@wrongstack/cli 0.300.0 → 0.302.0

package/dist/execution-chimera-cascade.d.ts

@@ -3,19 +3,18 @@ import type { ExecuteDeps } from './execute-deps.js';
 type Director = NonNullable<ExecuteDeps['fleet']['director']>;
 type Events = ExecuteDeps['core']['events'];
 type Session = ExecuteDeps['session']['session'];
-type PendingChimeraWork = Promise<void> | undefined;
 export type InstallChimeraCascadeHandlerOptions = {
     events: Events;
     director: Director | null | undefined;
     session: Session;
-    getPendingWork: () => PendingChimeraWork;
-    setPendingWork: (work: PendingChimeraWork) => void;
+    getPendingWork: () => Promise<void> | undefined;
+    trackWork: (work: Promise<void>) => void;
     /**
      * Model ladder for cascade spawns. Supplied by the caller because only it
      * holds the live config. Omit to keep the single unpinned spawn.
      */
     buildLadder?: (() => ReviewerAttempt[]) | undefined;
 };
-export declare function installChimeraCascadeHandler({ events, director, session, getPendingWork, setPendingWork, buildLadder, }: InstallChimeraCascadeHandlerOptions): void;
+export declare function installChimeraCascadeHandler({ events, director, session, getPendingWork, trackWork, buildLadder, }: InstallChimeraCascadeHandlerOptions): void;
 export {};
 //# sourceMappingURL=execution-chimera-cascade.d.ts.map

package/dist/execution-chimera-review.d.ts

@@ -7,7 +7,6 @@ type Session = ExecuteDeps['session']['session'];
 type Mailbox = ExecuteDeps['session']['mailbox'];
 type Agent = ExecuteDeps['core']['agent'];
 type Config = ExecuteDeps['core']['config'];
-type PendingChimeraWork = Promise<void> | undefined;
 /**
  * Canonicalize a file path for citation gating. The reviewer can cite
  * absolute Windows paths (`D:\Codebox\...`) or mix casing on a
@@ -38,8 +37,8 @@ export type InstallChimeraReviewHandlerOptions = {
      */
     statusTracker?: ProviderModelStatusTracker | undefined;
     persistReview?: ((payload: ChimeraReviewCompletePayload, projectDir: string) => Promise<void>) | undefined;
-    setPendingWork: (work: PendingChimeraWork) => void;
+    trackWork: (work: Promise<void>) => void;
 };
-export declare function installChimeraReviewHandler({ events, director, session, mailbox, agent, config, projectDir, statusTracker, persistReview, setPendingWork, }: InstallChimeraReviewHandlerOptions): void;
+export declare function installChimeraReviewHandler({ events, director, session, mailbox, agent, config, projectDir, statusTracker, persistReview, trackWork, }: InstallChimeraReviewHandlerOptions): void;
 export {};
 //# sourceMappingURL=execution-chimera-review.d.ts.map

package/dist/execution-cleanup.d.ts

@@ -1,4 +1,5 @@
 import type { Director } from '@wrongstack/core/coordination';
+import type { ChimeraWorkRegistry } from './chimera-work-registry.js';
 import type { ExecuteDeps } from './execute-deps.js';
 import type { FleetStatusLine } from './fleet-statusline.js';
 export interface ExecutionCleanupInput {
@@ -13,8 +14,8 @@ export interface ExecutionCleanupInput {
     session: ExecuteDeps['session']['session'];
     tokenCounter: ExecuteDeps['core']['tokenCounter'];
     events: ExecuteDeps['core']['events'];
-    /** Getter for chimera's in-flight work promise — avoids stale captures. */
-    getPendingChimeraWork?: () => Promise<void> | undefined;
+    /** Session-scoped Chimera work tracker; drained before agent/session teardown. */
+    chimeraWork?: ChimeraWorkRegistry | undefined;
     /** Optional director reference for fleet cleanup at session end. */
     director?: Director | null | undefined;
     reader: ExecuteDeps['ui']['reader'];

package/dist/execution.d.ts

@@ -1,6 +1,6 @@
 import type { ExecuteDeps } from './execute-deps.js';
 export type { LiveSettingsInput } from './live-settings-input.js';
-export { __resetReviewerRoundRobinCursor, applyChimeraReviewerReadOnlyPolicy, assignReviewerModelsRoundRobin, CHIMERA_REVIEW_READ_ONLY_TOOLS, resolveReviewerFallbackModels, } from './chimera-reviewer-policy.js';
+export { __resetReviewerRoundRobinCursor, applyChimeraReviewerReadOnlyPolicy, assignReviewerModels, assignReviewerModelsRoundRobin, CHIMERA_REVIEW_READ_ONLY_TOOLS, resolveReviewerFallbackModels, } from './chimera-reviewer-policy.js';
 export type { BrainData, BrainLogEntry, ExecuteDeps, McpPickerItem, PluginPickerItem, RestoredToolCall, ToolPickerItem, } from './execute-deps.js';
 export declare function execute(deps: ExecuteDeps): Promise<number>;
 //# sourceMappingURL=execution.d.ts.map

package/dist/{export-TPORYVRZ.js → export-DOBGPY23.js}

@@ -1,3 +1,6 @@
+import {
+  restoreFlags
+} from "./chunk-CSAPOCBP.js";
 import "./chunk-7OCVIDC7.js";
 
 // src/subcommands/handlers/export.ts
@@ -7,6 +10,14 @@ import { DefaultSessionReader } from "@wrongstack/core/storage";
 import { expectDefined } from "@wrongstack/core/utils";
 import { toErrorMessage } from "@wrongstack/core/utils";
 var exportCmd = async (args, deps) => {
+  args = restoreFlags(args, deps, [
+    "format",
+    "f",
+    "out",
+    "o",
+    "no-tools",
+    "no-diagnostics"
+  ]);
   if (!deps.sessionStore) {
     deps.renderer.writeError("No session store configured.");
     return 1;
@@ -61,4 +72,4 @@ var exportCmd = async (args, deps) => {
 export {
   exportCmd
 };
-//# sourceMappingURL=export-TPORYVRZ.js.map
+//# sourceMappingURL=export-DOBGPY23.js.map

package/dist/fleet/host-context.d.ts

@@ -1,5 +1,5 @@
 import type { SubagentConfig } from '@wrongstack/core/types';
 import type { MultiAgentDeps } from './host-types.js';
-export declare function resolveHostSubagentSkillContent(deps: MultiAgentDeps, roster: Record<string, SubagentConfig>, subCfg: SubagentConfig): Promise<string>;
+export declare function resolveHostSubagentSkillContent(deps: MultiAgentDeps, roster: Record<string, SubagentConfig>, subCfg: SubagentConfig, availableToolNames?: readonly string[]): Promise<string>;
 export declare function retrieveHostSubagentMemory(deps: MultiAgentDeps, getLeaderMode: (() => string | undefined) | undefined, subCfg: SubagentConfig, taskContext?: Record<string, unknown>): Promise<string[]>;
 //# sourceMappingURL=host-context.d.ts.map

package/dist/fleet/host-helpers.d.ts

@@ -10,6 +10,20 @@ export declare function buildShadowAgentTaskDescription(reason: string): string;
 export declare function touchLruKey(order: string[], key: string): void;
 export declare function setBoundedLruEntry<T>(map: Map<string, T>, order: string[], key: string, value: T, maxEntries: number): void;
 export declare const DEFAULT_SUBAGENT_HIDDEN_TOOLS: Set<string>;
+/**
+ * Tools a subagent can never receive — not even through an explicit
+ * `tools: [...]` allowlist.
+ *
+ * This is stricter than {@link DEFAULT_SUBAGENT_HIDDEN_TOOLS}, which only hides
+ * orchestration controls from the unrestricted default slice and still hands
+ * them over when a spawn asks for them by name. `nextsteps` records the
+ * leader's after-task suggestions: the runtime folds a recorded block into a
+ * LEADER turn only (`next-steps-slot.ts`), and `WIDE_SUBAGENT_CAPABILITIES`
+ * does not carry `session.nextsteps`. Granting it would produce either a
+ * permission rejection or a silent no-op, so asking for it by name is a
+ * mistake to correct rather than an intent to honor.
+ */
+export declare const NEVER_SUBAGENT_TOOLS: Set<string>;
 export declare function selectSubagentTools(allTools: readonly Tool[], directorToolsByName: ReadonlyMap<string, Tool>, allow?: readonly string[] | undefined): Tool[];
 export declare function resolveSubagentCapabilities(subCfg: SubagentConfig, toolsForAllow: (allow: readonly string[]) => readonly Tool[]): readonly string[] | undefined;
 export declare function resolveFleetWorktreePolicy(config: Config): FleetWorktreePolicy;

package/dist/fleet/status-broadcast.d.ts

@@ -22,8 +22,8 @@
  *
  * @module fleet/status-broadcast
  */
-import type { EventBus } from '@wrongstack/core/kernel';
 import type { Mailbox } from '@wrongstack/core/coordination';
+import type { EventBus } from '@wrongstack/core/kernel';
 import type { FleetConfig } from '@wrongstack/core/types';
 export interface FleetStatusBroadcasterOptions {
     /** Host EventBus carrying the re-emitted `subagent.*` lifecycle events. */

package/dist/{hq-DVDD4XPV.js → hq-LN5CJHCM.js}

@@ -36,7 +36,7 @@ var hqCmd = async (args, deps) => {
   return 1;
 };
 async function startServer(deps) {
-  const { startHqServer } = await import("./hq-server-DQHLNHDL.js");
+  const { startHqServer } = await import("./hq-server-S7HZG3PA.js");
   const dataDir = resolveDataDir(deps);
   const flags = deps.flags ?? {};
   const host = typeof flags["host"] === "string" ? flags["host"] : HQ_CLI_DEFAULT_HOST;
@@ -563,4 +563,4 @@ export {
   hqCmd,
   resolveAuditActor
 };
-//# sourceMappingURL=hq-DVDD4XPV.js.map
+//# sourceMappingURL=hq-LN5CJHCM.js.map

package/dist/hq-server/routes.d.ts

@@ -51,7 +51,16 @@ export interface HqRouterMailboxGateway {
 export interface HqRouterDeps {
     trustBoundary: TrustBoundary;
     host: string;
-    listeningPort: number;
+    /**
+     * Getter, not a value. The router is constructed BEFORE `listen()`
+     * resolves, so a copied number froze the REQUESTED port. When the default
+     * is busy and `strictPort` is off, the scan binds `port+1` and the banner
+     * prints it — but the origin guard kept comparing against the old number and
+     * answered `403 forbidden: untrusted request origin` to the dashboard and
+     * every `/api/*` call. (The WS upgrade handler read the live local, so the
+     * failure looked like "the socket connects but the page won't load".)
+     */
+    listeningPort: () => number;
     trustedPublicOrigins: Set<string>;
     /** Trust `Origin: file://`. Off by default — see StartHqServerOptions (WS-081). */
     allowFileOrigin?: boolean | undefined;

package/dist/hq-server/ws.d.ts

@@ -32,11 +32,22 @@ export declare function detectLeaderLoss(lostClient: ConnectedClient, clients: M
 /**
  * Server-side fanout of a `hq.kanban_snapshot` envelope after a merge.
  *
- * C2 — broadcasts the post-merge `delta` payload to:
- *  - every client whose `projectId` matches `projectId`, and
- *  - every browser in `browsers` (browsers are not project-scoped at the
- *    WS level; the browser-side projection filters by project when it
- *    applies the snapshot).
+ * C2 — broadcasts the post-merge `delta` payload to every client whose
+ * `projectId` matches `projectId`.
+ *
+ * BROWSERS ARE DELIBERATELY NOT NOTIFIED. They used to be — unscoped, so
+ * every browser received every project's deltas — on the strength of a
+ * comment claiming "the browser-side projection filters by project when it
+ * applies the snapshot". No such projection exists: `hq.kanban_snapshot` is
+ * absent from `HqBrowserMessage` and from the SPA's dispatch chain, so
+ * `HqWsClient` parsed each frame and dropped it. The board view learns about
+ * changes from the `kanban.snapshot` HQ *event* and refetches over HTTP
+ * (`views/kanban.tsx`), which is why the drift was invisible.
+ *
+ * `browsers` stays in the signature: the fan-out is the natural place to wire
+ * a real browser consumer, and the parity test in
+ * `tests/hq-browser-protocol-parity.test.ts` now fails the moment a
+ * browser-bound frame has no handler.
  *
  * The `delta` payload is the same touched-only payload the merge handler
  * builds (full-set broadcasts drive V8 heap exhaustion on long-lived
@@ -44,7 +55,7 @@ export declare function detectLeaderLoss(lostClient: ConnectedClient, clients: M
  *
  * Exported for direct unit testing in `tests/hq-kanban-fanout.test.ts`.
  */
-export declare function fanoutKanbanDelta(message: string, clients: Map<WebSocket, ConnectedClient>, browsers: Set<WebSocket>, projectId: string): {
+export declare function fanoutKanbanDelta(message: string, clients: Map<WebSocket, ConnectedClient>, _browsers: Set<WebSocket>, projectId: string): {
     clientsNotified: number;
     browsersNotified: number;
 };

package/dist/{hq-server-DQHLNHDL.js → hq-server-S7HZG3PA.js}

@@ -15,7 +15,8 @@ import {
   readLocalSubagentTranscript,
   sanitizeApiError,
   startHqServer
-} from "./chunk-GYDQABMA.js";
+} from "./chunk-2KDOFTTM.js";
+import "./chunk-KE7E7DPX.js";
 import "./chunk-Q5GTM25S.js";
 import "./chunk-7OCVIDC7.js";
 export {
@@ -36,4 +37,4 @@ export {
   sanitizeApiError,
   startHqServer
 };
-//# sourceMappingURL=hq-server-DQHLNHDL.js.map
+//# sourceMappingURL=hq-server-S7HZG3PA.js.map