@wrongstack/cli 0.310.1 → 0.313.1

package/dist/{diag-doctor-Z6JDXBVX.js → diag-doctor-OPTB2NWY.js}

@@ -1,6 +1,10 @@
 import {
   startProxyProbe
-} from "./chunk-3MAUU765.js";
+} from "./chunk-GWVLRUVH.js";
+import {
+  formatGateCounterReport,
+  loadWrongTraceGateCounters
+} from "./chunk-7CECQDNH.js";
 import {
   API_VERSION
 } from "./chunk-XJXDOF63.js";
@@ -141,7 +145,10 @@ var diagCmd = async (_args, deps) => {
     `  model:         ${cfg.model ?? "<unset>"}`,
     `  tools:         ${deps.toolRegistry?.list().length ?? 0}`,
     `  plugins:       ${cfg.plugins?.length ?? 0}`,
-    `  mcpServers:    ${Object.keys(cfg.mcpServers ?? {}).length}`
+    `  mcpServers:    ${Object.keys(cfg.mcpServers ?? {}).length}`,
+    ...deps.events ? [
+      `  eventBus:      listeners=${deps.events.listenerCount()} wildcards=${deps.events.wildcardCount()}`
+    ] : []
   ];
   deps.renderer.write(lines.join("\n") + "\n");
   return 0;
@@ -180,6 +187,11 @@ var proxyCmd = async (_args, deps) => {
     `  active:       ${active}    ${s.color(`(${s.label})`)}`,
     `  shouldRewrite:${gate}  ${rewriteGateLabel(gate)}`
   ];
+  const counters = await loadWrongTraceGateCounters(deps.projectRoot);
+  if (counters) {
+    lines.push(color.bold("WrongTrace gate decisions (last session)"));
+    lines.push(`  ${formatGateCounterReport(counters)}`);
+  }
   deps.renderer.write(lines.join("\n") + "\n");
   return 0;
 };
@@ -372,4 +384,4 @@ export {
   doctorCmd,
   proxyCmd
 };
-//# sourceMappingURL=diag-doctor-Z6JDXBVX.js.map
+//# sourceMappingURL=diag-doctor-OPTB2NWY.js.map

package/dist/{execution-ZEHK4II6.js → execution-L4CXQEND.js}

@@ -29,14 +29,14 @@ import {
 import {
   theme
 } from "./chunk-QD544J2B.js";
+import {
+  fmtTok
+} from "./chunk-TYO2OVAD.js";
 import {
   WEBUI_SESSION_CHILD_CAPABILITIES,
   writeWebuiSessionChildError,
   writeWebuiSessionChildReady
 } from "./chunk-3JPTNADJ.js";
-import {
-  fmtTok
-} from "./chunk-TYO2OVAD.js";
 import {
   terminalLink,
   terminalText
@@ -207,7 +207,7 @@ async function runWebUIDispatch(ctx) {
   const isSimpleUi = !isSessionChild && flags["simpleui"] === true;
   agent.disableInteractiveConfirmation();
   renderer.setSilent(true);
-  const { runWebUI } = await import("./webui-server-UB75UHWX.js");
+  const { runWebUI } = await import("./webui-server-I53IYBW4.js");
   const flagValue = (names) => {
     for (const name of names) {
       if (!Object.hasOwn(flags, name)) continue;
@@ -406,7 +406,7 @@ async function runWebUIDispatch(ctx) {
       applyLiveSettings?.({ yolo: enabled });
     },
     onWrongProxyPrefsChange: (payload) => {
-      void import("./proxy-wiring-7RPGBHZP.js").then(
+      void import("./proxy-wiring-G26YGP7S.js").then(
         ({ applyWrongProxyPrefs }) => applyWrongProxyPrefs(payload)
       );
     }
@@ -1638,7 +1638,7 @@ function coerceAgentSwarmMode(v) {
   if (typeof v === "string" && (v === "bottom" || v === "sidebar" || v === "off")) return v;
   return "bottom";
 }
-var ANIMATION_STYLES = ["rainbow", "wave", "pulse", "dots", "breathe", "cycle"];
+var ANIMATION_STYLES = ["rainbow", "wave", "pulse", "dots", "breathe", "static", "cycle"];
 function normalizeAnimationStyle(raw) {
   return typeof raw === "string" && ANIMATION_STYLES.includes(raw) ? raw : "rainbow";
 }
@@ -1709,6 +1709,7 @@ function createSettingsAdapter(ctx) {
       breakerAutoKillResetMs: cfg.circuitBreaker?.autoKillResetMs ?? 6e4,
       showModelReasoning: autonomy?.showModelReasoning ?? true,
       showAgentSwarmPanel: coerceAgentSwarmMode(autonomy?.showAgentSwarmPanel),
+      showSidebar: autonomy?.showSidebar ?? true,
       // Migrate the legacy `autonomy.showAgentSwarmPanel: 'sidebar'` into
       // the new per-panel `panelPositions.fleet` map at the read boundary
       // so users with old configs (no `panelPositions` key on disk) get
@@ -1733,7 +1734,7 @@ function createSettingsAdapter(ctx) {
   }
   async function saveSettings(s) {
     try {
-      if (s.mode !== void 0 || s.delayMs !== void 0 || s.titleAnimation !== void 0 || s.yolo !== void 0 || s.fleetChatVerbosity !== void 0 || s.chime !== void 0 || s.confirmExit !== void 0 || s.mouseMode !== void 0 || s.featureMcp !== void 0 || s.featurePlugins !== void 0 || s.featureMemory !== void 0 || s.featureSkills !== void 0 || s.featureModelsRegistry !== void 0 || s.featureTokenSaving !== void 0 || s.allowOutsideProjectRoot !== void 0 || s.contextAutoCompact !== void 0 || s.contextStrategy !== void 0 || s.contextMode !== void 0 || s.maxConcurrent !== void 0 || s.logLevel !== void 0 || s.auditLevel !== void 0 || s.indexOnStart !== void 0 || s.maxIterations !== void 0 || s.nextStepsTool !== void 0 || s.restrictFsToRoot !== void 0 || s.nextPrediction !== void 0 || s.debugStream !== void 0 || s.shellBangWarningDontShowAgain !== void 0 || s.configScope !== void 0 || s.enhanceDelayMs !== void 0 || s.enhanceEnabled !== void 0 || s.enhanceLanguage !== void 0 || s.midRunSendPicker !== void 0 || s.statuslineMode !== void 0 || s.thinkingWord !== void 0 || s.animationStyle !== void 0 || s.autonomyNextPrompt !== void 0 || s.autoProceedMaxIterations !== void 0 || s.reasoningMode !== void 0 || s.reasoningEffort !== void 0 || s.reasoningPreserve !== void 0 || s.cacheTtl !== void 0 || s.breakerEnabled !== void 0 || s.breakerAutoKillResetMs !== void 0 || s.showModelReasoning !== void 0 || s.showAgentSwarmPanel !== void 0 || s.panelPositions !== void 0 || s.showSageMemoryInject !== void 0 || s.sageMemoryInjectThreshold !== void 0 || s.readSymbols !== void 0 || // WrongProxy / WrongTrace: gate the persisted-section write on
+      if (s.mode !== void 0 || s.delayMs !== void 0 || s.titleAnimation !== void 0 || s.yolo !== void 0 || s.fleetChatVerbosity !== void 0 || s.chime !== void 0 || s.confirmExit !== void 0 || s.mouseMode !== void 0 || s.featureMcp !== void 0 || s.featurePlugins !== void 0 || s.featureMemory !== void 0 || s.featureSkills !== void 0 || s.featureModelsRegistry !== void 0 || s.featureTokenSaving !== void 0 || s.allowOutsideProjectRoot !== void 0 || s.contextAutoCompact !== void 0 || s.contextStrategy !== void 0 || s.contextMode !== void 0 || s.maxConcurrent !== void 0 || s.logLevel !== void 0 || s.auditLevel !== void 0 || s.indexOnStart !== void 0 || s.maxIterations !== void 0 || s.nextStepsTool !== void 0 || s.restrictFsToRoot !== void 0 || s.nextPrediction !== void 0 || s.debugStream !== void 0 || s.shellBangWarningDontShowAgain !== void 0 || s.configScope !== void 0 || s.enhanceDelayMs !== void 0 || s.enhanceEnabled !== void 0 || s.enhanceLanguage !== void 0 || s.midRunSendPicker !== void 0 || s.statuslineMode !== void 0 || s.thinkingWord !== void 0 || s.animationStyle !== void 0 || s.autonomyNextPrompt !== void 0 || s.autoProceedMaxIterations !== void 0 || s.reasoningMode !== void 0 || s.reasoningEffort !== void 0 || s.reasoningPreserve !== void 0 || s.cacheTtl !== void 0 || s.breakerEnabled !== void 0 || s.breakerAutoKillResetMs !== void 0 || s.showModelReasoning !== void 0 || s.showAgentSwarmPanel !== void 0 || s.showSidebar !== void 0 || s.panelPositions !== void 0 || s.showSageMemoryInject !== void 0 || s.sageMemoryInjectThreshold !== void 0 || s.readSymbols !== void 0 || // WrongProxy / WrongTrace: gate the persisted-section write on
       // either key being present in the live patch. Without this, a
       // picker toggle round-trip would silently no-op the persistence
       // layer (the runtime probe would never read the change).
@@ -1789,6 +1790,7 @@ function createSettingsAdapter(ctx) {
         if (s.showModelReasoning !== void 0) autonomy.showModelReasoning = s.showModelReasoning;
         if (s.showAgentSwarmPanel !== void 0)
           autonomy.showAgentSwarmPanel = s.showAgentSwarmPanel;
+        if (s.showSidebar !== void 0) autonomy.showSidebar = s.showSidebar;
         if (s.panelPositions !== void 0) autonomy.panelPositions = s.panelPositions;
         if (s.showSageMemoryInject !== void 0)
           autonomy.showSageMemoryInject = s.showSageMemoryInject;
@@ -2437,6 +2439,53 @@ async function finalizeExecutionCleanup(input) {
       sessionEndProducers.add(tracked);
     }
   });
+  try {
+    const model = agent.ctx.model;
+    if (!model) {
+      console.warn(
+        JSON.stringify({
+          level: "warn",
+          event: "shutdown.wrongtrace_telemetry_skipped",
+          message: "Skipping WrongTrace telemetry: agent model unknown at session end",
+          timestamp: (/* @__PURE__ */ new Date()).toISOString()
+        })
+      );
+    } else {
+      const { reportWrongTraceSessionTelemetry } = await import("./wrongtrace-telemetry-6M2CCBX5.js");
+      const usage = tokenCounter.total();
+      const report = reportWrongTraceSessionTelemetry({
+        sessionId: activeSession.id,
+        agentName: "wrongstack-cli",
+        model,
+        provider: agent.ctx.provider?.id ?? "",
+        usage: {
+          input: usage.input,
+          output: usage.output,
+          cacheRead: usage.cacheRead,
+          cacheWrite: usage.cacheWrite
+        },
+        costUsd: tokenCounter.estimateCost().total
+      });
+      const deadline = new Promise((resolve4) => {
+        const t = setTimeout(resolve4, 5e3);
+        t.unref?.();
+      });
+      const tracked = Promise.race([report, deadline]).finally(
+        () => sessionEndProducers.delete(tracked)
+      );
+      void tracked.catch(() => void 0);
+      sessionEndProducers.add(tracked);
+    }
+  } catch {
+  }
+  try {
+    const { snapshotGateDecisions, persistWrongTraceGateCounters } = await import("./wrongtrace-gate-counters-P5BCBXQN.js");
+    const projectRoot = agent.ctx.projectRoot;
+    if (projectRoot) {
+      await persistWrongTraceGateCounters(projectRoot, snapshotGateDecisions());
+    }
+  } catch {
+  }
   if (director) {
     try {
       director.requestFinish("leader session ended \u2014 finish your review now");
@@ -3364,9 +3413,10 @@ function installChimeraCascadeHandler({
   trackWork,
   buildLadder,
   verifyEvidence = verifyCascadeEvidence,
-  persistEvidence
+  persistEvidence,
+  teardownHandlers
 }) {
-  events.onPattern("chimera.cascade_needed", (_event, payload) => {
+  const off = events.onPattern("chimera.cascade_needed", (_event, payload) => {
     const p = payload;
     const dir = director;
     if (!dir) return;
@@ -3481,7 +3531,8 @@ function installChimeraCascadeHandler({
       });
     })();
     trackWork(pendingWork);
-  });
+  }, "chimera-cascade");
+  if (off) teardownHandlers?.push(off);
 }
 async function maybeReReviewCascade({
   events,
@@ -3656,9 +3707,10 @@ function installChimeraReviewHandler({
   projectDir,
   statusTracker,
   persistReview = persistChimeraReview,
-  trackWork
+  trackWork,
+  teardownHandlers
 }) {
-  events.onPattern("chimera.review_needed", (_event, payload) => {
+  const off = events.onPattern("chimera.review_needed", (_event, payload) => {
     const p = payload;
     const reviewSessionId = agent.ctx.activeRunSessionId ?? agent.ctx.session?.id ?? session.id;
     const dir = director;
@@ -4019,7 +4071,8 @@ ${reviewBody}`;
         }
       })()
     );
-  });
+  }, "chimera-review");
+  if (off) teardownHandlers?.push(off);
 }
 async function persistChimeraReview(payload, projectDir) {
   const reportId = payload.reportId;
@@ -5762,6 +5815,7 @@ async function execute(deps) {
   const bootUpdateInfo = initialUpdateInfo;
   const offStorageObservability = installStorageObservability(events, context.traceId);
   const chimeraWork = createChimeraWorkRegistry();
+  const chimeraTeardowns = [];
   installChimeraReviewHandler({
     events,
     director,
@@ -5770,6 +5824,7 @@ async function execute(deps) {
     agent,
     config,
     projectDir: wpaths.projectDir,
+    teardownHandlers: chimeraTeardowns,
     // Thread the shared tracker so the round-robin Chimera reviewer picks
     // skip (provider, model) pairs currently in the waiting room. Without
     // this, a 429-stricken model is re-spawned on every concurrent reviewer
@@ -5783,6 +5838,7 @@ async function execute(deps) {
     events,
     director,
     session,
+    teardownHandlers: chimeraTeardowns,
     buildLadder: () => buildMutatingAgentLadder({
       profileChain: effectiveFallbackChain2(config),
       session: { provider: config.provider, model: config.model }
@@ -6215,6 +6271,12 @@ async function execute(deps) {
       }
     }
   } finally {
+    for (const off of chimeraTeardowns.splice(0)) {
+      try {
+        off();
+      } catch {
+      }
+    }
     await finalizeExecutionCleanup({
       offStorageObservability,
       fleetStatusLine,
@@ -6243,4 +6305,4 @@ export {
   execute,
   resolveReviewerFallbackModels
 };
-//# sourceMappingURL=execution-ZEHK4II6.js.map
+//# sourceMappingURL=execution-L4CXQEND.js.map

package/dist/execution-chimera-cascade.d.ts

@@ -18,9 +18,12 @@ export type InstallChimeraCascadeHandlerOptions = {
     buildLadder?: (() => ReviewerAttempt[]) | undefined;
     /** Test seam; production defaults to the real safe command verifier. */
     verifyEvidence?: typeof verifyCascadeEvidence | undefined;
+    /** Optional session-teardown chain — the wildcard listener disposer is
+     *  pushed here so the registration is released when the session ends. */
+    teardownHandlers?: Array<() => void> | undefined;
     /** Persist every evidence verdict on the source report, even when re-review stops. */
     persistEvidence?: ((reportId: string, status: CascadeEvidenceStatus, checks: CascadeEvidenceCheckResult[]) => Promise<void>) | undefined;
 };
-export declare function installChimeraCascadeHandler({ events, director, session, getPendingWork, trackWork, buildLadder, verifyEvidence, persistEvidence, }: InstallChimeraCascadeHandlerOptions): void;
+export declare function installChimeraCascadeHandler({ events, director, session, getPendingWork, trackWork, buildLadder, verifyEvidence, persistEvidence, teardownHandlers, }: InstallChimeraCascadeHandlerOptions): void;
 export {};
 //# sourceMappingURL=execution-chimera-cascade.d.ts.map

package/dist/execution-chimera-review.d.ts

@@ -38,7 +38,10 @@ export type InstallChimeraReviewHandlerOptions = {
     statusTracker?: ProviderModelStatusTracker | undefined;
     persistReview?: ((payload: ChimeraReviewCompletePayload, projectDir: string) => Promise<void>) | undefined;
     trackWork: (work: Promise<void>) => void;
+    /** Optional session-teardown chain — the wildcard listener disposer is
+     *  pushed here so the registration is released when the session ends. */
+    teardownHandlers?: Array<() => void> | undefined;
 };
-export declare function installChimeraReviewHandler({ events, director, session, mailbox, agent, config, projectDir, statusTracker, persistReview, trackWork, }: InstallChimeraReviewHandlerOptions): void;
+export declare function installChimeraReviewHandler({ events, director, session, mailbox, agent, config, projectDir, statusTracker, persistReview, trackWork, teardownHandlers, }: InstallChimeraReviewHandlerOptions): void;
 export {};
 //# sourceMappingURL=execution-chimera-review.d.ts.map

package/dist/fleet/host-types.d.ts

@@ -1,5 +1,6 @@
 import type { AgentPipelines, FallbackProfileManager } from '@wrongstack/core/agent';
 import type { BrainArbiter, ProviderModelStatusTracker } from '@wrongstack/core/coordination';
+import type { HookRunner } from '@wrongstack/core/hooks';
 import type { Container, EventBus } from '@wrongstack/core/kernel';
 import type { ProviderRegistry, ToolRegistry } from '@wrongstack/core/registry';
 import type { ConfigStore, ModelsRegistry, Renderer, SecretScrubber, SessionWriter, SkillLoader, SystemPromptBuilder, TokenCounter } from '@wrongstack/core/types';
@@ -32,6 +33,14 @@ export interface MultiAgentDeps {
      * subagent pipeline. This is host wiring, never a model-visible capability.
      */
     installToolBoundary?: ((pipelines: AgentPipelines) => void) | undefined;
+    /**
+     * Optional hook runner applied to every spawned subagent's ToolExecutor.
+     * The CLI wires a dedicated WrongTrace-only runner here so worker edits
+     * pass the same lock gate as the leader. Deliberately NOT the leader's
+     * own HookRegistry: shell hooks from `config.hooks` are a leader-session
+     * automation surface and must not silently replay on workers.
+     */
+    hookRunner?: HookRunner | undefined;
 }
 /**
  * Per-session options for the multi-agent host. Director Mode is always

package/dist/fleet/subagent-hook-runner.d.ts

@@ -0,0 +1,22 @@
+import { HookRunner } from '@wrongstack/core/hooks';
+/**
+ * Dedicated WrongTrace-only HookRunner for fleet subagents.
+ *
+ * Why not hand subagents the leader's own HookRunner: the leader's
+ * HookRegistry also carries shell hooks loaded from `config.hooks`, and
+ * those are a leader-session automation surface — replaying them on every
+ * worker tool call would be a silent behavior change beyond WrongTrace.
+ * This runner registers ONLY the fail-open lock-gate hooks, so a worker's
+ * `edit`/`write`/`replace`/`patch`/`codebase-ast-replace` call honors
+ * peer locks exactly like the leader does while nothing else changes.
+ *
+ * Lock claims are stamped `wrongstack:<leaderSessionId>` — one process,
+ * one lock-owner identity; per-worker ids would fragment the TTL picture
+ * without adding safety (the daemon lock is advisory coordination).
+ *
+ * Mirrors the registration contract in lifecycle-plugins.ts (same events,
+ * same matcher, same owner id). If production drifts, update both.
+ * `emit` (optional) forwards typed gate-decision events to the host bus.
+ */
+export declare function createSubagentWrongTraceHookRunner(sessionId: () => string, emit?: (event: import('@wrongstack/wrongtrace').WrongTraceGateDecisionEvent) => void): HookRunner;
+//# sourceMappingURL=subagent-hook-runner.d.ts.map

package/dist/{hq-3BEUEXJQ.js → hq-2XIXGAER.js}

@@ -51,7 +51,7 @@ var hqCmd = async (args, deps) => {
   return 1;
 };
 async function startServer(deps) {
-  const { startHqServer } = await import("./hq-server-4MIW3S4J.js");
+  const { startHqServer } = await import("./hq-server-DBT3OOYD.js");
   const dataDir = resolveDataDir(deps);
   const flags = deps.flags ?? {};
   const host = typeof flags["host"] === "string" ? flags["host"] : HQ_CLI_DEFAULT_HOST;
@@ -709,4 +709,4 @@ export {
   hqCmd,
   resolveAuditActor
 };
-//# sourceMappingURL=hq-3BEUEXJQ.js.map
+//# sourceMappingURL=hq-2XIXGAER.js.map

package/dist/{hq-server-4MIW3S4J.js → hq-server-DBT3OOYD.js}

@@ -15,7 +15,7 @@ import {
   readLocalSubagentTranscript,
   sanitizeApiError,
   startHqServer
-} from "./chunk-J3XBHGEO.js";
+} from "./chunk-E3X4KM7T.js";
 import "./chunk-KE7E7DPX.js";
 import "./chunk-Q5GTM25S.js";
 import "./chunk-7OCVIDC7.js";
@@ -37,4 +37,4 @@ export {
   sanitizeApiError,
   startHqServer
 };
-//# sourceMappingURL=hq-server-4MIW3S4J.js.map
+//# sourceMappingURL=hq-server-DBT3OOYD.js.map

package/dist/index.js

@@ -10,14 +10,14 @@ import {
 import {
   theme
 } from "./chunk-QD544J2B.js";
-import {
-  parseWebuiSessionChildOptions,
-  writeWebuiSessionChildError
-} from "./chunk-3JPTNADJ.js";
 import {
   fmtTok,
   patchConfig
 } from "./chunk-TYO2OVAD.js";
+import {
+  parseWebuiSessionChildOptions,
+  writeWebuiSessionChildError
+} from "./chunk-3JPTNADJ.js";
 import {
   discoverAndMergeProviders
 } from "./chunk-52C7PD2H.js";
@@ -28,7 +28,7 @@ import "./chunk-U3SS4NRH.js";
 import "./chunk-NUIHRGPY.js";
 import {
   DEFAULT_PORT
-} from "./chunk-J3XBHGEO.js";
+} from "./chunk-E3X4KM7T.js";
 import "./chunk-KE7E7DPX.js";
 import "./chunk-Q5GTM25S.js";
 import {
@@ -1861,7 +1861,7 @@ var subcommandsWithFocusedHelp = Object.keys(helpTable);
 
 // src/subcommands/index.ts
 var loaders = {
-  acp: async () => (await import("./acp-GZIASCLH.js")).acpCmd,
+  acp: async () => (await import("./acp-LQMSMV32.js")).acpCmd,
   init: async () => (await import("./init-4JQSG66Q.js")).initCmd,
   auth: async () => (await import("./auth-VQMSZGKE.js")).authCmd,
   update: async () => (await import("./update-ZXNC6I6G.js")).updateCmd,
@@ -1877,9 +1877,9 @@ var loaders = {
   mcp: async () => (await import("./mcp-RRPKNRSN.js")).mcpCmd,
   plugin: async () => (await import("./plugin-usage-GCTYOZPH.js")).pluginCmd,
   plugins: async () => (await import("./plugin-usage-GCTYOZPH.js")).pluginCmd,
-  diag: async () => (await import("./diag-doctor-Z6JDXBVX.js")).diagCmd,
-  doctor: async () => (await import("./diag-doctor-Z6JDXBVX.js")).doctorCmd,
-  "proxy-status": async () => (await import("./diag-doctor-Z6JDXBVX.js")).proxyCmd,
+  diag: async () => (await import("./diag-doctor-OPTB2NWY.js")).diagCmd,
+  doctor: async () => (await import("./diag-doctor-OPTB2NWY.js")).doctorCmd,
+  "proxy-status": async () => (await import("./diag-doctor-OPTB2NWY.js")).proxyCmd,
   export: async () => (await import("./export-ROG3DKTZ.js")).exportCmd,
   usage: async () => (await import("./plugin-usage-GCTYOZPH.js")).usageCmd,
   version: async () => (await import("./version-help-WMPSEL4U.js")).versionCmd,
@@ -1889,7 +1889,7 @@ var loaders = {
   quick: async () => (await import("./quick-XLYLZX4B.js")).quickCmd,
   bench: async () => (await import("./bench-XYG56AMO.js")).benchCmd,
   chronicle: async () => (await import("./chronicle-6EPPMUC5.js")).chronicleCmd,
-  hq: async () => (await import("./hq-3BEUEXJQ.js")).hqCmd,
+  hq: async () => (await import("./hq-2XIXGAER.js")).hqCmd,
   mailbox: async () => (await import("./mailbox-serve-5S3PHG5D.js")).mailboxServeCmd,
   permissions: async () => (await import("./permissions-2PWBL4YU.js")).permissionsCmd,
   project: async () => (await import("./project-BLQ3ALVL.js")).projectCmd,
@@ -1968,7 +1968,7 @@ async function isPortInUse(host, port) {
 }
 async function handleHqShortCircuit(flags) {
   if (flags["hq"] !== true) return null;
-  const { startHqServer } = await import("./hq-server-4MIW3S4J.js");
+  const { startHqServer } = await import("./hq-server-DBT3OOYD.js");
   const tunnelRequested = flags["tunnel"] === true;
   const host = typeof flags["host"] === "string" ? flags["host"] : tunnelRequested ? "127.0.0.1" : HQ_CLI_DEFAULT_HOST2;
   if (tunnelRequested && !isLoopbackHost(host)) {
@@ -4481,7 +4481,7 @@ async function initializeCli(argv) {
 async function main(argv) {
   const cliCtx = await initializeCli(argv);
   if (typeof cliCtx === "number") return cliCtx;
-  const { runInteractive } = await import("./cli-main-UDWMWX55.js");
+  const { runInteractive } = await import("./cli-main-UOQ2ICUO.js");
   return runInteractive(cliCtx);
 }
 

package/dist/live-settings-input.d.ts

@@ -52,7 +52,7 @@ export interface LiveSettingsInput {
     /** Single word shown in the TUI rainbow working-state chip. */
     thinkingWord?: string | undefined;
     /** Animation style for the TUI working-state chip. */
-    animationStyle?: 'rainbow' | 'wave' | 'pulse' | 'dots' | 'breathe' | 'cycle' | undefined;
+    animationStyle?: 'rainbow' | 'wave' | 'pulse' | 'dots' | 'breathe' | 'static' | 'cycle' | undefined;
     /** Provider-runtime reasoning mode. */
     reasoningMode?: 'auto' | 'on' | 'off' | undefined;
     /** Provider-runtime reasoning effort. */
@@ -66,6 +66,11 @@ export interface LiveSettingsInput {
     /** Agent swarm panel placement: 'bottom' (lower region), 'sidebar' (right sidebar), or 'off' (hidden).
      * Backward-compat: legacy boolean values are coerced by the TUI settings adapter. Default: 'bottom'. */
     showAgentSwarmPanel?: 'bottom' | 'sidebar' | 'off' | boolean | undefined;
+    /**
+     * Right sidebar visibility: when false, the right sidebar is completely
+     * hidden and chat history takes the full terminal width. Default: true.
+     */
+    showSidebar?: boolean | undefined;
     /**
      * Per-panel position map (one entry per F-key panel id). Each value is
      * 'bottom' (F-key behavior) or 'sidebar' (right-sidebar twin). Persisted
@@ -97,7 +102,7 @@ export interface LiveSettingsInput {
      */
     wrongProxyEnabled?: boolean | undefined;
     /**
-     * WrongProxy / WrongTrace URL. Default `http://localhost:8000`. The
+     * WrongProxy / WrongTrace URL. Default `http://localhost:3444`. The
      * CLI's periodic probe targets `<wrongProxyUrl>/api/health`; a 2xx
      * response flips the runtime's `active` flag.
      */

package/dist/{proxy-wiring-7RPGBHZP.js → proxy-wiring-G26YGP7S.js}

@@ -3,8 +3,8 @@ import {
   awaitFirstWrongProxyProbe,
   bootstrapWrongProxy,
   shutdownWrongProxy
-} from "./chunk-3FHFGIIN.js";
-import "./chunk-3MAUU765.js";
+} from "./chunk-AOAIPYFB.js";
+import "./chunk-GWVLRUVH.js";
 import "./chunk-7OCVIDC7.js";
 export {
   applyWrongProxyPrefs,
@@ -12,4 +12,4 @@ export {
   bootstrapWrongProxy,
   shutdownWrongProxy
 };
-//# sourceMappingURL=proxy-wiring-7RPGBHZP.js.map
+//# sourceMappingURL=proxy-wiring-G26YGP7S.js.map

package/dist/slash-commands/sidebar.d.ts

@@ -0,0 +1,4 @@
+import type { SlashCommand } from '@wrongstack/core/types';
+import type { SlashCommandContext } from './command-context.js';
+export declare function buildSidebarCommand(opts: SlashCommandContext): SlashCommand;
+//# sourceMappingURL=sidebar.d.ts.map

package/dist/subcommands/contracts.d.ts

@@ -19,5 +19,12 @@ export interface SubcommandDeps {
     userHome: string;
     /** Parsed top-level flags after they have been removed from positional args. */
     flags?: Record<string, string | boolean>;
+    /**
+     * Live EventBus when a subcommand is invoked from a host that holds one
+     * (e.g. an in-process diagnostics surface). Standalone `wstack doctor`
+     * runs in a fresh process and has none — the handler then omits the
+     * listener-pressure line instead of fabricating counts.
+     */
+    events?: import('@wrongstack/core/kernel').EventBus | undefined;
 }
 //# sourceMappingURL=contracts.d.ts.map

package/dist/webui-server/prefs-seeding.d.ts

@@ -20,7 +20,7 @@ interface CliWebUIOptions {
         uiLocale?: string | undefined;
         /** WrongProxy / WrongTrace toggle. */
         wrongProxyEnabled?: boolean | undefined;
-        /** WrongProxy / WrongTrace URL. Default: 'http://localhost:8000'. */
+        /** WrongProxy / WrongTrace URL. Default: 'http://localhost:3444'. */
         wrongProxyUrl?: string | undefined;
     } | undefined;
 }

package/dist/{webui-server-UB75UHWX.js → webui-server-I53IYBW4.js}

@@ -1693,4 +1693,4 @@ async function runWebUI(opts) {
 export {
   runWebUI
 };
-//# sourceMappingURL=webui-server-UB75UHWX.js.map
+//# sourceMappingURL=webui-server-I53IYBW4.js.map

package/dist/wiring/proxy-probe.d.ts

@@ -10,7 +10,7 @@
  *  3. Aborts in-flight probes on every state change so we never accumulate
  *     a backlog when the user toggles the proxy on/off rapidly.
  *  4. Uses a small per-call AbortController + timeout (2s) so a hung
- *     `localhost:8000` cannot stall the loop.
+ *     `localhost:3444` cannot stall the loop.
  *
  * The probe is intentionally minimal: the daemon's `/api/health` response
  * shape is small and stable, so we don't try to parse it — a 2xx is

package/dist/wiring/wrongtrace-gate-counters.d.ts

@@ -0,0 +1,18 @@
+/**
+ * WrongTrace gate-decision counter — CLI re-export shim.
+ *
+ * The implementation lives in `@wrongstack/wrongtrace/src/gate-counters.ts`
+ * so EVERY process that runs the gate (CLI leader + fleet, standalone WebUI
+ * server) tallies against the same contract and the same counters file.
+ * This file exists only to keep the historical import path alive:
+ *   - `execution-cleanup.ts` (dynamic import for session-end persist)
+ *   - `brain-and-orchestration.ts` (fleet-runner emit-site recording)
+ *   - `subcommands/handlers/diag-doctor.ts` (proxy-status readout)
+ *   - `lifecycle-plugins.ts` (leader emit-site recording)
+ *   - `tests/wrongtrace-gate-counters.test.ts`
+ * All five resolve through this shim; nothing imports the adapter
+ * implementation directly from CLI source.
+ */
+export { createWrongTraceGateCounter, countersFilePath, formatGateCounterReport, loadWrongTraceGateCounters, persistWrongTraceGateCounters, recordGateDecision, resetGateDecisions, snapshotGateDecisions, } from '@wrongstack/wrongtrace';
+export type { WrongTraceGateCounter, WrongTraceGateCounterSnapshot, } from '@wrongstack/wrongtrace';
+//# sourceMappingURL=wrongtrace-gate-counters.d.ts.map

package/dist/wiring/wrongtrace-gate.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Re-export shim — the implementation moved into `@wrongstack/wrongtrace`
+ * so the CLI leader, fleet subagents, and the standalone WebUI server all
+ * share one gate without any of them importing `@wrongstack/cli` (the
+ * dependency direction cli → webui-server forbids the reverse edge).
+ *
+ * Every historical import path (`../wiring/wrongtrace-gate.js`) keeps
+ * working unchanged through this shim. NOTE: this is NOT core/utils'
+ * `withFileLock` (a local file lock) — same name, different mechanism.
+ */
+export { getWrongTrace, preflightFileEdit, resetWrongTraceGate, withFileLock, } from "@wrongstack/wrongtrace";
+export type { PreflightOptions, PreflightVerdict } from "@wrongstack/wrongtrace";
+//# sourceMappingURL=wrongtrace-gate.d.ts.map

package/dist/wiring/wrongtrace-hooks.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Re-export shim — the implementation moved into `@wrongstack/wrongtrace`
+ * (see wrongtrace-gate.ts for why). Same factories, same behaviour, now
+ * shared by every host process that executes tools.
+ */
+export { createWrongTraceHookPair, createWrongTracePostToolUseHook, createWrongTracePreToolUseHook, } from "@wrongstack/wrongtrace";
+export type { WrongTraceGateDecisionEvent, WrongTraceHookInput, WrongTraceHookOptions, WrongTraceHookPair, WrongTracePreToolUseOutcome, } from "@wrongstack/wrongtrace";
+//# sourceMappingURL=wrongtrace-hooks.d.ts.map

package/dist/wiring/wrongtrace-prompt-contributor.d.ts

@@ -0,0 +1,23 @@
+/**
+ * WrongTrace boot-prompt contributor — consumes the previously-unused
+ * `digestAtlas` and `summarizeFriction` helpers so the leader's system
+ * prompt, not just the executor gate, sees the daemon's observability.
+ *
+ * Contract:
+ *   - Fail-open: daemon offline / any throw → `[]` (no prompt block).
+ *   - Bounded: the gate singleton is warmed fire-and-forget at boot; this
+ *     contributor races discovery + atlas/friction fetches against short
+ *     deadlines so a cold/absent daemon can never stall the first build.
+ *     Each race is capped at CONTRIBUTOR_DEADLINE_MS; discovery + fetch is
+ *     at most ~2 × the deadline cold, far less once the singleton resolves
+ *     (a live local daemon answers in single-digit ms).
+ *   - Registered in `bindSystemPromptBuilder`'s contributors array, after
+ *     the ETERNAL AUTONOMY contributor (registration order is preserved).
+ */
+import type { SystemPromptContributor } from '@wrongstack/core/types';
+/**
+ * Build the contributor. Fresh instance per `bindSystemPromptBuilder` call
+ * (i.e. per process); cheap since the gate singleton is process-shared.
+ */
+export declare function createWrongTracePromptContributor(): SystemPromptContributor;
+//# sourceMappingURL=wrongtrace-prompt-contributor.d.ts.map

package/dist/wiring/wrongtrace-telemetry.d.ts

@@ -0,0 +1,53 @@
+/**
+ * WrongTrace session telemetry — the session-completion reporting hook.
+ *
+ * The daemon's /api/telemetry endpoint exists and answers 200 {ok:true}
+ * (verified live 2026-08-24), so WrongStack reports one summary per
+ * finished session: run id, agent/model/provider identity, token usage,
+ * and cost. This is what lets the daemon attribute activity (friction
+ * matrices, file lineage) to WrongStack sessions.
+ *
+ * Fail-open by construction: daemon offline → reportTelemetry returns
+ * null and this helper resolves without side effects; any throw is
+ * swallowed so session cleanup is never delayed or blocked by it.
+ */
+import type { WrongTraceTelemetryReport } from '@wrongstack/wrongtrace';
+/** Inputs the session-completion path already has in hand. */
+export interface WrongTraceTelemetryInput {
+    sessionId: string;
+    /** Stable agent identity, e.g. 'wrongstack-cli'. */
+    agentName: string;
+    model: string;
+    provider: string;
+    /** Cumulative session usage from tokenCounter.total(). */
+    usage: {
+        input: number;
+        output: number;
+        cacheRead?: number | undefined;
+        cacheWrite?: number | undefined;
+    };
+    /** Session cost in USD from tokenCounter.estimateCost().total. */
+    costUsd: number;
+}
+/**
+ * Pure mapping to the daemon's POST /api/telemetry contract. Cache fields
+ * ride along as extras (the payload allows free-form pass-through), so
+ * downstream attribution keeps the full token picture.
+ */
+export declare function buildWrongTraceTelemetryReport(input: WrongTraceTelemetryInput): WrongTraceTelemetryReport;
+/**
+ * Report session telemetry, best-effort. Never throws: an offline daemon,
+ * transport failure, or malformed response resolves silently — telemetry
+ * must never delay or fail session cleanup.
+ *
+ * Optional client injection is a test seam; production uses the singleton.
+ */
+export declare function reportWrongTraceSessionTelemetry(input: WrongTraceTelemetryInput, opts?: {
+    client?: {
+        isAvailable: boolean;
+        reportTelemetry: (r: WrongTraceTelemetryReport) => Promise<{
+            ok: boolean;
+        } | null>;
+    };
+}): Promise<void>;
+//# sourceMappingURL=wrongtrace-telemetry.d.ts.map