@wrongstack/core 0.313.1 → 0.316.2

package/dist/{chunk-YBUJCZ57.js → chunk-4I7HGVVA.js}

@@ -1,9 +1,9 @@
 import {
   SessionCatalogProjectClient
-} from "./chunk-52RTVH4M.js";
+} from "./chunk-F3JWNST7.js";
 import {
   sessionCatalogProjectServerMetadataPath
-} from "./chunk-E6I5RXVK.js";
+} from "./chunk-AYW5YINX.js";
 
 // src/session-catalog/registry.ts
 import { randomUUID } from "node:crypto";
@@ -111,7 +111,8 @@ var ProjectSessionRegistry = class {
       reservation = await binding.client.call("reserve_resume", {
         targetSessionId: target.sessionId,
         requesterInstanceId: this.instanceId,
-        ...this.current ? { currentSessionId: this.current.entry.sessionId } : {}
+        ...this.current ? { currentSessionId: this.current.entry.sessionId } : {},
+        ...target.reservationMs !== void 0 ? { reservationMs: target.reservationMs } : {}
       });
     } catch (error) {
       await this.closeBinding(binding).catch(() => void 0);
@@ -119,7 +120,18 @@ var ProjectSessionRegistry = class {
     }
     let settled = false;
     return {
-      reservation,
+      get reservation() {
+        return reservation;
+      },
+      renew: async (reservationMs) => {
+        if (settled) return false;
+        reservation = await binding.client.call("renew_reservation", {
+          reservationId: reservation.reservationId,
+          requesterInstanceId: this.instanceId,
+          ...reservationMs !== void 0 ? { reservationMs } : {}
+        });
+        return true;
+      },
       activate: async (registration) => {
         if (settled) throw new Error("Resume reservation is already settled");
         const entry = this.fullEntry(registration);
@@ -348,4 +360,4 @@ export {
   getProjectSessionRegistry,
   hasProjectSessionRegistry
 };
-//# sourceMappingURL=chunk-YBUJCZ57.js.map
+//# sourceMappingURL=chunk-4I7HGVVA.js.map

package/dist/{chunk-JVGPR3TS.js → chunk-4LCZVJVF.js}

@@ -1,66 +1,19 @@
+import {
+  validateResolution,
+  validateTransition
+} from "./chunk-UJILKYES.js";
 import {
   SECRET_FILE_MODE
-} from "./chunk-H5E77KUJ.js";
+} from "./chunk-6FHWXLPT.js";
 import {
   atomicWrite,
   withFileLock
-} from "./chunk-7ZHZE5EO.js";
+} from "./chunk-OSGLYW5J.js";
 
 // src/plugins/review-finding-store.ts
 import { randomUUID } from "node:crypto";
 import * as fsp from "node:fs/promises";
 import * as path from "node:path";
-
-// src/plugins/review-finding-types.ts
-import { createHash } from "node:crypto";
-var InvalidTransitionError = class extends Error {
-  from;
-  to;
-  constructor(from, to, reason) {
-    const msg = reason ?? `Invalid transition from "${from}" to "${to}"`;
-    super(msg);
-    this.name = "InvalidTransitionError";
-    this.from = from;
-    this.to = to;
-  }
-};
-function normalizeFingerprintTitle(title) {
-  return title.trim().toLowerCase().replace(/[^\w\s]/g, "").replace(/\s+/g, " ").trim();
-}
-function computeFindingFingerprint(file, line, title) {
-  const normalizedTitle = normalizeFingerprintTitle(title);
-  const normalizedFile = file.replace(/\\/g, "/").trim().toLowerCase();
-  const lineStr = line != null && line >= 0 ? String(line) : "0";
-  const hash = createHash("sha256");
-  hash.update(`${normalizedFile}:${lineStr}:${normalizedTitle}`);
-  return hash.digest("hex");
-}
-var TRANSITION_MATRIX = {
-  active: /* @__PURE__ */ new Set(["triaged", "ignored", "resolved"]),
-  triaged: /* @__PURE__ */ new Set(["in_progress", "ignored", "resolved"]),
-  in_progress: /* @__PURE__ */ new Set(["resolved", "active"]),
-  ignored: /* @__PURE__ */ new Set(["active"]),
-  resolved: /* @__PURE__ */ new Set(["active"])
-};
-function validateTransition(from, to) {
-  if (from === to) return;
-  const allowed = TRANSITION_MATRIX[from];
-  if (!allowed?.has(to)) {
-    throw new InvalidTransitionError(from, to);
-  }
-}
-function validateResolution(status, outcome) {
-  if (status !== "resolved") return;
-  if (!outcome) {
-    throw new InvalidTransitionError(
-      "active",
-      "resolved",
-      'A resolution outcome is required when transitioning to "resolved"'
-    );
-  }
-}
-
-// src/plugins/review-finding-store.ts
 var FINDING_RESOLVED_RETENTION_MS = 30 * 24 * 60 * 60 * 1e3;
 var FINDING_IGNORED_RETENTION_MS = 14 * 24 * 60 * 60 * 1e3;
 var FINDING_DEFAULT_PAGE_SIZE = 50;
@@ -354,7 +307,6 @@ var JsonlFindingStore = class {
 };
 
 export {
-  computeFindingFingerprint,
   FINDING_RESOLVED_RETENTION_MS,
   FINDING_IGNORED_RETENTION_MS,
   FINDING_DEFAULT_PAGE_SIZE,
@@ -362,4 +314,4 @@ export {
   resolveFindingStorePath,
   JsonlFindingStore
 };
-//# sourceMappingURL=chunk-JVGPR3TS.js.map
+//# sourceMappingURL=chunk-4LCZVJVF.js.map

package/dist/{chunk-4ZHTKJHM.js → chunk-4SJNS7OB.js}

@@ -29,7 +29,12 @@ function isProxyEligibleForRewrite(originalBaseUrl, proxyUrl) {
   return true;
 }
 function composeRewrittenUrl(originalBaseUrl, proxyUrl) {
-  const parsedOriginal = new URL(originalBaseUrl);
+  let parsedOriginal;
+  try {
+    parsedOriginal = new URL(originalBaseUrl);
+  } catch {
+    return originalBaseUrl;
+  }
   const hostAndPath = `${parsedOriginal.host}${parsedOriginal.pathname}`;
   const trailingQuery = parsedOriginal.search || "";
   const trailingHash = parsedOriginal.hash || "";
@@ -38,6 +43,31 @@ function composeRewrittenUrl(originalBaseUrl, proxyUrl) {
 }
 var DEFAULT_PROXY_CONFIG = { enabled: false, url: "", active: false };
 var currentConfig = { ...DEFAULT_PROXY_CONFIG };
+var proxyTransitionLogger;
+function setProxyTransitionLogger(logger) {
+  proxyTransitionLogger = logger;
+}
+function sanitizeUrlForLog(raw) {
+  if (!raw) return "";
+  try {
+    const parsed = new URL(raw);
+    return `${parsed.protocol}//${parsed.host}${parsed.pathname}`;
+  } catch {
+    const cut = raw.search(/[?#\x00-\x1f\x7f]/);
+    return cut >= 0 ? raw.slice(0, cut) : raw;
+  }
+}
+function logProxyTransition(next, reason) {
+  const log = proxyTransitionLogger;
+  if (!log) return;
+  const url = sanitizeUrlForLog(currentConfig.url) || "<unset>";
+  const line = next ? `WrongProxy active=true (${reason}) \u2014 base-URL rewrites ON, proxy=${url}` : `WrongProxy active=false (${reason}) \u2014 base-URL rewrites OFF, proxy=${url}`;
+  try {
+    if (next) log.info(line);
+    else log.warn(line);
+  } catch {
+  }
+}
 function getProxyConfig() {
   return currentConfig;
 }
@@ -94,6 +124,7 @@ function deactivateProxyOnConnectionFailure(err) {
 }
 function __resetProxyConfigForTests() {
   currentConfig = { ...DEFAULT_PROXY_CONFIG };
+  proxyTransitionLogger = void 0;
   listeners.clear();
   instantApplyChains.clear();
 }
@@ -170,6 +201,9 @@ export {
   PROXY_EXCLUDED_PROVIDERS,
   isProxyEligible,
   rewriteBaseUrl,
+  setProxyTransitionLogger,
+  sanitizeUrlForLog,
+  logProxyTransition,
   getProxyConfig,
   subscribeToProxyConfig,
   applyProxyConfig,
@@ -180,4 +214,4 @@ export {
   waitForProxyRoutingSettle,
   createProxyInstantApply
 };
-//# sourceMappingURL=chunk-4ZHTKJHM.js.map
+//# sourceMappingURL=chunk-4SJNS7OB.js.map

package/dist/{chunk-AD7ZFZCS.js → chunk-5BMIE7QG.js}

@@ -1,12 +1,12 @@
 import {
   ERROR_CODES,
   FsError
-} from "./chunk-WOEZV3Q4.js";
+} from "./chunk-25LSLC3G.js";
 
 // src/utils/session-scoped-path.ts
 import * as path from "node:path";
 function sessionScopedPath(dir, sessionId, suffix) {
-  if (!sessionId || sessionId.includes("\\") || sessionId.includes("..")) {
+  if (!sessionId || sessionId.includes("..") || sessionId.includes("\\")) {
     throw invalid(sessionId);
   }
   const resolved = path.resolve(dir, `${sessionId}${suffix}`);
@@ -43,4 +43,4 @@ export {
   sessionScopedPath,
   isSessionTranscriptFileName
 };
-//# sourceMappingURL=chunk-AD7ZFZCS.js.map
+//# sourceMappingURL=chunk-5BMIE7QG.js.map

package/dist/{chunk-IQ35HMQL.js → chunk-5YPSXQXM.js}

@@ -1,41 +1,41 @@
 import {
   decryptConfigSecrets
 } from "./chunk-YY6APYUM.js";
-import {
-  DEFAULT_AUTONOMY_CONFIG,
-  DEFAULT_CIRCUIT_BREAKER_CONFIG,
-  DEFAULT_CONTEXT_CONFIG,
-  DEFAULT_CONTEXT_WINDOW_MODE_ID,
-  DEFAULT_SESSION_LOGGING_CONFIG,
-  DEFAULT_TOOLS_CONFIG,
-  isContextWindowModeSelectionId,
-  listContextWindowModes,
-  normalizeContextWindowModeId
-} from "./chunk-ZZ4V3WIZ.js";
 import {
   backupConfigFile
-} from "./chunk-CQQL4ZOQ.js";
+} from "./chunk-ZT7JNIGX.js";
 import {
   safeParse
-} from "./chunk-RPOA7IAE.js";
+} from "./chunk-W5VITDM2.js";
 import {
   FORBIDDEN_PROTO_KEYS,
   deepMerge
-} from "./chunk-DEIQMBD2.js";
+} from "./chunk-B7F4WVP4.js";
 import {
   atomicWrite,
   withFileLock
-} from "./chunk-7ZHZE5EO.js";
+} from "./chunk-OSGLYW5J.js";
 import {
   safeProfileName
-} from "./chunk-YNCVSFGF.js";
+} from "./chunk-SAFHACFA.js";
+import {
+  DEFAULT_AUTONOMY_CONFIG,
+  DEFAULT_CIRCUIT_BREAKER_CONFIG,
+  DEFAULT_CONTEXT_CONFIG,
+  DEFAULT_CONTEXT_WINDOW_MODE_ID,
+  DEFAULT_SESSION_LOGGING_CONFIG,
+  DEFAULT_TOOLS_CONFIG,
+  isContextWindowModeSelectionId,
+  listContextWindowModes,
+  normalizeContextWindowModeId
+} from "./chunk-DLHHXUAM.js";
 import {
   DEFAULT_TUI_THINKING_WORD
 } from "./chunk-KJ2ZTQSL.js";
 import {
   ConfigError,
   ERROR_CODES
-} from "./chunk-WOEZV3Q4.js";
+} from "./chunk-25LSLC3G.js";
 import {
   toErrorMessage
 } from "./chunk-TBRL2RCC.js";
@@ -66,7 +66,8 @@ var CONFIG_BEHAVIOR_DEFAULTS = {
     autoExtendLimit: DEFAULT_TOOLS_CONFIG.autoExtendLimit,
     restrictToProjectRoot: DEFAULT_TOOLS_CONFIG.restrictToProjectRoot,
     kanbanGovernance: DEFAULT_TOOLS_CONFIG.kanbanGovernance,
-    loopDetection: DEFAULT_TOOLS_CONFIG.loopDetection
+    loopDetection: DEFAULT_TOOLS_CONFIG.loopDetection,
+    autoThin: { ...DEFAULT_TOOLS_CONFIG.autoThin }
   },
   log: { level: "info" },
   features: {
@@ -244,7 +245,8 @@ function repairConfigDefaults(input) {
         continue;
       }
       const defaultIsArray = Array.isArray(defaultValue);
-      const compatible = defaultIsArray ? Array.isArray(current) : !Array.isArray(current) && typeof current === typeof defaultValue;
+      const defaultIsNumber = typeof defaultValue === "number";
+      const compatible = defaultIsArray ? Array.isArray(current) : defaultIsNumber ? typeof current === "number" && Number.isFinite(current) : !Array.isArray(current) && typeof current === typeof defaultValue;
       if (!compatible) {
         target[key] = cloneJsonValue(defaultValue);
         changes.push({ path: path2, action: "replaced" });
@@ -282,7 +284,8 @@ function envBoolOptional(v) {
 }
 var LOG_LEVELS = /* @__PURE__ */ new Set(["error", "warn", "info", "debug", "trace"]);
 function envLogLevel(v) {
-  return LOG_LEVELS.has(v) ? v : "info";
+  const norm = v.trim().toLowerCase();
+  return LOG_LEVELS.has(norm) ? norm : "info";
 }
 var defaultIndexing = {
   onSessionStart: true,
@@ -339,6 +342,10 @@ var IN_PROJECT_ALLOWED_KEYS = /* @__PURE__ */ new Set([
   "autonomy",
   "indexing",
   "session",
+  // Journal retention. 'retentionDays' is clamped up to 7 on read precisely so
+  // a repo-committed config cannot flush recent evidence; 0 (auto-purge off)
+  // only ever keeps more.
+  "chronicle",
   "log",
   "launch",
   "nextPrediction",
@@ -347,6 +354,10 @@ var IN_PROJECT_ALLOWED_KEYS = /* @__PURE__ */ new Set([
   "configScope",
   "maxConcurrent",
   "uiLocale",
+  // Cosmetic only: the TUI owns the canonical preset list and falls back to
+  // 'catppuccin' for an unknown value, so the worst a repo can do is pick a
+  // colour scheme.
+  "themePreset",
   "fallbackModels",
   "fallbackBridge",
   "fallbackProfiles",
@@ -359,8 +370,17 @@ var IN_PROJECT_ALLOWED_KEYS = /* @__PURE__ */ new Set([
   "modelAvailabilitySchedule",
   "fallbackAuto",
   "fallbackStickiness",
+  // The countdown before the UI auto-accepts the next fallback candidate.
+  // Grants a repo nothing it does not already have: 'fallbackModels' and
+  // 'fallbackProfiles' above already let it choose the candidate itself.
+  "fallbackGateSeconds",
   "models",
   "modelMatrix",
+  // Same class as 'modelMatrix' and 'fallbackProfiles' directly above: a tier
+  // only NAMES a profile/provider/model the user already configured, and its
+  // budget fields (maxCostUsd / maxIterations / timeoutMs) can only clamp a
+  // subagent DOWNWARD. No credential or exec surface.
+  "modelTiers",
   "circuitBreaker",
   "adaptiveConcurrency",
   "modelRuntime"
@@ -387,6 +407,10 @@ var KNOWN_DENIED_IN_PROJECT = [
     reason: "Carries the my.wrongstack.com machine token credential and endpoint URL."
   },
   { key: "yolo", reason: "Disables all permission confirmation prompts." },
+  {
+    key: "systemPrompt",
+    reason: "Selects the baseline identity prompt. The 'lite' variant drops whole sections of system.md \u2014 including 'Tool output trust boundary', the passage that tells the agent not to obey instructions found in repo content. A repo-committed config could therefore switch off the very rule that protects the user from that repo."
+  },
   { key: "extensions", reason: "Per-plugin config can carry command/credential fields." },
   { key: "hq", reason: "Carries HQ client token credential and endpoint URL." },
   { key: "acp", reason: "Per-agent ACP command/args/env override \u2192 arbitrary command exec (RCE)." },
@@ -407,7 +431,7 @@ var KNOWN_DENIED_IN_PROJECT = [
     reason: "Bounds how many of the user's OTHER configured providers may be swept in as last-resort failover. Setting it to 0 from a repo-committed config would silently strip that depth during an outage. It was already stripped in practice (absent from the allow-list) but was missing from the key registry, so this gate never checked it."
   }
 ];
-var KNOWN_CONFIG_TOP_LEVEL_KEYS = /* @__PURE__ */ new Set([
+var KNOWN_CONFIG_TOP_LEVEL_KEY_LIST = [
   "version",
   "activeProfile",
   "provider",
@@ -459,8 +483,16 @@ var KNOWN_CONFIG_TOP_LEVEL_KEYS = /* @__PURE__ */ new Set([
   "acp",
   "fleet",
   "brain",
-  "git"
-]);
+  "git",
+  "themePreset",
+  "modelTiers",
+  "fallbackGateSeconds",
+  "chronicle",
+  "systemPrompt"
+];
+var KNOWN_CONFIG_TOP_LEVEL_KEYS = new Set(
+  KNOWN_CONFIG_TOP_LEVEL_KEY_LIST
+);
 var IN_PROJECT_DENIED_PATHS = [
   {
     path: "tools.exec.allow",
@@ -518,6 +550,21 @@ var IN_PROJECT_DENIED_PATHS = [
     path: "tools.kanbanGovernance",
     reason: "Repo-committed config could disable a Kanban governance gate the operator switched on, letting product mutations run outside any managed card."
   },
+  {
+    // The whole subtree, not just `enabled`: a repo could ship
+    // `tools.autoThin = { enabled: true, idleDays: 0, minInvocations: 999 }`
+    // and disable every tool the operator wants, on first boot, before any
+    // user-facing dry-run. Same operator-owned class as `tools.exec.allow`.
+    path: "tools.autoThin",
+    reason: "Stats-driven tool auto-thinning is an operator decision: a repo-committed config could disable tools the operator wants by shipping a permissive threshold."
+  },
+  {
+    // The audit-trail parallel of `disabledTools`. A repo could otherwise
+    // downgrade every user disable to `auto-thinned`, hiding operator intent
+    // in `/tool autothin status` and undoing it en masse.
+    path: "tools.disabledToolMeta",
+    reason: "Disabled-tool audit-trail metadata; a repo-committed entry could obscure operator-authored disables as auto-thinned."
+  },
   {
     // The bridge spawn path resolves the CLI entry by walking UP from the
     // project root, so a repo that ships its own `packages/cli/dist/index.js`
@@ -1393,4 +1440,4 @@ export {
   normalizeInlineProviderModels,
   DefaultConfigLoader
 };
-//# sourceMappingURL=chunk-IQ35HMQL.js.map
+//# sourceMappingURL=chunk-5YPSXQXM.js.map

package/dist/chunk-6FHWXLPT.js

@@ -0,0 +1,10 @@
+// src/security/file-permissions.ts
+import { restrictDirPermissions, restrictFilePermissions, SECRET_DIR_MODE, SECRET_FILE_MODE } from "@wrongstack/persistence";
+
+export {
+  restrictDirPermissions,
+  restrictFilePermissions,
+  SECRET_DIR_MODE,
+  SECRET_FILE_MODE
+};
+//# sourceMappingURL=chunk-6FHWXLPT.js.map

package/dist/{chunk-FIV4IJL7.js → chunk-6H5GEOET.js}

@@ -1,30 +1,43 @@
 import {
   toolMutates
-} from "./chunk-ZEHUCJHY.js";
+} from "./chunk-JFPJ6LLQ.js";
 import {
   allServers
 } from "./chunk-FXQLIX3K.js";
 import {
   resolvePluginEnablement
 } from "./chunk-3XPVB7BA.js";
+import {
+  activeTierConfig,
+  evaluateLeaderTierSwitch,
+  isValidMatrixKey,
+  leaderTierPolicy,
+  listTierIds,
+  phaseForRole,
+  resolveSubagentModelTarget,
+  resolveTier
+} from "./chunk-RTOTNK3P.js";
 import {
   CouncilOrchestrator,
   DEFAULT_COUNCIL_PROFILE_REGISTRY,
   OneShotOrchestrator,
   validateCouncilOptions
-} from "./chunk-CE4ZOCOI.js";
-import {
-  isValidMatrixKey,
-  phaseForRole,
-  resolveSubagentModelTarget
-} from "./chunk-2BUUIMQB.js";
+} from "./chunk-PFCMSSUF.js";
 import {
   AGENT_CATALOG
-} from "./chunk-FHAMQS7Q.js";
+} from "./chunk-FCBTO76Z.js";
+import {
+  mcpQualifiedToolName,
+  mcpServerToolPrefix,
+  readJsonObjectFile,
+  setJsonPath,
+  updateJsonObjectFile,
+  validateAgainstSchema
+} from "./chunk-YPT4A46F.js";
 import {
   ToolCapabilities,
   getDangerousCapabilities
-} from "./chunk-A455ATZB.js";
+} from "./chunk-UBGDX6FI.js";
 import {
   normalizeModelRef,
   parseModelRef
@@ -33,19 +46,11 @@ import {
   GOVERNED_TOOL_EXECUTOR_META_KEY
 } from "./chunk-XBDP4QPW.js";
 import {
-  mcpQualifiedToolName,
-  mcpServerToolPrefix,
-  readJsonObjectFile,
-  setJsonPath,
-  updateJsonObjectFile,
-  validateAgainstSchema
-} from "./chunk-FFSX2QDQ.js";
+  expectDefined
+} from "./chunk-PFZO3C6H.js";
 import {
   toErrorMessage
 } from "./chunk-TBRL2RCC.js";
-import {
-  expectDefined
-} from "./chunk-PFZO3C6H.js";
 
 // src/tools/council-tool.ts
 var COUNCIL_TOOL_NAME = "council";
@@ -1406,6 +1411,143 @@ ${content}`);
   };
 }
 
+// src/tools/model-tier-set-tool.ts
+var LEADER_TIER_SET_TOOL_NAME = "leader_tier_set";
+var SCHEMA = {
+  type: "object",
+  properties: {
+    action: {
+      type: "string",
+      enum: ["show", "set"],
+      description: "show \u2014 the active tier, every configured level and what it resolves to, plus the switch policy. set \u2014 request a move to another tier."
+    },
+    tier: {
+      type: "string",
+      description: 'Target tier id for "set" (e.g. "budget", "standard", "premium").'
+    },
+    reason: {
+      type: "string",
+      description: "Why the switch is warranted, in one sentence. Shown to the user in propose mode, so say what about the work changed \u2014 not just that a cheaper model exists."
+    }
+  },
+  required: ["action"],
+  additionalProperties: false
+};
+function createModelTierSetTool(opts) {
+  return {
+    name: LEADER_TIER_SET_TOOL_NAME,
+    description: `Inspect or change the leader's own cost tier (e.g. "budget" | "standard" | "premium"). Use "set" when the nature of the work has changed enough to justify a different class of model \u2014 dropping to a cheap tier for mechanical work, or asking for an expensive one when a decision is genuinely hard. Every request is checked against the user's guard rails (minimum dwell between switches, target context window, spend ceiling, and whether the saving covers the prompt-cache re-warm the switch causes). By default an allowed switch is PROPOSED to the user rather than applied.`,
+    usageHint: 'Start with {action:"show"} to see the levels and the policy. Then {action:"set", tier, reason}. A refusal explains which guard rejected it; do not retry the same switch immediately.',
+    category: "config",
+    inputSchema: SCHEMA,
+    permission: "auto",
+    mutating: true,
+    riskTier: "standard",
+    icon: "settings",
+    async execute(input) {
+      const config = opts.getConfig();
+      const tiers = activeTierConfig(config);
+      if (!tiers) {
+        return {
+          status: "error",
+          message: "The model-tier layer is not enabled. Set `modelTiers.enabled = true` and define `modelTiers.levels` first."
+        };
+      }
+      const currentTier = opts.getCurrentTier?.();
+      const policy = leaderTierPolicy(config);
+      if (input.action === "show") {
+        const lines = [
+          `  active tier: ${currentTier ?? "(unset \u2014 routing table decides per spawn)"}`,
+          `  leader mode: ${policy.mode}`,
+          `  dwell: ${policy.dwellTurns} turn(s) \xB7 min saving: $${policy.minSavingsUsd} \xB7 context-fill cap: ${Math.round(policy.maxContextFillForSwitch * 100)}%` + (policy.maxTier ? ` \xB7 ceiling: ${policy.maxTier}` : ""),
+          ""
+        ];
+        for (const id of listTierIds(config)) {
+          const resolved2 = resolveTier(config, { tier: id });
+          const target = resolved2?.model ? `${resolved2.provider ?? config.provider}/${resolved2.model}` : "(no model \u2014 profile empty or unresolvable)";
+          const budget = resolved2?.budget ?? {};
+          const budgetBits = [
+            budget.maxCostUsd !== void 0 ? `$${budget.maxCostUsd}` : "",
+            budget.maxIterations !== void 0 ? `${budget.maxIterations} iters` : "",
+            budget.maxToolCalls !== void 0 ? `${budget.maxToolCalls} tools` : ""
+          ].filter(Boolean);
+          lines.push(
+            `  ${id}${id === currentTier ? " *" : ""}: ${target}` + (budgetBits.length ? `  [${budgetBits.join(" \xB7 ")}]` : "")
+          );
+        }
+        return { status: "ok", message: lines.join("\n") };
+      }
+      if (!input.tier) {
+        return { status: "error", message: 'Provide "tier" for the "set" action.' };
+      }
+      const resolved = resolveTier(config, { tier: input.tier });
+      if (!resolved?.model) {
+        const available = listTierIds(config);
+        return {
+          status: "error",
+          message: `Tier "${input.tier}" does not resolve to a model${available.length ? ` (configured tiers: ${available.join(", ")})` : ""}.`
+        };
+      }
+      const targetProvider = resolved.provider ?? config.provider;
+      const targetModel = resolved.model;
+      const contextTokens = opts.getContextTokens?.();
+      const haveContext = typeof contextTokens === "number" && contextTokens > 0;
+      const [fromEconomics, toEconomics] = haveContext ? await Promise.all([
+        opts.getModelEconomics?.(config.provider, config.model) ?? Promise.resolve(void 0),
+        opts.getModelEconomics?.(targetProvider, targetModel) ?? Promise.resolve(void 0)
+      ]) : [void 0, void 0];
+      const verdict = evaluateLeaderTierSwitch(config, {
+        ...currentTier ? { fromTier: currentTier } : {},
+        toTier: input.tier,
+        contextTokens: haveContext ? contextTokens : 0,
+        // A host that does not track switches must not be permanently blocked
+        // by the dwell guard, so an unknown count reads as "long ago".
+        turnsSinceSwitch: opts.getTurnsSinceTierSwitch?.() ?? Number.MAX_SAFE_INTEGER,
+        economics: { from: fromEconomics ?? {}, to: toEconomics ?? {} }
+      });
+      if (!verdict.allowed) {
+        return { status: "error", message: `Refused (${verdict.code}): ${verdict.reason}` };
+      }
+      const proposal = {
+        fromTier: currentTier,
+        toTier: input.tier,
+        target: { provider: targetProvider, model: targetModel },
+        reason: input.reason?.trim() || verdict.reason,
+        projectedSavingsUsd: verdict.economics.projectedSavingsUsd,
+        reWarmCostUsd: verdict.economics.reWarmCostUsd
+      };
+      if (verdict.mode === "propose") {
+        await opts.onTierProposed?.(proposal);
+        return {
+          status: "proposed",
+          message: `Proposed: ${currentTier ?? "current"} \u2192 ${input.tier} (${targetProvider}/${targetModel}). ${verdict.reason} Awaiting the user \u2014 the model has NOT been changed. Set \`modelTiers.leader.mode = "auto"\` to let this apply without asking.`
+        };
+      }
+      if (opts.switchProviderAndModel) {
+        const switchError = await opts.switchProviderAndModel(targetProvider, targetModel);
+        if (switchError) {
+          return {
+            status: "error",
+            message: `Could not switch to ${targetProvider}/${targetModel}: ${switchError}. Config was not changed.`
+          };
+        }
+      }
+      await opts.updateConfig((cfg) => {
+        cfg["provider"] = targetProvider;
+        cfg["model"] = targetModel;
+        if (resolved.fallbackModels?.length) cfg["fallbackModels"] = [...resolved.fallbackModels];
+      });
+      opts.onTierSwitched?.(input.tier);
+      const liveNote = opts.switchProviderAndModel ? "" : " (config updated \u2014 the live session keeps its current model until restart or /setmodel)";
+      return {
+        status: "ok",
+        message: `\u2713 Leader tier \u2192 ${input.tier} (${targetProvider}/${targetModel})${liveNote}
+  ${verdict.reason}`
+      };
+    }
+  };
+}
+
 // src/tools/fallback-manage-tools.ts
 function createFallbackManageTools(opts) {
   return [
@@ -1416,6 +1558,7 @@ function createFallbackManageTools(opts) {
     createProviderManageTool(opts),
     createProviderKeySetTool(opts),
     createLeaderModelSetTool(opts),
+    createModelTierSetTool(opts),
     createSystemConfigViewTool(opts)
   ];
 }
@@ -2260,4 +2403,4 @@ export {
   PLUGIN_MANAGER_TOOL_NAME,
   createPluginManagerTool
 };
-//# sourceMappingURL=chunk-FIV4IJL7.js.map
+//# sourceMappingURL=chunk-6H5GEOET.js.map

package/dist/{chunk-VB3H5WWB.js → chunk-6NWEVFEL.js}

@@ -138,7 +138,7 @@ function buildChildEnv(optsOrSessionId) {
   if (opts.extra) {
     Object.assign(out, opts.extra);
   }
-  if (opts.sessionId) out["WRONGSTACK_SESSION_ID"] = opts.sessionId;
+  if (opts.sessionId) out["WRONGSTACK_SESSION_ID"] = opts.sessionId.replace(/\\/g, "/");
   return out;
 }
 
@@ -148,4 +148,4 @@ export {
   getChildEnvGitIdentity,
   buildChildEnv
 };
-//# sourceMappingURL=chunk-VB3H5WWB.js.map
+//# sourceMappingURL=chunk-6NWEVFEL.js.map