@wrongstack/cli 0.319.1 → 1.0.1

package/dist/{webui-server-F7MSRHOF.js → webui-server-5R35BHWZ.js}

@@ -1,20 +1,19 @@
 import {
   createHqCommandDispatcher
-} from "./chunk-7YLN7YUA.js";
-import {
-  WEBUI_SESSION_CHILD_CAPABILITIES
-} from "./chunk-GPPRNAKW.js";
+} from "./chunk-IMWXXF4J.js";
 import {
   createKanbanRunMirror
 } from "./chunk-VCYZ3WZV.js";
+import {
+  WEBUI_SESSION_CHILD_CAPABILITIES
+} from "./chunk-GPPRNAKW.js";
 import {
   startCliHqConnection
-} from "./chunk-XYKYXFEE.js";
+} from "./chunk-TE3Q32JP.js";
 import {
   loadConfigProviders,
   mutateConfigProviders
-} from "./chunk-XPX432BZ.js";
-import "./chunk-7OCVIDC7.js";
+} from "./chunk-DR2OXU46.js";
 
 // src/webui-server.ts
 import * as path7 from "node:path";
@@ -41,6 +40,7 @@ import {
   resolvePendingConfirmsForSession,
   scheduleOwnerlessEmptySessionCleanup,
   sendSerialized,
+  stampDispatchSession,
   startTerminalDashboard,
   startWebUILiveStatusLogger,
   toSessionHistoryEntries
@@ -48,6 +48,7 @@ import {
 import { WebSocketServer } from "ws";
 
 // src/webui-server/client-registration.ts
+import { mailboxSessionTag } from "@wrongstack/core/coordination";
 import { createWebuiClientPresence } from "@wrongstack/webui-server";
 function createWebuiClientRegistration(deps) {
   const control = deps.hqControl;
@@ -57,6 +58,9 @@ function createWebuiClientRegistration(deps) {
     events: deps.events,
     hqSessionId: deps.hqSessionId,
     getSessionId: deps.getSessionId,
+    ...deps.listSessions ? { listSessions: deps.listSessions } : {},
+    ...deps.isSessionOwnedElsewhere ? { isSessionOwnedElsewhere: deps.isSessionOwnedElsewhere } : {},
+    ...deps.getSessionWriter ? { getSessionWriter: deps.getSessionWriter } : {},
     startHqConnection: (options) => startCliHqConnection({
       ...options,
       capabilities: options.capabilities
@@ -66,7 +70,17 @@ function createWebuiClientRegistration(deps) {
         steerMailbox: mailbox,
         interruptLeader: control.interruptLeader,
         allowRunCommand: control.allowRunCommand,
-        sessionTag: deps.getSessionId,
+        // The session HQ actually SHOWS for this client — the boot
+        // session the telemetry bridge publishes under and the only one
+        // `interruptLeader` speaks for. `getSessionId` follows whichever
+        // browser tab is in front, which is a different session HQ has
+        // no view of and cannot control.
+        sessionTag: () => mailboxSessionTag(deps.hqSessionId),
+        // The session HQ falls back to when a command names none — the
+        // boot tab. A command that DOES name one is honoured (and
+        // refused when this host no longer has it) via `ownsSession`.
+        sessionId: () => deps.hqSessionId,
+        ...control.ownsSession ? { ownsSession: control.ownsSession } : {},
         ...control.spawnAgent ? { spawnAgent: control.spawnAgent } : {},
         ...control.killFleet ? { killFleet: control.killFleet } : {},
         ...control.terminateAgent ? { terminateAgent: control.terminateAgent } : {}
@@ -1175,7 +1189,7 @@ function createSessionStartPayloadBuilder(deps) {
 }
 
 // src/webui-server/setup-events.ts
-import { mailboxSessionTag } from "@wrongstack/core/coordination";
+import { mailboxSessionTag as mailboxSessionTag2 } from "@wrongstack/core/coordination";
 import {
   createEternalSubscription,
   setupEvents as setupCanonicalEvents
@@ -1246,7 +1260,7 @@ function createSetupEvents(deps) {
       type: "subagent.event",
       payload: deps.sessionPayload({
         kind: "leader_updated",
-        subagentId: `leader@${mailboxSessionTag(deps.currentSessionId())}`,
+        subagentId: `leader@${mailboxSessionTag2(deps.currentSessionId())}`,
         isLeader: true,
         name: "Leader",
         status: "running"
@@ -1391,6 +1405,23 @@ async function runWebUI(opts) {
     events: opts.events,
     hqSessionId: opts.session.id,
     getSessionId: () => opts.agent.ctx.session?.id ?? opts.session.id,
+    // One HQ session per open tab. The set is the same one the terminal
+    // panel lists: every session a connected browser is displaying.
+    listSessions: () => {
+      const ids = /* @__PURE__ */ new Set();
+      for (const client of clients.values()) {
+        if (client.sessionId) ids.add(client.sessionId);
+        for (const id of client.sessionIds ?? []) ids.add(id);
+      }
+      return [...ids];
+    },
+    // `cli-main` already runs a tracker and a bridge for the boot session.
+    // Announcing it here too would put two trackers on one bus flushing the
+    // same agent list.
+    isSessionOwnedElsewhere: (sessionId) => sessionId === opts.session.id,
+    // The tab's own journal, so HQ takes its turns from the write path
+    // instead of tailing the file.
+    getSessionWriter: (sessionId) => sessionAgentsRef?.peek(sessionId)?.ctx.session,
     hqControl: {
       // HQ speaks for the LEADER — the boot session, the one it registered
       // itself under (`hqSessionId`) — not for whatever else the browser
@@ -1399,8 +1430,12 @@ async function runWebUI(opts) {
       // the three other tabs' in-flight runs. Deleting the entries was
       // wrong on its own terms too: the run's own `end()` owns removal, and
       // clearing early makes `isRunActive` lie to every tab still running.
-      interruptLeader: () => {
-        const leaderId = opts.session.id;
+      // Every open tab is its own session with its own abort controller, so
+      // the command's session is the one that gets stopped. Falling back to
+      // the boot session keeps a dashboard that sends no session — every one
+      // before this existed — behaving exactly as before.
+      interruptLeader: (sessionId) => {
+        const leaderId = sessionId ?? opts.session.id;
         const controller = abortControllers.get(leaderId);
         if (!controller) return false;
         controller.abort();
@@ -1410,7 +1445,11 @@ async function runWebUI(opts) {
         }
         return true;
       },
-      allowRunCommand: () => opts.hqAllowExec === true
+      allowRunCommand: () => opts.hqAllowExec === true,
+      // A command naming a tab this process no longer holds is refused, not
+      // redirected onto the boot session: the operator picked a terminal,
+      // and steering a different one is worse than not steering at all.
+      ownsSession: (sessionId) => sessionId === opts.session.id || sessionAgentsRef?.has(sessionId) === true
     }
   });
   registerWebuiClient();
@@ -1890,7 +1929,7 @@ async function runWebUI(opts) {
     registerWebuiSignalHandlers(signalShutdown);
   });
   function send(ws, msg) {
-    sendSerialized(ws, JSON.stringify(msg));
+    sendSerialized(ws, JSON.stringify(stampDispatchSession(msg)));
   }
   function broadcast(msg, targetSessionId) {
     const data = JSON.stringify(msg);
@@ -1912,4 +1951,4 @@ async function runWebUI(opts) {
 export {
   runWebUI
 };
-//# sourceMappingURL=webui-server-F7MSRHOF.js.map
+//# sourceMappingURL=webui-server-5R35BHWZ.js.map

package/dist/wiring/brain-and-orchestration.d.ts

@@ -67,6 +67,8 @@ interface BrainOrchestrationDeps {
 interface BrainOrchestrationResult {
     brain: ObservableBrainArbiter;
     brainLog: AnyObj[];
+    /** Session-lifetime per-tier decision tally for `/brain stats`. */
+    brainTierStats: () => import('@wrongstack/core/coordination').BrainTierStats;
     brainSettings: BrainRuntimeSettings;
     /** Live-editable Brain config owner (apply = live + persist-to-global). */
     brainRuntime: BrainRuntime;

package/dist/wiring/cli-execute-builder.d.ts

@@ -54,6 +54,7 @@ export declare function runCliExecution(params: {
     resolvedProvider: X['provider']['resolvedProvider'];
     logger: Logger;
     switchProviderAndModel: X['provider']['switchProviderAndModel'];
+    reloadProviderConfig: () => Promise<void>;
     applyMaxContext: NonNullable<X['provider']['onModelContextResolved']>;
     renderer: X['ui']['renderer'];
     reader: X['ui']['reader'];
@@ -86,6 +87,9 @@ export declare function runCliExecution(params: {
     statuslineLines?: RC['statuslineLines'];
     setStatuslineLines?: NonNullable<RC['setStatuslineLines']>;
     saveStatuslineLines?: NonNullable<RC['saveStatuslineLines']>;
+    statuslineDensities?: RC['statuslineDensities'];
+    setStatuslineDensities?: NonNullable<RC['setStatuslineDensities']>;
+    saveStatuslineDensities?: NonNullable<RC['saveStatuslineDensities']>;
     setYoloMode: NonNullable<RC['getYolo']>;
     autonomyMode: ReturnType<RC['getAutonomy']>;
     setAutonomyMode: NonNullable<RC['setAutonomy']>;

package/dist/wiring/cli-slash-commands-setup.d.ts

@@ -62,6 +62,7 @@ export declare function setupCliSlashCommands(params: {
     brainSettings: B['brainSettings'];
     brainRuntime: B['brainRuntime'];
     initialBrainLog: ReturnType<NonNullable<B['getBrainLog']>>;
+    brainTierStats: NonNullable<B['brainTierStats']>;
     coordinatorController: B['coordinatorController'];
     statusTracker: B['statusTracker'];
     shadowController: B['shadowController'];

package/dist/wiring/command-host-state.d.ts

@@ -1,6 +1,7 @@
 /** Mutable command-host state created after the runtime fleet is available. */
 import { type BrainArbiter, type Director } from '@wrongstack/core/coordination';
 import type { EventBus } from '@wrongstack/core/kernel';
+import type { StatuslineDensities, StatuslineLines } from '@wrongstack/core/statusline';
 import { type Config, type SessionWriter } from '@wrongstack/core/types';
 import type { WstackPaths } from '@wrongstack/core/utils';
 import { SddRunRegistry } from '@wrongstack/sdd';
@@ -8,7 +9,6 @@ import type { HqCommandController } from '../hq-command-controller.js';
 import type { ReadlineInputReader } from '../input-reader.js';
 import type { MultiAgentHost } from '../multi-agent.js';
 import type { TerminalRenderer } from '../renderer.js';
-import type { StatuslineLines } from '@wrongstack/core/statusline';
 interface CommandHostStateInput {
     getConfig: () => Config;
     setConfig: (config: Config) => void;
@@ -44,10 +44,10 @@ export declare function setupCommandHostState(input: CommandHostStateInput): Pro
     interruptController: import("./controllers.js").InterruptController;
     enhanceController: import("./controllers.js").EnhanceController;
     statuslineConfigDeps: import("./controllers.js").StatuslineConfigDeps;
-    statuslineHiddenItems: ("auto_proceed" | "autonomy" | "brain" | "breaker" | "cache" | "context" | "cost" | "debug_stream" | "dropped_tools" | "elapsed" | "enhance" | "eternal_stage" | "fleet" | "fleet_agents" | "git" | "goal" | "hint" | "index" | "mailbox" | "memory_context" | "mode" | "model" | "next_steps" | "plan" | "processes" | "project" | "prompt_variant" | "queue" | "sessions" | "side_effects" | "state" | "tasks" | "theme" | "todos" | "token_saving" | "tokens" | "tools" | "version" | "working_dir" | "yolo")[];
-    getCurrentHiddenItems: () => ("auto_proceed" | "autonomy" | "brain" | "breaker" | "cache" | "context" | "cost" | "debug_stream" | "dropped_tools" | "elapsed" | "enhance" | "eternal_stage" | "fleet" | "fleet_agents" | "git" | "goal" | "hint" | "index" | "mailbox" | "memory_context" | "mode" | "model" | "next_steps" | "plan" | "processes" | "project" | "prompt_variant" | "queue" | "sessions" | "side_effects" | "state" | "tasks" | "theme" | "todos" | "token_saving" | "tokens" | "tools" | "version" | "working_dir" | "yolo")[];
-    setStatuslineHiddenItems: (items: ("auto_proceed" | "autonomy" | "brain" | "breaker" | "cache" | "context" | "cost" | "debug_stream" | "dropped_tools" | "elapsed" | "enhance" | "eternal_stage" | "fleet" | "fleet_agents" | "git" | "goal" | "hint" | "index" | "mailbox" | "memory_context" | "mode" | "model" | "next_steps" | "plan" | "processes" | "project" | "prompt_variant" | "queue" | "sessions" | "side_effects" | "state" | "tasks" | "theme" | "todos" | "token_saving" | "tokens" | "tools" | "version" | "working_dir" | "yolo")[]) => void;
-    saveStatuslineHiddenItems: (items: ("auto_proceed" | "autonomy" | "brain" | "breaker" | "cache" | "context" | "cost" | "debug_stream" | "dropped_tools" | "elapsed" | "enhance" | "eternal_stage" | "fleet" | "fleet_agents" | "git" | "goal" | "hint" | "index" | "mailbox" | "memory_context" | "mode" | "model" | "next_steps" | "plan" | "processes" | "project" | "prompt_variant" | "queue" | "sessions" | "side_effects" | "state" | "tasks" | "theme" | "todos" | "token_saving" | "tokens" | "tools" | "version" | "working_dir" | "yolo")[]) => Promise<void>;
+    statuslineHiddenItems: import("@wrongstack/core/statusline").StatuslineItem[];
+    getCurrentHiddenItems: () => import("@wrongstack/core/statusline").StatuslineItem[];
+    setStatuslineHiddenItems: (items: import("@wrongstack/core/statusline").StatuslineItem[]) => void;
+    saveStatuslineHiddenItems: (items: import("@wrongstack/core/statusline").StatuslineItem[]) => Promise<void>;
     statuslineLines: {
         auto_proceed?: import("@wrongstack/core/statusline").StatuslineLine;
         autonomy?: import("@wrongstack/core/statusline").StatuslineLine;
@@ -93,6 +93,51 @@ export declare function setupCommandHostState(input: CommandHostStateInput): Pro
     getCurrentStatuslineLines: () => Partial<Record<import("@wrongstack/core/statusline").StatuslineItem, import("@wrongstack/core/statusline").StatuslineLine>>;
     setStatuslineLines: (next: StatuslineLines) => void;
     saveStatuslineLines: (next: StatuslineLines) => Promise<void>;
+    statuslineDensities: {
+        auto_proceed?: import("@wrongstack/core/statusline").StatuslineDensity;
+        autonomy?: import("@wrongstack/core/statusline").StatuslineDensity;
+        brain?: import("@wrongstack/core/statusline").StatuslineDensity;
+        breaker?: import("@wrongstack/core/statusline").StatuslineDensity;
+        cache?: import("@wrongstack/core/statusline").StatuslineDensity;
+        context?: import("@wrongstack/core/statusline").StatuslineDensity;
+        cost?: import("@wrongstack/core/statusline").StatuslineDensity;
+        debug_stream?: import("@wrongstack/core/statusline").StatuslineDensity;
+        dropped_tools?: import("@wrongstack/core/statusline").StatuslineDensity;
+        elapsed?: import("@wrongstack/core/statusline").StatuslineDensity;
+        enhance?: import("@wrongstack/core/statusline").StatuslineDensity;
+        eternal_stage?: import("@wrongstack/core/statusline").StatuslineDensity;
+        fleet?: import("@wrongstack/core/statusline").StatuslineDensity;
+        fleet_agents?: import("@wrongstack/core/statusline").StatuslineDensity;
+        git?: import("@wrongstack/core/statusline").StatuslineDensity;
+        goal?: import("@wrongstack/core/statusline").StatuslineDensity;
+        hint?: import("@wrongstack/core/statusline").StatuslineDensity;
+        index?: import("@wrongstack/core/statusline").StatuslineDensity;
+        mailbox?: import("@wrongstack/core/statusline").StatuslineDensity;
+        memory_context?: import("@wrongstack/core/statusline").StatuslineDensity;
+        mode?: import("@wrongstack/core/statusline").StatuslineDensity;
+        model?: import("@wrongstack/core/statusline").StatuslineDensity;
+        next_steps?: import("@wrongstack/core/statusline").StatuslineDensity;
+        plan?: import("@wrongstack/core/statusline").StatuslineDensity;
+        processes?: import("@wrongstack/core/statusline").StatuslineDensity;
+        project?: import("@wrongstack/core/statusline").StatuslineDensity;
+        prompt_variant?: import("@wrongstack/core/statusline").StatuslineDensity;
+        queue?: import("@wrongstack/core/statusline").StatuslineDensity;
+        sessions?: import("@wrongstack/core/statusline").StatuslineDensity;
+        side_effects?: import("@wrongstack/core/statusline").StatuslineDensity;
+        state?: import("@wrongstack/core/statusline").StatuslineDensity;
+        tasks?: import("@wrongstack/core/statusline").StatuslineDensity;
+        theme?: import("@wrongstack/core/statusline").StatuslineDensity;
+        todos?: import("@wrongstack/core/statusline").StatuslineDensity;
+        token_saving?: import("@wrongstack/core/statusline").StatuslineDensity;
+        tokens?: import("@wrongstack/core/statusline").StatuslineDensity;
+        tools?: import("@wrongstack/core/statusline").StatuslineDensity;
+        version?: import("@wrongstack/core/statusline").StatuslineDensity;
+        working_dir?: import("@wrongstack/core/statusline").StatuslineDensity;
+        yolo?: import("@wrongstack/core/statusline").StatuslineDensity;
+    };
+    getCurrentStatuslineDensities: () => Partial<Record<import("@wrongstack/core/statusline").StatuslineItem, import("@wrongstack/core/statusline").StatuslineDensity>>;
+    setStatuslineDensities: (next: StatuslineDensities) => void;
+    saveStatuslineDensities: (next: StatuslineDensities) => Promise<void>;
     agentsMonitorController: import("./controllers.js").AgentsMonitorController;
     onPanelOpen: {
         current: ((action: string) => boolean) | null;

package/dist/wiring/external-plugins.d.ts

@@ -25,6 +25,15 @@
  * First-party/built-in plugins never enter this module.
  */
 import type { Config, Logger, Plugin } from '@wrongstack/core/types';
+/** Policy for the external-plugin trust gate. See FeaturesConfig.pluginsTrust. */
+export type ExternalPluginTrustMode = 'off' | 'required' | 'tofu' | 'advisory';
+/**
+ * Resolve the trust mode from config. `true`, `undefined`, and `'tofu'` all
+ * map to the documented default (trust on first use); `false` skips the
+ * gate; unknown strings fall back to the default rather than inventing
+ * behavior.
+ */
+export declare function resolveExternalPluginTrustMode(raw: boolean | string | undefined): ExternalPluginTrustMode;
 /** Resolve a `file:` URL / absolute / relative path to an absolute fs path. */
 export declare function normalizeConfigPath(raw: string, projectRoot: string): string;
 /**

package/dist/wiring/provider-runtime-setup.d.ts

@@ -62,6 +62,8 @@ interface ProviderRuntimeResult {
     refreshMaxContextFor: (providerId: string, modelId: string) => Promise<void>;
     refreshRuntimeModelStateFor: (providerId: string, modelId: string) => Promise<void>;
     switchProviderAndModel: (providerId: string, modelId: string) => Promise<string | null>;
+    /** Immediately apply the same merged snapshot used by the file watcher. */
+    reloadProviderConfig: () => Promise<void>;
 }
 /**
  * Wire runtime provider-config helpers, fallback model extension,

package/dist/wiring/runtime-controller-deps.d.ts

@@ -22,6 +22,9 @@ interface RuntimeControllerDepsInput {
     statuslineLines?: ControllerDeps['statuslineLines'];
     setStatuslineLines?: ControllerDeps['setStatuslineLines'];
     saveStatuslineLines?: ControllerDeps['saveStatuslineLines'];
+    statuslineDensities?: ControllerDeps['statuslineDensities'];
+    setStatuslineDensities?: ControllerDeps['setStatuslineDensities'];
+    saveStatuslineDensities?: ControllerDeps['saveStatuslineDensities'];
     getYolo: NonNullable<ControllerDeps['getYolo']>;
     onYolo: NonNullable<ControllerDeps['onYolo']>;
     getAutonomy: () => AutonomyMode;

package/dist/wiring/vector-memory-setup.d.ts

@@ -1,10 +1,22 @@
 import type { MemoryPort } from '@wrongstack/core/types';
 import { VectorMemoryStore } from '@wrongstack/vector-memory';
+/** Subset of `Config['Sage']['vector']` this phase reads. */
+export interface VectorMemoryTuning {
+    enabled?: boolean | undefined;
+    weight?: number | undefined;
+    threshold?: number | undefined;
+    vectorOnlyThreshold?: number | undefined;
+    maxMaterializations?: number | undefined;
+}
+/** Weight of the semantic channel in the RRF blend when config says nothing. */
+export declare const DEFAULT_VECTOR_WEIGHT = 0.3;
 interface VectorMemoryArgs {
     projectRoot: string;
     flags: {
         'vector-sync'?: unknown;
     };
+    /** `config.Sage?.vector`. Omitted = every default applies. */
+    tuning?: VectorMemoryTuning | undefined;
     logger: {
         warn: (message: string) => void;
         info: (message: string) => void;

package/dist/wiring/wrongtrace-prompt-contributor.d.ts

@@ -14,10 +14,13 @@
  *   - Registered in `bindSystemPromptBuilder`'s contributors array, after
  *     the ETERNAL AUTONOMY contributor (registration order is preserved).
  */
-import type { SystemPromptContributor } from '@wrongstack/core/types';
+import type { SystemPromptContributor, TokenSavingTier } from '@wrongstack/core/types';
+export interface WrongTracePromptContributorOptions {
+    tokenSavingMode?: TokenSavingTier | boolean | undefined;
+}
 /**
  * Build the contributor. Fresh instance per `bindSystemPromptBuilder` call
  * (i.e. per process); cheap since the gate singleton is process-shared.
  */
-export declare function createWrongTracePromptContributor(): SystemPromptContributor;
+export declare function createWrongTracePromptContributor(options?: WrongTracePromptContributorOptions): SystemPromptContributor;
 //# sourceMappingURL=wrongtrace-prompt-contributor.d.ts.map

package/dist/{wrongtrace-gate-counters-GSVY372D.js → wrongtrace-gate-counters-7C2EAAZL.js}

@@ -8,7 +8,6 @@ import {
   resetGateDecisions,
   snapshotGateDecisions
 } from "./chunk-D3K4NYQL.js";
-import "./chunk-7OCVIDC7.js";
 export {
   countersFilePath,
   createWrongTraceGateCounter,
@@ -19,4 +18,4 @@ export {
   resetGateDecisions,
   snapshotGateDecisions
 };
-//# sourceMappingURL=wrongtrace-gate-counters-GSVY372D.js.map
+//# sourceMappingURL=wrongtrace-gate-counters-7C2EAAZL.js.map

package/dist/{wrongtrace-telemetry-KBBM5NLQ.js → wrongtrace-telemetry-3ASFKOZO.js}

@@ -1,7 +1,6 @@
 import {
   getWrongTrace
 } from "./chunk-ERX4BLKP.js";
-import "./chunk-7OCVIDC7.js";
 
 // src/wiring/wrongtrace-telemetry.ts
 function buildWrongTraceTelemetryReport(input) {
@@ -31,4 +30,4 @@ export {
   buildWrongTraceTelemetryReport,
   reportWrongTraceSessionTelemetry
 };
-//# sourceMappingURL=wrongtrace-telemetry-KBBM5NLQ.js.map
+//# sourceMappingURL=wrongtrace-telemetry-3ASFKOZO.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/cli",
-  "version": "0.319.1",
+  "version": "1.0.1",
   "license": "MIT",
   "description": "WrongStack CLI — terminal AI coding agent with provider catalog from models.dev. Provides `wrongstack` and `wstack` binaries.",
   "keywords": [
@@ -41,36 +41,36 @@
     "data"
   ],
   "dependencies": {
-    "@wrongstack/acp": "0.319.1",
-    "@wrongstack/bench": "0.319.1",
-    "@wrongstack/core": "0.319.1",
-    "@wrongstack/primitives": "0.319.1",
-    "@wrongstack/kanban": "0.319.1",
-    "@wrongstack/mcp": "0.319.1",
-    "@wrongstack/persistence": "0.319.1",
-    "@wrongstack/plug-lsp": "0.319.1",
-    "@wrongstack/plugins": "0.319.1",
-    "@wrongstack/providers": "0.319.1",
-    "@wrongstack/requirement-intake": "0.319.1",
-    "@wrongstack/runtime": "0.319.1",
-    "@wrongstack/sage": "0.319.1",
-    "@wrongstack/sdd": "0.319.1",
-    "@wrongstack/security-scanner": "0.319.1",
-    "@wrongstack/simpleui": "0.319.1",
-    "@wrongstack/techstack": "0.319.1",
-    "@wrongstack/telegram": "0.319.1",
-    "@wrongstack/tools": "0.319.1",
-    "@wrongstack/tui": "0.319.1",
-    "@wrongstack/vector-memory": "0.319.1",
-    "@wrongstack/webui": "0.319.1",
-    "@wrongstack/webui-hq": "0.319.1",
-    "@wrongstack/webui-protocol": "0.319.1",
-    "@wrongstack/wrongtrace": "0.319.1",
-    "@wrongstack/webui-server": "0.319.1",
+    "@wrongstack/acp": "1.0.1",
+    "@wrongstack/bench": "1.0.1",
+    "@wrongstack/core": "1.0.1",
+    "@wrongstack/primitives": "1.0.1",
+    "@wrongstack/kanban": "1.0.1",
+    "@wrongstack/mcp": "1.0.1",
+    "@wrongstack/persistence": "1.0.1",
+    "@wrongstack/plug-lsp": "1.0.1",
+    "@wrongstack/plugins": "1.0.1",
+    "@wrongstack/providers": "1.0.1",
+    "@wrongstack/requirement-intake": "1.0.1",
+    "@wrongstack/runtime": "1.0.1",
+    "@wrongstack/sage": "1.0.1",
+    "@wrongstack/sdd": "1.0.1",
+    "@wrongstack/security-scanner": "1.0.1",
+    "@wrongstack/simpleui": "1.0.1",
+    "@wrongstack/techstack": "1.0.1",
+    "@wrongstack/telegram": "1.0.1",
+    "@wrongstack/tools": "1.0.1",
+    "@wrongstack/tui": "1.0.1",
+    "@wrongstack/vector-memory": "1.0.0",
+    "@wrongstack/webui": "1.0.1",
+    "@wrongstack/webui-hq": "1.0.1",
+    "@wrongstack/webui-protocol": "1.0.1",
+    "@wrongstack/wrongtrace": "1.0.1",
+    "@wrongstack/webui-server": "1.0.1",
     "ws": "^8.21.3"
   },
   "optionalDependencies": {
-    "@wrongstack/desktop": "0.319.1"
+    "@wrongstack/desktop": "1.0.1"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",

package/dist/chunk-7OCVIDC7.js

@@ -1,11 +0,0 @@
-var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
-  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
-}) : x)(function(x) {
-  if (typeof require !== "undefined") return require.apply(this, arguments);
-  throw Error('Dynamic require of "' + x + '" is not supported');
-});
-
-export {
-  __require
-};
-//# sourceMappingURL=chunk-7OCVIDC7.js.map

package/dist/chunk-KYDJJLJI.js

@@ -1,52 +0,0 @@
-
-// src/subcommands/index.ts
-var loaders = {
-  acp: async () => (await import("./acp-5ANIAOZC.js")).acpCmd,
-  init: async () => (await import("./init-4JQSG66Q.js")).initCmd,
-  auth: async () => (await import("./auth-ND7J7DTD.js")).authCmd,
-  update: async () => (await import("./update-K45CS6SS.js")).updateCmd,
-  sessions: async () => (await import("./sessions-config-KAMEBVOX.js")).sessionsCmd,
-  config: async () => (await import("./sessions-config-KAMEBVOX.js")).configCmd,
-  rewind: async () => (await import("./rewind-2FFNOOKS.js")).rewindCmd,
-  replay: async () => (await import("./replay-RZXZKP2U.js")).replayCmd,
-  audit: async () => (await import("./audit-ZPCLCC3C.js")).auditCmd,
-  tools: async () => (await import("./tools-skills-Q4P27URS.js")).toolsCmd,
-  skills: async () => (await import("./tools-skills-Q4P27URS.js")).skillsCmd,
-  providers: async () => (await import("./providers-models-OKKQZIWU.js")).providersCmd,
-  models: async () => (await import("./providers-models-OKKQZIWU.js")).modelsCmd,
-  mcp: async () => (await import("./mcp-AQKSASHD.js")).mcpCmd,
-  plugin: async () => (await import("./plugin-usage-7WCZW4NP.js")).pluginCmd,
-  plugins: async () => (await import("./plugin-usage-7WCZW4NP.js")).pluginCmd,
-  diag: async () => (await import("./diag-doctor-QZVKUAE5.js")).diagCmd,
-  doctor: async () => (await import("./diag-doctor-QZVKUAE5.js")).doctorCmd,
-  "proxy-status": async () => (await import("./diag-doctor-QZVKUAE5.js")).proxyCmd,
-  export: async () => (await import("./export-ROG3DKTZ.js")).exportCmd,
-  usage: async () => (await import("./plugin-usage-7WCZW4NP.js")).usageCmd,
-  version: async () => (await import("./version-help-WMPSEL4U.js")).versionCmd,
-  help: async () => (await import("./version-help-WMPSEL4U.js")).helpCmd,
-  projects: async () => (await import("./projects-5J727S4L.js")).projectsCmd,
-  modeldiag: async () => (await import("./modeldiag-ZL4ROTQ5.js")).modeldiagCmd,
-  quick: async () => (await import("./quick-XLYLZX4B.js")).quickCmd,
-  bench: async () => (await import("./bench-XYG56AMO.js")).benchCmd,
-  chronicle: async () => (await import("./chronicle-6EPPMUC5.js")).chronicleCmd,
-  hq: async () => (await import("./hq-4QQJO2GN.js")).hqCmd,
-  mailbox: async () => (await import("./mailbox-serve-VKQIRCCB.js")).mailboxServeCmd,
-  permissions: async () => (await import("./permissions-2PWBL4YU.js")).permissionsCmd,
-  project: async () => (await import("./project-BLQ3ALVL.js")).projectCmd,
-  governance: async () => (await import("./governance-JSGHHA2R.js")).governanceCmd
-};
-var subcommands = Object.fromEntries(
-  Object.entries(loaders).map(
-    ([name, load]) => [
-      name,
-      async (args, deps) => (await load())(args, deps)
-    ]
-  )
-);
-var subcommandNames = Object.keys(loaders);
-
-export {
-  subcommands,
-  subcommandNames
-};
-//# sourceMappingURL=chunk-KYDJJLJI.js.map

package/dist/launch-hints.d.ts

@@ -1,49 +0,0 @@
-/**
- * Launch-time feature hints. Shown once per CLI launch — after the
- * provider/model/mode/YOLO prompts have resolved and right before the
- * REPL or TUI starts — to remind users what slash commands, flags, and
- * runtime controls this build ships with. Suppress with `--no-hints` or
- * `WRONGSTACK_NO_HINTS=1`.
- *
- * Rather than dumping every category at once, each launch shows ONE
- * category and rotates to the next on the following launch (round-robin
- * via a tiny persisted cursor). So you see Autonomy one boot, agent tools
- * the next, workspace integrations after that — bite-sized, and the whole
- * set still comes around quickly. `/help` lists everything on demand.
- *
- * The list is intentionally hand-curated rather than auto-derived from
- * the slash-command registry: a one-line blurb tuned for each entry
- * lands better than `command.description` boilerplate.
- */
-import type { TerminalRenderer } from './renderer.js';
-/**
- * Total number of hints across all groups. Exported so callers can
- * assert "≥ 20" in tests without re-counting.
- */
-export declare const HINT_COUNT: number;
-/** Number of rotating categories. */
-export declare const HINT_GROUP_COUNT: number;
-/** Category titles, in rotation order. Exported for tests. */
-export declare const HINT_GROUP_TITLES: readonly string[];
-interface LaunchHintOptions {
-    /**
-     * File holding the rotation cursor. When set, each call advances it so
-     * consecutive launches show different categories (round-robin). Missing
-     * or unreadable file starts the rotation at the first category.
-     */
-    readonly cursorFile?: string | undefined;
-    /**
-     * Force a specific category index (wraps around). Overrides the cursor.
-     * Mainly for tests and `--hints`-style explicit selection.
-     */
-    readonly groupIndex?: number | undefined;
-    /** Terminal width used to wrap long hint rows. Defaults to stdout width. */
-    readonly termWidth?: number | undefined;
-}
-/**
- * Print one rotating category of launch hints to `renderer`. No-op when
- * suppressed via `--no-hints` or `WRONGSTACK_NO_HINTS=1`.
- */
-export declare function printLaunchHints(renderer: Pick<TerminalRenderer, 'write'>, flags: Record<string, string | boolean>, opts?: LaunchHintOptions): Promise<void>;
-export {};
-//# sourceMappingURL=launch-hints.d.ts.map

package/dist/short-circuit-flags-7YUCERBB.js

@@ -1,11 +0,0 @@
-import {
-  handleHelpVersionShortCircuit
-} from "./chunk-LIWVIEZM.js";
-import "./chunk-QAC263FZ.js";
-import "./chunk-XJXDOF63.js";
-import "./chunk-GGGUZSAU.js";
-import "./chunk-7OCVIDC7.js";
-export {
-  handleHelpVersionShortCircuit
-};
-//# sourceMappingURL=short-circuit-flags-7YUCERBB.js.map

package/dist/subcommands-KE6MEQQP.js

@@ -1,10 +0,0 @@
-import {
-  subcommandNames,
-  subcommands
-} from "./chunk-KYDJJLJI.js";
-import "./chunk-7OCVIDC7.js";
-export {
-  subcommandNames,
-  subcommands
-};
-//# sourceMappingURL=subcommands-KE6MEQQP.js.map

package/dist/version-help-WMPSEL4U.js

@@ -1,11 +0,0 @@
-import {
-  helpCmd,
-  versionCmd
-} from "./chunk-QAC263FZ.js";
-import "./chunk-XJXDOF63.js";
-import "./chunk-7OCVIDC7.js";
-export {
-  helpCmd,
-  versionCmd
-};
-//# sourceMappingURL=version-help-WMPSEL4U.js.map

package/dist/webui-server/privileged-actions.d.ts

@@ -1,14 +0,0 @@
-import { type TrustBoundary, type TrustRisk, type TrustSubject } from '@wrongstack/core/security';
-import { type ProcessRouteHandlers } from '@wrongstack/webui-server';
-export declare function authorizeCliWebUIAction(boundary: TrustBoundary, action: {
-    capability: string;
-    subject: TrustSubject;
-    risk: TrustRisk;
-    cwd?: string | undefined;
-    metadata?: Readonly<Record<string, string | number | boolean | null>> | undefined;
-}): Promise<{
-    allowed: boolean;
-    reason: string;
-}>;
-export declare function createCliProcessRoutes(boundary: TrustBoundary): ProcessRouteHandlers;
-//# sourceMappingURL=privileged-actions.d.ts.map