@wrongstack/cli 0.319.0 → 1.0.0

package/data/providers.json

@@ -4,6 +4,28 @@
     "name": "OpenAI Codex (ChatGPT sign-in)",
     "doc": "https://developers.openai.com/codex/models",
     "models": {
+      "gpt-6-astra": {
+        "id": "gpt-6-astra",
+        "name": "GPT-6 Astra",
+        "description": "Most capable model for complex work across code, apps, and research.",
+        "reasoning": true,
+        "reasoningConfig": {
+          "default": "enabled",
+          "disableSupported": false,
+          "effortSupported": true,
+          "effortLevels": ["low", "medium", "high", "xhigh", "max"],
+          "preserveThinking": "unsupported"
+        },
+        "tool_call": true,
+        "modalities": {
+          "input": ["text", "image"],
+          "output": ["text"]
+        },
+        "limit": {
+          "context": 1050000,
+          "output": 128000
+        }
+      },
       "gpt-5.6-sol": {
         "id": "gpt-5.6-sol",
         "name": "GPT-5.6 Sol",
@@ -85,21 +107,6 @@
           "output": 128000
         }
       },
-      "gpt-5.4": {
-        "id": "gpt-5.4",
-        "name": "GPT-5.4",
-        "description": "Strong model for everyday coding.",
-        "reasoning": true,
-        "tool_call": true,
-        "modalities": {
-          "input": ["text", "image"],
-          "output": ["text"]
-        },
-        "limit": {
-          "context": 1050000,
-          "output": 128000
-        }
-      },
       "gpt-5.4-mini": {
         "id": "gpt-5.4-mini",
         "name": "GPT-5.4 Mini",

package/dist/{acp-5ANIAOZC.js → acp-3LARESEO.js}

@@ -3,10 +3,12 @@ import {
   loadCachedAcpRegistry,
   refreshAcpRegistry,
   setupProvider
-} from "./chunk-F5GA2QW2.js";
-import "./chunk-E4I2TF5S.js";
-import "./chunk-XPX432BZ.js";
-import "./chunk-7OCVIDC7.js";
+} from "./chunk-ZSZ3EYWH.js";
+import {
+  startCliHqConnection
+} from "./chunk-TE3Q32JP.js";
+import "./chunk-TNK6237M.js";
+import "./chunk-DR2OXU46.js";
 
 // src/subcommands/handlers/acp.ts
 import { randomBytes } from "node:crypto";
@@ -30,6 +32,90 @@ import {
 } from "@wrongstack/acp/agent";
 import { WebSocketServer } from "ws";
 
+// src/acp-hq-telemetry.ts
+import { AgentStatusTracker } from "@wrongstack/core/coordination";
+import { startSessionTelemetryBridge } from "@wrongstack/core/hq";
+var NO_REGISTRY = { updateAgents: async () => void 0 };
+function startAcpHqTelemetry(options) {
+  const connection = startCliHqConnection({
+    clientKind: "acp",
+    projectRoot: options.projectRoot,
+    ...options.projectName !== void 0 ? { projectName: options.projectName } : {},
+    ...options.appConfig !== void 0 ? { appConfig: options.appConfig } : {},
+    capabilities: ["telemetry.publish", "mailbox.summary", "fleet.summary", "session.summary"]
+  });
+  const entries = /* @__PURE__ */ new Map();
+  let stopped = false;
+  const attach = (sessionId, agent, cwd) => {
+    if (stopped || entries.has(sessionId)) return;
+    const publisher = connection.getPublisher();
+    if (publisher === void 0) return;
+    const events = agent.events;
+    if (events === void 0) return;
+    const tracker = new AgentStatusTracker({ events, registry: NO_REGISTRY, sessionId });
+    tracker.start();
+    let stopBridge;
+    try {
+      stopBridge = startSessionTelemetryBridge({
+        publisher,
+        events,
+        sessionId,
+        // An ACP session works in the directory the client opened, which is
+        // not necessarily where the server booted.
+        projectRoot: cwd,
+        projectName: options.projectName ?? options.projectRoot,
+        initialAgents: tracker.getAgents(),
+        startedAt: (/* @__PURE__ */ new Date()).toISOString()
+      });
+    } catch {
+      tracker.stop();
+      return;
+    }
+    entries.set(sessionId, { tracker, stopBridge });
+  };
+  const detach = (sessionId) => {
+    const entry = entries.get(sessionId);
+    if (entry === void 0) return;
+    entries.delete(sessionId);
+    try {
+      entry.stopBridge();
+    } catch {
+    }
+    try {
+      entry.tracker.stop();
+    } catch {
+    }
+  };
+  return {
+    wrapAgentFactory(agentFor) {
+      const wrapped = async (sessionId, cwd, api) => {
+        const agent = await agentFor(sessionId, cwd, api);
+        try {
+          attach(sessionId, agent, cwd);
+        } catch {
+        }
+        return agent;
+      };
+      return wrapped;
+    },
+    wrapDispose(dispose) {
+      return (sessionId) => {
+        try {
+          detach(sessionId);
+        } catch {
+        }
+        dispose(sessionId);
+      };
+    },
+    active: () => [...entries.keys()],
+    stop: () => {
+      stopped = true;
+      for (const sessionId of [...entries.keys()]) detach(sessionId);
+      connection.stop();
+    }
+  };
+}
+
 // src/acp-server-agent.ts
 import { Agent, Context, createDefaultPipelines } from "@wrongstack/core/agent";
 import { ToolExecutor } from "@wrongstack/core/execution";
@@ -435,6 +521,7 @@ async function runACPWebSocketServer(deps, port) {
   let turnFactory;
   let echoTurn;
   let store;
+  let hqTelemetry;
   if (echo) {
     echoTurn = async () => ({ stopReason: "end_turn" });
   } else {
@@ -449,7 +536,13 @@ async function runACPWebSocketServer(deps, port) {
       }
       throw err;
     }
-    turnFactory = () => makeACPServerAgentTurn({ agentFor });
+    hqTelemetry = startAcpHqTelemetry({
+      projectRoot: deps.cwd ?? process.cwd(),
+      projectName: path.basename(deps.cwd ?? process.cwd()),
+      appConfig: deps.config
+    });
+    const tracked = hqTelemetry.wrapAgentFactory(agentFor);
+    turnFactory = () => makeACPServerAgentTurn({ agentFor: tracked });
     store = deps.paths?.projectDir ? new ACPSessionStore({ dir: path.join(deps.paths.projectDir, "acp-sessions") }) : void 0;
   }
   const acpToken = process.env["WRONGSTACK_ACP_TOKEN"]?.trim() || randomBytes(32).toString("hex");
@@ -482,7 +575,7 @@ async function runACPWebSocketServer(deps, port) {
       ...connectionTurn ? {
         replayFor: connectionTurn.replay,
         seedFor: connectionTurn.seed,
-        disposeFor: connectionTurn.dispose
+        disposeFor: hqTelemetry?.wrapDispose(connectionTurn.dispose) ?? connectionTurn.dispose
       } : {},
       ...store ? { store } : {}
     });
@@ -524,6 +617,7 @@ async function runACPWebSocketServer(deps, port) {
         }
       }
       wss.close();
+      hqTelemetry?.stop();
       resolve();
     };
     process.on("SIGINT", shutdown);
@@ -537,6 +631,7 @@ async function runACPServer(deps) {
     return runACPWebSocketServer(deps, wsPort);
   }
   const echo = deps.flags?.echo === true || deps.flags?.echo === "true";
+  let stdioHqTelemetry;
   const server = new WrongStackACPServer(
     echo ? {} : (() => {
       let agentFor;
@@ -550,13 +645,20 @@ async function runACPServer(deps) {
         }
         throw err;
       }
-      const turn = makeACPServerAgentTurn({ agentFor });
+      stdioHqTelemetry = startAcpHqTelemetry({
+        projectRoot: deps.cwd ?? process.cwd(),
+        projectName: path.basename(deps.cwd ?? process.cwd()),
+        appConfig: deps.config
+      });
+      const turn = makeACPServerAgentTurn({
+        agentFor: stdioHqTelemetry.wrapAgentFactory(agentFor)
+      });
       const store = deps.paths?.projectDir ? new ACPSessionStore({ dir: path.join(deps.paths.projectDir, "acp-sessions") }) : void 0;
       return {
         runTurn: turn,
         replayFor: turn.replay,
         seedFor: turn.seed,
-        disposeFor: turn.dispose,
+        disposeFor: stdioHqTelemetry.wrapDispose(turn.dispose),
         ...store ? { store } : {}
       };
     })()
@@ -577,13 +679,14 @@ async function runACPServer(deps) {
   createGracefulShutdown({
     run: async () => {
       try {
-        server.stop();
+        await server.stop();
       } catch (err) {
         deps.renderer.writeError(
           `ACP stop failed: ${err instanceof Error ? err.message : String(err)}
 `
         );
       }
+      stdioHqTelemetry?.stop();
     }
   }).install();
   try {
@@ -913,4 +1016,4 @@ ${renderAcpBenchText(result)}
 export {
   acpCmd
 };
-//# sourceMappingURL=acp-5ANIAOZC.js.map
+//# sourceMappingURL=acp-3LARESEO.js.map

package/dist/acp-hq-telemetry.d.ts

@@ -0,0 +1,44 @@
+/**
+ * ACP sessions on the HQ fleet map.
+ *
+ * An editor driving WrongStack over ACP (Zed, JetBrains, …) runs real turns:
+ * real provider calls, real tools, real cost. HQ never saw any of it. The only
+ * trace an ACP process left was the mailbox-only publisher every agent process
+ * opens, which shows up as a client with no session and no agents — so an
+ * operator watching the fleet had no way to tell an ACP server was working at
+ * all, let alone what it was doing.
+ *
+ * The wiring is unusually cheap here because ACP already gives every session
+ * its own `EventBus` (`buildAcpServerAgentFactory`): a tracker attached to that
+ * bus needs no session filtering, unlike the WebUI's shared-bus host.
+ *
+ * What this does NOT give you is a chat transcript. ACP sessions run on a
+ * no-op session writer — they do not persist a JSONL journal — so HQ's Console
+ * has nothing to replay for them. The agent card is live (status, current
+ * tool, iterations, tokens, cost, streaming tail); the conversation is not.
+ * Giving ACP a real journal is a separate change: it would also put ACP
+ * sessions into `/resume`, recovery and history.
+ *
+ * @module acp-hq-telemetry
+ */
+import type { Agent } from '@wrongstack/core/agent';
+import type { Config } from '@wrongstack/core/types';
+/** The per-session Agent factory shape `makeACPServerAgentTurn` consumes. */
+type AcpAgentFactory = (sessionId: string, cwd: string, api?: never) => Promise<Agent>;
+export interface AcpHqTelemetryOptions {
+    projectRoot: string;
+    projectName?: string | undefined;
+    appConfig?: Config | undefined;
+}
+export interface AcpHqTelemetry {
+    /** Wrap the agent factory so each new ACP session reports to HQ. */
+    wrapAgentFactory<T extends AcpAgentFactory>(agentFor: T): T;
+    /** Wrap `dispose` so a closed ACP session stops reporting. */
+    wrapDispose(dispose: (sessionId: string) => void): (sessionId: string) => void;
+    /** Session ids currently reporting. Exposed for tests and diagnostics. */
+    active(): string[];
+    stop(): void;
+}
+export declare function startAcpHqTelemetry(options: AcpHqTelemetryOptions): AcpHqTelemetry;
+export {};
+//# sourceMappingURL=acp-hq-telemetry.d.ts.map

package/dist/{audit-ZPCLCC3C.js → audit-46YK5DSC.js}

@@ -1,7 +1,6 @@
 import {
   restoreFlags
 } from "./chunk-CSAPOCBP.js";
-import "./chunk-7OCVIDC7.js";
 
 // src/subcommands/handlers/audit.ts
 import { ToolAuditLog } from "@wrongstack/core/storage";
@@ -103,4 +102,4 @@ async function listAudits(log, dir, deps) {
 export {
   auditCmd
 };
-//# sourceMappingURL=audit-ZPCLCC3C.js.map
+//# sourceMappingURL=audit-46YK5DSC.js.map

package/dist/{auth-KF5TAD7V.js → auth-KIBJZZIE.js}

@@ -13,7 +13,7 @@ import {
   runOAuthLoginKind,
   runOAuthLoginMenu,
   validateFamily
-} from "./chunk-XHIEA6LG.js";
+} from "./chunk-MNQQ4ZNF.js";
 import {
   renderAuthLocalHelpToString,
   wantsLocalHelp
@@ -28,8 +28,8 @@ import {
 } from "./chunk-YMXXOOFN.js";
 import {
   parseAuthFlags
-} from "./chunk-GGGUZSAU.js";
-import "./chunk-E4I2TF5S.js";
+} from "./chunk-Z7A5MXKJ.js";
+import "./chunk-TNK6237M.js";
 import {
   loadConfigProviders,
   maskedKey,
@@ -37,8 +37,7 @@ import {
   normalizeKeys,
   nowIso,
   writeKeysBack
-} from "./chunk-XPX432BZ.js";
-import "./chunk-7OCVIDC7.js";
+} from "./chunk-DR2OXU46.js";
 
 // src/subcommands/handlers/auth.ts
 import { color as color3 } from "@wrongstack/core/utils";
@@ -596,4 +595,4 @@ async function runAuthRemove(deps, providerId) {
 export {
   authCmd
 };
-//# sourceMappingURL=auth-KF5TAD7V.js.map
+//# sourceMappingURL=auth-KIBJZZIE.js.map

package/dist/auth-menu/add-provider.d.ts

@@ -1,5 +1,12 @@
 import type { ProviderConfig, ResolvedProvider } from '@wrongstack/core/types';
 import type { AuthMenuDeps } from './types.js';
+/**
+ * Providers WrongStack defines itself but models.dev does not list under that
+ * id — the AI Gateway, which models.dev files as `vercel`. Without this they
+ * are unreachable from the catalog picker and the user has to hand-roll a
+ * custom entry to use them.
+ */
+export declare function ownDefinitionsAsCatalog(known: Set<string>): ResolvedProvider[];
 export declare function addFromCatalog(deps: AuthMenuDeps): Promise<boolean>;
 /**
  * Prompt for family/baseUrl/alias overrides, then add a key.

package/dist/auth-menu/panel-service.d.ts

@@ -1,23 +1,3 @@
-/**
- * TUI auth-panel host — the structured, UI-agnostic surface behind the
- * interactive `/auth` panel in the Ink TUI.
- *
- * Two kinds of operations:
- *
- *   - **Direct mutations** (set active key, delete key, remove provider):
- *     plain async methods that mutate the config atomically and return an
- *     error string or `null`.
- *
- *   - **Flows** (add key, add from catalog, add custom, add local, OAuth
- *     sign-in, field edits): the existing battle-tested readline flows from
- *     this package, driven through an {@link AuthFlowIo} bridge. The bridge
- *     adapts `renderer.write*` → panel log lines (ANSI-stripped) and
- *     `reader.readLine/readSecret` → the panel's modal prompt. A rejected
- *     prompt (TUI Esc) aborts the flow before anything is saved.
- *
- * Secrets never cross into the TUI: key values are masked here, and the
- * modal prompt sends the plaintext only INTO the flow (never back out).
- */
 import type { ModelsRegistry, SecretScrubber, SecretVault } from '@wrongstack/core/types';
 import type { AuthPanelHost } from '@wrongstack/tui';
 export interface AuthPanelServiceDeps {
@@ -26,6 +6,8 @@ export interface AuthPanelServiceDeps {
     /** The sole config file read or written by auth operations. */
     profileConfigPath: string;
     secretScrubber?: SecretScrubber | undefined;
+    /** Re-read the live provider snapshot after a successful auth mutation. */
+    onProvidersChanged?: (() => Promise<void>) | undefined;
 }
 /** Plain (color-free) key mask: first 4 + last 4 characters. */
 export declare function plainMaskedKey(key: string): string;

package/dist/{auto-discover-providers-MHFLDSD3.js → auto-discover-providers-VQU3IZMR.js}

@@ -1,8 +1,7 @@
 import {
   discoverAndMergeProviders
 } from "./chunk-52C7PD2H.js";
-import "./chunk-7OCVIDC7.js";
 export {
   discoverAndMergeProviders
 };
-//# sourceMappingURL=auto-discover-providers-MHFLDSD3.js.map
+//# sourceMappingURL=auto-discover-providers-VQU3IZMR.js.map