@wrongstack/cli 0.303.0 → 0.305.1

package/dist/{acp-AQMGKW6O.js → acp-5ZLGFHWP.js}

@@ -264,7 +264,9 @@ function buildAcpServerAgentFactory(deps, options = {}) {
       maxToolTimeoutMs: config.tools?.maxToolTimeoutMs ?? 3e5,
       perIterationOutputCapBytes: config.tools?.perIterationOutputCapBytes ?? 1e5,
       tracer: void 0,
-      requireKanbanGovernance: true
+      // Kanban tracks work; it does not gate it. Off unless the operator opts
+      // in. See wiring/pipeline.ts for why all four hosts must agree.
+      requireKanbanGovernance: config.tools?.kanbanGovernance ?? false
     });
     return new Agent({
       container,
@@ -909,4 +911,4 @@ ${renderAcpBenchText(result)}
 export {
   acpCmd
 };
-//# sourceMappingURL=acp-AQMGKW6O.js.map
+//# sourceMappingURL=acp-5ZLGFHWP.js.map

package/dist/{auth-K7CYVVKH.js → auth-EPERLKYI.js}

@@ -13,14 +13,14 @@ import {
   runOAuthLoginKind,
   runOAuthLoginMenu,
   validateFamily
-} from "./chunk-FJVCVZIV.js";
+} from "./chunk-5KFLLTSQ.js";
 import "./chunk-SSSJQVUY.js";
 import {
   restoreFlags
 } from "./chunk-CSAPOCBP.js";
 import {
   parseAuthFlags
-} from "./chunk-C5NXM2SI.js";
+} from "./chunk-2H47YMCV.js";
 import "./chunk-3IC4IEZC.js";
 import {
   loadConfigProviders,
@@ -657,4 +657,4 @@ async function runAuthRemove(deps, providerId) {
 export {
   authCmd
 };
-//# sourceMappingURL=auth-K7CYVVKH.js.map
+//# sourceMappingURL=auth-EPERLKYI.js.map

package/dist/boot/system-prompt-builder.d.ts

@@ -23,6 +23,19 @@ export interface SystemPromptBuilderPaths {
 interface PathJoiner {
     join(a: string, b: string): string;
 }
+/**
+ * Narrow adapter for the `[Project Jargon Dictionary]` block.
+ *
+ * Re-exported from `../wiring/domain-glossary.ts` so the helper keeps
+ * its zero-coupling contract (no direct import of core's
+ * `MemoryStore` / `MemoryEntry` types). The CLI provides a closure
+ * over the resolved SAGE `memoryStore` that calls
+ * `searchSage('domain-term', { limit })` and maps the result to the
+ * canonical `MemoryEntry` shape that `renderDomainGlossary` in core
+ * is typed against.
+ */
+import type { DomainGlossaryListProvider as DomainGlossaryAdapter } from '../wiring/domain-glossary.js';
+export type { DomainGlossaryListProvider } from '../wiring/domain-glossary.js';
 interface BindSystemPromptBuilderDeps {
     /**
      * The `container` from main(). The helper only calls
@@ -74,6 +87,17 @@ interface BindSystemPromptBuilderDeps {
     /** `config.systemPrompt.variant` — selects system.md, system-lite.md, or system-pro.md. */
     systemPromptVariant?: SystemInstructionVariant | undefined;
     paths: SystemPromptBuilderPaths;
+    /**
+     * Optional narrow `domain-term` adapter for the prompt glossary block.
+     * The CLI provides a closure over the resolved SAGE `memoryStore` that
+     * calls `search({ query: 'domain-term', scope: 'project-memory', limit })`
+     * and returns only the tagged subset, then forwards the result through the
+     * `DomainGlossary.list` shape consumed by
+     * `packages/core/src/core/system-prompt-glossary.ts`.
+     *
+     * Omit → no `[Project Jargon Dictionary]` block in the prompt.
+     */
+    domainGlossary?: DomainGlossaryAdapter | undefined;
     /** `path.join`-shaped helper from the runtime. */
     pathJoiner: PathJoiner;
     /** The `TOKENS.SystemPromptBuilder` token, opaque to the
@@ -91,5 +115,4 @@ interface BindSystemPromptBuilderDeps {
  * matches the pre-refactor inline behavior exactly.
  */
 export declare function bindSystemPromptBuilder(deps: BindSystemPromptBuilderDeps): void;
-export {};
 //# sourceMappingURL=system-prompt-builder.d.ts.map

package/dist/boot/tui-project-switch.d.ts

@@ -1,5 +1,5 @@
 import { type Agent, type Context } from '@wrongstack/core/agent';
-import type { EventBus } from '@wrongstack/core/kernel';
+import { type EventBus } from '@wrongstack/core/kernel';
 import type { Config, MemoryPort, ModeStore, SkillLoader } from '@wrongstack/core/types';
 import type { TuiRuntimeState } from './tui-runtime-state.js';
 export interface ProjectSwitchContext {

package/dist/boot/tui-runtime-state.d.ts

@@ -73,6 +73,20 @@ export interface TuiRuntimeState {
     activateSessionIdentity?: ((sessionId: string, target?: SessionIdentityTarget) => Promise<void>) | undefined;
     /** Todos checkpoint detach function. Mutated by switchProjectInPlace. */
     detachActiveTodosCheckpoint: (() => void | Promise<void>) | undefined;
+    /**
+     * Forward-declared session ref that lives on the cli-main scope. Mutated by
+     * `resumeSession()` when an in-process `/resume` swaps the active writer so
+     * provider-side `getSessionId: () => sessionRef.current?.id` callbacks and
+     * record-mode bindings follow the resumed session instead of staying pinned
+     * to the boot session.
+     *
+     * Optional: tests/hosts that predate the resume refactor can omit it. The
+     * resume handler is then a no-op for the ref, leaving provider calls pinned
+     * to the boot session — same behavior as before this field existed.
+     */
+    sessionRef?: {
+        current: import('@wrongstack/core/types').SessionWriter | undefined;
+    } | undefined;
     /** Pending project switch (F1 picker / F10 sessions). Set by onProjectSelect/onSwitchToSession. */
     pendingProjectSwitch: PendingProjectSwitch | null;
     /** Lazy AutonomousCoordinator. Set by ensureAutonomousCoordinator. */

package/dist/{chunk-C5NXM2SI.js → chunk-2H47YMCV.js}

@@ -62,6 +62,10 @@ var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "insecure-open",
   "strict-port",
   "client",
+  // `wstack doctor` booleans. Without these, `--daemons --clear-stale` parses
+  // as `daemons="--clear-stale"` and the second flag disappears.
+  "daemons",
+  "clear-stale",
   // `wstack update` booleans. Keeping these here prevents parseArgs from
   // consuming a following positional token as an accidental flag value.
   "check-only",
@@ -1052,4 +1056,4 @@ export {
   runLiveProviderPicker,
   runPicker
 };
-//# sourceMappingURL=chunk-C5NXM2SI.js.map
+//# sourceMappingURL=chunk-2H47YMCV.js.map

package/dist/{chunk-FJVCVZIV.js → chunk-5KFLLTSQ.js}

@@ -6,7 +6,7 @@ import {
 import {
   LOCAL_LLM_PRESETS,
   runLiveProviderPicker
-} from "./chunk-C5NXM2SI.js";
+} from "./chunk-2H47YMCV.js";
 import {
   activeLabel,
   loadConfigProviders,
@@ -1374,4 +1374,4 @@ export {
   addCustomProvider,
   addKeyForProvider
 };
-//# sourceMappingURL=chunk-FJVCVZIV.js.map
+//# sourceMappingURL=chunk-5KFLLTSQ.js.map

package/dist/{chunk-JW75HY4F.js → chunk-FKWHSFX4.js}

@@ -4,7 +4,11 @@ import { createHqPublisherFromEnv, resolveHqConfig } from "@wrongstack/core/hq";
 import { WebSocket } from "ws";
 
 // src/kanban-hq-sync.ts
-import { deriveHqProjectId } from "@wrongstack/core/hq";
+import {
+  deriveHqProjectId,
+  MAX_HQ_KANBAN_BOARD_BYTES,
+  redactHqEventPayload
+} from "@wrongstack/core/hq";
 import {
   bridgeKanbanSupervisor,
   deleteBoard,
@@ -18,6 +22,7 @@ var SYNC_STATE_KEY = "hq-sync-state-v1";
 var MAX_KANBAN_SNAPSHOT_PAYLOAD_BYTES = 512 * 1024;
 var KANBAN_TOMBSTONE_RETENTION_MS = 30 * 24 * 60 * 60 * 1e3;
 var MAX_BOARDS_PER_PUBLISH = 50;
+var KANBAN_SNAPSHOT_SUMMARY_CAP = 1e5;
 function warnSyncFailure(error) {
   process.emitWarning(
     `WrongStack kanban HQ sync failed (best-effort, will retry on next change): ${error instanceof Error ? error.message : String(error)}`,
@@ -123,6 +128,14 @@ function createKanbanHqSync(projectRoot, projectId = deriveHqProjectId(projectRo
       }
       present.add(boardId);
       const record = boardRecord(board);
+      const wireBytes = hqWireBoardBytes(record.board, target.redactionPolicy);
+      if (wireBytes > MAX_HQ_KANBAN_BOARD_BYTES) {
+        process.emitWarning(
+          `Kanban board "${boardId}" serializes to ${wireBytes} bytes for HQ, over the ${MAX_HQ_KANBAN_BOARD_BYTES}-byte per-board limit. It will not appear in HQ until it shrinks; archive completed cards.`,
+          { code: "WRONGSTACK_HQ_KANBAN_BOARD_DROPPED" }
+        );
+        continue;
+      }
       const known = state.boards[boardId];
       const hadTombstone = state.tombstones[boardId] !== void 0;
       if (fullSnapshot || hadTombstone || known === void 0 || compareVersions(known.revision, known.updatedAt, record.revision, record.updatedAt) !== 0) {
@@ -160,7 +173,7 @@ function createKanbanHqSync(projectRoot, projectId = deriveHqProjectId(projectRo
       target.publishEvent({
         type: "kanban.snapshot",
         payload,
-        maxSummaryLength: 1e5
+        maxSummaryLength: KANBAN_SNAPSHOT_SUMMARY_CAP
       });
     }
   };
@@ -270,6 +283,15 @@ function createKanbanHqSync(projectRoot, projectId = deriveHqProjectId(projectRo
     }
   };
 }
+function hqWireBoardBytes(board, policy) {
+  const raw = Buffer.byteLength(JSON.stringify(board), "utf8");
+  if (raw <= MAX_HQ_KANBAN_BOARD_BYTES) return raw;
+  const redacted = redactHqEventPayload("kanban.snapshot", board, {
+    policy,
+    maxSummaryLength: KANBAN_SNAPSHOT_SUMMARY_CAP
+  }).value;
+  return Buffer.byteLength(JSON.stringify(redacted), "utf8");
+}
 function boardRecord(board) {
   return {
     boardId: board.id,
@@ -325,7 +347,14 @@ function chunkSnapshotPayload(projectId, generatedAt, boards, tombstones) {
   for (const board of boards) append("boards", board);
   for (const tombstone of tombstones) append("tombstones", tombstone);
   pushCurrent();
-  return chunks.length > 0 ? chunks : [emptyPayload()];
+  const result = chunks.length > 0 ? chunks : [emptyPayload()];
+  if (result.length > 1) {
+    result.forEach((payload, index) => {
+      payload.chunkIndex = index;
+      payload.chunkCount = result.length;
+    });
+  }
+  return result;
 }
 function coalesceRemoteSnapshots(older, newer) {
   const byBoardId = /* @__PURE__ */ new Map();
@@ -478,4 +507,4 @@ function startCliHqConnection(options) {
 export {
   startCliHqConnection
 };
-//# sourceMappingURL=chunk-JW75HY4F.js.map
+//# sourceMappingURL=chunk-FKWHSFX4.js.map

package/dist/{chunk-LUAFQIXT.js → chunk-RHLQT3EV.js}

@@ -3921,6 +3921,16 @@ function handleClient(ws, clients, browsers, eventLog, auth, snapshotBroadcaster
       }
       const parsedPayload = parseHqEventPayload(incomingEvent.type, incomingEvent.payload);
       if (!parsedPayload.ok) {
+        console.warn(
+          JSON.stringify({
+            level: "warn",
+            event: "hq.event_payload_rejected",
+            eventType: incomingEvent.type,
+            clientId: client.clientId,
+            projectId: client.projectId,
+            timestamp: (/* @__PURE__ */ new Date()).toISOString()
+          })
+        );
         return;
       }
       client.lastEventSeq = incomingEvent.seq;
@@ -4773,4 +4783,4 @@ export {
   startHqServer,
   HqInsecureExposureError2 as HqInsecureExposureError
 };
-//# sourceMappingURL=chunk-LUAFQIXT.js.map
+//# sourceMappingURL=chunk-RHLQT3EV.js.map