@wrongstack/cli 0.317.0 → 0.318.0

package/dist/{cli-main-CGTBIS4C.js → cli-main-ILRTNPDP.js}

@@ -1241,6 +1241,7 @@ import {
 } from "@wrongstack/core/agent-catalog";
 import {
   AdaptiveConcurrencyController,
+  areSubagentsAllowedForSession as areSubagentsAllowedForSession2,
   DEFAULT_MAX_FLEET_SPAWNS as DEFAULT_MAX_FLEET_SPAWNS2,
   Director,
   FLEET_ROSTER as FLEET_ROSTER2,
@@ -1979,6 +1980,9 @@ function createHostExploreCompanion(input) {
   const template = roster[DEFAULT_EXPLORE_COMPANION_AGENT_ID];
   let residentId;
   const ensureResident = async () => {
+    if (input.subagentsAllowed?.() === false) {
+      throw new Error("Subagents are disabled for this session.");
+    }
     if (residentId) {
       const alive = director.status().subagents.some((s) => s.id === residentId);
       if (alive) return residentId;
@@ -2378,6 +2382,9 @@ function applyFleetRootDefaults(opts) {
   }
 }
 
+// src/fleet/host-shadow-manager.ts
+import { areSubagentsAllowedForSession } from "@wrongstack/core/coordination";
+
 // src/fleet/host-shadow-pass.ts
 async function runHostShadowPass(ctx, reason) {
   try {
@@ -2652,6 +2659,7 @@ var HostShadowManager = class {
     const director = this.ctx.getDirector();
     if (!director) return;
     const id = this.resolve(sessionId);
+    if (!areSubagentsAllowedForSession(id)) return;
     const state = this.stateFor(id);
     if (state.passInFlight || state.agentId && this.isActiveSubagent(state.agentId)) {
       state.queuedProblem = state.queuedProblem ? `${state.queuedProblem}; ${reason}` : reason;
@@ -3710,6 +3718,10 @@ function createHostFleetSupervisor(input) {
       retargetPendingTask: (taskId, subagentId) => director.retargetPendingTask(taskId, subagentId),
       spawnHelper: async ({ reason, task }) => {
         try {
+          const originSessionId = sessionOf(task?.subagentId);
+          if (input.subagentsAllowed?.(originSessionId) === false) {
+            return { error: "Subagents are disabled for this session." };
+          }
           const routed = await dispatchAgent(task?.description ?? reason, {
             classifier: director.dispatchClassifier
           });
@@ -3726,7 +3738,7 @@ function createHostFleetSupervisor(input) {
             systemPromptOverride: helperPrompt,
             // The helper drains a specific backlog, so it belongs to whoever
             // owns that work — not to the tab this host booted with.
-            originSessionId: sessionOf(task?.subagentId)
+            originSessionId
           });
           return { subagentId };
         } catch (err) {
@@ -3946,6 +3958,7 @@ var MultiAgentHost = class {
    * means the host's own session, which is the only one a CLI or TUI has.
    */
   async runShadowPass(reason, sessionId) {
+    if (!areSubagentsAllowedForSession2(sessionId ?? this.deps.session.id)) return;
     return this.shadowManager.runShadowPass(reason, sessionId);
   }
   async ensureCoordinator(_config) {
@@ -4038,12 +4051,15 @@ var MultiAgentHost = class {
         sessionId,
         mailboxProjectDir: this.mailboxProjectDir(),
         roster: this.roster,
-        config: config.fleet?.exploreCompanion
+        config: config.fleet?.exploreCompanion,
+        subagentsAllowed: () => areSubagentsAllowedForSession2(sessionId)
       }) : null
     });
     this.exploreCompanions.ensure(this.deps.session.id);
     this.exploreCompanionOff = this.deps.events.on("agent.run.started", (e) => {
-      if (e.sessionId) this.exploreCompanions?.ensure(e.sessionId);
+      if (e.sessionId && areSubagentsAllowedForSession2(e.sessionId)) {
+        this.exploreCompanions?.ensure(e.sessionId);
+      }
     });
     this.directorOffHandles.push(
       ...registerDirectorBudgetAndContextBridges({
@@ -4179,7 +4195,8 @@ var MultiAgentHost = class {
       sessionFor: (subagentId) => this.sessionForSubagent(subagentId),
       mailboxProjectDir: this.mailboxProjectDir(),
       roster: this.roster,
-      getLeaderMailboxId: this.opts.getLeaderMailboxId
+      getLeaderMailboxId: this.opts.getLeaderMailboxId,
+      subagentsAllowed: areSubagentsAllowedForSession2
     });
   }
   async reportTaskResultToLeader(n) {
@@ -4204,6 +4221,13 @@ var MultiAgentHost = class {
   async spawn(description, opts) {
     const isShadowSpawn = opts?.name === "shadow";
     const originSessionId = opts?.originSessionId ?? this.deps.session.id;
+    if (!areSubagentsAllowedForSession2(originSessionId)) {
+      throw new AgentError({
+        message: "Subagents are disabled for this session.",
+        code: "AGENT_RUN_FAILED",
+        context: { sessionId: originSessionId, phase: "subagentPolicy" }
+      });
+    }
     if (isShadowSpawn) this.shadowManager.enterShadowSpawn(originSessionId);
     try {
       await this.buildDirector();
@@ -4258,6 +4282,14 @@ var MultiAgentHost = class {
     return result;
   }
   async _spawnAndAssign(subagentConfig, description = "", opts) {
+    const originSessionId = subagentConfig.originSessionId ?? this.deps.session.id;
+    if (!areSubagentsAllowedForSession2(originSessionId)) {
+      throw new AgentError({
+        message: "Subagents are disabled for this session.",
+        code: "AGENT_RUN_FAILED",
+        context: { sessionId: originSessionId, phase: "subagentPolicy" }
+      });
+    }
     const taskId = randomUUID5();
     if (!this.director)
       throw new AgentError({
@@ -5678,7 +5710,7 @@ async function runCliExecution(params) {
     governanceHandle,
     setConfig
   } = params;
-  const { execute } = await import("./execution-TZUGCKFU.js");
+  const { execute } = await import("./execution-BN4QIFH6.js");
   return execute(
     toExecuteDeps({
       core: {
@@ -6902,7 +6934,10 @@ import { createReadStream } from "node:fs";
 import * as fs2 from "node:fs/promises";
 import * as path8 from "node:path";
 import { createInterface } from "node:readline";
-import { FLEET_ROSTER as FLEET_ROSTER4 } from "@wrongstack/core/coordination";
+import {
+  areSubagentsAllowedForSession as areSubagentsAllowedForSession3,
+  FLEET_ROSTER as FLEET_ROSTER4
+} from "@wrongstack/core/coordination";
 import { loadDirectorState } from "@wrongstack/core/storage";
 import { AgentError as AgentError2 } from "@wrongstack/core/types";
 import { color as color5, expectDefined as expectDefined2 } from "@wrongstack/core/utils";
@@ -6954,6 +6989,10 @@ ${color5.dim("\u2500".repeat(40))}` : "";
       }
     },
     onFleetSpawn: async (role) => {
+      const originSessionId = input.getSessionId();
+      if (!areSubagentsAllowedForSession3(originSessionId)) {
+        throw new Error("Subagents are disabled for this session.");
+      }
       const director = input.getDirector();
       if (!director) {
         throw new AgentError2({
@@ -6962,14 +7001,15 @@ ${color5.dim("\u2500".repeat(40))}` : "";
           context: { phase: "fleet-spawn", role }
         });
       }
-      return director.spawn(
-        FLEET_ROSTER4[role] ?? {
+      return director.spawn({
+        ...FLEET_ROSTER4[role] ?? {
           id: `manual-${Date.now()}`,
           name: role,
           maxIterations: 50,
           maxToolCalls: 200
-        }
-      );
+        },
+        originSessionId
+      });
     },
     onFleetLog: (subagentId, mode) => readFleetLog(input.fleetRoot, subagentId, mode),
     onFleetRetry: (taskId) => retryInterruptedTasks(input, taskId),
@@ -7296,6 +7336,10 @@ async function retryInterruptedTasks(input, taskId) {
   const targets = taskId === "all" ? interrupted : interrupted.filter((task) => task.taskId === taskId || task.taskId.startsWith(taskId));
   if (targets.length === 0) return `No interrupted task matched "${taskId}".`;
   const results = [];
+  const originSessionId = input.getSessionId();
+  if (!areSubagentsAllowedForSession3(originSessionId)) {
+    return "Subagents are disabled for this session.";
+  }
   for (const task of targets) {
     const owner = task.subagentId ? prior.subagents.find((subagent) => subagent.id === task.subagentId) : void 0;
     if (!owner) {
@@ -7310,7 +7354,7 @@ async function retryInterruptedTasks(input, taskId) {
       model: owner.model
     };
     try {
-      const subagentId = await director.spawn(config);
+      const subagentId = await director.spawn({ ...config, originSessionId });
       const newTaskId = await director.assign({
         id: "",
         description: task.description ?? "(no description)",
@@ -31658,7 +31702,10 @@ function setupCliSlashCommands(params) {
 }
 
 // src/wiring/command-host-state.ts
-import { FLEET_ROSTER as FLEET_ROSTER5 } from "@wrongstack/core/coordination";
+import {
+  areSubagentsAllowedForSession as areSubagentsAllowedForSession4,
+  FLEET_ROSTER as FLEET_ROSTER5
+} from "@wrongstack/core/coordination";
 import {
   AgentError as AgentError3,
   resolveFleetChatVerbosity as resolveFleetChatVerbosity2
@@ -31735,7 +31782,7 @@ async function setupCommandHostState(input) {
   input.hqCommandController.interruptLeader = () => interruptController.abortLeader();
   input.hqCommandController.killFleet = () => killFleet2(input.getDirector());
   input.hqCommandController.terminateAgent = (subagentId) => terminateAgent(input.getDirector(), subagentId);
-  input.hqCommandController.spawnAgent = (role, task, maxIterations) => spawnAgent2(input.getDirector(), role, task, maxIterations);
+  input.hqCommandController.spawnAgent = (role, task, maxIterations) => spawnAgent2(input.getDirector(), input.sessionRef.current?.id ?? input.session.id, role, task, maxIterations);
   const enhanceController = createEnhanceController(input.getConfig());
   const statuslineConfigDeps = createStatuslineConfigDeps();
   const hidden = await loadStatuslineHiddenItems();
@@ -31836,7 +31883,7 @@ async function terminateAgent(director, subagentId) {
     return false;
   }
 }
-async function spawnAgent2(director, role, task, maxIterations) {
+async function spawnAgent2(director, sessionId, role, task, maxIterations) {
   if (!director) {
     throw new AgentError3({
       message: "Director is not available.",
@@ -31844,6 +31891,9 @@ async function spawnAgent2(director, role, task, maxIterations) {
       context: { phase: "hq-spawn", role }
     });
   }
+  if (!areSubagentsAllowedForSession4(sessionId)) {
+    throw new Error("Subagents are disabled for this session.");
+  }
   const base = FLEET_ROSTER5[role] ?? {
     id: `manual-${Date.now()}`,
     name: role,
@@ -31851,7 +31901,7 @@ async function spawnAgent2(director, role, task, maxIterations) {
     maxToolCalls: 200
   };
   const config = task !== void 0 ? { ...base, task } : base;
-  return director.spawn(config);
+  return director.spawn({ ...config, originSessionId: sessionId });
 }
 
 // src/wiring/dep-watcher.ts
@@ -34609,6 +34659,10 @@ import { addFatalSalvageHook } from "@wrongstack/core/utils";
 import { randomBytes as randomBytes2 } from "node:crypto";
 import * as path30 from "node:path";
 import { Context as Context2 } from "@wrongstack/core/agent";
+import {
+  restoreSessionSubagentPolicy,
+  seedSessionSubagentPolicy
+} from "@wrongstack/core/coordination";
 import { ProviderCacheLedger } from "@wrongstack/core/infrastructure";
 import {
   attachTodosCheckpoint,
@@ -34743,6 +34797,7 @@ async function setupSession(params) {
   let restoredMessages = [];
   let restoredToolCalls = [];
   let restoredEvents = [];
+  let restoredSubagentsAllowed;
   let resumedModel;
   let resumedProvider;
   if (resumeId) {
@@ -34762,6 +34817,7 @@ async function setupSession(params) {
       restoredMessages = resumed.data.messages;
       restoredToolCalls = resumed.data.toolCallEnds ?? [];
       restoredEvents = resumed.data.events ?? [];
+      restoredSubagentsAllowed = resumed.data.subagentsAllowed;
       resumedModel = resumed.data.metadata.model;
       resumedProvider = resumed.data.metadata.provider;
       if (resumed.data.usage) {
@@ -34826,6 +34882,9 @@ async function setupSession(params) {
     context.state.replaceMessages(restoredMessages);
     await context.flushConversationJournal();
   }
+  if (restoredEvents.length > 0 || restoredSubagentsAllowed !== void 0) {
+    restoreSessionSubagentPolicy(context, restoredEvents, restoredSubagentsAllowed);
+  } else seedSessionSubagentPolicy(context);
   const queueStore = new QueueStore({
     dir: sessionDir,
     ...eventsBus ? { events: eventsBus } : {},
@@ -36618,4 +36677,4 @@ export {
   CLI_VERSION,
   runInteractive
 };
-//# sourceMappingURL=cli-main-CGTBIS4C.js.map
+//# sourceMappingURL=cli-main-ILRTNPDP.js.map

package/dist/{execution-TZUGCKFU.js → execution-BN4QIFH6.js}

@@ -212,7 +212,7 @@ async function runWebUIDispatch(ctx) {
   const isSimpleUi = !isSessionChild && flags["simpleui"] === true;
   agent.disableInteractiveConfirmation();
   renderer.setSilent(true);
-  const { runWebUI } = await import("./webui-server-LZOEH7O6.js");
+  const { runWebUI } = await import("./webui-server-OJLLM6PE.js");
   const flagValue = (names) => {
     for (const name of names) {
       if (!Object.hasOwn(flags, name)) continue;
@@ -1010,6 +1010,7 @@ import {
   DefaultSystemPromptBuilder,
   setQueuedMessagesSnapshot
 } from "@wrongstack/core/agent";
+import { resetSessionSubagentPolicy } from "@wrongstack/core/coordination";
 import { TOKENS } from "@wrongstack/core/kernel";
 import { DefaultSessionStore } from "@wrongstack/core/storage";
 import {
@@ -1120,6 +1121,7 @@ async function switchProjectInPlace(ctx, targetRoot, displayName) {
   context.workingDir = resolved;
   context.session = nextWriter;
   context.state.replaceMessages([]);
+  resetSessionSubagentPolicy(context);
   context.state.replaceTodos([]);
   context.clearFileTracking();
   context.clearMemoryEvidence?.();
@@ -1252,6 +1254,7 @@ async function onSDDOutput(output) {
 
 // src/boot/tui-session-resume.ts
 import * as path7 from "node:path";
+import { restoreSessionSubagentPolicy } from "@wrongstack/core/coordination";
 import { attachTodosCheckpoint, loadTodosCheckpoint } from "@wrongstack/core/storage";
 import { projectLastRequestTokens } from "@wrongstack/core/types/session-timeline";
 import { sessionScopedPath as sessionScopedPath2 } from "@wrongstack/core/utils";
@@ -1420,6 +1423,7 @@ async function resumeSession(ctx, sessionId) {
     agent.ctx.session = resumed.writer;
     try {
       agent.ctx.state.replaceMessages(resumed.data.messages);
+      restoreSessionSubagentPolicy(agent.ctx, resumed.data.events, resumed.data.subagentsAllowed);
     } catch (err) {
       agent.ctx.session = oldWriter;
       agent.ctx.state.replaceMessages(oldMessages);
@@ -3911,6 +3915,9 @@ function errorText2(error) {
 import { randomUUID as randomUUID3 } from "node:crypto";
 import path12 from "node:path";
 import { effectiveFallbackChain, fallbackProfileChain as fallbackProfileChain2 } from "@wrongstack/core/agent";
+import {
+  areSubagentsAllowedForSession
+} from "@wrongstack/core/coordination";
 import {
   CHIMERA_REVIEW_PROMPT,
   classifyChimeraReviewSource,
@@ -3944,6 +3951,10 @@ function installChimeraReviewHandler({
   const off = events.onPattern("chimera.review_needed", (_event, payload) => {
     const p = payload;
     const reviewSessionId = agent.ctx.activeRunSessionId ?? agent.ctx.session?.id ?? session.id;
+    if (!areSubagentsAllowedForSession(reviewSessionId)) {
+      void recordCompletedReview(events, { bundle: p }).catch(() => void 0);
+      return;
+    }
     const dir = director;
     if (!dir) {
       void recordCompletedReview(events, { bundle: p }).catch(() => void 0);
@@ -6687,4 +6698,4 @@ export {
   execute,
   resolveReviewerFallbackModels
 };
-//# sourceMappingURL=execution-TZUGCKFU.js.map
+//# sourceMappingURL=execution-BN4QIFH6.js.map

package/dist/execution-chimera-review.d.ts

@@ -1,4 +1,4 @@
-import type { ProviderModelStatusTracker } from '@wrongstack/core/coordination';
+import { type ProviderModelStatusTracker } from '@wrongstack/core/coordination';
 import { type ChimeraReviewCompletePayload } from '@wrongstack/core/plugin';
 import type { ExecuteDeps } from './execute-deps.js';
 type Director = NonNullable<ExecuteDeps['fleet']['director']>;

package/dist/fleet/host-explore-companion.d.ts

@@ -41,6 +41,7 @@ interface HostExploreCompanionInput {
     mailboxProjectDir: string;
     roster: Record<string, SubagentConfig>;
     config?: HostExploreCompanionConfig | undefined;
+    subagentsAllowed?: (() => boolean) | undefined;
 }
 export declare function createHostExploreCompanion(input: HostExploreCompanionInput): ExploreCompanion | null;
 export {};

package/dist/fleet/host-shadow-manager.d.ts

@@ -38,7 +38,7 @@
  * @module fleet/host-shadow-manager
  */
 import type { SubagentConfig } from '@wrongstack/core/types';
-import type { Director } from '@wrongstack/core/coordination';
+import { type Director } from '@wrongstack/core/coordination';
 import type { MultiAgentDeps, MultiAgentHostOptions } from './host-types.js';
 interface HostShadowManagerContext {
     deps: MultiAgentDeps;

package/dist/fleet/host-supervisor.d.ts

@@ -20,6 +20,7 @@ interface HostFleetSupervisorInput {
     mailboxProjectDir: string;
     roster: Record<string, SubagentConfig>;
     getLeaderMailboxId?: (() => string | undefined) | undefined;
+    subagentsAllowed?: ((sessionId: string) => boolean) | undefined;
 }
 export declare function createHostFleetSupervisor(input: HostFleetSupervisorInput): FleetSupervisor | null;
 export {};

package/dist/index.js

@@ -4444,7 +4444,7 @@ async function initializeCli(argv) {
 async function main(argv) {
   const cliCtx = await initializeCli(argv);
   if (typeof cliCtx === "number") return cliCtx;
-  const { runInteractive } = await import("./cli-main-CGTBIS4C.js");
+  const { runInteractive } = await import("./cli-main-ILRTNPDP.js");
   return runInteractive(cliCtx);
 }
 

package/dist/{webui-server-LZOEH7O6.js → webui-server-OJLLM6PE.js}

@@ -830,6 +830,10 @@ function createPrefsSeeding(opts) {
 
 // src/webui-server/route-contexts.ts
 import * as path5 from "node:path";
+import {
+  seedSessionSubagentPolicy,
+  setSessionSubagentsAllowed
+} from "@wrongstack/core/coordination";
 import { TOKENS as TOKENS2 } from "@wrongstack/core/kernel";
 import { SkillInstaller } from "@wrongstack/core/skills";
 import { PromptUsageStore } from "@wrongstack/core/storage";
@@ -946,7 +950,15 @@ function createWebuiRouteContexts({
   const prefsCtx = {
     meta: opts.agent.ctx.meta,
     metaFor: metaForSession,
-    snapshot: (sessionId) => prefSnapshot(sessionId ? metaForSession(sessionId) : void 0),
+    snapshot: (sessionId) => {
+      const target = sessionId ? getSessionAgent(sessionId).ctx : opts.agent.ctx;
+      seedSessionSubagentPolicy(target);
+      return prefSnapshot(target.meta);
+    },
+    setSubagentsAllowed: (allowed, sessionId) => setSessionSubagentsAllowed(
+      sessionId ? getSessionAgent(sessionId).ctx : opts.agent.ctx,
+      allowed
+    ),
     persist: persistPrefs,
     setYolo: opts.onYoloSwitch,
     setAutonomy: opts.onAutonomySwitch,
@@ -1898,4 +1910,4 @@ async function runWebUI(opts) {
 export {
   runWebUI
 };
-//# sourceMappingURL=webui-server-LZOEH7O6.js.map
+//# sourceMappingURL=webui-server-OJLLM6PE.js.map

package/dist/wiring/command-host-state.d.ts

@@ -1,5 +1,5 @@
 /** Mutable command-host state created after the runtime fleet is available. */
-import type { BrainArbiter, Director } from '@wrongstack/core/coordination';
+import { type BrainArbiter, type Director } from '@wrongstack/core/coordination';
 import type { EventBus } from '@wrongstack/core/kernel';
 import { type Config, type SessionWriter } from '@wrongstack/core/types';
 import type { WstackPaths } from '@wrongstack/core/utils';

package/dist/wiring/fleet-command-handlers.d.ts

@@ -1,4 +1,4 @@
-import type { Director } from '@wrongstack/core/coordination';
+import { type Director } from '@wrongstack/core/coordination';
 import type { EventBus } from '@wrongstack/core/kernel';
 import type { MultiAgentHost } from '../multi-agent.js';
 import type { BuiltinSlashCommandDeps } from './slash-commands.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/cli",
-  "version": "0.317.0",
+  "version": "0.318.0",
   "license": "MIT",
   "description": "WrongStack CLI — terminal AI coding agent with provider catalog from models.dev. Provides `wrongstack` and `wstack` binaries.",
   "keywords": [
@@ -41,36 +41,36 @@
     "data"
   ],
   "dependencies": {
-    "@wrongstack/acp": "0.317.0",
-    "@wrongstack/bench": "0.317.0",
-    "@wrongstack/core": "0.317.0",
-    "@wrongstack/primitives": "0.317.0",
-    "@wrongstack/kanban": "0.317.0",
-    "@wrongstack/mcp": "0.317.0",
-    "@wrongstack/persistence": "0.317.0",
-    "@wrongstack/plug-lsp": "0.317.0",
-    "@wrongstack/plugins": "0.317.0",
-    "@wrongstack/providers": "0.317.0",
-    "@wrongstack/requirement-intake": "0.317.0",
-    "@wrongstack/runtime": "0.317.0",
-    "@wrongstack/sage": "0.317.0",
-    "@wrongstack/sdd": "0.317.0",
-    "@wrongstack/security-scanner": "0.317.0",
-    "@wrongstack/simpleui": "0.317.0",
-    "@wrongstack/techstack": "0.317.0",
-    "@wrongstack/telegram": "0.317.0",
-    "@wrongstack/tools": "0.317.0",
-    "@wrongstack/tui": "0.317.0",
-    "@wrongstack/vector-memory": "0.317.0",
-    "@wrongstack/webui": "0.317.0",
-    "@wrongstack/webui-hq": "0.317.0",
-    "@wrongstack/webui-protocol": "0.317.0",
-    "@wrongstack/wrongtrace": "0.317.0",
-    "@wrongstack/webui-server": "0.317.0",
+    "@wrongstack/acp": "0.318.0",
+    "@wrongstack/bench": "0.318.0",
+    "@wrongstack/core": "0.318.0",
+    "@wrongstack/primitives": "0.318.0",
+    "@wrongstack/kanban": "0.318.0",
+    "@wrongstack/mcp": "0.318.0",
+    "@wrongstack/persistence": "0.318.0",
+    "@wrongstack/plug-lsp": "0.318.0",
+    "@wrongstack/plugins": "0.318.0",
+    "@wrongstack/providers": "0.318.0",
+    "@wrongstack/requirement-intake": "0.318.0",
+    "@wrongstack/runtime": "0.318.0",
+    "@wrongstack/sage": "0.318.0",
+    "@wrongstack/sdd": "0.318.0",
+    "@wrongstack/security-scanner": "0.318.0",
+    "@wrongstack/simpleui": "0.318.0",
+    "@wrongstack/techstack": "0.318.0",
+    "@wrongstack/telegram": "0.318.0",
+    "@wrongstack/tools": "0.318.0",
+    "@wrongstack/tui": "0.318.0",
+    "@wrongstack/vector-memory": "0.318.0",
+    "@wrongstack/webui": "0.318.0",
+    "@wrongstack/webui-hq": "0.318.0",
+    "@wrongstack/webui-protocol": "0.318.0",
+    "@wrongstack/wrongtrace": "0.318.0",
+    "@wrongstack/webui-server": "0.318.0",
     "ws": "^8.21.3"
   },
   "optionalDependencies": {
-    "@wrongstack/desktop": "0.317.0"
+    "@wrongstack/desktop": "0.318.0"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",