@wrongstack/cli 0.300.0 → 0.302.0

package/dist/{sessions-config-NLCMK3BY.js → sessions-config-XXN7267N.js}

@@ -1,12 +1,15 @@
+import {
+  restoreFlags
+} from "./chunk-CSAPOCBP.js";
 import {
   getHistoryEntry,
   listHistory,
   restoreFromHistory,
   restoreLast
-} from "./chunk-YWUPHRGB.js";
+} from "./chunk-263G3FMB.js";
 import {
   activeProfileConfigPath
-} from "./chunk-DPJZQCVP.js";
+} from "./chunk-YMXXOOFN.js";
 import "./chunk-7OCVIDC7.js";
 
 // src/subcommands/handlers/sessions-config.ts
@@ -233,6 +236,7 @@ Fleet Run: ${runId}
 
 // src/subcommands/handlers/sessions-config.ts
 var sessionsCmd = async (args, deps) => {
+  args = restoreFlags(args, deps, ["to", "id", "latest", "l"]);
   const sub = args[0];
   if (sub === "fleet") {
     return sessionsFleetCmd(args.slice(1), deps);
@@ -302,6 +306,7 @@ var sessionsCmd = async (args, deps) => {
   return 0;
 };
 var configCmd = async (args, deps) => {
+  args = restoreFlags(args, deps, ["id", "latest", "l"]);
   const sub = args[0];
   if (!sub || sub === "show") {
     deps.renderer.write(JSON.stringify(redactKeys(deps.config), null, 2) + "\n");
@@ -406,4 +411,4 @@ export {
   configCmd,
   sessionsCmd
 };
-//# sourceMappingURL=sessions-config-NLCMK3BY.js.map
+//# sourceMappingURL=sessions-config-XXN7267N.js.map

package/dist/subcommands/flags.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Re-attach the flags `parseArgs` stripped before a subcommand handler ran.
+ *
+ * The dispatcher (`boot.ts`) hands a handler only `positional.slice(1)`, while
+ * `parseArgs` has already pulled every `--flag` into `flags`. A handler that
+ * parses its own `args` therefore saw NONE of the flags it documents:
+ * `rewind --last 2` printed usage, `export --format json --out r.json` dumped
+ * markdown to stdout, `plugin add X --disabled` wrote it enabled, and
+ * `chronicle prune --days 7 --dry-run` performed a real 30-day purge.
+ *
+ * Re-injecting every flag at the dispatcher would be wrong: top-level switches
+ * (`--verbose`, `--yolo`, `--tui`) would land in the subcommand's argv too, and
+ * handlers with an "Unknown flag" branch — `export.ts` has one — would start
+ * rejecting valid invocations. So each handler declares the flags it owns and
+ * gets back exactly those.
+ *
+ * A spelling already present in `args` always wins: a directly-invoked handler
+ * (and anything the caller placed after `--`) keeps overriding.
+ */
+export declare function restoreFlags(args: string[], deps: {
+    flags?: Record<string, string | boolean> | undefined;
+}, names: readonly string[]): string[];
+//# sourceMappingURL=flags.d.ts.map

package/dist/terminal-format.d.ts

@@ -0,0 +1,15 @@
+export type TerminalTone = 'blue' | 'cyan' | 'green' | 'magenta' | 'muted' | 'success' | 'yellow';
+export interface TerminalStyleOptions {
+    readonly bold?: boolean;
+    /** Capability override for deterministic tests; production derives this from env/TTY. */
+    readonly enabled?: boolean;
+}
+/** Match the CLI banner's NO_COLOR/FORCE_COLOR/TTY precedence. */
+export declare function terminalFormattingEnabled(env?: NodeJS.ProcessEnv, isTty?: boolean): boolean;
+/** Add semantic color while preserving plain text when formatting is disabled. */
+export declare function terminalText(text: string, tone: TerminalTone, options?: TerminalStyleOptions): string;
+/** Render a colored OSC 8 hyperlink, falling back to the visible URL unchanged. */
+export declare function terminalLink(url: string, options?: TerminalStyleOptions & {
+    readonly tone?: TerminalTone;
+}): string;
+//# sourceMappingURL=terminal-format.d.ts.map

package/dist/{webui-server-G3EKFXLL.js → webui-server-NFNRGNNT.js}

@@ -7,6 +7,9 @@ import {
 import {
   startCliHqConnection
 } from "./chunk-JW75HY4F.js";
+import {
+  WEBUI_SESSION_CHILD_CAPABILITIES
+} from "./chunk-PFVVUH5B.js";
 import {
   loadConfigProviders,
   mutateConfigProviders
@@ -41,11 +44,12 @@ import {
   resolveAuthToken,
   SddBoardWebSocketHandler,
   SddWizardWebSocketHandler,
+  sendSerialized,
   SpecsWebSocketHandler,
   TerminalWebSocketHandler,
   WorktreeWebSocketHandler
 } from "@wrongstack/webui-server";
-import { WebSocket, WebSocketServer } from "ws";
+import { WebSocketServer } from "ws";
 
 // src/webui-server/client-registration.ts
 import { createWebuiClientPresence } from "@wrongstack/webui-server";
@@ -871,7 +875,7 @@ async function runWebUI(opts) {
   const surface = opts.surface ?? "webui";
   const surfaceDefaults = surface === "simpleui" ? { http: 3466 } : { http: 3456 };
   const requestedHttpPort = opts.httpPort ?? opts.port ?? surfaceDefaults.http;
-  const strictPort = process.env["WEBUI_STRICT_PORT"] === "1" || process.env["WEBUI_STRICT_PORT"] === "true";
+  const strictPort = opts.strictPort ?? (process.env["WEBUI_STRICT_PORT"] === "1" || process.env["WEBUI_STRICT_PORT"] === "true");
   let httpPort = requestedHttpPort;
   if (!strictPort) {
     httpPort = await findFreePort(host, requestedHttpPort);
@@ -1088,24 +1092,47 @@ async function runWebUI(opts) {
       `[WebUI] Frontend not served (run \`pnpm --filter @wrongstack/webui build\`). WS bridge still active on ws://${host}:${httpPort}.`
     );
   }
+  const currentSessionId = () => opts.agent.ctx.session?.id ?? opts.session.id;
   const registryBaseDir = globalRoot;
+  let webuiInstanceRegistered = false;
   if (opts.projectRoot) {
-    registerWebuiInstance({
-      pid: process.pid,
-      surface,
-      host,
-      httpPort,
-      publicUrl,
-      projectRoot: opts.projectRoot,
-      startedAt: (/* @__PURE__ */ new Date()).toISOString(),
-      registryBaseDir,
-      // Lets a same-project TUI/REPL authenticate `POST /api/fleet/ping` now
-      // that the API requires a token on every bind (H3).
-      authToken: wsToken
-    });
+    const registration = Promise.resolve(
+      registerWebuiInstance({
+        pid: process.pid,
+        surface,
+        host,
+        httpPort,
+        publicUrl,
+        projectRoot: opts.projectRoot,
+        startedAt: (/* @__PURE__ */ new Date()).toISOString(),
+        registryBaseDir,
+        // Lets a same-project TUI/REPL authenticate `POST /api/fleet/ping` now
+        // that the API requires a token on every bind (H3).
+        authToken: wsToken,
+        ...opts.webuiSessionChild ? {
+          role: "session-child",
+          sessionId: currentSessionId(),
+          parentPid: opts.webuiSessionChild.parentPid,
+          parentShellId: opts.webuiSessionChild.parentShellId,
+          runtimeId: opts.webuiSessionChild.runtimeId,
+          attachable: opts.webuiSessionChild.attachable,
+          lastReadyAt: (/* @__PURE__ */ new Date()).toISOString(),
+          protocolVersion: opts.webuiSessionChild.protocolVersion,
+          capabilities: [...WEBUI_SESSION_CHILD_CAPABILITIES]
+        } : {}
+      })
+    ).then(
+      (value) => value !== false,
+      () => false
+    );
+    if (opts.webuiSessionChild) {
+      webuiInstanceRegistered = await registration;
+    } else {
+      void registration;
+      webuiInstanceRegistered = true;
+    }
   }
   const eventUnsubscribers = [];
-  const currentSessionId = () => opts.agent.ctx.session?.id ?? opts.session.id;
   const sessionPayload = (payload) => {
     const provided = payload["sessionId"];
     const sessionId = typeof provided === "string" && provided.length > 0 ? provided : currentSessionId();
@@ -1405,7 +1432,14 @@ async function runWebUI(opts) {
       console.log(`[WebUI] WebSocket server running on ws://${host}:${httpPort}`);
       try {
         setupEvents();
-        opts.onListening?.({ httpPort, wsPort, host, url: accessUrl });
+        opts.onListening?.({
+          httpPort,
+          wsPort,
+          host,
+          url: accessUrl,
+          authToken: wsToken,
+          webuiInstanceRegistered
+        });
       } catch (err) {
         consoleLogger.error("setup_events_failed", { message: toErrorMessage(err) });
       }
@@ -1535,20 +1569,11 @@ async function runWebUI(opts) {
     registerWebuiSignalHandlers(signalShutdown);
   });
   function send(ws, msg) {
-    if (ws.readyState === WebSocket.OPEN) {
-      ws.send(JSON.stringify(msg));
-    }
+    sendSerialized(ws, JSON.stringify(msg));
   }
   function broadcast(msg) {
     const data = JSON.stringify(msg);
-    for (const [ws] of clients) {
-      if (ws.readyState === WebSocket.OPEN) {
-        try {
-          ws.send(data);
-        } catch {
-        }
-      }
-    }
+    for (const [ws] of clients) sendSerialized(ws, data);
   }
   function sendResult(ws, success, message) {
     send(ws, { type: "key.operation_result", payload: { success, message } });
@@ -1558,4 +1583,4 @@ async function runWebUI(opts) {
 export {
   runWebUI
 };
-//# sourceMappingURL=webui-server-G3EKFXLL.js.map
+//# sourceMappingURL=webui-server-NFNRGNNT.js.map

package/dist/webui-server-options.d.ts

@@ -1,5 +1,6 @@
 import type { Agent } from '@wrongstack/core/agent';
 import type { BrainArbiter } from '@wrongstack/core/coordination';
+import type { WebuiSessionChildOptions } from './boot/webui-session-child.js';
 import type { BrainAutoRisk } from '@wrongstack/core/execution';
 import type { EventBus } from '@wrongstack/core/kernel';
 import type { TrustBoundary } from '@wrongstack/core/security';
@@ -36,6 +37,10 @@ export interface CliWebUIOptions {
     surface?: 'webui' | 'simpleui' | undefined;
     /** Fixed access token/password. Defaults to WEBUI_TOKEN or random per process. */
     accessToken?: string | undefined;
+    /** Fail instead of auto-advancing when the requested HTTP/WS port is busy. */
+    strictPort?: boolean | undefined;
+    /** Internal one-session child launch metadata for the multi-session parent shell. */
+    webuiSessionChild?: WebuiSessionChildOptions | undefined;
     /**
      * Live fleet concurrency + lifetime spawn budget for WebUI (issue #323).
      * Merged into `fleet.concurrency_update` broadcasts.
@@ -81,6 +86,8 @@ export interface CliWebUIOptions {
         wsPort: number;
         host: string;
         url: string;
+        authToken: string;
+        webuiInstanceRegistered: boolean;
     }) => void;
     modelsRegistry?: ModelsRegistry | undefined;
     globalConfigPath?: string | undefined;

package/dist/wiring/brain-and-orchestration.d.ts

@@ -1,7 +1,7 @@
 import { BrainDecisionQueue, type BrainEscalationMode, ObservableBrainArbiter } from '@wrongstack/core/coordination';
 import { type BrainAutoRisk, type BrainRuntime } from '@wrongstack/core/execution';
 import type { ToolRegistry } from '@wrongstack/core/registry';
-import type { Config, Provider, SecretVault, SessionWriter } from '@wrongstack/core/types';
+import { type Config, type Provider, type SecretVault, type SessionWriter } from '@wrongstack/core/types';
 import { MultiAgentHost } from '../multi-agent.js';
 type AnyObj = any;
 /**

package/dist/wiring/mailbox-bridge-bootstrap.d.ts

@@ -33,7 +33,9 @@ export declare const MAILBOX_BRIDGE_META_KEY = "mailboxBridge";
  */
 export declare function bootstrapMailboxBridgeAtStartup(params: {
     projectRoot: string | undefined;
-    config: Pick<Config, 'features'> | undefined;
+    config: {
+        features: Pick<Config['features'], 'mailboxBridge'>;
+    } | undefined;
     logger: Logger;
     /** Surface label — logged for debugging when something goes wrong. */
     source: 'cli' | 'webui' | 'eternal';

package/dist/wiring/management-tools.d.ts

@@ -1,4 +1,5 @@
 import type { Config } from '@wrongstack/core/types';
+import { type PluginManagerHookRunner } from '@wrongstack/core/tools';
 import type { ToolRegistry } from '@wrongstack/core/registry';
 type ConfigStoreLike = {
     get(): Config;
@@ -9,7 +10,14 @@ export interface RegisterCliManagementToolsDeps {
     configStore: ConfigStoreLike;
     profileConfigPath: string;
     stdinInteractive: boolean;
+    /**
+     * Late-bound PreToolUse pipeline for plugin_manager's nested `use` path.
+     * The hook runner is created by `setupLifecycleAndPlugins` AFTER the
+     * management tools register, so cli-main passes a ref-backed getter that
+     * starts null and is filled once wiring completes.
+     */
+    getHookRunner?: (() => PluginManagerHookRunner | null) | undefined;
 }
-export declare function registerCliManagementTools({ toolRegistry, configStore, profileConfigPath, stdinInteractive, }: RegisterCliManagementToolsDeps): void;
+export declare function registerCliManagementTools({ toolRegistry, configStore, profileConfigPath, stdinInteractive, getHookRunner, }: RegisterCliManagementToolsDeps): void;
 export {};
 //# sourceMappingURL=management-tools.d.ts.map

package/dist/wiring/pipeline.d.ts

@@ -1,9 +1,9 @@
 import { Agent, type AgentPipelines, type Context } from '@wrongstack/core/agent';
 import { AutoCompactionMiddleware } from '@wrongstack/core/execution';
-import type { Config, Logger, ModelsRegistry, Provider } from '@wrongstack/core/types';
-import type { SessionEventBridge } from '@wrongstack/core/storage';
 import { type EventBus } from '@wrongstack/core/kernel';
 import type { ProviderRegistry, ToolRegistry } from '@wrongstack/core/registry';
+import type { SessionEventBridge } from '@wrongstack/core/storage';
+import type { Config, Logger, ModelsRegistry, Provider } from '@wrongstack/core/types';
 type CompactionDriver = ConstructorParameters<typeof AutoCompactionMiddleware>[0];
 export declare function setupPipelines(params: {
     events: EventBus;
@@ -90,9 +90,9 @@ export declare function createAgent(params: {
     /**
      * Full Config object, used for `features.mailboxBridge` gating and
      * forwarded to `bootstrapMailboxBridgeAtStartup`. Optional — when
-     * omitted, the bootstrap defaults to 'auto' (i.e. always run).
-     * Tests can pass a stub with just `{ features: { mailboxBridge: 'off' } }`
-     * to skip the bridge entirely without touching the host config.
+     * omitted, the bootstrap defaults to 'off' (i.e. never run), so tests
+     * and embedders get no detached bridge process unless they ask for one
+     * with `{ features: { mailboxBridge: 'auto' } }`.
      */
     fullConfig?: Pick<Config, 'features'> | undefined;
     /** Surface label for the bootstrap log breadcrumb. */

package/dist/wiring/plugins.d.ts

@@ -1,10 +1,9 @@
 import type { AgentPipelines } from '@wrongstack/core/agent';
-import type { Config, HealthRegistry, Logger, MetricsRuntimeStatus, MetricsSinkView, ModelsRegistry, Plugin, PromptLoader, SkillLoader } from '@wrongstack/core/types';
 import type { ExtensionRegistry } from '@wrongstack/core/extension';
-import type { PluginAPIInit, PluginHostHandle } from '@wrongstack/core/plugin';
-import type { ConfigStore, SessionWriter } from '@wrongstack/core/types';
 import type { Container, EventBus } from '@wrongstack/core/kernel';
+import type { PluginAPIInit, PluginHostHandle } from '@wrongstack/core/plugin';
 import type { ProviderRegistry, SlashCommandRegistry, ToolRegistry } from '@wrongstack/core/registry';
+import type { Config, ConfigStore, HealthRegistry, Logger, MetricsRuntimeStatus, MetricsSinkView, ModelsRegistry, Plugin, PromptLoader, SessionWriter, SkillLoader } from '@wrongstack/core/types';
 import type { MCPRegistry } from '@wrongstack/mcp';
 export declare const DEPRECATED_PLUGIN_NAMES: Record<string, string>;
 export declare const BUILTIN_PLUGIN_CONFIG_NAMES: Set<string>;

package/dist/wiring/provider-utility-tools.d.ts

@@ -11,6 +11,7 @@ export interface ProviderUtilityToolsInput {
     getConfig: () => Config;
     fallbackProfileManager: FallbackProfileManager;
     statusTracker: ProviderModelStatusTracker;
+    wrapProviderCall: NonNullable<import('@wrongstack/core/types').OneShotOrchestratorOptions['wrapProviderCall']>;
     compactor: NonNullable<Parameters<typeof createContextManagerTool>[0]>['compactor'];
 }
 export declare function adoptResumedProvider(input: {

package/dist/wiring/tools.d.ts

@@ -1,10 +1,9 @@
-import type { TextBlock } from '@wrongstack/core/types';
-import type { Config, MemoryPort } from '@wrongstack/core/types';
-import { type WstackPaths } from '@wrongstack/core/utils';
-import { type DefaultModelsRegistry, DefaultModeStore } from '@wrongstack/core/models';
-import { DefaultSkillLoader } from '@wrongstack/core/execution';
 import { DefaultSystemPromptBuilder } from '@wrongstack/core/agent';
+import { DefaultSkillLoader } from '@wrongstack/core/execution';
+import { type DefaultModelsRegistry, DefaultModeStore } from '@wrongstack/core/models';
 import type { ToolRegistry } from '@wrongstack/core/registry';
+import type { Config, MemoryPort, TextBlock } from '@wrongstack/core/types';
+import { type WstackPaths } from '@wrongstack/core/utils';
 export interface ToolsWiringDeps {
     config: Config;
     toolRegistry: ToolRegistry;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/cli",
-  "version": "0.300.0",
+  "version": "0.302.0",
   "license": "MIT",
   "description": "WrongStack CLI — terminal AI coding agent with provider catalog from models.dev. Provides `wrongstack` and `wstack` binaries.",
   "keywords": [
@@ -42,30 +42,30 @@
   ],
   "dependencies": {
     "ws": "^8.21.1",
-    "@wrongstack/core": "0.300.0",
-    "@wrongstack/bench": "0.300.0",
-    "@wrongstack/providers": "0.300.0",
-    "@wrongstack/mcp": "0.300.0",
-    "@wrongstack/acp": "0.300.0",
-    "@wrongstack/kanban": "0.300.0",
-    "@wrongstack/sdd": "0.300.0",
-    "@wrongstack/plugins": "0.300.0",
-    "@wrongstack/plug-lsp": "0.300.0",
-    "@wrongstack/requirement-intake": "0.300.0",
-    "@wrongstack/security-scanner": "0.300.0",
-    "@wrongstack/runtime": "0.300.0",
-    "@wrongstack/sage": "0.300.0",
-    "@wrongstack/techstack": "0.300.0",
-    "@wrongstack/telegram": "0.300.0",
-    "@wrongstack/simpleui": "0.300.0",
-    "@wrongstack/tools": "0.300.0",
-    "@wrongstack/webui-hq": "0.300.0",
-    "@wrongstack/tui": "0.300.0",
-    "@wrongstack/webui": "0.300.0",
-    "@wrongstack/webui-server": "0.300.0"
+    "@wrongstack/plug-lsp": "0.302.0",
+    "@wrongstack/acp": "0.302.0",
+    "@wrongstack/bench": "0.302.0",
+    "@wrongstack/core": "0.302.0",
+    "@wrongstack/runtime": "0.302.0",
+    "@wrongstack/plugins": "0.302.0",
+    "@wrongstack/providers": "0.302.0",
+    "@wrongstack/mcp": "0.302.0",
+    "@wrongstack/sdd": "0.302.0",
+    "@wrongstack/kanban": "0.302.0",
+    "@wrongstack/security-scanner": "0.302.0",
+    "@wrongstack/sage": "0.302.0",
+    "@wrongstack/requirement-intake": "0.302.0",
+    "@wrongstack/techstack": "0.302.0",
+    "@wrongstack/telegram": "0.302.0",
+    "@wrongstack/webui": "0.302.0",
+    "@wrongstack/simpleui": "0.302.0",
+    "@wrongstack/tools": "0.302.0",
+    "@wrongstack/tui": "0.302.0",
+    "@wrongstack/webui-hq": "0.302.0",
+    "@wrongstack/webui-server": "0.302.0"
   },
   "optionalDependencies": {
-    "@wrongstack/desktop": "0.300.0"
+    "@wrongstack/desktop": "0.302.0"
   },
   "devDependencies": {
     "@types/node": "^26.1.2",