@wrongstack/cli 0.297.0 → 0.298.1

package/dist/index.js

@@ -6,7 +6,7 @@ import {
   makePromptDelegate,
   renderAgentsTemplate,
   renderDiff
-} from "./chunk-IHBYBYGA.js";
+} from "./chunk-A6Q5KGLV.js";
 import {
   theme
 } from "./chunk-QD544J2B.js";
@@ -16,21 +16,21 @@ import {
 import {
   helpCmd,
   versionCmd
-} from "./chunk-ABXK4VVY.js";
+} from "./chunk-ARWGQUB3.js";
 import {
   discoverAndMergeProviders
 } from "./chunk-TGDHN4LM.js";
 import {
   DEFAULT_PORT
-} from "./chunk-7JABKXET.js";
+} from "./chunk-C5GH4YBL.js";
 import "./chunk-Q5GTM25S.js";
 import {
   CLI_VERSION
 } from "./chunk-XJXDOF63.js";
 import {
   runUpdateCommand
-} from "./chunk-AXVZMEWG.js";
-import "./chunk-VJUEZZYB.js";
+} from "./chunk-I5MEUFDI.js";
+import "./chunk-U3SS4NRH.js";
 import "./chunk-F4PEGAJZ.js";
 import {
   parseArgs,
@@ -54,7 +54,7 @@ import {
 import "./chunk-7OCVIDC7.js";
 
 // src/cli-entry-point.ts
-import { writeErr } from "@wrongstack/core/utils";
+import { installCrashShield, writeErr } from "@wrongstack/core/utils";
 var SQLITE_WARNING_RE = /sqlite is an experimental feature/i;
 function installSqliteWarningFilter() {
   const originalEmit = process.emitWarning.bind(process);
@@ -91,6 +91,7 @@ function installBrokenPipeHandlers(options = {}) {
 function runAsMain(mainFn) {
   if (!isMain) return;
   installBrokenPipeHandlers();
+  installCrashShield();
   mainFn(process.argv.slice(2)).then(
     (c) => {
       process.exitCode = c;
@@ -1494,10 +1495,10 @@ function compactSingleLine(text) {
 
 // src/subcommands/index.ts
 var loaders = {
-  acp: async () => (await import("./acp-A5OSIU2P.js")).acpCmd,
+  acp: async () => (await import("./acp-S4LZQB66.js")).acpCmd,
   init: async () => (await import("./init-E2NDDOHI.js")).initCmd,
-  auth: async () => (await import("./auth-CJWQJVRH.js")).authCmd,
-  update: async () => (await import("./update-YC4TYW2Y.js")).updateCmd,
+  auth: async () => (await import("./auth-NLLGEYQR.js")).authCmd,
+  update: async () => (await import("./update-MV6TUACD.js")).updateCmd,
   sessions: async () => (await import("./sessions-config-NLCMK3BY.js")).sessionsCmd,
   config: async () => (await import("./sessions-config-NLCMK3BY.js")).configCmd,
   rewind: async () => (await import("./rewind-EJMVFVLS.js")).rewindCmd,
@@ -1508,23 +1509,24 @@ var loaders = {
   providers: async () => (await import("./providers-models-GDELBHZK.js")).providersCmd,
   models: async () => (await import("./providers-models-GDELBHZK.js")).modelsCmd,
   mcp: async () => (await import("./mcp-CYLPUEHC.js")).mcpCmd,
-  plugin: async () => (await import("./plugin-usage-OU6X6LM3.js")).pluginCmd,
-  plugins: async () => (await import("./plugin-usage-OU6X6LM3.js")).pluginCmd,
+  plugin: async () => (await import("./plugin-usage-VTL7ZTVC.js")).pluginCmd,
+  plugins: async () => (await import("./plugin-usage-VTL7ZTVC.js")).pluginCmd,
   diag: async () => (await import("./diag-doctor-OQ3AA63O.js")).diagCmd,
   doctor: async () => (await import("./diag-doctor-OQ3AA63O.js")).doctorCmd,
   export: async () => (await import("./export-TPORYVRZ.js")).exportCmd,
-  usage: async () => (await import("./plugin-usage-OU6X6LM3.js")).usageCmd,
-  version: async () => (await import("./version-help-DROHZRW6.js")).versionCmd,
-  help: async () => (await import("./version-help-DROHZRW6.js")).helpCmd,
+  usage: async () => (await import("./plugin-usage-VTL7ZTVC.js")).usageCmd,
+  version: async () => (await import("./version-help-ASKQYXDJ.js")).versionCmd,
+  help: async () => (await import("./version-help-ASKQYXDJ.js")).helpCmd,
   projects: async () => (await import("./projects-XE76NFNZ.js")).projectsCmd,
   modeldiag: async () => (await import("./modeldiag-HENYJ4N7.js")).modeldiagCmd,
   quick: async () => (await import("./quick-VIO2BEHS.js")).quickCmd,
   bench: async () => (await import("./bench-7ZDWSNEF.js")).benchCmd,
   chronicle: async () => (await import("./chronicle-QQEQFSSE.js")).chronicleCmd,
-  hq: async () => (await import("./hq-GBPGXIR5.js")).hqCmd,
+  hq: async () => (await import("./hq-WO6CLUSI.js")).hqCmd,
   mailbox: async () => (await import("./mailbox-serve-DBOOOOWZ.js")).mailboxServeCmd,
   permissions: async () => (await import("./permissions-FNYLZIL4.js")).permissionsCmd,
-  project: async () => (await import("./project-BLQ3ALVL.js")).projectCmd
+  project: async () => (await import("./project-BLQ3ALVL.js")).projectCmd,
+  governance: async () => (await import("./governance-V2Z42RBE.js")).governanceCmd
 };
 var subcommands = Object.fromEntries(
   Object.entries(loaders).map(([name, load]) => [
@@ -2157,7 +2159,7 @@ async function isPortInUse(host, port) {
 }
 async function handleHqShortCircuit(flags) {
   if (flags["hq"] !== true) return null;
-  const { startHqServer } = await import("./hq-server-YQUUMTPU.js");
+  const { startHqServer } = await import("./hq-server-6TSAORAC.js");
   const tunnelRequested = flags["tunnel"] === true;
   const host = typeof flags["host"] === "string" ? flags["host"] : tunnelRequested ? "127.0.0.1" : HQ_CLI_DEFAULT_HOST;
   if (tunnelRequested && !isLoopbackHost(host)) {
@@ -2316,9 +2318,9 @@ ${color8.green("Cloudflare Quick Tunnel ready:")} ${browserUrl}
 }
 
 // src/boot/launch-menu.ts
-import { atomicWrite as atomicWrite3, color as color9, isStdinTTY as isStdinTTY2, setRawMode as setRawMode2 } from "@wrongstack/core/utils";
-import { HQ_CLI_DEFAULT_HOST as HQ_CLI_DEFAULT_HOST2 } from "@wrongstack/core/hq";
 import * as fs8 from "node:fs/promises";
+import { HQ_CLI_DEFAULT_HOST as HQ_CLI_DEFAULT_HOST2 } from "@wrongstack/core/hq";
+import { atomicWrite as atomicWrite3, color as color9, isStdinTTY as isStdinTTY2, setRawMode as setRawMode2 } from "@wrongstack/core/utils";
 
 // src/boot/launch-banner.ts
 var STACK_ORANGE = { r: 253, g: 159, b: 2 };
@@ -2443,10 +2445,34 @@ function defaultHostFor(mode) {
   return mode === "hq" ? HQ_DEFAULT_HOST : DEFAULT_HOST;
 }
 var MODE_OPTIONS = [
-  { key: 1, mode: "tui-repl", label: "TUI / REPL", hint: "interactive terminal (default)", icon: "\u2328" },
-  { key: 2, mode: "webui", label: "WebUI", hint: `browser-based project UI (port ${DEFAULT_PORTS.webui})`, icon: "\u{1F310}" },
-  { key: 3, mode: "simpleui", label: "SimpleUI", hint: `lightweight browser UI (port ${DEFAULT_PORTS.simpleui})`, icon: "\u{1F4C4}" },
-  { key: 4, mode: "hq", label: "HQ", hint: `project-independent dashboard (port ${DEFAULT_PORT})`, icon: "\u{1F4CA}" }
+  {
+    key: 1,
+    mode: "tui-repl",
+    label: "TUI / REPL",
+    hint: "interactive terminal (default)",
+    icon: "\u2328"
+  },
+  {
+    key: 2,
+    mode: "webui",
+    label: "WebUI",
+    hint: `browser-based project UI (port ${DEFAULT_PORTS.webui})`,
+    icon: "\u{1F310}"
+  },
+  {
+    key: 3,
+    mode: "simpleui",
+    label: "SimpleUI",
+    hint: `lightweight browser UI (port ${DEFAULT_PORTS.simpleui})`,
+    icon: "\u{1F4C4}"
+  },
+  {
+    key: 4,
+    mode: "hq",
+    label: "HQ",
+    hint: `project-independent dashboard (port ${DEFAULT_PORT})`,
+    icon: "\u{1F4CA}"
+  }
 ];
 var MENU_TIMEOUT_MS = 8e3;
 var SUMMARY_TIMEOUT_MS = 5e3;
@@ -2478,6 +2504,7 @@ var KNOWN_SUBCOMMANDS = /* @__PURE__ */ new Set([
   "help",
   "provider",
   "project",
+  "governance",
   "session",
   "sessions",
   "replay",
@@ -2620,6 +2647,7 @@ async function promptModeArrow(deps) {
     const settle = (result, finalLine) => {
       if (settled) return;
       settled = true;
+      stopCountdown();
       stopInput();
       if (drawn > 0) out(`\x1B[${drawn}A`);
       out("\x1B[0J");
@@ -3121,7 +3149,7 @@ async function initializeCli(argv) {
 async function main(argv) {
   const cliCtx = await initializeCli(argv);
   if (typeof cliCtx === "number") return cliCtx;
-  const { runInteractive } = await import("./cli-main-GOY5YGVL.js");
+  const { runInteractive } = await import("./cli-main-7QLL2PY6.js");
   return runInteractive(cliCtx);
 }
 

package/dist/live-settings-input.d.ts

@@ -47,7 +47,7 @@ export interface LiveSettingsInput {
     breakerEnabled?: boolean | undefined;
     /** Auto kill/reset delay (ms) when the breaker trips. 0 = manual recovery. */
     breakerAutoKillResetMs?: number | undefined;
-    /** TUI statusline density. Defaults to detailed when unset. */
+    /** TUI statusline density. Defaults to minimum when unset. */
     statuslineMode?: 'minimum' | 'detailed' | undefined;
     /** Single word shown in the TUI rainbow working-state chip. */
     thinkingWord?: string | undefined;
@@ -63,8 +63,9 @@ export interface LiveSettingsInput {
     cacheTtl?: 'default' | '5m' | '1h' | undefined;
     /** Show "Model Reasoning" blocks in chat history. Default: true. */
     showModelReasoning?: boolean | undefined;
-    /** Optionally show the persistent AGENT SWARM and todo mission queue panel; defaults to true at the storage layer. */
-    showAgentSwarmPanel?: boolean | undefined;
+    /** Agent swarm panel placement: 'bottom' (lower region), 'sidebar' (right sidebar), or 'off' (hidden).
+     * Backward-compat: legacy boolean values are coerced by the TUI settings adapter. Default: 'bottom'. */
+    showAgentSwarmPanel?: 'bottom' | 'sidebar' | 'off' | boolean | undefined;
     /** Show SAGE Memory Inject blocks in tool results. Default: false. */
     showSageMemoryInject?: boolean | undefined;
     /**

package/dist/plugin-management.d.ts

@@ -1,12 +1,7 @@
 import type { Config, PluginConfig, PluginManagerConfig } from '@wrongstack/core/types';
-export interface PluginAuditEntry {
-    name: string;
-    risk: 'low' | 'medium' | 'high';
-    summary: string;
-    defaultState: 'active' | 'inactive';
-    canDisable: boolean;
-}
-export declare const PLUGIN_AUDIT_ENTRIES: readonly PluginAuditEntry[];
+import { PLUGIN_AUDIT_ENTRIES, type PluginAuditEntry } from '@wrongstack/plugins/plugin-audit-catalog';
+export { PLUGIN_AUDIT_ENTRIES };
+export type { PluginAuditEntry };
 export declare const OFFICIAL_PLUGINS: readonly [{
     readonly alias: 'telegram';
     readonly specifier: '@wrongstack/telegram';

package/dist/{plugin-usage-OU6X6LM3.js → plugin-usage-VTL7ZTVC.js}

@@ -1,6 +1,6 @@
 import {
   runPluginManagementCommand
-} from "./chunk-XWEGWYDU.js";
+} from "./chunk-PEKUKUCH.js";
 import {
   activeProfileConfigPath
 } from "./chunk-DPJZQCVP.js";
@@ -37,4 +37,4 @@ export {
   pluginCmd,
   usageCmd
 };
-//# sourceMappingURL=plugin-usage-OU6X6LM3.js.map
+//# sourceMappingURL=plugin-usage-VTL7ZTVC.js.map

package/dist/{plugins-4LJ5IUBI.js → plugins-ETY6W3DC.js}

@@ -7,8 +7,8 @@ import {
   pluginNameFromSpec,
   setupPlugins,
   warnIfDeprecatedPluginName
-} from "./chunk-QUNHS6O3.js";
-import "./chunk-XWEGWYDU.js";
+} from "./chunk-4U3DMA2Y.js";
+import "./chunk-PEKUKUCH.js";
 import "./chunk-TYO2OVAD.js";
 import "./chunk-7OCVIDC7.js";
 export {
@@ -21,4 +21,4 @@ export {
   setupPlugins,
   warnIfDeprecatedPluginName
 };
-//# sourceMappingURL=plugins-4LJ5IUBI.js.map
+//# sourceMappingURL=plugins-ETY6W3DC.js.map

package/dist/settings-menu.d.ts

@@ -1,5 +1,5 @@
-import { type SecretVault } from '@wrongstack/core/types';
 import type { ConfigStore } from '@wrongstack/core/types';
+import { type SecretVault } from '@wrongstack/core/types';
 /** Configuration and storage dependencies needed to persist a setting.
  *  This is safe to call from non-interactive surfaces such as the TUI,
  *  headless runs, and the arg-driven `/settings` slash command. */

package/dist/slash-commands/fallback.d.ts

@@ -14,6 +14,8 @@ import type { SlashCommandContext } from './command-context.js';
  *   remove <n|ref>      Remove by 1-based index or by exact reference.
  *   clear               Empty the explicit chain (smart default takes over
  *                       again when `auto` is on).
+ *   bridge set <ref>    Set the single continuity route tried before the chain.
+ *   bridge clear        Disable the continuity bridge.
  *   auto on|off         Toggle the smart default (config.fallbackAuto).
  */
 export declare function buildFallbackCommand(opts: SlashCommandContext): SlashCommand;

package/dist/slash-commands/goal-refiner.d.ts

@@ -1,5 +1,5 @@
-import type { Config, Provider } from '@wrongstack/core/types';
 import type { OneShotOrchestrator } from '@wrongstack/core/execution';
+import type { Config, Provider } from '@wrongstack/core/types';
 /**
  * Result of refining a user's raw goal into a clear, actionable mission.
  */

package/dist/subcommands/handlers/acp-connection-gate.d.ts

@@ -0,0 +1,20 @@
+import type { IncomingMessage } from 'node:http';
+export interface AcpGateVerdict {
+    ok: boolean;
+    /** WebSocket close code to send when `ok` is false. */
+    code?: number;
+    reason?: string;
+}
+export interface AcpConnectionGateOptions {
+    host: string;
+    port: number;
+    token: string;
+    /** Concurrent connection ceiling. */
+    maxConnections?: number;
+}
+export interface AcpConnectionGate {
+    /** Decide whether to admit a handshake. Does not mutate connection count. */
+    check(req: Pick<IncomingMessage, 'headers' | 'url'>, liveConnections: number): AcpGateVerdict;
+}
+export declare function createAcpConnectionGate(opts: AcpConnectionGateOptions): AcpConnectionGate;
+//# sourceMappingURL=acp-connection-gate.d.ts.map

package/dist/subcommands/handlers/governance.d.ts

@@ -0,0 +1,8 @@
+import type { GovernanceDaemonOperatorStatusReadResult } from '@wrongstack/runtime/governance-bootstrap';
+import type { SubcommandDeps, SubcommandHandler } from '../contracts.js';
+export interface GovernanceStatusCommandDependencies {
+    readonly readStatus: (projectRoot: string) => Promise<GovernanceDaemonOperatorStatusReadResult>;
+}
+export declare function runGovernanceStatusCommand(args: string[], deps: SubcommandDeps, dependencies?: GovernanceStatusCommandDependencies): Promise<number>;
+export declare const governanceCmd: SubcommandHandler;
+//# sourceMappingURL=governance.d.ts.map

package/dist/{update-YC4TYW2Y.js → update-MV6TUACD.js}

@@ -3,8 +3,8 @@ import {
   detectUpdatePackageName,
   runUpdateCommand,
   updateCmd
-} from "./chunk-AXVZMEWG.js";
-import "./chunk-VJUEZZYB.js";
+} from "./chunk-I5MEUFDI.js";
+import "./chunk-U3SS4NRH.js";
 import "./chunk-F4PEGAJZ.js";
 import "./chunk-7OCVIDC7.js";
 export {
@@ -13,4 +13,4 @@ export {
   runUpdateCommand,
   updateCmd
 };
-//# sourceMappingURL=update-YC4TYW2Y.js.map
+//# sourceMappingURL=update-MV6TUACD.js.map

package/dist/utils/win32-cmd.d.ts

@@ -1,7 +1,10 @@
-export interface Win32CmdShimInvocation {
-    command: string;
-    args: string[];
-    windowsVerbatimArguments: true;
-}
-export declare function buildWin32CmdShimInvocation(command: string, args?: readonly string[]): Win32CmdShimInvocation;
+/**
+ * Re-export of the canonical Windows `.cmd`/`.bat` shim builder.
+ *
+ * This file previously held its own copy, byte-identical to the one in
+ * `@wrongstack/acp`, while `@wrongstack/mcp` used a weaker quoting helper that
+ * left metacharacter-bearing arguments unquoted under `shell: true`. Keeping one
+ * implementation in core removes the divergence risk (WS-004 / CMDI-005).
+ */
+export { buildWin32CmdShimInvocation, type Win32CmdShimInvocation, } from '@wrongstack/core/utils';
 //# sourceMappingURL=win32-cmd.d.ts.map

package/dist/{version-help-DROHZRW6.js → version-help-ASKQYXDJ.js}

@@ -1,11 +1,11 @@
 import {
   helpCmd,
   versionCmd
-} from "./chunk-ABXK4VVY.js";
+} from "./chunk-ARWGQUB3.js";
 import "./chunk-XJXDOF63.js";
 import "./chunk-7OCVIDC7.js";
 export {
   helpCmd,
   versionCmd
 };
-//# sourceMappingURL=version-help-DROHZRW6.js.map
+//# sourceMappingURL=version-help-ASKQYXDJ.js.map

package/dist/{webui-server-XKFUOKMJ.js → webui-server-PCLSXX6L.js}

@@ -841,7 +841,7 @@ async function runWebUI(opts) {
   const wsPort = httpPort;
   const globalRoot = opts.globalConfigPath ? path5.dirname(opts.globalConfigPath) : wstackGlobalRoot();
   const profileConfigPath = opts.profileConfigPath ?? opts.globalConfigPath ?? path5.join(globalRoot, "config.json");
-  const rateLimitMax = Number.parseInt(process.env["WEBUI_RATE_LIMIT"] ?? "0", 10);
+  const rateLimitMax = Number.parseInt(process.env["WEBUI_RATE_LIMIT"] ?? "600", 10);
   const clients = /* @__PURE__ */ new Map();
   const pendingConfirms = /* @__PURE__ */ new Map();
   const secretScrubber = new DefaultSecretScrubber();
@@ -1127,18 +1127,25 @@ async function runWebUI(opts) {
       // not inside the profile directory — resolve via global root to stay correct.
       getVault(opts.globalConfigPath),
       (snapshot) => {
+        const hadFallbackBridge = Boolean(opts.appConfig?.fallbackBridge?.trim());
         try {
           if (opts.appConfig && !Object.isFrozen(opts.appConfig)) {
             opts.appConfig.providers = snapshot.providers;
             if (snapshot.uiLocale) opts.appConfig.uiLocale = snapshot.uiLocale;
+            if (snapshot.fallbackBridge !== void 0) {
+              opts.appConfig.fallbackBridge = snapshot.fallbackBridge;
+            } else {
+              delete opts.appConfig.fallbackBridge;
+            }
           }
         } catch {
         }
-        const routingChanged = snapshot.fallbackModels !== void 0 || snapshot.fallbackProfiles !== void 0 || snapshot.favoriteModels !== void 0 || snapshot.favoriteModelsOnly !== void 0 || snapshot.modelMatrix !== void 0 || snapshot.fallbackAuto !== void 0;
+        const routingChanged = snapshot.fallbackModels !== void 0 || snapshot.fallbackBridge !== void 0 || hadFallbackBridge || snapshot.fallbackProfiles !== void 0 || snapshot.favoriteModels !== void 0 || snapshot.favoriteModelsOnly !== void 0 || snapshot.modelMatrix !== void 0 || snapshot.fallbackAuto !== void 0;
         if (routingChanged) {
           const configStore = opts.agent.container?.safeResolve?.(TOKENS.ConfigStore);
           configStore?.update({
             ...snapshot.fallbackModels !== void 0 ? { fallbackModels: snapshot.fallbackModels } : {},
+            fallbackBridge: snapshot.fallbackBridge ?? "",
             ...snapshot.fallbackProfiles !== void 0 ? { fallbackProfiles: snapshot.fallbackProfiles } : {},
             ...snapshot.favoriteModels !== void 0 ? { favoriteModels: snapshot.favoriteModels } : {},
             ...snapshot.favoriteModelsOnly !== void 0 ? { favoriteModelsOnly: snapshot.favoriteModelsOnly } : {},
@@ -1480,4 +1487,4 @@ async function runWebUI(opts) {
 export {
   runWebUI
 };
-//# sourceMappingURL=webui-server-XKFUOKMJ.js.map
+//# sourceMappingURL=webui-server-PCLSXX6L.js.map

package/dist/wiring/brain-and-orchestration.d.ts

@@ -58,6 +58,8 @@ export interface BrainOrchestrationDeps {
     modeId?: string | undefined;
     /** Shared provider/model status tracker for the Director. */
     statusTracker?: import('@wrongstack/core/coordination').ProviderModelStatusTracker | undefined;
+    /** Trusted governance hook for in-process Fleet tool pipelines. */
+    installToolBoundary?: ((pipelines: import('@wrongstack/core/agent').AgentPipelines) => void) | undefined;
 }
 export interface BrainOrchestrationResult {
     brain: ObservableBrainArbiter;

package/dist/wiring/provider-runtime-setup.d.ts

@@ -1,8 +1,8 @@
-import type { Config, Logger, ModelsRegistry, Provider, ProviderConfig, SecretVault } from '@wrongstack/core/types';
 import { type FallbackProfileManager } from '@wrongstack/core/agent';
-import type { EventBus } from '@wrongstack/core/kernel';
 import type { ProviderModelStatusTracker } from '@wrongstack/core/coordination';
+import type { EventBus } from '@wrongstack/core/kernel';
 import type { ProviderRegistry } from '@wrongstack/core/registry';
+import type { Config, Logger, ModelsRegistry, Provider, ProviderConfig, SecretVault } from '@wrongstack/core/types';
 import type { WstackPaths } from '@wrongstack/core/utils';
 export declare function serializeProviderRuntimeSnapshot(snapshot: unknown): string;
 type AnyObj = any;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/cli",
-  "version": "0.297.0",
+  "version": "0.298.1",
   "license": "MIT",
   "description": "WrongStack CLI — terminal AI coding agent with provider catalog from models.dev. Provides `wrongstack` and `wstack` binaries.",
   "keywords": [
@@ -37,36 +37,37 @@
   },
   "files": [
     "dist",
+    "!dist/**/*.map",
     "data"
   ],
   "dependencies": {
     "ws": "^8.21.1",
-    "@wrongstack/acp": "0.297.0",
-    "@wrongstack/runtime": "0.297.0",
-    "@wrongstack/mcp": "0.297.0",
-    "@wrongstack/kanban": "0.297.0",
-    "@wrongstack/plug-lsp": "0.297.0",
-    "@wrongstack/sdd": "0.297.0",
-    "@wrongstack/providers": "0.297.0",
-    "@wrongstack/simpleui": "0.297.0",
-    "@wrongstack/core": "0.297.0",
-    "@wrongstack/plugins": "0.297.0",
-    "@wrongstack/bench": "0.297.0",
-    "@wrongstack/techstack": "0.297.0",
-    "@wrongstack/security-scanner": "0.297.0",
-    "@wrongstack/tui": "0.297.0",
-    "@wrongstack/sage": "0.297.0",
-    "@wrongstack/webui": "0.297.0",
-    "@wrongstack/tools": "0.297.0",
-    "@wrongstack/webui-server": "0.297.0",
-    "@wrongstack/webui-hq": "0.297.0",
-    "@wrongstack/telegram": "0.297.0"
+    "@wrongstack/acp": "0.298.1",
+    "@wrongstack/mcp": "0.298.1",
+    "@wrongstack/bench": "0.298.1",
+    "@wrongstack/kanban": "0.298.1",
+    "@wrongstack/providers": "0.298.1",
+    "@wrongstack/plug-lsp": "0.298.1",
+    "@wrongstack/runtime": "0.298.1",
+    "@wrongstack/core": "0.298.1",
+    "@wrongstack/plugins": "0.298.1",
+    "@wrongstack/sdd": "0.298.1",
+    "@wrongstack/security-scanner": "0.298.1",
+    "@wrongstack/simpleui": "0.298.1",
+    "@wrongstack/techstack": "0.298.1",
+    "@wrongstack/sage": "0.298.1",
+    "@wrongstack/telegram": "0.298.1",
+    "@wrongstack/webui": "0.298.1",
+    "@wrongstack/webui-server": "0.298.1",
+    "@wrongstack/tools": "0.298.1",
+    "@wrongstack/tui": "0.298.1",
+    "@wrongstack/webui-hq": "0.298.1"
   },
   "optionalDependencies": {
-    "@wrongstack/desktop": "0.297.0"
+    "@wrongstack/desktop": "0.298.1"
   },
   "devDependencies": {
-    "@types/node": "^26.1.1",
+    "@types/node": "^26.1.2",
     "@types/ws": "^8.18.1",
     "jsdom": "^29.1.1",
     "typescript": "^7.0.2"