@wrongstack/cli 1.0.1 → 1.0.4

package/dist/wiring/cli-slash-commands-setup.d.ts

@@ -53,6 +53,12 @@ export declare function setupCliSlashCommands(params: {
     agentMonitor: B['agentMonitor'];
     onPanelOpen: B['onPanelOpen'];
     configStore: B['configStore'];
+    /**
+     * Forwards the store's new merged config back to the host after an in-process
+     * selection change (`/profile switch`). Optional: hosts without a live merged
+     * config leave it unset and the selection still applies on their next boot.
+     */
+    onActiveProfileChange?: B['onActiveProfileChange'];
     secretInputController: {
         readSecret: NonNullable<B['readSecret']>;
         readText: NonNullable<B['readText']>;
@@ -79,6 +85,7 @@ export declare function setupCliSlashCommands(params: {
     };
     mcpRegistry: SE['mcpRegistry'];
     setYoloMode: SE['onYolo'];
+    setYoloConfirm: SE['onYoloConfirm'];
     getNextPredict: SE['getNextPredict'];
     setNextPredict: SE['setNextPredict'];
     getCurrentSuggestions: SE['getCurrentSuggestions'];

package/dist/wiring/codebase-embeddings.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Host-side wiring for the codebase index's semantic embeddings.
+ *
+ * The model is `packages/vector-memory`'s transformers-backed provider, which
+ * already emits 384-dimensional vectors — the width `file_vectors` stores. It
+ * arrives here rather than inside `packages/tools` for two reasons:
+ *
+ *  - `@huggingface/transformers` is an **opt-in** backend. A repository
+ *    that never enables semantic search should not have to install a model
+ *    runtime, and `packages/tools` must stay importable without one.
+ *  - A function cannot cross the project daemon's IPC boundary. The daemon
+ *    compares vectors; the host produces them. That also keeps a ~90 MB model
+ *    out of every per-project daemon process.
+ *
+ * Everything here is best-effort. When the optional dependency is absent, the
+ * model cannot load, or the config leaves embeddings off, the port is simply
+ * `undefined` and retrieval stays lexical — which is the behaviour that
+ * shipped before embeddings existed.
+ */
+import type { IndexingEmbeddingsConfig } from '@wrongstack/core/types';
+import type { EmbeddingPort } from '@wrongstack/tools';
+/**
+ * Build the embedding port, or `undefined` when semantic search is off or
+ * unavailable.
+ *
+ * The dynamic import is what keeps `@huggingface/transformers` opt-in: a
+ * missing package throws here and is reported as "unavailable", never as a
+ * startup failure.
+ */
+export declare function createCodebaseEmbeddingPort(settings: IndexingEmbeddingsConfig | undefined): Promise<EmbeddingPort | undefined>;
+//# sourceMappingURL=codebase-embeddings.d.ts.map

package/dist/wiring/command-host-state.d.ts

@@ -1,6 +1,7 @@
 /** Mutable command-host state created after the runtime fleet is available. */
 import { type BrainArbiter, type Director } from '@wrongstack/core/coordination';
 import type { EventBus } from '@wrongstack/core/kernel';
+import { type DestructiveKind } from '@wrongstack/core/security';
 import type { StatuslineDensities, StatuslineLines } from '@wrongstack/core/statusline';
 import { type Config, type SessionWriter } from '@wrongstack/core/types';
 import type { WstackPaths } from '@wrongstack/core/utils';
@@ -28,6 +29,8 @@ interface CommandHostStateInput {
     permissionPolicy: {
         setYolo?(enabled: boolean): void;
         getYolo?(): boolean;
+        setYoloConfirmKinds?(kinds: Iterable<DestructiveKind>): void;
+        getYoloConfirmKinds?(): ReadonlySet<DestructiveKind>;
     };
     /**
      * The live conversation's meta bag.
@@ -77,6 +80,7 @@ export declare function setupCommandHostState(input: CommandHostStateInput): Pro
         project?: import("@wrongstack/core/statusline").StatuslineLine;
         prompt_variant?: import("@wrongstack/core/statusline").StatuslineLine;
         queue?: import("@wrongstack/core/statusline").StatuslineLine;
+        quota?: import("@wrongstack/core/statusline").StatuslineLine;
         sessions?: import("@wrongstack/core/statusline").StatuslineLine;
         side_effects?: import("@wrongstack/core/statusline").StatuslineLine;
         state?: import("@wrongstack/core/statusline").StatuslineLine;
@@ -122,6 +126,7 @@ export declare function setupCommandHostState(input: CommandHostStateInput): Pro
         project?: import("@wrongstack/core/statusline").StatuslineDensity;
         prompt_variant?: import("@wrongstack/core/statusline").StatuslineDensity;
         queue?: import("@wrongstack/core/statusline").StatuslineDensity;
+        quota?: import("@wrongstack/core/statusline").StatuslineDensity;
         sessions?: import("@wrongstack/core/statusline").StatuslineDensity;
         side_effects?: import("@wrongstack/core/statusline").StatuslineDensity;
         state?: import("@wrongstack/core/statusline").StatuslineDensity;
@@ -177,6 +182,10 @@ export declare function setupCommandHostState(input: CommandHostStateInput): Pro
         } | null>) | undefined;
     };
     setYoloMode: (enabled?: boolean) => boolean;
+    setYoloConfirm: (update?: {
+        kind: DestructiveKind;
+        confirm: boolean;
+    }) => Record<DestructiveKind, boolean>;
     secretInputController: {
         readSecret: (prompt: string) => Promise<string>;
         readText: (prompt: string) => Promise<string>;

package/dist/wiring/concept-summarizer.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Host-side implementation of the codebase index's {@link SummarizerPort}.
+ *
+ * `packages/tools` defines what a summariser must answer; producing that answer
+ * needs a configured provider and the model-tier policy, both of which live
+ * here. The port is therefore injected rather than imported, the same way SAGE
+ * takes `getLlmCall` — a host that supplies nothing simply gets no concept
+ * layer, and the index carries on working without one.
+ *
+ * ## Cost shape
+ *
+ * One call per file, and only for files whose bytes changed since the last
+ * pass. Enrichment is the one part of the index that spends money, so the model
+ * is resolved through the tier layer at its cheapest configured level unless
+ * the caller pins one, and both the token ceiling and the timeout are small.
+ */
+import { OneShotOrchestrator } from '@wrongstack/core/execution';
+import type { Config } from '@wrongstack/core/types';
+import type { SummarizerPort } from '@wrongstack/tools';
+type OrchestratorOptions = ConstructorParameters<typeof OneShotOrchestrator>[0];
+export interface ConceptSummarizerDeps {
+    buildProvider: OrchestratorOptions['buildProvider'];
+    getConfig: () => Config;
+    fallbackProfileManager: OrchestratorOptions['fallbackProfileManager'];
+    statusTracker?: OrchestratorOptions['statusTracker'];
+    wrapProviderCall?: OrchestratorOptions['wrapProviderCall'];
+    /** Explicit model override; otherwise the configured budget tier decides. */
+    model?: string | undefined;
+}
+export declare function createConceptSummarizer(deps: ConceptSummarizerDeps): SummarizerPort;
+export {};
+//# sourceMappingURL=concept-summarizer.d.ts.map

package/dist/wiring/external-plugins.d.ts

@@ -64,5 +64,6 @@ interface LoadExternalPluginsContext {
     importModule?: ((url: string) => Promise<unknown>) | undefined;
 }
 export declare function loadExternalPlugins(ctx: LoadExternalPluginsContext, hooks: ExternalPluginHooks): Promise<Plugin[]>;
+export declare function hashPluginClosure(entryPath: string): Promise<string>;
 export {};
 //# sourceMappingURL=external-plugins.d.ts.map

package/dist/wiring/lifecycle-plugins.d.ts

@@ -1,7 +1,7 @@
 import { type RemoteMailbox } from '@wrongstack/core/coordination';
 import { HookRegistry, HookRunner } from '@wrongstack/core/hooks';
 import type { PluginHostHandle } from '@wrongstack/core/plugin';
-import { type ProviderRegistry, SlashCommandRegistry, type ToolRegistry } from '@wrongstack/core/registry';
+import { type ProviderAuthRegistry, type ProviderRegistry, SlashCommandRegistry, type ToolRegistry } from '@wrongstack/core/registry';
 import type { Config, HealthRegistry, Logger, MetricsRuntimeStatus, ModelsRegistry, PromptLoader, Provider, ProviderConfig, SecretVault, SessionWriter, SkillLoader } from '@wrongstack/core/types';
 import type { WstackPaths } from '@wrongstack/core/utils';
 import { MCPRegistry } from '@wrongstack/mcp';
@@ -27,6 +27,7 @@ interface LifecyclePluginsDeps {
     wpaths: WstackPaths;
     toolRegistry: ToolRegistry;
     providerRegistry: ProviderRegistry;
+    providerAuthRegistry: ProviderAuthRegistry;
     configStore: any;
     eventWiring: EventWiring;
     healthRegistry: HealthRegistry | undefined;

package/dist/wiring/pipeline.d.ts

@@ -82,6 +82,8 @@ export declare function createAgent(params: {
             /** Opt-in Kanban governance gate; see ToolsConfig.kanbanGovernance. */
             kanbanGovernance?: boolean | undefined;
             loopDetection?: import('@wrongstack/core/types').LoopDetectionConfig | undefined;
+            autoExtendLimit?: boolean | undefined;
+            maxAutoExtensions?: number | undefined;
         };
     };
     confirmAwaiter: import('@wrongstack/core/agent').AgentInit['confirmAwaiter'];

package/dist/wiring/plugins.d.ts

@@ -2,7 +2,7 @@ import type { AgentPipelines } from '@wrongstack/core/agent';
 import type { ExtensionRegistry } from '@wrongstack/core/extension';
 import type { Container, EventBus } from '@wrongstack/core/kernel';
 import type { PluginAPIInit, PluginHostHandle } from '@wrongstack/core/plugin';
-import type { ProviderRegistry, SlashCommandRegistry, ToolRegistry } from '@wrongstack/core/registry';
+import type { ProviderAuthRegistry, ProviderRegistry, SlashCommandRegistry, ToolRegistry } from '@wrongstack/core/registry';
 import type { Config, ConfigStore, HealthRegistry, Logger, MetricsRuntimeStatus, MetricsSinkView, ModelsRegistry, Plugin, PromptLoader, SessionWriter, SkillLoader } from '@wrongstack/core/types';
 import type { MCPRegistry } from '@wrongstack/mcp';
 export declare const DEPRECATED_PLUGIN_NAMES: Record<string, string>;
@@ -34,6 +34,7 @@ export interface PluginsWiringDeps {
     pipelines: AgentPipelines;
     toolRegistry: ToolRegistry;
     providerRegistry: ProviderRegistry;
+    providerAuthRegistry?: ProviderAuthRegistry | undefined;
     slashCommandRegistry: SlashCommandRegistry;
     mcpRegistry: MCPRegistry;
     log: Logger;

package/dist/wiring/provider-runtime-setup.d.ts

@@ -3,7 +3,7 @@ import type { ProviderModelStatusTracker } from '@wrongstack/core/coordination';
 import type { EventBus } from '@wrongstack/core/kernel';
 import type { ProviderRegistry } from '@wrongstack/core/registry';
 import type { Config, Logger, ModelsRegistry, Provider, ProviderConfig, SecretVault } from '@wrongstack/core/types';
-import type { WstackPaths } from '@wrongstack/core/utils';
+import { type WstackPaths } from '@wrongstack/core/utils';
 export declare function serializeProviderRuntimeSnapshot(snapshot: unknown): string;
 type AnyObj = any;
 export interface ProviderRuntimeDeps {

package/dist/wiring/provider.d.ts

@@ -1,10 +1,11 @@
-import { ProviderRegistry } from '@wrongstack/core/registry';
+import { ProviderAuthRegistry, ProviderRegistry } from '@wrongstack/core/registry';
 import type { ResolvedProvider } from '@wrongstack/core/types';
 import { type Config, type Logger, type ModelsRegistry } from '@wrongstack/core/types';
 interface ProviderSetupResult {
     resolvedProvider: ResolvedProvider | undefined;
     provider: ReturnType<ProviderRegistry['create']>;
     providerRegistry: ProviderRegistry;
+    providerAuthRegistry: ProviderAuthRegistry;
 }
 export declare function setupProvider(params: {
     config: Config;

package/dist/wiring/session-command-handlers.d.ts

@@ -7,7 +7,7 @@ import type { MultiAgentHost } from '../multi-agent.js';
 import type { SessionStats } from '../session-stats.js';
 import type { BuiltinSlashCommandDeps } from './slash-commands.js';
 type SlashCommandDeps = BuiltinSlashCommandDeps;
-type SessionCommandHandlers = Pick<SlashCommandDeps, 'onPlugin' | 'onContextLimit' | 'onMcp' | 'mcpRegistry' | 'mcpStatus' | 'onYolo' | 'onNextPredict' | 'onSuggestions' | 'onExit' | 'onBeforeExit' | 'onClear' | 'onNewSession' | 'onDiag' | 'onStats' | 'generateCommitMessage' | 'onDispatchClassify'>;
+type SessionCommandHandlers = Pick<SlashCommandDeps, 'onPlugin' | 'onContextLimit' | 'onMcp' | 'mcpRegistry' | 'mcpStatus' | 'onYolo' | 'onYoloConfirm' | 'onNextPredict' | 'onSuggestions' | 'onExit' | 'onBeforeExit' | 'onClear' | 'onNewSession' | 'onDiag' | 'onStats' | 'generateCommitMessage' | 'onDispatchClassify'>;
 interface ErrorRecord {
     ts: string;
     phase: string;
@@ -30,6 +30,7 @@ interface SessionCommandHandlersInput {
     setEventMaxContext: (tokens: number) => void;
     mcpRegistry: MCPRegistry;
     onYolo: NonNullable<SlashCommandDeps['onYolo']>;
+    onYoloConfirm: SlashCommandDeps['onYoloConfirm'];
     getNextPredict: () => boolean;
     setNextPredict: (enabled: boolean) => void;
     getCurrentSuggestions: () => string[];

package/dist/wiring/slash-commands.d.ts

@@ -65,6 +65,7 @@ interface SlashCommandsDeps {
         }): Promise<CompactReport>;
     };
     configStore: ConfigStore;
+    onActiveProfileChange?: BuiltinSlashCommandDeps['onActiveProfileChange'];
     /** Called by /clear after wiping the session on disk — tells the TUI to reset its UI state. */
     onNewSession?: (() => Promise<void>) | undefined;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/cli",
-  "version": "1.0.1",
+  "version": "1.0.4",
   "license": "MIT",
   "description": "WrongStack CLI — terminal AI coding agent with provider catalog from models.dev. Provides `wrongstack` and `wstack` binaries.",
   "keywords": [
@@ -41,36 +41,36 @@
     "data"
   ],
   "dependencies": {
-    "@wrongstack/acp": "1.0.1",
-    "@wrongstack/bench": "1.0.1",
-    "@wrongstack/core": "1.0.1",
-    "@wrongstack/primitives": "1.0.1",
-    "@wrongstack/kanban": "1.0.1",
-    "@wrongstack/mcp": "1.0.1",
-    "@wrongstack/persistence": "1.0.1",
-    "@wrongstack/plug-lsp": "1.0.1",
-    "@wrongstack/plugins": "1.0.1",
-    "@wrongstack/providers": "1.0.1",
-    "@wrongstack/requirement-intake": "1.0.1",
-    "@wrongstack/runtime": "1.0.1",
-    "@wrongstack/sage": "1.0.1",
-    "@wrongstack/sdd": "1.0.1",
-    "@wrongstack/security-scanner": "1.0.1",
-    "@wrongstack/simpleui": "1.0.1",
-    "@wrongstack/techstack": "1.0.1",
-    "@wrongstack/telegram": "1.0.1",
-    "@wrongstack/tools": "1.0.1",
-    "@wrongstack/tui": "1.0.1",
-    "@wrongstack/vector-memory": "1.0.0",
-    "@wrongstack/webui": "1.0.1",
-    "@wrongstack/webui-hq": "1.0.1",
-    "@wrongstack/webui-protocol": "1.0.1",
-    "@wrongstack/wrongtrace": "1.0.1",
-    "@wrongstack/webui-server": "1.0.1",
+    "@wrongstack/acp": "1.0.4",
+    "@wrongstack/bench": "1.0.4",
+    "@wrongstack/core": "1.0.4",
+    "@wrongstack/primitives": "1.0.4",
+    "@wrongstack/kanban": "1.0.4",
+    "@wrongstack/mcp": "1.0.4",
+    "@wrongstack/persistence": "1.0.4",
+    "@wrongstack/plug-lsp": "1.0.4",
+    "@wrongstack/plugins": "1.0.4",
+    "@wrongstack/providers": "1.0.4",
+    "@wrongstack/requirement-intake": "1.0.4",
+    "@wrongstack/runtime": "1.0.4",
+    "@wrongstack/sage": "1.0.4",
+    "@wrongstack/sdd": "1.0.4",
+    "@wrongstack/security-scanner": "1.0.4",
+    "@wrongstack/simpleui": "1.0.4",
+    "@wrongstack/techstack": "1.0.4",
+    "@wrongstack/telegram": "1.0.4",
+    "@wrongstack/tools": "1.0.4",
+    "@wrongstack/tui": "1.0.4",
+    "@wrongstack/vector-memory": "1.0.4",
+    "@wrongstack/webui": "1.0.4",
+    "@wrongstack/webui-hq": "1.0.4",
+    "@wrongstack/webui-protocol": "1.0.4",
+    "@wrongstack/wrongtrace": "1.0.4",
+    "@wrongstack/webui-server": "1.0.4",
     "ws": "^8.21.3"
   },
   "optionalDependencies": {
-    "@wrongstack/desktop": "1.0.1"
+    "@wrongstack/desktop": "1.0.4"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",
@@ -83,7 +83,7 @@
   },
   "scripts": {
     "build": "node ../../scripts/build-package.mjs",
-    "typecheck": "pnpm --filter @wrongstack/tools run build && pnpm --filter @wrongstack/tui run build && tsc --noEmit && tsc --noEmit -p tsconfig.test.json",
+    "typecheck": "pnpm --filter @wrongstack/tools run build && pnpm --filter @wrongstack/tui run build && pnpm --filter @wrongstack/webui-server run build && tsc --noEmit && tsc --noEmit -p tsconfig.test.json",
     "test": "vitest run",
     "test:hqdash": "vitest run --config vitest.hqdash.config.ts",
     "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\""

package/dist/auto-discover-providers-VQU3IZMR.js

@@ -1,7 +0,0 @@
-import {
-  discoverAndMergeProviders
-} from "./chunk-52C7PD2H.js";
-export {
-  discoverAndMergeProviders
-};
-//# sourceMappingURL=auto-discover-providers-VQU3IZMR.js.map

package/dist/chunk-52C7PD2H.js

@@ -1,61 +0,0 @@
-
-// src/boot/auto-discover-providers.ts
-import * as fs from "node:fs/promises";
-import * as path from "node:path";
-import { discoverOpenAICompatibleModels, resolveDiscoveryTargets } from "@wrongstack/providers";
-async function readCache(file) {
-  try {
-    return JSON.parse(await fs.readFile(file, "utf8"));
-  } catch {
-    return {};
-  }
-}
-async function discoverAndMergeProviders(opts) {
-  const targets = resolveDiscoveryTargets(opts.config);
-  if (targets.length === 0) return;
-  const cacheFile = path.join(opts.cacheDir, "discovered-models-cache.json");
-  const cache = await readCache(cacheFile);
-  let cacheDirty = false;
-  await Promise.all(
-    targets.map(async ({ id, cfg, baseUrl, apiKey, cacheKey }) => {
-      const provider = await discoverOpenAICompatibleModels(id, {
-        baseUrl,
-        apiKey,
-        headers: cfg.headers,
-        providerName: id,
-        fetchImpl: opts.fetchImpl
-      });
-      if (provider) {
-        cache[cacheKey] = { fetchedAt: (/* @__PURE__ */ new Date()).toISOString(), provider };
-        cacheDirty = true;
-        opts.registry.mergeOverlay({ [id]: provider });
-        opts.logger?.info(
-          `auto-discovered ${Object.keys(provider.models).length} models for "${id}" from ${baseUrl}`
-        );
-        return;
-      }
-      const cached = cache[cacheKey];
-      if (cached) {
-        opts.registry.mergeOverlay({ [id]: cached.provider });
-        opts.logger?.warn(
-          `auto-discovery for "${id}" failed; using ${Object.keys(cached.provider.models).length} cached models from ${cached.fetchedAt}`
-        );
-      } else {
-        opts.logger?.warn(
-          `auto-discovery for "${id}" failed and no cache available (server at ${baseUrl} unreachable?)`
-        );
-      }
-    })
-  );
-  if (cacheDirty) {
-    try {
-      await fs.writeFile(cacheFile, JSON.stringify(cache), "utf8");
-    } catch {
-    }
-  }
-}
-
-export {
-  discoverAndMergeProviders
-};
-//# sourceMappingURL=chunk-52C7PD2H.js.map

package/dist/chunk-Q5GTM25S.js

@@ -1,17 +0,0 @@
-
-// src/hq-server/audit-actor.ts
-import * as os from "node:os";
-function resolveAuditActor() {
-  const user = (process.env.USERNAME ?? process.env.USER ?? "").toString();
-  try {
-    const host = os.hostname();
-    return user ? `${user}@${host}` : `cli@${host}`;
-  } catch {
-    return user ? `${user}@unknown` : "cli";
-  }
-}
-
-export {
-  resolveAuditActor
-};
-//# sourceMappingURL=chunk-Q5GTM25S.js.map