@wrongstack/cli 0.318.0 → 0.319.1

package/dist/{modeldiag-4NYBRSFP.js → modeldiag-ZL4ROTQ5.js}

@@ -8,7 +8,7 @@ import {
   mutateConfigProviders,
   normalizeKeys,
   writeKeysBack
-} from "./chunk-BXFYBQKR.js";
+} from "./chunk-XPX432BZ.js";
 import "./chunk-7OCVIDC7.js";
 
 // src/subcommands/handlers/modeldiag.ts
@@ -1323,4 +1323,4 @@ var modeldiagCmd = async (args, deps) => {
 export {
   modeldiagCmd
 };
-//# sourceMappingURL=modeldiag-4NYBRSFP.js.map
+//# sourceMappingURL=modeldiag-ZL4ROTQ5.js.map

package/dist/per-subcommand-help-6VCIKDUW.js

@@ -0,0 +1,23 @@
+import {
+  deepSubcommandsWithFocusedHelp,
+  renderBlockToString,
+  renderDeepHelp,
+  renderDeepHelpToString,
+  renderFocusedHelp,
+  renderFocusedHelpToString,
+  renderGenericHelp,
+  subcommandsWithFocusedHelp
+} from "./chunk-P2OKBDCH.js";
+import "./chunk-2VMJ3E5Z.js";
+import "./chunk-7OCVIDC7.js";
+export {
+  deepSubcommandsWithFocusedHelp,
+  renderBlockToString,
+  renderDeepHelp,
+  renderDeepHelpToString,
+  renderFocusedHelp,
+  renderFocusedHelpToString,
+  renderGenericHelp,
+  subcommandsWithFocusedHelp
+};
+//# sourceMappingURL=per-subcommand-help-6VCIKDUW.js.map

package/dist/{plugin-usage-AP7SJCDA.js → plugin-usage-7WCZW4NP.js}

@@ -1,6 +1,6 @@
 import {
   runPluginManagementCommand
-} from "./chunk-QC5I4VWZ.js";
+} from "./chunk-635WW3II.js";
 import {
   restoreFlags
 } from "./chunk-CSAPOCBP.js";
@@ -41,4 +41,4 @@ export {
   pluginCmd,
   usageCmd
 };
-//# sourceMappingURL=plugin-usage-AP7SJCDA.js.map
+//# sourceMappingURL=plugin-usage-7WCZW4NP.js.map

package/dist/{plugins-HQ5FU2AM.js → plugins-7N3TF2QF.js}

@@ -6,9 +6,9 @@ import {
   pluginNameFromSpec,
   setupPlugins,
   warnIfDeprecatedPluginName
-} from "./chunk-GKHUHAIK.js";
-import "./chunk-QC5I4VWZ.js";
+} from "./chunk-HF5VQWIY.js";
 import "./chunk-TYO2OVAD.js";
+import "./chunk-635WW3II.js";
 import "./chunk-7OCVIDC7.js";
 export {
   BUILTIN_PLUGIN_FACTORIES,
@@ -19,4 +19,4 @@ export {
   setupPlugins,
   warnIfDeprecatedPluginName
 };
-//# sourceMappingURL=plugins-HQ5FU2AM.js.map
+//# sourceMappingURL=plugins-7N3TF2QF.js.map

package/dist/pre-launch/first-run.d.ts

@@ -0,0 +1,51 @@
+import type { Config, ModelsRegistry, SecretVault } from '@wrongstack/core/types';
+import type { ReadlineInputReader } from '../input-reader.js';
+import type { TerminalRenderer } from '../renderer.js';
+/**
+ * Does this machine have ANY way to reach a model right now?
+ *
+ * Three independent sources, checked cheapest-first:
+ *   1. A saved provider carrying a key or an OAuth token (`apiKeys[]`), or a
+ *      keyless loopback gateway (Ollama / LM Studio / vLLM / OmniRoute).
+ *   2. An env var named by a provider WrongStack ships a definition for. This
+ *      list is local and always complete, so it answers correctly offline and
+ *      even when the catalog has been pruned.
+ *   3. An env var named by a catalog provider — covers providers that exist
+ *      only in models.dev. Skipped without complaint when the catalog is
+ *      unavailable; sources 1 and 2 already cover the common cases.
+ *
+ * Deliberately generous: a false positive only means the user sees the normal
+ * picker (which they can still act on), while a false negative would push a
+ * configured user through an onboarding screen they do not need.
+ */
+export declare function hasAnyCredential(config: Config, modelsRegistry: ModelsRegistry, env?: Readonly<Record<string, string | undefined>>): Promise<boolean>;
+export type FirstRunOutcome = 
+/** A credential was added. The caller must reload config from disk. */
+{
+    kind: 'configured';
+}
+/** User chose to continue with no model connected. */
+ | {
+    kind: 'setup-mode';
+}
+/** User quit. The caller should exit 0 — this is not an error. */
+ | {
+    kind: 'quit';
+};
+export interface FirstRunDeps {
+    renderer: TerminalRenderer;
+    reader: ReadlineInputReader;
+    modelsRegistry: ModelsRegistry;
+    vault: SecretVault;
+    profileConfigPath: string;
+    /** Re-read after each auth flow so the loop can tell whether it succeeded. */
+    reloadConfig: () => Promise<Config>;
+}
+/**
+ * Run the first-run gate. Loops until the user configures a credential,
+ * chooses setup mode, or quits — a failed or abandoned auth flow returns here
+ * rather than falling through to the picker, which would be the same dead end
+ * this screen exists to remove.
+ */
+export declare function runFirstRunSetup(deps: FirstRunDeps): Promise<FirstRunOutcome>;
+//# sourceMappingURL=first-run.d.ts.map

package/dist/pre-launch.d.ts

@@ -1,3 +1,4 @@
+export { type FirstRunDeps, type FirstRunOutcome, hasAnyCredential, runFirstRunSetup, } from './pre-launch/first-run.js';
 export { LaunchAbortedError, type LaunchModeChoices, persistLaunchChoices, runLaunchPrompts, } from './pre-launch/launch-prompts.js';
 export { detectProjectKind, type ProjectKind, runProjectCheck, } from './pre-launch/project-check.js';
 //# sourceMappingURL=pre-launch.d.ts.map

package/dist/{project-manifest-YFTJ3D5N.js → project-manifest-RV5FXGQI.js}

@@ -5,7 +5,7 @@ import {
   loadManifest,
   saveManifest,
   touchProjectInManifest
-} from "./chunk-G7337TTK.js";
+} from "./chunk-IS2PPBQV.js";
 import "./chunk-7OCVIDC7.js";
 export {
   ensureProjectDataDir,
@@ -15,4 +15,4 @@ export {
   saveManifest,
   touchProjectInManifest
 };
-//# sourceMappingURL=project-manifest-YFTJ3D5N.js.map
+//# sourceMappingURL=project-manifest-RV5FXGQI.js.map

package/dist/{project-picker-R5TYAE3Q.js → project-picker-CCQR3W4I.js}

@@ -4,8 +4,8 @@ import {
   filterItems,
   runProjectPicker,
   skipDivider
-} from "./chunk-2ZNBRZ4W.js";
-import "./chunk-G7337TTK.js";
+} from "./chunk-WQZW3RDP.js";
+import "./chunk-IS2PPBQV.js";
 import "./chunk-7OCVIDC7.js";
 export {
   buildPickerItems,
@@ -14,4 +14,4 @@ export {
   runProjectPicker,
   skipDivider
 };
-//# sourceMappingURL=project-picker-R5TYAE3Q.js.map
+//# sourceMappingURL=project-picker-CCQR3W4I.js.map

package/dist/{providers-models-663NDPRQ.js → providers-models-OKKQZIWU.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-YMXXOOFN.js";
 import {
   mutateConfigProviders
-} from "./chunk-BXFYBQKR.js";
+} from "./chunk-XPX432BZ.js";
 import "./chunk-7OCVIDC7.js";
 
 // src/subcommands/handlers/providers-models.ts
@@ -661,4 +661,4 @@ export {
   modelsCmd,
   providersCmd
 };
-//# sourceMappingURL=providers-models-663NDPRQ.js.map
+//# sourceMappingURL=providers-models-OKKQZIWU.js.map

package/dist/{proxy-wiring-EQB5X5YH.js → proxy-wiring-QCI7EWQC.js}

@@ -3,8 +3,8 @@ import {
   awaitFirstWrongProxyProbe,
   bootstrapWrongProxy,
   shutdownWrongProxy
-} from "./chunk-SYIBTG3X.js";
-import "./chunk-G3IMKQRH.js";
+} from "./chunk-VOTTENR5.js";
+import "./chunk-JHPXJRRI.js";
 import "./chunk-7OCVIDC7.js";
 export {
   applyWrongProxyPrefs,
@@ -12,4 +12,4 @@ export {
   bootstrapWrongProxy,
   shutdownWrongProxy
 };
-//# sourceMappingURL=proxy-wiring-EQB5X5YH.js.map
+//# sourceMappingURL=proxy-wiring-QCI7EWQC.js.map

package/dist/{sdd-runtime-FLKCSTYV.js → sdd-runtime-R6FAK2G2.js}

@@ -1,4 +1,4 @@
-import "./chunk-ALE5KHCA.js";
+import "./chunk-WHOIR577.js";
 import {
   SDDState,
   advanceToNextTask,
@@ -49,4 +49,4 @@ export {
   trySaveSpecFromAIOutput,
   trySaveTasksFromAIOutput
 };
-//# sourceMappingURL=sdd-runtime-FLKCSTYV.js.map
+//# sourceMappingURL=sdd-runtime-R6FAK2G2.js.map

package/dist/services/sdd-runtime.d.ts

@@ -1,5 +1,5 @@
 export { findSpec, gatherProjectContext, getActiveBuilder, getActiveSDDContext, getActiveSDDPhase, } from './sdd/project-context.js';
 export { autoDetectTaskCompletion, isExplanatoryText, trySaveImplementationPlan, trySaveSpecFromAIOutput, } from './sdd/spec-detection.js';
 export { getSessionState, SDDState, sddState } from './sdd/state.js';
-export { advanceToNextTask, formatElapsed, getCurrentExecutingContext, getTaskGraphId, getTaskListText, getTaskProgress, getTaskTrackerExport as getTaskTracker, getTaskTrackerExport, markTaskCompleted, renderTaskListWithProgress, trySaveTasksFromAIOutput } from './sdd/task-manager.js';
+export { advanceToNextTask, formatElapsed, getCurrentExecutingContext, getTaskGraphId, getTaskListText, getTaskProgress, getTaskTrackerExport as getTaskTracker, getTaskTrackerExport, markTaskCompleted, renderTaskListWithProgress, trySaveTasksFromAIOutput, } from './sdd/task-manager.js';
 //# sourceMappingURL=sdd-runtime.d.ts.map

package/dist/{sessions-config-P2LK2L32.js → sessions-config-KAMEBVOX.js}

@@ -1,12 +1,12 @@
-import {
-  restoreFlags
-} from "./chunk-CSAPOCBP.js";
 import {
   getHistoryEntry,
   listHistory,
   restoreFromHistory,
   restoreLast
 } from "./chunk-B4JLSXZB.js";
+import {
+  restoreFlags
+} from "./chunk-CSAPOCBP.js";
 import {
   activeProfileConfigPath
 } from "./chunk-YMXXOOFN.js";
@@ -419,4 +419,4 @@ export {
   configCmd,
   sessionsCmd
 };
-//# sourceMappingURL=sessions-config-P2LK2L32.js.map
+//# sourceMappingURL=sessions-config-KAMEBVOX.js.map

package/dist/short-circuit-flags-7YUCERBB.js

@@ -0,0 +1,11 @@
+import {
+  handleHelpVersionShortCircuit
+} from "./chunk-LIWVIEZM.js";
+import "./chunk-QAC263FZ.js";
+import "./chunk-XJXDOF63.js";
+import "./chunk-GGGUZSAU.js";
+import "./chunk-7OCVIDC7.js";
+export {
+  handleHelpVersionShortCircuit
+};
+//# sourceMappingURL=short-circuit-flags-7YUCERBB.js.map

package/dist/slash-commands/sdd.d.ts

@@ -5,7 +5,7 @@ export type { TaskProgress } from '@wrongstack/core/types';
 export { findSpec, gatherProjectContext, getActiveBuilder, getActiveSDDContext, getActiveSDDPhase, } from '../services/sdd/project-context.js';
 export { autoDetectTaskCompletion, isExplanatoryText, trySaveImplementationPlan, trySaveSpecFromAIOutput, } from '../services/sdd/spec-detection.js';
 export { SDDState, sddState } from '../services/sdd/state.js';
-export { advanceToNextTask, formatElapsed, getCurrentExecutingContext, getTaskGraphId, getTaskListText, getTaskProgress, getTaskTrackerExport, markTaskCompleted, renderTaskListWithProgress, trySaveTasksFromAIOutput } from '../services/sdd/task-manager.js';
+export { advanceToNextTask, formatElapsed, getCurrentExecutingContext, getTaskGraphId, getTaskListText, getTaskProgress, getTaskTrackerExport, markTaskCompleted, renderTaskListWithProgress, trySaveTasksFromAIOutput, } from '../services/sdd/task-manager.js';
 export { renderProgress };
 export declare function getTaskTracker(): TaskTracker | null;
 /**

package/dist/subcommands-KE6MEQQP.js

@@ -0,0 +1,10 @@
+import {
+  subcommandNames,
+  subcommands
+} from "./chunk-KYDJJLJI.js";
+import "./chunk-7OCVIDC7.js";
+export {
+  subcommandNames,
+  subcommands
+};
+//# sourceMappingURL=subcommands-KE6MEQQP.js.map

package/dist/{webui-server-OJLLM6PE.js → webui-server-F7MSRHOF.js}

@@ -1,19 +1,19 @@
 import {
   createHqCommandDispatcher
 } from "./chunk-7YLN7YUA.js";
+import {
+  WEBUI_SESSION_CHILD_CAPABILITIES
+} from "./chunk-GPPRNAKW.js";
 import {
   createKanbanRunMirror
 } from "./chunk-VCYZ3WZV.js";
 import {
   startCliHqConnection
 } from "./chunk-XYKYXFEE.js";
-import {
-  WEBUI_SESSION_CHILD_CAPABILITIES
-} from "./chunk-GPPRNAKW.js";
 import {
   loadConfigProviders,
   mutateConfigProviders
-} from "./chunk-BXFYBQKR.js";
+} from "./chunk-XPX432BZ.js";
 import "./chunk-7OCVIDC7.js";
 
 // src/webui-server.ts
@@ -1303,7 +1303,9 @@ async function runWebUI(opts) {
   const terminalLogView = startTerminalDashboard({
     title: surface === "simpleui" ? "SimpleUI" : "WebUI",
     quiet: !envFlag("WEBUI_LOGS"),
-    getUrl: () => `http://${host}:${httpPort}`
+    // The dashboard is operator-owned terminal output, so retain the full
+    // authenticated access URL here even though startup logs remain redacted.
+    getUrl: () => accessUrl
   });
   const strictPort = opts.strictPort ?? isStrictPort();
   let httpPort = requestedHttpPort;
@@ -1910,4 +1912,4 @@ async function runWebUI(opts) {
 export {
   runWebUI
 };
-//# sourceMappingURL=webui-server-OJLLM6PE.js.map
+//# sourceMappingURL=webui-server-F7MSRHOF.js.map

package/dist/wiring/wrongtrace-gate.d.ts

@@ -8,6 +8,6 @@
  * working unchanged through this shim. NOTE: this is NOT core/utils'
  * `withFileLock` (a local file lock) — same name, different mechanism.
  */
-export { getWrongTrace, preflightFileEdit, resetWrongTraceGate, withFileLock, } from "@wrongstack/wrongtrace";
-export type { PreflightOptions, PreflightVerdict } from "@wrongstack/wrongtrace";
+export { getWrongTrace, preflightFileEdit, resetWrongTraceGate, withFileLock, } from '@wrongstack/wrongtrace';
+export type { PreflightOptions, PreflightVerdict } from '@wrongstack/wrongtrace';
 //# sourceMappingURL=wrongtrace-gate.d.ts.map

package/dist/wiring/wrongtrace-hooks.d.ts

@@ -4,5 +4,5 @@
  * shared by every host process that executes tools.
  */
 export { createWrongTraceHookPair } from '@wrongstack/wrongtrace';
-export type { WrongTraceGateDecisionEvent, WrongTraceHookInput, WrongTraceHookOptions, WrongTraceHookPair, WrongTracePreToolUseOutcome, } from "@wrongstack/wrongtrace";
+export type { WrongTraceGateDecisionEvent, WrongTraceHookInput, WrongTraceHookOptions, WrongTraceHookPair, WrongTracePreToolUseOutcome, } from '@wrongstack/wrongtrace';
 //# sourceMappingURL=wrongtrace-hooks.d.ts.map

package/dist/{wrongtrace-gate-counters-P5BCBXQN.js → wrongtrace-gate-counters-GSVY372D.js}

@@ -7,7 +7,7 @@ import {
   recordGateDecision,
   resetGateDecisions,
   snapshotGateDecisions
-} from "./chunk-7CECQDNH.js";
+} from "./chunk-D3K4NYQL.js";
 import "./chunk-7OCVIDC7.js";
 export {
   countersFilePath,
@@ -19,4 +19,4 @@ export {
   resetGateDecisions,
   snapshotGateDecisions
 };
-//# sourceMappingURL=wrongtrace-gate-counters-P5BCBXQN.js.map
+//# sourceMappingURL=wrongtrace-gate-counters-GSVY372D.js.map

package/dist/{wrongtrace-telemetry-FNLANZ5I.js → wrongtrace-telemetry-KBBM5NLQ.js}

@@ -1,6 +1,6 @@
 import {
   getWrongTrace
-} from "./chunk-4JRIWVJ4.js";
+} from "./chunk-ERX4BLKP.js";
 import "./chunk-7OCVIDC7.js";
 
 // src/wiring/wrongtrace-telemetry.ts
@@ -31,4 +31,4 @@ export {
   buildWrongTraceTelemetryReport,
   reportWrongTraceSessionTelemetry
 };
-//# sourceMappingURL=wrongtrace-telemetry-FNLANZ5I.js.map
+//# sourceMappingURL=wrongtrace-telemetry-KBBM5NLQ.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/cli",
-  "version": "0.318.0",
+  "version": "0.319.1",
   "license": "MIT",
   "description": "WrongStack CLI — terminal AI coding agent with provider catalog from models.dev. Provides `wrongstack` and `wstack` binaries.",
   "keywords": [
@@ -41,36 +41,36 @@
     "data"
   ],
   "dependencies": {
-    "@wrongstack/acp": "0.318.0",
-    "@wrongstack/bench": "0.318.0",
-    "@wrongstack/core": "0.318.0",
-    "@wrongstack/primitives": "0.318.0",
-    "@wrongstack/kanban": "0.318.0",
-    "@wrongstack/mcp": "0.318.0",
-    "@wrongstack/persistence": "0.318.0",
-    "@wrongstack/plug-lsp": "0.318.0",
-    "@wrongstack/plugins": "0.318.0",
-    "@wrongstack/providers": "0.318.0",
-    "@wrongstack/requirement-intake": "0.318.0",
-    "@wrongstack/runtime": "0.318.0",
-    "@wrongstack/sage": "0.318.0",
-    "@wrongstack/sdd": "0.318.0",
-    "@wrongstack/security-scanner": "0.318.0",
-    "@wrongstack/simpleui": "0.318.0",
-    "@wrongstack/techstack": "0.318.0",
-    "@wrongstack/telegram": "0.318.0",
-    "@wrongstack/tools": "0.318.0",
-    "@wrongstack/tui": "0.318.0",
-    "@wrongstack/vector-memory": "0.318.0",
-    "@wrongstack/webui": "0.318.0",
-    "@wrongstack/webui-hq": "0.318.0",
-    "@wrongstack/webui-protocol": "0.318.0",
-    "@wrongstack/wrongtrace": "0.318.0",
-    "@wrongstack/webui-server": "0.318.0",
+    "@wrongstack/acp": "0.319.1",
+    "@wrongstack/bench": "0.319.1",
+    "@wrongstack/core": "0.319.1",
+    "@wrongstack/primitives": "0.319.1",
+    "@wrongstack/kanban": "0.319.1",
+    "@wrongstack/mcp": "0.319.1",
+    "@wrongstack/persistence": "0.319.1",
+    "@wrongstack/plug-lsp": "0.319.1",
+    "@wrongstack/plugins": "0.319.1",
+    "@wrongstack/providers": "0.319.1",
+    "@wrongstack/requirement-intake": "0.319.1",
+    "@wrongstack/runtime": "0.319.1",
+    "@wrongstack/sage": "0.319.1",
+    "@wrongstack/sdd": "0.319.1",
+    "@wrongstack/security-scanner": "0.319.1",
+    "@wrongstack/simpleui": "0.319.1",
+    "@wrongstack/techstack": "0.319.1",
+    "@wrongstack/telegram": "0.319.1",
+    "@wrongstack/tools": "0.319.1",
+    "@wrongstack/tui": "0.319.1",
+    "@wrongstack/vector-memory": "0.319.1",
+    "@wrongstack/webui": "0.319.1",
+    "@wrongstack/webui-hq": "0.319.1",
+    "@wrongstack/webui-protocol": "0.319.1",
+    "@wrongstack/wrongtrace": "0.319.1",
+    "@wrongstack/webui-server": "0.319.1",
     "ws": "^8.21.3"
   },
   "optionalDependencies": {
-    "@wrongstack/desktop": "0.318.0"
+    "@wrongstack/desktop": "0.319.1"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",

package/dist/chunk-ALE5KHCA.js

@@ -1 +0,0 @@
-//# sourceMappingURL=chunk-ALE5KHCA.js.map