ${toErrorMessage4(err)}`);
+        renderer.writeError(`Failed to scaffold AGENTS.md: ${toErrorMessage3(err)}`);
       }
     }
     return true;
   }
-  const gitDir = path7.join(projectRoot, ".git");
+  const gitDir = path6.join(projectRoot, ".git");
   let hasGit = false;
   try {
-    await fs6.access(gitDir);
+    await fs5.access(gitDir);
     hasGit = true;
   } catch {
   }
   if (!hasGit) {
     renderer.write(
       `
-  ${color8.dim("\u25CB")} ${color8.dim(`No project manifest in ${projectRoot} \u2014 running in a scratch directory.`)}
+  ${color7.dim("\u25CB")} ${color7.dim(`No project manifest in ${projectRoot} \u2014 running in a scratch directory.`)}
 `
     );
     const answer2 = (await reader.readLine(
-      `  ${color8.amber("?")} No git repo found. ${color8.bold("Initialize git?")} ${color8.dim("[y/N/q]")} `
+      `  ${color7.amber("?")} No git repo found. ${color7.bold("Initialize git?")} ${color7.dim("[y/N/q]")} `
     )).trim().toLowerCase();
     if (answer2 === "q") {
-      renderer.write(color8.dim("  Cancelled.\n"));
+      renderer.write(color7.dim("  Cancelled.\n"));
       return false;
     }
     if (answer2 === "y" || answer2 === "yes") {
@@ -1846,23 +1721,23 @@ async function runProjectCheck(opts) {
             (code) => code === 0 ? resolve3() : reject(new Error(`git init failed with ${code}`))
           );
         });
-        renderer.write(`  ${color8.green("\u2713")} Git repository initialized
+        renderer.write(`  ${color7.green("\u2713")} Git repository initialized
 `);
       } catch (err) {
-        renderer.writeError(`git init failed: ${toErrorMessage4(err)}
+        renderer.writeError(`git init failed: ${toErrorMessage3(err)}
 `);
       }
     }
   } else {
     renderer.write(
       `
-  ${color8.dim("\u25CB")} ${color8.dim(`No project manifest in ${projectRoot} \u2014 running in a scratch directory.`)}
+  ${color7.dim("\u25CB")} ${color7.dim(`No project manifest in ${projectRoot} \u2014 running in a scratch directory.`)}
 `
     );
   }
-  const answer = (await reader.readLine(`  ${color8.amber("?")} Continue anyway? ${color8.dim("[Y/n/q]")} `)).trim().toLowerCase();
+  const answer = (await reader.readLine(`  ${color7.amber("?")} Continue anyway? ${color7.dim("[Y/n/q]")} `)).trim().toLowerCase();
   if (answer === "q" || answer === "n" || answer === "no") {
-    renderer.write(color8.dim("  Cancelled.\n"));
+    renderer.write(color7.dim("  Cancelled.\n"));
     return false;
   }
   return true;
@@ -1899,39 +1774,39 @@ async function runSystemPromptMenu(deps) {
     if (suggestScout && lastVariant !== "scout") {
       renderer.write(
         `
-  ${color9.dim("\u25CB")} ${color9.dim(`Not a project folder \u2014 ${labelFor("scout")} (general-purpose) may fit better; answer n to choose it.`)}
+  ${color8.dim("\u25CB")} ${color8.dim(`Not a project folder \u2014 ${labelFor("scout")} (general-purpose) may fit better; answer n to choose it.`)}
 `
       );
     }
     const answer2 = (await reader.readLine(
-      `  ${color9.amber("?")} Continue with ${color9.bold(labelFor(lastVariant))} system prompt ${color9.dim(`(~${fmtTok(tokens[lastVariant])} tokens)`)}? ${color9.dim("[Y/n/q]")} ${color9.dim("(auto Y in 5s)")} `,
+      `  ${color8.amber("?")} Continue with ${color8.bold(labelFor(lastVariant))} system prompt ${color8.dim(`(~${fmtTok(tokens[lastVariant])} tokens)`)}? ${color8.dim("[Y/n/q]")} ${color8.dim("(auto Y in 5s)")} `,
       { timeoutMs: SUMMARY_TIMEOUT_MS2, defaultAnswer: "y" }
     )).trim().toLowerCase();
     if (answer2 === "q" || answer2 === "quit") throw new LaunchAbortedError();
     if (answer2 !== "n" && answer2 !== "no") return lastVariant;
   }
   renderer.write(`
-  ${color9.amber("?")} System prompt:
+  ${color8.amber("?")} System prompt:
 `);
   if (suggestScout) {
     renderer.write(
-      `  ${color9.dim(`Not a project folder \u2014 ${labelFor("scout")} is preselected.`)}
+      `  ${color8.dim(`Not a project folder \u2014 ${labelFor("scout")} is preselected.`)}
 `
     );
   }
   for (const [index, opt] of SYSTEM_PROMPT_OPTIONS.entries()) {
     const num2 = index + 1;
     const isDefault = opt.variant === defaultVariant;
-    const marker = isDefault ? color9.cyan("\u25CF") : color9.dim("\u25CB");
-    const label = isDefault ? color9.bold(opt.label) : opt.label;
+    const marker = isDefault ? color8.cyan("\u25CF") : color8.dim("\u25CB");
+    const label = isDefault ? color8.bold(opt.label) : opt.label;
     renderer.write(
-      `    ${color9.dim(`${num2}.`)} ${marker} ${label.padEnd(9)} ${color9.dim(`~${fmtTok(tokens[opt.variant])} tokens`)}  ${color9.dim(opt.hint)}
+      `    ${color8.dim(`${num2}.`)} ${marker} ${label.padEnd(9)} ${color8.dim(`~${fmtTok(tokens[opt.variant])} tokens`)}  ${color8.dim(opt.hint)}
 `
     );
   }
   const answer = (await reader.readLine(
     `
-  ${color9.amber("?")} Select system prompt ${color9.dim(`[1-${SYSTEM_PROMPT_OPTIONS.length}, Enter = ${labelFor(defaultVariant)}, q to quit]`)}: `
+  ${color8.amber("?")} Select system prompt ${color8.dim(`[1-${SYSTEM_PROMPT_OPTIONS.length}, Enter = ${labelFor(defaultVariant)}, q to quit]`)}: `
   )).trim().toLowerCase();
   if (answer === "q" || answer === "quit") throw new LaunchAbortedError();
   if (!answer) return defaultVariant;
@@ -1961,7 +1836,7 @@ async function maybeRunSystemPromptMenu(opts) {
     if (chosen === savedVariant) return { variant: chosen, aborted: false, changed: false };
     if (opts.outsideProject && chosen === "scout") {
       opts.renderer.write(
-        `  ${color9.dim(`${labelFor("scout")} for this launch only; the saved default stays ${labelFor(savedVariant ?? "default")}.`)}
+        `  ${color8.dim(`${labelFor("scout")} for this launch only; the saved default stays ${labelFor(savedVariant ?? "default")}.`)}
 `
       );
       return { variant: chosen, aborted: false, changed: true };
@@ -1978,1294 +1853,1531 @@ async function maybeRunSystemPromptMenu(opts) {
   }
 }
 
-// src/boot-config.ts
-import { bootConfig as coreBootConfig } from "@wrongstack/core/infrastructure";
-async function bootConfig(flags) {
-  const isWebui = !!flags["webui"];
-  const opts = {
-    flags,
-    appLabel: "wstack",
-    ...isWebui ? { skipIdentityValidation: true } : {}
-  };
-  const { cwd, projectRoot, userHome, wpaths, pathResolver, config, vault } = await coreBootConfig(opts);
-  return {
-    paths: { cwd, projectRoot, userHome, wpaths, pathResolver },
-    config,
-    vault
-  };
-}
-
-// src/input-reader.ts
-import * as fs7 from "node:fs/promises";
-import * as path8 from "node:path";
-import * as readline from "node:readline";
+// src/boot-provider-selection.ts
+import * as fs6 from "node:fs/promises";
+import { createRequire as createRequire4 } from "node:module";
+import * as path7 from "node:path";
+import { fileURLToPath } from "node:url";
 import {
-  resolveWstackPaths,
-  setOutputLineGuard,
-  setRawMode as setRawMode2,
-  writeOut
+  color as color9,
+  moduleUrlFor,
+  toErrorMessage as toErrorMessage4,
+  wrongstackPackageJsonPath as wrongstackPackageJsonPath3
 } from "@wrongstack/core/utils";
-var ReadlineInputReader = class {
-  rl;
-  historyFile;
-  history = [];
-  pending = false;
-  suppressNextHistory = false;
-  constructor(opts = {}) {
-    this.historyFile = opts.historyFile ?? resolveWstackPaths({ projectRoot: process.cwd() }).historyFile;
+import { isSetupProvider } from "@wrongstack/providers";
+function resolveBundledOverlayFile() {
+  try {
+    return fileURLToPath(
+      new URL("../data/providers.json", moduleUrlFor(import.meta.url, "@wrongstack/cli"))
+    );
+  } catch {
+    return void 0;
   }
-  async loadHistory() {
-    try {
-      const raw = await fs7.readFile(this.historyFile, "utf8");
-      this.history = raw.split("\n").filter(Boolean).slice(-1e3);
-    } catch {
-      this.history = [];
-    }
+}
+async function validateSavedProviderModel(config, modelsRegistry) {
+  const providerId = config.provider;
+  const modelId = config.model;
+  if (!providerId || !modelId) return { ok: false, reason: "missing provider/model" };
+  if (isSetupProvider(providerId)) return { ok: true };
+  const saved = config.providers?.[providerId];
+  const lookupId = saved?.type && saved.type !== providerId ? saved.type : providerId;
+  const catalogProvider = await modelsRegistry.getProvider(lookupId).catch(() => void 0);
+  if (!catalogProvider && !saved?.family)
+    return { ok: false, reason: `provider "${providerId}" is no longer available` };
+  const hasCredential = (catalogProvider?.envVars ?? saved?.envVars ?? []).some(
+    (envVar) => Boolean(process.env[envVar])
+  ) || saved !== void 0 && resolveActiveApiKey(saved) !== void 0 || isKeylessLocalProvider({
+    apiBase: saved?.baseUrl ?? catalogProvider?.apiBase,
+    envVars: saved?.envVars ?? catalogProvider?.envVars
+  });
+  if (!hasCredential) return { ok: false, reason: `provider "${providerId}" has no usable key` };
+  const visible = visibleModelIds(
+    providerId,
+    config,
+    (catalogProvider?.models ?? []).map((m) => m.id),
+    saved
+  );
+  if (visible.length > 0 && !visible.includes(modelId)) {
+    return {
+      ok: false,
+      reason: `model "${modelId}" is no longer available for provider "${providerId}"`
+    };
   }
-  async saveHistory() {
-    try {
-      await fs7.mkdir(path8.dirname(this.historyFile), { recursive: true });
-      await fs7.writeFile(this.historyFile, this.history.slice(-1e3).join("\n"));
-    } catch {
+  return { ok: true };
+}
+async function autoSelectSavedProvider(config, modelsRegistry) {
+  const providers = config.providers ?? {};
+  const entries = config.provider && providers[config.provider] ? [[config.provider, providers[config.provider]]] : Object.entries(providers);
+  for (const [id, cfg] of entries) {
+    if (!cfg) continue;
+    let model = cfg.models?.[0];
+    if (!model) {
+      const catalogId = cfg.type && cfg.type !== id ? cfg.type : id;
+      const catalog = await modelsRegistry.getProvider(catalogId).catch(() => void 0);
+      model = catalog?.models?.[0]?.id;
     }
+    if (model) return { provider: id, model };
   }
-  shouldPersistHistory(line) {
-    return !/^\s*\/(?:telegram-setup|tg-setup)\s+\d+:[A-Za-z0-9_-]+(?:\s|$)/i.test(line);
+  return void 0;
+}
+function resolveBundledSkillsDir2() {
+  try {
+    const req = createRequire4(import.meta.url);
+    const corePkg = wrongstackPackageJsonPath3("@wrongstack/core", (id) => req.resolve(id));
+    return path7.join(path7.dirname(corePkg), "skills");
+  } catch {
+    return void 0;
   }
-  ensure() {
-    if (!this.rl) {
-      this.rl = readline.createInterface({
-        input: process.stdin,
-        output: process.stdout,
-        history: this.history,
-        terminal: process.stdin.isTTY
-      });
-    }
-    return this.rl;
+}
+function resolveBundledPromptsDir2() {
+  try {
+    const req = createRequire4(import.meta.url);
+    const corePkg = wrongstackPackageJsonPath3("@wrongstack/core", (id) => req.resolve(id));
+    return path7.join(path7.dirname(corePkg), "data", "prompts");
+  } catch {
+    return void 0;
   }
-  async readLine(prompt, timeoutOpts) {
-    if (this.history.length === 0) await this.loadHistory();
-    while (this.pending) {
-      await new Promise((resolve3) => setTimeout(resolve3, 50));
-    }
-    this.pending = true;
-    try {
-      if (this.rl) {
-        const old = this.rl;
-        this.rl = void 0;
-        await new Promise((resolve3) => {
-          if (old.closed) {
-            resolve3();
-          } else {
-            old.once("close", resolve3);
-            old.close();
-          }
+}
+function isHomeDirectory(cwd, userHome) {
+  if (!cwd || !userHome) return false;
+  return path7.resolve(cwd) === path7.resolve(userHome);
+}
+function shouldPrintYoloNotice(lastChoices, yoloPinned, yolo) {
+  return !lastChoices && yoloPinned === void 0 && yolo;
+}
+async function checkGitInCwd(opts) {
+  const { cwd, renderer, reader } = opts;
+  const cwdGit = path7.join(cwd, ".git");
+  let hasCwdGit = false;
+  try {
+    await fs6.access(cwdGit);
+    hasCwdGit = true;
+  } catch {
+  }
+  if (!hasCwdGit) {
+    renderer.write(
+      `
+  ${color9.amber("\u25CB")} This folder has no ${color9.bold(".git")} repository.
+`
+    );
+    const answer = (await reader.readLine(`  ${color9.amber("?")} Initialize one here? ${color9.dim("[y/N]")} `)).trim().toLowerCase();
+    if (answer === "y" || answer === "yes") {
+      try {
+        const { spawn: spawn2 } = await import("node:child_process");
+        await new Promise((resolve3, reject) => {
+          const child = spawn2("git", ["init"], {
+            cwd,
+            signal: AbortSignal.timeout(1e4),
+            windowsHide: true
+          });
+          child.on("error", reject);
+          child.on(
+            "close",
+            (code) => code === 0 ? resolve3() : reject(new Error(`git init failed with ${code}`))
+          );
         });
-      }
-      const fresh = this.ensure();
-      this.installPromptGuard(fresh);
-      const line = await new Promise((resolve3) => {
-        let settled = false;
-        let timeoutHandle;
-        const settle = (line2) => {
-          if (settled) return;
-          settled = true;
-          if (timeoutHandle) clearTimeout(timeoutHandle);
-          setOutputLineGuard(null);
-          resolve3(line2);
-        };
-        if (timeoutOpts) {
-          timeoutHandle = setTimeout(() => {
-            if (!settled) {
-              fresh.write(`${timeoutOpts.defaultAnswer}
+        renderer.write(`  ${color9.green("\u2713")} Git repository initialized
 `);
-            }
-          }, timeoutOpts.timeoutMs);
-        }
-        fresh.question(prompt ?? "> ", (line2) => {
-          const persistHistory = !this.suppressNextHistory && this.shouldPersistHistory(line2);
-          this.suppressNextHistory = false;
-          if (line2.trim() && persistHistory) {
-            this.history.push(line2);
-            this.saveHistory().then(void 0, () => {
-            });
-          }
-          settle(line2);
-        });
-        fresh.once("close", () => settle(""));
-        fresh.on?.("error", (_e) => settle(""));
-      }).then((result) => {
-        if (this.rl === fresh) this.rl = void 0;
-        fresh.close();
-        return result;
-      });
-      return line;
-    } finally {
-      this.pending = false;
+        hasCwdGit = true;
+      } catch (err) {
+        renderer.writeError(`git init failed: ${toErrorMessage4(err)}
+`);
+      }
     }
   }
-  /**
-   * Install the out-of-band write guard for the active prompt. When a log
-   * line or other async output lands while the user is mid-type, the guard
-   * clears the draft row, lets the message print, then repaints the prompt
-   * and the in-progress draft (cursor preserved) via readline's own
-   * refresh. Without it, each async write leaves the half-typed line
-   * stranded as a fresh scrollback row.
-   *
-   * No-op on non-TTY output (piped/redirected) — there's no draft to
-   * protect and the ANSI clear/repaint would be noise in a file.
-   */
-  installPromptGuard(rl) {
-    const out = process.stdout;
-    if (!out.isTTY) {
-      setOutputLineGuard(null);
-      return;
+  const parentDir = path7.dirname(cwd);
+  if (parentDir !== cwd) {
+    try {
+      await fs6.access(path7.join(parentDir, ".git"));
+      renderer.write(
+        `  ${color9.dim("\u2139")} A ${color9.bold(".git")} repo exists in the parent directory: ${color9.dim(parentDir)}
+`
+      );
+    } catch {
     }
-    setOutputLineGuard({
-      suspend() {
-        readline.cursorTo(out, 0);
-        readline.clearLine(out, 0);
+  }
+}
+
+// src/boot-launch-choices.ts
+async function applyBootLaunchChoices(input) {
+  let { config } = input;
+  const {
+    isInteractiveTTY,
+    simpleUiFullAuto,
+    flags,
+    renderer,
+    reader,
+    profileConfigPath,
+    wpaths,
+    projectRoot
+  } = input;
+  if (isInteractiveTTY) {
+    const promptMenu = await maybeRunSystemPromptMenu({
+      isInteractiveTTY,
+      flags,
+      renderer,
+      reader,
+      profileConfigPath,
+      paths: {
+        globalDir: wpaths.globalInstructions,
+        projectDir: wpaths.inProjectInstructions
       },
-      resume() {
-        try {
-          rl.prompt(true);
-        } catch {
-        }
-      }
+      outsideProject: await isOutsideProject(projectRoot)
     });
-  }
-  async readKey(prompt, options, opts = {}) {
-    setOutputLineGuard(null);
-    const signal = opts.signal;
-    if (signal?.aborted) return "";
-    writeOut(prompt);
-    return new Promise((resolve3) => {
-      const stdin = process.stdin;
-      const wasRaw = stdin.isRaw;
-      const wasPaused = stdin.isPaused();
-      setRawMode2(stdin, true);
-      stdin.resume();
-      const onData = (buf) => {
-        const key = buf.toString();
-        if (key === "") {
-          cleanup();
-          writeOut("\n");
-          resolve3("");
-          return;
-        }
-        const opt = options.find(
-          (o) => o.key.toLowerCase() === key.toLowerCase() || o.value === key
-        );
-        if (opt) {
-          cleanup();
-          writeOut(`${opt.key}
-`);
-          resolve3(opt.value);
-        }
-      };
-      const onClose = () => {
-        cleanup();
-        resolve3("");
-      };
-      const onAbort = () => {
-        cleanup();
-        writeOut("\n");
-        resolve3("");
-      };
-      const cleanup = () => {
-        stdin.off("data", onData);
-        stdin.off("close", onClose);
-        signal?.removeEventListener("abort", onAbort);
-        setRawMode2(stdin, wasRaw);
-        if (wasPaused) stdin.pause();
-      };
-      stdin.on("data", onData);
-      stdin.on("close", onClose);
-      signal?.addEventListener("abort", onAbort, { once: true });
-    });
-  }
-  /**
-   * Read a line of input while masking each character with a bullet so the
-   * user gets visual confirmation that bytes are arriving (especially on
-   * paste, which previously felt like nothing happened). Pasted chunks
-   * are echoed as a run of bullets, Backspace/DEL erases one bullet, and
-   * Ctrl+U / Ctrl+T are honored. Non-TTY input is read normally — there's
-   * nothing to hide when piped, and echoing bullets to a file is noise.
-   *
-   * Returns the raw entered string (no trim — caller decides).
-   */
-  async readSecret(prompt) {
-    const stdin = process.stdin;
-    if (!stdin.isTTY) {
-      this.suppressNextHistory = true;
-      return this.readLine(prompt);
+    if (promptMenu.aborted) {
+      await reader.close();
+      return { kind: "exit", code: 0 };
     }
-    setOutputLineGuard(null);
-    this.rl?.close();
-    this.rl = void 0;
-    writeOut(prompt);
-    return new Promise((resolve3) => {
-      let buf = "";
-      const wasRaw = stdin.isRaw;
-      const cleanup = () => {
-        stdin.off("data", onData);
-        setRawMode2(stdin, wasRaw);
-        stdin.pause();
-      };
-      try {
-        setRawMode2(stdin, true);
-        stdin.resume();
-        stdin.setEncoding("utf8");
-      } catch (setupErr) {
-        setRawMode2(stdin, wasRaw);
-        stdin.pause();
-        throw setupErr;
-      }
-      const eraseChar = () => {
-        writeOut("\b \b");
-      };
-      const eraseAll = () => {
-        for (let i = 0; i < buf.length; i++) eraseChar();
-      };
-      let escState = 0;
-      const onData = (chunk) => {
-        for (const ch of chunk) {
-          if (escState === 1) {
-            escState = ch === "[" ? 2 : ch === "O" ? 3 : 0;
-            continue;
-          }
-          if (escState === 2) {
-            if (ch >= "@" && ch <= "~") escState = 0;
-            continue;
-          }
-          if (escState === 3) {
-            escState = 0;
-            continue;
-          }
-          if (ch === "\x1B") {
-            escState = 1;
-            continue;
-          }
-          if (ch === "\r" || ch === "\n") {
-            cleanup();
-            writeOut(`  ${dim(`[${buf.length} chars]`)}
-`);
-            resolve3(buf);
-            return;
-          }
-          if (ch === "") {
-            cleanup();
-            writeOut("\n");
-            resolve3("");
-            return;
-          }
-          if (ch === "") {
-            eraseAll();
-            buf = "";
-            continue;
-          }
-          if (ch === "") {
-            const m = buf.match(/(\S+\s*)$/);
-            const drop = m ? m[0].length : buf.length;
-            for (let i = 0; i < drop; i++) eraseChar();
-            buf = buf.slice(0, buf.length - drop);
-            continue;
-          }
-          if (ch === "\x7F" || ch === "\b") {
-            if (buf.length > 0) {
-              buf = buf.slice(0, -1);
-              eraseChar();
-            }
-            continue;
-          }
-          if (ch < " ") continue;
-          buf += ch;
-          writeOut("\u2022");
-        }
-        if (escState === 1) escState = 0;
-      };
-      stdin.on("data", onData);
-    });
-  }
-  async close() {
-    setOutputLineGuard(null);
-    await this.saveHistory();
-    this.rl?.close();
-    this.rl = void 0;
-  }
-};
-function dim(s) {
-  if (!process.stdout.isTTY) return s;
-  return `\x1B[2m${s}\x1B[22m`;
-}
-
-// src/renderer.ts
-import { color as color10 } from "@wrongstack/core/utils";
-var TerminalRenderer = class _TerminalRenderer {
-  out;
-  err;
-  lineStart = true;
-  /** When true, stdout-bound rendering is disabled (for non-terminal UI surfaces). */
-  silent = false;
-  /**
-   * When true, Ink exclusively owns the terminal. Both stdout and stderr
-   * rendering must be disabled: either stream can interleave with Ink's
-   * cursor updates and make the TUI flicker or leave stray debug notes.
-   */
-  tuiActive = false;
-  /**
-   * Per-tool on-screen result render mode. Defaults to `'extend'` so
-   * existing callers without `setResultRenderMode` see full content.
-   * `setResultRenderMode(name, mode)` overrides the entry for `name`; the
-   * override is one-shot for that name (the default reasserts after the
-   * next write) so callers can set the mode right before each tool call
-   * without leaking state across unrelated tool calls.
-   */
-  renderModes = /* @__PURE__ */ new Map();
-  /** Mode applied when no entry is set for a given tool name. */
-  static DEFAULT_RENDER_MODE = "extend";
-  /** Maximum number of one-shot hints retained when callers abandon a result. */
-  static MAX_RENDER_MODES = 256;
-  /** Lines kept per tool family in `extend` mode. */
-  static EXTEND_PREVIEW_LINES = 10;
-  constructor(opts = {}) {
-    this.out = opts.out ?? process.stdout;
-    this.err = opts.err ?? process.stderr;
-  }
-  /**
-   * Toggle stdout suppression for non-terminal UI surfaces such as WebUI.
-   * Diagnostics continue to flow to stderr. Idempotent.
-   */
-  setSilent(silent) {
-    this.silent = silent;
-  }
-  isSilent() {
-    return this.silent;
-  }
-  /**
-   * Toggle exclusive TUI ownership of both terminal streams. Unlike
-   * {@link setSilent}, TUI mode suppresses stderr as well as stdout and clears
-   * any CLI-only result mode staged before Ink took ownership. While active,
-   * new result-mode hints are ignored. The two flags compose with OR semantics
-   * for stdout suppression only; TUI ownership adds the other behaviors.
-   * Enable immediately before starting Ink and disable in the paired
-   * `finally`, only after the TUI has fully exited.
-   */
-  setTuiActive(active) {
-    if (active) this.renderModes.clear();
-    this.tuiActive = active;
-  }
-  isTuiActive() {
-    return this.tuiActive;
-  }
-  suppressStdout() {
-    return this.silent || this.tuiActive;
-  }
-  setResultRenderMode(name, mode) {
-    if (this.suppressStdout()) return;
-    if (this.renderModes.delete(name)) {
-      this.renderModes.set(name, mode);
-      return;
+    if (promptMenu.changed && promptMenu.variant) {
+      config = patchConfig(config, { systemPrompt: { variant: promptMenu.variant } });
     }
-    if (this.renderModes.size >= _TerminalRenderer.MAX_RENDER_MODES) {
-      const oldestName = this.renderModes.keys().next().value;
-      if (oldestName !== void 0) this.renderModes.delete(oldestName);
+    if (promptMenu.persistError) {
+      renderer.writeWarning(
+        `Could not save system prompt variant to config: ${toErrorMessage5(promptMenu.persistError)}
+`
+      );
     }
-    this.renderModes.set(name, mode);
-  }
-  getRenderMode(name) {
-    return this.renderModes.get(name) ?? _TerminalRenderer.DEFAULT_RENDER_MODE;
-  }
-  clearRenderMode(name) {
-    this.renderModes.delete(name);
-  }
-  write(input) {
-    if (this.suppressStdout()) return;
-    const text = typeof input === "string" ? input : input.text;
-    if (!text) return;
-    const rendered = renderMarkdown(text);
-    this.out.write(rendered);
-    this.lineStart = rendered.endsWith("\n");
-  }
-  writeLine(text = "") {
-    if (this.suppressStdout()) return;
-    if (!this.lineStart) this.out.write("\n");
-    if (text) this.out.write(`${text}
-`);
-    else this.out.write("\n");
-    this.lineStart = true;
-  }
-  writeBlock(block) {
-    if (block.type === "tool_result") {
-      const text = typeof block.content === "string" ? block.content : JSON.stringify(block.content);
-      this.writeToolResult(block.name ?? "result", text, !!block.is_error);
-      return;
+    let modePinned;
+    if (flags["no-tui"]) modePinned = "repl";
+    else if (flags["tui"]) modePinned = "tui";
+    const yoloPinned = flags["no-yolo"] === true ? false : flags["yolo"] === true ? true : void 0;
+    let autonomyPinned;
+    if (flags["no-autonomy"] === true) autonomyPinned = "off";
+    else if (typeof flags["eternal"] === "string" && flags["eternal"].trim() !== "")
+      autonomyPinned = "off";
+    else if (typeof flags["autonomy"] === "string") {
+      const v = flags["autonomy"].toLowerCase();
+      autonomyPinned = v === "off" || v === "no" || v === "false" ? "off" : "auto";
+    } else if (flags["autonomy"] === true) {
+      autonomyPinned = "auto";
     }
-    if (this.suppressStdout()) return;
-    if (block.type === "text") {
-      this.write(block);
-    } else if (block.type === "tool_use") {
-      this.writeToolCall(block.name, block.input);
+    const lastChoices = config.launch ? {
+      mode: config.launch.mode ?? "tui",
+      yolo: config.yolo ?? true,
+      autonomy: config.launch.autonomy ?? "auto"
+    } : void 0;
+    let choices;
+    try {
+      choices = await runLaunchPrompts({
+        renderer,
+        reader,
+        modePinned,
+        yoloPinned,
+        autonomyPinned,
+        lastChoices
+      });
+    } catch (err) {
+      if (err instanceof LaunchAbortedError) {
+        await reader.close();
+        return { kind: "exit", code: 0 };
+      }
+      throw err;
     }
-  }
-  writeToolCall(name, input) {
-    if (this.suppressStdout()) return;
-    if (!this.lineStart) this.out.write("\n");
-    const arrow = theme2.primary("\u2192");
-    const display = formatInputSummary(input);
-    this.out.write(`${arrow} ${theme2.bold(name)}${display ? color10.dim(` ${display}`) : ""}
-`);
-    this.lineStart = true;
-  }
-  writeToolResult(name, content, isError) {
-    if (this.suppressStdout()) {
-      this.clearRenderMode(name);
-      return;
+    if (choices.mode === "tui") {
+      flags["tui"] = true;
+      flags["no-tui"] = false;
+    } else {
+      flags["tui"] = false;
+      flags["no-tui"] = true;
     }
-    const txt = typeof content === "string" ? content : safeStringify(content);
-    const prefix = isError ? theme2.error("\u2718") : theme2.success("\u2713");
-    const renderMode = this.getRenderMode(name);
-    this.clearRenderMode(name);
-    const bodyText = extractBodyText(content, name);
-    if (isError) {
-      const firstLine = txt.split("\n")[0] ?? "";
-      const truncated = firstLine.length > 200 ? `${firstLine.slice(0, 197)}\u2026` : firstLine;
-      this.out.write(`  ${prefix} ${color10.dim(truncated)}
-`);
-      this.lineStart = true;
-      return;
+    if (choices.yolo !== config.yolo) config = patchConfig(config, { yolo: choices.yolo });
+    flags["autonomy"] = choices.autonomy;
+    if (shouldPrintYoloNotice(lastChoices, yoloPinned, choices.yolo)) {
+      writeErr(
+        `
+  ${color10.yellow("YOLO is on")}: non-denied tool calls, including shell and file writes, run without confirmation.
+  ${color10.dim("Damaging calls and calls your deny rules forbid still ask. Use")} --no-yolo ${color10.dim("or")} /yolo off ${color10.dim("to require prompts.")}
+
+`
+      );
     }
-    const isEditLike = name === "edit" || name === "write";
-    const diff = extractDiff(content);
-    if (isEditLike && diff) {
-      this.out.write(`  ${prefix} ${color10.dim(summarize(content, name))}
-`);
-      const rendered = renderDiff(diff).split("\n").map((l) => `      ${l}`).join("\n");
-      this.out.write(`${rendered}
-`);
-      this.lineStart = true;
-      return;
+    if ((flags["skip-index"] || flags["skip"]) && config.indexing) {
+      config = patchConfig(config, {
+        indexing: { ...config.indexing, onSessionStart: false }
+      });
     }
-    const summary = summarize(content, name);
-    const isReadLike = name === "read" || name === "grep" || name === "glob" || name === "bash" || name === "exec";
-    if (renderMode === "simple") {
-      this.out.write(`  ${prefix} ${color10.dim(summary || compactSingleLine(bodyText))}
-`);
-      this.lineStart = true;
-      return;
+    if (!simpleUiFullAuto) {
+      try {
+        const toPersist = flags["webui"] ? { ...choices, mode: lastChoices?.mode ?? config.launch?.mode ?? "tui" } : choices;
+        await persistLaunchChoices(profileConfigPath, toPersist);
+      } catch {
+      }
     }
-    const previewLines = isEditLike ? 0 : isReadLike ? _TerminalRenderer.EXTEND_PREVIEW_LINES : 2;
-    const lines = bodyText.split("\n");
-    const head = lines.slice(0, previewLines).map((l) => l.replace(/\s+$/, ""));
-    const moreCount = Math.max(0, lines.length - head.length);
-    this.out.write(`  ${prefix} ${color10.dim(summary)}
+  } else {
+    const nonInteractiveAutonomy = !simpleUiFullAuto && (flags["no-autonomy"] === true || config.autonomy?.defaultMode === "off") ? "off" : "auto";
+    const effectiveChoices = config.launch ? {
+      mode: flags["no-tui"] ? "repl" : config.launch.mode ?? "tui",
+      yolo: config.yolo ?? true,
+      autonomy: nonInteractiveAutonomy
+    } : {
+      mode: "repl",
+      yolo: true,
+      autonomy: nonInteractiveAutonomy
+    };
+    if (effectiveChoices.mode === "repl") {
+      flags["tui"] = false;
+      flags["no-tui"] = true;
+    }
+    flags["autonomy"] = effectiveChoices.autonomy;
+  }
+  return { kind: "ok", config };
+}
+
+// src/boot-provider-gate.ts
+import { color as color11, isStdinTTY as isStdinTTY2, toErrorMessage as toErrorMessage6, writeErr as writeErr2 } from "@wrongstack/core/utils";
+import { isSetupProvider as isSetupProvider2, SETUP_MODEL_ID, SETUP_PROVIDER_ID } from "@wrongstack/providers";
+async function resolveBootProviderModel(input) {
+  let { config, vault } = input;
+  const { flags, modelsRegistry, renderer, reader, profileConfigPath, noInteractiveMode } = input;
+  const providerFlag = typeof flags["provider"] === "string" ? flags["provider"] : void 0;
+  const modelFlag = typeof flags["model"] === "string" ? flags["model"] : void 0;
+  if (noInteractiveMode && (!config.provider || !config.model)) {
+    if (providerFlag && modelFlag) {
+      config = patchConfig(config, { provider: providerFlag, model: modelFlag });
+    } else {
+      const picked = await autoSelectSavedProvider(config, modelsRegistry);
+      if (picked) config = patchConfig(config, picked);
+    }
+  }
+  if (!(!!providerFlag && !!modelFlag)) {
+    if (isStdinTTY2() && !noInteractiveMode) {
+      let picked;
+      let skipPicker = false;
+      if (isSetupProvider2(config.provider)) {
+        skipPicker = true;
+        renderer.write(
+          `
+  ${color11.amber("\u25B6")} ${color11.bold("Setup mode")} ${color11.dim("\u2014 no model connected. Run")} ${color11.bold("/auth")} ${color11.dim("to connect one.")}
+
+`
+        );
+      } else if (!await hasAnyCredential(config, modelsRegistry)) {
+        const outcome = await runFirstRunSetup({
+          renderer,
+          reader,
+          modelsRegistry,
+          vault,
+          profileConfigPath,
+          reloadConfig: async () => (await bootConfig(flags)).config
+        });
+        if (outcome.kind === "quit") {
+          await reader.close();
+          return { kind: "exit", code: 0 };
+        }
+        if (outcome.kind === "setup-mode") {
+          config = patchConfig(config, { provider: SETUP_PROVIDER_ID, model: SETUP_MODEL_ID });
+          await saveToGlobalConfig(profileConfigPath, SETUP_PROVIDER_ID, SETUP_MODEL_ID);
+          skipPicker = true;
+        } else {
+          try {
+            const reloaded = await bootConfig(flags);
+            config = reloaded.config;
+            vault = reloaded.vault;
+          } catch (err) {
+            writeErr2(`Config error after setup: ${toErrorMessage6(err)}
 `);
-    for (const l of head) {
-      const capped = l.length > 200 ? `${l.slice(0, 197)}\u2026` : l;
-      this.out.write(`      ${color10.dim(capped)}
+            await reader.close();
+            return { kind: "exit", code: 2 };
+          }
+        }
+      }
+      const savedProvider = config.provider;
+      const savedModel = config.model;
+      if (!skipPicker && savedProvider && savedModel) {
+        const savedStatus = await validateSavedProviderModel(config, modelsRegistry);
+        renderer.write(
+          `
+  ${color11.dim("Last settings:")} ${color11.bold(savedProvider)} / ${color11.bold(savedModel)}
+`
+        );
+        if (!savedStatus.ok) {
+          renderer.writeWarning(
+            `Saved provider/model is no longer usable (${savedStatus.reason ?? "unknown reason"}); choose a provider.
+`
+          );
+        } else {
+          const answer = (await reader.readLine(
+            `  ${color11.amber("?")} Continue with these? ${color11.dim("[Y/n/q]")} ${color11.dim("(auto Y in 5s)")} `,
+            { timeoutMs: 5e3, defaultAnswer: "y" }
+          )).trim().toLowerCase();
+          if (answer === "q") {
+            renderer.write(color11.dim("  Goodbye!\n"));
+            await reader.close();
+            return { kind: "exit", code: 0 };
+          }
+          if (answer !== "n" && answer !== "no") {
+            skipPicker = true;
+            renderer.write(
+              `
+  ${color11.green("\u25B6")} ${color11.bold(savedProvider)} / ${color11.bold(savedModel)}
+
+`
+            );
+          }
+        }
+      }
+      if (!skipPicker) {
+        picked = await runPicker({
+          modelsRegistry,
+          renderer,
+          reader,
+          config,
+          defaultProvider: providerFlag ?? config.provider,
+          defaultModel: modelFlag ?? config.model
+        });
+      }
+      if (!picked && !skipPicker) {
+        if (!config.provider || !config.model) {
+          renderer.write(
+            `
+  ${color11.dim("No provider selected.")}
+  ${color11.dim("Run")} ${color11.bold("wstack auth")} ${color11.dim("to add a key or sign in, or start with no model:")}
+  ${color11.bold(`wstack --provider ${SETUP_PROVIDER_ID} --model ${SETUP_MODEL_ID}`)}
+
+`
+          );
+          await reader.close();
+          return { kind: "exit", code: 2 };
+        }
+      }
+      if (picked) {
+        const prevProvider = config.provider;
+        const prevModel = config.model;
+        const prevEffort = config.modelRuntime?.reasoning?.effort;
+        config = patchConfig(config, {
+          provider: picked.provider,
+          model: picked.model,
+          ...picked.effort ? {
+            modelRuntime: {
+              ...config.modelRuntime,
+              reasoning: { ...config.modelRuntime?.reasoning, effort: picked.effort }
+            }
+          } : {}
+        });
+        const effortChanged = picked.effort !== void 0 && picked.effort !== prevEffort;
+        if (picked.provider !== prevProvider || picked.model !== prevModel || effortChanged) {
+          const label = `${picked.provider}/${picked.model}${picked.effort ? ` (effort ${picked.effort})` : ""}`;
+          const saved = await saveToGlobalConfig(profileConfigPath, picked.provider, picked.model, {
+            effort: picked.effort
+          });
+          if (saved) {
+            renderer.writeInfo(`Saved ${label} as default.
 `);
-    }
-    if (moreCount > 0) {
-      this.out.write(
-        `      ${color10.dim(`+${moreCount} more line${moreCount === 1 ? "" : "s"}`)}
+          } else {
+            renderer.writeWarning(
+              `Could not save ${label} to config. Check permissions or disk space.
+`
+            );
+          }
+        }
+      }
+    } else if (!config.provider || !config.model) {
+      writeErr2(
+        `No provider or model configured. Run \`wstack auth\`, or pass --provider <id> --model <id>.
+To start the app with no model connected, pass --provider ${SETUP_PROVIDER_ID} --model ${SETUP_MODEL_ID}.
 `
       );
+      await reader.close();
+      return { kind: "exit", code: 2 };
+    } else {
+      const savedStatus = await validateSavedProviderModel(config, modelsRegistry);
+      if (!savedStatus.ok) {
+        writeErr2(
+          `Saved provider/model is no longer usable (${savedStatus.reason ?? "unknown reason"}). Run \`wstack auth\` or pass --provider <id> --model <id>.
+`
+        );
+        await reader.close();
+        return { kind: "exit", code: 2 };
+      }
     }
-    this.lineStart = true;
   }
-  writeDiff(diff) {
-    if (this.suppressStdout()) return;
-    if (!this.lineStart) this.out.write("\n");
-    this.out.write(`${renderDiff(diff)}
-`);
-    this.lineStart = true;
+  return { kind: "ok", config, vault };
+}
+
+// src/boot-subcommand-dispatch.ts
+import { TOKENS as TOKENS2 } from "@wrongstack/core/kernel";
+import { ToolRegistry } from "@wrongstack/core/registry";
+import { normalizeTokenSavingTier } from "@wrongstack/core/types";
+import { createDefaultContainer as createDefaultContainer2 } from "@wrongstack/runtime";
+import { registerBuiltinToolTier } from "@wrongstack/tools/tool-tier";
+async function dispatchBootSubcommand(input) {
+  const {
+    first,
+    positional,
+    flags,
+    config,
+    vault,
+    wpaths,
+    cwd,
+    projectRoot,
+    userHome,
+    renderer,
+    reader,
+    logger,
+    modelsRegistry
+  } = input;
+  const subcommandHandler = first ? subcommands[first] : void 0;
+  if (first && subcommandHandler) {
+    if (flags["help"] === true || flags["h"] === true) {
+      const deepSub = positional[1];
+      if (deepSub && renderDeepHelp(`${first}:${deepSub}`, renderer)) {
+        await reader.close();
+        return 0;
+      }
+      if (renderFocusedHelp(first, renderer)) {
+        await reader.close();
+        return 0;
+      }
+    }
+    const container = createDefaultContainer2({
+      config,
+      wpaths,
+      logger,
+      modelsRegistry,
+      bundledSkillsDir: config.features.skills ? resolveBundledSkillsDir2() : void 0,
+      bundledPromptsDir: config.features.prompts === false ? void 0 : resolveBundledPromptsDir2()
+    });
+    const sessionStore = container.resolve(TOKENS2.SessionStore);
+    const skillLoader = container.resolve(TOKENS2.SkillLoader);
+    const toolRegistryForSubcmd = new ToolRegistry();
+    registerBuiltinToolTier({
+      registry: toolRegistryForSubcmd,
+      tier: normalizeTokenSavingTier(config.features.tokenSavingMode)
+    });
+    const code = await subcommandHandler(positional.slice(1), {
+      config,
+      renderer,
+      reader,
+      sessionStore,
+      skillLoader,
+      toolRegistry: toolRegistryForSubcmd,
+      modelsRegistry,
+      paths: wpaths,
+      vault,
+      cwd,
+      projectRoot,
+      userHome,
+      flags
+    });
+    await reader.close();
+    return code;
   }
-  writeWarning(text) {
-    if (this.tuiActive) return;
-    this.err.write(`${theme2.warn("\u26A0")} ${text}
-`);
+  return void 0;
+}
+
+// src/input-reader.ts
+import * as fs7 from "node:fs/promises";
+import * as path8 from "node:path";
+import * as readline from "node:readline";
+import {
+  resolveWstackPaths,
+  setOutputLineGuard,
+  setRawMode as setRawMode2,
+  writeOut
+} from "@wrongstack/core/utils";
+var ReadlineInputReader = class {
+  rl;
+  historyFile;
+  history = [];
+  pending = false;
+  suppressNextHistory = false;
+  constructor(opts = {}) {
+    this.historyFile = opts.historyFile ?? resolveWstackPaths({ projectRoot: process.cwd() }).historyFile;
   }
-  writeError(text) {
-    if (this.tuiActive) return;
-    this.err.write(`${theme2.error("\u2718")} ${text}
-`);
+  async loadHistory() {
+    try {
+      const raw = await fs7.readFile(this.historyFile, "utf8");
+      this.history = raw.split("\n").filter(Boolean).slice(-1e3);
+    } catch {
+      this.history = [];
+    }
   }
-  writeInfo(text) {
-    if (this.tuiActive) return;
-    this.err.write(`${theme2.info("\u2139")} ${text}
-`);
+  async saveHistory() {
+    try {
+      await fs7.mkdir(path8.dirname(this.historyFile), { recursive: true });
+      await fs7.writeFile(this.historyFile, this.history.slice(-1e3).join("\n"));
+    } catch {
+    }
   }
-  /**
-   * Write text to stderr verbatim: no glyph prefix, no markdown processing.
-   *
-   * Deliberately stricter than writeWarning/writeError/writeInfo, which emit
-   * *diagnostics* and are suppressed only when a TUI owns the terminal (so
-   * they survive silent mode). This method is for informational mirrors of
-   * stdout output, where the stdout copy already carries the full content —
-   * in silent mode the operator asked for machine-only output, so the mirror
-   * is dropped rather than leaked onto a quieter stream. It therefore honors
-   * the full {@link suppressStdout} gate.
-   *
-   * Used by `wstack mailbox serve` to route the human-readable startup banner
-   * away from stdout, keeping the mailbox_serve_started JSON line cleanly
-   * pipeable (`mailbox serve | jq`).
-   */
-  writeStderr(text) {
-    if (this.suppressStdout()) return;
-    this.err.write(text);
+  shouldPersistHistory(line) {
+    return !/^\s*\/(?:telegram-setup|tg-setup)\s+\d+:[A-Za-z0-9_-]+(?:\s|$)/i.test(line);
   }
-  clear() {
-    if (this.suppressStdout()) return;
-    this.out.write("\x1B[2J\x1B[H");
-    this.lineStart = true;
+  ensure() {
+    if (!this.rl) {
+      this.rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+        history: this.history,
+        terminal: process.stdin.isTTY
+      });
+    }
+    return this.rl;
   }
-  /**
-   * Write a flashy agent completion banner for delegate tool results.
-   * Renders a box like:
-   * ┌─────────────────────────────────────┐
-   * │  ✓ [role] done in 4m 32s           │
-   * │    127 iterations · 341 tools        │
-   * │    Found 14 bugs across 6 files...   │
-   * └─────────────────────────────────────┘
-   */
-  writeAgentSummary(summary, ok) {
-    if (this.suppressStdout()) return;
-    if (!this.lineStart) this.out.write("\n");
-    const lines = summary.split("\n");
-    const icon = ok ? theme2.success("\u2713") : theme2.error("\u2718");
-    const firstLine = `${icon} ${lines[0] ?? summary}`;
-    const body = lines.slice(1);
-    const maxWidth = Math.min(process.stdout.columns ?? 80, 120);
-    const contentWidth = Math.max(
-      firstLine.length,
-      body.reduce((a, l) => Math.max(a, l.length), 0)
-    );
-    const boxWidth = Math.min(Math.max(contentWidth + 4, 44), maxWidth);
-    const thick = "\u2501".repeat(boxWidth - 2);
-    const thin = "\u2500".repeat(boxWidth - 2);
-    this.out.write(`
- ${theme2.primary("\u250C")}${thick}${theme2.primary("\u2510")}
-`);
-    const centre = (s) => {
-      const inner = ` ${s} `;
-      const padLen = Math.max(0, boxWidth - 2 - s.length);
-      const left = Math.floor(padLen / 2);
-      const right = padLen - left;
-      return `${" ".repeat(left)}${inner}${" ".repeat(right)}`;
-    };
-    this.out.write(` ${theme2.primary("\u2502")}${centre(firstLine)}${theme2.primary("\u2502")}
-`);
-    for (const l of body) {
-      this.out.write(
-        ` ${theme2.primary("\u2502")} ${l}${" ".repeat(Math.max(0, boxWidth - 3 - l.length))}${theme2.primary("\u2502")}
-`
-      );
+  async readLine(prompt, timeoutOpts) {
+    if (this.history.length === 0) await this.loadHistory();
+    while (this.pending) {
+      await new Promise((resolve3) => setTimeout(resolve3, 50));
     }
-    this.out.write(` ${theme2.primary("\u2514")}${thin}${theme2.primary("\u2518")}
+    this.pending = true;
+    try {
+      if (this.rl) {
+        const old = this.rl;
+        this.rl = void 0;
+        await new Promise((resolve3) => {
+          if (old.closed) {
+            resolve3();
+          } else {
+            old.once("close", resolve3);
+            old.close();
+          }
+        });
+      }
+      const fresh = this.ensure();
+      this.installPromptGuard(fresh);
+      const line = await new Promise((resolve3) => {
+        let settled = false;
+        let timeoutHandle;
+        const settle = (line2) => {
+          if (settled) return;
+          settled = true;
+          if (timeoutHandle) clearTimeout(timeoutHandle);
+          setOutputLineGuard(null);
+          resolve3(line2);
+        };
+        if (timeoutOpts) {
+          timeoutHandle = setTimeout(() => {
+            if (!settled) {
+              fresh.write(`${timeoutOpts.defaultAnswer}
 `);
-    this.lineStart = true;
+            }
+          }, timeoutOpts.timeoutMs);
+        }
+        fresh.question(prompt ?? "> ", (line2) => {
+          const persistHistory = !this.suppressNextHistory && this.shouldPersistHistory(line2);
+          this.suppressNextHistory = false;
+          if (line2.trim() && persistHistory) {
+            this.history.push(line2);
+            this.saveHistory().then(void 0, () => {
+            });
+          }
+          settle(line2);
+        });
+        fresh.once("close", () => settle(""));
+        fresh.on?.("error", (_e) => settle(""));
+      }).then((result) => {
+        if (this.rl === fresh) this.rl = void 0;
+        fresh.close();
+        return result;
+      });
+      return line;
+    } finally {
+      this.pending = false;
+    }
   }
   /**
-   * Render subagent completion banners from a RunResult.
-   * Uses `delegateSummaries` when available (populated by delegate tool),
-   * otherwise falls back to scanning message history.
+   * Install the out-of-band write guard for the active prompt. When a log
+   * line or other async output lands while the user is mid-type, the guard
+   * clears the draft row, lets the message print, then repaints the prompt
+   * and the in-progress draft (cursor preserved) via readline's own
+   * refresh. Without it, each async write leaves the half-typed line
+   * stranded as a fresh scrollback row.
+   *
+   * No-op on non-TTY output (piped/redirected) — there's no draft to
+   * protect and the ANSI clear/repaint would be noise in a file.
    */
-  writeDelegateSummaries(result) {
-    if (this.suppressStdout()) return;
-    if (result.delegateSummaries) {
-      for (const { summary, ok } of result.delegateSummaries) {
-        if (!summary) continue;
-        this.writeAgentSummary(summary, ok);
-      }
+  installPromptGuard(rl) {
+    const out = process.stdout;
+    if (!out.isTTY) {
+      setOutputLineGuard(null);
       return;
     }
-    if (!result.messages) return;
-    for (const msg of result.messages) {
-      const m = msg;
-      if (!Array.isArray(m.content)) continue;
-      for (const block of m.content) {
-        const b = block;
-        if (b.type !== "tool_result" || b.name !== "delegate") continue;
-        let obj;
+    setOutputLineGuard({
+      suspend() {
+        readline.cursorTo(out, 0);
+        readline.clearLine(out, 0);
+      },
+      resume() {
         try {
-          obj = typeof b.content === "string" ? JSON.parse(b.content) : b.content;
+          rl.prompt(true);
         } catch {
-          continue;
-        }
-        const o = obj;
-        if (o.summary) {
-          this.writeAgentSummary(o.summary, o.ok ?? true);
         }
       }
-    }
-  }
-};
-function renderMarkdown(s) {
-  let out = s;
-  out = out.replace(/^(#{1,6}) (.+)$/gm, (_m, hashes, text) => {
-    return theme2.primary(theme2.bold(`${hashes} ${text}`));
-  });
-  out = out.replace(/```([a-zA-Z0-9_+-]*)\n([\s\S]*?)```/g, (_m, _lang, code) => {
-    return color10.gray(`
-\u250C\u2500
-${code.replace(/^/gm, "\u2502 ")}\u2514\u2500`);
-  });
-  out = out.replace(/`([^`\n]+)`/g, (_m, code) => theme2.accent(code));
-  out = out.replace(/\*\*([^*]+)\*\*/g, (_m, text) => theme2.bold(text));
-  out = out.replace(
-    /(^|[^*])\*([^*\n]+)\*([^*]|$)/g,
-    (_m, l, t, r) => `${l}${color10.italic(t)}${r}`
-  );
-  return out;
-}
-function formatInputSummary(input) {
-  if (!input || typeof input !== "object") return "";
-  const obj = input;
-  if (typeof obj["path"] === "string") return obj["path"];
-  if (typeof obj["url"] === "string") return obj["url"];
-  if (typeof obj["command"] === "string") {
-    const cmd = obj["command"];
-    return cmd.length > 60 ? cmd.slice(0, 57) + "..." : cmd;
-  }
-  if (typeof obj["pattern"] === "string") return obj["pattern"];
-  return "";
-}
-function safeStringify(value) {
-  if (typeof value === "string") return value;
-  try {
-    return JSON.stringify(value);
-  } catch {
-    return String(value);
-  }
-}
-function extractBodyText(value, name) {
-  let v = value;
-  if (typeof value === "string") {
-    const trimmed = value.trimStart();
-    if (trimmed.startsWith("{") || trimmed.startsWith("[")) {
-      try {
-        v = JSON.parse(value);
-      } catch {
-        return value;
-      }
-    } else {
-      return value;
-    }
-  }
-  if (typeof v !== "object" || v === null) {
-    return safeStringify(value);
-  }
-  const o = v;
-  if (name === "read" && typeof o["text"] === "string") return o["text"];
-  if (name === "bash") {
-    const output = typeof o["output"] === "string" ? o["output"] : "";
-    const error = typeof o["error"] === "string" ? o["error"] : "";
-    if (output && error) return `${output}
-${error}`;
-    return output || error || "";
-  }
-  if (name === "exec") {
-    const stdout = typeof o["stdout"] === "string" ? o["stdout"] : "";
-    const stderr = typeof o["stderr"] === "string" ? o["stderr"] : "";
-    if (stdout && stderr) return `${stdout}
-${stderr}`;
-    return stdout || stderr || "";
-  }
-  return safeStringify(value);
-}
-function extractDiff(value) {
-  if (typeof value === "object" && value !== null) {
-    const d = value.diff;
-    if (typeof d === "string" && d.length > 0) return d;
+    });
   }
-  if (typeof value === "string") {
-    const trimmed = value.trimStart();
-    if (trimmed.startsWith("{")) {
-      try {
-        const parsed = JSON.parse(value);
-        if (typeof parsed.diff === "string" && parsed.diff.length > 0) {
-          return parsed.diff;
+  async readKey(prompt, options, opts = {}) {
+    setOutputLineGuard(null);
+    const signal = opts.signal;
+    if (signal?.aborted) return "";
+    writeOut(prompt);
+    return new Promise((resolve3) => {
+      const stdin = process.stdin;
+      const wasRaw = stdin.isRaw;
+      const wasPaused = stdin.isPaused();
+      setRawMode2(stdin, true);
+      stdin.resume();
+      const onData = (buf) => {
+        const key = buf.toString();
+        if (key === "") {
+          cleanup();
+          writeOut("\n");
+          resolve3("");
+          return;
         }
-      } catch {
-      }
-    }
-    if (/^---[^\n]*\n\+\+\+/m.test(value)) return value;
+        const opt = options.find(
+          (o) => o.key.toLowerCase() === key.toLowerCase() || o.value === key
+        );
+        if (opt) {
+          cleanup();
+          writeOut(`${opt.key}
+`);
+          resolve3(opt.value);
+        }
+      };
+      const onClose = () => {
+        cleanup();
+        resolve3("");
+      };
+      const onAbort = () => {
+        cleanup();
+        writeOut("\n");
+        resolve3("");
+      };
+      const cleanup = () => {
+        stdin.off("data", onData);
+        stdin.off("close", onClose);
+        signal?.removeEventListener("abort", onAbort);
+        setRawMode2(stdin, wasRaw);
+        if (wasPaused) stdin.pause();
+      };
+      stdin.on("data", onData);
+      stdin.on("close", onClose);
+      signal?.addEventListener("abort", onAbort, { once: true });
+    });
   }
-  return null;
-}
-function summarize(value, name) {
-  let v = value;
-  if (typeof value === "string") {
-    const trimmed = value.trimStart();
-    if (trimmed.startsWith("{") || trimmed.startsWith("[")) {
+  /**
+   * Read a line of input while masking each character with a bullet so the
+   * user gets visual confirmation that bytes are arriving (especially on
+   * paste, which previously felt like nothing happened). Pasted chunks
+   * are echoed as a run of bullets, Backspace/DEL erases one bullet, and
+   * Ctrl+U / Ctrl+T are honored. Non-TTY input is read normally — there's
+   * nothing to hide when piped, and echoing bullets to a file is noise.
+   *
+   * Returns the raw entered string (no trim — caller decides).
+   */
+  async readSecret(prompt) {
+    const stdin = process.stdin;
+    if (!stdin.isTTY) {
+      this.suppressNextHistory = true;
+      return this.readLine(prompt);
+    }
+    setOutputLineGuard(null);
+    this.rl?.close();
+    this.rl = void 0;
+    writeOut(prompt);
+    return new Promise((resolve3) => {
+      let buf = "";
+      const wasRaw = stdin.isRaw;
+      const cleanup = () => {
+        stdin.off("data", onData);
+        setRawMode2(stdin, wasRaw);
+        stdin.pause();
+      };
       try {
-        v = JSON.parse(value);
-      } catch {
+        setRawMode2(stdin, true);
+        stdin.resume();
+        stdin.setEncoding("utf8");
+      } catch (setupErr) {
+        setRawMode2(stdin, wasRaw);
+        stdin.pause();
+        throw setupErr;
       }
-    }
+      const eraseChar = () => {
+        writeOut("\b \b");
+      };
+      const eraseAll = () => {
+        for (let i = 0; i < buf.length; i++) eraseChar();
+      };
+      let escState = 0;
+      const onData = (chunk) => {
+        for (const ch of chunk) {
+          if (escState === 1) {
+            escState = ch === "[" ? 2 : ch === "O" ? 3 : 0;
+            continue;
+          }
+          if (escState === 2) {
+            if (ch >= "@" && ch <= "~") escState = 0;
+            continue;
+          }
+          if (escState === 3) {
+            escState = 0;
+            continue;
+          }
+          if (ch === "\x1B") {
+            escState = 1;
+            continue;
+          }
+          if (ch === "\r" || ch === "\n") {
+            cleanup();
+            writeOut(`  ${dim(`[${buf.length} chars]`)}
+`);
+            resolve3(buf);
+            return;
+          }
+          if (ch === "") {
+            cleanup();
+            writeOut("\n");
+            resolve3("");
+            return;
+          }
+          if (ch === "") {
+            eraseAll();
+            buf = "";
+            continue;
+          }
+          if (ch === "") {
+            const m = buf.match(/(\S+\s*)$/);
+            const drop = m ? m[0].length : buf.length;
+            for (let i = 0; i < drop; i++) eraseChar();
+            buf = buf.slice(0, buf.length - drop);
+            continue;
+          }
+          if (ch === "\x7F" || ch === "\b") {
+            if (buf.length > 0) {
+              buf = buf.slice(0, -1);
+              eraseChar();
+            }
+            continue;
+          }
+          if (ch < " ") continue;
+          buf += ch;
+          writeOut("\u2022");
+        }
+        if (escState === 1) escState = 0;
+      };
+      stdin.on("data", onData);
+    });
   }
-  if (typeof v === "object" && v !== null) {
-    const o = v;
-    if (name === "edit") {
-      const path10 = typeof o["path"] === "string" ? o["path"] : "";
-      const reps = typeof o["replacements"] === "number" ? o["replacements"] : 0;
-      return `${path10}  ${reps} replacement${reps === 1 ? "" : "s"}`.trim();
-    }
-    if (name === "write") {
-      const path10 = typeof o["path"] === "string" ? o["path"] : "";
-      const bytes = typeof o["bytes"] === "number" ? o["bytes"] : void 0;
-      return bytes !== void 0 ? `${path10}  ${bytes}B` : path10;
-    }
-    if (name === "read") {
-      return summarizeRead(o);
-    }
-    if (name === "bash") {
-      return summarizeBash(o);
-    }
-    if (name === "exec") {
-      return summarizeExec(o);
-    }
-    if (typeof o["count"] === "number") {
-      return `${o["count"]} match${o["count"] === 1 ? "" : "es"}`;
-    }
+  async close() {
+    setOutputLineGuard(null);
+    await this.saveHistory();
+    this.rl?.close();
+    this.rl = void 0;
   }
-  return "";
-}
-function summarizeRead(o) {
-  const path10 = typeof o["path"] === "string" ? o["path"] : "";
-  const total = typeof o["total_lines"] === "number" ? o["total_lines"] : void 0;
-  const truncated = o["truncated"] === true;
-  const cached = o["cached"] === true;
-  const note = typeof o["note"] === "string" ? o["note"] : void 0;
-  const parts = [];
-  if (path10) parts.push(path10);
-  if (total !== void 0) parts.push(`${total} line${total === 1 ? "" : "s"}`);
-  const flags = [];
-  if (truncated) flags.push("truncated");
-  if (cached) flags.push("cached");
-  if (flags.length > 0) parts.push(`(${flags.join(", ")})`);
-  let summary = parts.join("  ").trim();
-  if (note) summary = summary ? `${summary} \u2014 ${note}` : note;
-  return summary;
-}
-function summarizeBash(o) {
-  const exit = typeof o["exit_code"] === "number" ? o["exit_code"] : void 0;
-  const output = typeof o["output"] === "string" ? o["output"] : "";
-  const lines = output ? output.split("\n").length : 0;
-  const parts = [];
-  if (exit !== void 0) parts.push(`exit=${exit}`);
-  else if (o["exit_code"] === null) parts.push("backgrounded");
-  if (o["timed_out"] === true) parts.push("timed out");
-  if (lines > 0) parts.push(`${lines} output line${lines === 1 ? "" : "s"}`);
-  if (output.length > 0) parts.push(`${output.length}B`);
-  return parts.join("  ");
-}
-function summarizeExec(o) {
-  const command = typeof o["command"] === "string" ? o["command"] : "";
-  const args = Array.isArray(o["args"]) ? o["args"].filter((a) => typeof a === "string") : [];
-  const exit = typeof o["exitCode"] === "number" ? o["exitCode"] : void 0;
-  const stdout = typeof o["stdout"] === "string" ? o["stdout"] : "";
-  const stderr = typeof o["stderr"] === "string" ? o["stderr"] : "";
-  const outLines = stdout ? stdout.split("\n").length : 0;
-  const errLines = stderr ? stderr.split("\n").length : 0;
-  const totalBytes = stdout.length + stderr.length;
-  const parts = [];
-  const invocation = [command, ...args].filter(Boolean).join(" ");
-  if (invocation) parts.push(`$ ${invocation}`);
-  if (exit !== void 0) parts.push(`exit=${exit}`);
-  if (outLines > 0) parts.push(`${outLines} stdout line${outLines === 1 ? "" : "s"}`);
-  if (errLines > 0) parts.push(`${errLines} stderr line${errLines === 1 ? "" : "s"}`);
-  if (totalBytes > 0) parts.push(`${totalBytes}B`);
-  return parts.join("  ");
-}
-function compactSingleLine(text) {
-  const first = text.split("\n")[0]?.trim() ?? "";
-  if (!first) return "(no output)";
-  return first.length > 200 ? `${first.slice(0, 197)}\u2026` : first;
+};
+function dim(s) {
+  if (!process.stdout.isTTY) return s;
+  return `\x1B[2m${s}\x1B[22m`;
 }
 
-// src/boot.ts
-var GITHUB_PROVIDERS_OVERLAY_URL = "https://raw.githubusercontent.com/WrongStack/WrongStack/main/packages/cli/data/providers.json";
-async function boot(argv) {
-  const { flags, positional } = parseArgs(argv);
-  if (positional[0] === "sandbox") {
-    const { runSandboxCommand } = await import("./sandbox-TYGD6FI2.js");
-    return runSandboxCommand(positional.slice(1), flags, new TerminalRenderer());
+// src/renderer.ts
+import { color as color12, sanitizeTerminalText } from "@wrongstack/core/utils";
+var TerminalRenderer = class _TerminalRenderer {
+  out;
+  err;
+  lineStart = true;
+  /** When true, stdout-bound rendering is disabled (for non-terminal UI surfaces). */
+  silent = false;
+  /**
+   * When true, Ink exclusively owns the terminal. Both stdout and stderr
+   * rendering must be disabled: either stream can interleave with Ink's
+   * cursor updates and make the TUI flicker or leave stray debug notes.
+   */
+  tuiActive = false;
+  /**
+   * Per-tool on-screen result render mode. Defaults to `'extend'` so
+   * existing callers without `setResultRenderMode` see full content.
+   * `setResultRenderMode(name, mode)` overrides the entry for `name`; the
+   * override is one-shot for that name (the default reasserts after the
+   * next write) so callers can set the mode right before each tool call
+   * without leaking state across unrelated tool calls.
+   */
+  renderModes = /* @__PURE__ */ new Map();
+  /** Mode applied when no entry is set for a given tool name. */
+  static DEFAULT_RENDER_MODE = "extend";
+  /** Maximum number of one-shot hints retained when callers abandon a result. */
+  static MAX_RENDER_MODES = 256;
+  /** Lines kept per tool family in `extend` mode. */
+  static EXTEND_PREVIEW_LINES = 10;
+  constructor(opts = {}) {
+    this.out = opts.out ?? process.stdout;
+    this.err = opts.err ?? process.stderr;
   }
-  if (positional[0] === "update") {
-    const renderer2 = new TerminalRenderer();
-    return runUpdateCommand(positional.slice(1), {
-      cwd: process.cwd(),
-      userHome: os.homedir(),
-      renderer: renderer2,
-      flags
-    });
+  /**
+   * Toggle stdout suppression for non-terminal UI surfaces such as WebUI.
+   * Diagnostics continue to flow to stderr. Idempotent.
+   */
+  setSilent(silent) {
+    this.silent = silent;
   }
-  if (positional[0] === "remote" || typeof flags["remote"] === "string") {
-    const { runRemoteCommand } = await import("./remote-C74BCNND.js");
-    return runRemoteCommand(
-      positional[0] === "remote" ? positional.slice(1) : positional,
-      flags,
-      new TerminalRenderer()
-    );
+  isSilent() {
+    return this.silent;
   }
-  if (positional[0] === "resume" && positional[1] && !subcommands["__noop_resume_marker"]) {
-    flags["resume"] = positional[1];
-    positional.splice(0, 2);
+  /**
+   * Toggle exclusive TUI ownership of both terminal streams. Unlike
+   * {@link setSilent}, TUI mode suppresses stderr as well as stdout and clears
+   * any CLI-only result mode staged before Ink took ownership. While active,
+   * new result-mode hints are ignored. The two flags compose with OR semantics
+   * for stdout suppression only; TUI ownership adds the other behaviors.
+   * Enable immediately before starting Ink and disable in the paired
+   * `finally`, only after the TUI has fully exited.
+   */
+  setTuiActive(active) {
+    if (active) this.renderModes.clear();
+    this.tuiActive = active;
   }
-  let bootResult;
-  try {
-    bootResult = await bootConfig(flags);
-  } catch (err) {
-    writeErr(`Config error: ${toErrorMessage5(err)}
-`);
-    return 2;
+  isTuiActive() {
+    return this.tuiActive;
   }
-  let { paths, config, vault } = bootResult;
-  try {
-    resolveToolRestriction(flags);
-    resolveLaunchAllowedTools(flags);
-    parseOutputFormat(flags["output-format"]);
-    announceSafeMode(flags, writeErr);
-    activateRestrictedMode(flags, writeErr);
-    const launchMcp = await resolveLaunchMcpServers(flags, paths.cwd);
-    if (launchMcp) flags["mcp-config"] = JSON.stringify({ mcpServers: launchMcp });
-    const schema = await resolveJsonSchemaFlag(flags["json-schema"], paths.cwd);
-    if (schema) flags["json-schema"] = JSON.stringify(schema);
-    const appended = await resolveAppendedSystemPrompt(flags, paths.cwd);
-    delete flags["append-system-prompt-file"];
-    if (appended) flags["append-system-prompt"] = appended;
-    else delete flags["append-system-prompt"];
-  } catch (err) {
-    writeErr(`wstack: ${toErrorMessage5(err)}
-`);
-    return 2;
+  suppressStdout() {
+    return this.silent || this.tuiActive;
   }
-  let first = positional[0];
-  const mayOfferConfigRecovery = isStdinTTY2() && (positional.length === 0 || first === "quick") && typeof flags["prompt"] !== "string" && !flags["webui"] && !flags["no-interactive"] && !flags["skip"];
-  const machineOutput = flags["output-json"] === true || flags["output-format"] === "json" || flags["output-format"] === "stream-json";
-  const renderer = new TerminalRenderer(machineOutput ? { out: process.stderr } : void 0);
-  const reader = new ReadlineInputReader({ historyFile: paths.wpaths.historyFile });
-  if (mayOfferConfigRecovery) {
-    const recoveryProfile = config.activeProfile ?? "default";
-    const restored = await maybeRestoreDefaultProfileFromBackup({
-      globalRoot: paths.wpaths.globalRoot,
-      profilePath: paths.wpaths.profileConfig(recoveryProfile),
-      profileName: recoveryProfile,
-      renderer,
-      reader
-    });
-    if (restored) {
-      try {
-        bootResult = await bootConfig(flags);
-        ({ paths, config, vault } = bootResult);
-      } catch (err) {
-        writeErr(`Config error after backup restore: ${toErrorMessage5(err)}
-`);
-        await reader.close();
-        return 2;
-      }
+  setResultRenderMode(name, mode) {
+    if (this.suppressStdout()) return;
+    if (this.renderModes.delete(name)) {
+      this.renderModes.set(name, mode);
+      return;
     }
+    if (this.renderModes.size >= _TerminalRenderer.MAX_RENDER_MODES) {
+      const oldestName = this.renderModes.keys().next().value;
+      if (oldestName !== void 0) this.renderModes.delete(oldestName);
+    }
+    this.renderModes.set(name, mode);
   }
-  config = applySimpleUiFullAutoProfile(config, flags);
-  const simpleUiFullAuto = isSimpleUiFullAuto(flags);
-  const { cwd, projectRoot, userHome, wpaths, pathResolver } = paths;
-  const profileConfigPath = activeProfileConfigPath(wpaths, config);
-  void pathResolver;
-  if (first === "quick") {
-    flags["quick"] = true;
-    flags["tui"] = true;
-    positional.splice(0, 1);
-    first = void 0;
-    const plugins = config?.plugins ?? [];
-    if (plugins.length === 0) {
-      console.debug("[wrongstack:quick] No plugins configured");
-    } else {
-      for (const p of plugins) {
-        const name = typeof p === "string" ? p : p.name;
-        const enabled = typeof p === "object" && p.enabled === false ? " (disabled)" : "";
-        console.debug(`[wrongstack:quick] plugin: ${name}${enabled}`);
-      }
+  getRenderMode(name) {
+    return this.renderModes.get(name) ?? _TerminalRenderer.DEFAULT_RENDER_MODE;
+  }
+  clearRenderMode(name) {
+    this.renderModes.delete(name);
+  }
+  write(input) {
+    if (this.suppressStdout()) return;
+    const text = typeof input === "string" ? input : input.text;
+    if (!text) return;
+    const rendered = renderMarkdown(text);
+    this.out.write(rendered);
+    this.lineStart = rendered.endsWith("\n");
+  }
+  writeLine(text = "") {
+    if (this.suppressStdout()) return;
+    if (!this.lineStart) this.out.write("\n");
+    if (text) this.out.write(`${text}
+`);
+    else this.out.write("\n");
+    this.lineStart = true;
+  }
+  writeBlock(block) {
+    if (block.type === "tool_result") {
+      const text = typeof block.content === "string" ? block.content : JSON.stringify(block.content);
+      this.writeToolResult(block.name ?? "result", text, !!block.is_error);
+      return;
+    }
+    if (this.suppressStdout()) return;
+    if (block.type === "text") {
+      this.write(block);
+    } else if (block.type === "tool_use") {
+      this.writeToolCall(block.name, block.input);
     }
   }
-  const logger = new DefaultLogger({
-    level: config.log.level,
-    file: wpaths.logFile,
-    // Suppress stderr output in TUI mode: plugin/library log messages
-    // (e.g. Telegram "getUpdates failed") write directly to stderr and
-    // bypass Ink, which breaks the Static/live boundary.
-    // Logs still go to the disk file for post-hoc debugging.
-    stderr: !flags.tui
-  });
-  const modelsRegistry = new DefaultModelsRegistry({
-    cacheFile: wpaths.modelsCache,
-    // Force a refresh attempt once per CLI process. Model metadata changes faster
-    // than releases (new model ids, corrected context windows), and stale cache
-    // here directly affects runtime behavior like context bars and compaction.
-    // If the network is unavailable, DefaultModelsRegistry still falls back to
-    // stale cache or the bundled overlay instead of failing startup.
-    ttlSeconds: 0,
-    // Curated overlay merged on top of models.dev: fetched from GitHub raw for
-    // freshness, with the bundled file as the offline floor.
-    overlayUrl: GITHUB_PROVIDERS_OVERLAY_URL,
-    overlayFile: resolveBundledOverlayFile(),
-    overlayCacheFile: wpaths.modelsOverlayCache
-  });
-  installProviderPersisters({ config, paths: wpaths, vault, logger });
-  const subcommandHandler = first ? subcommands[first] : void 0;
-  if (first && subcommandHandler) {
-    if (flags["help"] === true || flags["h"] === true) {
-      const deepSub = positional[1];
-      if (deepSub && renderDeepHelp(`${first}:${deepSub}`, renderer)) {
-        await reader.close();
-        return 0;
-      }
-      if (renderFocusedHelp(first, renderer)) {
-        await reader.close();
-        return 0;
-      }
+  writeToolCall(name, input) {
+    if (this.suppressStdout()) return;
+    if (!this.lineStart) this.out.write("\n");
+    const arrow = theme2.primary("\u2192");
+    const display = sanitizeTerminalText(formatInputSummary(input));
+    this.out.write(
+      `${arrow} ${theme2.bold(sanitizeTerminalText(name))}${display ? color12.dim(` ${display}`) : ""}
+`
+    );
+    this.lineStart = true;
+  }
+  writeToolResult(name, content, isError) {
+    if (this.suppressStdout()) {
+      this.clearRenderMode(name);
+      return;
+    }
+    const txt = sanitizeTerminalText(
+      typeof content === "string" ? content : safeStringify(content)
+    );
+    const prefix = isError ? theme2.error("\u2718") : theme2.success("\u2713");
+    const renderMode = this.getRenderMode(name);
+    this.clearRenderMode(name);
+    const bodyText = sanitizeTerminalText(extractBodyText(content, name));
+    if (isError) {
+      const firstLine = txt.split("\n")[0] ?? "";
+      const truncated = firstLine.length > 200 ? `${firstLine.slice(0, 197)}\u2026` : firstLine;
+      this.out.write(`  ${prefix} ${color12.dim(truncated)}
+`);
+      this.lineStart = true;
+      return;
+    }
+    const isEditLike = name === "edit" || name === "write";
+    const diff = extractDiff(content);
+    if (isEditLike && diff) {
+      this.out.write(`  ${prefix} ${color12.dim(sanitizeTerminalText(summarize(content, name)))}
+`);
+      const rendered = renderDiff(diff).split("\n").map((l) => `      ${l}`).join("\n");
+      this.out.write(`${rendered}
+`);
+      this.lineStart = true;
+      return;
+    }
+    const summary = sanitizeTerminalText(summarize(content, name));
+    const isReadLike = name === "read" || name === "grep" || name === "glob" || name === "bash" || name === "exec";
+    if (renderMode === "simple") {
+      this.out.write(`  ${prefix} ${color12.dim(summary || compactSingleLine(bodyText))}
+`);
+      this.lineStart = true;
+      return;
+    }
+    const previewLines = isEditLike ? 0 : isReadLike ? _TerminalRenderer.EXTEND_PREVIEW_LINES : 2;
+    const lines = bodyText.split("\n");
+    const head = lines.slice(0, previewLines).map((l) => l.replace(/\s+$/, ""));
+    const moreCount = Math.max(0, lines.length - head.length);
+    this.out.write(`  ${prefix} ${color12.dim(summary)}
+`);
+    for (const l of head) {
+      const capped = l.length > 200 ? `${l.slice(0, 197)}\u2026` : l;
+      this.out.write(`      ${color12.dim(capped)}
+`);
+    }
+    if (moreCount > 0) {
+      this.out.write(
+        `      ${color12.dim(`+${moreCount} more line${moreCount === 1 ? "" : "s"}`)}
+`
+      );
     }
-    const container = createDefaultContainer2({
-      config,
-      wpaths,
-      logger,
-      modelsRegistry,
-      bundledSkillsDir: config.features.skills ? resolveBundledSkillsDir2() : void 0,
-      bundledPromptsDir: config.features.prompts === false ? void 0 : resolveBundledPromptsDir2()
-    });
-    const sessionStore = container.resolve(TOKENS2.SessionStore);
-    const skillLoader = container.resolve(TOKENS2.SkillLoader);
-    const toolRegistryForSubcmd = new ToolRegistry();
-    registerBuiltinToolTier({
-      registry: toolRegistryForSubcmd,
-      tier: normalizeTokenSavingTier(config.features.tokenSavingMode)
-    });
-    const code = await subcommandHandler(positional.slice(1), {
-      config,
-      renderer,
-      reader,
-      sessionStore,
-      skillLoader,
-      toolRegistry: toolRegistryForSubcmd,
-      modelsRegistry,
-      paths: wpaths,
-      vault,
-      cwd,
-      projectRoot,
-      userHome,
-      flags
-    });
-    await reader.close();
-    return code;
+    this.lineStart = true;
   }
-  if (isHomeDirectory(cwd, userHome)) {
-    writeErr(
-      `
-  ${color11.red(color11.bold("\u26A0 This is not a working directory."))}
-  ${color11.red("Please open wstack in a project folder.")}
-
-`
-    );
-    await reader.close();
-    return 1;
+  writeDiff(diff) {
+    if (this.suppressStdout()) return;
+    if (!this.lineStart) this.out.write("\n");
+    this.out.write(`${renderDiff(diff)}
+`);
+    this.lineStart = true;
   }
-  if (!flags["no-models-refresh"]) {
-    await startCatalog({
-      registry: modelsRegistry,
-      logger,
-      shortLived: positional.length > 0 || typeof flags["prompt"] === "string"
-    });
+  writeWarning(text) {
+    if (this.tuiActive) return;
+    this.err.write(`${theme2.warn("\u26A0")} ${text}
+`);
   }
-  try {
-    await discoverAndMergeProviders({
-      config,
-      registry: modelsRegistry,
-      cacheDir: path9.dirname(wpaths.modelsCache),
-      logger
-    });
-  } catch (err) {
-    logger.debug(`provider auto-discovery skipped: ${toErrorMessage5(err)}`);
+  writeError(text) {
+    if (this.tuiActive) return;
+    this.err.write(`${theme2.error("\u2718")} ${text}
+`);
   }
-  const isSingleShot = positional.length > 0 || typeof flags["prompt"] === "string";
-  const isInteractiveTTY = isStdinTTY2() && !isSingleShot && !flags["webui"] && !flags["no-interactive"] && !flags["skip"];
-  if (isInteractiveTTY) {
-    await checkGitInCwd({ cwd, renderer, reader });
-    const cont = await runProjectCheck({ projectRoot, cwd, renderer, reader });
-    if (!cont) {
-      await reader.close();
-      return 0;
-    }
+  writeInfo(text) {
+    if (this.tuiActive) return;
+    this.err.write(`${theme2.info("\u2139")} ${text}
+`);
   }
-  const wantsTui = flags["tui"] === true && flags["no-tui"] !== true;
-  if (wantsTui && (!process.stdout.isTTY || !process.stdin.isTTY)) {
-    writeErr(
-      "wstack: --tui requires an interactive terminal on both stdin and stdout.\n       Drop the flag (use the plain REPL) or run wstack directly without piping.\n"
-    );
-    await reader.close();
-    return 2;
+  /**
+   * Write text to stderr verbatim: no glyph prefix, no markdown processing.
+   *
+   * Deliberately stricter than writeWarning/writeError/writeInfo, which emit
+   * *diagnostics* and are suppressed only when a TUI owns the terminal (so
+   * they survive silent mode). This method is for informational mirrors of
+   * stdout output, where the stdout copy already carries the full content —
+   * in silent mode the operator asked for machine-only output, so the mirror
+   * is dropped rather than leaked onto a quieter stream. It therefore honors
+   * the full {@link suppressStdout} gate.
+   *
+   * Used by `wstack mailbox serve` to route the human-readable startup banner
+   * away from stdout, keeping the mailbox_serve_started JSON line cleanly
+   * pipeable (`mailbox serve | jq`).
+   */
+  writeStderr(text) {
+    if (this.suppressStdout()) return;
+    this.err.write(text);
   }
-  const providerFlag = typeof flags["provider"] === "string" ? flags["provider"] : void 0;
-  const modelFlag = typeof flags["model"] === "string" ? flags["model"] : void 0;
-  const noInteractiveMode = flags["webui"] || flags["no-interactive"];
-  if (noInteractiveMode && (!config.provider || !config.model)) {
-    if (providerFlag && modelFlag) {
-      config = patchConfig(config, { provider: providerFlag, model: modelFlag });
-    } else {
-      const picked = await autoSelectSavedProvider(config, modelsRegistry);
-      if (picked) config = patchConfig(config, picked);
-    }
+  clear() {
+    if (this.suppressStdout()) return;
+    this.out.write("\x1B[2J\x1B[H");
+    this.lineStart = true;
   }
-  if (!(!!providerFlag && !!modelFlag)) {
-    if (isStdinTTY2() && !noInteractiveMode) {
-      let picked;
-      let skipPicker = false;
-      if (isSetupProvider2(config.provider)) {
-        skipPicker = true;
-        renderer.write(
-          `
-  ${color11.amber("\u25B6")} ${color11.bold("Setup mode")} ${color11.dim("\u2014 no model connected. Run")} ${color11.bold("/auth")} ${color11.dim("to connect one.")}
-
+  /**
+   * Write a flashy agent completion banner for delegate tool results.
+   * Renders a box like:
+   * ┌─────────────────────────────────────┐
+   * │  ✓ [role] done in 4m 32s           │
+   * │    127 iterations · 341 tools        │
+   * │    Found 14 bugs across 6 files...   │
+   * └─────────────────────────────────────┘
+   */
+  writeAgentSummary(summary, ok) {
+    if (this.suppressStdout()) return;
+    if (!this.lineStart) this.out.write("\n");
+    const lines = summary.split("\n");
+    const icon = ok ? theme2.success("\u2713") : theme2.error("\u2718");
+    const firstLine = `${icon} ${lines[0] ?? summary}`;
+    const body = lines.slice(1);
+    const maxWidth = Math.min(process.stdout.columns ?? 80, 120);
+    const contentWidth = Math.max(
+      firstLine.length,
+      body.reduce((a, l) => Math.max(a, l.length), 0)
+    );
+    const boxWidth = Math.min(Math.max(contentWidth + 4, 44), maxWidth);
+    const thick = "\u2501".repeat(boxWidth - 2);
+    const thin = "\u2500".repeat(boxWidth - 2);
+    this.out.write(`
+ ${theme2.primary("\u250C")}${thick}${theme2.primary("\u2510")}
+`);
+    const centre = (s) => {
+      const inner = ` ${s} `;
+      const padLen = Math.max(0, boxWidth - 2 - s.length);
+      const left = Math.floor(padLen / 2);
+      const right = padLen - left;
+      return `${" ".repeat(left)}${inner}${" ".repeat(right)}`;
+    };
+    this.out.write(` ${theme2.primary("\u2502")}${centre(firstLine)}${theme2.primary("\u2502")}
+`);
+    for (const l of body) {
+      this.out.write(
+        ` ${theme2.primary("\u2502")} ${l}${" ".repeat(Math.max(0, boxWidth - 3 - l.length))}${theme2.primary("\u2502")}
 `
-        );
-      } else if (!await hasAnyCredential(config, modelsRegistry)) {
-        const outcome = await runFirstRunSetup({
-          renderer,
-          reader,
-          modelsRegistry,
-          vault,
-          profileConfigPath,
-          reloadConfig: async () => (await bootConfig(flags)).config
-        });
-        if (outcome.kind === "quit") {
-          await reader.close();
-          return 0;
-        }
-        if (outcome.kind === "setup-mode") {
-          config = patchConfig(config, { provider: SETUP_PROVIDER_ID, model: SETUP_MODEL_ID });
-          await saveToGlobalConfig(profileConfigPath, SETUP_PROVIDER_ID, SETUP_MODEL_ID);
-          skipPicker = true;
-        } else {
-          try {
-            const reloaded = await bootConfig(flags);
-            config = reloaded.config;
-            vault = reloaded.vault;
-          } catch (err) {
-            writeErr(`Config error after setup: ${toErrorMessage5(err)}
+      );
+    }
+    this.out.write(` ${theme2.primary("\u2514")}${thin}${theme2.primary("\u2518")}
 `);
-            await reader.close();
-            return 2;
-          }
-        }
+    this.lineStart = true;
+  }
+  /**
+   * Render subagent completion banners from a RunResult.
+   * Uses `delegateSummaries` when available (populated by delegate tool),
+   * otherwise falls back to scanning message history.
+   */
+  writeDelegateSummaries(result) {
+    if (this.suppressStdout()) return;
+    if (result.delegateSummaries) {
+      for (const { summary, ok } of result.delegateSummaries) {
+        if (!summary) continue;
+        this.writeAgentSummary(summary, ok);
       }
-      const savedProvider = config.provider;
-      const savedModel = config.model;
-      if (!skipPicker && savedProvider && savedModel) {
-        const savedStatus = await validateSavedProviderModel(config, modelsRegistry);
-        renderer.write(
-          `
-  ${color11.dim("Last settings:")} ${color11.bold(savedProvider)} / ${color11.bold(savedModel)}
-`
-        );
-        if (!savedStatus.ok) {
-          renderer.writeWarning(
-            `Saved provider/model is no longer usable (${savedStatus.reason ?? "unknown reason"}); choose a provider.
-`
-          );
-        } else {
-          const answer = (await reader.readLine(
-            `  ${color11.amber("?")} Continue with these? ${color11.dim("[Y/n/q]")} ${color11.dim("(auto Y in 5s)")} `,
-            { timeoutMs: 5e3, defaultAnswer: "y" }
-          )).trim().toLowerCase();
-          if (answer === "q") {
-            renderer.write(color11.dim("  Goodbye!\n"));
-            await reader.close();
-            return 0;
-          }
-          if (answer !== "n" && answer !== "no") {
-            skipPicker = true;
-            renderer.write(
-              `
-  ${color11.green("\u25B6")} ${color11.bold(savedProvider)} / ${color11.bold(savedModel)}
-
-`
-            );
-          }
+      return;
+    }
+    if (!result.messages) return;
+    for (const msg of result.messages) {
+      const m = msg;
+      if (!Array.isArray(m.content)) continue;
+      for (const block of m.content) {
+        const b = block;
+        if (b.type !== "tool_result" || b.name !== "delegate") continue;
+        let obj;
+        try {
+          obj = typeof b.content === "string" ? JSON.parse(b.content) : b.content;
+        } catch {
+          continue;
         }
-      }
-      if (!skipPicker) {
-        picked = await runPicker({
-          modelsRegistry,
-          renderer,
-          reader,
-          config,
-          defaultProvider: providerFlag ?? config.provider,
-          defaultModel: modelFlag ?? config.model
-        });
-      }
-      if (!picked && !skipPicker) {
-        if (!config.provider || !config.model) {
-          renderer.write(
-            `
-  ${color11.dim("No provider selected.")}
-  ${color11.dim("Run")} ${color11.bold("wstack auth")} ${color11.dim("to add a key or sign in, or start with no model:")}
-  ${color11.bold(`wstack --provider ${SETUP_PROVIDER_ID} --model ${SETUP_MODEL_ID}`)}
-
-`
-          );
-          await reader.close();
-          return 2;
+        const o = obj;
+        if (o.summary) {
+          this.writeAgentSummary(o.summary, o.ok ?? true);
         }
       }
-      if (picked) {
-        const prevProvider = config.provider;
-        const prevModel = config.model;
-        config = patchConfig(config, { provider: picked.provider, model: picked.model });
-        if (picked.provider !== prevProvider || picked.model !== prevModel) {
-          const saved = await saveToGlobalConfig(profileConfigPath, picked.provider, picked.model);
-          if (saved) {
-            renderer.writeInfo(`Saved ${picked.provider}/${picked.model} as default.
-`);
-          } else {
-            renderer.writeWarning(
-              `Could not save ${picked.provider}/${picked.model} to config. Check permissions or disk space.
-`
-            );
-          }
-        }
+    }
+  }
+};
+function renderMarkdown(s) {
+  let out = s;
+  out = out.replace(/^(#{1,6}) (.+)$/gm, (_m, hashes, text) => {
+    return theme2.primary(theme2.bold(`${hashes} ${text}`));
+  });
+  out = out.replace(/```([a-zA-Z0-9_+-]*)\n([\s\S]*?)```/g, (_m, _lang, code) => {
+    return color12.gray(`
+\u250C\u2500
+${code.replace(/^/gm, "\u2502 ")}\u2514\u2500`);
+  });
+  out = out.replace(/`([^`\n]+)`/g, (_m, code) => theme2.accent(code));
+  out = out.replace(/\*\*([^*]+)\*\*/g, (_m, text) => theme2.bold(text));
+  out = out.replace(
+    /(^|[^*])\*([^*\n]+)\*([^*]|$)/g,
+    (_m, l, t, r) => `${l}${color12.italic(t)}${r}`
+  );
+  return out;
+}
+function formatInputSummary(input) {
+  if (!input || typeof input !== "object") return "";
+  const obj = input;
+  if (typeof obj["path"] === "string") return obj["path"];
+  if (typeof obj["url"] === "string") return obj["url"];
+  if (typeof obj["command"] === "string") {
+    const cmd = obj["command"];
+    return cmd.length > 60 ? cmd.slice(0, 57) + "..." : cmd;
+  }
+  if (typeof obj["pattern"] === "string") return obj["pattern"];
+  return "";
+}
+function safeStringify(value) {
+  if (typeof value === "string") return value;
+  try {
+    return JSON.stringify(value);
+  } catch {
+    return String(value);
+  }
+}
+function extractBodyText(value, name) {
+  let v = value;
+  if (typeof value === "string") {
+    const trimmed = value.trimStart();
+    if (trimmed.startsWith("{") || trimmed.startsWith("[")) {
+      try {
+        v = JSON.parse(value);
+      } catch {
+        return value;
       }
-    } else if (!config.provider || !config.model) {
-      writeErr(
-        `No provider or model configured. Run \`wstack auth\`, or pass --provider <id> --model <id>.
-To start the app with no model connected, pass --provider ${SETUP_PROVIDER_ID} --model ${SETUP_MODEL_ID}.
-`
-      );
-      await reader.close();
-      return 2;
     } else {
-      const savedStatus = await validateSavedProviderModel(config, modelsRegistry);
-      if (!savedStatus.ok) {
-        writeErr(
-          `Saved provider/model is no longer usable (${savedStatus.reason ?? "unknown reason"}). Run \`wstack auth\` or pass --provider <id> --model <id>.
-`
-        );
-        await reader.close();
-        return 2;
+      return value;
+    }
+  }
+  if (typeof v !== "object" || v === null) {
+    return safeStringify(value);
+  }
+  const o = v;
+  if (name === "read" && typeof o["text"] === "string") return o["text"];
+  if (name === "bash") {
+    const output = typeof o["output"] === "string" ? o["output"] : "";
+    const error = typeof o["error"] === "string" ? o["error"] : "";
+    if (output && error) return `${output}
+${error}`;
+    return output || error || "";
+  }
+  if (name === "exec") {
+    const stdout = typeof o["stdout"] === "string" ? o["stdout"] : "";
+    const stderr = typeof o["stderr"] === "string" ? o["stderr"] : "";
+    if (stdout && stderr) return `${stdout}
+${stderr}`;
+    return stdout || stderr || "";
+  }
+  return safeStringify(value);
+}
+function extractDiff(value) {
+  if (typeof value === "object" && value !== null) {
+    const d = value.diff;
+    if (typeof d === "string" && d.length > 0) return d;
+  }
+  if (typeof value === "string") {
+    const trimmed = value.trimStart();
+    if (trimmed.startsWith("{")) {
+      try {
+        const parsed = JSON.parse(value);
+        if (typeof parsed.diff === "string" && parsed.diff.length > 0) {
+          return parsed.diff;
+        }
+      } catch {
+      }
+    }
+    if (/^---[^\n]*\n\+\+\+/m.test(value)) return value;
+  }
+  return null;
+}
+function summarize(value, name) {
+  let v = value;
+  if (typeof value === "string") {
+    const trimmed = value.trimStart();
+    if (trimmed.startsWith("{") || trimmed.startsWith("[")) {
+      try {
+        v = JSON.parse(value);
+      } catch {
       }
     }
   }
-  if (flags["webui"]) {
-    flags["tui"] = false;
-    flags["no-tui"] = true;
+  if (typeof v === "object" && v !== null) {
+    const o = v;
+    if (name === "edit") {
+      const path10 = typeof o["path"] === "string" ? o["path"] : "";
+      const reps = typeof o["replacements"] === "number" ? o["replacements"] : 0;
+      return `${path10}  ${reps} replacement${reps === 1 ? "" : "s"}`.trim();
+    }
+    if (name === "write") {
+      const path10 = typeof o["path"] === "string" ? o["path"] : "";
+      const bytes = typeof o["bytes"] === "number" ? o["bytes"] : void 0;
+      return bytes !== void 0 ? `${path10}  ${bytes}B` : path10;
+    }
+    if (name === "read") {
+      return summarizeRead(o);
+    }
+    if (name === "bash") {
+      return summarizeBash(o);
+    }
+    if (name === "exec") {
+      return summarizeExec(o);
+    }
+    if (typeof o["count"] === "number") {
+      return `${o["count"]} match${o["count"] === 1 ? "" : "es"}`;
+    }
+  }
+  return "";
+}
+function summarizeRead(o) {
+  const path10 = typeof o["path"] === "string" ? o["path"] : "";
+  const total = typeof o["total_lines"] === "number" ? o["total_lines"] : void 0;
+  const truncated = o["truncated"] === true;
+  const cached = o["cached"] === true;
+  const note = typeof o["note"] === "string" ? o["note"] : void 0;
+  const parts = [];
+  if (path10) parts.push(path10);
+  if (total !== void 0) parts.push(`${total} line${total === 1 ? "" : "s"}`);
+  const flags = [];
+  if (truncated) flags.push("truncated");
+  if (cached) flags.push("cached");
+  if (flags.length > 0) parts.push(`(${flags.join(", ")})`);
+  let summary = parts.join("  ").trim();
+  if (note) summary = summary ? `${summary} \u2014 ${note}` : note;
+  return summary;
+}
+function summarizeBash(o) {
+  const exit = typeof o["exit_code"] === "number" ? o["exit_code"] : void 0;
+  const output = typeof o["output"] === "string" ? o["output"] : "";
+  const lines = output ? output.split("\n").length : 0;
+  const parts = [];
+  if (exit !== void 0) parts.push(`exit=${exit}`);
+  else if (o["exit_code"] === null) parts.push("backgrounded");
+  if (o["timed_out"] === true) parts.push("timed out");
+  if (lines > 0) parts.push(`${lines} output line${lines === 1 ? "" : "s"}`);
+  if (output.length > 0) parts.push(`${output.length}B`);
+  return parts.join("  ");
+}
+function summarizeExec(o) {
+  const command = typeof o["command"] === "string" ? o["command"] : "";
+  const args = Array.isArray(o["args"]) ? o["args"].filter((a) => typeof a === "string") : [];
+  const exit = typeof o["exitCode"] === "number" ? o["exitCode"] : void 0;
+  const stdout = typeof o["stdout"] === "string" ? o["stdout"] : "";
+  const stderr = typeof o["stderr"] === "string" ? o["stderr"] : "";
+  const outLines = stdout ? stdout.split("\n").length : 0;
+  const errLines = stderr ? stderr.split("\n").length : 0;
+  const totalBytes = stdout.length + stderr.length;
+  const parts = [];
+  const invocation = [command, ...args].filter(Boolean).join(" ");
+  if (invocation) parts.push(`$ ${invocation}`);
+  if (exit !== void 0) parts.push(`exit=${exit}`);
+  if (outLines > 0) parts.push(`${outLines} stdout line${outLines === 1 ? "" : "s"}`);
+  if (errLines > 0) parts.push(`${errLines} stderr line${errLines === 1 ? "" : "s"}`);
+  if (totalBytes > 0) parts.push(`${totalBytes}B`);
+  return parts.join("  ");
+}
+function compactSingleLine(text) {
+  const first = text.split("\n")[0]?.trim() ?? "";
+  if (!first) return "(no output)";
+  return first.length > 200 ? `${first.slice(0, 197)}\u2026` : first;
+}
+
+// src/boot.ts
+var GITHUB_PROVIDERS_OVERLAY_URL = "https://raw.githubusercontent.com/WrongStack/WrongStack/main/packages/cli/data/providers.json";
+async function boot(argv) {
+  const { flags, positional } = parseArgs(argv);
+  if (positional[0] === "sandbox") {
+    const { runSandboxCommand } = await import("./sandbox-TYGD6FI2.js");
+    return runSandboxCommand(positional.slice(1), flags, new TerminalRenderer());
+  }
+  if (positional[0] === "update") {
+    const renderer2 = new TerminalRenderer();
+    return runUpdateCommand(positional.slice(1), {
+      cwd: process.cwd(),
+      userHome: os.homedir(),
+      renderer: renderer2,
+      flags
+    });
+  }
+  if (positional[0] === "remote" || typeof flags["remote"] === "string") {
+    const { runRemoteCommand } = await import("./remote-C74BCNND.js");
+    return runRemoteCommand(
+      positional[0] === "remote" ? positional.slice(1) : positional,
+      flags,
+      new TerminalRenderer()
+    );
+  }
+  if (positional[0] === "resume" && positional[1] && !subcommands["__noop_resume_marker"]) {
+    flags["resume"] = positional[1];
+    positional.splice(0, 2);
   }
-  if (isInteractiveTTY) {
-    const promptMenu = await maybeRunSystemPromptMenu({
-      isInteractiveTTY,
-      flags,
+  let bootResult;
+  try {
+    bootResult = await bootConfig(flags);
+  } catch (err) {
+    writeErr3(`Config error: ${toErrorMessage7(err)}
+`);
+    return 2;
+  }
+  let { paths, config, vault } = bootResult;
+  try {
+    resolveToolRestriction(flags);
+    resolveLaunchAllowedTools(flags);
+    parseOutputFormat(flags["output-format"]);
+    announceSafeMode(flags, writeErr3);
+    activateRestrictedMode(flags, writeErr3);
+    const launchMcp = await resolveLaunchMcpServers(flags, paths.cwd);
+    if (launchMcp) flags["mcp-config"] = JSON.stringify({ mcpServers: launchMcp });
+    const schema = await resolveJsonSchemaFlag(flags["json-schema"], paths.cwd);
+    if (schema) flags["json-schema"] = JSON.stringify(schema);
+    const appended = await resolveAppendedSystemPrompt(flags, paths.cwd);
+    delete flags["append-system-prompt-file"];
+    if (appended) flags["append-system-prompt"] = appended;
+    else delete flags["append-system-prompt"];
+  } catch (err) {
+    writeErr3(`wstack: ${toErrorMessage7(err)}
+`);
+    return 2;
+  }
+  let first = positional[0];
+  const mayOfferConfigRecovery = isStdinTTY3() && (positional.length === 0 || first === "quick") && typeof flags["prompt"] !== "string" && !flags["webui"] && !flags["no-interactive"] && !flags["skip"];
+  const machineOutput = flags["output-json"] === true || flags["output-format"] === "json" || flags["output-format"] === "stream-json";
+  const renderer = new TerminalRenderer(machineOutput ? { out: process.stderr } : void 0);
+  const reader = new ReadlineInputReader({ historyFile: paths.wpaths.historyFile });
+  if (mayOfferConfigRecovery) {
+    const recoveryProfile = config.activeProfile ?? "default";
+    const restored = await maybeRestoreDefaultProfileFromBackup({
+      globalRoot: paths.wpaths.globalRoot,
+      profilePath: paths.wpaths.profileConfig(recoveryProfile),
+      profileName: recoveryProfile,
       renderer,
-      reader,
-      profileConfigPath,
-      paths: {
-        globalDir: wpaths.globalInstructions,
-        projectDir: wpaths.inProjectInstructions
-      },
-      outsideProject: await isOutsideProject(projectRoot)
+      reader
     });
-    if (promptMenu.aborted) {
-      await reader.close();
-      return 0;
-    }
-    if (promptMenu.changed && promptMenu.variant) {
-      config = patchConfig(config, { systemPrompt: { variant: promptMenu.variant } });
-    }
-    if (promptMenu.persistError) {
-      renderer.writeWarning(
-        `Could not save system prompt variant to config: ${toErrorMessage5(promptMenu.persistError)}
-`
-      );
-    }
-    let modePinned;
-    if (flags["no-tui"]) modePinned = "repl";
-    else if (flags["tui"]) modePinned = "tui";
-    const yoloPinned = flags["no-yolo"] === true ? false : flags["yolo"] === true ? true : void 0;
-    let autonomyPinned;
-    if (flags["no-autonomy"] === true) autonomyPinned = "off";
-    else if (flags["eternal"] === true)
-      autonomyPinned = "off";
-    else if (typeof flags["autonomy"] === "string") {
-      const v = flags["autonomy"].toLowerCase();
-      autonomyPinned = v === "off" || v === "no" || v === "false" ? "off" : "auto";
-    } else if (flags["autonomy"] === true) {
-      autonomyPinned = "auto";
-    }
-    const lastChoices = config.launch ? {
-      mode: config.launch.mode ?? "tui",
-      yolo: config.yolo ?? true,
-      autonomy: config.launch.autonomy ?? "auto"
-    } : void 0;
-    let choices;
-    try {
-      choices = await runLaunchPrompts({
-        renderer,
-        reader,
-        modePinned,
-        yoloPinned,
-        autonomyPinned,
-        lastChoices
-      });
-    } catch (err) {
-      if (err instanceof LaunchAbortedError) {
+    if (restored) {
+      try {
+        bootResult = await bootConfig(flags);
+        ({ paths, config, vault } = bootResult);
+      } catch (err) {
+        writeErr3(`Config error after backup restore: ${toErrorMessage7(err)}
+`);
         await reader.close();
-        return 0;
+        return 2;
       }
-      throw err;
     }
-    if (choices.mode === "tui") {
-      flags["tui"] = true;
-      flags["no-tui"] = false;
+  }
+  config = applySimpleUiFullAutoProfile(config, flags);
+  const simpleUiFullAuto = isSimpleUiFullAuto(flags);
+  const { cwd, projectRoot, userHome, wpaths, pathResolver } = paths;
+  const profileConfigPath = activeProfileConfigPath(wpaths, config);
+  void pathResolver;
+  if (first === "quick") {
+    flags["quick"] = true;
+    flags["tui"] = true;
+    positional.splice(0, 1);
+    first = void 0;
+    const plugins = config?.plugins ?? [];
+    if (plugins.length === 0) {
+      console.debug("[wrongstack:quick] No plugins configured");
     } else {
-      flags["tui"] = false;
-      flags["no-tui"] = true;
+      for (const p of plugins) {
+        const name = typeof p === "string" ? p : p.name;
+        const enabled = typeof p === "object" && p.enabled === false ? " (disabled)" : "";
+        console.debug(`[wrongstack:quick] plugin: ${name}${enabled}`);
+      }
     }
-    if (choices.yolo !== config.yolo) config = patchConfig(config, { yolo: choices.yolo });
-    flags["autonomy"] = choices.autonomy;
-    if (shouldPrintYoloNotice(lastChoices, yoloPinned, choices.yolo)) {
-      writeErr(
-        `
-  ${color11.yellow("YOLO is on")}: non-denied tool calls, including shell and file writes, run without confirmation.
-  ${color11.dim("Explicit deny rules still apply. Use")} --no-yolo ${color11.dim("or")} /yolo off ${color11.dim("to require prompts.")}
+  }
+  const logger = new DefaultLogger({
+    level: config.log.level,
+    file: wpaths.logFile,
+    // Suppress stderr output in TUI mode: plugin/library log messages
+    // (e.g. Telegram "getUpdates failed") write directly to stderr and
+    // bypass Ink, which breaks the Static/live boundary.
+    // Logs still go to the disk file for post-hoc debugging.
+    stderr: !flags.tui
+  });
+  const modelsRegistry = new DefaultModelsRegistry({
+    cacheFile: wpaths.modelsCache,
+    // Force a refresh attempt once per CLI process. Model metadata changes faster
+    // than releases (new model ids, corrected context windows), and stale cache
+    // here directly affects runtime behavior like context bars and compaction.
+    // If the network is unavailable, DefaultModelsRegistry still falls back to
+    // stale cache or the bundled overlay instead of failing startup.
+    ttlSeconds: 0,
+    // Curated overlay merged on top of models.dev: fetched from GitHub raw for
+    // freshness, with the bundled file as the offline floor.
+    overlayUrl: GITHUB_PROVIDERS_OVERLAY_URL,
+    overlayFile: resolveBundledOverlayFile(),
+    overlayCacheFile: wpaths.modelsOverlayCache
+  });
+  installProviderPersisters({ config, paths: wpaths, vault, logger });
+  const subcommandCode = await dispatchBootSubcommand({
+    first,
+    positional,
+    flags,
+    config,
+    vault,
+    wpaths,
+    cwd,
+    projectRoot,
+    userHome,
+    renderer,
+    reader,
+    logger,
+    modelsRegistry
+  });
+  if (subcommandCode !== void 0) return subcommandCode;
+  if (isHomeDirectory(cwd, userHome)) {
+    writeErr3(
+      `
+  ${color13.red(color13.bold("\u26A0 This is not a working directory."))}
+  ${color13.red("Please open wstack in a project folder.")}
 
 `
-      );
-    }
-    if ((flags["skip-index"] || flags["skip"]) && config.indexing) {
-      config = patchConfig(config, {
-        indexing: { ...config.indexing, onSessionStart: false }
-      });
-    }
-    if (!simpleUiFullAuto) {
-      try {
-        const toPersist = flags["webui"] ? { ...choices, mode: lastChoices?.mode ?? config.launch?.mode ?? "tui" } : choices;
-        await persistLaunchChoices(profileConfigPath, toPersist);
-      } catch {
-      }
-    }
-  } else {
-    const nonInteractiveAutonomy = !simpleUiFullAuto && (flags["no-autonomy"] === true || config.autonomy?.defaultMode === "off") ? "off" : "auto";
-    const effectiveChoices = config.launch ? {
-      mode: flags["no-tui"] ? "repl" : config.launch.mode ?? "tui",
-      yolo: config.yolo ?? true,
-      autonomy: nonInteractiveAutonomy
-    } : {
-      mode: "repl",
-      yolo: true,
-      autonomy: nonInteractiveAutonomy
-    };
-    if (effectiveChoices.mode === "repl") {
-      flags["tui"] = false;
-      flags["no-tui"] = true;
+    );
+    await reader.close();
+    return 1;
+  }
+  if (!flags["no-models-refresh"]) {
+    await startCatalog({
+      registry: modelsRegistry,
+      logger,
+      shortLived: positional.length > 0 || typeof flags["prompt"] === "string"
+    });
+  }
+  try {
+    await discoverAndMergeProviders({
+      config,
+      registry: modelsRegistry,
+      cacheDir: path9.dirname(wpaths.modelsCache),
+      logger
+    });
+  } catch (err) {
+    logger.debug(`provider auto-discovery skipped: ${toErrorMessage7(err)}`);
+  }
+  const isSingleShot = positional.length > 0 || typeof flags["prompt"] === "string";
+  const isInteractiveTTY = isStdinTTY3() && !isSingleShot && !flags["webui"] && !flags["no-interactive"] && !flags["skip"];
+  if (isInteractiveTTY) {
+    await checkGitInCwd({ cwd, renderer, reader });
+    const cont = await runProjectCheck({ projectRoot, cwd, renderer, reader });
+    if (!cont) {
+      await reader.close();
+      return 0;
     }
-    flags["autonomy"] = effectiveChoices.autonomy;
   }
+  const wantsTui = flags["tui"] === true && flags["no-tui"] !== true;
+  if (wantsTui && (!process.stdout.isTTY || !process.stdin.isTTY)) {
+    writeErr3(
+      "wstack: --tui requires an interactive terminal on both stdin and stdout.\n       Drop the flag (use the plain REPL) or run wstack directly without piping.\n"
+    );
+    await reader.close();
+    return 2;
+  }
+  const noInteractiveMode = flags["webui"] || flags["no-interactive"];
+  const providerGate = await resolveBootProviderModel({
+    flags,
+    config,
+    vault,
+    modelsRegistry,
+    renderer,
+    reader,
+    profileConfigPath,
+    noInteractiveMode
+  });
+  if (providerGate.kind === "exit") return providerGate.code;
+  ({ config, vault } = providerGate);
+  if (flags["webui"]) {
+    flags["tui"] = false;
+    flags["no-tui"] = true;
+  }
+  const launch = await applyBootLaunchChoices({
+    isInteractiveTTY,
+    simpleUiFullAuto,
+    flags,
+    config,
+    renderer,
+    reader,
+    profileConfigPath,
+    wpaths,
+    projectRoot
+  });
+  if (launch.kind === "exit") return launch.code;
+  config = launch.config;
   applyGoalTuiDefault(flags, positional);
   flags["director"] = true;
   return {
@@ -3311,7 +3423,7 @@ async function initializeCli(argv, options = {}) {
           error: err
         }).catch(() => void 0);
       }
-      writeErr2(
+      writeErr4(
         `WebUI session child argument error: ${err instanceof Error ? err.message : String(err)}
 `
       );
@@ -3370,7 +3482,7 @@ async function initializeCli(argv, options = {}) {
         error: err
       }).catch(() => void 0);
     }
-    writeErr2(
+    writeErr4(
       `WebUI session child argument error: ${err instanceof Error ? err.message : String(err)}
 `
     );
@@ -3399,7 +3511,7 @@ async function initializeCli(argv, options = {}) {
         recoverable: false,
         error: err
       }).catch(() => void 0);
-      writeErr2(
+      writeErr4(
         `WebUI session child argument error: ${err instanceof Error ? err.message : String(err)}
 `
       );
@@ -3449,4 +3561,4 @@ async function initializeCli(argv, options = {}) {
 export {
   initializeCli
 };
-//# sourceMappingURL=cli-context-7HK67B2Z.js.map
+//# sourceMappingURL=cli-context-I6HJCVCV.js.map