@wrongstack/core 0.291.0 → 0.291.2

package/dist/storage/provider-config-watcher.d.ts

@@ -8,6 +8,12 @@ import type { SecretVault } from '../types/secret-vault.js';
  */
 export interface ProviderConfigSnapshot {
     providers: Record<string, ProviderConfig>;
+    /** True when the config file actually had a `providers` key. The watcher
+     *  callback uses this to avoid clearing in-memory providers during hot-reload
+     *  when the profile config file simply doesn't define any — without this
+     *  guard, reading a profile config that has no `providers` key would set
+     *  `appConfig.providers = {}` and wipe all configured providers. */
+    snapshotHasProviders: boolean;
     apiKey?: string;
     baseUrl?: string;
     /** Display language (Config.uiLocale), surfaced so a cross-process change

package/dist/storage/provider-config-watcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-config-watcher.d.ts","sourceRoot":"","sources":["../../src/storage/provider-config-watcher.ts"],"names":[],"mappings":"AAmCA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;0EACsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;yEACqE;IACrE,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,yBAAyB,CAAC,EAAE,OAAO,wCAAwC,EAAE,iBAAiB,EAAE,CAAC;CAClG;AAED,MAAM,WAAW,0BAA0B;IACzC,mDAAmD;IACnD,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,WAAW,EAClB,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAC3B,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAgD7C;AAmBD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,WAAW,EAClB,QAAQ,EAAE,CAAC,QAAQ,EAAE,sBAAsB,KAAK,IAAI,EACpD,IAAI,GAAE,0BAA+B,GACpC;IAAE,KAAK,EAAE,MAAM,IAAI,CAAA;CAAE,CAgEvB"}
+{"version":3,"file":"provider-config-watcher.d.ts","sourceRoot":"","sources":["../../src/storage/provider-config-watcher.ts"],"names":[],"mappings":"AAmCA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC1C;;;;wEAIoE;IACpE,oBAAoB,EAAE,OAAO,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;0EACsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;yEACqE;IACrE,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,yBAAyB,CAAC,EAAE,OAAO,wCAAwC,EAAE,iBAAiB,EAAE,CAAC;CAClG;AAED,MAAM,WAAW,0BAA0B;IACzC,mDAAmD;IACnD,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,WAAW,EAClB,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAC3B,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAiD7C;AAmBD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,WAAW,EAClB,QAAQ,EAAE,CAAC,QAAQ,EAAE,sBAAsB,KAAK,IAAI,EACpD,IAAI,GAAE,0BAA+B,GACpC;IAAE,KAAK,EAAE,MAAM,IAAI,CAAA;CAAE,CAgEvB"}

package/dist/types/permission.d.ts

@@ -16,8 +16,46 @@ export interface PermissionDecision {
     /** Risk tier of the tool, if classified. */
     riskTier?: 'safe' | 'standard' | 'destructive' | undefined;
 }
+/**
+ * A single evaluation step in the permission explainer trace.
+ * Each step records a rule that was checked, whether it matched,
+ * and what the effective decision would be if that rule wins.
+ */
+export interface PermissionTraceStep {
+    /** Label identifying the rule, e.g. "session soft deny", "trust deny", "yolo". */
+    rule: string;
+    /** Whether this rule's condition matched the tool+input pair. */
+    matched: boolean;
+    /** The permission decision if this rule were the winner. */
+    decision: 'auto' | 'deny' | 'confirm';
+    /** The source label associated with this step. */
+    source: string;
+    /** Human-readable explanation of the outcome. */
+    detail: string;
+}
+/**
+ * Structured trace of a permission evaluation for debugging and CLI
+ * explainer output. Contains every step that was checked and the
+ * winning decision.
+ */
+export interface PermissionTrace {
+    toolName: string;
+    subject: string | null | undefined;
+    /** The ordered list of rules checked, in evaluation priority order. */
+    steps: PermissionTraceStep[];
+    /** Index into `steps` of the winning rule. */
+    winnerIndex: number;
+    /** The final effective permission decision. */
+    decision: PermissionDecision;
+}
 export interface PermissionPolicy {
     evaluate(tool: Tool, input: unknown, ctx: Context): Promise<PermissionDecision>;
+    /**
+     * Side-effect-free permission evaluation trace. Returns the same
+     * logical result as `evaluate()` without prompting the user,
+     * writing to trust files, or mutating session state.
+     */
+    explain?(tool: Tool, input: unknown, ctx: Context): Promise<PermissionTrace>;
     trust(rule: {
         tool: string;
         pattern: string;

package/dist/types/permission.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permission.d.ts","sourceRoot":"","sources":["../../src/types/permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAElD,MAAM,WAAW,WAAW;IAC1B,CAAC,iBAAiB,EAAE,MAAM,GAAG;QAC3B,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC7B,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC3B,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACnC,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;KACnC,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,kBAAkB,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,gBAAgB,CAAC;IAC3G,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,aAAa,GAAG,SAAS,CAAC;CAC5D;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAChF,KAAK,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D;;OAEG;IACH,IAAI,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACxD;;;;OAIG;IACH,SAAS,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACzD,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,6EAA6E;IAC7E,OAAO,CAAC,IAAI,OAAO,CAAC;IACpB,8EAA8E;IAC9E,OAAO,CAAC,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACjC,2EAA2E;IAC3E,kBAAkB,CAAC,IAAI,OAAO,CAAC;IAC/B,4EAA4E;IAC5E,kBAAkB,CAAC,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5C,mEAAmE;IACnE,qBAAqB,CAAC,IAAI,OAAO,CAAC;IAClC,oFAAoF;IACpF,qBAAqB,CAAC,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/C,0CAA0C;IAC1C,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,KAAK,OAAO,CAAC,KAAK,GAAG,IAAI,GAAG,QAAQ,GAAG,MAAM,CAAC,CAAC,GAAG,SAAS,GAAG,IAAI,CAAC;CACvJ"}
+{"version":3,"file":"permission.d.ts","sourceRoot":"","sources":["../../src/types/permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAElD,MAAM,WAAW,WAAW;IAC1B,CAAC,iBAAiB,EAAE,MAAM,GAAG;QAC3B,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC7B,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC3B,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACnC,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;KACnC,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,kBAAkB,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,gBAAgB,CAAC;IAC3G,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,aAAa,GAAG,SAAS,CAAC;CAC5D;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,kFAAkF;IAClF,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,OAAO,EAAE,OAAO,CAAC;IACjB,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACtC,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACnC,uEAAuE;IACvE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAC7B,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,QAAQ,EAAE,kBAAkB,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAChF;;;;OAIG;IACH,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC7E,KAAK,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D;;OAEG;IACH,IAAI,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACxD;;;;OAIG;IACH,SAAS,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACzD,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,6EAA6E;IAC7E,OAAO,CAAC,IAAI,OAAO,CAAC;IACpB,8EAA8E;IAC9E,OAAO,CAAC,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACjC,2EAA2E;IAC3E,kBAAkB,CAAC,IAAI,OAAO,CAAC;IAC/B,4EAA4E;IAC5E,kBAAkB,CAAC,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5C,mEAAmE;IACnE,qBAAqB,CAAC,IAAI,OAAO,CAAC;IAClC,oFAAoF;IACpF,qBAAqB,CAAC,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/C,0CAA0C;IAC1C,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,KAAK,OAAO,CAAC,KAAK,GAAG,IAAI,GAAG,QAAQ,GAAG,MAAM,CAAC,CAAC,GAAG,SAAS,GAAG,IAAI,CAAC;CACvJ"}

package/dist/utils/config-backup.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Minimal paths object needed for config backup — just the global root
+ * from which we derive the backup history directory.
+ */
+export interface ConfigBackupPaths {
+    globalRoot: string;
+}
+/**
+ * Backup directory for config file history.
+ * Every config write creates a timestamped snapshot here so the user can
+ * recover from accidental changes. Backups are never cleaned up automatically.
+ */
+export declare function configHistoryDir(globalRoot: string): string;
+/**
+ * Before overwriting a config file, save its current content to the
+ * config-history directory with a timestamp. Best-effort: failures are
+ * silently ignored so they never block the config write itself.
+ */
+export declare function backupConfigFile(filePath: string, paths: ConfigBackupPaths): Promise<void>;
+//# sourceMappingURL=config-backup.d.ts.map

package/dist/utils/config-backup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-backup.d.ts","sourceRoot":"","sources":["../../src/utils/config-backup.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE3D;AAcD;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,IAAI,CAAC,CAuBf"}

package/dist/utils/index.d.ts

@@ -2,6 +2,7 @@ export * from './assert-never.js';
 export * from './atomic-write.js';
 export * from './child-env.js';
 export * from './color.js';
+export * from './config-backup.js';
 export * from './config-json.js';
 export { buildCompletedWorkLedgerBlock, buildContextEvidenceDigest, COMPLETED_WORK_LEDGER_MARKER, createContextEvidenceState, formatCompletedWorkLedger, markAssistantReferencedEvidence, type RecordCompletedWorkInput, type RecordToolOutputEvidenceInput, recordCompletedWorkEvidence, recordToolOutputEvidence, recordUserIntentEvidence, repeatedReadPressure, syncCompletedWorkLedgerBlock, } from './context-evidence.js';
 export { type DeepMergeOptions, deepMerge, FORBIDDEN_PROTO_KEYS, isPrimitiveArray, } from './deep-merge.js';
@@ -33,7 +34,7 @@ export { applyToolDescriptionModes, applyToolDescriptionModeToTool, DEFAULT_TOOL
 export { createToolOutputSerializer, type ToolOutputSerializerOptions, } from './tool-output-serializer.js';
 export { applyToolResultRenderModes, DEFAULT_TOOL_RESULT_RENDER_MODE, getToolResultRenderMode, normalizeToolResultRenderMode, resolveToolResultRenderMode, setToolResultRenderMode, type ToolResultRenderModeRegistryLike, } from './tool-result-render-mode.js';
 export * from './tool-subject.js';
-export { type CompactToolDefinitionForWireOptions, type CompactWireToolDefinition, compactSchemaDescriptions, compactToolDefinitionForWire, type ToolWireDefinitionLike, } from './tool-wire-compact.js';
+export { type CompactToolDefinitionForWireOptions, type CompactWireToolDefinition, compactSchemaDescriptions, compactToolDefinitionForWire, normalizeTopLevelToolSchema, type ToolWireDefinitionLike, } from './tool-wire-compact.js';
 export { isUlid, ulid } from './ulid.js';
 export * from './wstack-paths.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,OAAO,EACL,6BAA6B,EAC7B,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,EAC1B,yBAAyB,EACzB,+BAA+B,EAC/B,KAAK,wBAAwB,EAC7B,KAAK,6BAA6B,EAClC,2BAA2B,EAC3B,wBAAwB,EACxB,wBAAwB,EACxB,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,gBAAgB,EACrB,SAAS,EACT,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,YAAY,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,cAAc,qBAAqB,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,cAAc,iBAAiB,CAAC;AAChC,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,KAAK,oBAAoB,EACzB,wBAAwB,EACxB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC/F,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EACL,KAAK,cAAc,EACnB,mBAAmB,EACnB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,qBAAqB,GACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EACL,oBAAoB,EACpB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,aAAa,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC1F,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,UAAU,EACf,cAAc,EACd,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,QAAQ,EACR,QAAQ,EACR,KAAK,kBAAkB,EACvB,iBAAiB,GAClB,MAAM,WAAW,CAAC;AACnB,cAAc,mBAAmB,CAAC;AAClC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,+BAA+B,EAC/B,kBAAkB,EAClB,qBAAqB,EACrB,uBAAuB,EACvB,wBAAwB,EACxB,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,yBAAyB,EACzB,8BAA8B,EAC9B,6BAA6B,EAC7B,sBAAsB,EACtB,4BAA4B,EAC5B,0BAA0B,EAC1B,sBAAsB,EACtB,uBAAuB,EACvB,KAAK,2BAA2B,GACjC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,0BAA0B,EAC1B,KAAK,2BAA2B,GACjC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,0BAA0B,EAC1B,+BAA+B,EAC/B,uBAAuB,EACvB,6BAA6B,EAC7B,2BAA2B,EAC3B,uBAAuB,EACvB,KAAK,gCAAgC,GACtC,MAAM,8BAA8B,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,OAAO,EACL,KAAK,mCAAmC,EACxC,KAAK,yBAAyB,EAC9B,yBAAyB,EACzB,4BAA4B,EAC5B,KAAK,sBAAsB,GAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACzC,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,OAAO,EACL,6BAA6B,EAC7B,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,EAC1B,yBAAyB,EACzB,+BAA+B,EAC/B,KAAK,wBAAwB,EAC7B,KAAK,6BAA6B,EAClC,2BAA2B,EAC3B,wBAAwB,EACxB,wBAAwB,EACxB,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,gBAAgB,EACrB,SAAS,EACT,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,YAAY,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,cAAc,qBAAqB,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,cAAc,iBAAiB,CAAC;AAChC,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,KAAK,oBAAoB,EACzB,wBAAwB,EACxB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC/F,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EACL,KAAK,cAAc,EACnB,mBAAmB,EACnB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,qBAAqB,GACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EACL,oBAAoB,EACpB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,aAAa,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC1F,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,UAAU,EACf,cAAc,EACd,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,QAAQ,EACR,QAAQ,EACR,KAAK,kBAAkB,EACvB,iBAAiB,GAClB,MAAM,WAAW,CAAC;AACnB,cAAc,mBAAmB,CAAC;AAClC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,+BAA+B,EAC/B,kBAAkB,EAClB,qBAAqB,EACrB,uBAAuB,EACvB,wBAAwB,EACxB,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,yBAAyB,EACzB,8BAA8B,EAC9B,6BAA6B,EAC7B,sBAAsB,EACtB,4BAA4B,EAC5B,0BAA0B,EAC1B,sBAAsB,EACtB,uBAAuB,EACvB,KAAK,2BAA2B,GACjC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,0BAA0B,EAC1B,KAAK,2BAA2B,GACjC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,0BAA0B,EAC1B,+BAA+B,EAC/B,uBAAuB,EACvB,6BAA6B,EAC7B,2BAA2B,EAC3B,uBAAuB,EACvB,KAAK,gCAAgC,GACtC,MAAM,8BAA8B,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,OAAO,EACL,KAAK,mCAAmC,EACxC,KAAK,yBAAyB,EAC9B,yBAAyB,EACzB,4BAA4B,EAC5B,2BAA2B,EAC3B,KAAK,sBAAsB,GAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACzC,cAAc,mBAAmB,CAAC"}

package/dist/utils/index.js

@@ -492,6 +492,12 @@ var TerminalLifecycle = class {
    * raw mode. Null when `acquire()` has never been called.
    */
   _wasRaw = null;
+  /**
+   * Whether stdin was paused before the TUI took ownership. Readline closes
+   * its interface by pausing the shared process stream, so raw mode alone is
+   * not enough to make Ink receive bytes during the boot-prompt -> TUI handoff.
+   */
+  _wasPaused = null;
   /**
    * Request the process to exit. Set the flag, trigger any registered
    * `onRequestExit` callback (typically Ink's `unmount()`), and arm a
@@ -543,8 +549,10 @@ var TerminalLifecycle = class {
     if (stdin?.isTTY !== true) return false;
     if (typeof stdin.setRawMode !== "function") return false;
     this._wasRaw = stdin.isRaw ?? false;
+    this._wasPaused = stdin.isPaused();
     this._stdin = stdin;
     stdin.setRawMode(true);
+    stdin.resume();
     this._active = true;
     if (process.platform === "win32") {
       setImmediate(() => {
@@ -573,9 +581,11 @@ var TerminalLifecycle = class {
     const stdin = this._stdin;
     if (stdin?.isTTY === true) {
       stdin.setRawMode?.(this._wasRaw ?? false);
+      if (this._wasPaused) stdin.pause();
     }
     this._stdin = void 0;
     this._wasRaw = null;
+    this._wasPaused = null;
   }
   /**
    * Synchronously reset all terminal state written by the TUI layer:
@@ -686,11 +696,42 @@ function stripAnsi(s) {
   return s.replace(/\x1b\[[0-9;]*[A-Za-z]/g, "");
 }
 
-// src/utils/config-json.ts
+// src/utils/config-backup.ts
 import * as fs2 from "node:fs/promises";
+import * as path2 from "node:path";
+function configHistoryDir(globalRoot) {
+  return path2.join(globalRoot, "config-history");
+}
+function configSlug(absolutePath, globalRoot) {
+  const rel = path2.relative(globalRoot, absolutePath);
+  const normalized = rel.replace(/\\/g, "/").replace(/\.json$/i, "");
+  return normalized.replace(/\//g, "-");
+}
+async function backupConfigFile(filePath, paths) {
+  let currentContent;
+  try {
+    currentContent = await fs2.readFile(filePath, "utf8");
+    if (!currentContent.trim()) return;
+  } catch {
+    return;
+  }
+  const now = /* @__PURE__ */ new Date();
+  const ts = now.toISOString().replace(/[:.]/g, "-").replace(/Z$/, "");
+  const slug = configSlug(filePath, paths.globalRoot);
+  const backupDir = configHistoryDir(paths.globalRoot);
+  const backupFile = path2.join(backupDir, `${slug}-${ts}.json`);
+  try {
+    await fs2.mkdir(backupDir, { recursive: true });
+    await fs2.writeFile(backupFile, currentContent, { mode: 384, encoding: "utf8" });
+  } catch {
+  }
+}
+
+// src/utils/config-json.ts
+import * as fs3 from "node:fs/promises";
 async function readJsonObjectFile(filePath) {
   try {
-    const parsed = JSON.parse(await fs2.readFile(filePath, "utf8"));
+    const parsed = JSON.parse(await fs3.readFile(filePath, "utf8"));
     return isJsonObject(parsed) ? parsed : {};
   } catch {
     return {};
@@ -698,7 +739,7 @@ async function readJsonObjectFile(filePath) {
 }
 async function jsonObjectFileExists(filePath) {
   try {
-    await fs2.access(filePath);
+    await fs3.access(filePath);
     return true;
   } catch {
     return false;
@@ -714,9 +755,9 @@ async function updateJsonObjectFile(filePath, mutator) {
   await writeJsonObjectFile(filePath, next);
   return next;
 }
-function getJsonPath(root, path5) {
+function getJsonPath(root, path6) {
   let current = root;
-  for (const segment of path5) {
+  for (const segment of path6) {
     if (typeof segment === "number") {
       if (!Array.isArray(current)) return void 0;
       current = current[segment];
@@ -727,13 +768,13 @@ function getJsonPath(root, path5) {
   }
   return current;
 }
-function setJsonPath(root, path5, value) {
-  if (path5.length === 0) {
+function setJsonPath(root, path6, value) {
+  if (path6.length === 0) {
     if (!isJsonObject(value)) throw new Error("Root config value must be an object");
     return value;
   }
-  const parent = ensureJsonParent(root, path5);
-  const leaf = lastPathSegment(path5);
+  const parent = ensureJsonParent(root, path6);
+  const leaf = lastPathSegment(path6);
   if (typeof leaf === "number") {
     if (!Array.isArray(parent)) throw new Error(`Cannot set numeric segment ${leaf} on non-array parent`);
     parent[leaf] = value;
@@ -743,10 +784,10 @@ function setJsonPath(root, path5, value) {
   }
   return root;
 }
-function removeJsonPath(root, path5) {
-  if (path5.length === 0) return false;
-  const parent = getJsonPath(root, path5.slice(0, -1));
-  const leaf = lastPathSegment(path5);
+function removeJsonPath(root, path6) {
+  if (path6.length === 0) return false;
+  const parent = getJsonPath(root, path6.slice(0, -1));
+  const leaf = lastPathSegment(path6);
   if (typeof leaf === "number") {
     if (!Array.isArray(parent) || leaf < 0 || leaf >= parent.length) return false;
     parent.splice(leaf, 1);
@@ -756,27 +797,27 @@ function removeJsonPath(root, path5) {
   delete parent[leaf];
   return true;
 }
-async function setJsonPathInFile(filePath, path5, value) {
-  return updateJsonObjectFile(filePath, (config) => setJsonPath(config, path5, value));
+async function setJsonPathInFile(filePath, path6, value) {
+  return updateJsonObjectFile(filePath, (config) => setJsonPath(config, path6, value));
 }
-async function removeJsonPathInFile(filePath, path5) {
+async function removeJsonPathInFile(filePath, path6) {
   return updateJsonObjectFile(filePath, (config) => {
-    removeJsonPath(config, path5);
+    removeJsonPath(config, path6);
   });
 }
 function isJsonObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function lastPathSegment(path5) {
-  const segment = path5[path5.length - 1];
+function lastPathSegment(path6) {
+  const segment = path6[path6.length - 1];
   if (segment === void 0) throw new Error("Invalid empty JSON path");
   return segment;
 }
-function ensureJsonParent(root, path5) {
+function ensureJsonParent(root, path6) {
   let current = root;
-  for (let i = 0; i < path5.length - 1; i += 1) {
-    const segment = path5[i];
-    const nextSegment = path5[i + 1];
+  for (let i = 0; i < path6.length - 1; i += 1) {
+    const segment = path6[i];
+    const nextSegment = path6[i + 1];
     if (segment === void 0) throw new Error("Invalid empty JSON path segment");
     const nextContainer = typeof nextSegment === "number" ? [] : {};
     if (typeof segment === "number") {
@@ -793,7 +834,7 @@ function ensureJsonParent(root, path5) {
 }
 
 // src/utils/context-evidence.ts
-import * as path2 from "node:path";
+import * as path3 from "node:path";
 var MAX_TOOL_CALLS = 80;
 var MAX_FACTS = 40;
 var MAX_ERRORS = 20;
@@ -1033,10 +1074,10 @@ function addPath(ctx, out, raw) {
   if (!clean || clean.length > 260) return;
   let normalized = clean.replace(/\\/g, "/");
   try {
-    const abs = path2.isAbsolute(clean) ? path2.resolve(clean) : null;
+    const abs = path3.isAbsolute(clean) ? path3.resolve(clean) : null;
     if (abs) {
-      const rel = path2.relative(ctx.projectRoot, abs);
-      if (!rel.startsWith("..") && !path2.isAbsolute(rel)) {
+      const rel = path3.relative(ctx.projectRoot, abs);
+      if (!rel.startsWith("..") && !path3.isAbsolute(rel)) {
         normalized = rel.replace(/\\/g, "/");
       }
     }
@@ -1154,7 +1195,7 @@ function implicitFactFor(metadata) {
 function metadataReferencedByText(metadata, haystack) {
   for (const file of metadata.files) {
     const f = file.toLowerCase();
-    const base = path2.basename(file).toLowerCase();
+    const base = path3.basename(file).toLowerCase();
     if (f && haystack.includes(f)) return true;
     if (base && haystack.includes(base)) return true;
   }
@@ -1860,10 +1901,10 @@ function validateAgainstSchema(value, schema) {
   return { ok: errors.length === 0, errors };
 }
 var MAX_SCHEMA_DEPTH = 64;
-function walk(value, schema, path5, errors, depth) {
+function walk(value, schema, path6, errors, depth) {
   if (depth > MAX_SCHEMA_DEPTH) {
     errors.push({
-      path: path5 || "<root>",
+      path: path6 || "<root>",
       message: `schema nesting exceeds maximum depth (${MAX_SCHEMA_DEPTH})`
     });
     return;
@@ -1871,7 +1912,7 @@ function walk(value, schema, path5, errors, depth) {
   if (schema.enum !== void 0) {
     if (!enumIncludes(schema.enum, value)) {
       errors.push({
-        path: path5 || "<root>",
+        path: path6 || "<root>",
         message: `expected one of ${JSON.stringify(schema.enum)}, got ${JSON.stringify(value)}`
       });
       return;
@@ -1880,7 +1921,7 @@ function walk(value, schema, path5, errors, depth) {
   if (typeof schema.type === "string") {
     if (!checkType(value, schema.type)) {
       errors.push({
-        path: path5 || "<root>",
+        path: path6 || "<root>",
         message: `expected ${schema.type}, got ${describeType(value)} (${previewValue(value)})`
       });
       return;
@@ -1892,7 +1933,7 @@ function walk(value, schema, path5, errors, depth) {
       if (!(req in obj)) {
         const expected = schema.properties?.[req]?.type;
         errors.push({
-          path: joinPath(path5, req),
+          path: joinPath(path6, req),
           message: `required property missing${typeof expected === "string" ? ` (expected ${expected})` : ""}`
         });
       }
@@ -1900,14 +1941,14 @@ function walk(value, schema, path5, errors, depth) {
     if (schema.properties) {
       for (const [key, subSchema] of Object.entries(schema.properties)) {
         if (key in obj) {
-          walk(obj[key], subSchema, joinPath(path5, key), errors, depth + 1);
+          walk(obj[key], subSchema, joinPath(path6, key), errors, depth + 1);
         }
       }
     }
   }
   if (schema.type === "array" && Array.isArray(value) && schema.items) {
     for (let i = 0; i < value.length; i++) {
-      walk(value[i], schema.items, `${path5}[${i}]`, errors, depth + 1);
+      walk(value[i], schema.items, `${path6}[${i}]`, errors, depth + 1);
     }
   }
 }
@@ -2118,16 +2159,6 @@ function stripUndefined(obj) {
 }
 
 // src/utils/message-invariants.ts
-function hasMeaningfulContent(content) {
-  if (typeof content === "string") return content.trim().length > 0;
-  return content.some((block) => {
-    if (block.type === "text") return block.text.trim().length > 0;
-    if (block.type === "thinking") {
-      return block.thinking.trim().length > 0 || Boolean(block.signature);
-    }
-    return true;
-  });
-}
 function repairToolUseAdjacency(messages) {
   const removedToolUses = [];
   const removedToolResults = [];
@@ -2214,6 +2245,21 @@ function mapContent(msg, fn) {
   }
   return { ...msg, content: next };
 }
+function hasMeaningfulContent(content) {
+  if (typeof content === "string") return content.trim().length > 0;
+  for (const block of content) {
+    if (block.type === "text") {
+      if (block.text.trim().length > 0) return true;
+      continue;
+    }
+    if (block.type === "thinking") {
+      if (block.thinking.trim().length > 0 || block.signature) return true;
+      continue;
+    }
+    return true;
+  }
+  return false;
+}
 function isEmptyMessage(msg) {
   return !hasMeaningfulContent(msg.content);
 }
@@ -2426,14 +2472,14 @@ function stripJsonComments(s) {
 }
 
 // src/utils/session-scoped-path.ts
-import * as path3 from "node:path";
+import * as path4 from "node:path";
 function sessionScopedPath(dir, sessionId, suffix) {
   if (!sessionId || sessionId.includes("\\") || sessionId.includes("..")) {
     throw invalid(sessionId);
   }
-  const resolved = path3.resolve(dir, `${sessionId}${suffix}`);
-  const rel = path3.relative(path3.resolve(dir), resolved);
-  if (rel.startsWith("..") || path3.isAbsolute(rel)) {
+  const resolved = path4.resolve(dir, `${sessionId}${suffix}`);
+  const rel = path4.relative(path4.resolve(dir), resolved);
+  if (rel.startsWith("..") || path4.isAbsolute(rel)) {
     throw invalid(sessionId);
   }
   return resolved;
@@ -3776,23 +3822,23 @@ function isUlid(value) {
 
 // src/utils/wstack-paths.ts
 import { createHash } from "node:crypto";
-import * as fs3 from "node:fs";
+import * as fs4 from "node:fs";
 import * as os from "node:os";
-import * as path4 from "node:path";
+import * as path5 from "node:path";
 function canonicalProjectRoot(absRoot) {
-  const checkoutRoot = path4.resolve(absRoot);
-  const dotGit = path4.join(checkoutRoot, ".git");
+  const checkoutRoot = path5.resolve(absRoot);
+  const dotGit = path5.join(checkoutRoot, ".git");
   try {
-    if (!fs3.statSync(dotGit).isFile()) return checkoutRoot;
-    const gitDirLine = fs3.readFileSync(dotGit, "utf8").trim();
+    if (!fs4.statSync(dotGit).isFile()) return checkoutRoot;
+    const gitDirLine = fs4.readFileSync(dotGit, "utf8").trim();
     const match = /^gitdir:\s*(.+)$/i.exec(gitDirLine);
     if (!match?.[1]) return checkoutRoot;
-    const gitDir = path4.resolve(checkoutRoot, match[1].trim());
-    const commonDirFile = path4.join(gitDir, "commondir");
-    if (!fs3.statSync(commonDirFile).isFile()) return checkoutRoot;
-    const commonDir = path4.resolve(gitDir, fs3.readFileSync(commonDirFile, "utf8").trim());
-    if (path4.basename(commonDir).toLowerCase() !== ".git") return checkoutRoot;
-    return path4.dirname(commonDir);
+    const gitDir = path5.resolve(checkoutRoot, match[1].trim());
+    const commonDirFile = path5.join(gitDir, "commondir");
+    if (!fs4.statSync(commonDirFile).isFile()) return checkoutRoot;
+    const commonDir = path5.resolve(gitDir, fs4.readFileSync(commonDirFile, "utf8").trim());
+    if (path5.basename(commonDir).toLowerCase() !== ".git") return checkoutRoot;
+    return path5.dirname(commonDir);
   } catch {
     return checkoutRoot;
   }
@@ -3802,7 +3848,7 @@ function projectHash(absRoot) {
 }
 function projectSlug(absRoot) {
   const identityRoot = canonicalProjectRoot(absRoot);
-  const base = slugify2(path4.basename(identityRoot));
+  const base = slugify2(path5.basename(identityRoot));
   const hash = createHash("sha256").update(identityRoot).digest("hex").slice(0, 6);
   return `${base}-${hash}`;
 }
@@ -3811,66 +3857,83 @@ function slugify2(name) {
 }
 function wstackGlobalRoot() {
   const fromEnv = process.env["WRONGSTACK_HOME"];
-  if (fromEnv && fromEnv.trim().length > 0) return path4.resolve(fromEnv);
-  return path4.join(os.homedir(), ".wrongstack");
+  if (fromEnv && fromEnv.trim().length > 0) return path5.resolve(fromEnv);
+  return path5.join(os.homedir(), ".wrongstack");
 }
 function resolveWstackPaths(opts) {
-  const globalRoot = opts.globalRoot ?? (opts.userHome ? path4.join(opts.userHome, ".wrongstack") : wstackGlobalRoot());
+  const globalRoot = opts.globalRoot ?? (opts.userHome ? path5.join(opts.userHome, ".wrongstack") : wstackGlobalRoot());
   const homeDir = opts.userHome ?? os.homedir();
   const hash = projectHash(opts.projectRoot);
   const slug = projectSlug(opts.projectRoot);
-  const projectDir = path4.join(globalRoot, "projects", slug);
+  const projectDir = path5.join(globalRoot, "projects", slug);
   return {
     globalRoot,
     projectRoot: opts.projectRoot,
     homeDir,
     configDir: globalRoot,
-    globalConfig: path4.join(globalRoot, "config.json"),
-    profilesDir: path4.join(globalRoot, "profiles"),
+    globalConfig: path5.join(globalRoot, "config.json"),
+    profilesDir: path5.join(globalRoot, "profiles"),
     profileConfig: (name) => {
       const safe = name.replace(/[/\\:]/g, "_").replace(/\.\./g, "_");
-      return path4.join(globalRoot, "profiles", safe || "default", "config.json");
+      return path5.join(globalRoot, "profiles", safe || "default", "config.json");
+    },
+    profileStatuslineConfig: (name) => {
+      const safe = name.replace(/[/\\:]/g, "_").replace(/\.\./g, "_");
+      return path5.join(globalRoot, "profiles", safe || "default", "statusline.json");
+    },
+    profileModeConfig: (name) => {
+      const safe = name.replace(/[/\\:]/g, "_").replace(/\.\./g, "_");
+      return path5.join(globalRoot, "profiles", safe || "default", "mode.json");
+    },
+    profileProviderStatus: (name) => {
+      const safe = name.replace(/[/\\:]/g, "_").replace(/\.\./g, "_");
+      return path5.join(globalRoot, "profiles", safe || "default", "provider-status.json");
+    },
+    profileUpdateCache: (name) => {
+      const safe = name.replace(/[/\\:]/g, "_").replace(/\.\./g, "_");
+      return path5.join(globalRoot, "profiles", safe || "default", "update-cache.json");
     },
-    secretsKey: path4.join(globalRoot, ".key"),
-    globalMemory: path4.join(globalRoot, "memory.md"),
-    globalSkills: path4.join(globalRoot, "skills"),
-    globalClaudeSkills: path4.join(homeDir, ".claude", "skills"),
-    globalDesignKits: path4.join(globalRoot, "design-kits"),
-    globalPrompts: path4.join(globalRoot, "prompts"),
-    globalInstructions: path4.join(globalRoot, "instructions"),
-    promptUsage: path4.join(globalRoot, "prompt-usage.json"),
-    cacheDir: path4.join(globalRoot, "cache"),
-    modelsCache: path4.join(globalRoot, "cache", "models.dev.json"),
-    modelsOverlayCache: path4.join(globalRoot, "cache", "models-overlay.json"),
-    historyFile: path4.join(globalRoot, "history"),
-    logFile: path4.join(globalRoot, "logs", "wrongstack.log"),
+    secretsKey: path5.join(globalRoot, ".key"),
+    globalMemory: path5.join(globalRoot, "memory.md"),
+    globalSkills: path5.join(globalRoot, "skills"),
+    globalClaudeSkills: path5.join(homeDir, ".claude", "skills"),
+    globalDesignKits: path5.join(globalRoot, "design-kits"),
+    globalPrompts: path5.join(globalRoot, "prompts"),
+    globalInstructions: path5.join(globalRoot, "instructions"),
+    promptUsage: path5.join(globalRoot, "prompt-usage.json"),
+    cacheDir: path5.join(globalRoot, "cache"),
+    modelsCache: path5.join(globalRoot, "cache", "models.dev.json"),
+    modelsOverlayCache: path5.join(globalRoot, "cache", "models-overlay.json"),
+    historyFile: path5.join(globalRoot, "history"),
+    logFile: path5.join(globalRoot, "logs", "wrongstack.log"),
     projectDir,
-    projectCodebaseIndex: path4.join(projectDir, "codebase-index"),
-    projectMemory: path4.join(projectDir, "memory.md"),
-    projectSessions: path4.join(projectDir, "sessions"),
-    projectTrust: path4.join(projectDir, "trust.json"),
-    projectMeta: path4.join(projectDir, "meta.json"),
-    projectLocalConfig: path4.join(projectDir, "config.local.json"),
-    inProjectConfig: path4.join(opts.projectRoot, ".wrongstack", "config.json"),
-    inProjectAgentsFile: path4.join(opts.projectRoot, ".wrongstack", "AGENTS.md"),
-    inProjectSkills: path4.join(opts.projectRoot, ".wrongstack", "skills"),
-    inProjectClaudeSkills: path4.join(opts.projectRoot, ".claude", "skills"),
-    inProjectPrompts: path4.join(opts.projectRoot, ".wrongstack", "prompts"),
-    inProjectInstructions: path4.join(opts.projectRoot, ".wrongstack", "instructions"),
-    inProjectDesignKits: path4.join(opts.projectRoot, ".wrongstack", "design-kits"),
-    inProjectWorktrees: path4.join(opts.projectRoot, ".wrongstack", "worktrees"),
+    projectCodebaseIndex: path5.join(projectDir, "codebase-index"),
+    projectMemory: path5.join(projectDir, "memory.md"),
+    projectSessions: path5.join(projectDir, "sessions"),
+    projectTrust: path5.join(projectDir, "trust.json"),
+    projectMeta: path5.join(projectDir, "meta.json"),
+    projectLocalConfig: path5.join(projectDir, "config.local.json"),
+    inProjectConfig: path5.join(opts.projectRoot, ".wrongstack", "config.json"),
+    inProjectAgentsFile: path5.join(opts.projectRoot, ".wrongstack", "AGENTS.md"),
+    inProjectSkills: path5.join(opts.projectRoot, ".wrongstack", "skills"),
+    inProjectClaudeSkills: path5.join(opts.projectRoot, ".claude", "skills"),
+    inProjectPrompts: path5.join(opts.projectRoot, ".wrongstack", "prompts"),
+    inProjectInstructions: path5.join(opts.projectRoot, ".wrongstack", "instructions"),
+    inProjectDesignKits: path5.join(opts.projectRoot, ".wrongstack", "design-kits"),
+    inProjectWorktrees: path5.join(opts.projectRoot, ".wrongstack", "worktrees"),
     projectHash: hash,
     projectSlug: slug,
-    projectGoal: path4.join(projectDir, "goal.json"),
-    projectInputHistory: path4.join(projectDir, "input-history.json"),
-    projectSpecs: path4.join(projectDir, "specs"),
-    projectTaskGraphs: path4.join(projectDir, "task-graphs"),
-    projectSddSession: path4.join(projectDir, "sdd-session.json"),
-    projectPlan: path4.join(projectDir, "plan.json"),
-    projectAutophase: path4.join(projectDir, "autophase"),
-    projectSddBoards: path4.join(projectDir, "sdd-boards"),
-    syncConfig: path4.join(globalRoot, "sync.json"),
-    projectStatus: (projectHash2) => path4.join(globalRoot, "projects", projectHash2, "status.json")
+    projectGoal: path5.join(projectDir, "goal.json"),
+    projectInputHistory: path5.join(projectDir, "input-history.json"),
+    projectSpecs: path5.join(projectDir, "specs"),
+    projectTaskGraphs: path5.join(projectDir, "task-graphs"),
+    projectSddSession: path5.join(projectDir, "sdd-session.json"),
+    projectPlan: path5.join(projectDir, "plan.json"),
+    projectAutophase: path5.join(projectDir, "autophase"),
+    projectSddBoards: path5.join(projectDir, "sdd-boards"),
+    syncConfig: path5.join(globalRoot, "sync.json"),
+    configHistoryDir: path5.join(globalRoot, "config-history"),
+    projectStatus: (projectHash2) => path5.join(globalRoot, "projects", projectHash2, "status.json")
   };
 }
 export {
@@ -3889,6 +3952,7 @@ export {
   assertNever,
   assertNotPrivateHost,
   atomicWrite,
+  backupConfigFile,
   buildChildEnv,
   buildCompletedWorkLedgerBlock,
   buildContextEvidenceDigest,
@@ -3905,6 +3969,7 @@ export {
   completePartialObject,
   computeMessageTokens,
   computeTaskItemProgress,
+  configHistoryDir,
   configureChildEnvGitIdentity,
   createContextEvidenceState,
   createToolOutputSerializer,
@@ -3950,6 +4015,7 @@ export {
   normalizeToLf,
   normalizeToolDescriptionMode,
   normalizeToolResultRenderMode,
+  normalizeTopLevelToolSchema,
   parseIncomingImages,
   projectHash,
   projectSlug,