@wrongstack/cli 0.303.0 → 0.305.0

package/dist/execute-deps.d.ts

@@ -48,6 +48,7 @@ export interface ToolPickerItem {
     owner: string;
     category: string;
     enabled: boolean;
+    exposure: 'direct' | 'lazy' | 'disabled';
     mutating: boolean;
     permission: string;
     descMode: 'extend' | 'simple';
@@ -89,6 +90,21 @@ export interface CoreDeps {
     positional: string[];
     slashRegistry: SlashCommandRegistry;
     tokenCounter: TokenCounter;
+    /**
+     * Forward-declared session ref owned by the host (cli-main). When an
+     * in-process `/resume` swaps the agent's active writer, the resume
+     * handler repoints `sessionRef.current` so provider-side
+     * `getSessionId: () => sessionRef.current?.id` callbacks and the
+     * record-mode `bindReplayToContainer` binding follow the resumed
+     * session instead of staying pinned to the boot session.
+     *
+     * Optional: hosts that don't need post-resume propagation (or tests
+     * that predate the refactor) can omit it; provider calls then stay
+     * pinned to the boot session — same behavior as before this existed.
+     */
+    sessionRef?: {
+        current: import('@wrongstack/core/types').SessionWriter | undefined;
+    } | undefined;
     /** Atomically move this process's SessionRegistry ownership after explicit resume. */
     activateSessionIdentity?: ((sessionId: string, target?: import('./wiring/session-registry.js').SessionIdentityTarget) => Promise<void>) | undefined;
     /**

package/dist/{execution-MVOH6PAQ.js → execution-YMBD7YWC.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-V3XH6XBJ.js";
 import {
   startCliHqConnection
-} from "./chunk-JW75HY4F.js";
+} from "./chunk-FKWHSFX4.js";
 import "./chunk-WHOIR577.js";
 import {
   advanceToNextTask,
@@ -25,17 +25,17 @@ import {
   trySaveSpecFromAIOutput,
   trySaveTasksFromAIOutput
 } from "./chunk-DGXNL7OT.js";
-import {
-  WEBUI_SESSION_CHILD_CAPABILITIES,
-  writeWebuiSessionChildError,
-  writeWebuiSessionChildReady
-} from "./chunk-3JPTNADJ.js";
 import {
   theme
 } from "./chunk-QD544J2B.js";
 import {
   fmtTok
 } from "./chunk-TYO2OVAD.js";
+import {
+  WEBUI_SESSION_CHILD_CAPABILITIES,
+  writeWebuiSessionChildError,
+  writeWebuiSessionChildReady
+} from "./chunk-3JPTNADJ.js";
 import {
   resolveActiveApiKey
 } from "./chunk-SZ42FYPT.js";
@@ -203,7 +203,7 @@ async function runWebUIDispatch(ctx) {
   const isSimpleUi = !isSessionChild && flags["simpleui"] === true;
   agent.disableInteractiveConfirmation();
   renderer.setSilent(true);
-  const { runWebUI } = await import("./webui-server-E3OPEKU5.js");
+  const { runWebUI } = await import("./webui-server-FTG7JAZU.js");
   const flagValue = (names) => {
     for (const name of names) {
       if (!Object.hasOwn(flags, name)) continue;
@@ -985,8 +985,13 @@ import {
   DefaultSystemPromptBuilder,
   setQueuedMessagesSnapshot
 } from "@wrongstack/core/agent";
+import { TOKENS } from "@wrongstack/core/kernel";
 import { DefaultSessionStore } from "@wrongstack/core/storage";
-import { resolveWstackPaths, sessionScopedPath } from "@wrongstack/core/utils";
+import {
+  activateProjectStateGuard,
+  resolveWstackPaths,
+  sessionScopedPath
+} from "@wrongstack/core/utils";
 async function switchProjectInPlace(ctx, targetRoot, displayName) {
   const {
     state,
@@ -1064,6 +1069,7 @@ async function switchProjectInPlace(ctx, targetRoot, displayName) {
     });
     targetActivated = true;
     await state.activateSessionIdentity(nextWriter.id, target);
+    await activateProjectStateGuard(resolved);
   } catch (err) {
     if (!targetActivated) await targetClaim?.cancel().catch(() => void 0);
     else if (oldWriter) {
@@ -1124,6 +1130,13 @@ async function switchProjectInPlace(ctx, targetRoot, displayName) {
       modeStore,
       modeId: modeId ?? "default",
       modePrompt: switchMode?.prompt ?? "",
+      tokenSavingMode: config.features.tokenSavingMode,
+      modelCapabilities: {
+        maxContextTokens: context.provider.capabilities.maxContext,
+        supportsTools: !!context.provider.capabilities.tools,
+        supportsVision: !!context.provider.capabilities.vision,
+        supportsReasoning: !!context.provider.capabilities.reasoning
+      },
       instructionPaths: {
         globalDir: nextWpaths.globalInstructions,
         projectDir: nextWpaths.inProjectInstructions,
@@ -1138,6 +1151,11 @@ async function switchProjectInPlace(ctx, targetRoot, displayName) {
       provider: context.provider.id,
       model: context.model
     });
+    if (agent.container.has(TOKENS.SystemPromptBuilder)) {
+      agent.container.override(TOKENS.SystemPromptBuilder, () => switchBuilder, {
+        owner: "tui-project-switch"
+      });
+    }
   } catch (err) {
     console.error(
       JSON.stringify({
@@ -1298,6 +1316,7 @@ async function resumeSession(ctx, sessionId) {
       throw err;
     }
     writerSwapped = true;
+    state.sessionRef && (state.sessionRef.current = resumed.writer);
     await agent.ctx.flushConversationJournal().catch((err) => {
       console.error(
         JSON.stringify({
@@ -2319,7 +2338,9 @@ async function finalizeExecutionCleanup(input) {
 
 // src/execution-kanban-dispatch.ts
 import { randomUUID } from "node:crypto";
+import { missingRequiredRuntimeTools } from "@wrongstack/core/agent-catalog";
 import { WIDE_SUBAGENT_CAPABILITIES } from "@wrongstack/core/security";
+import { stripFrontmatter } from "@wrongstack/core/skills";
 
 // src/kanban-dispatch-route.ts
 import { fallbackProfileChain, parseModelRef as parseModelRef2 } from "@wrongstack/core/agent";
@@ -2358,21 +2379,43 @@ function createKanbanDispatchHandler({
     } = resolveKanbanDispatchRoute(config, spawnOpts);
     let agentDescription = description;
     if (spawnOpts?.skills?.length && skillLoader) {
-      const loaded = await Promise.all(
-        spawnOpts.skills.map(async (skillName) => {
+      const availableToolNames = spawnOpts.tools;
+      const loaded = [];
+      for (const skillName of spawnOpts.skills) {
+        try {
           const manifest = await skillLoader.find(skillName);
-          if (!manifest) throw new Error(`Kanban skill not found: ${skillName}`);
-          const body = await skillLoader.readBody(skillName);
-          return `## Required skill: ${skillName}
+          if (!manifest) {
+            process.emitWarning(`Kanban dispatch skill not found, skipped: ${skillName}`, {
+              code: "WRONGSTACK_KANBAN_SKILL_SKIPPED"
+            });
+            continue;
+          }
+          if (availableToolNames !== void 0 && missingRequiredRuntimeTools(manifest.requiredTools, availableToolNames).length > 0) {
+            process.emitWarning(
+              `Kanban dispatch skill "${skillName}" needs tools this worker does not have, skipped.`,
+              { code: "WRONGSTACK_KANBAN_SKILL_SKIPPED" }
+            );
+            continue;
+          }
+          const body = stripFrontmatter(await skillLoader.readBody(skillName)).trim();
+          if (!body) continue;
+          loaded.push(`## Required skill: ${skillName}
 
-${body}`;
-        })
-      );
-      agentDescription = `${description}
+${body}`);
+        } catch (err) {
+          process.emitWarning(
+            `Kanban dispatch skill "${skillName}" could not be loaded, skipped: ${err instanceof Error ? err.message : String(err)}`,
+            { code: "WRONGSTACK_KANBAN_SKILL_SKIPPED" }
+          );
+        }
+      }
+      if (loaded.length > 0) {
+        agentDescription = `${description}
 
 # Required agentic skill instructions
 
 ${loaded.join("\n\n")}`;
+      }
     }
     void (async () => {
       const built = await sddSubagentFactory({
@@ -4738,6 +4781,7 @@ async function execute(deps) {
       positional,
       slashRegistry,
       tokenCounter,
+      sessionRef,
       activateSessionIdentity,
       updateInfo: initialUpdateInfo,
       webuiSessionChild
@@ -4934,6 +4978,12 @@ async function execute(deps) {
         activeSessionStore,
         activateSessionIdentity,
         detachActiveTodosCheckpoint,
+        // Plumbed from cli-main.ts so `resumeSession` can repoint the ref
+        // when an in-process `/resume` swaps the active writer. Optional
+        // on TuiRuntimeState; tests/hosts that omit it revert to the
+        // pre-refactor behavior where provider calls stay pinned to the
+        // boot session.
+        sessionRef,
         pendingProjectSwitch: null,
         autonomousCoordinator: null,
         coordinatorRun: null,
@@ -5312,4 +5362,4 @@ export {
   execute,
   resolveReviewerFallbackModels
 };
-//# sourceMappingURL=execution-MVOH6PAQ.js.map
+//# sourceMappingURL=execution-YMBD7YWC.js.map

package/dist/fleet/host-context.d.ts

@@ -6,6 +6,8 @@ export interface SkillResolutionReport {
     selected: string[];
     /** skill → why it was dropped, so the omission is never silent. */
     dropped: Record<string, 'not-found' | 'missing-capability' | 'missing-tool' | 'budget' | 'empty'>;
+    /** Skills kept under budget by shortening their bundled body. */
+    trimmed: string[];
 }
 export declare function resolveHostSubagentSkillResolution(deps: MultiAgentDeps, roster: Record<string, SubagentConfig>, subCfg: SubagentConfig, availableToolNames?: readonly string[]): Promise<SkillResolutionReport>;
 /** Backwards-compatible wrapper for callers that only need the prompt text. */

package/dist/fleet/host-session-writer.d.ts

@@ -1,3 +1,36 @@
 import type { SessionWriter } from '@wrongstack/core/types';
+/**
+ * Session writer for a subagent that has no journal of its own: its events are
+ * interleaved into the parent's JSONL.
+ *
+ * Lifecycle and rewind *control* stay no-ops — `writeCheckpoint`,
+ * `writeInFlightMarker`, `truncateToCheckpoint`, `clearSession` and `close`
+ * belong to the parent, and a subagent driving them would corrupt the parent's
+ * checkpoint chain and crash-recovery markers.
+ *
+ * Rewind *evidence* is a different thing and is forwarded. A subagent's file
+ * mutations are real edits to the user's working tree, made under the parent
+ * prompt that spawned it; dropping their `file_snapshot` records left `/rewind`
+ * quietly unable to undo them, with nothing in the transcript saying so. The
+ * parent writer files them against its own `activePromptIndex`, which is
+ * exactly the prompt a user rewinding this work would target.
+ */
 export declare function createParentSubagentSessionWriter(parentSession: SessionWriter): SessionWriter;
+/**
+ * Wrap a subagent's own `SessionWriter` so its file mutations are ALSO recorded
+ * against the parent session.
+ *
+ * When a subagent gets a real per-subagent JSONL, its `file_snapshot` events
+ * land in that file — under the director run directory, which
+ * `DefaultSessionRewinder` never reads: it resolves one path, the session being
+ * rewound. So the richer, "proper" subagent-session path was the one that lost
+ * rewind coverage entirely, while the fallback shim above at least had the
+ * parent handle in reach.
+ *
+ * Recording to the parent as well keeps one authority for undo (the session the
+ * user actually rewinds) without taking anything away from the subagent's own
+ * transcript, which still receives every other event including the conversation
+ * that produced the edit.
+ */
+export declare function withParentFileSnapshots(subagentSession: SessionWriter, parentSession: SessionWriter): SessionWriter;
 //# sourceMappingURL=host-session-writer.d.ts.map

package/dist/fleet/host.d.ts

@@ -211,6 +211,16 @@ export declare class MultiAgentHost {
      * Returns null when auto-optimization is switched off.
      */
     private getLearningOptimizer;
+    /**
+     * Break a dispatch tie with a model when the keyword heuristic is ambiguous.
+     *
+     * Routes through the `dispatcher` model-matrix slot when one is configured —
+     * picking a role is a short classification, so it belongs on a cheap fast
+     * model rather than the leader's — and the session default otherwise.
+     * Returning `null` on any failure leaves the dispatcher on its heuristic
+     * result, so routing degrades rather than breaking a spawn.
+     */
+    private classifyDispatch;
     /**
      * Resolve a model for the distillation pass. Uses the `memory-curator` slot
      * of the model matrix when one is configured — curating learned knowledge is

package/dist/{hq-CD77GVSS.js → hq-5G6D5YIU.js}

@@ -47,7 +47,7 @@ var hqCmd = async (args, deps) => {
   return 1;
 };
 async function startServer(deps) {
-  const { startHqServer } = await import("./hq-server-DME6EWIO.js");
+  const { startHqServer } = await import("./hq-server-IVZLVCFV.js");
   const dataDir = resolveDataDir(deps);
   const flags = deps.flags ?? {};
   const host = typeof flags["host"] === "string" ? flags["host"] : HQ_CLI_DEFAULT_HOST;
@@ -612,4 +612,4 @@ export {
   hqCmd,
   resolveAuditActor
 };
-//# sourceMappingURL=hq-CD77GVSS.js.map
+//# sourceMappingURL=hq-5G6D5YIU.js.map

package/dist/{hq-server-DME6EWIO.js → hq-server-IVZLVCFV.js}

@@ -15,7 +15,7 @@ import {
   readLocalSubagentTranscript,
   sanitizeApiError,
   startHqServer
-} from "./chunk-LUAFQIXT.js";
+} from "./chunk-RHLQT3EV.js";
 import "./chunk-KE7E7DPX.js";
 import "./chunk-Q5GTM25S.js";
 import "./chunk-7OCVIDC7.js";
@@ -37,4 +37,4 @@ export {
   sanitizeApiError,
   startHqServer
 };
-//# sourceMappingURL=hq-server-DME6EWIO.js.map
+//# sourceMappingURL=hq-server-IVZLVCFV.js.map

package/dist/index.js

@@ -1,8 +1,4 @@
 #!/usr/bin/env node
-import {
-  parseWebuiSessionChildOptions,
-  writeWebuiSessionChildError
-} from "./chunk-3JPTNADJ.js";
 import {
   applySimpleUiFullAutoProfile,
   detectProjectFacts,
@@ -17,6 +13,10 @@ import {
 import {
   patchConfig
 } from "./chunk-TYO2OVAD.js";
+import {
+  parseWebuiSessionChildOptions,
+  writeWebuiSessionChildError
+} from "./chunk-3JPTNADJ.js";
 import {
   parseArgs,
   runPicker,
@@ -43,7 +43,7 @@ import "./chunk-U3SS4NRH.js";
 import "./chunk-NUIHRGPY.js";
 import {
   DEFAULT_PORT
-} from "./chunk-LUAFQIXT.js";
+} from "./chunk-RHLQT3EV.js";
 import "./chunk-KE7E7DPX.js";
 import "./chunk-Q5GTM25S.js";
 import {
@@ -59,7 +59,7 @@ import {
 import "./chunk-7OCVIDC7.js";
 
 // src/cli-context.ts
-import { TOKENS as TOKENS4 } from "@wrongstack/core/kernel";
+import { TOKENS as TOKENS3 } from "@wrongstack/core/kernel";
 import { writeErr as writeErr3 } from "@wrongstack/core/utils";
 import { setOAuthTokenPersister } from "@wrongstack/providers";
 
@@ -761,7 +761,7 @@ async function isPortInUse(host, port) {
 }
 async function handleHqShortCircuit(flags) {
   if (flags["hq"] !== true) return null;
-  const { startHqServer } = await import("./hq-server-DME6EWIO.js");
+  const { startHqServer } = await import("./hq-server-IVZLVCFV.js");
   const tunnelRequested = flags["tunnel"] === true;
   const host = typeof flags["host"] === "string" ? flags["host"] : tunnelRequested ? "127.0.0.1" : HQ_CLI_DEFAULT_HOST2;
   if (tunnelRequested && !isLoopbackHost(host)) {
@@ -2306,7 +2306,7 @@ function compactSingleLine(text) {
 
 // src/subcommands/index.ts
 var loaders = {
-  acp: async () => (await import("./acp-AQMGKW6O.js")).acpCmd,
+  acp: async () => (await import("./acp-5ZLGFHWP.js")).acpCmd,
   init: async () => (await import("./init-E2NDDOHI.js")).initCmd,
   auth: async () => (await import("./auth-K7CYVVKH.js")).authCmd,
   update: async () => (await import("./update-VZSOZGYC.js")).updateCmd,
@@ -2319,7 +2319,7 @@ var loaders = {
   skills: async () => (await import("./tools-skills-UNKLOB7M.js")).skillsCmd,
   providers: async () => (await import("./providers-models-VV74TRQ2.js")).providersCmd,
   models: async () => (await import("./providers-models-VV74TRQ2.js")).modelsCmd,
-  mcp: async () => (await import("./mcp-AX6ZAFJR.js")).mcpCmd,
+  mcp: async () => (await import("./mcp-MSARYOPN.js")).mcpCmd,
   plugin: async () => (await import("./plugin-usage-PTEETL3J.js")).pluginCmd,
   plugins: async () => (await import("./plugin-usage-PTEETL3J.js")).pluginCmd,
   diag: async () => (await import("./diag-doctor-ZF5BF2MK.js")).diagCmd,
@@ -2333,8 +2333,8 @@ var loaders = {
   quick: async () => (await import("./quick-VIO2BEHS.js")).quickCmd,
   bench: async () => (await import("./bench-XNDUJOSZ.js")).benchCmd,
   chronicle: async () => (await import("./chronicle-63MFCZN6.js")).chronicleCmd,
-  hq: async () => (await import("./hq-CD77GVSS.js")).hqCmd,
-  mailbox: async () => (await import("./mailbox-serve-DBOOOOWZ.js")).mailboxServeCmd,
+  hq: async () => (await import("./hq-5G6D5YIU.js")).hqCmd,
+  mailbox: async () => (await import("./mailbox-serve-V3QIJBDH.js")).mailboxServeCmd,
   permissions: async () => (await import("./permissions-2PWBL4YU.js")).permissionsCmd,
   project: async () => (await import("./project-BLQ3ALVL.js")).projectCmd,
   governance: async () => (await import("./governance-V2Z42RBE.js")).governanceCmd
@@ -2916,35 +2916,6 @@ async function runPreflight(config, initialUpdateInfo) {
   };
 }
 
-// src/wiring/replay.ts
-import { runProviderWithRetry } from "@wrongstack/core/agent";
-import { TOKENS as TOKENS3 } from "@wrongstack/core/kernel";
-import { ReplayProviderRunner } from "@wrongstack/core/replay";
-import { ReplayLogStore } from "@wrongstack/core/storage";
-function bindReplayToContainer(opts) {
-  const { container, wpaths, sessionId, mode, logger } = opts;
-  if (!opts.container.has(TOKENS3.ProviderRunner)) {
-    container.bind(
-      TOKENS3.ProviderRunner,
-      () => ({
-        run: (o) => runProviderWithRetry(o)
-      })
-    );
-  }
-  const inner = container.resolve(TOKENS3.ProviderRunner);
-  const log = new ReplayLogStore({ dir: wpaths.projectSessions });
-  const wrapped = new ReplayProviderRunner(inner, {
-    log,
-    sessionId,
-    mode,
-    logger: logger ? {
-      debug: (m) => logger.debug?.(m),
-      warn: (m) => logger.warn?.(m)
-    } : void 0
-  });
-  container.bind(TOKENS3.ProviderRunner, () => wrapped);
-}
-
 // src/cli-context.ts
 async function initializeCli(argv) {
   applyNodeEnvDefault();
@@ -3103,21 +3074,7 @@ async function initializeCli(argv) {
     renderer,
     modelsRegistry
   });
-  const replayFlag = ctx.flags["replay"];
-  const recordFlag = ctx.flags["record"];
-  if (typeof replayFlag === "string" || recordFlag === true) {
-    const sessionId = typeof replayFlag === "string" ? replayFlag : `record-${Date.now()}`;
-    const mode = recordFlag === true ? "record" : "replay";
-    bindReplayToContainer({
-      container,
-      wpaths,
-      sessionId,
-      mode,
-      logger
-    });
-    logger.info(`replay: ProviderRunner bound in '${mode}' mode for session ${sessionId}`);
-  }
-  const configStore = container.resolve(TOKENS4.ConfigStore);
+  const configStore = container.resolve(TOKENS3.ConfigStore);
   return {
     ...ctx,
     updateInfo: refreshedUpdateInfo,
@@ -3132,7 +3089,7 @@ async function initializeCli(argv) {
 async function main(argv) {
   const cliCtx = await initializeCli(argv);
   if (typeof cliCtx === "number") return cliCtx;
-  const { runInteractive } = await import("./cli-main-37XO26GK.js");
+  const { runInteractive } = await import("./cli-main-W3T56YCY.js");
   return runInteractive(cliCtx);
 }
 

package/dist/{mailbox-serve-DBOOOOWZ.js → mailbox-serve-V3QIJBDH.js}

@@ -1,6 +1,6 @@
 import {
   startCliHqConnection
-} from "./chunk-JW75HY4F.js";
+} from "./chunk-FKWHSFX4.js";
 import "./chunk-7OCVIDC7.js";
 
 // src/subcommands/handlers/mailbox-serve.ts
@@ -341,4 +341,4 @@ function printHelp(deps) {
 export {
   mailboxServeCmd
 };
-//# sourceMappingURL=mailbox-serve-DBOOOOWZ.js.map
+//# sourceMappingURL=mailbox-serve-V3QIJBDH.js.map

package/dist/{mcp-AX6ZAFJR.js → mcp-MSARYOPN.js}

@@ -221,7 +221,9 @@ async function serveMcpStdio(deps) {
     secretScrubber: new DefaultSecretScrubber(),
     maxToolTimeoutMs: deps.config.tools?.maxToolTimeoutMs ?? 3e5,
     perIterationOutputCapBytes: 1e6,
-    requireKanbanGovernance: true
+    // Kanban tracks work; it does not gate it. Off unless the operator opts in.
+    // See wiring/pipeline.ts for why all four hosts must agree.
+    requireKanbanGovernance: deps.config.tools?.kanbanGovernance ?? false
   });
   const allowed = await selectExposedTools(registry, ctx, permissionPolicy, whitelist);
   const allowedNames = new Set(allowed.map((t) => t.name));
@@ -415,4 +417,4 @@ function isRecord(value) {
 export {
   mcpCmd
 };
-//# sourceMappingURL=mcp-AX6ZAFJR.js.map
+//# sourceMappingURL=mcp-MSARYOPN.js.map

package/dist/replay-XU6ZD7GM.js

@@ -0,0 +1,34 @@
+import "./chunk-7OCVIDC7.js";
+
+// src/wiring/replay.ts
+import { runProviderWithRetry } from "@wrongstack/core/agent";
+import { TOKENS } from "@wrongstack/core/kernel";
+import { ReplayProviderRunner } from "@wrongstack/core/replay";
+import { ReplayLogStore } from "@wrongstack/core/storage";
+function bindReplayToContainer(opts) {
+  const { container, wpaths, sessionId, mode, logger } = opts;
+  if (!opts.container.has(TOKENS.ProviderRunner)) {
+    container.bind(
+      TOKENS.ProviderRunner,
+      () => ({
+        run: (o) => runProviderWithRetry(o)
+      })
+    );
+  }
+  const inner = container.resolve(TOKENS.ProviderRunner);
+  const log = new ReplayLogStore({ dir: wpaths.projectSessions });
+  const wrapped = new ReplayProviderRunner(inner, {
+    log,
+    sessionId,
+    mode,
+    logger: logger ? {
+      debug: (m) => logger.debug?.(m),
+      warn: (m) => logger.warn?.(m)
+    } : void 0
+  });
+  container.bind(TOKENS.ProviderRunner, () => wrapped);
+}
+export {
+  bindReplayToContainer
+};
+//# sourceMappingURL=replay-XU6ZD7GM.js.map

package/dist/slash-commands/memory-triage.d.ts

@@ -19,29 +19,16 @@
  * `/memory compact`. Falls back to a no-op LLM if the provider is absent
  * (Phase 3 and 4 will degrade to skip-only; report is still useful).
  */
-import type { CreateCandidateInput, SageSurface } from '@wrongstack/sage';
+import type { SageSurface } from '@wrongstack/sage';
 import { type TriageReport } from '@wrongstack/sage';
 import type { SlashCommandContext } from './command-context.js';
 export declare function runTriageCommand(opts: SlashCommandContext, args: string[]): Promise<{
     message: string;
 }>;
-export interface ProposalFileResult {
-    filed: number;
-    failed: number;
-    total: number;
-    failures: Array<{
-        memoryId: string;
-        error: string;
-    }>;
-    /** All inputs that were submitted to Sage.createCandidate, for test verification. */
-    inputs: CreateCandidateInput[];
-}
+export type { ProposalFileResult } from '@wrongstack/sage';
 /**
  * File triage proposals as MemoryCandidates via the Sage surface.
- *
- * Exported for unit testing — the round-trip path through
- * Sage.createCandidate is the key contract: every proposal must
- * surface in `/memory candidates` for human review.
+ * Implementation lives in `@wrongstack/sage` (shared with daily dry-run).
  */
-export declare function fileProposals(Sage: SageSurface, proposals: TriageReport['dispatch']['proposals']): Promise<ProposalFileResult>;
+export declare function fileProposals(Sage: SageSurface, proposals: TriageReport['dispatch']['proposals']): Promise<import('@wrongstack/sage').ProposalFileResult>;
 //# sourceMappingURL=memory-triage.d.ts.map

package/dist/{webui-server-E3OPEKU5.js → webui-server-FTG7JAZU.js}

@@ -1,12 +1,12 @@
-import {
-  createKanbanRunMirror
-} from "./chunk-VCYZ3WZV.js";
 import {
   createHqCommandDispatcher
 } from "./chunk-7YLN7YUA.js";
+import {
+  createKanbanRunMirror
+} from "./chunk-VCYZ3WZV.js";
 import {
   startCliHqConnection
-} from "./chunk-JW75HY4F.js";
+} from "./chunk-FKWHSFX4.js";
 import {
   WEBUI_SESSION_CHILD_CAPABILITIES
 } from "./chunk-3JPTNADJ.js";
@@ -1591,4 +1591,4 @@ async function runWebUI(opts) {
 export {
   runWebUI
 };
-//# sourceMappingURL=webui-server-E3OPEKU5.js.map
+//# sourceMappingURL=webui-server-FTG7JAZU.js.map

package/dist/wiring/domain-glossary.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Narrow adapter that bridges the resolved SAGE `MemoryPort` to the
+ * `DomainGlossary` shape the prompt builder consumes.
+ *
+ * Background
+ * ----------
+ * The agent system prompt wants a compact `[Project Jargon Dictionary]`
+ * block listing only the project's `domain-term`-tagged memories. The
+ * block must come from SAGE so the same single-owner-of-SQLite invariant
+ * holds (per `packages/sage/docs/direct-icp-usage.md`). But the prompt
+ * builder runs **before** any per-turn SAGE middleware has filtered the
+ * corpus — so we can't simply hand it the legacy `MemoryStore` and ask
+ * it to call `list()`. That would scan every memory on every prompt
+ * build, which is exactly what the glossary block was supposed to
+ * avoid.
+ *
+ * Instead, we ask SAGE for only the `domain-term`-tagged subset using
+ * the typed `SageServiceLike.searchSage({ query: 'domain-term', limit })`
+ * op (which performs the tag/keyword filter at the SQL layer), then map
+ * the resulting `Sage[]` into the canonical `MemoryEntry` shape that
+ * `renderDomainGlossary` in `packages/core/src/core/system-prompt-glossary.ts`
+ * is typed against.
+ *
+ * Architectural rule
+ * ------------------
+ * This module imports from `@wrongstack/sage` directly — **never** from
+ * `@wrongstack/sage-mcp`. The CLI is an in-process consumer; the MCP
+ * surface is reserved for out-of-process clients (Claude Desktop, other
+ * agent runtimes).
+ */
+import type { MemoryEntry, MemoryPort } from '@wrongstack/core/types';
+/**
+ * Narrow `MemoryEntry`-shaped list provider for the `[Project Jargon Dictionary]`
+ * block. Returns only `domain-term`-tagged SAGE memories, mapped to the
+ * canonical `MemoryEntry` shape `renderDomainGlossary` is typed against.
+ *
+ * Robustness contract:
+ * - If the port is the legacy `LegacyMemoryPortAdapter` (no SAGE
+ *   capability), the helper returns an empty glossary rather than
+ *   throwing — the prompt must still assemble.
+ * - If `searchSage` rejects, the wrapper returns an empty glossary
+ *   for this prompt build; SAGE itself remains the source of truth and
+ *   the next prompt retry can succeed.
+ */
+export interface DomainGlossaryListProvider {
+    list(scope: 'project-memory', limit?: number): Promise<ReadonlyArray<MemoryEntry>>;
+}
+/**
+ * Build a `DomainGlossaryListProvider` over a SAGE-aware `MemoryPort`.
+ *
+ * The mapping is honest: every `MemoryEntry` field that core will read
+ * (`text`, `tags`, `confidence`, `ts`, `priority`) is populated from the
+ * corresponding `Sage` field. `text` is preserved verbatim because
+ * `SageDomainTermExtractor` writes the canonical `"Term — Definition"`
+ * format that `parseTermEntry` in core splits back apart.
+ */
+export declare function createDomainGlossaryAdapter(memoryStore: MemoryPort): DomainGlossaryListProvider;
+//# sourceMappingURL=domain-glossary.d.ts.map