@wrongstack/cli 1.0.35 → 1.0.36

package/dist/{acp-T77EAEDB.js → acp-QLU7T5WX.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-NRXWOMK7.js";
 import {
   startCliHqConnection
-} from "./chunk-4UWCMBPG.js";
+} from "./chunk-BJH44J7G.js";
 import "./chunk-SDJCLEK6.js";
 import "./chunk-F5DCFAKI.js";
 
@@ -1112,7 +1112,7 @@ var acpCmd = async (args, deps) => {
   const sub = args[0];
   const loginIndex = sub === "auth" ? 0 : (sub === "server" || sub === "serve") && args[1] === "auth" ? 1 : -1;
   if (loginIndex >= 0) {
-    const { authCmd } = await import("./auth-M6LXZTDA.js");
+    const { authCmd } = await import("./auth-AED7RW7D.js");
     return authCmd(args.slice(loginIndex + 1), deps);
   }
   if (!sub || sub === "server" || sub === "serve") {
@@ -1193,4 +1193,4 @@ parallel:
 export {
   acpCmd
 };
-//# sourceMappingURL=acp-T77EAEDB.js.map
+//# sourceMappingURL=acp-QLU7T5WX.js.map

package/dist/{auth-M6LXZTDA.js → auth-AED7RW7D.js}

@@ -1,6 +1,6 @@
 import {
   providerCloudConfig
-} from "./chunk-TXAFIERF.js";
+} from "./chunk-L5NWFP5R.js";
 import {
   addCustomProvider,
   addFromCatalog,
@@ -20,7 +20,7 @@ import {
   runOAuthLoginKind,
   runOAuthLoginMenu,
   validateFamily
-} from "./chunk-GZSKLXYG.js";
+} from "./chunk-NEWXDNF2.js";
 import {
   renderAuthLocalHelpToString,
   wantsLocalHelp
@@ -33,11 +33,11 @@ import {
   normalizeKeys,
   nowIso,
   writeKeysBack
-} from "./chunk-ZYACRPLN.js";
+} from "./chunk-ULYAI7CP.js";
 import {
   activeProfileConfigPath
 } from "./chunk-YMXXOOFN.js";
-import "./chunk-4BX2YDTQ.js";
+import "./chunk-4JMAWKLA.js";
 import {
   restoreFlags
 } from "./chunk-CSAPOCBP.js";
@@ -748,4 +748,4 @@ async function runAuthRemove(deps, providerId) {
 export {
   authCmd
 };
-//# sourceMappingURL=auth-M6LXZTDA.js.map
+//# sourceMappingURL=auth-AED7RW7D.js.map

package/dist/{automation-MCDFCIMV.js → automation-3E3AUPBF.js}

@@ -38,7 +38,10 @@ async function resolveAutomationCredentialBundle(refs, paths, vault) {
     let config = profiles.get(ref.profile);
     if (!config) {
       config = decryptConfigSecrets(
-        JSON.parse(await readFile(paths.profileConfig(ref.profile), "utf8")),
+        // A leading UTF-8 BOM is valid (RFC 8259); the config loader accepts it.
+        JSON.parse(
+          (await readFile(paths.profileConfig(ref.profile), "utf8")).replace(/^\uFEFF/, "")
+        ),
         vault
       );
       profiles.set(ref.profile, config);
@@ -201,7 +204,10 @@ var automationCmd = async (args, deps) => {
         for (const ref of spec.credentials ?? []) {
           try {
             const profile = JSON.parse(
-              await readFile2(deps.paths.profileConfig(ref.profile), "utf8")
+              (await readFile2(deps.paths.profileConfig(ref.profile), "utf8")).replace(
+                /^\uFEFF/,
+                ""
+              )
             );
             const provider = profile.providers && Object.hasOwn(profile.providers, ref.provider) ? profile.providers[ref.provider] : void 0;
             const key = provider?.apiKeys?.find(
@@ -326,8 +332,17 @@ Token file: ${path.join(directory, "token.txt")}
           mode: 384
         })
       );
+      let lastTickError;
       while (!abort.signal.aborted) {
-        await service.tick();
+        try {
+          await service.tick();
+          lastTickError = void 0;
+        } catch (error) {
+          const message = toErrorMessage(error);
+          if (message !== lastTickError) deps.renderer.write(`automation: ${message}
+`);
+          lastTickError = message;
+        }
         await new Promise((resolve2) => {
           const done = () => {
             clearTimeout(timer);
@@ -366,4 +381,4 @@ Token file: ${path.join(directory, "token.txt")}
 export {
   automationCmd
 };
-//# sourceMappingURL=automation-MCDFCIMV.js.map
+//# sourceMappingURL=automation-3E3AUPBF.js.map

package/dist/{boot-auto-thin-YMAZI3QL.js → boot-auto-thin-AGJ6TAWY.js}

@@ -1,10 +1,10 @@
 import {
   persistConfigSetting
-} from "./chunk-KMU7GF7X.js";
+} from "./chunk-RE73FP2X.js";
 import {
   activeProfileConfigPath
 } from "./chunk-YMXXOOFN.js";
-import "./chunk-4BX2YDTQ.js";
+import "./chunk-4JMAWKLA.js";
 
 // src/boot/boot-auto-thin.ts
 import {
@@ -99,4 +99,4 @@ async function runBootAutoThin(deps) {
 export {
   runBootAutoThin
 };
-//# sourceMappingURL=boot-auto-thin-YMAZI3QL.js.map
+//# sourceMappingURL=boot-auto-thin-AGJ6TAWY.js.map

package/dist/{chunk-4BX2YDTQ.js → chunk-4JMAWKLA.js}

@@ -185,8 +185,14 @@ async function ensureHistoryDir(homeFn = defaultHomeDir, targetConfigPath) {
   }
 }
 async function readIndex(homeFn = defaultHomeDir, targetConfigPath) {
+  let raw;
+  try {
+    raw = await fs.readFile(historyIndexPath(homeFn, targetConfigPath), "utf8");
+  } catch (err) {
+    if (err.code !== "ENOENT") throw err;
+    return rebuildIndexFromEntries(homeFn, targetConfigPath);
+  }
   try {
-    const raw = await fs.readFile(historyIndexPath(homeFn, targetConfigPath), "utf8");
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed === "object" && Array.isArray(parsed.entries)) {
       const entries = parsed.entries.filter(
@@ -194,10 +200,44 @@ async function readIndex(homeFn = defaultHomeDir, targetConfigPath) {
       );
       return { version: 1, entries };
     }
-    return { version: 1, entries: [] };
   } catch {
-    return { version: 1, entries: [] };
   }
+  return rebuildIndexFromEntries(homeFn, targetConfigPath);
+}
+async function rebuildIndexFromEntries(homeFn = defaultHomeDir, targetConfigPath) {
+  const dir = historyDir(homeFn, targetConfigPath);
+  let files;
+  try {
+    files = (await fs.readdir(dir)).filter((file) => file.endsWith(".json"));
+  } catch (err) {
+    if (err.code === "ENOENT") return { version: 1, entries: [] };
+    throw err;
+  }
+  const entries = [];
+  for (const file of files) {
+    const id = file.slice(0, -".json".length);
+    let raw;
+    try {
+      raw = await fs.readFile(path.join(dir, file), "utf8");
+    } catch (err) {
+      if (err.code === "ENOENT") continue;
+      entries.push({ id, timestamp: "", description: "" });
+      continue;
+    }
+    try {
+      const entry = JSON.parse(raw);
+      if (entry.id === id && typeof entry.timestamp === "string") {
+        entries.push({
+          id,
+          timestamp: entry.timestamp,
+          description: typeof entry.description === "string" ? entry.description : ""
+        });
+      }
+    } catch {
+    }
+  }
+  entries.sort((a, b) => b.timestamp.localeCompare(a.timestamp));
+  return { version: 1, entries };
 }
 async function writeIndex(idx, homeFn = defaultHomeDir, targetConfigPath) {
   await ensureHistoryDir(homeFn, targetConfigPath);
@@ -297,6 +337,7 @@ async function appendHistory(oldCfg, newCfg, description, homeFn = defaultHomeDi
   }
   await withFileLock(historyIndexPath(homeFn, targetConfigPath), async () => {
     const idx = await readIndex(homeFn, targetConfigPath);
+    idx.entries = idx.entries.filter((e) => e.id !== id);
     idx.entries.unshift({ id, timestamp, description });
     await pruneHistoryEntries(idx, homeFn, targetConfigPath);
     await writeIndex(idx, homeFn, targetConfigPath);
@@ -398,4 +439,4 @@ export {
   restoreFromHistory,
   restoreLast
 };
-//# sourceMappingURL=chunk-4BX2YDTQ.js.map
+//# sourceMappingURL=chunk-4JMAWKLA.js.map

package/dist/{chunk-TWSQTQKR.js → chunk-4R6TVMYA.js}

@@ -1,6 +1,6 @@
 import {
   mutateConfigProviders
-} from "./chunk-ZYACRPLN.js";
+} from "./chunk-ULYAI7CP.js";
 import {
   activeProfileConfigPath
 } from "./chunk-YMXXOOFN.js";
@@ -51,4 +51,4 @@ export {
   installProviderPersisters,
   applyProviderOAuthRefresh2 as applyProviderOAuthRefresh
 };
-//# sourceMappingURL=chunk-TWSQTQKR.js.map
+//# sourceMappingURL=chunk-4R6TVMYA.js.map

package/dist/{chunk-HHRYIDOW.js → chunk-ACW64W4M.js}

@@ -1,6 +1,6 @@
 import {
   backupCurrent
-} from "./chunk-4BX2YDTQ.js";
+} from "./chunk-4JMAWKLA.js";
 
 // src/wiring/external-plugins.ts
 import { isAbsolute, join, resolve } from "node:path";
@@ -356,11 +356,25 @@ import { homedir } from "node:os";
 import { join as join2 } from "node:path";
 import { updateJsonObjectFile } from "@wrongstack/core/utils";
 async function readConfig(file) {
+  let raw;
   try {
-    return JSON.parse(await fs.readFile(file, "utf8"));
+    raw = await fs.readFile(file, "utf8");
+  } catch (error) {
+    if (error.code === "ENOENT") return {};
+    throw error;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw.replace(/^\uFEFF/, ""));
   } catch {
-    return {};
+    throw new Error(
+      `Profile config "${file}" is not valid JSON \u2014 fix or remove it before changing plugins`
+    );
   }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new Error(`Profile config "${file}" must contain a JSON object`);
+  }
+  return parsed;
 }
 function pluginName(p) {
   return typeof p === "string" ? p : p.name;
@@ -411,6 +425,7 @@ import { execFile } from "node:child_process";
 import * as fs2 from "node:fs/promises";
 import { join as join3 } from "node:path";
 import { buildChildEnv } from "@wrongstack/core/utils";
+import { treeKill } from "@wrongstack/core/utils/tree-kill";
 import { resolveExecInvocation } from "@wrongstack/plugins/runtime";
 function detectPackageManager(args) {
   const override = args.find((a) => a.startsWith("--pm="));
@@ -467,7 +482,10 @@ function runPackageManagerInstall(pm, args, cwd) {
       });
       return;
     }
-    execFile(
+    let settled = false;
+    let timedOut = false;
+    let timer;
+    const child = execFile(
       invocation.cmd,
       invocation.args,
       {
@@ -476,20 +494,29 @@ function runPackageManagerInstall(pm, args, cwd) {
         // untrusted package lifecycle scripts — with the full inherited
         // environment. Strip credentials via the shared child env.
         env: buildChildEnv(),
-        timeout: 3e5,
         maxBuffer: 16 * 1024 * 1024,
         windowsHide: true,
         ...invocation.windowsVerbatimArguments ? { windowsVerbatimArguments: true } : {}
       },
       (err, stdout, stderr) => {
+        settled = true;
+        clearTimeout(timer);
         const code = err ? err.code ?? 1 : 0;
         resolvePromise({
-          code: typeof code === "number" ? code : 1,
+          code: typeof code === "number" && !timedOut ? code : 1,
           stdout: typeof stdout === "string" ? stdout : "",
           stderr: typeof stderr === "string" ? stderr : ""
         });
       }
     );
+    if (!settled) {
+      timer = setTimeout(() => {
+        timedOut = true;
+        treeKill(child);
+        child.stdout?.destroy();
+        child.stderr?.destroy();
+      }, 3e5);
+    }
   });
 }
 async function installPluginPackage(spec, args, deps) {
@@ -1109,4 +1136,4 @@ export {
   PLUGIN_AUDIT_ENTRIES,
   runPluginManagementCommand
 };
-//# sourceMappingURL=chunk-HHRYIDOW.js.map
+//# sourceMappingURL=chunk-ACW64W4M.js.map

package/dist/{chunk-LKFKO4JW.js → chunk-B6EHK772.js}

@@ -4,7 +4,7 @@ import {
 import {
   PLUGIN_AUDIT_ENTRIES,
   loadExternalPlugins
-} from "./chunk-HHRYIDOW.js";
+} from "./chunk-ACW64W4M.js";
 
 // src/wiring/plugins.ts
 import { join } from "node:path";
@@ -306,4 +306,4 @@ export {
   BUILTIN_PLUGIN_NAME_HINTS,
   setupPlugins
 };
-//# sourceMappingURL=chunk-LKFKO4JW.js.map
+//# sourceMappingURL=chunk-B6EHK772.js.map

package/dist/{chunk-4UWCMBPG.js → chunk-BJH44J7G.js}

@@ -413,9 +413,9 @@ function pruneExpiredTombstones(state, now) {
   return changed;
 }
 async function readState(projectRoot) {
+  const raw = await readKanbanMetadata(projectRoot, SYNC_STATE_KEY);
+  if (raw === null) return { boards: {}, tombstones: {} };
   try {
-    const raw = await readKanbanMetadata(projectRoot, SYNC_STATE_KEY);
-    if (raw === null) return { boards: {}, tombstones: {} };
     const parsed = JSON.parse(raw);
     return { boards: parsed.boards ?? {}, tombstones: parsed.tombstones ?? {} };
   } catch {
@@ -686,4 +686,4 @@ function startCliHqConnection(options) {
 export {
   startCliHqConnection
 };
-//# sourceMappingURL=chunk-4UWCMBPG.js.map
+//# sourceMappingURL=chunk-BJH44J7G.js.map

package/dist/{chunk-6Z6C6ZHH.js → chunk-GF7LUWQS.js}

@@ -49,6 +49,7 @@ import {
   watchHqAuthFile
 } from "@wrongstack/core/hq";
 import { createCompatibilityTrustBoundary } from "@wrongstack/core/security";
+import { isPidAlive } from "@wrongstack/core/utils";
 import { WebSocket as WebSocket4, WebSocketServer } from "ws";
 
 // src/hq-recovery-html.ts
@@ -2890,7 +2891,7 @@ async function handleApiAgentMessages(req, res, match, agentMessages) {
 async function handleApiSystemUpdate(res) {
   const [{ checkForUpdate }, { detectUpdatePackageName }] = await Promise.all([
     import("./update-check-VLVT4IV2.js"),
-    import("./update-6OEPAEUV.js")
+    import("./update-LHCWAWEZ.js")
   ]);
   const packageName = detectUpdatePackageName();
   const info = await checkForUpdate({ packageName });
@@ -5002,14 +5003,7 @@ async function startHqServerWithAuth(options, host, port, dataDir, firstRunAuth)
           const metadataPath = path8.join(projectDir, ".mailbox-server.json");
           const ownerPid = await fs4.readFile(metadataPath, "utf8").then((raw) => JSON.parse(raw).pid).catch(() => void 0);
           if (ownerPid === void 0) return;
-          let ownerAlive = false;
-          try {
-            process.kill(ownerPid, 0);
-            ownerAlive = true;
-          } catch {
-            ownerAlive = false;
-          }
-          if (!ownerAlive) {
+          if (!isPidAlive(ownerPid)) {
             await fs4.rm(metadataPath, { force: true }).catch(() => {
             });
             return;
@@ -5367,4 +5361,4 @@ export {
   startHqServer,
   HqInsecureExposureError2 as HqInsecureExposureError
 };
-//# sourceMappingURL=chunk-6Z6C6ZHH.js.map
+//# sourceMappingURL=chunk-GF7LUWQS.js.map

package/dist/{chunk-TXAFIERF.js → chunk-L5NWFP5R.js}

@@ -1,7 +1,7 @@
 import {
   loadConfigProviders,
   mutateConfigProviders
-} from "./chunk-ZYACRPLN.js";
+} from "./chunk-ULYAI7CP.js";
 
 // src/provider-cloud-config.ts
 import {
@@ -34,4 +34,4 @@ async function providerCloudConfig(id, updates, configPath, vault) {
 export {
   providerCloudConfig
 };
-//# sourceMappingURL=chunk-TXAFIERF.js.map
+//# sourceMappingURL=chunk-L5NWFP5R.js.map

package/dist/{chunk-LDXXMPMS.js → chunk-LPGZ3NUF.js}

@@ -1,48 +1,48 @@
 
 // src/subcommands/index.ts
 var loaders = {
-  automation: async () => (await import("./automation-MCDFCIMV.js")).automationCmd,
+  automation: async () => (await import("./automation-3E3AUPBF.js")).automationCmd,
   sandbox: async () => (await import("./sandbox-TYGD6FI2.js")).sandboxCmd,
-  acp: async () => (await import("./acp-T77EAEDB.js")).acpCmd,
+  acp: async () => (await import("./acp-QLU7T5WX.js")).acpCmd,
   init: async () => (await import("./init-DRMMFG2G.js")).initCmd,
-  auth: async () => (await import("./auth-M6LXZTDA.js")).authCmd,
-  update: async () => (await import("./update-6OEPAEUV.js")).updateCmd,
+  auth: async () => (await import("./auth-AED7RW7D.js")).authCmd,
+  update: async () => (await import("./update-LHCWAWEZ.js")).updateCmd,
   remote: async () => (await import("./remote-C74BCNND.js")).remoteCmd,
-  sessions: async () => (await import("./sessions-config-VE26SB56.js")).sessionsCmd,
-  config: async () => (await import("./sessions-config-VE26SB56.js")).configCmd,
-  "config-export": async () => (await import("./config-transfer-VOIFY7U4.js")).configExportCmd,
-  "config-import": async () => (await import("./config-transfer-VOIFY7U4.js")).configImportCmd,
+  sessions: async () => (await import("./sessions-config-RQRQDW5Q.js")).sessionsCmd,
+  config: async () => (await import("./sessions-config-RQRQDW5Q.js")).configCmd,
+  "config-export": async () => (await import("./config-transfer-YPD7HYXH.js")).configExportCmd,
+  "config-import": async () => (await import("./config-transfer-YPD7HYXH.js")).configImportCmd,
   rewind: async () => (await import("./rewind-7AULJS7F.js")).rewindCmd,
   replay: async () => (await import("./replay-JJ2NOWD6.js")).replayCmd,
   audit: async () => (await import("./audit-KCBTHUQI.js")).auditCmd,
   tools: async () => (await import("./tools-skills-33AI6K6S.js")).toolsCmd,
   skills: async () => (await import("./tools-skills-33AI6K6S.js")).skillsCmd,
   "skill-suggest": async () => (await import("./skill-suggest-THANK3LV.js")).skillSuggestCmd,
-  typesafe: async () => (await import("./typesafe-NHC322W5.js")).typesafeCmd,
-  providers: async () => (await import("./providers-models-37DUV2GW.js")).providersCmd,
-  models: async () => (await import("./providers-models-37DUV2GW.js")).modelsCmd,
+  typesafe: async () => (await import("./typesafe-KW2XHOG3.js")).typesafeCmd,
+  providers: async () => (await import("./providers-models-S3S6VXME.js")).providersCmd,
+  models: async () => (await import("./providers-models-S3S6VXME.js")).modelsCmd,
   mcp: async () => (await import("./mcp-LBS45HWZ.js")).mcpCmd,
-  plugin: async () => (await import("./plugin-usage-3TZGROK7.js")).pluginCmd,
-  plugins: async () => (await import("./plugin-usage-3TZGROK7.js")).pluginCmd,
+  plugin: async () => (await import("./plugin-usage-EM752WHG.js")).pluginCmd,
+  plugins: async () => (await import("./plugin-usage-EM752WHG.js")).pluginCmd,
   diag: async () => (await import("./diag-doctor-BIZAFIAT.js")).diagCmd,
   doctor: async () => (await import("./diag-doctor-BIZAFIAT.js")).doctorCmd,
   "proxy-status": async () => (await import("./diag-doctor-BIZAFIAT.js")).proxyCmd,
   export: async () => (await import("./export-VVRIOWFV.js")).exportCmd,
-  usage: async () => (await import("./plugin-usage-3TZGROK7.js")).usageCmd,
+  usage: async () => (await import("./plugin-usage-EM752WHG.js")).usageCmd,
   version: async () => (await import("./version-help-JQGRPDJW.js")).versionCmd,
   help: async () => (await import("./version-help-JQGRPDJW.js")).helpCmd,
   projects: async () => (await import("./projects-T4CZCA25.js")).projectsCmd,
-  modeldiag: async () => (await import("./modeldiag-NEPTLFZW.js")).modeldiagCmd,
+  modeldiag: async () => (await import("./modeldiag-F3LUF4VJ.js")).modeldiagCmd,
   quick: async () => (await import("./quick-CNB4Z3HS.js")).quickCmd,
   bench: async () => (await import("./bench-MMZHFHDL.js")).benchCmd,
   chronicle: async () => (await import("./chronicle-PBJS7BN6.js")).chronicleCmd,
-  hq: async () => (await import("./hq-5OIEKB4V.js")).hqCmd,
-  mailbox: async () => (await import("./mailbox-serve-S536N66F.js")).mailboxServeCmd,
+  hq: async () => (await import("./hq-BBLGEEUH.js")).hqCmd,
+  mailbox: async () => (await import("./mailbox-serve-DRWJVMYU.js")).mailboxServeCmd,
   permissions: async () => (await import("./permissions-PL27UHYD.js")).permissionsCmd,
   project: async () => (await import("./project-AOQI5XTK.js")).projectCmd,
-  sage: async () => (await import("./sage-FFKUOCQL.js")).sageCmd,
+  sage: async () => (await import("./sage-BMRDJCDI.js")).sageCmd,
   governance: async () => (await import("./governance-RYSHV675.js")).governanceCmd,
-  "import-claude-code": async () => (await import("./import-claude-code-AYG24RG2.js")).importClaudeCodeCmd
+  "import-claude-code": async () => (await import("./import-claude-code-GHIS2F7Y.js")).importClaudeCodeCmd
 };
 var subcommands = Object.fromEntries(
   Object.entries(loaders).map(
@@ -58,4 +58,4 @@ export {
   subcommands,
   subcommandNames
 };
-//# sourceMappingURL=chunk-LDXXMPMS.js.map
+//# sourceMappingURL=chunk-LPGZ3NUF.js.map

package/dist/{chunk-GZSKLXYG.js → chunk-NEWXDNF2.js}

@@ -12,11 +12,11 @@ import {
   nowIso,
   resolveActiveApiKey,
   writeKeysBack
-} from "./chunk-ZYACRPLN.js";
+} from "./chunk-ULYAI7CP.js";
 import {
   appendHistory,
   backupCurrent
-} from "./chunk-4BX2YDTQ.js";
+} from "./chunk-4JMAWKLA.js";
 import {
   openBrowser
 } from "./chunk-DAKVBMD4.js";
@@ -172,7 +172,7 @@ function decideAuthLocalEvents(opts) {
 }
 
 // src/auth-menu/provider-auth-login.ts
-import { color } from "@wrongstack/core/utils";
+import { color, toErrorMessage } from "@wrongstack/core/utils";
 import {
   applyProviderAuthOutcome,
   createBuiltinProviderAuthRegistry
@@ -289,7 +289,7 @@ async function runProviderAuthLogin(deps, strategyId, opts = {}) {
 `));
     return 0;
   } catch (error) {
-    const message = error instanceof DOMException && error.name === "AbortError" ? "Login cancelled." : error instanceof Error ? error.message : String(error);
+    const message = error instanceof DOMException && error.name === "AbortError" ? "Login cancelled." : toErrorMessage(error);
     deps.renderer.writeError(`  Login failed: ${message}`);
     return 1;
   } finally {
@@ -845,7 +845,7 @@ import {
 
 // src/picker.ts
 import os from "node:os";
-import { color as color8, expectDefined as expectDefined2, toErrorMessage, withFileLock } from "@wrongstack/core/utils";
+import { color as color8, expectDefined as expectDefined2, toErrorMessage as toErrorMessage2, withFileLock } from "@wrongstack/core/utils";
 
 // src/picker-model-picker.ts
 import {
@@ -1341,7 +1341,7 @@ async function saveToGlobalConfig(configPath, provider, model, options = {}) {
           JSON.stringify({
             level: "warn",
             event: "picker.backup_failed",
-            message: toErrorMessage(err),
+            message: toErrorMessage2(err),
             timestamp: (/* @__PURE__ */ new Date()).toISOString()
           })
         );
@@ -1364,7 +1364,7 @@ async function saveToGlobalConfig(configPath, provider, model, options = {}) {
       JSON.stringify({
         level: "warn",
         event: "picker.save_failed",
-        message: toErrorMessage(err),
+        message: toErrorMessage2(err),
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
       })
     );
@@ -2024,4 +2024,4 @@ export {
   addCustomProvider,
   addKeyForProvider
 };
-//# sourceMappingURL=chunk-GZSKLXYG.js.map
+//# sourceMappingURL=chunk-NEWXDNF2.js.map

package/dist/{chunk-6SIUTX75.js → chunk-NOZJIN46.js}

@@ -127,7 +127,6 @@ async function spawnHqAgent(director, sessionId, role, task, maxIterations) {
   const base = FLEET_ROSTER[role] ?? {
     id: `manual-${Date.now()}`,
     name: role,
-    maxIterations: maxIterations ?? 0,
     maxToolCalls: 200
   };
   const overrides = maxIterations !== void 0 ? { maxIterations } : {};
@@ -157,4 +156,4 @@ export {
   spawnHqAgent,
   createHqFleetControl
 };
-//# sourceMappingURL=chunk-6SIUTX75.js.map
+//# sourceMappingURL=chunk-NOZJIN46.js.map

package/dist/{chunk-KMU7GF7X.js → chunk-RE73FP2X.js}

@@ -1,7 +1,7 @@
 import {
   appendHistory,
   backupCurrent
-} from "./chunk-4BX2YDTQ.js";
+} from "./chunk-4JMAWKLA.js";
 
 // src/settings-menu.ts
 import * as fs from "node:fs/promises";
@@ -246,4 +246,4 @@ export {
   persistTelegramConfig,
   deriveFsAccessPair
 };
-//# sourceMappingURL=chunk-KMU7GF7X.js.map
+//# sourceMappingURL=chunk-RE73FP2X.js.map

package/dist/{chunk-LDV4ERNV.js → chunk-RYTSPBNM.js}

@@ -22,7 +22,7 @@ async function handleHelpVersionShortCircuit(argv) {
   }
   if (earlyFlags["help"] === true) {
     if (positional.length > 0) {
-      const { subcommandNames } = await import("./subcommands-DTKBXLPU.js");
+      const { subcommandNames } = await import("./subcommands-75IB23LS.js");
       if (subcommandNames.includes(positional[0])) {
         const first = positional[0];
         const deep = positional[1];
@@ -43,4 +43,4 @@ async function handleHelpVersionShortCircuit(argv) {
 export {
   handleHelpVersionShortCircuit
 };
-//# sourceMappingURL=chunk-LDV4ERNV.js.map
+//# sourceMappingURL=chunk-RYTSPBNM.js.map

package/dist/{chunk-WTJDSTYD.js → chunk-T5KR6SNO.js}

@@ -23,7 +23,7 @@ var APPLIED_FMT = `
 `;
 async function printStandaloneUpdateNotice(info, config) {
   const [{ autoUpdateEnabled, standaloneUpdater, takeAppliedUpdate }, { isNewer }, version] = await Promise.all([
-    import("./standalone-auto-update-VQC4GYCM.js"),
+    import("./standalone-auto-update-QUXOZ4B5.js"),
     import("./update-check-VLVT4IV2.js"),
     import("./version-JB2UAV2A.js")
   ]);
@@ -102,4 +102,4 @@ export {
   applySessionShellDefault,
   runPreflight
 };
-//# sourceMappingURL=chunk-WTJDSTYD.js.map
+//# sourceMappingURL=chunk-T5KR6SNO.js.map

package/dist/{chunk-ZYACRPLN.js → chunk-ULYAI7CP.js}

@@ -58,6 +58,9 @@ function maskedKey(key) {
   const tail = key.slice(-4);
   return `${color.dim(head + "\u2026")}${tail}`;
 }
+function stripConfigBom(raw) {
+  return raw.replace(/^\uFEFF/, "");
+}
 async function loadConfigProviders(configPath, vault, opts) {
   const warn = opts?.warn;
   const targetPath = opts?.profileConfigPath ?? configPath;
@@ -72,7 +75,7 @@ async function loadConfigProviders(configPath, vault, opts) {
   }
   let parsed;
   try {
-    parsed = JSON.parse(raw);
+    parsed = JSON.parse(stripConfigBom(raw));
     validateProviderConfigShape(parsed);
   } catch (err) {
     warn?.(`Config at ${targetPath} is not valid JSON: ${err.message}`);
@@ -118,7 +121,7 @@ async function mutateConfigProviders(configPath, vault, mutator, profileConfigPa
       }
       let parsed;
       try {
-        parsed = JSON.parse(raw);
+        parsed = JSON.parse(stripConfigBom(raw));
         validateProviderConfigShape(parsed);
       } catch (err) {
         if (fileExists) {
@@ -168,4 +171,4 @@ export {
   mutateConfigProviders,
   nowIso
 };
-//# sourceMappingURL=chunk-ZYACRPLN.js.map
+//# sourceMappingURL=chunk-ULYAI7CP.js.map

package/dist/{chunk-HLSHFXTO.js → chunk-WY74MMDB.js}

@@ -50,7 +50,7 @@ function normalizeMcpServerEntry(name, raw) {
 function parseLaunchMcpServers(text, source) {
   let doc;
   try {
-    doc = JSON.parse(text);
+    doc = JSON.parse(text.replace(/^\uFEFF/, ""));
   } catch (err) {
     throw new Error(`--mcp-config: ${source} is not valid JSON (${err.message})`);
   }
@@ -94,4 +94,4 @@ export {
   resolveLaunchMcpServers,
   effectiveMcpServers
 };
-//# sourceMappingURL=chunk-HLSHFXTO.js.map
+//# sourceMappingURL=chunk-WY74MMDB.js.map