@wrongstack/cli 0.296.4 → 0.298.0

package/dist/{mailbox-serve-2UWHEN3M.js → mailbox-serve-DBOOOOWZ.js}

@@ -1,6 +1,6 @@
 import {
   startCliHqConnection
-} from "./chunk-WY7KKOUK.js";
+} from "./chunk-JW75HY4F.js";
 import "./chunk-7OCVIDC7.js";
 
 // src/subcommands/handlers/mailbox-serve.ts
@@ -9,8 +9,8 @@ import * as path from "node:path";
 import {
   acquireOrJoin,
   authorizeMailboxBearerToken,
-  createProjectMailbox,
   createMailboxHttpRouter,
+  createProjectMailbox,
   finalize,
   MAILBOX_HTTP_DEFAULT_MAX_AGE_MS,
   MailboxEventEmitter,
@@ -18,7 +18,7 @@ import {
   release,
   resolveProjectDir
 } from "@wrongstack/core/coordination";
-import { wstackGlobalRoot } from "@wrongstack/core/utils";
+import { startSharedHeapWatchdog, wstackGlobalRoot } from "@wrongstack/core/utils";
 var DEFAULT_HOST = "127.0.0.1";
 var DEFAULT_PORT = 7788;
 var mailboxServeCmd = async (args, deps) => {
@@ -220,6 +220,41 @@ This usually means no port is available (extremely rare). Retry or pick an expli
     }
   });
   writeStartupInfo(deps, { host, port: boundPort, projectDir, tokenPath: acquireResult.tokenPath });
+  const stopMemoryWatchdog = startSharedHeapWatchdog({
+    collectStats: () => {
+      const hqQueue = hqConnection?.getPublisher()?.getQueueStats();
+      const hqSnapshot = mailbox.getHqSnapshotStats();
+      const kanbanSync = hqConnection?.getKanbanSyncStats();
+      return {
+        surface: "mailbox-http-server",
+        projectId,
+        boundPort,
+        ...hqQueue ? {
+          hqQueueEntries: hqQueue.entries,
+          hqQueueBytes: hqQueue.bytes,
+          hqQueueMaxBytes: hqQueue.maxBytes,
+          hqQueueDroppedFrames: hqQueue.droppedFrames,
+          hqQueueDroppedBytes: hqQueue.droppedBytes,
+          hqQueueCoalescedFrames: hqQueue.coalescedFrames,
+          hqQueueCoalescedBytes: hqQueue.coalescedBytes
+        } : {},
+        hqSnapshotInFlight: hqSnapshot.inFlight ? 1 : 0,
+        hqSnapshotPending: hqSnapshot.pending ? 1 : 0,
+        hqSnapshotTimerScheduled: hqSnapshot.timerScheduled ? 1 : 0,
+        hqEventInFlight: hqSnapshot.eventInFlight ? 1 : 0,
+        hqEventPending: hqSnapshot.pendingEvents,
+        hqEventCoalesced: hqSnapshot.coalescedEvents,
+        hqEventDropped: hqSnapshot.droppedEvents,
+        kanbanSyncActive: kanbanSync?.localPublishActive ? 1 : 0,
+        kanbanSyncPendingBoards: kanbanSync?.pendingBoardIds ?? 0,
+        kanbanSyncFullRescanPending: kanbanSync?.fullRescanPending ? 1 : 0,
+        kanbanSyncRemoteApplyQueued: kanbanSync?.remoteApplyQueued ? 1 : 0,
+        kanbanSyncPendingRemoteBoards: kanbanSync?.pendingRemoteBoards ?? 0,
+        kanbanSyncPublishRuns: kanbanSync?.localPublishRuns ?? 0,
+        kanbanSyncCoalescedRefreshes: kanbanSync?.coalescedLocalRefreshes ?? 0
+      };
+    }
+  });
   await new Promise((resolve) => {
     let shuttingDown = false;
     const shutdown = async (sig) => {
@@ -227,7 +262,9 @@ This usually means no port is available (extremely rare). Retry or pick an expli
       shuttingDown = true;
       clearInterval(rateLimitCleanup);
       hqConnection?.stop();
-      console.log(JSON.stringify({ event: "mailbox_serve_stopping", signal: sig, host, port: boundPort }));
+      console.log(
+        JSON.stringify({ event: "mailbox_serve_stopping", signal: sig, host, port: boundPort })
+      );
       router.close();
       await new Promise((closeResolve) => server.close(() => closeResolve()));
       await mailbox.close().catch((err) => {
@@ -235,6 +272,7 @@ This usually means no port is available (extremely rare). Retry or pick an expli
 `);
       });
       await release(projectDir, finalized.generation);
+      await stopMemoryWatchdog();
       resolve();
     };
     process.on("SIGINT", shutdown);
@@ -262,7 +300,9 @@ function writeStartupInfo(deps, info) {
   deps.renderer.write("Routes:\n");
   deps.renderer.write("  POST /mailbox/send              send a message\n");
   deps.renderer.write("  POST /mailbox/query             query messages\n");
-  deps.renderer.write("  POST /mailbox/check             check inbox and optionally mark read/completed\n");
+  deps.renderer.write(
+    "  POST /mailbox/check             check inbox and optionally mark read/completed\n"
+  );
   deps.renderer.write("  POST /mailbox/ack               acknowledge one message\n");
   deps.renderer.write("  POST /mailbox/ack-many          acknowledge many in one batch\n");
   deps.renderer.write("  POST /mailbox/unread-count      count unread messages for an agent\n");
@@ -289,8 +329,10 @@ function printHelp(deps) {
 `);
   deps.renderer.write("\n");
   deps.renderer.write("Flags:\n");
-  deps.renderer.write(`  --host <ip>         Bind host (default ${DEFAULT_HOST}). Exposing beyond
-`);
+  deps.renderer.write(
+    `  --host <ip>         Bind host (default ${DEFAULT_HOST}). Exposing beyond
+`
+  );
   deps.renderer.write("                     loopback requires network-layer protection.\n");
   deps.renderer.write(`  --port <n>          Bind port (default ${DEFAULT_PORT}).
 `);
@@ -299,4 +341,4 @@ function printHelp(deps) {
 export {
   mailboxServeCmd
 };
-//# sourceMappingURL=mailbox-serve-2UWHEN3M.js.map
+//# sourceMappingURL=mailbox-serve-DBOOOOWZ.js.map

package/dist/{sdd-runtime-JG4EEKL6.js → sdd-runtime-AIJCJGWC.js}

@@ -23,7 +23,7 @@ import {
   trySaveImplementationPlan,
   trySaveSpecFromAIOutput,
   trySaveTasksFromAIOutput
-} from "./chunk-BQCAJ7FI.js";
+} from "./chunk-XTIXVJXP.js";
 import "./chunk-7OCVIDC7.js";
 export {
   SDDState,
@@ -51,4 +51,4 @@ export {
   trySaveSpecFromAIOutput,
   trySaveTasksFromAIOutput
 };
-//# sourceMappingURL=sdd-runtime-JG4EEKL6.js.map
+//# sourceMappingURL=sdd-runtime-AIJCJGWC.js.map

package/dist/services/sdd/state.d.ts

@@ -1,5 +1,5 @@
 import type { Context } from '@wrongstack/core/agent';
-import { type AISpecBuilder, type AISpecPhase, type DefaultTaskStore, SpecVersioning, type TaskTracker } from '@wrongstack/sdd';
+import { type AISpecBuilder, type AISpecPhase, SpecVersioning, type TaskStore, type TaskTracker } from '@wrongstack/sdd';
 /** Key used to store SDD session state in ctx.meta for session isolation. */
 export declare const SDD_META_KEY = "sdd.state";
 /** Single shared SDD session state for the process lifetime. */
@@ -13,8 +13,8 @@ export declare class SDDState {
     private versioning;
     getBuilder(): AISpecBuilder | null;
     setBuilder(b: AISpecBuilder | null): void;
-    getTaskStore(): DefaultTaskStore | null;
-    setTaskStore(s: DefaultTaskStore | null): void;
+    getTaskStore(): TaskStore | null;
+    setTaskStore(s: TaskStore | null): void;
     getTaskTracker(): TaskTracker | null;
     setTaskTracker(t: TaskTracker | null): void;
     getTaskGraphId(): string | null;

package/dist/settings-menu.d.ts

@@ -1,5 +1,5 @@
-import { type SecretVault } from '@wrongstack/core/types';
 import type { ConfigStore } from '@wrongstack/core/types';
+import { type SecretVault } from '@wrongstack/core/types';
 /** Configuration and storage dependencies needed to persist a setting.
  *  This is safe to call from non-interactive surfaces such as the TUI,
  *  headless runs, and the arg-driven `/settings` slash command. */

package/dist/slash-commands/command-context.d.ts

@@ -15,6 +15,8 @@ export interface SlashCommandContext {
     /** Resolved path helpers — use instead of constructing paths inline.
      *  Optional for unit tests that don't exercise commands requiring paths. */
     paths?: WstackPaths | undefined;
+    /** Explicit legacy SDD session codec for compatibility tests/old hosts. */
+    sddSessionTransport?: 'kanban' | 'legacy-file' | undefined;
     compactor?: {
         compact(ctx: Context, opts?: {
             aggressive?: boolean | undefined;

package/dist/slash-commands/fallback.d.ts

@@ -14,6 +14,8 @@ import type { SlashCommandContext } from './command-context.js';
  *   remove <n|ref>      Remove by 1-based index or by exact reference.
  *   clear               Empty the explicit chain (smart default takes over
  *                       again when `auto` is on).
+ *   bridge set <ref>    Set the single continuity route tried before the chain.
+ *   bridge clear        Disable the continuity bridge.
  *   auto on|off         Toggle the smart default (config.fallbackAuto).
  */
 export declare function buildFallbackCommand(opts: SlashCommandContext): SlashCommand;

package/dist/slash-commands/goal-refiner.d.ts

@@ -1,5 +1,5 @@
-import type { Config, Provider } from '@wrongstack/core/types';
 import type { OneShotOrchestrator } from '@wrongstack/core/execution';
+import type { Config, Provider } from '@wrongstack/core/types';
 /**
  * Result of refining a user's raw goal into a clear, actionable mission.
  */

package/dist/slash-commands/goal.d.ts

@@ -5,7 +5,7 @@ import type { SlashCommandContext } from './command-context.js';
  *
  * Goal turns a free-text goal into a real, LLM-driven build: the host
  * plans phases (each holding many todos), persists the phase-graph as
- * per-project JSON under ~/.wrongstack/projects/<hash>/goal, and drives
+ * per-project JSON under ~/.wrongstack/projects/<slug>/autophase, and drives
  * the orchestrator — one subagent per task — in the background. Live progress
  * is shown in the TUI PhaseMonitor.
  */

package/dist/subcommands/handlers/acp-connection-gate.d.ts

@@ -0,0 +1,20 @@
+import type { IncomingMessage } from 'node:http';
+export interface AcpGateVerdict {
+    ok: boolean;
+    /** WebSocket close code to send when `ok` is false. */
+    code?: number;
+    reason?: string;
+}
+export interface AcpConnectionGateOptions {
+    host: string;
+    port: number;
+    token: string;
+    /** Concurrent connection ceiling. */
+    maxConnections?: number;
+}
+export interface AcpConnectionGate {
+    /** Decide whether to admit a handshake. Does not mutate connection count. */
+    check(req: Pick<IncomingMessage, 'headers' | 'url'>, liveConnections: number): AcpGateVerdict;
+}
+export declare function createAcpConnectionGate(opts: AcpConnectionGateOptions): AcpConnectionGate;
+//# sourceMappingURL=acp-connection-gate.d.ts.map

package/dist/subcommands/handlers/governance.d.ts

@@ -0,0 +1,8 @@
+import type { GovernanceDaemonOperatorStatusReadResult } from '@wrongstack/runtime/governance-bootstrap';
+import type { SubcommandDeps, SubcommandHandler } from '../contracts.js';
+export interface GovernanceStatusCommandDependencies {
+    readonly readStatus: (projectRoot: string) => Promise<GovernanceDaemonOperatorStatusReadResult>;
+}
+export declare function runGovernanceStatusCommand(args: string[], deps: SubcommandDeps, dependencies?: GovernanceStatusCommandDependencies): Promise<number>;
+export declare const governanceCmd: SubcommandHandler;
+//# sourceMappingURL=governance.d.ts.map

package/dist/{update-YC4TYW2Y.js → update-MV6TUACD.js}

@@ -3,8 +3,8 @@ import {
   detectUpdatePackageName,
   runUpdateCommand,
   updateCmd
-} from "./chunk-AXVZMEWG.js";
-import "./chunk-VJUEZZYB.js";
+} from "./chunk-I5MEUFDI.js";
+import "./chunk-U3SS4NRH.js";
 import "./chunk-F4PEGAJZ.js";
 import "./chunk-7OCVIDC7.js";
 export {
@@ -13,4 +13,4 @@ export {
   runUpdateCommand,
   updateCmd
 };
-//# sourceMappingURL=update-YC4TYW2Y.js.map
+//# sourceMappingURL=update-MV6TUACD.js.map

package/dist/utils/win32-cmd.d.ts

@@ -1,7 +1,10 @@
-export interface Win32CmdShimInvocation {
-    command: string;
-    args: string[];
-    windowsVerbatimArguments: true;
-}
-export declare function buildWin32CmdShimInvocation(command: string, args?: readonly string[]): Win32CmdShimInvocation;
+/**
+ * Re-export of the canonical Windows `.cmd`/`.bat` shim builder.
+ *
+ * This file previously held its own copy, byte-identical to the one in
+ * `@wrongstack/acp`, while `@wrongstack/mcp` used a weaker quoting helper that
+ * left metacharacter-bearing arguments unquoted under `shell: true`. Keeping one
+ * implementation in core removes the divergence risk (WS-004 / CMDI-005).
+ */
+export { buildWin32CmdShimInvocation, type Win32CmdShimInvocation, } from '@wrongstack/core/utils';
 //# sourceMappingURL=win32-cmd.d.ts.map

package/dist/{version-help-DROHZRW6.js → version-help-ASKQYXDJ.js}

@@ -1,11 +1,11 @@
 import {
   helpCmd,
   versionCmd
-} from "./chunk-ABXK4VVY.js";
+} from "./chunk-ARWGQUB3.js";
 import "./chunk-XJXDOF63.js";
 import "./chunk-7OCVIDC7.js";
 export {
   helpCmd,
   versionCmd
 };
-//# sourceMappingURL=version-help-DROHZRW6.js.map
+//# sourceMappingURL=version-help-ASKQYXDJ.js.map

package/dist/webui-server/kanban-host-adapter.d.ts

@@ -1,7 +1,7 @@
 import type { Agent } from '@wrongstack/core/agent';
 import type { AgentFactory, BrainArbiter } from '@wrongstack/core/coordination';
-import type { Config, SkillLoader } from '@wrongstack/core/types';
 import type { EventBus } from '@wrongstack/core/kernel';
+import type { Config, SkillLoader } from '@wrongstack/core/types';
 import { type GoalWebSocketHandler, type KanbanHostRouteHandlers, type KanbanRunMirror, type WSServerMessage } from '@wrongstack/webui-server';
 import type { WebSocket } from 'ws';
 import type { KanbanSupervisor } from './kanban-supervisor.js';

package/dist/webui-server/session-start-payload.d.ts

@@ -1,5 +1,8 @@
 import type { Context } from '@wrongstack/core/agent';
 import type { ModelsRegistry } from '@wrongstack/core/types';
+import type { UpdateInfo } from '../update-check.js';
+/** @see UpdateInfo in ../update-check.ts for the canonical shape. */
+export type BootUpdateInfo = UpdateInfo;
 /** The slice of `CliWebUIOptions` the payload builder actually reads. */
 export interface SessionStartPayloadDeps {
     agent: {
@@ -12,6 +15,7 @@ export interface SessionStartPayloadDeps {
     statusTracker?: import('@wrongstack/core/coordination').ProviderModelStatusTracker | undefined;
     modeId?: string | undefined;
     projectRoot?: string | undefined;
+    updateInfo?: BootUpdateInfo | undefined;
 }
 export type BuildSessionStartPayload = (overrides?: Record<string, unknown>, needsSetup?: boolean) => Promise<Record<string, unknown>>;
 /**