@wrongstack/cli 0.301.0 → 0.302.2

package/dist/auth-menu/local.d.ts

@@ -25,14 +25,13 @@
  * in plaintext.
  */
 import type { SecretScrubber } from '@wrongstack/core/types';
+import type { ProbeOptions, ProbeResult } from '@wrongstack/runtime/probe';
+import { probeLocalLlm } from '@wrongstack/runtime/probe';
+import { type AuthAuditLogger } from './auth-menu-audit.js';
 import { LOCAL_LLM_PRESETS, type LocalLlmPresetEntry } from './local-presets.js';
 import { suggestLabel } from './shared.js';
 import type { AuthMenuDeps } from './types.js';
-import { probeLocalLlm } from '@wrongstack/runtime/probe';
-import type { ProbeOptions, ProbeResult } from '@wrongstack/runtime/probe';
-import { type AuthAuditLogger } from './auth-menu-audit.js';
-export { probeLocalLlm, type ProbeOptions, type ProbeResult };
-export { LOCAL_LLM_PRESETS, type LocalLlmPresetEntry };
+export { LOCAL_LLM_PRESETS, type LocalLlmPresetEntry, type ProbeOptions, type ProbeResult, probeLocalLlm, };
 export interface RunAuthLocalOptions {
     /**
      * Direct pick: skip the interactive menu and configure this preset.

package/dist/auth-menu/openai-codex-oauth.d.ts

@@ -31,7 +31,7 @@
 import { buildCodexAuthorizeUrl, exchangeCodexAuthorizationCode, refreshCodexTokens } from '@wrongstack/providers/oauth';
 import { type LoopbackServer } from './loopback-server.js';
 import type { AuthMenuDeps } from './types.js';
-export { CODEX_BASE_URL, CODEX_CATALOG_FAMILIES, CODEX_PROVIDER_ID, type CodexTokens, extractAccountId, FALLBACK_CODEX_MODELS, fallbackCodexModelIds, fallbackCodexProviderModels, fetchCodexModels, filterCurrentCodexModelIds, generatePkce, isCodexCatalogModel, parseAuthorizationInput, type Pkce, resolveCodexModels, } from '@wrongstack/providers/oauth';
+export { CODEX_BASE_URL, CODEX_CATALOG_FAMILIES, CODEX_PROVIDER_ID, type CodexTokens, extractAccountId, FALLBACK_CODEX_MODELS, fallbackCodexModelIds, fallbackCodexProviderModels, fetchCodexModels, filterCurrentCodexModelIds, generatePkce, isCodexCatalogModel, type Pkce, parseAuthorizationInput, resolveCodexModels, } from '@wrongstack/providers/oauth';
 /** Build the Codex authorize URL. Alias kept for the historical local name. */
 export declare const buildAuthorizeUrl: typeof buildCodexAuthorizeUrl;
 /** Exchange an authorization code (+ PKCE verifier) for tokens. */

package/dist/{auto-discover-providers-DRW4OZHG.js → auto-discover-providers-MHFLDSD3.js}

@@ -1,8 +1,8 @@
 import {
   discoverAndMergeProviders
-} from "./chunk-4GVH7V3S.js";
+} from "./chunk-52C7PD2H.js";
 import "./chunk-7OCVIDC7.js";
 export {
   discoverAndMergeProviders
 };
-//# sourceMappingURL=auto-discover-providers-DRW4OZHG.js.map
+//# sourceMappingURL=auto-discover-providers-MHFLDSD3.js.map

package/dist/{bench-7ZDWSNEF.js → bench-XNDUJOSZ.js}

@@ -7,7 +7,6 @@ import "./chunk-7OCVIDC7.js";
 import * as fs from "node:fs/promises";
 import { createRequire } from "node:module";
 import * as path from "node:path";
-import { toErrorMessage } from "@wrongstack/core/utils";
 import {
   collectCellPredictions,
   computeToolManifestHash,
@@ -26,7 +25,7 @@ import {
   writeJsonArtifacts,
   writePredictionsJsonl
 } from "@wrongstack/bench";
-import { color } from "@wrongstack/core/utils";
+import { color, toErrorMessage } from "@wrongstack/core/utils";
 var benchCmd = async (args, deps) => {
   const sub = args[0];
   const rest = args.slice(1);
@@ -58,9 +57,7 @@ function printUsage(deps) {
       color.dim(
         "  wstack bench run --suite polyglot --polyglot-dir ./polyglot --models bench.config.json --limit 5"
       ),
-      color.dim(
-        "  wstack bench run --suite local --suite-dir ./evals --models bench.config.json"
-      ),
+      color.dim("  wstack bench run --suite local --suite-dir ./evals --models bench.config.json"),
       color.dim("  wstack bench mine --transcript ./session.jsonl --out ./evals"),
       color.dim("  wstack bench report ./bench-results/2026-06-14T10-00-00"),
       ""
@@ -198,9 +195,7 @@ async function benchReport(args, deps) {
   try {
     summary = await readSummary(outDir);
   } catch (err) {
-    deps.renderer.writeError(
-      `cannot read summary.json in ${outDir}: ${toErrorMessage(err)}`
-    );
+    deps.renderer.writeError(`cannot read summary.json in ${outDir}: ${toErrorMessage(err)}`);
     return 1;
   }
   const md = renderMarkdownReport(summary);
@@ -211,7 +206,9 @@ async function benchReport(args, deps) {
 async function benchMine(args, deps) {
   const transcriptRaw = flagStr(deps, "transcript") ?? args.find((arg) => !arg.startsWith("-"));
   if (!transcriptRaw) {
-    deps.renderer.writeError("Usage: wstack bench mine --transcript <session.jsonl> [--out <eval-dir>]");
+    deps.renderer.writeError(
+      "Usage: wstack bench mine --transcript <session.jsonl> [--out <eval-dir>]"
+    );
     return 1;
   }
   const outRaw = flagStr(deps, "out") ?? "evals";
@@ -220,7 +217,9 @@ async function benchMine(args, deps) {
       transcriptPath: path.resolve(deps.cwd, transcriptRaw),
       outDir: path.resolve(deps.cwd, outRaw)
     });
-    deps.renderer.writeInfo(`Mined ${mined.candidates.length} edit attempt(s) from ${mined.sessionId}.`);
+    deps.renderer.writeInfo(
+      `Mined ${mined.candidates.length} edit attempt(s) from ${mined.sessionId}.`
+    );
     deps.renderer.writeInfo(`Pinned transcript \u2192 ${mined.copiedTranscriptPath}`);
     deps.renderer.writeInfo(`Curator drafts \u2192 ${mined.draftsPath}`);
     deps.renderer.writeInfo(
@@ -275,4 +274,4 @@ async function benchList(_args, deps) {
 export {
   benchCmd
 };
-//# sourceMappingURL=bench-7ZDWSNEF.js.map
+//# sourceMappingURL=bench-XNDUJOSZ.js.map

package/dist/boot/auto-discover-providers.d.ts

@@ -1,5 +1,5 @@
-import type { Config, Logger } from '@wrongstack/core/types';
 import type { DefaultModelsRegistry } from '@wrongstack/core/models';
+import type { Config, Logger } from '@wrongstack/core/types';
 /**
  * Fetch model lists for every auto-discovery provider in the config and merge
  * them into the catalog. Best-effort end to end: a down server or missing key

package/dist/boot/container-wiring.d.ts

@@ -1,7 +1,7 @@
-import type { Config, Logger, Renderer, ModelsRegistry } from '@wrongstack/core/types';
-import type { WstackPaths } from '@wrongstack/core/utils';
-import type { EventBus } from '@wrongstack/core/kernel';
 import { DefaultPathResolver } from '@wrongstack/core/infrastructure';
+import type { EventBus } from '@wrongstack/core/kernel';
+import type { Config, Logger, ModelsRegistry, Renderer } from '@wrongstack/core/types';
+import type { WstackPaths } from '@wrongstack/core/utils';
 import { createDefaultContainer } from '@wrongstack/runtime';
 import { makePromptDelegate } from '../permission-prompt.js';
 interface WireContainerDeps {

package/dist/boot/dispatch-webui.d.ts

@@ -1,19 +1,3 @@
-/**
- * WebUI dispatch — extracted from the tail of `execute()`.
- *
- * PR 6 of Issue #29 (partial). The TUI-vs-REPL-vs-WebUI fork at the
- * end of `execute()` is a ~1,600-line `if/else if/else if/else`
- * chain. The WebUI branch is the most self-contained of the four: it
- * constructs a `runWebUI` options object from already-available deps,
- * wires SIGINT handling, and returns an exit code. Extracting it
- * first lets `execute()` shrink by ~100 lines and isolates the
- * WebUI-specific wiring (port resolution, browser banner and autonomy
- * forwarding) in a single named module.
- *
- * The TUI branch (~1,388 lines) and the single-shot branch are left
- * inline — they are too deeply coupled to local mutable state for a
- * single-PR extraction.
- */
 import type { Agent } from '@wrongstack/core/agent';
 import type { BrainArbiter } from '@wrongstack/core/coordination';
 import type { JournalEntry } from '@wrongstack/core/goal';
@@ -23,6 +7,7 @@ import type { MCPRegistry } from '@wrongstack/mcp';
 import type { TerminalRenderer } from '../renderer.js';
 import type { AutonomyMode } from '../services/autonomy-mode.js';
 import type { CliWebUIOptions } from '../webui-server-options.js';
+import { type WebuiSessionChildOptions } from './webui-session-child.js';
 export interface WebUIDispatchContext {
     agent: Agent;
     events: EventBus;
@@ -99,6 +84,8 @@ export interface WebUIDispatchContext {
     }) => Promise<string>) | undefined;
     /** Live fleet budget for WebUI concurrency/spawn gauges (issue #323). */
     getFleetBudget?: CliWebUIOptions['getFleetBudget'];
+    /** Internal one-session child launch metadata, when --webui-session-child is active. */
+    webuiSessionChild?: WebuiSessionChildOptions | undefined;
 }
 /**
  * Run the WebUI server and block until it shuts down.

package/dist/boot/system-prompt.d.ts

@@ -1,6 +1,5 @@
-import type { Config, Logger, ModelsRegistry } from '@wrongstack/core/types';
 import type { ProviderRegistry } from '@wrongstack/core/registry';
-import type { ResolvedProvider } from '@wrongstack/core/types';
+import type { Config, Logger, ModelsRegistry, ResolvedProvider } from '@wrongstack/core/types';
 export type ModeId = string;
 export type ModePrompt = string;
 export interface ModelCapabilities {

package/dist/boot/tool-registry.d.ts

@@ -1,8 +1,8 @@
 /** CLI boot adapter for canonical runtime tool registration and host policies. */
 import type { EventBus } from '@wrongstack/core/kernel';
+import type { ToolRegistry } from '@wrongstack/core/registry';
 import type { MemoryPort, TokenSavingTier, ToolDescriptionModeConfig, ToolResultRenderModeConfig } from '@wrongstack/core/types';
 import type { WstackPaths } from '@wrongstack/core/utils';
-import type { ToolRegistry } from '@wrongstack/core/registry';
 interface RegisterBuiltinToolsDeps {
     toolRegistry: ToolRegistry;
     compactor: unknown;

package/dist/boot/tui-coordinator-setup.d.ts

@@ -1,5 +1,5 @@
-import { AutonomousCoordinator, type Director } from '@wrongstack/core/coordination';
 import type { Context } from '@wrongstack/core/agent';
+import { AutonomousCoordinator, type Director } from '@wrongstack/core/coordination';
 import type { EventBus } from '@wrongstack/core/kernel';
 import type { WstackPaths } from '@wrongstack/core/utils';
 import type { TuiRuntimeState } from './tui-runtime-state.js';

package/dist/boot/tui-project-picker-callback.d.ts

@@ -1,7 +1,7 @@
 import type { Director } from '@wrongstack/core/coordination';
 import type { TerminalRenderer } from '../renderer.js';
-import type { TuiRuntimeState } from './tui-runtime-state.js';
 import type { ProjectSwitchContext } from './tui-project-switch.js';
+import type { TuiRuntimeState } from './tui-runtime-state.js';
 export interface ProjectPickerContext {
     state: TuiRuntimeState;
     renderer: TerminalRenderer;

package/dist/boot/webui-session-child.d.ts

@@ -0,0 +1,91 @@
+export declare const WEBUI_SESSION_CHILD_PROTOCOL_VERSION = 1;
+export declare const WEBUI_SESSION_CHILD_CAPABILITIES: readonly ['multi-session-child', 'single-port-http-ws', 'session-affinity', 'graceful-shutdown'];
+export type WebuiSessionChildPhase = 'validate_args' | 'boot_config' | 'claim_session' | 'create_session' | 'resume_session' | 'bind_port' | 'register_instance' | 'register_session' | 'start_server' | 'unknown';
+export interface WebuiSessionChildOptions {
+    enabled: boolean;
+    projectRoot: string;
+    workingDir: string;
+    sessionId?: string | undefined;
+    resume: boolean;
+    host?: string | undefined;
+    port?: number | undefined;
+    token?: string | undefined;
+    publicUrl?: string | undefined;
+    publicWsUrl?: string | undefined;
+    requireToken?: boolean | undefined;
+    strictPort: boolean;
+    parentPid: number;
+    parentShellId: string;
+    runtimeId: string;
+    readyFile: string;
+    attachable: boolean;
+    protocolVersion: number;
+}
+export interface WebuiSessionChildReadyPayload {
+    type: 'webui.session_child.ready';
+    protocolVersion: number;
+    runtime: {
+        role: 'session-child';
+        runtimeId: string;
+        pid: number;
+        parentPid: number;
+        parentShellId: string;
+        startedAt: string;
+    };
+    project: {
+        projectRoot: string;
+        workingDir: string;
+        projectSlug: string;
+        projectName: string;
+    };
+    session: {
+        sessionId: string;
+        created: boolean;
+        resumed: boolean;
+        title?: string | undefined;
+        provider?: string | undefined;
+        model?: string | undefined;
+    };
+    endpoint: {
+        surface: 'webui';
+        host: string;
+        httpPort: number;
+        url: string;
+        publicUrl?: string | undefined;
+        publicWsUrl?: string | undefined;
+        requireToken: boolean;
+        auth: {
+            scheme: 'registry-token' | 'cookie-bootstrap' | 'none';
+            tokenPresent: boolean;
+            token?: string | undefined;
+        };
+    };
+    registry: {
+        webuiInstanceRegistered: boolean;
+        sessionRegistered: boolean;
+    };
+    capabilities: string[];
+}
+export interface WebuiSessionChildErrorPayload {
+    type: 'webui.session_child.error';
+    protocolVersion: number;
+    runtimeId?: string | undefined;
+    parentShellId?: string | undefined;
+    pid: number;
+    phase: WebuiSessionChildPhase;
+    recoverable: boolean;
+    message: string;
+    details?: Record<string, unknown> | undefined;
+}
+export declare function parseWebuiSessionChildOptions(flags: Record<string, string | boolean>): WebuiSessionChildOptions | null;
+export declare function writeWebuiSessionChildReady(readyFile: string, payload: WebuiSessionChildReadyPayload): Promise<void>;
+export declare function writeWebuiSessionChildError(readyFile: string, input: {
+    protocolVersion?: number | undefined;
+    runtimeId?: string | undefined;
+    parentShellId?: string | undefined;
+    phase: WebuiSessionChildPhase;
+    recoverable: boolean;
+    error: unknown;
+    details?: Record<string, unknown> | undefined;
+}): Promise<void>;
+//# sourceMappingURL=webui-session-child.d.ts.map

package/dist/boot-config.d.ts

@@ -1,7 +1,7 @@
-import type { Config } from '@wrongstack/core/types';
+import type { DefaultPathResolver } from '@wrongstack/core/infrastructure';
 import { bootConfig as coreBootConfig } from '@wrongstack/core/infrastructure';
+import type { Config } from '@wrongstack/core/types';
 import type { WstackPaths } from '@wrongstack/core/utils';
-import type { DefaultPathResolver } from '@wrongstack/core/infrastructure';
 export interface BootPaths {
     cwd: string;
     projectRoot: string;

package/dist/boot.d.ts

@@ -1,6 +1,6 @@
+import { DefaultLogger } from '@wrongstack/core/infrastructure';
 import type { Config, ModelsRegistry, SecretVault } from '@wrongstack/core/types';
 import { type WstackPaths } from '@wrongstack/core/utils';
-import { DefaultLogger } from '@wrongstack/core/infrastructure';
 import { ReadlineInputReader } from './input-reader.js';
 import { TerminalRenderer } from './renderer.js';
 import type { UpdateInfo } from './update-check.js';

package/dist/{chunk-ETOEGL3V.js → chunk-3IC4IEZC.js}

@@ -66,7 +66,12 @@ async function buildPickableProviders(modelsRegistry, config) {
     const inherited = catalogById.get(catalogType) ?? catalogById.get(cfg.type ?? id);
     const family = cfg.family ?? inherited?.family ?? "unsupported";
     if (family === "unsupported") continue;
-    const models = visibleModelIds(id, config, (inherited?.models ?? []).map((m) => m.id), cfg);
+    const models = visibleModelIds(
+      id,
+      config,
+      (inherited?.models ?? []).map((m) => m.id),
+      cfg
+    );
     out.push({ id, family, models });
   }
   for (const p of catalog) {
@@ -84,4 +89,4 @@ export {
   hasApiKey,
   buildPickableProviders
 };
-//# sourceMappingURL=chunk-ETOEGL3V.js.map
+//# sourceMappingURL=chunk-3IC4IEZC.js.map

package/dist/chunk-3JPTNADJ.js

@@ -0,0 +1,128 @@
+
+// src/boot/webui-session-child.ts
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import { atomicWrite, toErrorMessage } from "@wrongstack/core/utils";
+var WEBUI_SESSION_CHILD_PROTOCOL_VERSION = 1;
+var WEBUI_SESSION_CHILD_CAPABILITIES = [
+  "multi-session-child",
+  "single-port-http-ws",
+  "session-affinity",
+  "graceful-shutdown"
+];
+function flagValue(flags, names) {
+  for (const name of names) {
+    if (!Object.hasOwn(flags, name)) continue;
+    const value = flags[name];
+    if (typeof value === "string" && value.trim() !== "") return value.trim();
+    throw new Error(`--${name} requires a value`);
+  }
+  return void 0;
+}
+function boolFlag(flags, names) {
+  for (const name of names) {
+    if (!Object.hasOwn(flags, name)) continue;
+    const value = flags[name];
+    if (typeof value === "boolean") return value;
+    const normalized = String(value).trim().toLowerCase();
+    if (["1", "true", "yes", "on"].includes(normalized)) return true;
+    if (["0", "false", "no", "off"].includes(normalized)) return false;
+    throw new Error(`--${name} must be a boolean value`);
+  }
+  return void 0;
+}
+function parsePositiveInteger(value, label) {
+  if (value === void 0) throw new Error(`${label} is required`);
+  const parsed = Number.parseInt(value, 10);
+  if (!Number.isInteger(parsed) || parsed <= 0)
+    throw new Error(`${label} must be a positive integer`);
+  return parsed;
+}
+function parsePort(value) {
+  if (value === void 0) return void 0;
+  const parsed = Number.parseInt(value, 10);
+  if (!Number.isInteger(parsed) || parsed <= 0 || parsed > 65535) {
+    throw new Error("--port must be a port between 1 and 65535");
+  }
+  return parsed;
+}
+function requiredString(value, label) {
+  if (!value || value.trim() === "") throw new Error(`${label} is required`);
+  return value.trim();
+}
+function requireAbsolutePath(value, label) {
+  const resolved = requiredString(value, label);
+  if (!path.isAbsolute(resolved)) throw new Error(`${label} must be an absolute path`);
+  return path.resolve(resolved);
+}
+function parseWebuiSessionChildOptions(flags) {
+  if (flags["webui-session-child"] !== true) return null;
+  const projectRoot = requireAbsolutePath(flagValue(flags, ["project-root"]), "--project-root");
+  const workingDir = requireAbsolutePath(flagValue(flags, ["working-dir"]), "--working-dir");
+  const relativeWorkingDir = path.relative(projectRoot, workingDir);
+  if (relativeWorkingDir.startsWith("..") || path.isAbsolute(relativeWorkingDir)) {
+    throw new Error("--working-dir must be inside --project-root");
+  }
+  const sessionId = flagValue(flags, ["session-id"]);
+  const resume = boolFlag(flags, ["resume"]) ?? false;
+  if (sessionId && !resume) throw new Error("--session-id requires --resume");
+  if (resume && !sessionId) throw new Error("--resume requires --session-id in child mode");
+  const host = flagValue(flags, ["webui-host", "host"]);
+  const port = parsePort(flagValue(flags, ["webui-port", "http-port", "port", "ws-port"]));
+  const token = flagValue(flags, ["webui-token", "token"]);
+  const publicUrl = flagValue(flags, ["webui-public-url", "public-url"]);
+  const publicWsUrl = flagValue(flags, ["webui-public-ws-url", "public-ws-url"]);
+  const requireToken = boolFlag(flags, ["webui-require-token", "require-token"]);
+  return {
+    enabled: true,
+    projectRoot,
+    workingDir,
+    ...sessionId ? { sessionId } : {},
+    resume,
+    ...host ? { host } : {},
+    ...port !== void 0 ? { port } : {},
+    ...token ? { token } : {},
+    ...publicUrl ? { publicUrl } : {},
+    ...publicWsUrl ? { publicWsUrl } : {},
+    ...requireToken !== void 0 ? { requireToken } : {},
+    strictPort: boolFlag(flags, ["strict-port"]) ?? false,
+    parentPid: parsePositiveInteger(flagValue(flags, ["parent-pid"]), "--parent-pid"),
+    parentShellId: requiredString(flagValue(flags, ["parent-shell-id"]), "--parent-shell-id"),
+    runtimeId: requiredString(flagValue(flags, ["runtime-id"]), "--runtime-id"),
+    readyFile: requireAbsolutePath(flagValue(flags, ["ready-file"]), "--ready-file"),
+    attachable: boolFlag(flags, ["attachable"]) ?? true,
+    protocolVersion: parsePositiveInteger(
+      flagValue(flags, ["protocol-version"]) ?? String(WEBUI_SESSION_CHILD_PROTOCOL_VERSION),
+      "--protocol-version"
+    )
+  };
+}
+async function writeWebuiSessionChildReady(readyFile, payload) {
+  await fs.mkdir(path.dirname(readyFile), { recursive: true });
+  await atomicWrite(readyFile, `${JSON.stringify(payload, null, 2)}
+`, { mode: 384 });
+}
+async function writeWebuiSessionChildError(readyFile, input) {
+  const payload = {
+    type: "webui.session_child.error",
+    protocolVersion: input.protocolVersion ?? WEBUI_SESSION_CHILD_PROTOCOL_VERSION,
+    ...input.runtimeId ? { runtimeId: input.runtimeId } : {},
+    ...input.parentShellId ? { parentShellId: input.parentShellId } : {},
+    pid: process.pid,
+    phase: input.phase,
+    recoverable: input.recoverable,
+    message: toErrorMessage(input.error),
+    ...input.details ? { details: input.details } : {}
+  };
+  await fs.mkdir(path.dirname(readyFile), { recursive: true });
+  await atomicWrite(readyFile, `${JSON.stringify(payload, null, 2)}
+`, { mode: 384 });
+}
+
+export {
+  WEBUI_SESSION_CHILD_CAPABILITIES,
+  parseWebuiSessionChildOptions,
+  writeWebuiSessionChildReady,
+  writeWebuiSessionChildError
+};
+//# sourceMappingURL=chunk-3JPTNADJ.js.map

package/dist/{chunk-4GVH7V3S.js → chunk-52C7PD2H.js}

@@ -58,4 +58,4 @@ async function discoverAndMergeProviders(opts) {
 export {
   discoverAndMergeProviders
 };
-//# sourceMappingURL=chunk-4GVH7V3S.js.map
+//# sourceMappingURL=chunk-52C7PD2H.js.map

package/dist/{chunk-OP47B3IX.js → chunk-7YLN7YUA.js}

@@ -4,7 +4,12 @@ function createHqCommandDispatcher(controller) {
   return async (command) => {
     const cmd = command;
     try {
-      const result = await dispatch(controller, cmd.commandId, cmd.type, cmd.payload);
+      const result = await dispatch(
+        controller,
+        cmd.commandId,
+        cmd.type,
+        cmd.payload
+      );
       return result;
     } catch (err) {
       return {
@@ -139,4 +144,4 @@ ${command}
 export {
   createHqCommandDispatcher
 };
-//# sourceMappingURL=chunk-OP47B3IX.js.map
+//# sourceMappingURL=chunk-7YLN7YUA.js.map

package/dist/{chunk-263G3FMB.js → chunk-B4JLSXZB.js}

@@ -4,10 +4,9 @@ import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import os from "node:os";
 import * as path from "node:path";
-import { atomicWrite, resolveWstackPaths, writeErr } from "@wrongstack/core/utils";
-import { ERROR_CODES, FsError } from "@wrongstack/core/types";
 import { isSecretField } from "@wrongstack/core/security";
-import { toErrorMessage } from "@wrongstack/core/utils";
+import { ERROR_CODES, FsError } from "@wrongstack/core/types";
+import { atomicWrite, resolveWstackPaths, toErrorMessage, writeErr } from "@wrongstack/core/utils";
 var defaultUidFn = () => os.userInfo().uid;
 async function getFileUid(filePath) {
   try {
@@ -141,7 +140,11 @@ function historyDir(homeFn = defaultHomeDir, targetConfigPath) {
   return path.join(path.dirname(configPath(homeFn, targetConfigPath)), "config.history", "entries");
 }
 function historyIndexPath(homeFn = defaultHomeDir, targetConfigPath) {
-  return path.join(path.dirname(configPath(homeFn, targetConfigPath)), "config.history", "index.json");
+  return path.join(
+    path.dirname(configPath(homeFn, targetConfigPath)),
+    "config.history",
+    "index.json"
+  );
 }
 function configPath(homeFn = defaultHomeDir, targetConfigPath) {
   return targetConfigPath ?? activeProfileConfigPath(homeFn);
@@ -221,9 +224,7 @@ async function backupCurrent(homeFn = defaultHomeDir, targetConfigPath) {
     try {
       await atomicWrite(last, content, { mode: 384 });
     } catch (err) {
-      writeErr(
-        `[config-history] .last backup failed: ${toErrorMessage(err)}`
-      );
+      writeErr(`[config-history] .last backup failed: ${toErrorMessage(err)}`);
     }
   }
   if (content !== void 0) {
@@ -231,9 +232,7 @@ async function backupCurrent(homeFn = defaultHomeDir, targetConfigPath) {
       const bakPath = `${cfg}.${ts}.bak`;
       await atomicWrite(bakPath, content, { mode: 384 });
     } catch (err) {
-      writeErr(
-        `[config-history] timestamped backup failed: ${toErrorMessage(err)}`
-      );
+      writeErr(`[config-history] timestamped backup failed: ${toErrorMessage(err)}`);
     }
   }
   try {
@@ -244,9 +243,7 @@ async function backupCurrent(homeFn = defaultHomeDir, targetConfigPath) {
       await safeDelete(path.join(dir, f));
     }
   } catch (err) {
-    writeErr(
-      `[config-history] backup prune failed: ${toErrorMessage(err)}`
-    );
+    writeErr(`[config-history] backup prune failed: ${toErrorMessage(err)}`);
   }
 }
 async function appendHistory(oldCfg, newCfg, description, homeFn = defaultHomeDir, targetConfigPath) {
@@ -366,4 +363,4 @@ export {
   restoreFromHistory,
   restoreLast
 };
-//# sourceMappingURL=chunk-263G3FMB.js.map
+//# sourceMappingURL=chunk-B4JLSXZB.js.map

package/dist/{chunk-I5MEUFDI.js → chunk-BXQG3H2Y.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-U3SS4NRH.js";
 import {
   checkForUpdate
-} from "./chunk-F4PEGAJZ.js";
+} from "./chunk-NUIHRGPY.js";
 
 // src/subcommands/handlers/update.ts
 import { spawn } from "node:child_process";
@@ -197,7 +197,12 @@ function parseUpdateArgs(args) {
     if (pmEq) {
       const pm = parsePackageManager(pmEq);
       if (!pm)
-        return { checkOnly, packageManager, allowScripts, error: `Invalid package manager: ${pmEq}` };
+        return {
+          checkOnly,
+          packageManager,
+          allowScripts,
+          error: `Invalid package manager: ${pmEq}`
+        };
       packageManager = pm;
       continue;
     }
@@ -303,4 +308,4 @@ export {
   detectUpdatePackageManager,
   detectUpdatePackageName
 };
-//# sourceMappingURL=chunk-I5MEUFDI.js.map
+//# sourceMappingURL=chunk-BXQG3H2Y.js.map

package/dist/{chunk-MHF2IJDE.js → chunk-C5NXM2SI.js}

@@ -2,11 +2,11 @@ import {
   hasApiKey,
   isKeylessLocalProvider,
   visibleModelIds
-} from "./chunk-ETOEGL3V.js";
+} from "./chunk-3IC4IEZC.js";
 import {
   appendHistory,
   backupCurrent
-} from "./chunk-263G3FMB.js";
+} from "./chunk-B4JLSXZB.js";
 
 // src/arg-parser.ts
 var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
@@ -33,6 +33,7 @@ var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "prompt",
   "metrics",
   "webui",
+  "webui-session-child",
   "simpleui",
   "full-auto",
   "desktop",
@@ -137,6 +138,7 @@ function parseArgs(argv) {
 }
 function normalizeSurfaceAliases(flags, positional) {
   if (flags["simpleui"]) flags["webui"] = true;
+  if (flags["webui-session-child"]) flags["webui"] = true;
   const first = positional[0];
   if (first === "simpleui") {
     flags["simpleui"] = true;
@@ -228,8 +230,15 @@ var LOCAL_LLM_PRESETS = projectLocalProviderPresets();
 
 // src/picker.ts
 import os from "node:os";
-import { color as color3, expectDefined as expectDefined2, setOutputLineGuard as setOutputLineGuard2, setRawMode as setRawMode2, stripAnsi as stripAnsi2, writeOut as writeOut2 } from "@wrongstack/core/utils";
-import { toErrorMessage } from "@wrongstack/core/utils";
+import {
+  color as color3,
+  expectDefined as expectDefined2,
+  setOutputLineGuard as setOutputLineGuard2,
+  setRawMode as setRawMode2,
+  stripAnsi as stripAnsi2,
+  toErrorMessage,
+  writeOut as writeOut2
+} from "@wrongstack/core/utils";
 
 // src/picker-key-state.ts
 function applyPickerKey(state, chunk, matchCount) {
@@ -265,7 +274,13 @@ function applyPickerKey(state, chunk, matchCount) {
 }
 
 // src/picker-model-picker.ts
-import { color as color2, expectDefined, setOutputLineGuard, setRawMode, writeOut } from "@wrongstack/core/utils";
+import {
+  color as color2,
+  expectDefined,
+  setOutputLineGuard,
+  setRawMode,
+  writeOut
+} from "@wrongstack/core/utils";
 
 // src/picker-ui.ts
 import { color, stripAnsi } from "@wrongstack/core/utils";
@@ -1037,4 +1052,4 @@ export {
   runLiveProviderPicker,
   runPicker
 };
-//# sourceMappingURL=chunk-MHF2IJDE.js.map
+//# sourceMappingURL=chunk-C5NXM2SI.js.map

package/dist/{chunk-XTIXVJXP.js → chunk-DGXNL7OT.js}

@@ -435,4 +435,4 @@ export {
   getTaskGraphId,
   getTaskTrackerExport
 };
-//# sourceMappingURL=chunk-XTIXVJXP.js.map
+//# sourceMappingURL=chunk-DGXNL7OT.js.map