@wrongstack/cli 0.313.1 → 0.316.2

package/dist/index.js

@@ -6,7 +6,7 @@ import {
   makePromptDelegate,
   renderAgentsTemplate,
   renderDiff
-} from "./chunk-WOTGMHAH.js";
+} from "./chunk-KG4X5F7Z.js";
 import {
   theme
 } from "./chunk-QD544J2B.js";
@@ -17,19 +17,19 @@ import {
 import {
   parseWebuiSessionChildOptions,
   writeWebuiSessionChildError
-} from "./chunk-3JPTNADJ.js";
+} from "./chunk-GPPRNAKW.js";
 import {
   discoverAndMergeProviders
 } from "./chunk-52C7PD2H.js";
 import {
   runUpdateCommand
-} from "./chunk-4S52MIIM.js";
+} from "./chunk-VXCCBI2W.js";
 import "./chunk-U3SS4NRH.js";
-import "./chunk-NUIHRGPY.js";
+import "./chunk-NV3JDK4F.js";
 import {
   DEFAULT_PORT
-} from "./chunk-E3X4KM7T.js";
-import "./chunk-KE7E7DPX.js";
+} from "./chunk-NZZOYLQ7.js";
+import "./chunk-HXJYHAR4.js";
 import "./chunk-Q5GTM25S.js";
 import {
   helpCmd,
@@ -45,7 +45,7 @@ import {
   parseArgs,
   runPicker,
   saveToGlobalConfig
-} from "./chunk-PKHGLWUJ.js";
+} from "./chunk-T642Q732.js";
 import "./chunk-B4JLSXZB.js";
 import {
   isKeylessLocalProvider,
@@ -1511,9 +1511,13 @@ var helpTable = {
     name: "sessions",
     title: "wstack sessions \u2014 list and resume recent sessions",
     description: "List recent sessions, show one session in detail, resume a session, or inspect a session's audit log. The audit log is stored as JSONL next to each session's recording.",
-    usage: "wstack sessions [list|show|resume|fork|config|fleet] [...]",
+    usage: "wstack sessions [list|show|resume|fork|doctor|config|fleet] [...]",
     subcommands: [
       { name: "list", description: "List the most recent sessions." },
+      {
+        name: "doctor [--fix] [--json] [--limit N]",
+        description: "Diagnose every journal in this project: unparsable lines, truncated tails, sessions that died mid-turn, missing or stale summary sidecars, and journals large enough to be slow to open. --fix rebuilds only derived artifacts (summary sidecars + the catalog index); journals are never edited."
+      },
       { name: "show <id>", description: "Show one session in detail." },
       { name: "resume [<id>]", description: "Resume a session (latest if no id given)." },
       {
@@ -1861,12 +1865,12 @@ var subcommandsWithFocusedHelp = Object.keys(helpTable);
 
 // src/subcommands/index.ts
 var loaders = {
-  acp: async () => (await import("./acp-LQMSMV32.js")).acpCmd,
+  acp: async () => (await import("./acp-CEQINXWB.js")).acpCmd,
   init: async () => (await import("./init-4JQSG66Q.js")).initCmd,
-  auth: async () => (await import("./auth-VQMSZGKE.js")).authCmd,
-  update: async () => (await import("./update-ZXNC6I6G.js")).updateCmd,
-  sessions: async () => (await import("./sessions-config-7Q7QJBKJ.js")).sessionsCmd,
-  config: async () => (await import("./sessions-config-7Q7QJBKJ.js")).configCmd,
+  auth: async () => (await import("./auth-GZ5A5OF5.js")).authCmd,
+  update: async () => (await import("./update-XKARO3CY.js")).updateCmd,
+  sessions: async () => (await import("./sessions-config-P2LK2L32.js")).sessionsCmd,
+  config: async () => (await import("./sessions-config-P2LK2L32.js")).configCmd,
   rewind: async () => (await import("./rewind-2FFNOOKS.js")).rewindCmd,
   replay: async () => (await import("./replay-RZXZKP2U.js")).replayCmd,
   audit: async () => (await import("./audit-ZPCLCC3C.js")).auditCmd,
@@ -1874,26 +1878,26 @@ var loaders = {
   skills: async () => (await import("./tools-skills-Q4P27URS.js")).skillsCmd,
   providers: async () => (await import("./providers-models-663NDPRQ.js")).providersCmd,
   models: async () => (await import("./providers-models-663NDPRQ.js")).modelsCmd,
-  mcp: async () => (await import("./mcp-RRPKNRSN.js")).mcpCmd,
-  plugin: async () => (await import("./plugin-usage-GCTYOZPH.js")).pluginCmd,
-  plugins: async () => (await import("./plugin-usage-GCTYOZPH.js")).pluginCmd,
-  diag: async () => (await import("./diag-doctor-OPTB2NWY.js")).diagCmd,
-  doctor: async () => (await import("./diag-doctor-OPTB2NWY.js")).doctorCmd,
-  "proxy-status": async () => (await import("./diag-doctor-OPTB2NWY.js")).proxyCmd,
+  mcp: async () => (await import("./mcp-AQKSASHD.js")).mcpCmd,
+  plugin: async () => (await import("./plugin-usage-AP7SJCDA.js")).pluginCmd,
+  plugins: async () => (await import("./plugin-usage-AP7SJCDA.js")).pluginCmd,
+  diag: async () => (await import("./diag-doctor-LFCCBPMD.js")).diagCmd,
+  doctor: async () => (await import("./diag-doctor-LFCCBPMD.js")).doctorCmd,
+  "proxy-status": async () => (await import("./diag-doctor-LFCCBPMD.js")).proxyCmd,
   export: async () => (await import("./export-ROG3DKTZ.js")).exportCmd,
-  usage: async () => (await import("./plugin-usage-GCTYOZPH.js")).usageCmd,
+  usage: async () => (await import("./plugin-usage-AP7SJCDA.js")).usageCmd,
   version: async () => (await import("./version-help-WMPSEL4U.js")).versionCmd,
   help: async () => (await import("./version-help-WMPSEL4U.js")).helpCmd,
   projects: async () => (await import("./projects-5J727S4L.js")).projectsCmd,
-  modeldiag: async () => (await import("./modeldiag-H6DKWJ2N.js")).modeldiagCmd,
+  modeldiag: async () => (await import("./modeldiag-4NYBRSFP.js")).modeldiagCmd,
   quick: async () => (await import("./quick-XLYLZX4B.js")).quickCmd,
   bench: async () => (await import("./bench-XYG56AMO.js")).benchCmd,
   chronicle: async () => (await import("./chronicle-6EPPMUC5.js")).chronicleCmd,
-  hq: async () => (await import("./hq-2XIXGAER.js")).hqCmd,
-  mailbox: async () => (await import("./mailbox-serve-5S3PHG5D.js")).mailboxServeCmd,
+  hq: async () => (await import("./hq-NDTJRRX3.js")).hqCmd,
+  mailbox: async () => (await import("./mailbox-serve-VKQIRCCB.js")).mailboxServeCmd,
   permissions: async () => (await import("./permissions-2PWBL4YU.js")).permissionsCmd,
   project: async () => (await import("./project-BLQ3ALVL.js")).projectCmd,
-  governance: async () => (await import("./governance-V2Z42RBE.js")).governanceCmd
+  governance: async () => (await import("./governance-JSGHHA2R.js")).governanceCmd
 };
 var subcommands = Object.fromEntries(
   Object.entries(loaders).map(
@@ -1968,7 +1972,7 @@ async function isPortInUse(host, port) {
 }
 async function handleHqShortCircuit(flags) {
   if (flags["hq"] !== true) return null;
-  const { startHqServer } = await import("./hq-server-DBT3OOYD.js");
+  const { startHqServer } = await import("./hq-server-OH3SPSE2.js");
   const tunnelRequested = flags["tunnel"] === true;
   const host = typeof flags["host"] === "string" ? flags["host"] : tunnelRequested ? "127.0.0.1" : HQ_CLI_DEFAULT_HOST2;
   if (tunnelRequested && !isLoopbackHost(host)) {
@@ -2016,7 +2020,7 @@ async function handleHqShortCircuit(flags) {
   let tokenTtlMs;
   const rawTtl = typeof flags["hq-token-ttl"] === "string" ? flags["hq-token-ttl"] : process.env.WRONGSTACK_HQ_TOKEN_TTL;
   if (rawTtl !== void 0 && rawTtl.length > 0) {
-    const { parseTokenTtlValue } = await import("./hq-ttl-U2FAYFAT.js");
+    const { parseTokenTtlValue } = await import("./hq-ttl-KUO3AU7X.js");
     const parsed = parseTokenTtlValue(rawTtl);
     if (parsed.error) {
       process.stderr.write(`${color6.red("\u2717")} Invalid --hq-token-ttl: ${parsed.error}
@@ -2064,7 +2068,7 @@ async function handleHqShortCircuit(flags) {
       return 1;
     }
     try {
-      const { buildPublicHqUrl, startHqQuickTunnel } = await import("./hq-tunnel-RFKGC4HI.js");
+      const { buildPublicHqUrl, startHqQuickTunnel } = await import("./hq-tunnel-LO55RCZE.js");
       const originHost = handle.host === "::1" ? "[::1]" : handle.host;
       tunnel = await startHqQuickTunnel(`http://${originHost}:${handle.port}`, {
         onUnexpectedExit: (message) => process.stderr.write(`${color6.yellow("!")} ${message}
@@ -2127,7 +2131,7 @@ ${color6.green("Cloudflare Quick Tunnel ready:")} ${browserUrl}
 }
 
 // src/boot.ts
-import * as fs8 from "node:fs/promises";
+import * as fs7 from "node:fs/promises";
 import { createRequire as createRequire4 } from "node:module";
 import * as os from "node:os";
 import * as path8 from "node:path";
@@ -2256,12 +2260,14 @@ async function maybeRestoreDefaultProfileFromBackup(opts) {
 }
 
 // src/boot/system-prompt-menu.ts
-import * as fs5 from "node:fs/promises";
 import {
-  buildIdentityLayer,
-  loadInstructionBundle
+  countSystemPromptTokens,
+  persistSystemPromptVariant,
+  readSavedSystemPromptVariant,
+  SYSTEM_PROMPT_VARIANT_OPTIONS,
+  SYSTEM_PROMPT_VARIANTS
 } from "@wrongstack/core/agent";
-import { atomicWrite as atomicWrite4, color as color10, estimateTextTokens } from "@wrongstack/core/utils";
+import { color as color10 } from "@wrongstack/core/utils";
 
 // src/pre-launch/launch-prompts.ts
 import * as fs3 from "node:fs/promises";
@@ -2541,12 +2547,7 @@ async function runProjectCheck(opts) {
 }
 
 // src/boot/system-prompt-menu.ts
-var SYSTEM_PROMPT_OPTIONS = [
-  { variant: "lite", label: "Lite", hint: "leanest \u2014 best for small context windows" },
-  { variant: "default", label: "Standard", hint: "balanced \u2014 the default" },
-  { variant: "pro", label: "Pro", hint: "most detailed guidance \u2014 uses more tokens" }
-];
-var SYSTEM_PROMPT_VARIANTS = SYSTEM_PROMPT_OPTIONS.map((o) => o.variant);
+var SYSTEM_PROMPT_OPTIONS = SYSTEM_PROMPT_VARIANT_OPTIONS;
 var SUMMARY_TIMEOUT_MS2 = 5e3;
 function flagOn(value) {
   if (value === true) return true;
@@ -2565,42 +2566,9 @@ function shouldSkipSystemPromptMenu(flags) {
   if (flags["webui"] === true) return true;
   return false;
 }
-async function countSystemPromptTokens(paths) {
-  const counts = {};
-  for (const variant of SYSTEM_PROMPT_VARIANTS) {
-    const bundle = await loadInstructionBundle({
-      globalDir: paths.globalDir,
-      projectDir: paths.projectDir,
-      systemVariant: variant
-    });
-    const identity = buildIdentityLayer(
-      bundle.system?.identity,
-      bundle.system?.identitySource,
-      void 0
-    );
-    counts[variant] = estimateTextTokens(identity);
-  }
-  return counts;
-}
 function labelFor(variant) {
   return SYSTEM_PROMPT_OPTIONS.find((o) => o.variant === variant)?.label ?? variant;
 }
-var VALID_VARIANTS = new Set(SYSTEM_PROMPT_VARIANTS);
-async function readSavedSystemPromptVariant(configPath) {
-  let raw;
-  try {
-    raw = await fs5.readFile(configPath, "utf8");
-  } catch {
-    return void 0;
-  }
-  try {
-    const parsed = JSON.parse(raw);
-    const variant = parsed.systemPrompt?.variant;
-    return typeof variant === "string" && VALID_VARIANTS.has(variant) ? variant : void 0;
-  } catch {
-    return void 0;
-  }
-}
 async function runSystemPromptMenu(deps) {
   const { renderer, reader, paths, lastVariant } = deps;
   const tokens = await countSystemPromptTokens(paths);
@@ -2642,30 +2610,6 @@ async function runSystemPromptMenu(deps) {
   if (byName) return byName.variant;
   return defaultVariant;
 }
-async function persistSystemPromptVariant(configPath, variant) {
-  let fileExists = false;
-  try {
-    await fs5.access(configPath);
-    fileExists = true;
-  } catch {
-  }
-  let existing = {};
-  try {
-    const raw = await fs5.readFile(configPath, "utf8");
-    existing = JSON.parse(raw);
-  } catch (err) {
-    if (fileExists) {
-      throw new Error(
-        `Refusing to overwrite corrupt config at ${configPath} (${err.message}). Fix or move the file aside before retrying.`,
-        { cause: err }
-      );
-    }
-    existing = {};
-  }
-  const systemPrompt = existing.systemPrompt ?? {};
-  existing.systemPrompt = { ...systemPrompt, variant };
-  await atomicWrite4(configPath, JSON.stringify(existing, null, 2), { mode: 384 });
-}
 async function maybeRunSystemPromptMenu(opts) {
   if (!opts.isInteractiveTTY) return { aborted: false, changed: false };
   if (shouldSkipSystemPromptMenu(opts.flags)) return { aborted: false, changed: false };
@@ -2709,7 +2653,7 @@ async function bootConfig(flags) {
 }
 
 // src/input-reader.ts
-import * as fs6 from "node:fs/promises";
+import * as fs5 from "node:fs/promises";
 import * as path6 from "node:path";
 import * as readline from "node:readline";
 import {
@@ -2729,7 +2673,7 @@ var ReadlineInputReader = class {
   }
   async loadHistory() {
     try {
-      const raw = await fs6.readFile(this.historyFile, "utf8");
+      const raw = await fs5.readFile(this.historyFile, "utf8");
       this.history = raw.split("\n").filter(Boolean).slice(-1e3);
     } catch {
       this.history = [];
@@ -2737,8 +2681,8 @@ var ReadlineInputReader = class {
   }
   async saveHistory() {
     try {
-      await fs6.mkdir(path6.dirname(this.historyFile), { recursive: true });
-      await fs6.writeFile(this.historyFile, this.history.slice(-1e3).join("\n"));
+      await fs5.mkdir(path6.dirname(this.historyFile), { recursive: true });
+      await fs5.writeFile(this.historyFile, this.history.slice(-1e3).join("\n"));
     } catch {
     }
   }
@@ -2986,7 +2930,7 @@ function dim(s) {
 }
 
 // src/launch-hints.ts
-import * as fs7 from "node:fs/promises";
+import * as fs6 from "node:fs/promises";
 import * as path7 from "node:path";
 import { color as color11 } from "@wrongstack/core/utils";
 var GROUPS = [
@@ -3197,13 +3141,13 @@ async function pickGroupIndex(opts) {
     try {
       let current = 0;
       try {
-        const raw = await fs7.readFile(opts.cursorFile, "utf8");
+        const raw = await fs6.readFile(opts.cursorFile, "utf8");
         const parsed = Number.parseInt(raw.trim(), 10);
         if (Number.isFinite(parsed)) current = wrap(parsed);
       } catch {
       }
-      await fs7.mkdir(path7.dirname(opts.cursorFile), { recursive: true });
-      await fs7.writeFile(opts.cursorFile, String(wrap(current + 1)));
+      await fs6.mkdir(path7.dirname(opts.cursorFile), { recursive: true });
+      await fs6.writeFile(opts.cursorFile, String(wrap(current + 1)));
       return current;
     } catch {
     }
@@ -3426,6 +3370,25 @@ var TerminalRenderer = class _TerminalRenderer {
     this.err.write(`${theme.info("\u2139")} ${text}
 `);
   }
+  /**
+   * Write text to stderr verbatim: no glyph prefix, no markdown processing.
+   *
+   * Deliberately stricter than writeWarning/writeError/writeInfo, which emit
+   * *diagnostics* and are suppressed only when a TUI owns the terminal (so
+   * they survive silent mode). This method is for informational mirrors of
+   * stdout output, where the stdout copy already carries the full content —
+   * in silent mode the operator asked for machine-only output, so the mirror
+   * is dropped rather than leaked onto a quieter stream. It therefore honors
+   * the full {@link suppressStdout} gate.
+   *
+   * Used by `wstack mailbox serve` to route the human-readable startup banner
+   * away from stdout, keeping the mailbox_serve_started JSON line cleanly
+   * pipeable (`mailbox serve | jq`).
+   */
+  writeStderr(text) {
+    if (this.suppressStdout()) return;
+    this.err.write(text);
+  }
   clear() {
     if (this.suppressStdout()) return;
     this.out.write("\x1B[2J\x1B[H");
@@ -4198,7 +4161,7 @@ async function checkGitInCwd(opts) {
   const cwdGit = path8.join(cwd, ".git");
   let hasCwdGit = false;
   try {
-    await fs8.access(cwdGit);
+    await fs7.access(cwdGit);
     hasCwdGit = true;
   } catch {
   }
@@ -4236,7 +4199,7 @@ async function checkGitInCwd(opts) {
   const parentDir = path8.dirname(cwd);
   if (parentDir !== cwd) {
     try {
-      await fs8.access(path8.join(parentDir, ".git"));
+      await fs7.access(path8.join(parentDir, ".git"));
       renderer.write(
         `  ${color13.dim("\u2139")} A ${color13.bold(".git")} repo exists in the parent directory: ${color13.dim(parentDir)}
 `
@@ -4261,7 +4224,7 @@ async function printUpdateNotice(initialUpdateInfo) {
     const ac = new AbortController();
     const timer = setTimeout(() => ac.abort(), 2e3);
     try {
-      const { checkForUpdate } = await import("./update-check-WARHSVZA.js");
+      const { checkForUpdate } = await import("./update-check-LICQNYFK.js");
       info = await checkForUpdate(ac.signal);
     } catch {
     } finally {
@@ -4481,7 +4444,7 @@ async function initializeCli(argv) {
 async function main(argv) {
   const cliCtx = await initializeCli(argv);
   if (typeof cliCtx === "number") return cliCtx;
-  const { runInteractive } = await import("./cli-main-UOQ2ICUO.js");
+  const { runInteractive } = await import("./cli-main-IEAM6SK7.js");
   return runInteractive(cliCtx);
 }
 
@@ -4531,6 +4494,47 @@ function installBrokenPipeHandlers(options = {}) {
     for (const stream of streams) stream.off("error", onError);
   };
 }
+var EXIT_GRACE_MS = 500;
+var EXIT_GRACE_MAX_MS = 5e3;
+var MAX_SOCKET_GRACE_EXTENSIONS = 1;
+function scheduleForcedExit(code, deps = {}) {
+  const getActiveResources = deps.getActiveResources ?? (() => process.getActiveResourcesInfo?.() ?? []);
+  const exit = deps.exit ?? ((exitCode) => process.exit(exitCode));
+  const startedAt = Date.now();
+  let extensions = 0;
+  let socketExtensions = 0;
+  const check = () => {
+    const active = getActiveResources();
+    const waitedMs = Date.now() - startedAt;
+    const hasWriteStream = active.includes("WriteStream");
+    const hasSocket = active.includes("TCPSocketWrap");
+    const canFlush = waitedMs < EXIT_GRACE_MAX_MS && (hasWriteStream || hasSocket && socketExtensions < MAX_SOCKET_GRACE_EXTENSIONS);
+    if (canFlush) {
+      extensions += 1;
+      if (!hasWriteStream) socketExtensions += 1;
+      const timer = setTimeout(check, Math.min(EXIT_GRACE_MS, EXIT_GRACE_MAX_MS - waitedMs));
+      timer.unref();
+      return;
+    }
+    if (active.length > 0) {
+      console.warn(
+        JSON.stringify({
+          level: "warn",
+          event: "exit.forced",
+          message: `Forcing exit after ${waitedMs}ms grace; ${active.length} active handle(s) remained`,
+          exitCode: code,
+          waitedMs,
+          extensions,
+          activeResources: active,
+          timestamp: (/* @__PURE__ */ new Date()).toISOString()
+        })
+      );
+    }
+    exit(code);
+  };
+  const first = setTimeout(check, EXIT_GRACE_MS);
+  first.unref();
+}
 function runAsMain(mainFn) {
   if (!isMain) return;
   installBrokenPipeHandlers();
@@ -4541,13 +4545,13 @@ function runAsMain(mainFn) {
   mainFn(process.argv.slice(2)).then(
     (c) => {
       process.exitCode = c;
-      setTimeout(() => process.exit(c), 500).unref();
+      scheduleForcedExit(c);
     },
     (err) => {
       runFatalSalvageSync();
       writeErr4((err instanceof Error ? err.stack : String(err)) + "\n");
       process.exitCode = 1;
-      setTimeout(() => process.exit(1), 500).unref();
+      scheduleForcedExit(1);
     }
   );
 }

package/dist/input-reader.d.ts

@@ -1,5 +1,5 @@
 import type { InputReader, PromptOption } from '@wrongstack/core/types';
-export interface ReadlineInputReaderOptions {
+interface ReadlineInputReaderOptions {
     historyFile?: string | undefined;
     prompt?: string | undefined;
 }
@@ -44,4 +44,5 @@ export declare class ReadlineInputReader implements InputReader {
     readSecret(prompt: string): Promise<string>;
     close(): Promise<void>;
 }
+export {};
 //# sourceMappingURL=input-reader.d.ts.map

package/dist/kanban-dispatch-route.d.ts

@@ -1,14 +1,39 @@
 import type { Config } from '@wrongstack/core/types';
-export interface KanbanDispatchRouteInput {
+interface KanbanDispatchRouteInput {
     provider?: string | undefined;
     model?: string | undefined;
     fallbackModels?: string[] | undefined;
     fallbackProfile?: string | undefined;
+    /**
+     * Named cost level for this task. A board stores the INTENT ("run this
+     * cheaply") rather than a model id, so a task queued last week still routes
+     * correctly after the tier config changes.
+     */
+    tier?: string | undefined;
+    /** Roster role, used to route through the tier table when no tier is named. */
+    role?: string | undefined;
 }
-export interface KanbanDispatchRoute {
+interface KanbanDispatchRoute {
     provider?: string | undefined;
     model?: string | undefined;
     fallbackModels?: string[] | undefined;
+    /** The tier that actually resolved, for the run record and the board UI. */
+    tier?: string | undefined;
 }
+/**
+ * Resolve a Kanban task's execution route into a concrete provider/model plus
+ * failover chain.
+ *
+ * Precedence, most to least specific:
+ *   1. an explicit provider/model pinned on the task,
+ *   2. a named fallback profile (chain[0] becomes the primary),
+ *   3. a named tier (or the tier routing table, when a role is known),
+ *   4. the session leader's model (everything left undefined).
+ *
+ * The tier step sits BELOW an explicit profile on purpose: a board that already
+ * names a chain has made the more specific statement, and a tier must not
+ * quietly overrule it.
+ */
 export declare function resolveKanbanDispatchRoute(config: Config, spawnOpts?: KanbanDispatchRouteInput | undefined): KanbanDispatchRoute;
+export {};
 //# sourceMappingURL=kanban-dispatch-route.d.ts.map

package/dist/kanban-hq-sync.d.ts

@@ -1,5 +1,5 @@
 import type { HqKanbanSnapshotPayload, HqPublisher } from '@wrongstack/core/hq';
-export interface KanbanHqSync {
+interface KanbanHqSync {
     attachPublisher(publisher: HqPublisher): Promise<void>;
     handleRemote(snapshot: HqKanbanSnapshotPayload): Promise<void>;
     /** Explicit refresh seam for hosts/tests; daemon events call the same path. */
@@ -19,4 +19,5 @@ export interface KanbanHqSyncStats {
 export declare function createKanbanHqSync(projectRoot: string, projectId?: string, testHooks?: {
     beforeLocalPublish?: (() => Promise<void>) | undefined;
 }): KanbanHqSync;
+export {};
 //# sourceMappingURL=kanban-hq-sync.d.ts.map

package/dist/launch-hints.d.ts

@@ -25,7 +25,7 @@ export declare const HINT_COUNT: number;
 export declare const HINT_GROUP_COUNT: number;
 /** Category titles, in rotation order. Exported for tests. */
 export declare const HINT_GROUP_TITLES: readonly string[];
-export interface LaunchHintOptions {
+interface LaunchHintOptions {
     /**
      * File holding the rotation cursor. When set, each call advances it so
      * consecutive launches show different categories (round-robin). Missing
@@ -45,4 +45,5 @@ export interface LaunchHintOptions {
  * suppressed via `--no-hints` or `WRONGSTACK_NO_HINTS=1`.
  */
 export declare function printLaunchHints(renderer: Pick<TerminalRenderer, 'write'>, flags: Record<string, string | boolean>, opts?: LaunchHintOptions): Promise<void>;
+export {};
 //# sourceMappingURL=launch-hints.d.ts.map

package/dist/mailbox-bridge-bootstrap.d.ts

@@ -23,7 +23,6 @@
  *    can run `wstack mailbox serve` manually later.
  */
 import { type MailboxBridgeLock, readLiveLock } from '@wrongstack/core/coordination';
-export declare const MAILBOX_BRIDGE_BOOTSTRAP_TIMEOUT_MS = 5000;
 export declare const MAILBOX_BRIDGE_HEALTHZ_PROBE_MS = 500;
 export interface MailboxBridgeHandle {
     /** Bound URL — empty string if we couldn't bring the bridge up. */
@@ -46,7 +45,7 @@ export interface MailboxBridgeHandle {
      */
     source: 'joined' | 'spawned' | 'unhealthy' | 'failed';
 }
-export interface BootstrapOptions {
+interface BootstrapOptions {
     /**
      * WrongStack's per-project STATE directory
      * (`~/.wrongstack/projects/<slug>`). Owns the lock file and is what we
@@ -88,7 +87,7 @@ export interface BootstrapOptions {
     timeoutMs?: number;
 }
 export type SpawnFn = (args: string[], cwd: string) => SpawnedChild;
-export interface SpawnedChild {
+interface SpawnedChild {
     pid: number | undefined;
     unref(): void;
 }

package/dist/{mailbox-serve-5S3PHG5D.js → mailbox-serve-VKQIRCCB.js}

@@ -1,6 +1,6 @@
 import {
   startCliHqConnection
-} from "./chunk-FKWHSFX4.js";
+} from "./chunk-XYKYXFEE.js";
 import "./chunk-7OCVIDC7.js";
 
 // src/subcommands/handlers/mailbox-serve.ts
@@ -219,7 +219,13 @@ This usually means no port is available (extremely rare). Retry or pick an expli
       void publisher.publishMailboxSnapshot(mailbox, { mailboxId: `${path.basename(projectDir)}:mailbox` }).catch(() => void 0);
     }
   });
-  writeStartupInfo(deps, { host, port: boundPort, projectDir, tokenPath: acquireResult.tokenPath });
+  writeStartupInfo(deps, {
+    host,
+    port: boundPort,
+    projectDir,
+    projectId,
+    tokenPath: acquireResult.tokenPath
+  });
   const stopMemoryWatchdog = startSharedHeapWatchdog({
     collectStats: () => {
       const hqQueue = hqConnection?.getPublisher()?.getQueueStats();
@@ -287,39 +293,52 @@ function writeStartupInfo(deps, info) {
       host: info.host,
       port: info.port,
       projectDir: info.projectDir,
+      projectId: info.projectId,
       tokenFile: info.tokenPath
     })
   );
-  deps.renderer.write(`WrongStack mailbox bridge listening on http://${info.host}:${info.port}
-`);
-  deps.renderer.write(`Project dir:  ${info.projectDir}
+  deps.renderer.writeStderr(
+    `WrongStack mailbox bridge listening on http://${info.host}:${info.port}
+`
+  );
+  deps.renderer.writeStderr(`Project dir:  ${info.projectDir}
 `);
-  deps.renderer.write(`Token file:   ${info.tokenPath} (mode 0600)
+  deps.renderer.writeStderr(
+    `Project id:   ${info.projectId}  (use this as projectId when issuing credentials)
+`
+  );
+  deps.renderer.writeStderr(`Token file:   ${info.tokenPath} (mode 0600)
 `);
-  deps.renderer.write("\n");
-  deps.renderer.write("Routes:\n");
-  deps.renderer.write("  POST /mailbox/send              send a message\n");
-  deps.renderer.write("  POST /mailbox/query             query messages\n");
-  deps.renderer.write(
+  deps.renderer.writeStderr("\n");
+  deps.renderer.writeStderr("Routes:\n");
+  deps.renderer.writeStderr("  POST /mailbox/send              send a message\n");
+  deps.renderer.writeStderr("  POST /mailbox/query             query messages\n");
+  deps.renderer.writeStderr(
     "  POST /mailbox/check             check inbox and optionally mark read/completed\n"
   );
-  deps.renderer.write("  POST /mailbox/ack               acknowledge one message\n");
-  deps.renderer.write("  POST /mailbox/ack-many          acknowledge many in one batch\n");
-  deps.renderer.write("  POST /mailbox/unread-count      count unread messages for an agent\n");
-  deps.renderer.write("  POST /mailbox/agents/register   register an external agent\n");
-  deps.renderer.write("  POST /mailbox/agents/heartbeat  update agent heartbeat\n");
-  deps.renderer.write("  POST /mailbox/register-client   register an external client\n");
-  deps.renderer.write("  POST /mailbox/heartbeat         update client heartbeat\n");
-  deps.renderer.write("  GET  /mailbox/agents            list all registered agents\n");
-  deps.renderer.write("  GET  /mailbox/agents/online     list agents with a live heartbeat\n");
-  deps.renderer.write("  GET  /mailbox/events            SSE stream \u2014 real-time mailbox push\n");
-  deps.renderer.write("  GET  /healthz                   health probe (no auth)\n");
-  deps.renderer.write("\n");
-  deps.renderer.write("Send the bearer token in: Authorization: Bearer <token>\n");
-  deps.renderer.write("Cat the token from another shell:\n");
-  deps.renderer.write(`  cat ${info.tokenPath}
+  deps.renderer.writeStderr("  POST /mailbox/ack               acknowledge one message\n");
+  deps.renderer.writeStderr("  POST /mailbox/ack-many          acknowledge many in one batch\n");
+  deps.renderer.writeStderr(
+    "  POST /mailbox/unread-count      count unread messages for an agent\n"
+  );
+  deps.renderer.writeStderr("  POST /mailbox/agents/register   register an external agent\n");
+  deps.renderer.writeStderr("  POST /mailbox/agents/heartbeat  update agent heartbeat\n");
+  deps.renderer.writeStderr("  POST /mailbox/register-client   register an external client\n");
+  deps.renderer.writeStderr("  POST /mailbox/heartbeat         update client heartbeat\n");
+  deps.renderer.writeStderr("  GET  /mailbox/agents            list all registered agents\n");
+  deps.renderer.writeStderr(
+    "  GET  /mailbox/agents/online     list agents with a live heartbeat\n"
+  );
+  deps.renderer.writeStderr(
+    "  GET  /mailbox/events            SSE stream \u2014 real-time mailbox push\n"
+  );
+  deps.renderer.writeStderr("  GET  /healthz                   health probe (no auth)\n");
+  deps.renderer.writeStderr("\n");
+  deps.renderer.writeStderr("Send the bearer token in: Authorization: Bearer <token>\n");
+  deps.renderer.writeStderr("Cat the token from another shell:\n");
+  deps.renderer.writeStderr(`  cat ${info.tokenPath}
 `);
-  deps.renderer.write("\nPress Ctrl+C to stop.\n");
+  deps.renderer.writeStderr("\nPress Ctrl+C to stop.\n");
 }
 function printHelp(deps) {
   deps.renderer.write(`Usage: wstack mailbox <serve>
@@ -341,4 +360,4 @@ function printHelp(deps) {
 export {
   mailboxServeCmd
 };
-//# sourceMappingURL=mailbox-serve-5S3PHG5D.js.map
+//# sourceMappingURL=mailbox-serve-VKQIRCCB.js.map

package/dist/{mcp-RRPKNRSN.js → mcp-AQKSASHD.js}

@@ -441,4 +441,4 @@ function isRecord(value) {
 export {
   mcpCmd
 };
-//# sourceMappingURL=mcp-RRPKNRSN.js.map
+//# sourceMappingURL=mcp-AQKSASHD.js.map