@wrongstack/cli 0.295.0 → 0.295.1

package/dist/index.js

@@ -1698,7 +1698,7 @@ function handleClient(ws, clients, browsers, eventLog, auth, snapshotBroadcaster
           if (ws.readyState === WebSocket2.OPEN) {
             ws.send(JSON.stringify({ type: "hq.kanban_snapshot", payload: payload2 }));
           }
-        });
+        }).catch(() => void 0);
       }
       const event = {
         id: randomUUID2(),
@@ -1814,7 +1814,16 @@ function handleClient(ws, clients, browsers, eventLog, auth, snapshotBroadcaster
         const payload = event.payload;
         if (payload.projectId !== client.projectId || persistence === void 0) return;
         void persistence.kanban.merge(payload).then((merged) => {
-          const message = JSON.stringify({ type: "hq.kanban_snapshot", payload: merged });
+          const touched = /* @__PURE__ */ new Set();
+          for (const record of payload.boards) touched.add(record.boardId);
+          for (const record of payload.tombstones) touched.add(record.boardId);
+          const delta = {
+            projectId: merged.projectId,
+            generatedAt: merged.generatedAt,
+            boards: merged.boards.filter((record) => touched.has(record.boardId)),
+            tombstones: merged.tombstones.filter((record) => touched.has(record.boardId))
+          };
+          const message = JSON.stringify({ type: "hq.kanban_snapshot", payload: delta });
           for (const peer of clients.values()) {
             if (peer.projectId === client.projectId && peer.ws.readyState === WebSocket2.OPEN) {
               peer.ws.send(message);
@@ -2123,6 +2132,98 @@ var init_trust_boundary = __esm({
   }
 });
 
+// src/hq-server/routes/system-handlers.ts
+async function handleApiSystemUpdate(res) {
+  const [{ checkForUpdate: checkForUpdate2 }, { detectUpdatePackageName: detectUpdatePackageName2 }] = await Promise.all([
+    Promise.resolve().then(() => (init_update_check(), update_check_exports)),
+    Promise.resolve().then(() => (init_update(), update_exports))
+  ]);
+  const packageName = detectUpdatePackageName2();
+  const info = await checkForUpdate2({ packageName });
+  res.writeHead(200, {
+    "Content-Type": "application/json",
+    "Cache-Control": "no-store"
+  });
+  res.end(
+    JSON.stringify({
+      ...info,
+      packageName,
+      command: "wstack update"
+    })
+  );
+}
+async function handleApiSystemHealth(res, clients, persistence, eventLog) {
+  const now = Date.now();
+  const eventCount = eventLog.length;
+  let timeseriesStoreStatus = "unknown";
+  let kanbanStoreStatus = "unknown";
+  try {
+    const tsOk = await persistence.timeseries.read(now - 3e5);
+    timeseriesStoreStatus = Array.isArray(tsOk) ? "ok" : "degraded";
+  } catch {
+    timeseriesStoreStatus = "degraded";
+  }
+  try {
+    await persistence.kanban.load("__hq_health_probe__");
+    kanbanStoreStatus = "ok";
+  } catch {
+    kanbanStoreStatus = "degraded";
+  }
+  const inMemoryEventLogActive = true;
+  const allOk = inMemoryEventLogActive && timeseriesStoreStatus === "ok" && kanbanStoreStatus === "ok";
+  const clientCount = clients.size;
+  const connectedClients = [...clients.values()].filter(
+    (c) => Date.now() - new Date(c.lastSeenAt).getTime() < 6e4
+  ).length;
+  res.writeHead(200, {
+    "Content-Type": "application/json",
+    "Cache-Control": "no-store"
+  });
+  res.end(
+    JSON.stringify({
+      status: allOk ? "healthy" : "degraded",
+      uptime: {
+        serverTime: (/* @__PURE__ */ new Date()).toISOString(),
+        eventLogSize: eventCount
+      },
+      stores: {
+        events: "ok",
+        timeseries: timeseriesStoreStatus,
+        kanban: kanbanStoreStatus
+      },
+      connections: {
+        total: clientCount,
+        active: connectedClients,
+        stale: clientCount - connectedClients
+      }
+    })
+  );
+}
+async function handleApiCommandsAudit(req2, res, auditLog) {
+  const url = new URL(req2.url ?? "/", "http://localhost");
+  const rawLimit = Number.parseInt(url.searchParams.get("limit") ?? "200", 10);
+  const limit = Math.min(1e3, Math.max(1, Number.isFinite(rawLimit) ? rawLimit : 200));
+  res.writeHead(200, { "Content-Type": "application/json" });
+  res.end(JSON.stringify({ commands: auditLog.recent(limit) }));
+}
+async function handleApiAlerts(req2, res, alertEngine) {
+  const url = new URL(req2.url ?? "/", "http://localhost");
+  const rawLimit = Number.parseInt(url.searchParams.get("limit") ?? "100", 10);
+  const limit = Math.min(500, Math.max(1, Number.isFinite(rawLimit) ? rawLimit : 100));
+  res.writeHead(200, { "Content-Type": "application/json" });
+  res.end(
+    JSON.stringify({
+      active: alertEngine.activeAlerts(),
+      history: alertEngine.recentAlerts(limit)
+    })
+  );
+}
+var init_system_handlers = __esm({
+  "src/hq-server/routes/system-handlers.ts"() {
+    "use strict";
+  }
+});
+
 // src/hq-server/routes.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
 import * as path18 from "node:path";
@@ -2142,6 +2243,7 @@ function createHqRouter(deps) {
     loginAttempts,
     clients,
     browsers,
+    eventLog,
     transcripts,
     agentMessages,
     alertEngine,
@@ -2217,6 +2319,10 @@ function createHqRouter(deps) {
         await handleApiSystemUpdate(res);
         return;
       }
+      if (url.pathname === "/api/system/health" && req2.method === "GET") {
+        await handleApiSystemHealth(res, clients, persistence, eventLog);
+        return;
+      }
       const mailboxGatewayMatch = url.pathname.match(
         /^\/api\/projects\/([^/]+)\/mailbox(?:\/(.*))?$/
       );
@@ -2536,25 +2642,6 @@ async function handleApiPassword(req2, res, mutableAuth, sessions, dataDir, secu
     })
   );
 }
-async function handleApiSystemUpdate(res) {
-  const [{ checkForUpdate: checkForUpdate2 }, { detectUpdatePackageName: detectUpdatePackageName2 }] = await Promise.all([
-    Promise.resolve().then(() => (init_update_check(), update_check_exports)),
-    Promise.resolve().then(() => (init_update(), update_exports))
-  ]);
-  const packageName = detectUpdatePackageName2();
-  const info = await checkForUpdate2({ packageName });
-  res.writeHead(200, {
-    "Content-Type": "application/json",
-    "Cache-Control": "no-store"
-  });
-  res.end(
-    JSON.stringify({
-      ...info,
-      packageName,
-      command: "wstack update"
-    })
-  );
-}
 async function handleMailboxGateway(_req, res, match, authorizeMailboxGateway, getMailboxGateway, dataDir) {
   const projectId = decodePathSegment2(match[1]);
   if (projectId === null || projectId.length === 0) {
@@ -2906,25 +2993,6 @@ async function handleMailboxAction(_req, res, match, _mutableAuth, _sessions, da
     );
   }
 }
-async function handleApiCommandsAudit(req2, res, auditLog) {
-  const url = new URL(req2.url ?? "/", "http://localhost");
-  const rawLimit = Number.parseInt(url.searchParams.get("limit") ?? "200", 10);
-  const limit = Math.min(1e3, Math.max(1, Number.isFinite(rawLimit) ? rawLimit : 200));
-  res.writeHead(200, { "Content-Type": "application/json" });
-  res.end(JSON.stringify({ commands: auditLog.recent(limit) }));
-}
-async function handleApiAlerts(req2, res, alertEngine) {
-  const url = new URL(req2.url ?? "/", "http://localhost");
-  const rawLimit = Number.parseInt(url.searchParams.get("limit") ?? "100", 10);
-  const limit = Math.min(500, Math.max(1, Number.isFinite(rawLimit) ? rawLimit : 100));
-  res.writeHead(200, { "Content-Type": "application/json" });
-  res.end(
-    JSON.stringify({
-      active: alertEngine.activeAlerts(),
-      history: alertEngine.recentAlerts(limit)
-    })
-  );
-}
 async function handleApiSessions(res) {
   const { SessionRegistry } = await import("@wrongstack/core/storage");
   const globalRoot = path18.dirname(resolveHqDataDir2());
@@ -3125,6 +3193,7 @@ var init_routes = __esm({
     init_snapshot();
     init_utils2();
     init_trust_boundary();
+    init_system_handlers();
     setHqSecurityHeaders2 = setHqSecurityHeaders;
     hasTrustedBrowserOrigin2 = hasTrustedBrowserOrigin;
     authenticateBrowserRequest2 = authenticateBrowserRequest;
@@ -3401,10 +3470,10 @@ import * as http from "node:http";
 import * as path20 from "node:path";
 import { WebSocket as WebSocket3, WebSocketServer as WebSocketServer2 } from "ws";
 import { createCompatibilityTrustBoundary } from "@wrongstack/core/security";
-import { createHqPersistence as createHqPersistence2, toAlertMessage, watchHqAuthFile } from "@wrongstack/core/hq";
+import { createHqPersistence, toAlertMessage, watchHqAuthFile } from "@wrongstack/core/hq";
 import { createMailboxHttpRouter, MAILBOX_HTTP_DEFAULT_MAX_AGE_MS } from "@wrongstack/core/coordination";
 import { HqAlertEngine, HqCommandAuditLog } from "@wrongstack/core/hq";
-import { GlobalMailbox as GlobalMailbox2, MailboxEventEmitter, MailboxHttpRateLimiter as MailboxHttpRateLimiter2 } from "@wrongstack/core/coordination";
+import { GlobalMailbox, MailboxEventEmitter, MailboxHttpRateLimiter } from "@wrongstack/core/coordination";
 import { HqInsecureExposureError as HqInsecureExposureError2 } from "@wrongstack/core/hq";
 async function startHqServer(options = {}) {
   const { host, port, dataDir, firstRunAuth } = await prepareHqServerStart(options, {
@@ -3443,7 +3512,7 @@ function startHqServerWithAuth(options, host, port, dataDir, firstRunAuth) {
     const transcripts = /* @__PURE__ */ new Map();
     const agentMessages = /* @__PURE__ */ new Map();
     const mailboxGateways = /* @__PURE__ */ new Map();
-    const mailboxGatewayRateLimiter = new MailboxHttpRateLimiter2();
+    const mailboxGatewayRateLimiter = new MailboxHttpRateLimiter();
     const mailboxGatewayRateLimitCleanup = setInterval(
       () => mailboxGatewayRateLimiter.cleanup(),
       12e4
@@ -3464,15 +3533,15 @@ function startHqServerWithAuth(options, host, port, dataDir, firstRunAuth) {
       }
     }, SESSION_CLEANUP_INTERVAL_MS);
     sessionCleanupTimer.unref?.();
-    const persistence = createHqPersistence2(dataDir);
+    const persistence = createHqPersistence(dataDir);
     const auditLog = new HqCommandAuditLog(1e3, (entry) => persistence.commandLog.append(entry));
     void (async () => {
       const projectsDir = path20.join(path20.dirname(dataDir), "projects");
       const entries = await fs20.readdir(projectsDir, { withFileTypes: true }).catch(() => []);
-      const { GlobalMailbox: GlobalMailbox11 } = await import("@wrongstack/core/coordination");
+      const { GlobalMailbox: GlobalMailbox10 } = await import("@wrongstack/core/coordination");
       await Promise.all(
         entries.filter((entry) => entry.isDirectory()).map(async (entry) => {
-          const mailbox = new GlobalMailbox11(path20.join(projectsDir, entry.name));
+          const mailbox = new GlobalMailbox10(path20.join(projectsDir, entry.name));
           await Promise.all([mailbox.getAgentStatuses(), mailbox.purgeClients()]);
         })
       );
@@ -3499,7 +3568,7 @@ function startHqServerWithAuth(options, host, port, dataDir, firstRunAuth) {
       const existing = mailboxGateways.get(projectDir);
       if (existing) return existing;
       const eventEmitter = new MailboxEventEmitter();
-      const mailbox = new GlobalMailbox2(projectDir, void 0, void 0, eventEmitter);
+      const mailbox = new GlobalMailbox(projectDir, void 0, void 0, eventEmitter);
       const router = createMailboxHttpRouter({
         mailbox,
         eventEmitter,
@@ -3526,8 +3595,8 @@ function startHqServerWithAuth(options, host, port, dataDir, firstRunAuth) {
       },
       onPersist: (alert) => persistence.alertLog.append(alert)
     });
-    void persistence.eventLog.hydrate();
-    void persistence.timeseries.load();
+    void persistence.eventLog.hydrate().catch(() => void 0);
+    void persistence.timeseries.load().catch(() => void 0);
     persistence.eventLog.recent(MAX_EVENT_LOG2).then((prior) => {
       for (let i = prior.length - 1; i >= 0; i--) eventLog.push(prior[i]);
     }).catch(() => {
@@ -3850,6 +3919,12 @@ import {
   readBoard,
   writeBoard
 } from "@wrongstack/kanban";
+function warnSyncFailure(error) {
+  process.emitWarning(
+    `WrongStack kanban HQ sync failed (best-effort, will retry on next change): ${error instanceof Error ? error.message : String(error)}`,
+    { code: "WRONGSTACK_HQ_KANBAN_SYNC_FAILED" }
+  );
+}
 function createKanbanHqSync(projectRoot, projectId = deriveHqProjectId2(projectRoot)) {
   const dir = getKanbanDir(projectRoot);
   const statePath = path21.join(dir, SYNC_STATE_FILE);
@@ -3861,6 +3936,8 @@ function createKanbanHqSync(projectRoot, projectId = deriveHqProjectId2(projectR
   let applyingRemote = false;
   let stopped = false;
   let operationChain = Promise.resolve();
+  let pendingRemote = null;
+  let remoteApplyQueued = false;
   const runExclusive = (operation) => {
     let resolveResult;
     let rejectResult;
@@ -3877,21 +3954,28 @@ function createKanbanHqSync(projectRoot, projectId = deriveHqProjectId2(projectR
     });
     return result;
   };
-  const schedulePublish = (boardId) => {
-    if (stopped || applyingRemote || publisher === void 0) return;
-    if (boardId === null) fullRescanPending = true;
-    else pendingBoardIds.add(boardId);
-    if (timer !== void 0) clearTimeout(timer);
+  const scheduleNext = () => {
+    if (stopped || timer !== void 0 || applyingRemote) return;
     timer = setTimeout(() => {
       timer = void 0;
       const rescan = fullRescanPending;
       const dirtyBoardIds = [...pendingBoardIds];
       fullRescanPending = false;
       pendingBoardIds.clear();
-      void runExclusive(() => publishLocal(false, rescan ? void 0 : dirtyBoardIds));
+      runExclusive(() => publishLocal(false, rescan ? void 0 : dirtyBoardIds)).catch(
+        warnSyncFailure
+      );
     }, 100);
     timer.unref?.();
   };
+  const schedulePublish = (boardId) => {
+    if (stopped || applyingRemote || publisher === void 0) return;
+    if (boardId === null) fullRescanPending = true;
+    else pendingBoardIds.add(boardId);
+    if (timer !== void 0) clearTimeout(timer);
+    timer = void 0;
+    scheduleNext();
+  };
   const publishLocal = async (fullSnapshot, dirtyBoardIds) => {
     const target = publisher;
     if (target === void 0 || stopped) return;
@@ -3901,7 +3985,15 @@ function createKanbanHqSync(projectRoot, projectId = deriveHqProjectId2(projectR
     const boards = [];
     const tombstones = [];
     const fullScan = fullSnapshot || dirtyBoardIds === void 0;
-    const boardIds = fullScan ? await listBoardIds(projectRoot) : dirtyBoardIds;
+    const allBoardIds = fullScan ? await listBoardIds(projectRoot) : dirtyBoardIds;
+    let boardIds = allBoardIds;
+    if (!fullScan && boardIds.length > MAX_BOARDS_PER_PUBLISH) {
+      for (const id of boardIds.slice(MAX_BOARDS_PER_PUBLISH)) {
+        pendingBoardIds.add(id);
+      }
+      scheduleNext();
+      boardIds = boardIds.slice(0, MAX_BOARDS_PER_PUBLISH);
+    }
     const present = /* @__PURE__ */ new Set();
     const now = (/* @__PURE__ */ new Date()).toISOString();
     for (const boardId of boardIds) {
@@ -3978,6 +4070,7 @@ function createKanbanHqSync(projectRoot, projectId = deriveHqProjectId2(projectR
             schedulePublish(null);
             return;
           }
+          if (filename.length > MAX_BOARD_ID_LENGTH + 5) return;
           if (filename === SYNC_STATE_FILE || filename.endsWith(".events.jsonl")) return;
           if (!filename.endsWith(".json")) return;
           const boardId = filename.slice(0, -".json".length);
@@ -4035,14 +4128,27 @@ function createKanbanHqSync(projectRoot, projectId = deriveHqProjectId2(projectR
       applyingRemote = false;
     }
   };
+  const handleRemote = (snapshot) => {
+    if (snapshot.projectId !== projectId || stopped) return Promise.resolve();
+    pendingRemote = pendingRemote === null ? snapshot : coalesceRemoteSnapshots(pendingRemote, snapshot);
+    if (remoteApplyQueued) return Promise.resolve();
+    remoteApplyQueued = true;
+    return runExclusive(async () => {
+      remoteApplyQueued = false;
+      const batch = pendingRemote;
+      pendingRemote = null;
+      if (batch !== null) await applyRemote(batch);
+    }).catch(warnSyncFailure);
+  };
   return {
     attachPublisher,
-    handleRemote: (snapshot) => runExclusive(() => applyRemote(snapshot)),
+    handleRemote,
     stop: () => {
       stopped = true;
       if (timer !== void 0) clearTimeout(timer);
       pendingBoardIds.clear();
       fullRescanPending = false;
+      pendingRemote = null;
       watcher?.close();
       watcher = void 0;
       publisher = void 0;
@@ -4106,6 +4212,37 @@ function chunkSnapshotPayload(projectId, generatedAt, boards, tombstones) {
   pushCurrent();
   return chunks.length > 0 ? chunks : [emptyPayload()];
 }
+function coalesceRemoteSnapshots(older, newer) {
+  const byBoardId = /* @__PURE__ */ new Map();
+  const put = (candidate, boardId) => {
+    const existing = byBoardId.get(boardId);
+    if (existing === void 0 || compareVersions(existing.revision, existing.time, candidate.revision, candidate.time) <= 0) {
+      byBoardId.set(boardId, candidate);
+    }
+  };
+  for (const snapshot of [older, newer]) {
+    for (const record of snapshot.boards) {
+      put({ kind: "board", revision: record.revision, time: record.updatedAt, record }, record.boardId);
+    }
+    for (const record of snapshot.tombstones) {
+      put(
+        { kind: "tombstone", revision: record.revision, time: record.deletedAt, record },
+        record.boardId
+      );
+    }
+  }
+  const merged = {
+    projectId: newer.projectId,
+    generatedAt: newer.generatedAt,
+    boards: [],
+    tombstones: []
+  };
+  for (const entry of byBoardId.values()) {
+    if (entry.kind === "board") merged.boards.push(entry.record);
+    else merged.tombstones.push(entry.record);
+  }
+  return merged;
+}
 function compareVersions(aRevision, aTime, bRevision, bTime) {
   if (aRevision !== bRevision) return aRevision - bRevision;
   return aTime.localeCompare(bTime);
@@ -4139,13 +4276,15 @@ async function writeState(filePath, state) {
     mode: 384
   });
 }
-var SYNC_STATE_FILE, MAX_KANBAN_SNAPSHOT_PAYLOAD_BYTES, KANBAN_TOMBSTONE_RETENTION_MS;
+var SYNC_STATE_FILE, MAX_KANBAN_SNAPSHOT_PAYLOAD_BYTES, KANBAN_TOMBSTONE_RETENTION_MS, MAX_BOARDS_PER_PUBLISH, MAX_BOARD_ID_LENGTH;
 var init_kanban_hq_sync = __esm({
   "src/kanban-hq-sync.ts"() {
     "use strict";
     SYNC_STATE_FILE = ".hq-sync.json";
     MAX_KANBAN_SNAPSHOT_PAYLOAD_BYTES = 512 * 1024;
     KANBAN_TOMBSTONE_RETENTION_MS = 30 * 24 * 60 * 60 * 1e3;
+    MAX_BOARDS_PER_PUBLISH = 50;
+    MAX_BOARD_ID_LENGTH = 128;
   }
 });
 
@@ -4202,7 +4341,14 @@ function startCliHqConnection(options) {
       kanbanSync = createKanbanHqSync(options.projectRoot, next.project.projectId);
     }
     next.connect();
-    if (kanbanSync !== void 0) void kanbanSync.attachPublisher(next);
+    if (kanbanSync !== void 0) {
+      kanbanSync.attachPublisher(next).catch((error) => {
+        process.emitWarning(
+          `WrongStack kanban HQ sync attach failed (best-effort, retried on reconnect): ${error instanceof Error ? error.message : String(error)}`,
+          { code: "WRONGSTACK_HQ_KANBAN_SYNC_FAILED" }
+        );
+      });
+    }
     options.onConnect?.(next);
   };
   tryConnect();
@@ -5089,7 +5235,7 @@ import {
   createConnectionLifecycle,
   verifyClient as verifyWsClient
 } from "@wrongstack/webui-server";
-import { decodeProtocolFrame } from "@wrongstack/webui-server/protocol";
+import { buildReplayPayload, decodeProtocolFrame } from "@wrongstack/webui-server/protocol";
 function createConnectionHandler(deps) {
   const clientHandlers = [
     deps.goalHandler,
@@ -5157,13 +5303,7 @@ function createConnectionHandler(deps) {
       const payload = { ...await deps.buildSessionStartPayload({}, deps.needsSetup) };
       try {
         const replay = await deps.loadReplay?.();
-        if (replay?.messages.length) {
-          payload["replayMessages"] = replay.messages.length > REPLAY_MESSAGE_CAP ? replay.messages.slice(-REPLAY_MESSAGE_CAP) : replay.messages;
-        }
-        const usage3 = replay?.usage;
-        if (usage3 && usage3.input + usage3.output + (usage3.cacheRead ?? 0) + (usage3.cacheWrite ?? 0) > 0) {
-          payload["replayUsage"] = usage3;
-        }
+        if (replay) Object.assign(payload, buildReplayPayload(replay));
       } catch {
         console.debug("[WebUI] Failed to load replay");
       }
@@ -5177,11 +5317,9 @@ function createConnectionHandler(deps) {
     }
   });
 }
-var REPLAY_MESSAGE_CAP;
 var init_connection_handler = __esm({
   "src/webui-server/connection-handler.ts"() {
     "use strict";
-    REPLAY_MESSAGE_CAP = 2e3;
   }
 });
 
@@ -5421,8 +5559,7 @@ async function seedConfigToMeta(opts) {
       return;
     }
   }
-  const meta = opts.agent.ctx.meta ??= {};
-  seedContextMeta(config, { meta });
+  seedContextMeta(config, { meta: opts.agent.ctx.meta });
 }
 function createPrefsSeeding(opts) {
   const writeLock = { lock: Promise.resolve() };
@@ -5709,6 +5846,76 @@ var init_stream_coalescer = __esm({
   }
 });
 
+// src/webui-server/terminal-log-view.ts
+import { format } from "node:util";
+function startBoundedTerminalLogView(options = {}) {
+  const isTTY = options.isTTY ?? process.stdout.isTTY === true;
+  if (!isTTY) {
+    return { enabled: false, redraw: () => {
+    }, stop: () => {
+    } };
+  }
+  const maxLines = Math.max(1, Math.trunc(options.maxLines ?? DEFAULT_MAX_LINES));
+  const refreshMs = Math.max(100, Math.trunc(options.refreshMs ?? DEFAULT_REFRESH_MS));
+  const target = options.consoleTarget ?? console;
+  const write = options.write ?? ((chunk) => process.stdout.write(chunk));
+  const setIntervalFn = options.setIntervalFn ?? setInterval;
+  const clearIntervalFn = options.clearIntervalFn ?? clearInterval;
+  const lines = [];
+  let stopped = false;
+  const originals = {
+    log: target.log,
+    info: target.info,
+    warn: target.warn,
+    error: target.error,
+    debug: target.debug
+  };
+  const wrappers = {};
+  const remember = (args) => {
+    for (const line of format(...args).split(/\r?\n/u)) {
+      lines.push(line);
+      if (lines.length > maxLines) lines.shift();
+    }
+  };
+  for (const level of Object.keys(originals)) {
+    const original = originals[level];
+    const wrapper = (...args) => {
+      remember(args);
+      original.apply(target, args);
+    };
+    wrappers[level] = wrapper;
+    target[level] = wrapper;
+  }
+  const redraw = () => {
+    if (stopped || lines.length === 0) return;
+    write(`${CLEAR_VISIBLE_TERMINAL}${lines.join("\n")}
+`);
+  };
+  const timer = setIntervalFn(redraw, refreshMs);
+  timer.unref?.();
+  return {
+    enabled: true,
+    redraw,
+    stop: () => {
+      if (stopped) return;
+      stopped = true;
+      clearIntervalFn(timer);
+      for (const level of Object.keys(originals)) {
+        if (target[level] === wrappers[level]) target[level] = originals[level];
+      }
+    }
+  };
+}
+var DEFAULT_MAX_LINES, DEFAULT_REFRESH_MS, CLEAR_VISIBLE_TERMINAL;
+var init_terminal_log_view = __esm({
+  "src/webui-server/terminal-log-view.ts"() {
+    "use strict";
+    DEFAULT_MAX_LINES = 5;
+    DEFAULT_REFRESH_MS = 5e3;
+    CLEAR_VISIBLE_TERMINAL = "\x1B[2J\x1B[H";
+  }
+});
+
 // src/webui-server.ts
 var webui_server_exports = {};
 __export(webui_server_exports, {
@@ -6316,6 +6523,7 @@ async function runWebUI(opts) {
     terminalHandler,
     kanbanHostRoutes
   });
+  const terminalLogView = startBoundedTerminalLogView();
   const stopped = new Promise((resolve14) => {
     let listeningAnnounced = false;
     const announceListening = () => {
@@ -6359,7 +6567,7 @@ async function runWebUI(opts) {
           await activeSession.flush().catch(() => void 0);
           if (opts.sessionStore) {
             const data = await opts.sessionStore.load(activeSession.id);
-            return { messages: data.messages, usage: data.usage };
+            return { messages: data.messages, events: data.events, usage: data.usage };
           }
           const usage3 = opts.agent.ctx.tokenCounter.total();
           return { messages: opts.agent.ctx.messages, usage: usage3 };
@@ -6405,7 +6613,11 @@ async function runWebUI(opts) {
       wss,
       pid: process.pid,
       registryBaseDir,
-      onStopped: resolve14
+      onStopped: () => {
+        terminalLogView.redraw();
+        terminalLogView.stop();
+        resolve14();
+      }
     });
     registerWebuiSignalHandlers(signalShutdown);
   });
@@ -6416,6 +6628,8 @@ async function runWebUI(opts) {
   }
   function shutdown() {
     console.log("[WebUI] Shutting down...");
+    terminalLogView.redraw();
+    terminalLogView.stop();
     credentialWatcherClose?.();
     flushAllStreamBuffers();
     worktreeHandler.dispose();
@@ -6441,7 +6655,7 @@ async function runWebUI(opts) {
   function sendResult(ws, success, message) {
     send(ws, { type: "key.operation_result", payload: { success, message } });
   }
-  return stopped;
+  return stopped.finally(() => terminalLogView.stop());
 }
 var init_webui_server = __esm({
   "src/webui-server.ts"() {
@@ -6459,6 +6673,7 @@ var init_webui_server = __esm({
     init_setup_events();
     init_static_serve();
     init_stream_coalescer();
+    init_terminal_log_view();
   }
 });
 
@@ -7842,9 +8057,9 @@ var init_plugins = __esm({
 
 // src/cli-main.ts
 import { execFile as execFile3 } from "node:child_process";
-import * as fs56 from "node:fs/promises";
+import * as fs55 from "node:fs/promises";
 import * as path71 from "node:path";
-import { attachDepWatcherBridge, GlobalMailbox as GlobalMailbox10, mailboxSessionTag as mailboxSessionTag3 } from "@wrongstack/core/coordination";
+import { attachDepWatcherBridge, GlobalMailbox as GlobalMailbox9, mailboxSessionTag as mailboxSessionTag3 } from "@wrongstack/core/coordination";
 import { createFallbackManageTools, createPluginManagerTool } from "@wrongstack/core/tools";
 import { FLEET_ROSTER as FLEET_ROSTER4 } from "@wrongstack/core/coordination";
 import { gatedEnhancerReasoning } from "@wrongstack/core/execution";
@@ -9559,10 +9774,10 @@ ${color6.dim(`  ${CODEX_LEGACY_NOTE}`)}
 async function saveToGlobalConfig(configPath2, provider, model, homeFn = () => process.env.HOME ?? os2.homedir()) {
   try {
     const { atomicWrite: atomicWrite22 } = await import("@wrongstack/core/utils");
-    const fs57 = await import("node:fs/promises");
+    const fs56 = await import("node:fs/promises");
     let existing = {};
     try {
-      const raw = await fs57.readFile(configPath2, "utf8");
+      const raw = await fs56.readFile(configPath2, "utf8");
       existing = JSON.parse(raw);
     } catch {
     }
@@ -13190,6 +13405,7 @@ import { color as color14, toErrorMessage as toErrorMessage4 } from "@wrongstack
 // src/services/project-facts.ts
 import * as fs8 from "node:fs/promises";
 import * as path6 from "node:path";
+import { DEFAULT_WALK_IGNORE_DIRS } from "@wrongstack/core/utils";
 import {
   detectLanguageWorkspaces,
   languageProfileRegistry,
@@ -13307,26 +13523,14 @@ var EXT_LANG = {
   ".svelte": "Svelte"
 };
 var SCAN_IGNORE_DIRS = /* @__PURE__ */ new Set([
-  ".git",
-  "node_modules",
-  "dist",
-  "build",
+  ...DEFAULT_WALK_IGNORE_DIRS,
   "out",
-  "target",
   "vendor",
-  ".venv",
-  "venv",
   "env",
-  "__pycache__",
-  ".next",
-  ".nuxt",
-  ".cache",
-  "coverage",
   ".wrongstack",
   ".idea",
   ".vscode",
   "obj",
-  ".gradle",
   ".dart_tool",
   "Pods"
 ]);
@@ -15331,14 +15535,14 @@ var auditCmd = async (args, deps) => {
   return verify.ok ? 0 : 1;
 };
 async function listAudits(log, dir, deps) {
-  const fs57 = await import("node:fs/promises");
+  const fs56 = await import("node:fs/promises");
   const path72 = await import("node:path");
   const out = [];
   let foundRoot = true;
   const scan = async (scanDir, prefix, depth) => {
     let entries;
     try {
-      entries = await fs57.readdir(scanDir, { withFileTypes: true });
+      entries = await fs56.readdir(scanDir, { withFileTypes: true });
     } catch {
       if (depth === 0) foundRoot = false;
       return;
@@ -16140,7 +16344,7 @@ async function benchList(_args, deps) {
 }
 
 // src/subcommands/handlers/chronicle.ts
-import { ChronicleJournal, ChronicleQueryEngine, resolveChronicleRuntimeLocation } from "@wrongstack/core/chronicle";
+import { ChronicleJournal, ChronicleMetricsStore, ChronicleQueryEngine, resolveChronicleRuntimeLocation } from "@wrongstack/core/chronicle";
 import { resolveWstackPaths as resolveWstackPaths5 } from "@wrongstack/core/utils";
 import { statSync } from "node:fs";
 import * as path13 from "node:path";
@@ -16214,6 +16418,40 @@ var chronicleCmd = async (args, deps) => {
     }
     return result2.errors.length > 0 ? 1 : 0;
   }
+  if (operation === "metrics") {
+    const hasView = Boolean(args[1] && !args[1].includes("="));
+    const view = hasView ? args[1] : "summary";
+    const filters = parseQuery(args.slice(hasView ? 2 : 1));
+    let store;
+    try {
+      store = ChronicleMetricsStore.open(path13.join(paths.projectDir, "chronicle"));
+    } catch (error) {
+      deps.renderer.writeError(`${error instanceof Error ? error.message : String(error)}
+`);
+      return 1;
+    }
+    try {
+      const refreshed = await store.refresh();
+      const payload = view === "providers" ? store.providerDaily({ ...filters.from ? { from: filters.from } : {}, ...filters.to ? { to: filters.to } : {} }) : view === "tasks" ? store.taskOutcomes({
+        ...filters.sessionId ? { sessionId: filters.sessionId } : {},
+        ...filters.limit ? { limit: filters.limit } : {}
+      }) : view === "files" ? store.fileLineage({
+        ...filters.path ? { path: filters.path } : {},
+        ...filters.taskId ? { taskId: filters.taskId } : {},
+        ...filters.sessionId ? { sessionId: filters.sessionId } : {},
+        ...filters.limit ? { limit: filters.limit } : {}
+      }) : view === "summary" ? store.summary() : void 0;
+      if (payload === void 0) {
+        deps.renderer.writeError(`Unknown metrics view: ${view}. Use providers|tasks|files|summary.
+`);
+        return 1;
+      }
+      deps.renderer.write(JSON.stringify({ refreshed, [view]: payload }, null, 2) + "\n");
+      return 0;
+    } finally {
+      store.close();
+    }
+  }
   if (operation === "facet") {
     const engine2 = await ChronicleQueryEngine.fromDirectory(path13.join(paths.projectDir, "chronicle"));
     const field = args[1];
@@ -16247,9 +16485,15 @@ function parseQuery(tokens) {
     else if (key === "resourceKind") query.resourceKind = value;
     else if (key === "line" || key === "limit") query[key] = Number(value);
     else if (key === "order" && (value === "asc" || value === "desc")) query.order = value;
-    else if (key.startsWith("tag.")) (query.tags ??= {})[key.slice(4)] = value;
-    else if (key.startsWith("attr.")) (query.attributes ??= {})[key.slice(5)] = parseValue(value);
-    else if (isStringQueryKey(key)) query[key] = value;
+    else if (key.startsWith("tag.")) {
+      const tags = query.tags ?? {};
+      tags[key.slice(4)] = value;
+      query.tags = tags;
+    } else if (key.startsWith("attr.")) {
+      const attributes = query.attributes ?? {};
+      attributes[key.slice(5)] = parseValue(value);
+      query.attributes = attributes;
+    } else if (isStringQueryKey(key)) query[key] = value;
   }
   return query;
 }
@@ -16281,7 +16525,7 @@ function parseValue(value) {
   }
 }
 function usage() {
-  return "Usage:\n  wstack chronicle query [field=value ...]\n  wstack chronicle facet <field> [field=value ...]\n  wstack chronicle prune [--days N] [--dry-run]\n\nExamples:\n  wstack chronicle query path=src/app.ts line=42\n  wstack chronicle query providerId=openai outcome=failure\n  wstack chronicle query eventType=tool.executed sessionId=<id> limit=50\n  wstack chronicle query attr.tool.name=read\n  wstack chronicle facet modelId from=2026-07-01T00:00:00Z\n  wstack chronicle prune --days 7 --dry-run\n  wstack chronicle prune --days 30\n";
+  return "Usage:\n  wstack chronicle query [field=value ...]\n  wstack chronicle facet <field> [field=value ...]\n  wstack chronicle metrics [providers|tasks|files|summary] [field=value ...]\n  wstack chronicle prune [--days N] [--dry-run]\n\nExamples:\n  wstack chronicle query path=src/app.ts line=42\n  wstack chronicle query providerId=openai outcome=failure\n  wstack chronicle query eventType=tool.executed sessionId=<id> limit=50\n  wstack chronicle query attr.tool.name=read\n  wstack chronicle facet modelId from=2026-07-01T00:00:00Z\n  wstack chronicle metrics providers from=2026-07-01\n  wstack chronicle metrics files path=src/app.ts\n  wstack chronicle metrics tasks limit=20\n  wstack chronicle prune --days 7 --dry-run\n  wstack chronicle prune --days 30\n";
 }
 function formatBytes(bytes) {
   if (bytes < 1024) return `${bytes} B`;
@@ -16469,7 +16713,7 @@ var exportCmd = async (args, deps) => {
     deps.renderer.writeError("No session store configured.");
     return 1;
   }
-  let format = "markdown";
+  let format2 = "markdown";
   let output;
   let includeTools = true;
   let includeDiagnostics = true;
@@ -16482,7 +16726,7 @@ var exportCmd = async (args, deps) => {
         deps.renderer.writeError(`Unknown --format ${v}. Use markdown, json, or text.`);
         return 1;
       }
-      format = v;
+      format2 = v;
     } else if (a === "--out" || a === "-o") output = args[++i];
     else if (a === "--no-tools") includeTools = false;
     else if (a === "--no-diagnostics") includeDiagnostics = false;
@@ -16500,7 +16744,7 @@ var exportCmd = async (args, deps) => {
   const reader = new DefaultSessionReader({ store: deps.sessionStore });
   let rendered;
   try {
-    rendered = await reader.export(sessionId, { format, includeTools, includeDiagnostics });
+    rendered = await reader.export(sessionId, { format: format2, includeTools, includeDiagnostics });
   } catch (err) {
     deps.renderer.writeError(`Export failed: ${toErrorMessage7(err)}`);
     return 1;
@@ -16890,7 +17134,7 @@ function resolveTokenTtl(args, deps) {
   if (inline) {
     return parseTokenTtlValue(inline.slice("--ttl=".length));
   }
-  const idx = args.findIndex((a) => a === "--ttl");
+  const idx = args.indexOf("--ttl");
   if (idx >= 0) {
     const raw = args[idx + 1];
     if (raw === void 0 || raw.startsWith("-")) {
@@ -17081,7 +17325,7 @@ var initCmd = async (_args, deps) => {
 init_hq_publisher();
 import { createServer as createServer3 } from "node:http";
 import * as path22 from "node:path";
-import { authorizeMailboxBearerToken, GlobalMailbox as GlobalMailbox3, MailboxEventEmitter as MailboxEventEmitter2, MailboxHttpRateLimiter as MailboxHttpRateLimiter3, resolveProjectDir as resolveProjectDir2 } from "@wrongstack/core/coordination";
+import { authorizeMailboxBearerToken, GlobalMailbox as GlobalMailbox2, MailboxEventEmitter as MailboxEventEmitter2, MailboxHttpRateLimiter as MailboxHttpRateLimiter2, resolveProjectDir as resolveProjectDir2 } from "@wrongstack/core/coordination";
 import { createMailboxHttpRouter as createMailboxHttpRouter2, MAILBOX_HTTP_DEFAULT_MAX_AGE_MS as MAILBOX_HTTP_DEFAULT_MAX_AGE_MS2 } from "@wrongstack/core/coordination";
 import { wstackGlobalRoot } from "@wrongstack/core/utils";
 import { acquireOrJoin, finalize, release as release2 } from "@wrongstack/core/coordination";
@@ -17148,13 +17392,13 @@ or stop the conflicting process and retry.
   const tentative = acquireResult.lock;
   const eventEmitter = new MailboxEventEmitter2();
   let hqConnection;
-  const mailbox = new GlobalMailbox3(
+  const mailbox = new GlobalMailbox2(
     projectDir,
     void 0,
     () => hqConnection?.getPublisher(),
     eventEmitter
   );
-  const rateLimiter = new MailboxHttpRateLimiter3();
+  const rateLimiter = new MailboxHttpRateLimiter2();
   const rateLimitCleanup = setInterval(() => rateLimiter.cleanup(), 12e4);
   rateLimitCleanup.unref?.();
   const router = createMailboxHttpRouter2({
@@ -23779,7 +24023,7 @@ import * as path46 from "node:path";
 import { toErrorMessage as toErrorMessage13 } from "@wrongstack/core/utils";
 import { color as color51, estimateRequestTokensCalibrated, expectDefined as expectDefined11, hasOpenTodos, wstackGlobalRoot as wstackGlobalRoot4 } from "@wrongstack/core/utils";
 import { detectContinueIntent, InputBuilder, resolveContinuation } from "@wrongstack/core/agent";
-import { GlobalMailbox as GlobalMailbox4, resolveProjectDir as resolveProjectDir3 } from "@wrongstack/core/coordination";
+import { GlobalMailbox as GlobalMailbox3, resolveProjectDir as resolveProjectDir3 } from "@wrongstack/core/coordination";
 import { goalFilePath, loadGoal, summarizeUsage } from "@wrongstack/core/goal";
 import { readClipboardImage, routeImagesForModel } from "@wrongstack/runtime";
 import { parseNextSteps } from "@wrongstack/tools/next-steps";
@@ -23812,7 +24056,8 @@ function clearSuggestions() {
 
 // src/repl.ts
 import {
-  createAutoProceedLoopGuard
+  createAutoProceedLoopGuard,
+  GROUNDED_NO_PROGRESS_STEER
 } from "@wrongstack/tools/auto-proceed-loop-guard";
 var DEFAULT_MAX_CONSECUTIVE_AUTO_PROCEED = 50;
 function parseSuggestionsFromOutput(finalText, todos) {
@@ -23893,7 +24138,7 @@ async function runRepl(opts) {
     appConfig: opts.appConfig,
     capabilities: ["telemetry.publish", "mailbox.summary"]
   });
-  const clientMailbox = new GlobalMailbox4(projectDir, void 0, () => hqConnection.getPublisher());
+  const clientMailbox = new GlobalMailbox3(projectDir, void 0, () => hqConnection.getPublisher());
   let clientHeartbeat;
   clientMailbox.registerClient({
     clientId,
@@ -24061,6 +24306,7 @@ ${lines.join("\n")}
         }
         if (mode === "auto") {
           let top;
+          let groundedTodo = false;
           if (suggestions.length > 0) {
             const isYolo = opts.getYolo?.() ?? false;
             const autoSuggestions = opts.getAutoSuggestions?.() ?? [];
@@ -24070,6 +24316,7 @@ ${lines.join("\n")}
             const todos = opts.agent.ctx.todos ?? [];
             const resolved = resolveContinuation({ todos, suggestions: [] });
             top = resolved.source === "todo" ? resolved.text : "";
+            groundedTodo = top !== "";
           }
           if (!top) {
           } else {
@@ -24095,7 +24342,8 @@ ${lines.join("\n")}
                   promptToFeed,
                   delay,
                   ctrl,
-                  autoProceedLoopGuard
+                  autoProceedLoopGuard,
+                  groundedTodo
                 );
                 if (submitted) {
                   autoIterCount++;
@@ -24579,7 +24827,7 @@ async function renderGoalBanner(opts) {
   }
   opts.renderer.write("\n");
 }
-async function runAutoProceed(opts, suggestion, delayMs, ctrl, loopGuard) {
+async function runAutoProceed(opts, suggestion, delayMs, ctrl, loopGuard, grounded = false) {
   const truncated = suggestion.length > 80 ? `${suggestion.slice(0, 77)}\u2026` : suggestion;
   console.log(
     JSON.stringify({
@@ -24612,7 +24860,7 @@ async function runAutoProceed(opts, suggestion, delayMs, ctrl, loopGuard) {
       );
       return false;
     }
-    const repetition = loopGuard.record(suggestion);
+    const repetition = grounded ? loopGuard.recordGrounded(suggestion) : loopGuard.record(suggestion);
     if (repetition.shouldHalt) {
       setSuggestions([]);
       setAutoSuggestions([]);
@@ -24622,7 +24870,20 @@ async function runAutoProceed(opts, suggestion, delayMs, ctrl, loopGuard) {
       );
       return false;
     }
-    const runBlocks = [{ type: "text", text: suggestion }];
+    const steered = "action" in repetition && repetition.action === "steer";
+    if (steered) {
+      opts.renderer.writeWarning(
+        "Todo board unchanged since the last automatic turn \u2014 steering the agent to update the board before continuing."
+      );
+    }
+    const runBlocks = [
+      {
+        type: "text",
+        text: steered ? `${suggestion}
+
+${GROUNDED_NO_PROGRESS_STEER}` : suggestion
+      }
+    ];
     const runResult = await opts.agent.run(runBlocks, { signal: ctrl.signal });
     console.log(
       JSON.stringify({
@@ -26359,6 +26620,14 @@ import { DefaultSecretScrubber as DefaultSecretScrubber5 } from "@wrongstack/cor
 import { createSessionEventBridge, resolveSessionLoggingConfig } from "@wrongstack/core/storage";
 import { recordFileAction } from "@wrongstack/core/coordination";
 import { startNetworkTelemetryMonitor } from "@wrongstack/core/observability";
+var DEFAULT_CHRONICLE_RETENTION_DAYS = 30;
+var MIN_CHRONICLE_RETENTION_DAYS = 7;
+function resolveChronicleRetentionDays(config) {
+  const raw = config.chronicle?.retentionDays;
+  if (typeof raw !== "number" || !Number.isFinite(raw)) return DEFAULT_CHRONICLE_RETENTION_DAYS;
+  if (raw <= 0) return 0;
+  return Math.max(MIN_CHRONICLE_RETENTION_DAYS, raw);
+}
 function wireSessionEvents(deps) {
   const { evOn, config, context, session, sessionRef, wpaths, projectRoot } = deps;
   const sessionConfig = resolveSessionLoggingConfig(
@@ -26392,7 +26661,10 @@ function wireSessionEvents(deps) {
       projectId: wpaths.projectHash ?? wpaths.projectSlug,
       projectDir: wpaths.projectDir
     });
-    chronicleJournal = new ChronicleJournal2({ filePath: location.journalPath });
+    chronicleJournal = new ChronicleJournal2({
+      filePath: location.journalPath,
+      retentionDays: resolveChronicleRetentionDays(config)
+    });
     const chronicleContext = createChronicleContext({
       installationId: location.installationId,
       machineId: location.machineId,
@@ -27214,7 +27486,20 @@ function stripQuotes(s) {
 
 // src/slash-commands/agent-improve.ts
 import { color as color54 } from "@wrongstack/core/utils";
-import { captureLearnedFromAgentOutput, loadProjectAgentConfig, loadProjectAgentIdentity, loadProjectAgentLearned, loadRoleKnowledgeManifest, resetProjectAgentIdentity, refreshProjectAgentIdentity, updateProjectAgentIdentity } from "@wrongstack/core/agent-catalog";
+import {
+  buildConsolidationInstruction,
+  captureLearnedFromAgentOutput,
+  getProjectAgentLearnStats,
+  isConsolidated,
+  loadConsolidationMetadata,
+  loadProjectAgentConfig,
+  loadProjectAgentIdentity,
+  loadProjectAgentLearned,
+  loadRoleKnowledgeManifest,
+  resetProjectAgentIdentity,
+  refreshProjectAgentIdentity,
+  updateProjectAgentIdentity
+} from "@wrongstack/core/agent-catalog";
 function buildAgentImproveCommand(opts) {
   const projectRoot = opts.projectRoot;
   function listRoles2() {
@@ -27238,6 +27523,7 @@ function buildAgentImproveCommand(opts) {
       "  /agent-improve [role] update         Update identity + learned content",
       "  /agent-improve [role] refresh        Reset identity + learned to empty templates",
       "  /agent-improve [role] capture        Scan last output for ## LEARNED blocks and persist them",
+      "  /agent-improve [role] consolidate    Optimize raw learned entries into a consolidated document",
       "  /agent-improve [role] reset          Delete ALL custom files for this role",
       "  /agent-improve * reset               Delete ALL custom files for every role",
       "",
@@ -27247,6 +27533,8 @@ function buildAgentImproveCommand(opts) {
       "  Agents output a ## LEARNED section in their response to persist",
       "  project-specific patterns. The runtime captures these automatically.",
       '  Use "capture" to manually re-scan any text for LEARNED blocks.',
+      '  Use "consolidate" to synthesize all raw entries into a single',
+      "  narrowly-scoped document that replaces raw entries in the agent prompt.",
       "",
       "Files live under: .wrongstack/agents/<role>/"
     ].join("\n"),
@@ -27329,6 +27617,24 @@ Or edit files directly under .wrongstack/agents/${role}/`
             message: `No ## LEARNED blocks found in recent output for role "${role}".`
           };
         }
+        case "consolidate": {
+          const stats = getProjectAgentLearnStats(role, projectRoot);
+          if (stats.entryCount === 0) {
+            const msg = `No raw learned entries for role "${role}" to consolidate.`;
+            opts.renderer.write(msg);
+            return { message: msg };
+          }
+          const { instruction } = buildConsolidationInstruction(role, projectRoot);
+          const prompt = `Optimize what the "${role}" agent has learned for its skills. ${instruction}`;
+          const consolidatedAlready = isConsolidated(role, projectRoot);
+          const meta = loadConsolidationMetadata(role, projectRoot);
+          const summary = `${color54.cyan(role)}: ${stats.entryCount} raw entries (${stats.totalBytes}B)` + (consolidatedAlready && meta ? ` \xB7 last consolidated ${meta.consolidatedAt.slice(0, 10)} (${meta.sourceBytes}B \u2192 ${meta.consolidatedBytes}B)` : " \xB7 no prior consolidation") + "\n\nSending consolidation instruction to the agent...";
+          opts.renderer.write(summary);
+          return {
+            message: summary,
+            runText: prompt
+          };
+        }
         case "reset": {
           const removed = resetProjectAgentIdentity(
             role === "*" ? void 0 : role,
@@ -27346,7 +27652,7 @@ Or edit files directly under .wrongstack/agents/${role}/`
         }
         default:
           return {
-            message: `Unknown action "${action}". Use: show, update, refresh, capture, reset, or reset-all.`
+            message: `Unknown action "${action}". Use: show, update, refresh, capture, consolidate, reset, or reset-all.`
           };
       }
     }
@@ -27786,6 +28092,12 @@ function parseRefEntry(ref) {
 function compactEntry2(entry) {
   return entry.provider ? `${entry.provider}/${entry.model}` : entry.model;
 }
+function judgeSummary(s) {
+  if (!s.judgeLabel) return "";
+  const seated = s.councilLabels.some((label) => label.startsWith(`${s.judgeLabel} (`));
+  const origin = s.council.judge ? "" : " [derived]";
+  return `, judge: ${s.judgeLabel}${origin}${seated ? " \u26A0 also a voter" : ""}`;
+}
 function parseSeat(token) {
   const parts = token.split(":");
   const mods = [];
@@ -28035,7 +28347,7 @@ function buildBrainCommand(opts) {
       }
       if (subcommand === "council") {
         const op = (rest[0] ?? "").toLowerCase();
-        const councilSummary = (s) => s.council.enabled ? `council ${color57.cyan("convened")}: ${s.councilLabels.join(", ")} ${color57.dim(`(minRisk: ${s.council.minRisk}${s.council.judge ? `, judge: ${compactEntry2(s.council.judge)}` : ""})`)}` : `council ${color57.dim("disabled")}`;
+        const councilSummary = (s) => s.council.enabled ? `council ${color57.cyan("convened")}: ${s.councilLabels.join(", ")} ${color57.dim(`(minRisk: ${s.council.minRisk}${judgeSummary(s)})`)}` : `council ${color57.dim("disabled")}`;
         if (!op) {
           const snapshot = opts.brainRuntime?.getSnapshot();
           const msg3 = snapshot ? `Brain ${councilSummary(snapshot)}` : "The Brain runtime is not available in this session.";
@@ -28070,7 +28382,7 @@ function buildBrainCommand(opts) {
             opts.renderer.writeWarning(msg3);
             return { message: msg3 };
           }
-          return applyPatch({ council: { judge: ref.toLowerCase() === "auto" ? null : ref } }, (s) => `Brain council judge: ${color57.cyan(s.council.judge ? compactEntry2(s.council.judge) : "auto (first pool/voter model)")}`);
+          return applyPatch({ council: { judge: ref.toLowerCase() === "auto" ? null : ref } }, (s) => `Brain council judge: ${color57.cyan(s.council.judge ? compactEntry2(s.council.judge) : "auto")}${s.council.judge ? "" : color57.dim(judgeSummary(s).replace(/^, judge: /, " \u2192 "))}`);
         }
         if (op === "quorum" || op === "approval") {
           const value = Number(rest[1]);
@@ -28205,7 +28517,7 @@ ${color57.dim(decision.rationale)}` : ""}`;
         const councilSeats = opts.brainSettings?.councilLabels ?? [];
         if (councilSeats.length > 0) {
           lines.push(
-            `  council:          ${color57.cyan(councilSeats.join(", "))}${snapshot ? color57.dim(` (minRisk: ${snapshot.council.minRisk}${snapshot.council.judge ? `, judge: ${compactEntry2(snapshot.council.judge)}` : ""})`) : ""}`
+            `  council:          ${color57.cyan(councilSeats.join(", "))}${snapshot ? color57.dim(` (minRisk: ${snapshot.council.minRisk}${judgeSummary(snapshot)})`) : ""}`
           );
         } else if (snapshot) {
           lines.push(`  council:          ${color57.dim("disabled (/brain council on + voters)")}`);
@@ -33689,6 +34001,7 @@ function buildKanbanCommand(opts) {
       "  /kanban duplicate <boardId> [title]  Duplicate a board",
       "  /kanban show <boardId>         Show board details (columns + tasks)",
       "  /kanban delete <boardId>       Delete a board",
+      "  /kanban prune [days] [--all] [--yes]  Delete stale boards (dry-run without --yes)",
       "  /kanban rename <boardId> <t>   Rename a board",
       "  /kanban snapshot [boardId]     Show agent queue snapshot",
       "",
@@ -33778,6 +34091,60 @@ function buildKanbanCommand(opts) {
           message: removed ? color74.green(`\u2705 Board deleted: ${rest[0]}`) : color74.red(`Board not found: ${rest[0]}`)
         };
       }
+      if (cmd === "prune") {
+        const flags = new Set(rest.filter((t) => t.startsWith("--") || t === "-y"));
+        const positional = rest.filter((t) => !t.startsWith("--") && t !== "-y");
+        const days = positional[0] ? Number(positional[0]) : 7;
+        if (!Number.isFinite(days) || days < 0) {
+          return { message: color74.red("Usage: /kanban prune [days>=0] [--all] [--yes]") };
+        }
+        const includeUnfinished = flags.has("--all");
+        const apply = flags.has("--yes") || flags.has("-y");
+        const cutoff = Date.now() - days * 864e5;
+        const boards = await listBoards(projectRoot);
+        const stale = boards.filter((b) => {
+          const updatedAt = Date.parse(b.updatedAt);
+          if (!Number.isFinite(updatedAt) || updatedAt > cutoff) return false;
+          if (includeUnfinished) return true;
+          return b.taskCount === 0 || b.completedTaskCount === b.taskCount;
+        });
+        if (stale.length === 0) {
+          return {
+            message: color74.green(
+              `Nothing to prune: no ${includeUnfinished ? "" : "finished/empty "}boards idle \u2265 ${days}d (of ${boards.length} total).`
+            )
+          };
+        }
+        if (!apply) {
+          const preview = stale.slice(0, 20).map(
+            (b) => `  ${LABEL(b.id.slice(0, 8))}  ${b.title.slice(0, 48)}  ${DIM(`${b.taskCount} tasks \xB7 updated ${fmtAge2(b.updatedAt)}`)}`
+          );
+          if (stale.length > 20) preview.push(DIM(`  \u2026 and ${stale.length - 20} more`));
+          return {
+            message: [
+              HEADING(
+                `Would prune ${stale.length} of ${boards.length} boards (idle \u2265 ${days}d${includeUnfinished ? ", including unfinished" : ", finished/empty only"})`
+              ),
+              ...preview,
+              "",
+              DIM(`Run /kanban prune ${positional[0] ?? days}${includeUnfinished ? " --all" : ""} --yes (or -y) to delete.`)
+            ].join("\n")
+          };
+        }
+        let removed = 0;
+        let failed = 0;
+        for (const b of stale) {
+          if (await removeBoard(projectRoot, b.id)) removed++;
+          else failed++;
+        }
+        const parts = [
+          `\u2705 Pruned ${removed} board${removed === 1 ? "" : "s"} (${boards.length - removed} remain).`
+        ];
+        if (failed > 0) {
+          parts.push(color74.yellow(`${failed} board${failed === 1 ? "" : "s"} could not be deleted \u2014 check file permissions or HQ sync locks.`));
+        }
+        return { message: color74.green(parts.join(" ")) };
+      }
       if (cmd === "rename") {
         if (rest.length < 2)
           return { message: color74.red("Usage: /kanban rename <boardId> <title>") };
@@ -33838,6 +34205,7 @@ function buildKanbanCommand(opts) {
             "duplicate",
             "show",
             "delete",
+            "prune",
             "rename",
             "generate",
             "snapshot",
@@ -34449,11 +34817,11 @@ function stripQuotes2(value) {
 
 // src/slash-commands/mailbox.ts
 import { color as color75, wstackGlobalRoot as wstackGlobalRoot5 } from "@wrongstack/core/utils";
-import { GlobalMailbox as GlobalMailbox5, mailboxSessionTag, resolveMailboxIdentity, resolveProjectDir as resolveProjectDir4 } from "@wrongstack/core/coordination";
+import { GlobalMailbox as GlobalMailbox4, mailboxSessionTag, resolveMailboxIdentity, resolveProjectDir as resolveProjectDir4 } from "@wrongstack/core/coordination";
 function buildMailbox(opts) {
   const projectDir = opts.paths?.projectDir ?? resolveProjectDir4(opts.projectRoot, wstackGlobalRoot5());
   try {
-    return new GlobalMailbox5(projectDir);
+    return new GlobalMailbox4(projectDir);
   } catch {
     return null;
   }
@@ -34772,13 +35140,13 @@ function buildMailboxCommand(opts) {
 }
 
 // src/slash-commands/mailbox-demo.ts
-import { GlobalMailbox as GlobalMailbox6, resolveProjectDir as resolveProjectDir5 } from "@wrongstack/core/coordination";
+import { GlobalMailbox as GlobalMailbox5, resolveProjectDir as resolveProjectDir5 } from "@wrongstack/core/coordination";
 import { wstackGlobalRoot as wstackGlobalRoot6 } from "@wrongstack/core/utils";
 var DEMO_AGENT_ID = "mailbox-demo";
 function buildMailbox2(opts) {
   const projectDir = opts.paths?.projectDir ?? resolveProjectDir5(opts.projectRoot, wstackGlobalRoot6());
   try {
-    return new GlobalMailbox6(projectDir);
+    return new GlobalMailbox5(projectDir);
   } catch {
     return null;
   }
@@ -46429,7 +46797,7 @@ import {
   FleetManager,
   FleetSupervisor,
   formatSubagentStructuredReport,
-  GlobalMailbox as GlobalMailbox7,
+  GlobalMailbox as GlobalMailbox6,
   HARD_MAX_SPAWN_DEPTH,
   mailboxSessionTag as mailboxSessionTag2,
   makeDirectorSessionFactory,
@@ -46609,7 +46977,19 @@ function createFleetStatusBroadcaster(opts) {
         // A retired subagent's id will never be seen again, so its one-shot dedup
         // guards and throttle timestamp are dead weight. Prune them so a long-lived
         // fleet that spawns thousands of subagents does not leak one entry each.
+        //
+        // Deregister from the mailbox agent registry so the retirement is visible
+        // cross-process immediately. Without this, the registry entry lingers with
+        // status 'idle' (the last heartbeat from the task_completed handler) until
+        // the 60s lazy prune fires — leaking dead agents in fleet_status and the
+        // fleet pulse for up to a minute. deregisterAgent is used instead of
+        // heartbeat({ status: 'offline' }) because (a) RegisteredAgent.status
+        // does not include 'offline' (only the read-side MailboxAgentStatus does),
+        // and (b) the heartbeat path is throttled to 1/5s so it silently drops
+        // when fired right after the task_completed idle heartbeat.
         opts.events.on("subagent.removed", (e) => {
+          void mb().deregisterAgent(e.subagentId).catch(() => {
+          });
           announcedSpawn.delete(e.subagentId);
           lastSentAt.delete(e.subagentId);
           for (const key of announcedBudget) {
@@ -46922,7 +47302,7 @@ var MultiAgentHost = class _MultiAgentHost {
     }
     this.statusBroadcaster = createFleetStatusBroadcaster({
       events: this.deps.events,
-      mailboxFactory: () => new GlobalMailbox7(this.mailboxProjectDir(), this.deps.events),
+      mailboxFactory: () => new GlobalMailbox6(this.mailboxProjectDir(), this.deps.events),
       sessionTag: () => mailboxSessionTag2(this.deps.session.id),
       subagentName: (id) => this.director?.status().subagents.find((s) => s.id === id)?.name,
       config: config.fleet?.statusBroadcasts
@@ -47309,7 +47689,7 @@ ${message} Falling back to the assigned checkout.` : `${message} Falling back to
       }
       let onlineAgents = [];
       try {
-        const subagentMailbox = new GlobalMailbox7(this.mailboxProjectDir());
+        const subagentMailbox = new GlobalMailbox6(this.mailboxProjectDir());
         onlineAgents = await subagentMailbox.getAgentStatuses();
       } catch {
       }
@@ -47833,7 +48213,7 @@ ${resolved.join("\n\n---\n\n")}` : void 0
     const supervisorCfg = config.fleet?.supervisor;
     if (!director || !brain || supervisorCfg?.enabled === false) return;
     const supTag = () => mailboxSessionTag2(this.deps.session.id);
-    const mailbox = () => new GlobalMailbox7(this.mailboxProjectDir(), this.deps.events);
+    const mailbox = () => new GlobalMailbox6(this.mailboxProjectDir(), this.deps.events);
     this.fleetSupervisor = new FleetSupervisor({
       events: this.deps.events,
       fleet: director.fleet,
@@ -47908,7 +48288,7 @@ ${resolved.join("\n\n---\n\n")}` : void 0
   async reportTaskResultToLeader(n) {
     try {
       const leaderId2 = this.opts.getLeaderMailboxId?.() ?? `leader@${mailboxSessionTag2(this.deps.session.id)}`;
-      const mailbox = new GlobalMailbox7(this.mailboxProjectDir(), this.deps.events);
+      const mailbox = new GlobalMailbox6(this.mailboxProjectDir(), this.deps.events);
       const ok = n.status === "success";
       const MAX_BODY = 700;
       const failureText = [
@@ -48848,14 +49228,14 @@ async function spawnAgent2(director, role, task, maxIterations) {
 // src/wiring/dep-watcher.ts
 import * as path62 from "node:path";
 import { startTechStackConsumer } from "@wrongstack/core/coordination";
-import { GlobalMailbox as GlobalMailbox8, startPackageOutdatedWatcher } from "@wrongstack/core/coordination";
+import { GlobalMailbox as GlobalMailbox7, startPackageOutdatedWatcher } from "@wrongstack/core/coordination";
 function setupDepWatcherConsumers(deps) {
   const { dwCfg, globalRoot, projectSlug, events, multiAgentHost, sessionId, logger, teardownHandlers, projectRoot } = deps;
   let techStackConsumerDispose;
   if (dwCfg?.["enabled"] === true) {
     try {
       const projectDir = path62.join(globalRoot, "projects", projectSlug);
-      const tsMailbox = new GlobalMailbox8(projectDir, events);
+      const tsMailbox = new GlobalMailbox7(projectDir, events);
       const fileAuthorOpts = {
         storageDir: projectDir,
         projectRoot
@@ -48888,7 +49268,7 @@ function setupDepWatcherConsumers(deps) {
   if (dwCfg?.["enabled"] === true) {
     try {
       const projectDir = path62.join(globalRoot, "projects", projectSlug);
-      const pkgMailbox = new GlobalMailbox8(projectDir, events);
+      const pkgMailbox = new GlobalMailbox7(projectDir, events);
       const pkgTrackerOpts = {
         storageDir: projectDir,
         projectRoot
@@ -49631,7 +50011,7 @@ function setupHqTelemetry(deps) {
 import * as path68 from "node:path";
 import { allServers as allServers2 } from "@wrongstack/core/infrastructure";
 import { countShellHooks, HookRegistry, HookRunner, shellHooksEqual } from "@wrongstack/core/hooks";
-import { GlobalMailbox as GlobalMailbox9 } from "@wrongstack/core/coordination";
+import { GlobalMailbox as GlobalMailbox8 } from "@wrongstack/core/coordination";
 import { NotifierImpl } from "@wrongstack/core/notifications";
 import { normalizeTokenSavingTier as normalizeTokenSavingTier6 } from "@wrongstack/core/types";
 import { SlashCommandRegistry } from "@wrongstack/core/registry";
@@ -50377,7 +50757,7 @@ async function setupLifecycleAndPlugins(deps) {
   registerMcpObservability(healthRegistry, metricsSink, mcpRegistry);
   const slashRegistry = new SlashCommandRegistry();
   const hqPublisherRef = { current: void 0 };
-  const brainMailbox = new GlobalMailbox9(wpaths.projectDir, events, () => hqPublisherRef.current);
+  const brainMailbox = new GlobalMailbox8(wpaths.projectDir, events, () => hqPublisherRef.current);
   const notifier = new NotifierImpl();
   const pluginHost = await setupPlugins({
     config,
@@ -51108,8 +51488,11 @@ init_utils();
 import { getToolDescriptionMode as getToolDescriptionMode3 } from "@wrongstack/core/utils";
 
 // src/wiring/codebase-index.ts
-import * as fs55 from "node:fs";
 import * as path69 from "node:path";
+import {
+  DEFAULT_WALK_IGNORE_SET,
+  watchProjectTree
+} from "@wrongstack/core/utils";
 import {
   cancelPendingReindexes,
   enqueueReindex,
@@ -51118,19 +51501,8 @@ import {
   shutdownCodebaseIndexHost
 } from "@wrongstack/tools";
 var FILE_EDIT_TOOLS = /* @__PURE__ */ new Set(["write", "edit"]);
-var IGNORE_DIRS = /* @__PURE__ */ new Set([
-  "node_modules",
-  ".git",
-  "dist",
-  "build",
-  ".next",
-  "coverage",
-  ".turbo",
-  "__snapshots__",
-  ".nyc_output"
-]);
 function isIgnored(rel) {
-  return rel.split(/[/\\]/).some((seg) => IGNORE_DIRS.has(seg));
+  return rel.split(/[/\\]/).some((seg) => DEFAULT_WALK_IGNORE_SET.has(seg));
 }
 async function setupCodebaseIndexing(deps) {
   const { config, context, pipelines, projectRoot, logger } = deps;
@@ -51180,16 +51552,18 @@ async function setupCodebaseIndexing(deps) {
   let watcher;
   if (idx.watchExternal) {
     try {
-      watcher = fs55.watch(projectRoot, { recursive: true }, (_event, filename) => {
-        if (!filename) return;
-        const rel = filename.toString();
-        if (isIgnored(rel)) return;
-        const abs = path69.resolve(projectRoot, rel);
-        if (!isIndexableFile(abs)) return;
-        enqueueReindex({ projectRoot, files: [abs], debounceMs, onError });
-      });
-      watcher.on("error", (err) => logger.debug(`codebase index watcher error: ${err}`));
-      watcher.unref?.();
+      watcher = watchProjectTree(
+        projectRoot,
+        (event) => {
+          if (!event.filename) return;
+          const rel = event.filename;
+          if (isIgnored(rel)) return;
+          const abs = path69.resolve(projectRoot, rel);
+          if (!isIndexableFile(abs)) return;
+          enqueueReindex({ projectRoot, files: [abs], debounceMs, onError });
+        },
+        { onError: (err) => logger.debug(`codebase index watcher error: ${err}`) }
+      );
     } catch (err) {
       logger.debug(
         `codebase index watcher unavailable: ${err instanceof Error ? err.message : String(err)}`
@@ -51688,12 +52062,32 @@ function createSddHandlers(deps) {
       }
     }
     const boardStore = new sddApi.SddBoardStore({ baseDir: wpaths.projectSddBoards });
-    const verifyTask = sddApi.makeCommandVerifier();
     const sddSupervisor = new sddApi.SddSupervisor({
       brain,
       reassignModels: agentCore.effectiveFallbackChain(config)
     });
     const sddSubagentFactory = multiAgentHost.makeSubagentFactory(config);
+    let verifySeq = 0;
+    const verifyTask = sddApi.makeCompositeVerifier([
+      sddApi.makeCommandVerifier(),
+      sddApi.makeAcceptanceCriteriaVerifier({
+        run: async (prompt) => {
+          const r = await sddSubagentFactory({
+            id: `sdd-acceptance-${verifySeq++}`,
+            role: "executor",
+            name: "Acceptance Reviewer",
+            disabledTools: ["delegate", "write", "edit", "patch", "bash", "exec"],
+            allowedCapabilities: ["fs.read"]
+          });
+          try {
+            const res = await r.agent.run([{ type: "text", text: prompt }]);
+            return res.finalText ?? "";
+          } finally {
+            await r.dispose?.();
+          }
+        }
+      })
+    ]);
     const conflictMode = process.env["WRONGSTACK_SDD_CONFLICT_RESOLVER"];
     const conflictResolver = conflictMode === "prefer-incoming" ? sddApi.makePreferSideConflictResolver("incoming") : conflictMode === "prefer-base" ? sddApi.makePreferSideConflictResolver("base") : conflictMode === "llm" ? sddApi.makeLlmConflictResolver({
       run: async (prompt) => {
@@ -52093,10 +52487,10 @@ async function main(argv) {
   const fallbackManageTools = createFallbackManageTools({
     getConfig: () => configStore.get(),
     updateConfig: async (mutate) => {
-      const raw = await fs56.readFile(profileConfigPath, "utf8").catch(() => "{}");
+      const raw = await fs55.readFile(profileConfigPath, "utf8").catch(() => "{}");
       const parsed = JSON.parse(raw);
       mutate(parsed);
-      await fs56.writeFile(profileConfigPath, JSON.stringify(parsed, null, 2), { mode: 384 });
+      await fs55.writeFile(profileConfigPath, JSON.stringify(parsed, null, 2), { mode: 384 });
       configStore.update(parsed);
     },
     // Interactive key entry for REPL mode — reads a line from stdin without echo.
@@ -52194,7 +52588,7 @@ ${prompt}
   let onlineAgents = [];
   if (flags["simpleui"] !== true) {
     try {
-      const systemMailbox = new GlobalMailbox10(wpaths.projectDir);
+      const systemMailbox = new GlobalMailbox9(wpaths.projectDir);
       onlineAgents = await systemMailbox.getAgentStatuses();
     } catch {
     }
@@ -52311,7 +52705,9 @@ ${prompt}
   });
   const stats = new SessionStats(events, tokenCounter);
   let activeReasoningConfig;
+  const warnedRuntimeMessages = /* @__PURE__ */ new Set();
   const refreshActiveReasoningConfig = async (providerId, modelId) => {
+    warnedRuntimeMessages.clear();
     try {
       const resolved = await modelsRegistry.getModel(providerId, modelId);
       activeReasoningConfig = resolved?.capabilities.reasoningConfig;
@@ -52328,6 +52724,8 @@ ${prompt}
       getReasoningConfig: () => activeReasoningConfig,
       getCapabilities: () => provider.capabilities,
       onWarning: (message) => {
+        if (warnedRuntimeMessages.has(message)) return;
+        warnedRuntimeMessages.add(message);
         logger.warn(`model-runtime: ${message}`);
       }
     }
@@ -52377,7 +52775,7 @@ ${prompt}
   if (dwCfg?.["enabled"] === true) {
     try {
       const projectDir = path71.join(wpaths.globalRoot, "projects", wpaths.projectSlug);
-      const dwMailbox = new GlobalMailbox10(projectDir, events);
+      const dwMailbox = new GlobalMailbox9(projectDir, events);
       depWatcherDispose = attachDepWatcherBridge({
         events,
         mailbox: dwMailbox,