@wrongstack/cli 0.293.0 → 0.295.0

package/dist/webui-server/connection-handler.d.ts

@@ -1,21 +1,8 @@
-/**
- * WebSocket connection handler for the CLI WebUI bridge.
- *
- * One `wss.on('connection', ...)` per browser tab: per-socket error
- * handling (attached first, before any awaited work — an oversized inbound
- * frame or other socket-level error must never crash the process), auth via
- * the shared `verifyClient` policy, client registration (map entry + the
- * per-panel WS handlers), per-connection rate limiting, message dispatch,
- * close cleanup, and the initial `session.start` push.
- *
- * PR 14 of Issue #30: extracted from `webui-server.ts`.
- */
 import type { IncomingMessage } from 'node:http';
-import type { Message, Usage } from '@wrongstack/core';
-import type { GoalWebSocketHandler, SddBoardWebSocketHandler, SddWizardWebSocketHandler, SpecsWebSocketHandler, TerminalWebSocketHandler, WorktreeWebSocketHandler } from '@wrongstack/webui-server';
+import type { Message, Usage } from '@wrongstack/core/types';
+import type { GoalWebSocketHandler, PendingConfirm, SddBoardWebSocketHandler, SddWizardWebSocketHandler, SpecsWebSocketHandler, TerminalWebSocketHandler, WorktreeWebSocketHandler } from '@wrongstack/webui-server';
 import type { WebSocket } from 'ws';
-import { type PendingConfirm } from './ws-handlers/index.js';
-import type { WSClientMessage, WSServerMessage } from '../webui-server.js';
+import type { WSClientMessage, WSServerMessage } from './contracts.js';
 export interface ConnectedClient {
     ws: WebSocket;
     sessionId: string | null;
@@ -34,7 +21,6 @@ export interface ConnectionHandlerDeps {
     sddWizardHandler: SddWizardWebSocketHandler | null;
     worktreeHandler: WorktreeWebSocketHandler;
     terminalHandler: TerminalWebSocketHandler;
-    /** 0 = disabled (default; this is a local, single-user tool). */
     rateLimitMax: number;
     send: (ws: WebSocket, msg: WSServerMessage) => void;
     sessionPayload: <T extends Record<string, unknown>>(payload: T) => T & {
@@ -44,20 +30,10 @@ export interface ConnectionHandlerDeps {
     abortControllers: Map<WebSocket, AbortController>;
     pendingConfirms: Map<string, PendingConfirm>;
     buildSessionStartPayload: (overrides?: Record<string, unknown>, needsSetup?: boolean) => Promise<Record<string, unknown>>;
-    /**
-     * Load the visible chat transcript for a reconnecting browser tab. This
-     * should read the session log when available; `context.messages` is only a
-     * fallback because it is the model working set and can be compacted.
-     */
     loadReplay?: (() => Promise<{
         messages: Message[];
         usage?: Usage | undefined;
     } | null>) | undefined;
-    /**
-     * Read-only worker transcript snapshot for browser refresh/resume. Async
-     * because a resumed process has an empty ring and must read the transcripts
-     * back from disk.
-     */
     loadAgentSessions?: (() => Promise<import('@wrongstack/core/coordination').AgentVirtualSession[]>) | undefined;
     needsSetup: boolean;
 }

package/dist/webui-server/connection-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connection-handler.d.ts","sourceRoot":"","sources":["../../src/webui-server/connection-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,KAAK,EACV,oBAAoB,EACpB,wBAAwB,EACxB,yBAAyB,EACzB,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACzB,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAA6B,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxF,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAE3E,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,SAAS,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAYD,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,OAAO,CAAC;IACtB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACzC,gBAAgB,EAAE,MAAM,MAAM,CAAC;IAC/B,WAAW,EAAE,oBAAoB,CAAC;IAClC,YAAY,EAAE,qBAAqB,CAAC;IACpC,eAAe,EAAE,wBAAwB,CAAC;IAC1C,gBAAgB,EAAE,yBAAyB,GAAG,IAAI,CAAC;IACnD,eAAe,EAAE,wBAAwB,CAAC;IAC1C,eAAe,EAAE,wBAAwB,CAAC;IAC1C,iEAAiE;IACjE,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,KAAK,IAAI,CAAC;IACpD,cAAc,EAAE,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7F,aAAa,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/F,gBAAgB,EAAE,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAClD,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC7C,wBAAwB,EAAE,CACxB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnC,UAAU,CAAC,EAAE,OAAO,KACjB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtC;;;;OAIG;IACH,UAAU,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;IACpG;;;;OAIG;IACH,iBAAiB,CAAC,EACd,CAAC,MAAM,OAAO,CAAC,OAAO,+BAA+B,EAAE,mBAAmB,EAAE,CAAC,CAAC,GAC9E,SAAS,CAAC;IACd,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,qBAAqB,GAC1B,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAgMxD"}
+{"version":3,"file":"connection-handler.d.ts","sourceRoot":"","sources":["../../src/webui-server/connection-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EACV,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,yBAAyB,EACzB,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACzB,MAAM,0BAA0B,CAAC;AAMlC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEvE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,SAAS,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAID,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,OAAO,CAAC;IACtB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACzC,gBAAgB,EAAE,MAAM,MAAM,CAAC;IAC/B,WAAW,EAAE,oBAAoB,CAAC;IAClC,YAAY,EAAE,qBAAqB,CAAC;IACpC,eAAe,EAAE,wBAAwB,CAAC;IAC1C,gBAAgB,EAAE,yBAAyB,GAAG,IAAI,CAAC;IACnD,eAAe,EAAE,wBAAwB,CAAC;IAC1C,eAAe,EAAE,wBAAwB,CAAC;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,KAAK,IAAI,CAAC;IACpD,cAAc,EAAE,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7F,aAAa,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/F,gBAAgB,EAAE,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAClD,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC7C,wBAAwB,EAAE,CACxB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnC,UAAU,CAAC,EAAE,OAAO,KACjB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtC,UAAU,CAAC,EACP,CAAC,MAAM,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC,GAC1E,SAAS,CAAC;IACd,iBAAiB,CAAC,EACd,CAAC,MAAM,OAAO,CAAC,OAAO,+BAA+B,EAAE,mBAAmB,EAAE,CAAC,CAAC,GAC9E,SAAS,CAAC;IACd,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,qBAAqB,GAC1B,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CA+FxD"}

package/dist/webui-server/context-breakdown.d.ts

@@ -1,57 +1,2 @@
-interface PromptBlock {
-    text?: string | undefined;
-}
-interface ToolLike {
-    name: string;
-    inputSchema?: unknown;
-    description?: string;
-}
-interface MessageLike {
-    role: string;
-    content: unknown;
-}
-export type { PromptBlock, ToolLike, MessageLike };
-/**
- * Compute the per-section token breakdown for a session.
- *
- * The shape is preserved exactly as the pre-refactor inline
- * code produced it: `total` is the sum across sections;
- * `systemPrompt` is its own total (no breakdown — the
- * system prompt is opaque); `tools` carries the count and
- * a per-tool token count; `messages` carries the count, the
- * total, and a per-message `{ index, role, tokens, preview }`
- * row.
- *
- * Empty inputs are valid: the totals come out to 0 and the
- * `breakdown` arrays are empty. The pre-refactor code
- * handled this implicitly (the `.reduce` over an empty
- * array returns 0); the extracted helper pins that
- * behavior with explicit tests.
- */
-export declare function estimateContextBreakdown(input: {
-    systemPrompt: ReadonlyArray<PromptBlock>;
-    tools: ReadonlyArray<ToolLike>;
-    messages: ReadonlyArray<MessageLike>;
-}): {
-    total: number;
-    systemPrompt: number;
-    tools: {
-        total: number;
-        count: number;
-        breakdown: Array<{
-            name: string;
-            tokens: number;
-        }>;
-    };
-    messages: {
-        total: number;
-        count: number;
-        breakdown: Array<{
-            index: number;
-            role: string;
-            tokens: number;
-            preview: string;
-        }>;
-    };
-};
+export { estimateContextBreakdown, type ContextBreakdown } from '@wrongstack/webui-server';
 //# sourceMappingURL=context-breakdown.d.ts.map

package/dist/webui-server/context-breakdown.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context-breakdown.d.ts","sourceRoot":"","sources":["../../src/webui-server/context-breakdown.ts"],"names":[],"mappings":"AA6CA,UAAU,WAAW;IACnB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B;AAED,UAAU,QAAQ;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,WAAW;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAQD,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AAEnD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,YAAY,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;IACzC,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC/B,QAAQ,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;CACtC,GAAG;IACF,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IAC5F,QAAQ,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,KAAK,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACpF,CAAC;CACH,CAyBA"}
+{"version":3,"file":"context-breakdown.d.ts","sourceRoot":"","sources":["../../src/webui-server/context-breakdown.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,KAAK,gBAAgB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/webui-server/contracts.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Dependency-free wire contracts shared by the embedded CLI WebUI host.
+ *
+ * Keep these shapes outside `webui-server.ts`: connection and routing modules
+ * are dependencies of that composition root and must not import back from it.
+ */
+export interface WSServerMessage {
+    type: string;
+    payload: unknown;
+}
+export interface WSClientMessage {
+    type: string;
+    payload?: unknown | undefined;
+}
+//# sourceMappingURL=contracts.d.ts.map

package/dist/webui-server/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/webui-server/contracts.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC/B"}

package/dist/webui-server/cost-helpers.d.ts

@@ -1,29 +1,2 @@
-/** Per-1,000,000-token pricing, normalized to numbers (0 when unpriced). */
-export interface CostRates {
-    input: number;
-    output: number;
-    cacheRead: number;
-}
-/** Token counts for a turn/session. */
-export interface TokenUsage {
-    input: number;
-    output: number;
-    cacheRead?: number | undefined;
-}
-/**
- * Extract per-million-token pricing from a model record. Returns
- * zeros when the model is null/undefined, has no `cost` field, or
- * is missing individual rate fields. The `cache_read` snake_case
- * is preserved as-is from the upstream schema — renaming to
- * `cacheRead` happens at the boundary.
- */
-export declare function getCostRates(model: unknown): CostRates;
-/**
- * Compute the per-turn cost in USD for the given token usage
- * and per-million rates. The cache-read branch is optional:
- * when `usage.cacheRead` is undefined it contributes 0 to the
- * total. The final value is the per-million-scaled sum, not
- * the per-token cost.
- */
-export declare function computeUsageCost(usage: TokenUsage, rates: CostRates): number;
+export { computeUsageCost, getCostRates, type CostRates, type TokenUsage, } from '@wrongstack/webui-server';
 //# sourceMappingURL=cost-helpers.d.ts.map

package/dist/webui-server/cost-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cost-helpers.d.ts","sourceRoot":"","sources":["../../src/webui-server/cost-helpers.ts"],"names":[],"mappings":"AA8CA,4EAA4E;AAC5E,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,uCAAuC;AACvC,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,CAkBtD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,GAAG,MAAM,CAO5E"}
+{"version":3,"file":"cost-helpers.d.ts","sourceRoot":"","sources":["../../src/webui-server/cost-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,KAAK,SAAS,EACd,KAAK,UAAU,GAChB,MAAM,0BAA0B,CAAC"}

package/dist/webui-server/kanban-host-adapter.d.ts

@@ -0,0 +1,25 @@
+import { type Agent } from '@wrongstack/core/agent';
+import { type AgentFactory, type BrainArbiter } from '@wrongstack/core/coordination';
+import { type Config, type SkillLoader } from '@wrongstack/core/types';
+import { type EventBus } from '@wrongstack/core/kernel';
+import { type GoalWebSocketHandler, type KanbanHostRouteHandlers, type WSServerMessage } from '@wrongstack/webui-server';
+import type { WebSocket } from 'ws';
+import type { KanbanSupervisor } from './kanban-supervisor.js';
+export type KanbanSupervisorPort = KanbanSupervisor;
+interface CliKanbanHostAdapterDeps {
+    opts: {
+        agent: Agent;
+        events: EventBus;
+        projectRoot?: string | undefined;
+        appConfig?: Config | undefined;
+        skillLoader?: SkillLoader | undefined;
+        sddSubagentFactory?: AgentFactory | undefined;
+        brain?: BrainArbiter | undefined;
+    };
+    send: (ws: WebSocket, msg: WSServerMessage) => void;
+    goalHandler: GoalWebSocketHandler;
+    kanbanSupervisor?: KanbanSupervisorPort | undefined;
+}
+export declare function createCliKanbanHostRoutes(deps: CliKanbanHostAdapterDeps): KanbanHostRouteHandlers;
+export {};
+//# sourceMappingURL=kanban-host-adapter.d.ts.map

package/dist/webui-server/kanban-host-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kanban-host-adapter.d.ts","sourceRoot":"","sources":["../../src/webui-server/kanban-host-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,KAAK,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,KAAK,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,+BAA+B,CAAC;AACrF,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAEvE,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAIxD,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAE5B,KAAK,eAAe,EACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,MAAM,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAEpD,UAAU,wBAAwB;IAChC,IAAI,EAAE;QACJ,KAAK,EAAE,KAAK,CAAC;QACb,MAAM,EAAE,QAAQ,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACjC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,WAAW,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;QACtC,kBAAkB,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;QAC9C,KAAK,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;KAClC,CAAC;IACF,IAAI,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,KAAK,IAAI,CAAC;IACpD,WAAW,EAAE,oBAAoB,CAAC;IAClC,gBAAgB,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;CACrD;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,wBAAwB,GAAG,uBAAuB,CA6IjG"}

package/dist/webui-server/kanban-run-mirror.d.ts

@@ -1,77 +1,2 @@
-/**
- * KanbanRunMirror — projects live Goal / SDD runs into `@wrongstack/kanban`
- * boards so the kanban view becomes the unified LIVE surface for both engines.
- *
- * It is fed two ways (both in the CLI-hosted webui-server process, the only
- * place with the shared EventBus + both live handlers):
- *   - SDD: subscribe to `sdd.board.snapshot` on the shared bus.
- *   - Goal: a callback tap on `GoalWebSocketHandler` (that orchestrator
- *     does NOT emit PhaseEventMap on the bus), delivering its `buildState()`.
- *
- * Each run maps to ONE kanban board. Linkage lives in board TAGS (not
- * generatedBy, which `syncBoardFromTaskGraph` overwrites):
- *   ['sdd', 'run:<runId>', 'graph:<graphId>']  or  ['goal', 'graph:<graphId>']
- *
- * Reconcile per tick is a two-pass, both idempotent:
- *   1. `syncBoardFromTaskGraph` — structure + status→column + deps + origin-keyed
- *      create/update/archive.
- *   2. targeted, diff-guarded `updateTaskAssignment` overlay for the LIVE subset
- *      only (running/completed/failed/cancelled/assigned tasks) so the inspector's
- *      AgentRunPanel lights up with the real worker + model — without fabricating
- *      phantom assignments or a per-tick event storm.
- */
-import type { EventBus } from '@wrongstack/core';
-import { type SerializedTaskGraph, type TaskNode } from '@wrongstack/core';
-import type { SddBoardSnapshot } from '@wrongstack/sdd';
-type Engine = 'sdd' | 'goal';
-interface WSServerMessage {
-    type: string;
-    payload: unknown;
-}
-export interface KanbanRunMirrorDeps {
-    projectRoot: string;
-    events?: EventBus | undefined;
-    broadcast: (msg: WSServerMessage) => void;
-    log?: ((msg: string) => void) | undefined;
-}
-/** Loose shape of the Goal `buildState()` projection we consume. */
-interface GoalState {
-    title?: string;
-    goal?: string;
-    phases?: Array<{
-        id: string;
-        name?: string;
-        tasks?: Array<{
-            id: string;
-            title: string;
-            description?: string;
-            status: TaskNode['status'];
-            priority: TaskNode['priority'];
-            type: TaskNode['type'];
-            assignee?: string;
-            startedAt?: number;
-            completedAt?: number;
-        }>;
-    }>;
-}
-export interface KanbanRunMirror {
-    /** Goal tap — the handler's `onBoardState(graphId, state)` callback. */
-    onGoalState(graphId: string, state: Record<string, unknown>): void;
-    /** Bind a runId to a specific board (used by launch-from-board, phase 4). */
-    bind(engine: Engine, key: string, boardId: string): void;
-    /**
-     * One-shot: the NEXT Goal run whose graphId we haven't seen binds to this
-     * board instead of creating a new one. Used by launch-from-board — the graphId
-     * is only known after the async build, so we can't `bind()` up front.
-     */
-    bindGoalNext(boardId: string): void;
-    dispose(): void;
-}
-export declare function createKanbanRunMirror(deps: KanbanRunMirrorDeps): KanbanRunMirror;
-/** Build a serialized TaskGraph from an SDD board snapshot (faithful; runtime in metadata). */
-export declare function buildTaskGraphFromSddSnapshot(snapshot: SddBoardSnapshot): SerializedTaskGraph;
-type GoalPhase = NonNullable<GoalState['phases']>[number];
-/** Build a serialized TaskGraph for one Goal phase (graph.id = RUN graphId; phase scoped via sync phaseId). */
-export declare function buildTaskGraphFromGoalPhase(graphId: string, title: string, phase: GoalPhase): SerializedTaskGraph;
-export {};
+export { buildTaskGraphFromGoalPhase, buildTaskGraphFromSddSnapshot, createKanbanRunMirror, type KanbanRunMirror, type KanbanRunMirrorDeps, } from '@wrongstack/webui-server';
 //# sourceMappingURL=kanban-run-mirror.d.ts.map

package/dist/webui-server/kanban-run-mirror.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kanban-run-mirror.d.ts","sourceRoot":"","sources":["../../src/webui-server/kanban-run-mirror.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAEL,KAAK,mBAAmB,EAExB,KAAK,QAAQ,EACd,MAAM,kBAAkB,CAAC;AAW1B,OAAO,KAAK,EAAE,gBAAgB,EAAgB,MAAM,iBAAiB,CAAC;AAEtE,KAAK,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;AAE7B,UAAU,eAAe;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC9B,SAAS,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,IAAI,CAAC;IAC1C,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAC3C;AAED,oEAAoE;AACpE,UAAU,SAAS;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,KAAK,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,KAAK,CAAC;YACZ,EAAE,EAAE,MAAM,CAAC;YACX,KAAK,EAAE,MAAM,CAAC;YACd,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC3B,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC/B,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,WAAW,CAAC,EAAE,MAAM,CAAC;SACtB,CAAC,CAAC;KACJ,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,eAAe;IAC9B,wEAAwE;IACxE,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACnE,6EAA6E;IAC7E,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACzD;;;;OAIG;IACH,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,OAAO,IAAI,IAAI,CAAC;CACjB;AAID,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,mBAAmB,GAAG,eAAe,CA6MhF;AAID,+FAA+F;AAC/F,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,gBAAgB,GAAG,mBAAmB,CAsC7F;AAED,KAAK,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,+GAA+G;AAC/G,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,SAAS,GACf,mBAAmB,CAiBrB"}
+{"version":3,"file":"kanban-run-mirror.d.ts","sourceRoot":"","sources":["../../src/webui-server/kanban-run-mirror.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,6BAA6B,EAC7B,qBAAqB,EACrB,KAAK,eAAe,EACpB,KAAK,mBAAmB,GACzB,MAAM,0BAA0B,CAAC"}

package/dist/webui-server/kanban-supervisor.d.ts

@@ -1,48 +1,2 @@
-import { type KanbanSupervisorSnapshot } from '@wrongstack/kanban';
-interface DispatchOptions {
-    provider?: string | undefined;
-    model?: string | undefined;
-    fallbackProfile?: string | undefined;
-    fallbackModels?: string[] | undefined;
-    skills?: string[] | undefined;
-    name?: string | undefined;
-    /**
-     * Free-form task context propagated into the spawned `TaskSpec.context`.
-     * The supervisor forwards kanban identity from the board/task snapshot so
-     * the tool-runtime boundary gate can resolve the live policy.
-     */
-    context?: {
-        kanban?: {
-            boardId?: string;
-            taskId?: string;
-            projectRoot?: string;
-        };
-    } | undefined;
-    onDone?: ((result: {
-        status: 'completed' | 'failed';
-        result?: string | undefined;
-        error?: string | undefined;
-    }) => void | Promise<void>) | undefined;
-}
-export interface KanbanSupervisorDeps {
-    projectRoot: string;
-    broadcast: (message: {
-        type: string;
-        payload: unknown;
-    }) => void;
-    dispatchTask?: ((description: string, opts?: DispatchOptions) => Promise<string>) | undefined;
-    log?: ((message: string) => void) | undefined;
-}
-export interface KanbanSupervisor {
-    getSnapshot(boardId: string): KanbanSupervisorSnapshot | undefined;
-    auditNow(boardId?: string): Promise<KanbanSupervisorSnapshot[]>;
-    dispose(): void;
-}
-/**
- * Quiet, project-local board custodian. The frequent pass is deterministic and
- * free; an LLM is spawned only when the board explicitly opts into agentic mode
- * and the health snapshot contains an anomaly.
- */
-export declare function createKanbanSupervisor(deps: KanbanSupervisorDeps): KanbanSupervisor;
-export {};
+export { createKanbanSupervisor, type KanbanSupervisor, type KanbanSupervisorDeps, type KanbanSupervisorDispatchOptions, } from '@wrongstack/webui-server';
 //# sourceMappingURL=kanban-supervisor.d.ts.map

package/dist/webui-server/kanban-supervisor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kanban-supervisor.d.ts","sourceRoot":"","sources":["../../src/webui-server/kanban-supervisor.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,wBAAwB,EAI9B,MAAM,oBAAoB,CAAC;AAE5B,UAAU,eAAe;IACvB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B;;;;OAIG;IACH,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACtE,GAAG,SAAS,CAAC;IACd,MAAM,CAAC,EACH,CAAC,CAAC,MAAM,EAAE;QACR,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;QAC/B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAC5B,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,GAC3B,SAAS,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,CAAC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IACjE,YAAY,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,eAAe,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC9F,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAC/C;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS,CAAC;IACnE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAAC;IAChE,OAAO,IAAI,IAAI,CAAC;CACjB;AAaD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,oBAAoB,GAAG,gBAAgB,CAuNnF"}
+{"version":3,"file":"kanban-supervisor.d.ts","sourceRoot":"","sources":["../../src/webui-server/kanban-supervisor.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,+BAA+B,GACrC,MAAM,0BAA0B,CAAC"}

package/dist/webui-server/lifecycle.d.ts

@@ -1,112 +1,3 @@
-import { type SurfaceKind, type WebUIInstanceRecord } from '@wrongstack/webui-server';
-/**
- * PR 7 of Issue #30 (webui-server 8-PR refactor): process lifecycle.
- *
- * Three concerns pulled out of the ~3000-line `runWebUI` body:
- *
- *   - `registerWebuiInstance` — record this embedded WebUI in the shared
- *     running-instance registry (so `wstack --webui --list` sees it).
- *   - `announceWebuiReady` — log the ready banner and pop the browser
- *     once the HTTP server is listening.
- *   - `createWebuiShutdown` + `registerWebuiSignalHandlers` — the
- *     SIGINT/SIGTERM teardown sequence.
- *
- * Each external dependency (registry IO, browser launch) is an
- * injectable seam so the orchestration can be unit-tested without
- * touching disk or spawning a browser. Run-loop state (abort
- * controllers, client map, the run promise's `resolve`) stays in
- * `webui-server.ts` and is threaded in as callbacks — the module never
- * captures it.
- */
-export interface RegisterWebuiInstanceParams {
-    pid: number;
-    /** Surface kind — 'webui' or 'simpleui'. */
-    surface: SurfaceKind;
-    host: string;
-    httpPort: number;
-    wsPort: number;
-    /** Browser-facing public URL when served through a tunnel/proxy. */
-    publicUrl?: string | undefined;
-    projectRoot: string;
-    /** ISO timestamp when the instance registered. */
-    startedAt: string;
-    /** Registry base dir (dirname of globalConfigPath); undefined ⇒ registry default. */
-    registryBaseDir: string | undefined;
-}
-export interface RegisterWebuiInstanceDeps {
-    registerFn?: (record: WebUIInstanceRecord, baseDir?: string) => Promise<void>;
-}
-/**
- * Fire-and-forget registration of this WebUI in the running-instance
- * registry. Best-effort: a registry write error never blocks startup and
- * is swallowed (the registry is a convenience index, not a source of
- * truth). Caller guards on `projectRoot` being known.
- */
-export declare function registerWebuiInstance(p: RegisterWebuiInstanceParams, deps?: RegisterWebuiInstanceDeps): void;
-export interface AnnounceWebuiReadyParams {
-    /** Surface kind — 'webui' or 'simpleui'. */
-    surface: SurfaceKind;
-    /** The HTTP server (StaticServeHandle.server). */
-    server: {
-        on: (event: 'listening', cb: () => void) => void;
-    };
-    host: string;
-    httpPort: number;
-    wsPort: number;
-    open: boolean;
-    /** Auth token for WS connections. Included in the URL so the frontend can exchange it for an HttpOnly cookie via /ws-auth. */
-    wsToken?: string;
-    /** Browser-facing public URL when served through a tunnel/proxy. */
-    publicUrl?: string | undefined;
-    log?: (msg: string) => void;
-    openBrowserFn?: (url: string) => void;
-}
-/**
- * Once the HTTP server is listening, print the ready banner and (if
- * `open`) launch the browser at the served URL.
- */
-export declare function announceWebuiReady(p: AnnounceWebuiReadyParams): void;
-export interface WebuiShutdownResources {
-    /** Abort every in-flight run (legacy single slot + per-socket controllers) and clear them. */
-    abortInFlight: () => void;
-    /** Run and drop every event-bus unsubscriber. */
-    unsubscribeEvents: () => void;
-    /** Close every connected socket and clear the client map. */
-    closeClients: () => void;
-    /** Close the static HTTP server (no-op when WS-only). */
-    closeHttpServer: () => void;
-    /** The WebSocket server to stop (its close callback resolves the run promise). */
-    wss: {
-        close: (cb?: () => void) => void;
-    };
-    /** This process's pid — the registry liveness key. */
-    pid: number;
-    /** Registry base dir (undefined ⇒ registry default). */
-    registryBaseDir: string | undefined;
-    /** Called once teardown settles — wired to the run promise's `resolve`. */
-    onStopped: () => void;
-    log?: (msg: string) => void;
-    debug?: (msg: string) => void;
-    /** Injectable for tests; defaults to the real registry unregister. */
-    unregisterFn?: (pid: number, baseDir?: string) => Promise<void>;
-}
-/**
- * Build the SIGINT/SIGTERM teardown handler. The returned function is
- * idempotent: the first call runs the teardown, later calls (e.g. a
- * second Ctrl+C, or a signal after another server in the same process
- * already stopped) return immediately.
- *
- * Order matches the original inline handler: abort runs → unsubscribe
- * events → close clients → unregister from the instance registry (async,
- * awaited inside the wss.close callback) → close HTTP → close WS → on
- * close, once the unregister settles, `onStopped()`.
- */
-export declare function createWebuiShutdown(res: WebuiShutdownResources): () => void;
-/**
- * Register `shutdown` on SIGINT and SIGTERM. The wrapper self-detaches
- * both listeners on first fire (so a server that has already shut down
- * can't re-trigger teardown). Returns an unregister function for tests
- * and clean restarts.
- */
-export declare function registerWebuiSignalHandlers(shutdown: () => void): () => void;
+export { announceWebuiReady, createWebuiShutdown, registerWebuiInstance, registerWebuiSignalHandlers, type AnnounceWebuiReadyParams, type RegisterWebuiInstanceDeps, type RegisterWebuiInstanceParams, type WebuiShutdownResources, } from '@wrongstack/webui-server';
+export type { WebUIInstanceRecord } from '@wrongstack/webui-server';
 //# sourceMappingURL=lifecycle.d.ts.map

package/dist/webui-server/lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../src/webui-server/lifecycle.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAC;AAElC;;;;;;;;;;;;;;;;;;GAkBG;AAIH,MAAM,WAAW,2BAA2B;IAC1C,GAAG,EAAE,MAAM,CAAC;IACZ,4CAA4C;IAC5C,OAAO,EAAE,WAAW,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,qFAAqF;IACrF,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/E;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,CAAC,EAAE,2BAA2B,EAC9B,IAAI,GAAE,yBAA8B,GACnC,IAAI,CAoBN;AAID,MAAM,WAAW,wBAAwB;IACvC,4CAA4C;IAC5C,OAAO,EAAE,WAAW,CAAC;IACrB,kDAAkD;IAClD,MAAM,EAAE;QAAE,EAAE,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,IAAI,KAAK,IAAI,CAAA;KAAE,CAAC;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;IACd,8HAA8H;IAC9H,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACvC;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAmBpE;AAID,MAAM,WAAW,sBAAsB;IACrC,8FAA8F;IAC9F,aAAa,EAAE,MAAM,IAAI,CAAC;IAC1B,iDAAiD;IACjD,iBAAiB,EAAE,MAAM,IAAI,CAAC;IAC9B,6DAA6D;IAC7D,YAAY,EAAE,MAAM,IAAI,CAAC;IACzB,yDAAyD;IACzD,eAAe,EAAE,MAAM,IAAI,CAAC;IAC5B,kFAAkF;IAClF,GAAG,EAAE;QAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,IAAI,KAAK,IAAI,CAAA;KAAE,CAAC;IAC1C,sDAAsD;IACtD,GAAG,EAAE,MAAM,CAAC;IACZ,wDAAwD;IACxD,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,2EAA2E;IAC3E,SAAS,EAAE,MAAM,IAAI,CAAC;IACtB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9B,sEAAsE;IACtE,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACjE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,sBAAsB,GAAG,MAAM,IAAI,CA2B3E;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAY5E"}
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../src/webui-server/lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,2BAA2B,EAC3B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,GAC5B,MAAM,0BAA0B,CAAC;AAElC,YAAY,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/webui-server/logger-shim.d.ts

@@ -1,4 +1,4 @@
-import type { Logger } from '@wrongstack/core';
+import type { Logger } from '@wrongstack/core/types';
 /**
  * Console-backed `Logger` adapter for the CLI. Routes each
  * level to the matching `console.*` method and wraps the

package/dist/webui-server/logger-shim.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger-shim.d.ts","sourceRoot":"","sources":["../../src/webui-server/logger-shim.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAiB/C;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,EAAE,MAoB3B,CAAC"}
+{"version":3,"file":"logger-shim.d.ts","sourceRoot":"","sources":["../../src/webui-server/logger-shim.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAiBrD;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,EAAE,MAoB3B,CAAC"}

package/dist/webui-server/prefs-seeding.d.ts

@@ -1,21 +1,6 @@
-/**
- * Preference key list, snapshot, persistence, and config-seeding.
- *
- * ## What lives here
- *
- * - `PREF_KEYS`           – the canonical list of browser-setting ↔ config-file keys.
- * - `createPrefsSeeding`  – factory that returns `{ prefSnapshot, persistPrefs }`
- *                           with file I/O captured in closure.
- * - `seedConfigToMeta`    – one-time call at startup: reads config.json and seeds
- *                           `agent.ctx.meta` so the settings panel shows the real
- *                           persisted values instead of localStorage defaults.
- *
- * ## Extraction history
- *
- * PR 9 of Issue #30 – extracted from webui-server.ts (was inline between the
- * `PREF_KEYS` array and the `PrefsContext` construction).
- */
-import type { Config } from '@wrongstack/core';
+import type { Config } from '@wrongstack/core/types';
+import type { ModelBlackoutRule } from '@wrongstack/core/models';
+import { PREF_KEYS } from '@wrongstack/webui-server';
 interface CliWebUIOptions {
     agent: {
         ctx: {
@@ -23,45 +8,24 @@ interface CliWebUIOptions {
         };
     };
     globalConfigPath?: string | undefined;
-    /** Resolved profile config path: ~/.wrongstack/profiles/<activeProfile>/config.json */
     profileConfigPath: string;
     appConfig?: {
         fallbackModels?: string[] | undefined;
         fallbackProfiles?: Record<string, string[]> | undefined;
         favoriteModels?: string[] | undefined;
         favoriteModelsOnly?: boolean | undefined;
-        modelAvailabilitySchedule?: import('@wrongstack/core').ModelBlackoutRule[] | undefined;
+        modelAvailabilitySchedule?: ModelBlackoutRule[] | undefined;
         fallbackAuto?: boolean | undefined;
         modelMatrix?: Config['modelMatrix'] | undefined;
         uiLocale?: string | undefined;
     } | undefined;
 }
-/** Keys synced between `agent.ctx.meta` and `config.json`. */
-export declare const PREF_KEYS: readonly ['autonomy', 'autonomyDelayMs', 'autoProceedMaxIterations', 'yolo', 'maxIterations', 'chime', 'confirmExit', 'fleetChatVerbosity', 'nextPrediction', 'fallbackModels', 'fallbackProfiles', 'favoriteModels', 'favoriteModelsOnly', 'modelAvailabilitySchedule', 'modelMatrix', 'fallbackAuto', 'uiLocale', 'enhanceEnabled', 'enhanceDelayMs', 'enhanceLanguage', 'featureMcp', 'featurePlugins', 'featureMemory', 'featureSkills', 'featureModelsRegistry', 'indexOnStart', 'contextAutoCompact', 'contextStrategy', 'contextMode', 'tokenSavingTier', 'maxConcurrent', 'titleAnimation', 'reasoningMode', 'reasoningEffort', 'reasoningPreserve', 'cacheTtl', 'logLevel', 'auditLevel', 'hqEnabled', 'hqUrl', 'hqToken', 'hqRawContent', 'refinerProvider', 'refinerModel', 'refinerFallbackProfile', 'thinkingWord', 'statuslineMode', 'animationStyle', 'tgConfigured', 'tgSessionEnd', 'tgDelegate', 'tgLongToolMs', 'breakerEnabled', 'breakerAutoKillResetMs', 'fsAccess', 'debugStream', 'chimeraAutoFix', 'chimeraEnabled', 'chimeraProvider', 'chimeraModel', 'chimeraMaxFiles', 'autoReviewEnabled', 'autoReviewProvider', 'autoReviewModel', 'autoReviewFallbackProfile', 'autoReviewFallbackModels', 'autoReviewDebounceMs', 'autoReviewMaxFilesPerBatch', 'autoReviewMaxConcurrentReviews', 'autoReviewCascadeOn', 'pluginsEnabled'];
 type PrefSnapshot = Record<string, unknown>;
-/**
- * One-time startup seed: reads the merged in-memory appConfig (which already
- * includes bootstrap + active profile + project-local + in-project layers)
- * and copies recognised fields into `agent.ctx.meta` so the browser settings
- * panel starts with the real persisted values instead of blank/undefined.
- *
- * Before the profile-based config system (0.291.0+), this function read the
- * bootstrap file (~/.wrongstack/config.json) directly — but that file now
- * only contains { version, activeProfile }. All user settings live in the
- * active profile config (~/.wrongstack/profiles/<name>/config.json), which
- * the config loader has already merged into `opts.appConfig` during boot.
- *
- * Best-effort — missing or partial appConfig leaves prefs unseeded.
- */
+export { PREF_KEYS };
 export declare function seedConfigToMeta(opts: CliWebUIOptions): Promise<void>;
-interface PrefsSeeding {
+export interface PrefsSeeding {
     prefSnapshot: () => PrefSnapshot;
     persistPrefs: (payload: PrefSnapshot) => Promise<void>;
 }
-/**
- * Factory – returns `prefSnapshot` and `persistPrefs` with file I/O captured
- * in closure. Call once per `runWebUI` instance.
- */
 export declare function createPrefsSeeding(opts: CliWebUIOptions): PrefsSeeding;
-export {};
 //# sourceMappingURL=prefs-seeding.d.ts.map

package/dist/webui-server/prefs-seeding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prefs-seeding.d.ts","sourceRoot":"","sources":["../../src/webui-server/prefs-seeding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAM/C,UAAU,eAAe;IACvB,KAAK,EAAE;QAAE,GAAG,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAA;KAAE,CAAC;IAClD,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,uFAAuF;IACvF,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EACN;QACE,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QACtC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,SAAS,CAAC;QACxD,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QACtC,kBAAkB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACzC,yBAAyB,CAAC,EAAE,OAAO,kBAAkB,EAAE,iBAAiB,EAAE,GAAG,SAAS,CAAC;QACvF,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACnC,WAAW,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC;QAChD,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAC/B,GACD,SAAS,CAAC;CACf;AAYD,8DAA8D;AAC9D,eAAO,MAAM,SAAS,YACpB,UAAU,EACV,iBAAiB,EACjB,0BAA0B,EAC1B,MAAM,EACN,eAAe,EACf,OAAO,EACP,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,2BAA2B,EAC3B,aAAa,EACb,cAAc,EACd,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,cAAc,EACd,oBAAoB,EACpB,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAIhB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,UAAU,EACV,UAAU,EACV,YAAY,EACZ,WAAW,EACX,OAAO,EACP,SAAS,EACT,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,wBAAwB,EACxB,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAEhB,cAAc,EACd,cAAc,EACd,YAAY,EACZ,cAAc,EAEd,gBAAgB,EAChB,wBAAwB,EACxB,UAAU,EACV,aAAa,EACb,gBAAgB,EAIhB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,2BAA2B,EAC3B,0BAA0B,EAC1B,sBAAsB,EACtB,4BAA4B,EAC5B,gCAAgC,EAChC,qBAAqB,EACrB,gBAAgB,CACR,CAAC;AAIX,KAAK,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAI5C;;;;;;;;;;;;;GAaG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAoL3E;AAID,UAAU,YAAY;IACpB,YAAY,EAAE,MAAM,YAAY,CAAC;IACjC,YAAY,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,eAAe,GAAG,YAAY,CAibtE"}
+{"version":3,"file":"prefs-seeding.d.ts","sourceRoot":"","sources":["../../src/webui-server/prefs-seeding.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAEL,SAAS,EAIV,MAAM,0BAA0B,CAAC;AAElC,UAAU,eAAe;IACvB,KAAK,EAAE;QAAE,GAAG,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAA;KAAE,CAAC;IAClD,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EACN;QACE,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QACtC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,SAAS,CAAC;QACxD,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QACtC,kBAAkB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACzC,yBAAyB,CAAC,EAAE,iBAAiB,EAAE,GAAG,SAAS,CAAC;QAC5D,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACnC,WAAW,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC;QAChD,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAC/B,GACD,SAAS,CAAC;CACf;AAED,KAAK,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE5C,OAAO,EAAE,SAAS,EAAE,CAAC;AAErB,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAY3E;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,YAAY,CAAC;IACjC,YAAY,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,eAAe,GAAG,YAAY,CA6EtE"}

package/dist/webui-server/privileged-actions.d.ts

@@ -0,0 +1,14 @@
+import { type TrustBoundary, type TrustRisk, type TrustSubject } from '@wrongstack/core/security';
+import { type ProcessRouteHandlers } from '@wrongstack/webui-server';
+export declare function authorizeCliWebUIAction(boundary: TrustBoundary, action: {
+    capability: string;
+    subject: TrustSubject;
+    risk: TrustRisk;
+    cwd?: string | undefined;
+    metadata?: Readonly<Record<string, string | number | boolean | null>> | undefined;
+}): Promise<{
+    allowed: boolean;
+    reason: string;
+}>;
+export declare function createCliProcessRoutes(boundary: TrustBoundary): ProcessRouteHandlers;
+//# sourceMappingURL=privileged-actions.d.ts.map

package/dist/webui-server/privileged-actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privileged-actions.d.ts","sourceRoot":"","sources":["../../src/webui-server/privileged-actions.ts"],"names":[],"mappings":"AACA,OAAO,EAA0B,KAAK,aAAa,EAAE,KAAK,SAAS,EAAE,KAAK,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC1H,OAAO,EAIL,KAAK,oBAAoB,EAC1B,MAAM,0BAA0B,CAAC;AAElC,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE;IACN,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,YAAY,CAAC;IACtB,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;CACnF,GACA,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAc/C;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,aAAa,GAAG,oBAAoB,CAOpF"}

package/dist/webui-server/session-start-payload.d.ts

@@ -1,4 +1,5 @@
-import type { Context, ModelsRegistry } from '@wrongstack/core';
+import type { Context } from '@wrongstack/core/agent';
+import type { ModelsRegistry } from '@wrongstack/core/types';
 /** The slice of `CliWebUIOptions` the payload builder actually reads. */
 export interface SessionStartPayloadDeps {
     agent: {

package/dist/webui-server/session-start-payload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-start-payload.d.ts","sourceRoot":"","sources":["../../src/webui-server/session-start-payload.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAIhE,yEAAyE;AACzE,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE;QAAE,GAAG,EAAE,OAAO,CAAA;KAAE,CAAC;IACxB,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACxB,cAAc,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAC5C,aAAa,CAAC,EAAE,OAAO,+BAA+B,EAAE,0BAA0B,GAAG,SAAS,CAAC;IAC/F,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,MAAM,wBAAwB,GAAG,CACrC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnC,UAAU,CAAC,EAAE,OAAO,KACjB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAEtC;;;GAGG;AACH,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,uBAAuB,GAC5B,wBAAwB,CA+D1B"}
+{"version":3,"file":"session-start-payload.d.ts","sourceRoot":"","sources":["../../src/webui-server/session-start-payload.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAK7D,yEAAyE;AACzE,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE;QAAE,GAAG,EAAE,OAAO,CAAA;KAAE,CAAC;IACxB,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACxB,cAAc,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAC5C,aAAa,CAAC,EAAE,OAAO,+BAA+B,EAAE,0BAA0B,GAAG,SAAS,CAAC;IAC/F,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,MAAM,wBAAwB,GAAG,CACrC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnC,UAAU,CAAC,EAAE,OAAO,KACjB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAEtC;;;GAGG;AACH,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,uBAAuB,GAC5B,wBAAwB,CA+D1B"}