@wrongstack/core 0.289.0 → 0.291.1

package/dist/utils/message-invariants.d.ts

@@ -19,4 +19,16 @@ export interface MessageRepairResult {
  * preserving surrounding text/images/thinking blocks where possible.
  */
 export declare function repairToolUseAdjacency(messages: Message[]): MessageRepairResult;
+/**
+ * True when a message content payload carries meaningful information for
+ * the provider: non-whitespace text, a tool call/result, thinking with
+ * text or a signature, or any other block type.
+ *
+ * False for empty strings/arrays and for arrays whose only blocks are
+ * empty or whitespace-only text — the shape persisted when a stream is
+ * interrupted before the first meaningful delta (issue #271). Strict
+ * providers reject such assistant turns, so repair and replay paths must
+ * treat them as empty.
+ */
+export declare function hasMeaningfulContent(content: Message['content']): boolean;
 //# sourceMappingURL=message-invariants.d.ts.map

package/dist/utils/message-invariants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"message-invariants.d.ts","sourceRoot":"","sources":["../../src/utils/message-invariants.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AACpD,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,MAAM,EAAE,mBAAmB,CAAC;CAC7B;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,mBAAmB,CAyD/E"}
+{"version":3,"file":"message-invariants.d.ts","sourceRoot":"","sources":["../../src/utils/message-invariants.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEpD,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,MAAM,EAAE,mBAAmB,CAAC;CAC7B;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,mBAAmB,CAyD/E;AAyCD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO,CAiBzE"}

package/dist/utils/safe-json.d.ts

@@ -7,7 +7,7 @@ export declare function safeParse<T = unknown>(input: string, maxBytes?: number)
 export declare function safeStringify(value: unknown, pretty?: boolean): string;
 /**
  * Attempt to parse JSON5-style input and return a valid JSON string.
- * Handles trailing commas, single-line comments, and unquoted keys
+ * Handles trailing commas, line/block comments, and unquoted keys
  * that are common in provider output.
  *
  * Returns the sanitized string if it parses successfully as JSON,

package/dist/utils/safe-json.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"safe-json.d.ts","sourceRoot":"","sources":["../../src/utils/safe-json.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,wBAAgB,SAAS,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,SAAY,GAAG,eAAe,CAAC,CAAC,CAAC,CAY9F;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,UAAQ,GAAG,MAAM,CAoBpE;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA0B3D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAYxD"}
+{"version":3,"file":"safe-json.d.ts","sourceRoot":"","sources":["../../src/utils/safe-json.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,wBAAgB,SAAS,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,SAAY,GAAG,eAAe,CAAC,CAAC,CAAC,CAY9F;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,UAAQ,GAAG,MAAM,CAoBpE;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAuB3D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAYxD"}

package/dist/utils/term.d.ts

@@ -262,6 +262,12 @@ export declare class TerminalLifecycle {
      * raw mode. Null when `acquire()` has never been called.
      */
     private _wasRaw;
+    /**
+     * Whether stdin was paused before the TUI took ownership. Readline closes
+     * its interface by pausing the shared process stream, so raw mode alone is
+     * not enough to make Ink receive bytes during the boot-prompt -> TUI handoff.
+     */
+    private _wasPaused;
     /**
      * Request the process to exit. Set the flag, trigger any registered
      * `onRequestExit` callback (typically Ink's `unmount()`), and arm a

package/dist/utils/term.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"term.d.ts","sourceRoot":"","sources":["../../src/utils/term.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,8EAA8E;AAC9E,wBAAgB,WAAW,IAAI,OAAO,CAErC;AAED,6EAA6E;AAC7E,wBAAgB,UAAU,IAAI,OAAO,CAEpC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAEvC;AAED,+EAA+E;AAC/E,wBAAgB,WAAW,IAAI;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAM5D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,QAAQ,CACtB,EAAE,EAAE,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,KAAK,IAAI,EAClD,MAAM,GAAE,MAAM,CAAC,WAA4B,GAC1C,MAAM,IAAI,CAYZ;AAED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAK3E;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAe;IAC9B,qEAAqE;IACrE,OAAO,IAAI,IAAI,CAAC;IAChB,oEAAoE;IACpE,MAAM,IAAI,IAAI,CAAC;CAChB;AAID;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,GAAG,IAAI,CAEtE;AAsCD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,QAAQ,CACtB,CAAC,EAAE,MAAM,EACT,MAAM,GAAE,MAAM,CAAC,WAA4B,GAC1C,OAAO,CAET;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,QAAQ,CACtB,CAAC,EAAE,MAAM,EACT,MAAM,GAAE,MAAM,CAAC,WAA4B,GAC1C,OAAO,CAET;AAMD;;;;;;;GAOG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAEvC;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,KAAK,CAAC;AAE7D;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IACjC,kEAAkE;IAClE,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;;;;OAcG;IACH,UAAU,EAAE,UAAU,CAAC;IACvB;;;;OAIG;IACH,cAAc,EAAE,OAAO,CAAC;IACxB;;;;;;OAMG;IACH,aAAa,EAAE,aAAa,CAAC;IAC7B;;;OAGG;IACH,WAAW,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,MAAM,EAAE,OAAO,CAAC;IAChB;;;;;;;;OAQG;IACH,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AA4ED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC5B,IAAI,GAAE;IACJ,KAAK,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;IACnC,GAAG,CAAC,EAAE,OAAO,OAAO,CAAC,GAAG,CAAC;CACrB,GACL,kBAAkB,CAsBpB;AAMD;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,OAAO,CAAS;IAExB;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAgC;IAE9C;;;;OAIG;IACH,OAAO,CAAC,OAAO,CAAwB;IAEvC;;;;;;OAMG;IACH,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAEzC;;;OAGG;IACH,aAAa,EAAE,CAAC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAQ;IAE1D,cAmBC;IAED,mCAAmC;IACnC,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,KAAK,GAAE,MAAM,CAAC,UAA0B,GAAG,OAAO,CA0BzD;IAED;;;;;;;;;;;OAWG;IACH,OAAO,IAAI,IAAI,CAWd;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,MAAM,GAAE,MAAM,CAAC,WAA4B,GAAG,IAAI,CAQvD;CACF;AAMD;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0DAA0D;IAC1D,EAAE,EAAE,OAAO,CAAC;IACZ;;;;;OAKG;IACH,MAAM,EAAE,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC;CAC9C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB;;;EAG5B,CAAC;AAEH;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,QAAQ,CACtB,QAAQ,EAAE,cAAc,GAAG,MAAM,EACjC,MAAM,GAAE,MAAM,CAAC,WAA4B,GAC1C,gBAAgB,CA+ClB;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,UAAU,GAAE,MAA8B,GACzC,cAAc,CAKhB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,cAAc,CAEnE;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CACtB,KAAK,EAAE,MAAM,EACb,MAAM,GAAE,MAAM,CAAC,WAA4B,GAC1C,OAAO,CAET"}
+{"version":3,"file":"term.d.ts","sourceRoot":"","sources":["../../src/utils/term.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,8EAA8E;AAC9E,wBAAgB,WAAW,IAAI,OAAO,CAErC;AAED,6EAA6E;AAC7E,wBAAgB,UAAU,IAAI,OAAO,CAEpC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAEvC;AAED,+EAA+E;AAC/E,wBAAgB,WAAW,IAAI;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAM5D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,QAAQ,CACtB,EAAE,EAAE,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,KAAK,IAAI,EAClD,MAAM,GAAE,MAAM,CAAC,WAA4B,GAC1C,MAAM,IAAI,CAYZ;AAED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAK3E;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAe;IAC9B,qEAAqE;IACrE,OAAO,IAAI,IAAI,CAAC;IAChB,oEAAoE;IACpE,MAAM,IAAI,IAAI,CAAC;CAChB;AAID;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,GAAG,IAAI,CAEtE;AAsCD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,QAAQ,CACtB,CAAC,EAAE,MAAM,EACT,MAAM,GAAE,MAAM,CAAC,WAA4B,GAC1C,OAAO,CAET;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,QAAQ,CACtB,CAAC,EAAE,MAAM,EACT,MAAM,GAAE,MAAM,CAAC,WAA4B,GAC1C,OAAO,CAET;AAMD;;;;;;;GAOG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAEvC;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,KAAK,CAAC;AAE7D;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IACjC,kEAAkE;IAClE,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;;;;OAcG;IACH,UAAU,EAAE,UAAU,CAAC;IACvB;;;;OAIG;IACH,cAAc,EAAE,OAAO,CAAC;IACxB;;;;;;OAMG;IACH,aAAa,EAAE,aAAa,CAAC;IAC7B;;;OAGG;IACH,WAAW,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,MAAM,EAAE,OAAO,CAAC;IAChB;;;;;;;;OAQG;IACH,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AA4ED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC5B,IAAI,GAAE;IACJ,KAAK,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;IACnC,GAAG,CAAC,EAAE,OAAO,OAAO,CAAC,GAAG,CAAC;CACrB,GACL,kBAAkB,CAsBpB;AAMD;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,OAAO,CAAS;IAExB;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAgC;IAE9C;;;;OAIG;IACH,OAAO,CAAC,OAAO,CAAwB;IAEvC;;;;OAIG;IACH,OAAO,CAAC,UAAU,CAAwB;IAE1C;;;;;;OAMG;IACH,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAEzC;;;OAGG;IACH,aAAa,EAAE,CAAC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAQ;IAE1D,cAmBC;IAED,mCAAmC;IACnC,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,KAAK,GAAE,MAAM,CAAC,UAA0B,GAAG,OAAO,CA+BzD;IAED;;;;;;;;;;;OAWG;IACH,OAAO,IAAI,IAAI,CAad;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,MAAM,GAAE,MAAM,CAAC,WAA4B,GAAG,IAAI,CAQvD;CACF;AAMD;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0DAA0D;IAC1D,EAAE,EAAE,OAAO,CAAC;IACZ;;;;;OAKG;IACH,MAAM,EAAE,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC;CAC9C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB;;;EAG5B,CAAC;AAEH;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,QAAQ,CACtB,QAAQ,EAAE,cAAc,GAAG,MAAM,EACjC,MAAM,GAAE,MAAM,CAAC,WAA4B,GAC1C,gBAAgB,CA+ClB;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,UAAU,GAAE,MAA8B,GACzC,cAAc,CAKhB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,cAAc,CAEnE;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CACtB,KAAK,EAAE,MAAM,EACb,MAAM,GAAE,MAAM,CAAC,WAA4B,GAC1C,OAAO,CAET"}

package/dist/utils/tool-wire-compact.d.ts

@@ -23,6 +23,15 @@ export interface CompactWireToolDefinition {
  * largest repeated cost in provider tool declarations.
  */
 export declare function compactToolDefinitionForWire(tool: ToolWireDefinitionLike, opts?: CompactToolDefinitionForWireOptions): CompactWireToolDefinition;
+/**
+ * Tool inputs are always JSON objects, but dynamically supplied MCP/plugin
+ * schemas sometimes express that object as a top-level oneOf/anyOf/allOf.
+ * Anthropic-family endpoints reject those combinators at the input_schema
+ * root (including when reached through an OpenAI-compatible gateway such as
+ * OmniRoute). Keep nested combinators intact and flatten only the root.
+ * Runtime validation still uses the tool's original schema.
+ */
+export declare function normalizeTopLevelToolSchema(schema: Record<string, unknown>): Record<string, unknown>;
 export declare function compactSchemaDescriptions(schema: unknown, maxDescriptionChars?: number): Record<string, unknown>;
 export declare function compactDescription(text: string, maxChars: number): string;
 export declare function findSemanticBoundary(text: string, limit: number): number;

package/dist/utils/tool-wire-compact.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-wire-compact.d.ts","sourceRoot":"","sources":["../../src/utils/tool-wire-compact.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,mCAAmC;IAClD,yCAAyC;IACzC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,uDAAuD;IACvD,yBAAyB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChD;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAOD;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,sBAAsB,EAC5B,IAAI,GAAE,mCAAwC,GAC7C,yBAAyB,CAwB3B;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,OAAO,EACf,mBAAmB,SAA+B,GACjD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGzB;AAmBD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CASzE;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAaxE"}
+{"version":3,"file":"tool-wire-compact.d.ts","sourceRoot":"","sources":["../../src/utils/tool-wire-compact.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,mCAAmC;IAClD,yCAAyC;IACzC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,uDAAuD;IACvD,yBAAyB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChD;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAOD;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,sBAAsB,EAC5B,IAAI,GAAE,mCAAwC,GAC7C,yBAAyB,CA0B3B;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAyCzB;AAQD,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,OAAO,EACf,mBAAmB,SAA+B,GACjD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGzB;AAmBD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CASzE;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAaxE"}

package/dist/utils/wstack-paths.d.ts

@@ -21,8 +21,26 @@ export interface WstackPaths {
      * without rewriting callers.
      */
     configDir: string;
-    /** ~/.wrongstack/config.json */
+    /** ~/.wrongstack/config.json — bootstrap config (activeProfile + version). */
     globalConfig: string;
+    /**
+     * ~/.wrongstack/profiles — directory containing per-profile configs.
+     * Each profile has its own subdirectory with a config.json.
+     */
+    profilesDir: string;
+    /**
+     * Resolve the config path for a named profile.
+     * Returns ~/.wrongstack/profiles/<name>/config.json.
+     */
+    profileConfig: (name: string) => string;
+    /** Resolve ~/.wrongstack/profiles/<name>/statusline.json */
+    profileStatuslineConfig: (name: string) => string;
+    /** Resolve ~/.wrongstack/profiles/<name>/mode.json */
+    profileModeConfig: (name: string) => string;
+    /** Resolve ~/.wrongstack/profiles/<name>/provider-status.json */
+    profileProviderStatus: (name: string) => string;
+    /** Resolve ~/.wrongstack/profiles/<name>/update-cache.json */
+    profileUpdateCache: (name: string) => string;
     /** ~/.wrongstack/.key — 32 random bytes, mode 0600, AES-GCM key for the secret vault. */
     secretsKey: string;
     /** ~/.wrongstack/memory.md — user-global memory. */
@@ -106,6 +124,8 @@ export interface WstackPaths {
     projectSddBoards: string;
     /** ~/.wrongstack/sync.json — CloudSync configuration */
     syncConfig: string;
+    /** ~/.wrongstack/config-history — timestamped backups on every config write */
+    configHistoryDir: string;
     /** Function to get the status.json path for a project given its hash. */
     projectStatus: (projectHash: string) => string;
 }

package/dist/utils/wstack-paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wstack-paths.d.ts","sourceRoot":"","sources":["../../src/utils/wstack-paths.ts"],"names":[],"mappings":"AAKA;;;;;;;;GAQG;AAEH,MAAM,WAAW,WAAW;IAC1B,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,6BAA6B;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,iFAAiF;IACjF,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,yFAAyF;IACzF,UAAU,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,2GAA2G;IAC3G,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kEAAkE;IAClE,gBAAgB,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,aAAa,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iFAAiF;IACjF,WAAW,EAAE,MAAM,CAAC;IACpB,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAC7B,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,wCAAwC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,6CAA6C;IAC7C,eAAe,EAAE,MAAM,CAAC;IACxB,+CAA+C;IAC/C,YAAY,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,kBAAkB,EAAE,MAAM,CAAC;IAC3B;gFAC4E;IAC5E,eAAe,EAAE,MAAM,CAAC;IACxB,kEAAkE;IAClE,mBAAmB,EAAE,MAAM,CAAC;IAC5B,+DAA+D;IAC/D,eAAe,EAAE,MAAM,CAAC;IACxB,gHAAgH;IAChH,qBAAqB,EAAE,MAAM,CAAC;IAC9B,wEAAwE;IACxE,gBAAgB,EAAE,MAAM,CAAC;IACzB,oFAAoF;IACpF,qBAAqB,EAAE,MAAM,CAAC;IAC9B,gFAAgF;IAChF,mBAAmB,EAAE,MAAM,CAAC;IAC5B,4FAA4F;IAC5F,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,WAAW,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAC;IACpB,kFAAkF;IAClF,mBAAmB,EAAE,MAAM,CAAC;IAC5B,2DAA2D;IAC3D,YAAY,EAAE,MAAM,CAAC;IACrB,kEAAkE;IAClE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,yEAAyE;IACzE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAC;IACpB,gHAAgH;IAChH,gBAAgB,EAAE,MAAM,CAAC;IACzB,6FAA6F;IAC7F,gBAAgB,EAAE,MAAM,CAAC;IACzB,wDAAwD;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,aAAa,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,MAAM,CAAC;CAChD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CA0B5D;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAKnD;AAcD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,qFAAqF;IACrF,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAIzC;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,GAAG,WAAW,CA4DvE"}
+{"version":3,"file":"wstack-paths.d.ts","sourceRoot":"","sources":["../../src/utils/wstack-paths.ts"],"names":[],"mappings":"AAKA;;;;;;;;GAQG;AAEH,MAAM,WAAW,WAAW;IAC1B,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,6BAA6B;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,iFAAiF;IACjF,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACxC,4DAA4D;IAC5D,uBAAuB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAClD,sDAAsD;IACtD,iBAAiB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAC5C,iEAAiE;IACjE,qBAAqB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAChD,8DAA8D;IAC9D,kBAAkB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAC7C,yFAAyF;IACzF,UAAU,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,2GAA2G;IAC3G,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kEAAkE;IAClE,gBAAgB,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,aAAa,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iFAAiF;IACjF,WAAW,EAAE,MAAM,CAAC;IACpB,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAC7B,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,wCAAwC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,6CAA6C;IAC7C,eAAe,EAAE,MAAM,CAAC;IACxB,+CAA+C;IAC/C,YAAY,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,kBAAkB,EAAE,MAAM,CAAC;IAC3B;gFAC4E;IAC5E,eAAe,EAAE,MAAM,CAAC;IACxB,kEAAkE;IAClE,mBAAmB,EAAE,MAAM,CAAC;IAC5B,+DAA+D;IAC/D,eAAe,EAAE,MAAM,CAAC;IACxB,gHAAgH;IAChH,qBAAqB,EAAE,MAAM,CAAC;IAC9B,wEAAwE;IACxE,gBAAgB,EAAE,MAAM,CAAC;IACzB,oFAAoF;IACpF,qBAAqB,EAAE,MAAM,CAAC;IAC9B,gFAAgF;IAChF,mBAAmB,EAAE,MAAM,CAAC;IAC5B,4FAA4F;IAC5F,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,WAAW,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAC;IACpB,kFAAkF;IAClF,mBAAmB,EAAE,MAAM,CAAC;IAC5B,2DAA2D;IAC3D,YAAY,EAAE,MAAM,CAAC;IACrB,kEAAkE;IAClE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,yEAAyE;IACzE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAC;IACpB,gHAAgH;IAChH,gBAAgB,EAAE,MAAM,CAAC;IACzB,6FAA6F;IAC7F,gBAAgB,EAAE,MAAM,CAAC;IACzB,wDAAwD;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,gBAAgB,EAAE,MAAM,CAAC;IACzB,yEAAyE;IACzE,aAAa,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,MAAM,CAAC;CAChD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CA0B5D;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAKnD;AAcD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,qFAAqF;IACrF,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAIzC;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,GAAG,WAAW,CAkFvE"}

package/instructions/agents/ios.md

@@ -0,0 +1,113 @@
+You are the iOS assistant. Your job is Apple-platform app development:
+design and ship Swift code that compiles against the latest Apple SDKs,
+runs correctly on iOS/iPadOS/tvOS/watchOS/visionOS/macOS, and meets
+App Store and privacy requirements.
+
+Anchor toolchain (baseline, verified against Apple's Xcode 26 release
+notes — consult your installed Xcode for exact patch versions such as
+26.6 / Swift 6.3 / 26.5 SDKs):
+- Xcode 26 with Swift 6.2 and the iOS 26, iPadOS 26, tvOS 26, watchOS 26,
+  macOS Tahoe 26, and visionOS 26 SDKs as the major line this persona
+  is written against.
+- Requires a Mac running macOS Sequoia 15.6 or later.
+- Swift 6.2's "Approachable Concurrency" changes default isolation
+  rather than weakening safety: top-level code runs on the main actor
+  by default, `async` functions inherit the caller's isolation unless
+  explicitly marked `@concurrent`, and most `Sendable` annotations can
+  be inferred. Compile-time data-race safety is preserved. Use it when
+  the new defaults fit your design; don't assume it in code that must
+  build with Swift 6.0/6.1 toolchains.
+
+Talking to Xcode (use the current major-line versions of these tools;
+consult `xcodebuild -version` and `xcrun --find` to confirm what's
+installed before pinning specific CLI flags):
+- `xcodebuild` for build / test / archive / clean / `-showBuildSettings`
+  / `-list` / scheme + destination selection; prefer `-resultBundlePath`
+  for machine-readable results and pair with `xcrun xcresulttool get ...
+  --legacy` or the modern JSON API for CI parsing
+- `xcrun simctl` for the Simulator: `list`, `boot`, `shutdown`, `install`,
+  `launch`, `terminate`, `io`, `screenshot`, `log`, `privacy`, `push`,
+  `erase`; run on every supported OS for the project's deployment target
+- `xcrun devicectl` for physical-device management (modern replacement
+  for `ios-deploy`): `list devices`, `device process launch`, `device
+  process terminate`, log streaming, and on-device debugging attach
+- `xcrun xctrace` / `xcrun instruments` for profiling (Time Profiler,
+  Allocations, Leaks, SwiftUI template, Animation Hitches); prefer
+  `xctrace record --template ...` for CI-friendly `.trace` bundles
+- `xcrun preview` and Xcode Previews for SwiftUI iteration; treat
+  previews as a development tool, not a substitute for unit/UI tests
+- `xcrun notarytool` and `xcrun stapler` for `Developer ID` /
+  `notary-service` workflows when distributing outside the App Store
+- Swift Package Manager (`swift build`, `swift test`, `swift package`)
+  for packages and mixed Xcode+SPM projects; keep `Package.swift` tools
+  version aligned with the project's Swift compiler version
+- Readability wrappers (`xcbeautify`, `xcpretty`) when you need
+  human-friendly CI logs; never let them hide build failures — always
+  inspect the underlying `xcodebuild` exit code
+- Pin a single source of truth for toolchain versions: a `.xcode-version`
+  file (Xcode 26+) or `bundler`-style lockfile; document the minimum
+  Xcode and macOS required to build in the README, not in prose that
+  can drift out of sync with the toolchain
+
+Scope:
+- Build Swift features across UIKit, SwiftUI, AppKit, and platform
+  frameworks (Foundation, SwiftData, Core Data, Combine, AVFoundation,
+  CoreLocation, MapKit, WidgetKit, ActivityKit, StoreKit, etc.)
+- Wire persistence, networking, concurrency, and platform integrations
+  (push, Sign in with Apple, in-app purchase, App Intents, Share/Activity)
+- Implement accessibility, localization, and privacy-correct behaviors
+  by default — not as a later polish pass
+- Handle deployment targets, capability entitlements, and App Store /
+  TestFlight submission requirements
+
+Input format you accept:
+{ "task": "view | feature | persistence | integration | build | ship",
+  "platform": "ios | ipados | tvos | watchos | visionos | macos",
+  "minDeploymentTarget": "<e.g. iOS 17.0>",
+  "framework": "swiftui | uikit | appkit | mixed",
+  "feature": "<what to build or change>" }
+
+Output: Markdown iOS report:
+- ## Implementation (types/Views/ViewModels + responsibilities)
+- ## Platform/SDK notes (deployment target, entitlements, capabilities)
+- ## Concurrency/State (isolation, actor boundaries, observation model)
+- ## Privacy/Accessibility (purpose strings, ATT, VoiceOver, Dynamic Type)
+- ## Verification (build with Xcode 26, tests run on simulator/device)
+
+Working rules:
+- Default to Swift 6 language mode with strict concurrency; isolate
+  mutable shared state in actors, never in globals
+- Use `async`/`await` and structured concurrency (TaskGroup,
+  AsyncSequence); cancel long-running work and propagate cancellation
+- Prefer SwiftUI's `@Observable` macro on focused reference-type view
+  models; reach for plain structs only when observation and identity
+  are not needed, and fall back to `ObservableObject` only when
+  targeting pre-iOS-17 deployment
+- Keep View bodies pure and side-effect-free; do I/O in the model layer
+  or in explicit `.task` / `.onChange` modifiers
+- Match the deployment target honestly — don't call iOS 26 APIs on an
+  iOS 17 target; use `if #available(iOS 26, *)` or `@available`
+  attributes for newer features
+- Use SwiftData for new persistence unless the project is on Core Data;
+  `@Model` types are reference-type classes — design them for controlled
+  mutation, stable identity, and explicit relationship semantics, and
+  isolate the `ModelContainer`/`ModelContext` per actor or per scene
+- Write tests with Swift Testing (`@Test`, parameterized tests, traits)
+  alongside existing XCTest; do not mix assertion styles in one file
+- Accessibility is not optional: provide VoiceOver labels, support
+  Dynamic Type (avoid fixed font sizes), honor Reduce Motion and
+  Increase Contrast, and verify focus order on real devices
+- Privacy: declare Info.plist purpose strings for every sensitive API,
+  respect App Tracking Transparency, ship a Privacy Manifest
+  (`PrivacyInfo.xcprivacy`), and minimize on-device data collection
+- For App Intents, App Shortcuts, and widgets, follow the
+  process-isolated extension model and avoid sharing state via globals
+- Don't disable concurrency warnings to make code compile — fix the
+  isolation. Under Swift 6.2's Approachable Concurrency, prefer the
+  inferred defaults (main-actor top-level code, caller-context `async`)
+  and reach for explicit `@concurrent` only for work that genuinely
+  needs to run off the current isolation. Safety checks stay on;
+  "Approachable" means less annotation, not looser guarantees
+- Build with Xcode 26 and run the test suite on a real simulator
+  before claiming a change is done; a green `xcodebuild` is the
+  minimum bar, not the goal

package/instructions/llm/memory-consolidator.md

@@ -5,8 +5,8 @@ Session summary ({{iterations}} iterations):
 
 Return a JSON object with an "operations" array. Each operation must have an "action" field:
 - "add": create a new memory entry. Include "text", and optionally "type", "tags", "priority".
-- "edit": replace an existing entry. Include "query" (to match) and "text" (replacement).
-- "delete": remove an entry. Include "query" (to match).
+
+This consolidator is strictly add-only. It cannot edit or delete existing entries — corrections and removals are handled by separate, explicitly reviewed flows, never here. If an existing entry already covers a fact (even with different wording), skip it instead of adding a duplicate. "edit" or "delete" operations will be ignored.
 
 Memory types:
 - "fact": Objective truth about the project (e.g. "uses pnpm workspaces")
@@ -25,7 +25,7 @@ Priority levels:
 Rules:
 - Only persist facts likely useful across multiple future sessions.
 - Do NOT persist task progress, temporary state, or one-off observations.
-- Prefer "add" over "edit" unless the existing entry is clearly outdated.
+- Do NOT add a fact that an existing entry already covers.
 - Assign a type and priority to every "add" operation.
 - Use 1-3 hashtag tags for each entry (e.g. #typescript #build).
 - Be concise — each memory entry should be one clear sentence.
@@ -39,14 +39,6 @@ Return ONLY valid JSON, no markdown, no explanation:
       "type": "convention",
       "priority": "high",
       "tags": ["pnpm", "typescript", "build"]
-    },
-    {
-      "action": "edit",
-      "query": "pnpm",
-      "text": "Project uses pnpm v9+ with ESM-only modules",
-      "type": "fact",
-      "priority": "medium"
-    },
-    { "action": "delete", "query": "outdated convention" }
+    }
   ]
 }

package/instructions/system.md

@@ -339,7 +339,10 @@ When you call `remember` from a subagent, your role and mode are auto-detected a
 
 - Relevant memories are injected for you each turn — you do not need to search before every step. Use `memory_search` explicitly before substantial work in an unfamiliar area to avoid rediscovery.
 - Record a convention, decision, root cause, or preference only after evidence confirms it.
-- Correct or retire outdated memories with `memory_update` (edit text/tags/kind, or set `status`) and `memory_delete` (remove by id) — don't leave stale facts behind.
+- Correct or retire outdated memories with `memory_update` (edit text/tags/kind, or set `status`). The full deletion contract:
+  - **`memory_delete`** — the guarded path. Requires `{ force: true }` for ALL deletions; the store-layer guard prevents autonomous removal. Permanent memories refuse even with force.
+  - **`memory_update({ status: 'deleted' })`** and **`forget`** — lower-level escape hatches for non-permanent memories. These bypass the force guard intentionally; use them only when you have explicit user authorization or need surgical removal that the propose/resolve flow can't express.
+  - **`memory_candidates({ action: 'propose' })`** — the preferred non-destructive review flow. Files a proposal in the ReviewQueue; the user resolves via `memory_candidates({ action: 'resolve', decision: 'delete' })`. This is the only path autonomous agents (Mnemosyne, consolidator) should use.
 - Memory results are context, not proof. Verify them against current files before mutating code.
 
 ### Finding memories

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/core",
-  "version": "0.289.0",
+  "version": "0.291.1",
   "license": "MIT",
   "description": "WrongStack core: kernel, types, defaults, and shared utilities for the WrongStack CLI agent.",
   "repository": {
@@ -91,10 +91,10 @@
   ],
   "wrongstackApiVersion": "0.1.10",
   "dependencies": {
-    "@wrongstack/kanban": "0.289.0"
+    "@wrongstack/kanban": "0.291.1"
   },
   "devDependencies": {
-    "@types/node": "^26.0.1",
+    "@types/node": "^26.1.1",
     "typescript": "^7.0.2"
   },
   "publishConfig": {

package/skills/auto-review/SKILL.md

@@ -0,0 +1,176 @@
+---
+name: auto-review
+description: |
+  Use this skill to configure and understand the built-in auto-review plugin
+  (wstack-auto-review) that fires automated code review subagents on every
+  code change during a session.
+  Triggers: user says "auto review", "otomatik review", "auto code review",
+  "her değişiklikte review", "/auto-review".
+version: 2.0.0
+---
+
+# Auto Review — Built-in Plugin
+
+## Overview
+
+The **`wstack-auto-review`** plugin (built into `@wrongstack/core`) detects
+every git-tracked file change during a session and automatically dispatches
+a review subagent. It extends the Chimera review pipeline but fires
+**mid-session** on every change, not just at session end.
+
+```
+iteration.completed → git diff → debounce → chimera.review_needed event
+                                                  ↓
+                                    Director spawns review subagent
+                                    (provider/model from config)
+                                                  ↓
+                                    Severity-ranked report → session + mailbox
+                                                  ↓
+                                    chimera.review_complete event
+                                                  ↓
+                                    parseReviewSeverity → shouldCascade
+                                                  ↓  (if threshold crossed)
+                                    chimera.cascade_needed event
+                                                  ↓
+                                    Director spawns follow-up agents
+                                    (security-scanner, bug-hunter)
+```
+
+## Status
+
+**This is a built-in plugin** (`packages/core/src/plugins/auto-review-plugin.ts`),
+NOT a skill-based watcher. It is loaded automatically but **disabled by default**.
+Enable it in your config:
+
+```json
+{
+  "extensions": {
+    "wstack-auto-review": {
+      "enabled": true,
+      "provider": "deepseek",
+      "model": "deepseek-chat",
+      "fallbackProfile": "reliable",
+      "debounceMs": 5000,
+      "maxFilesPerBatch": 15,
+      "cascadeOn": "high",
+      "maxCascadeDepth": 2
+    }
+  }
+}
+```
+
+## Requirements
+
+- **`--director` flag** (Director mode) — the subagent spawning pipeline
+  (execution.ts) requires the Director to be active. Without it, review
+  events are silently skipped.
+- **`git`** available in the session working directory.
+
+## Configuration
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| `enabled` | boolean | false | Master switch |
+| `provider` | string | session provider | LLM provider for review agents |
+| `model` | string | session model | LLM model for review agents |
+| `fallbackProfile` | string | effective fallback profile | Named profile from `fallbackProfiles`; its first valid entry supplies the primary provider/model when those are omitted |
+| `debounceMs` | number | 5000 | Min gap between review triggers |
+| `maxFilesPerBatch` | number | 15 | Files per review call |
+| `maxConcurrentReviews` | number | 2 | Parallel review subagent cap |
+| `cascadeOn` | "off"|"critical"|"high" | "off" | Follow-up agent threshold — spawns security-scanner/bug-hunter when findings cross this severity |
+| `maxCascadeDepth` | number | 2 | Max fix→re-review cycles (0 = open-loop, no re-review) |
+
+## Slash commands
+
+| Command | Action |
+|---------|--------|
+| `/auto-review` | Show status + current config |
+| `/auto-review on` | Enable (via config update) |
+| `/auto-review off` | Disable |
+
+## What is reviewed
+
+- **Only git-tracked files** with staged or unstaged changes; untracked (`??`) files are never read or reviewed
+- **Content-aware** — later edits to an already-modified file trigger again when its content fingerprint changes
+- **Debounced without loss** — rapid edits are retained in a pending queue, with the latest content reviewed on the next eligible iteration
+- **Capped** at `maxFilesPerBatch` files per call; overflow stays pending
+- **Skipped** — `.wrongstack/` files
+- **Deleted files** are silently omitted
+
+## Cascade (self-correcting follow-up agents)
+
+When `cascadeOn` is `"high"` or `"critical"`, a review finding at or above that
+threshold triggers follow-up agents that **investigate and apply fixes**
+automatically. The cascade chain works as follows:
+
+```
+chimera.review_complete (carries report text + original bundle)
+         │
+         ▼
+auto-review plugin: parseReviewSeverity() extracts Critical/High/Medium counts
+         │
+         ▼  shouldCascade() gates on bundle.cascadeOn
+         │
+chimera.cascade_needed (carries severities + selected agents)
+         │
+         ▼
+execution.ts: spawns fix subagents via Director
+  • security-scanner — when a Critical/High finding mentions a security
+    keyword (injection, XSS, secret, shell, deserialization, etc.)
+  • bug-hunter — for any High+ finding (correctness concerns)
+         │
+         ▼  agents apply fixes (edit tool + typecheck/lint)
+         │
+re-read modified files → re-emit chimera.review_needed (depth N+1)
+         │
+         ▼  bounded by maxCascadeDepth — stops at limit or when clean
+```
+
+Both agents may spawn in parallel when a finding is both severe and
+security-related. The follow-up agents receive the review report (capped at
+12K chars) and the changed file list, read the flagged files, confirm or refute
+each finding, **apply fixes using the edit tool**, and run typecheck/lint to
+verify.
+
+### Closed self-correcting loop
+
+After fix agents apply their changes, the system re-reads the modified files
+and re-emits `chimera.review_needed` to trigger a fresh review of the post-fix
+state. If that review still finds High+ findings, the cycle repeats up to
+`maxCascadeDepth` iterations. When the depth limit is reached, a session message
+informs the user the loop stopped intentionally.
+
+| `maxCascadeDepth` | Behavior |
+|-------------------|----------|
+| `0` | Fix agents run once, no re-review (open-loop) |
+| `1` | Fix + one re-review to verify |
+| `2` (default) | Up to 2 re-review cycles |
+| `N` | Up to N re-review cycles |
+
+### Severity thresholds
+
+| `cascadeOn` | Fires when |
+|-------------|-----------|
+| `"off"` | Never (default) |
+| `"high"` | Any High OR Critical finding |
+| `"critical"` | Only Critical findings |
+
+### Agent selection
+
+`decideCascadeAgents()` scans only the Critical and High report sections for
+security keywords. A Medium-only security finding does **not** trigger the
+cascade — it doesn't cross the threshold. The 20 security keywords include:
+injection, xss, csrf, ssrf, sql, secret, credential, password, api key,
+token, auth, shell injection, command injection, innerhtml, deserialization,
+path traversal, hardcoded, privilege, owasp.
+
+## Skills in scope
+
+- `chimera` — for the review output format and severity rules
+- `shadow-agent` — for cron-based background monitoring pattern
+- `node-modern` — for understanding the TypeScript plugin code
+- `git-flow` — for git diff detection patterns
+- `multi-agent` — for subagent delegation and fleet management
+- `security-scanner` — for security vulnerability patterns
+- `bug-hunter` — for systematic bug detection
+