@wrongstack/core 0.277.2 → 0.280.0

package/dist/defaults/index.js

@@ -70,8 +70,8 @@ async function atomicWrite(targetPath, content, opts = {}) {
     }
     let mode;
     try {
-      const stat10 = await fsp7.stat(targetPath);
-      mode = stat10.mode & 511;
+      const stat11 = await fsp7.stat(targetPath);
+      mode = stat11.mode & 511;
     } catch {
       mode = opts.mode;
     }
@@ -117,8 +117,8 @@ async function withFileLock(targetPath, fn, opts = {}) {
       }
       if (code !== "EEXIST") throw err;
       try {
-        const stat10 = await fsp7.stat(lockPath);
-        if (Date.now() - stat10.mtimeMs > staleMs) {
+        const stat11 = await fsp7.stat(lockPath);
+        if (Date.now() - stat11.mtimeMs > staleMs) {
           await fsp7.unlink(lockPath);
           continue;
         }
@@ -380,6 +380,7 @@ function createContextEvidenceState() {
     toolCalls: [],
     fileGraph: {},
     repeatedReads: [],
+    completedWork: [],
     updatedAt: Date.now()
   };
 }
@@ -442,6 +443,7 @@ function ensureEvidence(ctx) {
   if (!ctx.contextEvidence) {
     ctx.contextEvidence = createContextEvidenceState();
   }
+  ctx.contextEvidence.completedWork ??= [];
   return ctx.contextEvidence;
 }
 var MAX_DIGEST_CHARS;
@@ -627,8 +629,8 @@ async function expandGlob(pattern) {
       for (const e of entries) {
         const full = `${dir}${SEP}${e}`;
         try {
-          const stat10 = await fsp7.stat(full);
-          if (stat10.isDirectory()) await walk3(full, rest);
+          const stat11 = await fsp7.stat(full);
+          if (stat11.isDirectory()) await walk3(full, rest);
         } catch {
         }
       }
@@ -645,8 +647,8 @@ async function expandGlob(pattern) {
       if (entries.includes(seg)) {
         const full = `${dir}${SEP}${seg}`;
         try {
-          const stat10 = await fsp7.stat(full);
-          if (stat10.isDirectory()) await walk3(full, rest);
+          const stat11 = await fsp7.stat(full);
+          if (stat11.isDirectory()) await walk3(full, rest);
         } catch {
         }
       }
@@ -2277,16 +2279,20 @@ function wstackGlobalRoot() {
 }
 function resolveWstackPaths(opts) {
   const globalRoot = opts.globalRoot ?? (opts.userHome ? path4.join(opts.userHome, ".wrongstack") : wstackGlobalRoot());
+  const homeDir = opts.userHome ?? os.homedir();
   const hash = projectHash(opts.projectRoot);
   const slug = projectSlug(opts.projectRoot);
   const projectDir = path4.join(globalRoot, "projects", slug);
   return {
     globalRoot,
+    projectRoot: opts.projectRoot,
+    homeDir,
     configDir: globalRoot,
     globalConfig: path4.join(globalRoot, "config.json"),
     secretsKey: path4.join(globalRoot, ".key"),
     globalMemory: path4.join(globalRoot, "memory.md"),
     globalSkills: path4.join(globalRoot, "skills"),
+    globalClaudeSkills: path4.join(homeDir, ".claude", "skills"),
     globalDesignKits: path4.join(globalRoot, "design-kits"),
     globalPrompts: path4.join(globalRoot, "prompts"),
     globalInstructions: path4.join(globalRoot, "instructions"),
@@ -2306,6 +2312,7 @@ function resolveWstackPaths(opts) {
     inProjectConfig: path4.join(opts.projectRoot, ".wrongstack", "config.json"),
     inProjectAgentsFile: path4.join(opts.projectRoot, ".wrongstack", "AGENTS.md"),
     inProjectSkills: path4.join(opts.projectRoot, ".wrongstack", "skills"),
+    inProjectClaudeSkills: path4.join(opts.projectRoot, ".claude", "skills"),
     inProjectPrompts: path4.join(opts.projectRoot, ".wrongstack", "prompts"),
     inProjectInstructions: path4.join(opts.projectRoot, ".wrongstack", "instructions"),
     inProjectDesignKits: path4.join(opts.projectRoot, ".wrongstack", "design-kits"),
@@ -5821,7 +5828,7 @@ var CollabSession = class extends EventEmitter {
     }
     for (const filePath of allFiles) {
       try {
-        const [content, stat10] = await Promise.all([
+        const [content, stat11] = await Promise.all([
           fsp7.readFile(filePath, "utf8"),
           fsp7.stat(filePath)
         ]);
@@ -5831,8 +5838,8 @@ var CollabSession = class extends EventEmitter {
           path: filePath,
           content,
           language,
-          snapshotMtimeMs: stat10.mtimeMs,
-          snapshotSizeBytes: stat10.size
+          snapshotMtimeMs: stat11.mtimeMs,
+          snapshotSizeBytes: stat11.size
         });
       } catch {
         this.snapshot.files.push({ path: filePath, content: "", language: void 0 });
@@ -6245,9 +6252,9 @@ Emit each evaluation immediately. Do not wait until you have read all reports.`;
     for (const file of this.snapshot.files) {
       if (file.snapshotMtimeMs === void 0 && file.snapshotSizeBytes === void 0) continue;
       try {
-        const stat10 = await fsp7.stat(file.path);
-        const mtimeChanged = file.snapshotMtimeMs !== void 0 && stat10.mtimeMs > file.snapshotMtimeMs + 1;
-        const sizeChanged = file.snapshotSizeBytes !== void 0 && stat10.size !== file.snapshotSizeBytes;
+        const stat11 = await fsp7.stat(file.path);
+        const mtimeChanged = file.snapshotMtimeMs !== void 0 && stat11.mtimeMs > file.snapshotMtimeMs + 1;
+        const sizeChanged = file.snapshotSizeBytes !== void 0 && stat11.size !== file.snapshotSizeBytes;
         if (mtimeChanged || sizeChanged) {
           warnings.push(`${file.path} changed after the collab snapshot was captured.`);
         }
@@ -6333,7 +6340,7 @@ function readBundledInstructionText(relativePath) {
 function renderInstructionTemplate(template, values) {
   return template.replace(
     /\{\{\s*([a-zA-Z0-9_.-]+)\s*\}\}/g,
-    (match, key) => Object.prototype.hasOwnProperty.call(values, key) ? values[key] ?? "" : match
+    (match, key) => Object.hasOwn(values, key) ? values[key] ?? "" : match
   );
 }
 function instructionRootCandidates() {
@@ -9026,6 +9033,7 @@ var Director = class _Director {
       if (entry?.model) {
         config.model = entry.model;
         if (entry.provider) config.provider = entry.provider;
+        if (entry.modelRuntime) config.modelRuntime = entry.modelRuntime;
       }
     }
     if (this.fleetManager) {
@@ -10547,9 +10555,9 @@ var DefaultSessionStore = class _DefaultSessionStore {
     let cacheHit = false;
     try {
       const s = await fsp7.stat(file);
-      const stat10 = { mtimeMs: s.mtimeMs, size: s.size };
+      const stat11 = { mtimeMs: s.mtimeMs, size: s.size };
       const cached = this._loadCache.get(id);
-      if (cached && cached.mtimeMs === stat10.mtimeMs && cached.size === stat10.size) {
+      if (cached && cached.mtimeMs === stat11.mtimeMs && cached.size === stat11.size) {
         cacheHit = true;
         this._loadCache.delete(id);
         this._loadCache.set(id, cached);
@@ -10672,7 +10680,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
             this._loadCache.delete(oldest);
           }
         }
-        this._loadCache.set(id, { mtimeMs: stat10.mtimeMs, size: stat10.size, data });
+        this._loadCache.set(id, { mtimeMs: stat11.mtimeMs, size: stat11.size, data });
       }
       return data;
     } catch (err) {
@@ -10714,14 +10722,14 @@ var DefaultSessionStore = class _DefaultSessionStore {
     const limit = opts?.limit;
     const signal = opts?.signal;
     const out = [];
-    let stat10;
+    let stat11;
     try {
-      stat10 = await fsp7.stat(file);
+      stat11 = await fsp7.stat(file);
     } catch (err) {
       if (err.code === "ENOENT") return [];
       throw err;
     }
-    if (stat10.size === 0) return [];
+    if (stat11.size === 0) return [];
     let fh;
     try {
       fh = await fsp7.open(file, "r");
@@ -10904,15 +10912,15 @@ var DefaultSessionStore = class _DefaultSessionStore {
    * Returns empty array when the index doesn't exist or is corrupt.
    */
   async readIndex() {
-    let stat10;
+    let stat11;
     try {
       const s = await fsp7.stat(this.indexFile);
-      stat10 = { mtimeMs: s.mtimeMs, size: s.size };
+      stat11 = { mtimeMs: s.mtimeMs, size: s.size };
     } catch {
       this._indexCache = null;
       return [];
     }
-    if (this._indexCache !== null && this._indexCache.mtimeMs === stat10.mtimeMs && this._indexCache.size === stat10.size) {
+    if (this._indexCache !== null && this._indexCache.mtimeMs === stat11.mtimeMs && this._indexCache.size === stat11.size) {
       return [...this._indexCache.summaries];
     }
     let raw;
@@ -10945,7 +10953,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
       if (a.startedAt > b.startedAt) return -1;
       return a.id.localeCompare(b.id);
     });
-    this._indexCache = { ...stat10, summaries };
+    this._indexCache = { ...stat11, summaries };
     return [...summaries];
   }
   /**
@@ -11112,8 +11120,8 @@ var DefaultSessionStore = class _DefaultSessionStore {
     if (fromManifest) return fromManifest;
     try {
       const full = this.sessionPath(id, ".jsonl");
-      const stat10 = await fsp7.stat(full);
-      const summary = await this.summarize(id, stat10.mtime.toISOString());
+      const stat11 = await fsp7.stat(full);
+      const summary = await this.summarize(id, stat11.mtime.toISOString());
       await atomicWrite(manifest, JSON.stringify(summary), { mode: 384 }).catch((err) => {
         const msg = toErrorMessage(err);
         this.emitError(id, manifest, "summary_fallback", msg, true);
@@ -11156,18 +11164,18 @@ var DefaultSessionStore = class _DefaultSessionStore {
   async summaryHeaderFor(ref) {
     let mtime = (/* @__PURE__ */ new Date(0)).toISOString();
     try {
-      const stat10 = await fsp7.stat(ref.filePath);
-      if (!stat10.isFile()) {
+      const stat11 = await fsp7.stat(ref.filePath);
+      if (!stat11.isFile()) {
         return {
           id: ref.id,
           title: "(damaged)",
-          startedAt: stat10.mtime.toISOString(),
+          startedAt: stat11.mtime.toISOString(),
           model: "unknown",
           provider: "unknown",
           tokenTotal: 0
         };
       }
-      mtime = stat10.mtime.toISOString();
+      mtime = stat11.mtime.toISOString();
     } catch {
       return null;
     }
@@ -11268,8 +11276,8 @@ var DefaultSessionStore = class _DefaultSessionStore {
     const pruneFile = async (dir, name, prefix) => {
       const jsonlPath = path4.join(dir, name);
       try {
-        const stat10 = await fsp7.stat(jsonlPath);
-        if (stat10.mtimeMs >= cutoff) return;
+        const stat11 = await fsp7.stat(jsonlPath);
+        if (stat11.mtimeMs >= cutoff) return;
       } catch {
         return;
       }
@@ -13110,7 +13118,7 @@ async function recordOverrides(projectRoot, patch, isoTime) {
   if (!active) return void 0;
   const merged = { ...active.overrides ?? {} };
   for (const [k, v] of Object.entries(patch)) {
-    if (v && v.trim()) merged[k] = v.trim();
+    if (v?.trim()) merged[k] = v.trim();
     else delete merged[k];
   }
   try {
@@ -15925,6 +15933,134 @@ Summarize the following message range:`;
     return estimateMessages(messages);
   }
 };
+
+// src/skills/foreign-sources.ts
+var FOREIGN_SKILL_TOOLS = [
+  { id: "agents", subdir: "skills" },
+  // shared store (asm / agentskills.io ecosystem)
+  { id: "codex", subdir: "skills" },
+  // OpenAI Codex CLI
+  { id: "gemini", subdir: "skills" },
+  // Gemini CLI
+  { id: "cursor", subdir: "skills" },
+  // Cursor (standard subdir, aligned with skills.sh ecosystem)
+  { id: "qwen", subdir: "skills" },
+  // Qwen Code
+  { id: "trae", subdir: "skills" },
+  // Trae
+  { id: "windsurf", subdir: "skills" }
+  // Windsurf
+];
+var KNOWN_FOREIGN_IDS = new Set(FOREIGN_SKILL_TOOLS.map((t) => t.id));
+function resolveForeignToolIds(opt) {
+  return resolveForeignToolIdsWithWarnings(opt).ids;
+}
+function resolveForeignToolIdsWithWarnings(opt) {
+  if (opt === false) return { ids: [], unknownIds: [] };
+  if (Array.isArray(opt)) {
+    const ids = [];
+    const unknownIds = [];
+    for (const id of opt) {
+      if (KNOWN_FOREIGN_IDS.has(id)) ids.push(id);
+      else unknownIds.push(id);
+    }
+    return { ids, unknownIds };
+  }
+  return { ids: FOREIGN_SKILL_TOOLS.map((t) => t.id), unknownIds: [] };
+}
+
+// src/skills/frontmatter.ts
+var SCALAR_KEYS = /* @__PURE__ */ new Set(["name", "description", "version", "license", "compatibility"]);
+function parseSkillFrontmatter(raw) {
+  const text = normalizeLineEndings(raw);
+  if (!text.startsWith("---")) return {};
+  const end = text.indexOf("\n---", 4);
+  if (end === -1) return {};
+  return parseFrontmatterBlock(text.slice(4, end));
+}
+function normalizeLineEndings(s) {
+  return s.replace(/\r\n?/g, "\n");
+}
+function parseFrontmatterBlock(block) {
+  const out = {};
+  const lines = block.split("\n");
+  let i = 0;
+  while (i < lines.length) {
+    const line = lines[i] ?? "";
+    const m = /^([a-zA-Z][a-zA-Z0-9_-]*):\s*(.*)$/.exec(line);
+    if (!m) {
+      i++;
+      continue;
+    }
+    const key = m[1] ?? "";
+    const rest = (m[2] ?? "").trim();
+    if (key === "metadata") {
+      const map = {};
+      i++;
+      while (i < lines.length) {
+        const sub = lines[i] ?? "";
+        const sm = /^\s+([a-zA-Z0-9_.-]+):\s*(.*)$/.exec(sub);
+        if (!sm) break;
+        map[sm[1] ?? ""] = unquote((sm[2] ?? "").trim());
+        i++;
+      }
+      if (Object.keys(map).length > 0) out.metadata = map;
+      continue;
+    }
+    if (rest === "|" || rest === ">") {
+      const collected = [];
+      i++;
+      while (i < lines.length) {
+        const sub = lines[i] ?? "";
+        if (sub === "" || sub.startsWith(" ") || sub.startsWith("	")) {
+          collected.push(sub.replace(/^\s+/, ""));
+          i++;
+        } else break;
+      }
+      out[normalizeKey(key)] = collected.join("\n").trim();
+      continue;
+    }
+    if (key === "allowed-tools" || key === "allowedTools") {
+      out.allowedTools = rest.split(/[\s,]+/).filter(Boolean);
+      i++;
+      continue;
+    }
+    if (SCALAR_KEYS.has(key)) {
+      out[key] = unquote(rest);
+      i++;
+      continue;
+    }
+    i++;
+  }
+  return out;
+}
+function normalizeKey(key) {
+  return key === "allowed-tools" ? "allowedTools" : key;
+}
+function unquote(s) {
+  if (s.length >= 2 && (s.startsWith('"') && s.endsWith('"') || s.startsWith("'") && s.endsWith("'"))) {
+    return s.slice(1, -1);
+  }
+  return s;
+}
+function isValidSkillNameFormat(name) {
+  return name.length >= 1 && name.length <= 64 && /^[a-z0-9]+(-[a-z0-9]+)*$/.test(name);
+}
+
+// src/skills/limits.ts
+var SKILL_LIMITS = {
+  /**
+   * Auto-compact body limits (the token-saving fallback used when a skill has
+   * no hand-crafted `SKILL.save.md`). The Overview and Rules sections are
+   * extracted and trimmed to these char budgets, then the total is capped.
+   *
+   * Consumer: `DefaultSkillLoader.compactSkillBody`.
+   */
+  COMPACT_OVERVIEW_MAX: 200,
+  COMPACT_RULES_MAX: 350,
+  COMPACT_TOTAL_MAX: 450};
+
+// src/execution/skill-loader.ts
 function stripFrontmatter2(raw) {
   if (!raw.startsWith("---")) return raw;
   const end = raw.indexOf("\n---", 4);
@@ -15938,21 +16074,33 @@ function compactSkillBody(body) {
   const overviewMatch = body.match(/##\s*Overview\s*\n([\s\S]*?)(?=\n##|\n$|$)/i);
   const overview = overviewMatch?.[1];
   if (overview?.trim()) {
-    sections.push(overview.trim().slice(0, 200));
+    sections.push(overview.trim().slice(0, SKILL_LIMITS.COMPACT_OVERVIEW_MAX));
   }
   const rulesMatch = body.match(/##\s*Rules\s*\n([\s\S]*?)(?=\n##|\n$|$)/i);
   const rules = rulesMatch?.[1];
   if (rules?.trim()) {
-    const trimmed = rules.trim().slice(0, 350);
+    const trimmed = rules.trim().slice(0, SKILL_LIMITS.COMPACT_RULES_MAX);
     const ruleLines = trimmed.split("\n").filter((l) => /^\s*[-*]\s/.test(l) || /^\s*\d+[.)]\s/.test(l)).slice(0, 6).join("\n");
     if (ruleLines) sections.push(ruleLines);
   }
   if (sections.length === 0) {
-    const first = body.trim().slice(0, 200);
+    const first = body.trim().slice(0, SKILL_LIMITS.COMPACT_OVERVIEW_MAX);
     if (first) sections.push(first);
   }
   const result = sections.join("\n\n");
-  return result.length > 450 ? result.slice(0, 447) + "\u2026" : result;
+  const total = SKILL_LIMITS.COMPACT_TOTAL_MAX;
+  return result.length > total ? result.slice(0, total - 3) + "\u2026" : result;
+}
+async function entryIsDirectory(dir, entry) {
+  if (entry.isDirectory()) return true;
+  if (entry.isSymbolicLink()) {
+    try {
+      return (await fsp7.stat(path4.join(dir, entry.name))).isDirectory();
+    } catch {
+      return false;
+    }
+  }
+  return false;
 }
 var DefaultSkillLoader = class {
   dirs;
@@ -15960,36 +16108,58 @@ var DefaultSkillLoader = class {
   entriesCache;
   bodyCache = /* @__PURE__ */ new Map();
   constructor(opts) {
-    this.dirs = [
-      { dir: opts.paths.inProjectSkills, source: "project" },
-      { dir: opts.paths.globalSkills, source: "user" }
-    ];
-    if (opts.bundledDir) {
-      this.dirs.push({ dir: opts.bundledDir, source: "bundled" });
-    }
+    const readClaude = opts.readClaudeSkills !== false;
+    const foreignIds = resolveForeignToolIds(opts.foreignSources);
+    const dirs = [];
+    const pushForeign = (root) => {
+      if (!root) return;
+      for (const tool of FOREIGN_SKILL_TOOLS) {
+        if (!foreignIds.includes(tool.id)) continue;
+        dirs.push({
+          dir: path4.join(root, "." + tool.id, tool.subdir),
+          source: "foreign",
+          originTool: tool.id
+        });
+      }
+    };
+    dirs.push({ dir: opts.paths.inProjectSkills, source: "project" });
+    if (readClaude) dirs.push({ dir: opts.paths.inProjectClaudeSkills, source: "claude-project" });
+    pushForeign(opts.paths.projectRoot);
+    dirs.push({ dir: opts.paths.globalSkills, source: "user" });
+    if (readClaude) dirs.push({ dir: opts.paths.globalClaudeSkills, source: "claude-user" });
+    pushForeign(opts.paths.homeDir);
+    for (const d of opts.extraDirs ?? []) dirs.push({ dir: d, source: "extra" });
+    if (opts.bundledDir) dirs.push({ dir: opts.bundledDir, source: "bundled" });
+    this.dirs = dirs;
   }
   async list() {
     if (this.cache) return this.cache;
     const found = [];
     const seen = /* @__PURE__ */ new Set();
-    for (const { dir, source } of this.dirs) {
+    for (const { dir, source, originTool } of this.dirs) {
       try {
         const entries = await fsp7.readdir(dir, { withFileTypes: true });
         for (const e of entries) {
-          if (!e.isDirectory()) continue;
+          if (!await entryIsDirectory(dir, e)) continue;
           const skillFile = path4.join(dir, e.name, "SKILL.md");
           try {
             const raw = await fsp7.readFile(skillFile, "utf8");
-            const meta = parseFrontmatter(raw);
-            if (!meta.name || !meta.description) continue;
-            if (seen.has(meta.name)) continue;
-            seen.add(meta.name);
+            const fm = parseSkillFrontmatter(raw);
+            if (!fm.name || !fm.description) continue;
+            if (!isValidSkillNameFormat(fm.name)) continue;
+            if (seen.has(fm.name)) continue;
+            seen.add(fm.name);
             found.push({
-              name: meta.name,
-              description: meta.description,
-              version: meta.version,
+              name: fm.name,
+              description: fm.description,
+              version: fm.version,
+              license: fm.license,
+              compatibility: fm.compatibility,
+              metadata: fm.metadata,
+              allowedTools: fm.allowedTools,
               path: skillFile,
-              source
+              source,
+              originTool
             });
           } catch {
           }
@@ -16022,7 +16192,14 @@ var DefaultSkillLoader = class {
     const entries = [];
     for (const s of skills) {
       const { trigger, scope } = parseDescriptionFromText(s.description ?? "");
-      entries.push({ name: s.name, trigger, scope, source: s.source, path: s.path });
+      entries.push({
+        name: s.name,
+        trigger,
+        scope,
+        source: s.source,
+        originTool: s.originTool,
+        path: s.path
+      });
     }
     this.entriesCache = entries;
     return entries;
@@ -16068,42 +16245,6 @@ ${compact}`;
     return result;
   }
 };
-function parseFrontmatter(raw) {
-  if (!raw.startsWith("---")) return {};
-  const end = raw.indexOf("\n---", 4);
-  if (end === -1) return {};
-  const block = raw.slice(4, end);
-  const out = {};
-  let key = null;
-  let value = [];
-  const flush = () => {
-    if (key) {
-      out[key] = value.join("\n").trim();
-    }
-    key = null;
-    value = [];
-  };
-  for (const line of block.split("\n")) {
-    const m = /^([a-zA-Z_]+):\s*(\|?)\s*(.*)$/.exec(line);
-    if (m) {
-      flush();
-      key = m[1] ?? "";
-      const pipe = m[2];
-      const rest = m[3] ?? "";
-      if (pipe === "|") {
-        value = [];
-      } else if (rest) {
-        value = [rest];
-      } else {
-        value = [];
-      }
-    } else if (key) {
-      value.push(line.replace(/^\s+/, ""));
-    }
-  }
-  flush();
-  return out;
-}
 function parseDescriptionFromText(desc) {
   const firstSentenceEnd = desc.indexOf(". ");
   const trigger = firstSentenceEnd !== -1 ? desc.slice(0, firstSentenceEnd + 1).trim() : desc.trim().split("\n")[0] ?? "";
@@ -16812,7 +16953,9 @@ ${errorDetails}`,
             toolUseId: use.id,
             toolName: tool.name,
             input: use.input,
-            suggestedPattern
+            suggestedPattern,
+            decisionSource: decision.source,
+            riskTier: decision.riskTier ?? tool.riskTier
           };
           return { result: pending, tool, durationMs: Date.now() - start };
         }
@@ -18114,8 +18257,8 @@ async function loadProjectModes(modesDir) {
     for (const entry of entries) {
       if (!entry.endsWith(".md") && !entry.endsWith(".txt")) continue;
       const filePath = path4.join(modesDir, entry);
-      const stat10 = await fsp7.stat(filePath);
-      if (!stat10.isFile()) continue;
+      const stat11 = await fsp7.stat(filePath);
+      if (!stat11.isFile()) continue;
       const content = await fsp7.readFile(filePath, "utf8");
       const id = path4.basename(entry, path4.extname(entry));
       modes.push({
@@ -23101,7 +23244,7 @@ var SddParallelRun = class {
       disabledTools: ["delegate"],
       ...model ? { model } : {},
       ...provider ? { provider } : {},
-      ...fallbackModels && fallbackModels.length ? { fallbackModels } : {}
+      ...fallbackModels?.length ? { fallbackModels } : {}
     });
     if (!spawnResult.subagentId) {
       throw new SddError({
@@ -25525,8 +25668,8 @@ function unwrapDataKey(buf, keyFile) {
 function checkKeyFilePermissions(keyFile) {
   if (process.platform === "win32") return;
   try {
-    const stat10 = fs12.statSync(keyFile);
-    const actualMode = stat10.mode & 511;
+    const stat11 = fs12.statSync(keyFile);
+    const actualMode = stat11.mode & 511;
     if (actualMode !== KEY_FILE_MODE) {
       console.warn(JSON.stringify({
         level: "warn",
@@ -26017,8 +26160,9 @@ function mergeAdjacentText(blocks) {
   }
   return out;
 }
-init_atomic_write();
-init_error();
+
+// src/types/config.ts
+var DEFAULT_TUI_THINKING_WORD = "thinking";
 
 // src/types/context-window.ts
 var DEFAULT_CONTEXT_WINDOW_MODE_ID = "balanced";
@@ -26071,13 +26215,12 @@ function isContextWindowModeId(id) {
   return CONTEXT_WINDOW_MODES.some((m) => m.id === id);
 }
 
-// src/types/config.ts
-var DEFAULT_TUI_THINKING_WORD = "thinking";
-
 // src/storage/config-loader.ts
 init_errors();
-init_safe_json();
+init_atomic_write();
 init_deep_merge();
+init_error();
+init_safe_json();
 function storageErrorString(err) {
   if (err instanceof Error) {
     const code = err.code;
@@ -26119,10 +26262,16 @@ var BEHAVIOR_DEFAULTS = {
     tokenSavingMode: "off",
     allowOutsideProjectRoot: true
   },
+  skills: { readClaudeSkills: true },
   mcpServers: {},
   fallbackAuto: true,
   maxConcurrent: 4,
-  yolo: false,
+  // YOLO on by default: auto-approve normal project work without a per-call
+  // prompt. Destructive operations still gate through a confirmation. Users
+  // who want the per-call prompts set `yolo: false`. Existing installs whose
+  // config lacks this key pick it up via fillMissingDefaults; an explicit
+  // `false` is preserved by the deep-merge (opt-out respected).
+  yolo: true,
   nextPrediction: false,
   hints: true,
   debugStream: false,
@@ -26135,12 +26284,19 @@ var BEHAVIOR_DEFAULTS = {
   },
   session: { ...DEFAULT_SESSION_LOGGING_CONFIG },
   autonomy: {
-    defaultMode: "off",
+    // 'auto' by default: the agent self-drives (picks the top next-step after
+    // each turn). This is a startup default, not a runtime flip — the
+    // autoProceedMaxIterations cap + autoProceedDelayMs cooldown + destructive
+    // gate + Ctrl+C / [GOAL_COMPLETE] stops remain in force. Explicit 'off'
+    // in a config file is preserved (opt-out respected).
+    defaultMode: "auto",
     autoProceedDelayMs: DEFAULT_AUTONOMY_CONFIG.autoProceedDelayMs,
     autoProceedMaxIterations: 50,
     autonomyNextPrompt: "auto {{suggestion}}",
     terminalTitleAnimation: true,
-    yolo: false,
+    // Mirrored from the top-level yolo default so the autonomy subsystem
+    // (which reads autonomy.yolo) stays consistent with config.yolo.
+    yolo: true,
     streamFleet: true,
     chime: false,
     confirmExit: true,
@@ -26176,7 +26332,7 @@ function fillMissingDefaults(target, defaults) {
 function fillMissingDefaultsInPlace(target, defaults) {
   let changed = false;
   for (const [key, defaultValue] of Object.entries(defaults)) {
-    if (!Object.prototype.hasOwnProperty.call(target, key)) {
+    if (!Object.hasOwn(target, key)) {
       target[key] = cloneJsonValue(defaultValue);
       changed = true;
       continue;
@@ -26246,6 +26402,7 @@ var IN_PROJECT_ALLOWED_KEYS = /* @__PURE__ */ new Set([
   "context",
   "tools",
   "features",
+  "skills",
   "autonomy",
   "indexing",
   "session",
@@ -26256,6 +26413,7 @@ var IN_PROJECT_ALLOWED_KEYS = /* @__PURE__ */ new Set([
   "debugStream",
   "configScope",
   "maxConcurrent",
+  "uiLocale",
   "fallbackModels",
   "fallbackProfiles",
   "favoriteModels",
@@ -26288,6 +26446,7 @@ var KNOWN_CONFIG_TOP_LEVEL_KEYS = /* @__PURE__ */ new Set([
   "apiKey",
   "baseUrl",
   "maxConcurrent",
+  "uiLocale",
   "providers",
   "models",
   "modelMatrix",
@@ -26303,6 +26462,7 @@ var KNOWN_CONFIG_TOP_LEVEL_KEYS = /* @__PURE__ */ new Set([
   "plugins",
   "log",
   "features",
+  "skills",
   "yolo",
   "nextPrediction",
   "cwd",
@@ -26328,8 +26488,12 @@ function assertInProjectAllowListComplete() {
     const denied = KNOWN_DENIED_IN_PROJECT.find((d) => d.key === key);
     if (!denied) missingFromBoth.push(key);
   }
-  const staleDenials = KNOWN_DENIED_IN_PROJECT.filter((d) => !KNOWN_CONFIG_TOP_LEVEL_KEYS.has(d.key)).map((d) => d.key);
-  const duplicate = KNOWN_DENIED_IN_PROJECT.filter((d) => IN_PROJECT_ALLOWED_KEYS.has(d.key)).map((d) => d.key);
+  const staleDenials = KNOWN_DENIED_IN_PROJECT.filter(
+    (d) => !KNOWN_CONFIG_TOP_LEVEL_KEYS.has(d.key)
+  ).map((d) => d.key);
+  const duplicate = KNOWN_DENIED_IN_PROJECT.filter((d) => IN_PROJECT_ALLOWED_KEYS.has(d.key)).map(
+    (d) => d.key
+  );
   const problems = [];
   if (missingFromBoth.length > 0) {
     problems.push(
@@ -26371,14 +26535,41 @@ function stripUnsafeInProjectFields(inProject, sourcePath, warn = (msg) => conso
   const outTools = out["tools"];
   if (outTools && typeof outTools === "object") {
     const execCfg = outTools["exec"];
-    if (execCfg && typeof execCfg === "object" && "allow" in execCfg) {
-      const clonedExec = { ...execCfg };
-      delete clonedExec["allow"];
-      out["tools"] = {
-        ...outTools,
-        exec: clonedExec
-      };
-      stripped.push("tools.exec.allow");
+    if (execCfg && typeof execCfg === "object") {
+      const hasAllow = "allow" in execCfg;
+      const hasDanger = "danger" in execCfg;
+      if (hasAllow || hasDanger) {
+        const clonedExec = { ...execCfg };
+        if (hasAllow) {
+          delete clonedExec["allow"];
+          stripped.push("tools.exec.allow");
+        }
+        if (hasDanger) {
+          delete clonedExec["danger"];
+          stripped.push("tools.exec.danger");
+        }
+        out["tools"] = {
+          ...outTools,
+          exec: clonedExec
+        };
+      }
+    }
+  }
+  const outSkills = out["skills"];
+  if (outSkills && typeof outSkills === "object") {
+    const skillsRec = outSkills;
+    const needsClone = "extraDirs" in skillsRec || "registryUrl" in skillsRec;
+    if (needsClone) {
+      const clonedSkills = { ...skillsRec };
+      if ("extraDirs" in clonedSkills) {
+        delete clonedSkills["extraDirs"];
+        stripped.push("skills.extraDirs");
+      }
+      if ("registryUrl" in clonedSkills) {
+        delete clonedSkills["registryUrl"];
+        stripped.push("skills.registryUrl");
+      }
+      out["skills"] = clonedSkills;
     }
   }
   if (stripped.length > 0) {
@@ -26413,7 +26604,11 @@ function deepMerge2(base, patch) {
       );
     };
   }
-  return deepMerge(base, patch, opts);
+  return deepMerge(
+    base,
+    patch,
+    opts
+  );
 }
 var DefaultConfigLoader = class {
   paths;
@@ -26459,13 +26654,15 @@ var DefaultConfigLoader = class {
           cfg = deepMerge2(cfg, patch);
         }
       } catch (err) {
-        console.warn(JSON.stringify({
-          level: "warn",
-          event: "config.source_load_failed",
-          source: src.name,
-          message: toErrorMessage(err),
-          timestamp: (/* @__PURE__ */ new Date()).toISOString()
-        }));
+        console.warn(
+          JSON.stringify({
+            level: "warn",
+            event: "config.source_load_failed",
+            source: src.name,
+            message: toErrorMessage(err),
+            timestamp: (/* @__PURE__ */ new Date()).toISOString()
+          })
+        );
       }
     }
     if (opts.cliFlags) {
@@ -26524,13 +26721,15 @@ var DefaultConfigLoader = class {
               durationMs: Date.now() - t0,
               ...this.traceId !== void 0 ? { traceId: this.traceId } : {}
             });
-            console.warn(JSON.stringify({
-              level: "warn",
-              event: "config.defaults_read_failed",
-              path: fp,
-              message: toErrorMessage(err),
-              timestamp: (/* @__PURE__ */ new Date()).toISOString()
-            }));
+            console.warn(
+              JSON.stringify({
+                level: "warn",
+                event: "config.defaults_read_failed",
+                path: fp,
+                message: toErrorMessage(err),
+                timestamp: (/* @__PURE__ */ new Date()).toISOString()
+              })
+            );
             return;
           }
           parsed = {};
@@ -26563,13 +26762,15 @@ var DefaultConfigLoader = class {
         durationMs: Date.now() - t0,
         ...this.traceId !== void 0 ? { traceId: this.traceId } : {}
       });
-      console.warn(JSON.stringify({
-        level: "warn",
-        event: "config.defaults_write_failed",
-        path: fp,
-        message: toErrorMessage(err),
-        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      }));
+      console.warn(
+        JSON.stringify({
+          level: "warn",
+          event: "config.defaults_write_failed",
+          path: fp,
+          message: toErrorMessage(err),
+          timestamp: (/* @__PURE__ */ new Date()).toISOString()
+        })
+      );
     }
   }
   /**
@@ -26671,12 +26872,14 @@ var DefaultConfigLoader = class {
         error: storageErrorString(err),
         ...this.traceId !== void 0 ? { traceId: this.traceId } : {}
       });
-      console.warn(JSON.stringify({
-        level: "warn",
-        event: "config.sync_load_failed",
-        message: toErrorMessage(err),
-        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      }));
+      console.warn(
+        JSON.stringify({
+          level: "warn",
+          event: "config.sync_load_failed",
+          message: toErrorMessage(err),
+          timestamp: (/* @__PURE__ */ new Date()).toISOString()
+        })
+      );
       return null;
     }
   }
@@ -26684,8 +26887,8 @@ var DefaultConfigLoader = class {
     const t0 = Date.now();
     let mtimeMs = null;
     try {
-      const stat10 = await fsp7.stat(file);
-      mtimeMs = stat10.mtimeMs;
+      const stat11 = await fsp7.stat(file);
+      mtimeMs = stat11.mtimeMs;
       const cached = this.jsonCache.get(file);
       if (cached && cached.mtimeMs === mtimeMs) {
         return structuredClone(cached.value);
@@ -26705,13 +26908,15 @@ var DefaultConfigLoader = class {
         error: storageErrorString(err),
         ...this.traceId !== void 0 ? { traceId: this.traceId } : {}
       });
-      console.warn(JSON.stringify({
-        level: "warn",
-        event: "config.read_failed",
-        path: file,
-        message: toErrorMessage(err),
-        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      }));
+      console.warn(
+        JSON.stringify({
+          level: "warn",
+          event: "config.read_failed",
+          path: file,
+          message: toErrorMessage(err),
+          timestamp: (/* @__PURE__ */ new Date()).toISOString()
+        })
+      );
       return {};
     }
     let raw;
@@ -26729,13 +26934,15 @@ var DefaultConfigLoader = class {
           error: storageErrorString(err),
           ...this.traceId !== void 0 ? { traceId: this.traceId } : {}
         });
-        console.warn(JSON.stringify({
-          level: "warn",
-          event: "config.read_failed",
-          path: file,
-          message: toErrorMessage(err),
-          timestamp: (/* @__PURE__ */ new Date()).toISOString()
-        }));
+        console.warn(
+          JSON.stringify({
+            level: "warn",
+            event: "config.read_failed",
+            path: file,
+            message: toErrorMessage(err),
+            timestamp: (/* @__PURE__ */ new Date()).toISOString()
+          })
+        );
       }
       this.jsonCache.set(file, { mtimeMs: null, value: {} });
       return {};
@@ -26752,35 +26959,40 @@ var DefaultConfigLoader = class {
         error: "parse error or empty file",
         ...this.traceId !== void 0 ? { traceId: this.traceId } : {}
       });
-      console.warn(JSON.stringify({
-        level: "warn",
-        event: "config.parse_failed",
-        path: file,
-        message: "invalid JSON \u2014 falling back to defaults for this layer",
-        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      }));
+      console.warn(
+        JSON.stringify({
+          level: "warn",
+          event: "config.parse_failed",
+          path: file,
+          message: "invalid JSON \u2014 falling back to defaults for this layer",
+          timestamp: (/* @__PURE__ */ new Date()).toISOString()
+        })
+      );
       return {};
     }
     this.jsonCache.set(file, { mtimeMs, value: structuredClone(parsed.value) });
     return parsed.value;
   }
   validateBehavior(cfg) {
-    if (cfg.version === void 0) throw new ConfigError({
-      message: "Config: missing version field",
-      code: ERROR_CODES.CONFIG_INVALID,
-      context: { field: "version" }
-    });
-    if (cfg.version !== 1) throw new ConfigError({
-      message: `Config: unsupported version ${cfg.version}`,
-      code: ERROR_CODES.CONFIG_INVALID,
-      context: { field: "version", actual: cfg.version }
-    });
+    if (cfg.version === void 0)
+      throw new ConfigError({
+        message: "Config: missing version field",
+        code: ERROR_CODES.CONFIG_INVALID,
+        context: { field: "version" }
+      });
+    if (cfg.version !== 1)
+      throw new ConfigError({
+        message: `Config: unsupported version ${cfg.version}`,
+        code: ERROR_CODES.CONFIG_INVALID,
+        context: { field: "version", actual: cfg.version }
+      });
     const c = cfg.context;
-    if (!c) throw new ConfigError({
-      message: "Config: missing context section",
-      code: ERROR_CODES.CONFIG_INVALID,
-      context: { field: "context" }
-    });
+    if (!c)
+      throw new ConfigError({
+        message: "Config: missing context section",
+        code: ERROR_CODES.CONFIG_INVALID,
+        context: { field: "context" }
+      });
     const fields = ["warnThreshold", "softThreshold", "hardThreshold"];
     for (const f of fields) {
       const v = c[f];
@@ -27119,8 +27331,8 @@ var FileMemoryBackend = class {
   }
   async getMtime(file) {
     try {
-      const stat10 = await fsp7.stat(file);
-      return stat10.mtimeMs;
+      const stat11 = await fsp7.stat(file);
+      return stat11.mtimeMs;
     } catch {
       return 0;
     }
@@ -28608,7 +28820,9 @@ var STANDARD_AUDIT_EVENTS = /* @__PURE__ */ new Set([
   "error",
   "message_truncated",
   "provider_retry",
-  "provider_error"
+  "provider_error",
+  "skill_activated",
+  "skill_deactivated"
 ]);
 var FULL_ONLY_EVENTS = /* @__PURE__ */ new Set([
   "tool_progress"
@@ -28720,8 +28934,8 @@ var DefaultSessionReader = class _DefaultSessionReader {
     const sessionPath = sessionScopedPath(rootDir, sessionId, ".jsonl");
     let mtimeMs = null;
     try {
-      const stat10 = await fsp7.stat(sessionPath);
-      mtimeMs = stat10.mtimeMs;
+      const stat11 = await fsp7.stat(sessionPath);
+      mtimeMs = stat11.mtimeMs;
     } catch {
       this.eventCache.delete(sessionId);
       this.eventCacheMtimes.delete(sessionId);