@wrongstack/cli 1.0.6 → 1.0.8

package/dist/config-doctor.d.ts

@@ -47,7 +47,7 @@ export interface PluginSchemaInfo {
  *  every theme change), and a phantom `agents` entry (that field is nested
  *  under `acp`, never top-level) waved a stray top-level `agents` block
  *  through. Add a field to `Config` and `tsc` now names it here. */
-declare const KNOWN_TOP_LEVEL_KEYS: readonly ['version', 'activeProfile', 'provider', 'model', 'apiKey', 'baseUrl', 'maxConcurrent', 'uiLocale', 'themePreset', 'providers', 'models', 'modelMatrix', 'modelTiers', 'favoriteModels', 'favoriteModelsOnly', 'modelAvailabilitySchedule', 'context', 'tools', 'mcpServers', 'acp', 'fallbackModels', 'fallbackBridge', 'fallbackProfiles', 'fallbackProfile', 'fallbackAuto', 'fallbackMaxLastResortCandidates', 'fallbackStickiness', 'fallbackGateSeconds', 'hooks', 'plugins', 'pluginManager', 'log', 'features', 'Sage', 'skills', 'yolo', 'nextPrediction', 'cwd', 'autonomy', 'hints', 'debugStream', 'configScope', 'indexing', 'circuitBreaker', 'adaptiveConcurrency', 'launch', 'session', 'chronicle', 'modelRuntime', 'systemPrompt', 'hq', 'fleet', 'brain', 'sync', 'cloudSync', 'git', 'extensions'];
+declare const KNOWN_TOP_LEVEL_KEYS: readonly ['version', 'activeProfile', 'provider', 'model', 'apiKey', 'baseUrl', 'maxConcurrent', 'uiLocale', 'themePreset', 'providers', 'models', 'modelMatrix', 'modelTiers', 'favoriteModels', 'disabledModels', 'favoriteModelsOnly', 'modelAvailabilitySchedule', 'context', 'tools', 'mcpServers', 'acp', 'fallbackModels', 'fallbackBridge', 'fallbackProfiles', 'fallbackProfile', 'fallbackAuto', 'fallbackMaxLastResortCandidates', 'fallbackStickiness', 'fallbackGateSeconds', 'hooks', 'plugins', 'pluginManager', 'log', 'features', 'Sage', 'skills', 'yolo', 'nextPrediction', 'cwd', 'autonomy', 'hints', 'debugStream', 'configScope', 'indexing', 'circuitBreaker', 'adaptiveConcurrency', 'launch', 'session', 'chronicle', 'modelRuntime', 'systemPrompt', 'hq', 'fleet', 'brain', 'sync', 'cloudSync', 'git', 'extensions'];
 /** Compile-time `never` assertion: instantiating it with a non-empty union
  *  fails and the TS error text spells out the offending key names. */
 type AssertNever<T extends never> = T;

package/dist/execute-deps.d.ts

@@ -14,6 +14,7 @@ import type { BrainAutoRisk } from '@wrongstack/core/execution';
 import type { JournalEntry } from '@wrongstack/core/goal';
 import type { EventBus } from '@wrongstack/core/kernel';
 import type { SlashCommandRegistry } from '@wrongstack/core/registry';
+import type { StatuslineDensities, StatuslineLines } from '@wrongstack/core/statusline';
 import type { QueueStore } from '@wrongstack/core/storage';
 import type { AttachmentStore, AutonomyStage, Config, ConfigStore, MemoryPort, Message, ModelsRegistry, ModeStore, PromptLoader, ProviderConfig, ResolvedProvider, SessionEvent, SessionStore, SessionWriter, SkillLoader, TokenCounter } from '@wrongstack/core/types';
 import type { WstackPaths } from '@wrongstack/core/utils';
@@ -25,7 +26,6 @@ import type { ReadlineInputReader } from './input-reader.js';
 import type { LiveSettingsInput } from './live-settings-input.js';
 import type { TerminalRenderer } from './renderer.js';
 import type { AutonomyMode } from './services/autonomy-mode.js';
-import type { StatuslineDensities, StatuslineLines } from '@wrongstack/core/statusline';
 import type { StatuslineConfigKey } from './services/statusline-config.js';
 import type { SessionStats } from './session-stats.js';
 import type { UpdateInfo } from './update-check.js';
@@ -163,6 +163,8 @@ interface ProviderDeps {
             tools?: boolean | undefined;
             vision?: boolean | undefined;
             reasoning?: boolean | undefined;
+            /** Documented reasoning-effort levels (drives the picker strip). */
+            effortLevels?: readonly string[] | undefined;
             maxContext?: number | undefined;
             maxOutput?: number | undefined;
             inputCost?: number | undefined;

package/dist/{execution-Z6A26EG6.js → execution-FJE27VQ6.js}

@@ -212,7 +212,7 @@ async function runWebUIDispatch(ctx) {
   const isSimpleUi = !isSessionChild && flags["simpleui"] === true;
   agent.disableInteractiveConfirmation();
   renderer.setSilent(true);
-  const { runWebUI } = await import("./webui-server-OBV5JYJV.js");
+  const { runWebUI } = await import("./webui-server-3NYXBZHX.js");
   const flagValue = (names) => {
     for (const name of names) {
       if (!Object.hasOwn(flags, name)) continue;
@@ -1255,7 +1255,10 @@ async function onSDDOutput(output) {
 
 // src/boot/tui-session-resume.ts
 import * as path7 from "node:path";
-import { restoreSessionSubagentPolicy } from "@wrongstack/core/coordination";
+import {
+  restoreSessionSubagentModelPlan,
+  restoreSessionSubagentPolicy
+} from "@wrongstack/core/coordination";
 import { attachTodosCheckpoint, loadTodosCheckpoint } from "@wrongstack/core/storage";
 import { projectLastRequestTokens } from "@wrongstack/core/types/session-timeline";
 import { sessionScopedPath as sessionScopedPath2, toErrorMessage } from "@wrongstack/core/utils";
@@ -1425,6 +1428,7 @@ async function resumeSession(ctx, sessionId) {
     try {
       agent.ctx.state.replaceMessages(resumed.data.messages);
       restoreSessionSubagentPolicy(agent.ctx, resumed.data.events, resumed.data.subagentsAllowed);
+      restoreSessionSubagentModelPlan(agent.ctx, resumed.data.events);
     } catch (err) {
       agent.ctx.session = oldWriter;
       agent.ctx.state.replaceMessages(oldMessages);
@@ -3203,6 +3207,75 @@ var FleetStatusLine = class {
   }
 };
 
+// src/subagent-models/panel-service.ts
+import {
+  emptySubagentModelPlan,
+  formatSubagentSlot,
+  getSessionSubagentModelPlan,
+  setSessionSubagentModelPlan,
+  subagentSlotOccupancy
+} from "@wrongstack/core/coordination";
+function currentPlan(sessionId) {
+  return getSessionSubagentModelPlan(sessionId) ?? emptySubagentModelPlan();
+}
+function createSubagentModelsPanelHost(deps) {
+  const write = async (mutate) => {
+    const ctx = deps.getContext();
+    if (!ctx?.session) return "No active session \u2014 the plan cannot be saved.";
+    const plan = structuredClone(currentPlan(ctx.session.id));
+    mutate(plan);
+    try {
+      await setSessionSubagentModelPlan(ctx, plan);
+      return null;
+    } catch (err) {
+      return err instanceof Error ? err.message : String(err);
+    }
+  };
+  return {
+    snapshot() {
+      const sessionId = deps.getContext()?.session?.id;
+      const plan = currentPlan(sessionId);
+      const occupancy = subagentSlotOccupancy(sessionId);
+      const session = deps.getSessionTarget?.();
+      return {
+        enabled: plan.enabled,
+        lock: plan.lock,
+        followSessionModel: plan.followSessionModel === true,
+        sessionTarget: session?.provider ? `${session.provider}/${session.model ?? "?"}` : session?.model ?? "",
+        lanes: plan.slots.map((slot, i) => ({
+          target: formatSubagentSlot(slot),
+          busy: occupancy[i]?.subagentIds.length ?? 0,
+          ...slot.label ? { label: slot.label } : {}
+        })),
+        roles: Object.entries(plan.roles ?? {}).map(([role, slot]) => ({ role, target: formatSubagentSlot(slot) })).sort((a, b) => a.role.localeCompare(b.role))
+      };
+    },
+    setLane(index, target) {
+      return write((plan) => {
+        if (index < 0 || index >= plan.slots.length) return;
+        const slot = {};
+        if (target.provider) slot.provider = target.provider;
+        if (target.model) slot.model = target.model;
+        if (target.tier) slot.tier = target.tier;
+        if (target.fallbackProfile) slot.fallbackProfile = target.fallbackProfile;
+        if (target.label) slot.label = target.label;
+        plan.slots[index] = slot;
+      });
+    },
+    clearLane(index) {
+      return write((plan) => {
+        if (index < 0 || index >= plan.slots.length) return;
+        plan.slots[index] = {};
+      });
+    },
+    toggle(field) {
+      return write((plan) => {
+        plan[field] = plan[field] !== true;
+      });
+    }
+  };
+}
+
 // src/chimera-work-registry.ts
 function createChimeraWorkRegistry() {
   const pending = /* @__PURE__ */ new Set();
@@ -6554,6 +6627,10 @@ async function execute(deps) {
           getBrainData,
           onBrainRiskLevel,
           brainPanelHost: brainRuntime ? createBrainPanelHost({ brainRuntime }) : void 0,
+          subagentModelsHost: createSubagentModelsPanelHost({
+            getContext: () => agent.ctx,
+            getSessionTarget: () => ({ provider: config.provider, model: config.model })
+          }),
           getShadowData,
           onShadowStart,
           onShadowStop,
@@ -6840,4 +6917,4 @@ export {
   execute,
   resolveReviewerFallbackModels
 };
-//# sourceMappingURL=execution-Z6A26EG6.js.map
+//# sourceMappingURL=execution-FJE27VQ6.js.map

package/dist/{hq-V4PHEETW.js → hq-G5PCP325.js}

@@ -62,7 +62,7 @@ var hqCmd = async (args, deps) => {
   return 1;
 };
 async function startServer(deps) {
-  const { startHqServer } = await import("./hq-server-MZ7DV6X7.js");
+  const { startHqServer } = await import("./hq-server-G3VVVMIG.js");
   const dataDir = resolveDataDir(deps);
   const flags = deps.flags ?? {};
   const rawPublicUrl = typeof flags["hq-public-url"] === "string" ? flags["hq-public-url"] : process.env.WRONGSTACK_HQ_PUBLIC_URL;
@@ -357,7 +357,9 @@ async function computeAuditHashField(dataDir, warn) {
   return hash !== void 0 ? { contentHash: hash } : {};
 }
 var TOKEN_CAPABILITIES = {
-  browser: ["control.enqueue"],
+  // `control.approve` is grantable but never default — see
+  // DEFAULT_TOKEN_CAPABILITIES below.
+  browser: ["control.enqueue", "control.approve"],
   client: ["telemetry.publish", "control.execute"]
 };
 var DEFAULT_TOKEN_CAPABILITIES = {
@@ -727,7 +729,7 @@ function printHelp(deps) {
 `
   );
   deps.renderer.write(
-    `  --capabilities <csv>  Token grants (browser: control.enqueue; client: telemetry.publish,control.execute).
+    `  --capabilities <csv>  Token grants (browser: control.enqueue,control.approve; client: telemetry.publish,control.execute).
 `
   );
   deps.renderer.write(
@@ -785,7 +787,7 @@ function printTokenHelp(deps) {
 `
   );
   deps.renderer.write(
-    `  --capabilities <csv>  Comma-separated capability grants (browser: control.enqueue; client: telemetry.publish,control.execute).
+    `  --capabilities <csv>  Comma-separated capability grants (browser: control.enqueue,control.approve; client: telemetry.publish,control.execute).
 `
   );
   deps.renderer.write(
@@ -827,4 +829,4 @@ export {
   hqCmd,
   resolveAuditActor
 };
-//# sourceMappingURL=hq-V4PHEETW.js.map
+//# sourceMappingURL=hq-G5PCP325.js.map

package/dist/hq-command-controller.d.ts

@@ -17,6 +17,7 @@
  */
 import type { RemoteMailbox } from '@wrongstack/core/coordination';
 import type { HqPublisherCommandResult } from '@wrongstack/core/hq';
+import type { UserInputResponse } from '@wrongstack/core/types';
 /**
  * Mutable holder for the command dispatch targets. Each field is populated
  * lazily as the corresponding subsystem comes online (director on
@@ -68,6 +69,20 @@ export interface HqCommandController {
     ownsSession?: ((sessionId: string) => boolean) | undefined;
     /** Whether raw shell execution is explicitly opted-in by the operator. */
     allowRunCommand: () => boolean;
+    /**
+     * Answer a permission prompt that is live on this host.
+     *
+     * Returns false when the prompt is no longer pending — it was answered at
+     * the keyboard, aborted, or timed out. HQ mirrors prompts rather than owning
+     * them, so losing the race is the normal case and must be reported back
+     * instead of silently swallowed.
+     *
+     * Bound to the process-wide approval registry
+     * (`createApprovalRegistry` in `@wrongstack/core/hq`), which is the only
+     * holder of the resolver closures.
+     */
+    resolveApproval?: ((toolUseId: string, decision: 'yes' | 'no' | 'always' | 'deny', sessionId?: string | undefined) => boolean) | undefined;
+    resolveUserInput?: ((requestId: string, response: UserInputResponse, sessionId?: string | undefined) => boolean) | undefined;
     /** Apply a lifecycle transition through the project's Kanban IPC client. */
     kanbanTransition?: ((input: {
         boardId: string;

package/dist/{hq-server-MZ7DV6X7.js → hq-server-G3VVVMIG.js}

@@ -10,7 +10,7 @@ import {
   readLocalSubagentTranscript,
   sanitizeApiError,
   startHqServer
-} from "./chunk-PQZPHGGD.js";
+} from "./chunk-XIZZ2EXG.js";
 import "./chunk-HXJYHAR4.js";
 import "./chunk-5EA6OTLJ.js";
 import "./chunk-Q7E3BPDU.js";
@@ -27,4 +27,4 @@ export {
   sanitizeApiError,
   startHqServer
 };
-//# sourceMappingURL=hq-server-MZ7DV6X7.js.map
+//# sourceMappingURL=hq-server-G3VVVMIG.js.map

package/dist/index.js

@@ -16,14 +16,14 @@ async function main(argv) {
   applySessionShellDefault();
   const earlyFlags = parseArgs(argv).flags;
   if (earlyFlags["help"] === true || earlyFlags["version"] === true) {
-    const { handleHelpVersionShortCircuit } = await import("./short-circuit-flags-KBTYSJTW.js");
+    const { handleHelpVersionShortCircuit } = await import("./short-circuit-flags-RAT6UZVI.js");
     const earlyExit = await handleHelpVersionShortCircuit(argv);
     if (earlyExit !== null) return earlyExit;
   }
-  const { initializeCli } = await import("./cli-context-BYKJDAFF.js");
+  const { initializeCli } = await import("./cli-context-TIAP6YQK.js");
   const cliCtx = await initializeCli(argv);
   if (typeof cliCtx === "number") return cliCtx;
-  const { runInteractive } = await import("./cli-main-5WZBH3WA.js");
+  const { runInteractive } = await import("./cli-main-AKJHDSHX.js");
   return runInteractive(cliCtx);
 }
 

package/dist/input-reader.d.ts

@@ -1,4 +1,4 @@
-import type { InputReader, PromptOption } from '@wrongstack/core/types';
+import type { InputReader, PromptOption, ReadKeyOptions } from '@wrongstack/core/types';
 interface ReadlineInputReaderOptions {
     historyFile?: string | undefined;
     prompt?: string | undefined;
@@ -30,7 +30,7 @@ export declare class ReadlineInputReader implements InputReader {
      * protect and the ANSI clear/repaint would be noise in a file.
      */
     private installPromptGuard;
-    readKey(prompt: string, options: PromptOption[]): Promise<string>;
+    readKey(prompt: string, options: PromptOption[], opts?: ReadKeyOptions): Promise<string>;
     /**
      * Read a line of input while masking each character with a bullet so the
      * user gets visual confirmation that bytes are arriving (especially on

package/dist/{modeldiag-46CMWUNM.js → modeldiag-CJSFHZ3J.js}

@@ -52,6 +52,17 @@ var MODEL_PROFILES = [
     costTier: "premium",
     speedTier: "normal"
   },
+  {
+    provider: "openai",
+    // Must precede /gpt-4/ — every gpt-4o-mini id also contains gpt-4.
+    pattern: /gpt-4o-mini/i,
+    family: "GPT-4o Mini",
+    strengths: ["speed"],
+    bestFor: ["lightweight", "docs"],
+    avoidFor: ["planning"],
+    costTier: "budget",
+    speedTier: "fast"
+  },
   {
     provider: "openai",
     pattern: /gpt-4/i,
@@ -62,9 +73,11 @@ var MODEL_PROFILES = [
     speedTier: "fast"
   },
   {
-    provider: "openai",
-    pattern: /gpt-4o-mini/i,
-    family: "GPT-4o Mini",
+    provider: "google",
+    // Must precede /gemini-(?:2\.5|3)/ — flash variants (gemini-2.5-flash,
+    // gemini-3-flash, …) are budget/fast models and need this profile.
+    pattern: /gemini.*flash/i,
+    family: "Gemini Flash",
     strengths: ["speed"],
     bestFor: ["lightweight", "docs"],
     avoidFor: ["planning"],
@@ -80,16 +93,6 @@ var MODEL_PROFILES = [
     costTier: "standard",
     speedTier: "normal"
   },
-  {
-    provider: "google",
-    pattern: /gemini.*flash/i,
-    family: "Gemini Flash",
-    strengths: ["speed"],
-    bestFor: ["lightweight", "docs"],
-    avoidFor: ["planning"],
-    costTier: "budget",
-    speedTier: "fast"
-  },
   {
     provider: "deepseek",
     pattern: /deepseek/i,
@@ -685,7 +688,11 @@ async function runModeldiagBench(args, deps, providers, config, hasKey) {
 
 // src/subcommands/handlers/modeldiag-test.ts
 import { color as color4, toErrorMessage as toErrorMessage3 } from "@wrongstack/core/utils";
-import { makeProviderFromConfig as makeProviderFromConfig2, setOAuthTokenPersister } from "@wrongstack/providers";
+import {
+  buildProviderFactoriesFromRegistry,
+  makeProviderFromConfig as makeProviderFromConfig2,
+  setOAuthTokenPersister
+} from "@wrongstack/providers";
 
 // src/subcommands/handlers/model-smoke-test.ts
 import { ProviderError } from "@wrongstack/core/types";
@@ -876,6 +883,28 @@ async function runModelSmokeTests(params) {
 }
 
 // src/subcommands/handlers/modeldiag-test.ts
+async function createModelDiagSmokeProvider(params) {
+  const { providerId, config, modelsRegistry, providerFactories } = params;
+  const saved = config.providers?.[providerId];
+  const factoryType = saved?.type ?? providerId;
+  const resolved = await modelsRegistry.getProvider(providerId).catch(() => void 0) ?? (factoryType !== providerId ? await modelsRegistry.getProvider(factoryType).catch(() => void 0) : void 0);
+  const providerConfig = {
+    ...providerId === config.provider ? {
+      ...config.apiKey ? { apiKey: config.apiKey } : {},
+      ...config.baseUrl ? { baseUrl: config.baseUrl } : {}
+    } : {},
+    ...saved,
+    // Keep the user-visible alias on the factory input. The selected factory
+    // already captures the canonical models.dev provider and its per-model
+    // wire metadata.
+    type: providerId,
+    ...saved?.family ?? resolved?.family ? { family: saved?.family ?? resolved?.family } : {},
+    ...saved?.baseUrl ?? resolved?.apiBase ? { baseUrl: saved?.baseUrl ?? resolved?.apiBase } : {},
+    ...saved?.envVars ?? resolved?.envVars ? { envVars: saved?.envVars ?? resolved?.envVars } : {}
+  };
+  const factory = providerFactories.get(factoryType);
+  return factory ? factory.create(providerConfig) : makeProviderFromConfig2(providerId, providerConfig);
+}
 async function runModeldiagTest(args, deps, config) {
   const writeLine = (line = "") => {
     deps.renderer.write(`${line}
@@ -1010,25 +1039,20 @@ async function runModeldiagTest(args, deps, config) {
   });
   let results;
   try {
+    const providerFactories = new Map(
+      (await buildProviderFactoriesFromRegistry({ registry: deps.modelsRegistry })).map(
+        (factory) => [factory.type, factory]
+      )
+    );
     results = await runModelSmokeTests({
       targets,
       options: smokeOptions,
-      createProvider: async (providerId) => {
-        const saved = config.providers?.[providerId];
-        const resolved = await deps.modelsRegistry.getProvider(providerId).catch(() => void 0) ?? (saved?.type && saved.type !== providerId ? await deps.modelsRegistry.getProvider(saved.type).catch(() => void 0) : void 0);
-        const providerConfig = {
-          ...providerId === config.provider ? {
-            ...config.apiKey ? { apiKey: config.apiKey } : {},
-            ...config.baseUrl ? { baseUrl: config.baseUrl } : {}
-          } : {},
-          ...saved,
-          type: providerId,
-          ...saved?.family ?? resolved?.family ? { family: saved?.family ?? resolved?.family } : {},
-          ...saved?.baseUrl ?? resolved?.apiBase ? { baseUrl: saved?.baseUrl ?? resolved?.apiBase } : {},
-          ...saved?.envVars ?? resolved?.envVars ? { envVars: saved?.envVars ?? resolved?.envVars } : {}
-        };
-        return makeProviderFromConfig2(providerId, providerConfig);
-      },
+      createProvider: (providerId) => createModelDiagSmokeProvider({
+        providerId,
+        config,
+        modelsRegistry: deps.modelsRegistry,
+        providerFactories
+      }),
       onTargetComplete: resultLines
     });
   } finally {
@@ -1329,4 +1353,4 @@ var modeldiagCmd = async (args, deps) => {
 export {
   modeldiagCmd
 };
-//# sourceMappingURL=modeldiag-46CMWUNM.js.map
+//# sourceMappingURL=modeldiag-CJSFHZ3J.js.map

package/dist/permission-prompt-mirror.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Mirror the plain REPL's permission prompt to HQ.
+ *
+ * Every other surface converges on the executor's confirm path, so one
+ * listener on the EventBus mirrors them all. The REPL does not: its prompt is
+ * asked by the permission policy's own `promptDelegate` inside `evaluate()`,
+ * which never reaches that path and raises no event. Without this wrapper the
+ * REPL is the one surface whose approvals are invisible from HQ — a partial
+ * guarantee that is worse than either a whole one or none, because an operator
+ * cannot tell which kind of session they are looking at.
+ *
+ * Two things make this honest rather than a hack:
+ *
+ *  - **The terminal read is cancellable.** When HQ answers first, the pending
+ *    `readKey` is aborted so stdin comes out of raw mode and the user's next
+ *    keystroke is not eaten by a question nobody is asking.
+ *  - **The mirrored card has a heartbeat, not a fake deadline.** A terminal
+ *    prompt waits for a keypress however long that takes, so it has no natural
+ *    deadline to publish — but a card with no deadline breaks the single
+ *    invariant the dashboard relies on ("pending cannot outlive its
+ *    deadline"), and a card with a fake one vanishes while the question is
+ *    still on screen. Renewing a short window on a timer keeps both true.
+ *
+ * The terminal prompt's own behaviour is deliberately unchanged: it still
+ * blocks until answered, with no timeout of its own.
+ *
+ * @module permission-prompt-mirror
+ */
+import type { ApprovalRegistry } from '@wrongstack/core/hq';
+import type { Tool } from '@wrongstack/core/types';
+type PromptDecision = 'yes' | 'no' | 'always' | 'deny';
+type PromptDelegate = (tool: Tool, input: unknown, suggestedPattern: string) => Promise<PromptDecision>;
+type AbortablePromptDelegate = (tool: Tool, input: unknown, suggestedPattern: string, signal: AbortSignal) => Promise<PromptDecision>;
+/**
+ * How long a mirrored REPL card stays pending without a renewal, and how often
+ * it is renewed. The gap between them is the worst-case time a card outlives
+ * the process that raised it — a laptop that sleeps mid-prompt should not park
+ * a permanent card on someone's dashboard.
+ */
+export declare const REPL_MIRROR_TTL_MS = 60000;
+export declare const REPL_MIRROR_HEARTBEAT_MS = 20000;
+export interface MirroredPromptDelegateDeps {
+    /** The real terminal prompt. Must honour the abort signal it is handed. */
+    inner: AbortablePromptDelegate;
+    /**
+     * Looked up per call, not captured: the registry is created during boot and
+     * this delegate is built before it exists. Returning undefined simply means
+     * no mirroring — the terminal prompt still works.
+     */
+    getRegistry: () => ApprovalRegistry | undefined;
+    /** The session the prompt belongs to, so an HQ answer lands on it. */
+    getSessionId?: (() => string | undefined) | undefined;
+    now?: (() => number) | undefined;
+}
+export declare function makeMirroredPromptDelegate(deps: MirroredPromptDelegateDeps): PromptDelegate;
+/**
+ * Late-bound handle to the approval registry.
+ *
+ * The prompt delegate is built during container wiring; the registry is
+ * created later, once the HQ telemetry layer comes up. Rather than reorder
+ * boot for a feature that is optional by nature, the delegate reads through
+ * this holder at call time — a prompt only ever fires long after both exist.
+ * Empty simply means no mirroring.
+ */
+export interface ApprovalMirrorRef {
+    current?: ApprovalRegistry | undefined;
+    sessionId?: (() => string | undefined) | undefined;
+}
+export {};
+//# sourceMappingURL=permission-prompt-mirror.d.ts.map

package/dist/permission-prompt.d.ts

@@ -2,7 +2,16 @@ import type { InputReader, Tool } from '@wrongstack/core/types';
 type PromptDecision = 'yes' | 'no' | 'always' | 'deny';
 /** Signature the Agent expects for confirming tool calls. */
 export type ConfirmAwaiter = (tool: Tool, input: unknown, toolUseId: string, suggestedPattern: string) => Promise<'yes' | 'no' | 'always' | 'deny'>;
-export declare function makePromptDelegate(reader: InputReader): (tool: Tool, input: unknown, suggestedPattern: string) => Promise<PromptDecision>;
+/**
+ * The terminal approval prompt.
+ *
+ * `signal` exists because the same question can now be answered somewhere else
+ * — from the HQ dashboard — while this prompt is on screen. Aborting takes it
+ * down and, crucially, gets stdin back out of raw mode; see
+ * `permission-prompt-mirror.ts`. Absent, behaviour is exactly as before: the
+ * prompt blocks until a key is pressed.
+ */
+export declare function makePromptDelegate(reader: InputReader): (tool: Tool, input: unknown, suggestedPattern: string, signal?: AbortSignal) => Promise<PromptDecision>;
 /**
  * Create a ConfirmAwaiter for the CLI path. Wraps makePromptDelegate
  * with the ConfirmAwaiter type signature expected by the Agent.

package/dist/{providers-models-6MOGAOVK.js → providers-models-LFNZ5WI7.js}

@@ -1,6 +1,6 @@
 import {
   visibleModelIds
-} from "./chunk-VUVOMXWP.js";
+} from "./chunk-3VXYY5JC.js";
 import {
   activeProfileConfigPath
 } from "./chunk-YMXXOOFN.js";
@@ -660,4 +660,4 @@ export {
   modelsCmd,
   providersCmd
 };
-//# sourceMappingURL=providers-models-6MOGAOVK.js.map
+//# sourceMappingURL=providers-models-LFNZ5WI7.js.map

package/dist/{short-circuit-flags-KBTYSJTW.js → short-circuit-flags-RAT6UZVI.js}

@@ -1,10 +1,10 @@
 import {
   handleHelpVersionShortCircuit
-} from "./chunk-NR7BD73C.js";
+} from "./chunk-4OLAZIIN.js";
 import "./chunk-6WRKAACA.js";
 import "./chunk-XJXDOF63.js";
 import "./chunk-EK2P53GL.js";
 export {
   handleHelpVersionShortCircuit
 };
-//# sourceMappingURL=short-circuit-flags-KBTYSJTW.js.map
+//# sourceMappingURL=short-circuit-flags-RAT6UZVI.js.map

package/dist/slash-commands/subagent-models.d.ts

@@ -0,0 +1,4 @@
+import type { SlashCommand } from '@wrongstack/core/types';
+import type { SlashCommandContext } from './command-context.js';
+export declare function buildSubagentModelsCommand(opts: SlashCommandContext): SlashCommand;
+//# sourceMappingURL=subagent-models.d.ts.map

package/dist/subagent-models/panel-service.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Host bridge for the TUI `/subagent-models` panel.
+ *
+ * The panel is presentational; the session-scoped plan lives in core and is
+ * journaled through the session writer, which only the CLI has. Mutations
+ * return an error STRING rather than throwing so a rejected write lands as a
+ * panel hint instead of unmounting the TUI.
+ */
+import { setSessionSubagentModelPlan } from '@wrongstack/core/coordination';
+import type { SubagentModelsPanelHost } from '@wrongstack/tui';
+/** The slice of the agent context the plan writer needs. */
+type PlanWriteContext = Parameters<typeof setSessionSubagentModelPlan>[0];
+export interface SubagentModelsPanelServiceDeps {
+    /** The session's own provider/model — the target of "use session model". */
+    getSessionTarget?: (() => {
+        provider?: string;
+        model?: string;
+    }) | undefined;
+    /**
+     * Live agent context — re-read on every call so a session swap (F1/F10,
+     * /resume) is picked up. Typed off the core writer contract rather than the
+     * full AgentContext so this bridge only depends on what it actually uses.
+     */
+    getContext: () => PlanWriteContext | undefined;
+}
+export declare function createSubagentModelsPanelHost(deps: SubagentModelsPanelServiceDeps): SubagentModelsPanelHost;
+export {};
+//# sourceMappingURL=panel-service.d.ts.map

package/dist/subcommands/handlers/modeldiag-test.d.ts

@@ -3,6 +3,13 @@
  *
  * @module subcommands/handlers/modeldiag-test
  */
+import type { Config, ModelsRegistry, Provider, ProviderFactory } from '@wrongstack/core/types';
 import type { SubcommandDeps } from '../contracts.js';
+export declare function createModelDiagSmokeProvider(params: {
+    providerId: string;
+    config: Config;
+    modelsRegistry: ModelsRegistry;
+    providerFactories: ReadonlyMap<string, ProviderFactory>;
+}): Promise<Provider>;
 export declare function runModeldiagTest(args: string[], deps: SubcommandDeps, config: Record<string, unknown>): Promise<number>;
 //# sourceMappingURL=modeldiag-test.d.ts.map

package/dist/{subcommands-DEYSYHIM.js → subcommands-VFVUTYAV.js}

@@ -1,9 +1,9 @@
 import {
   subcommandNames,
   subcommands
-} from "./chunk-QDQPF4PB.js";
+} from "./chunk-RLCKKLJA.js";
 export {
   subcommandNames,
   subcommands
 };
-//# sourceMappingURL=subcommands-DEYSYHIM.js.map
+//# sourceMappingURL=subcommands-VFVUTYAV.js.map

package/dist/webui-server/prefs-seeding.d.ts

@@ -10,9 +10,17 @@ interface CliWebUIOptions {
     globalConfigPath?: string | undefined;
     profileConfigPath: string;
     appConfig?: {
+        /**
+         * The live default selection. Carried here so a model switch can move
+         * it in-process, not just in config.json — `session.new` reads the
+         * live object to stamp a new tab.
+         */
+        provider?: string | undefined;
+        model?: string | undefined;
         fallbackModels?: string[] | undefined;
         fallbackProfiles?: Record<string, string[]> | undefined;
         favoriteModels?: string[] | undefined;
+        disabledModels?: string[] | undefined;
         favoriteModelsOnly?: boolean | undefined;
         modelAvailabilitySchedule?: ModelBlackoutRule[] | undefined;
         fallbackAuto?: boolean | undefined;