@wrongstack/cli 1.0.17 → 1.0.24

package/dist/{webui-server-MRPGTTKL.js → webui-server-L2SICPTB.js}

@@ -1,24 +1,27 @@
 import {
   createKanbanRunMirror
 } from "./chunk-VCYZ3WZV.js";
+import {
+  createKanbanSupervisor
+} from "./chunk-R4QGL6GB.js";
 import {
   WEBUI_SESSION_CHILD_CAPABILITIES
-} from "./chunk-GPPRNAKW.js";
+} from "./chunk-ZMX5HRLI.js";
 import {
   createHqCommandDispatcher,
   createProjectKanbanAssignHandler,
   createProjectKanbanTransitionHandler
-} from "./chunk-JY52HWL6.js";
+} from "./chunk-2EBVTYJR.js";
 import {
   startCliHqConnection
-} from "./chunk-CJTBLTS4.js";
-import {
-  CLI_VERSION
-} from "./chunk-XJXDOF63.js";
+} from "./chunk-BLD5DSVA.js";
 import {
   loadConfigProviders,
   mutateConfigProviders
-} from "./chunk-DR2OXU46.js";
+} from "./chunk-LUMETJFO.js";
+import {
+  CLI_VERSION
+} from "./chunk-YBUCXXYZ.js";
 
 // src/webui-server.ts
 import * as path7 from "node:path";
@@ -48,12 +51,14 @@ import {
   sendSerialized,
   stampDispatchSession,
   startTerminalDashboard,
-  startWebUILiveStatusLogger,
   toSessionHistoryEntries
 } from "@wrongstack/webui-server";
 import { verifyClient as verifyWsClient2 } from "@wrongstack/webui-server/server/ws-auth";
 import { WebSocketServer } from "ws";
 
+// src/webui-client-observability.ts
+import { startWebUILiveStatusLogger } from "@wrongstack/webui-server";
+
 // src/webui-server/client-registration.ts
 import { mailboxSessionTag } from "@wrongstack/core/coordination";
 import { createWebuiClientPresence } from "@wrongstack/webui-server";
@@ -104,6 +109,87 @@ function createWebuiClientRegistration(deps) {
   });
 }
 
+// src/webui-client-observability.ts
+function createEmbeddedClientRegistration(opts, clients, abortControllers, getSessionAgents) {
+  return createWebuiClientRegistration({
+    projectRoot: opts.projectRoot,
+    appConfig: opts.appConfig,
+    events: opts.events,
+    hqSessionId: opts.session.id,
+    getSessionId: () => opts.agent.ctx.session?.id ?? opts.session.id,
+    // One HQ session per open tab. The set is the same one the terminal
+    // panel lists: every session a connected browser is displaying.
+    listSessions: () => {
+      const ids = /* @__PURE__ */ new Set();
+      for (const client of clients.values()) {
+        if (client.sessionId) ids.add(client.sessionId);
+        for (const id of client.sessionIds ?? []) ids.add(id);
+      }
+      return [...ids];
+    },
+    // `cli-main` already runs a tracker and a bridge for the boot session.
+    // Announcing it here too would put two trackers on one bus flushing the
+    // same agent list.
+    isSessionOwnedElsewhere: (sessionId) => sessionId === opts.session.id,
+    // The tab's own journal, so HQ takes its turns from the write path
+    // instead of tailing the file.
+    getSessionWriter: (sessionId) => getSessionAgents()?.peek(sessionId)?.ctx.session,
+    hqControl: {
+      // HQ speaks for the LEADER — the boot session, the one it registered
+      // itself under (`hqSessionId`) — not for whatever else the browser
+      // has open. This used to abort every controller in the map and clear
+      // it, so a remote "interrupt" issued against the leader also killed
+      // the three other tabs' in-flight runs. Deleting the entries was
+      // wrong on its own terms too: the run's own `end()` owns removal, and
+      // clearing early makes `isRunActive` lie to every tab still running.
+      // Every open tab is its own session with its own abort controller, so
+      // the command's session is the one that gets stopped. Falling back to
+      // the boot session keeps a dashboard that sends no session — every one
+      // before this existed — behaving exactly as before.
+      interruptLeader: (sessionId) => {
+        const leaderId = sessionId ?? opts.session.id;
+        const controller = abortControllers.get(leaderId);
+        if (!controller) return false;
+        controller.abort();
+        try {
+          void Promise.resolve(opts.stopSessionFleet?.(leaderId)).catch(() => void 0);
+        } catch {
+        }
+        return true;
+      },
+      allowRunCommand: () => opts.hqAllowExec === true,
+      // A command naming a tab this process no longer holds is refused, not
+      // redirected onto the boot session: the operator picked a terminal,
+      // and steering a different one is worse than not steering at all.
+      ownsSession: (sessionId) => sessionId === opts.session.id || getSessionAgents()?.has(sessionId) === true
+    }
+  });
+}
+function startEmbeddedLiveStatusLogger(opts, clients, abortControllers, getSessionAgents, terminalLogView) {
+  return startWebUILiveStatusLogger({
+    events: opts.events,
+    dashboard: terminalLogView,
+    getSessionList: () => {
+      const ids = /* @__PURE__ */ new Set();
+      for (const client of clients.values()) {
+        if (client.sessionId) ids.add(client.sessionId);
+        for (const id of client.sessionIds ?? []) ids.add(id);
+      }
+      const currentId = opts.agent.ctx.session?.id ?? opts.session.id;
+      if (ids.size === 0 && currentId) ids.add(currentId);
+      return Array.from(ids).map((id) => {
+        const ctx = getSessionAgents()?.peek(id)?.ctx;
+        return {
+          id,
+          model: ctx?.model ?? opts.agent.ctx.model ?? "",
+          provider: ctx?.provider?.id ?? opts.agent.ctx.provider?.id ?? "",
+          isRunning: abortControllers.has(id)
+        };
+      });
+    }
+  });
+}
+
 // src/webui-server/connection-handler.ts
 import { deriveSessionAgents } from "@wrongstack/core/storage";
 import { buildReplayPayload, decodeProtocolFrame } from "@wrongstack/webui-protocol";
@@ -239,6 +325,8 @@ import { makeProviderFromConfig } from "@wrongstack/providers";
 // src/webui-server/provider-config.ts
 import * as path from "node:path";
 import { DefaultSecretVault } from "@wrongstack/core/security";
+import { ProviderConfigSnapshots } from "@wrongstack/providers";
+var snapshots = new ProviderConfigSnapshots();
 function getVault(globalConfigPath) {
   const configDir = path.dirname(globalConfigPath ?? "");
   const parentDir = path.dirname(configDir);
@@ -248,7 +336,7 @@ function getVault(globalConfigPath) {
 }
 async function loadSavedProviders(globalConfigPath) {
   if (!globalConfigPath) return {};
-  return loadConfigProviders(globalConfigPath, getVault(globalConfigPath));
+  return snapshots.track(await loadConfigProviders(globalConfigPath, getVault(globalConfigPath)));
 }
 async function saveProviders(globalConfigPath, providers) {
   if (!globalConfigPath) return;
@@ -256,14 +344,56 @@ async function saveProviders(globalConfigPath, providers) {
     globalConfigPath,
     getVault(globalConfigPath),
     (existing) => {
+      const merged = snapshots.merge(existing, providers);
       for (const key of Object.keys(existing)) delete existing[key];
-      Object.assign(existing, providers);
+      Object.assign(existing, merged);
+      for (const key of Object.keys(providers)) delete providers[key];
+      Object.assign(providers, merged);
     }
   );
+  snapshots.track(providers);
 }
 function createProviderConfigStore(globalConfigPath, configProvidersRef) {
+  if (configProvidersRef && globalConfigPath) {
+    const views = /* @__PURE__ */ new WeakMap();
+    const equal = (a, b) => JSON.stringify(a) === JSON.stringify(b);
+    return {
+      load: async () => {
+        const disk = await loadSavedProviders(globalConfigPath);
+        const providers = structuredClone(configProvidersRef());
+        views.set(providers, { view: structuredClone(providers), disk });
+        return providers;
+      },
+      save: async (providers) => {
+        const baseline = views.get(providers);
+        if (!baseline) {
+          throw new Error("Load the provider list before saving. Refresh and try again.");
+        }
+        const pending = structuredClone(baseline.disk);
+        snapshots.track(pending);
+        for (const id of /* @__PURE__ */ new Set([...Object.keys(baseline.view), ...Object.keys(providers)])) {
+          if (equal(baseline.view[id], providers[id])) continue;
+          if (!equal(baseline.view[id], baseline.disk[id])) {
+            throw new Error(
+              `Provider "${id}" comes from another config file. Edit its source config or create a new auth profile alias.`
+            );
+          }
+          if (Object.hasOwn(providers, id)) pending[id] = structuredClone(providers[id]);
+          else delete pending[id];
+        }
+        await saveProviders(globalConfigPath, pending);
+        for (const id of Object.keys(providers)) {
+          if (equal(baseline.view[id], baseline.disk[id])) delete providers[id];
+        }
+        for (const [id, record] of Object.entries(pending)) {
+          if (equal(baseline.view[id], baseline.disk[id])) providers[id] = record;
+        }
+        views.set(providers, { view: structuredClone(providers), disk: structuredClone(pending) });
+      }
+    };
+  }
   return {
-    load: () => configProvidersRef ? Promise.resolve(configProvidersRef()) : loadSavedProviders(globalConfigPath),
+    load: () => configProvidersRef ? Promise.resolve(snapshots.track(structuredClone(configProvidersRef()))) : loadSavedProviders(globalConfigPath),
     save: (providers) => saveProviders(globalConfigPath, providers)
   };
 }
@@ -410,6 +540,7 @@ import { existsSync } from "node:fs";
 import { createRequire } from "node:module";
 import * as path2 from "node:path";
 import { fileURLToPath } from "node:url";
+import { isStandaloneBinary } from "@wrongstack/core/utils";
 import { repairNodePtySpawnHelper } from "@wrongstack/webui-server";
 function createNodePtyLoader(importMetaUrl, logger) {
   const requireFromCli = createRequire(importMetaUrl);
@@ -421,6 +552,10 @@ function createNodePtyLoader(importMetaUrl, logger) {
   };
   return () => {
     if (cachedNodePty !== void 0) return cachedNodePty;
+    if (isStandaloneBinary()) {
+      cachedNodePty = null;
+      return null;
+    }
     try {
       const webuiEntry = requireFromCli.resolve("@wrongstack/webui");
       const webuiDir = webuiEntry.replace(/[\\/]dist.*$/, "");
@@ -607,10 +742,10 @@ function createCliKanbanHostRoutes(deps) {
         });
         return;
       }
-      const snapshots = await deps.kanbanSupervisor.auditNow(boardId);
+      const snapshots2 = await deps.kanbanSupervisor.auditNow(boardId);
       send(ws, {
         type: "kanban.supervisor.audit",
-        payload: { success: true, data: boardId ? snapshots[0] ?? null : snapshots }
+        payload: { success: true, data: boardId ? snapshots2[0] ?? null : snapshots2 }
       });
     },
     runStart: async (ws, msg) => {
@@ -702,11 +837,6 @@ function createCliKanbanHostRoutes(deps) {
   };
 }
 
-// src/webui-server/kanban-supervisor.ts
-import {
-  createKanbanSupervisor
-} from "@wrongstack/webui-server";
-
 // src/webui-server/lifecycle.ts
 import {
   announceWebuiReady,
@@ -1436,59 +1566,7 @@ async function runWebUI(opts) {
     // for a session id that arrived from a stale browser tab.
     getSessionContext: (sessionId) => sessionAgentsRef?.peek(sessionId)?.ctx
   });
-  const { register: registerWebuiClient, unregister: unregisterWebuiClient } = createWebuiClientRegistration({
-    projectRoot: opts.projectRoot,
-    appConfig: opts.appConfig,
-    events: opts.events,
-    hqSessionId: opts.session.id,
-    getSessionId: () => opts.agent.ctx.session?.id ?? opts.session.id,
-    // One HQ session per open tab. The set is the same one the terminal
-    // panel lists: every session a connected browser is displaying.
-    listSessions: () => {
-      const ids = /* @__PURE__ */ new Set();
-      for (const client of clients.values()) {
-        if (client.sessionId) ids.add(client.sessionId);
-        for (const id of client.sessionIds ?? []) ids.add(id);
-      }
-      return [...ids];
-    },
-    // `cli-main` already runs a tracker and a bridge for the boot session.
-    // Announcing it here too would put two trackers on one bus flushing the
-    // same agent list.
-    isSessionOwnedElsewhere: (sessionId) => sessionId === opts.session.id,
-    // The tab's own journal, so HQ takes its turns from the write path
-    // instead of tailing the file.
-    getSessionWriter: (sessionId) => sessionAgentsRef?.peek(sessionId)?.ctx.session,
-    hqControl: {
-      // HQ speaks for the LEADER — the boot session, the one it registered
-      // itself under (`hqSessionId`) — not for whatever else the browser
-      // has open. This used to abort every controller in the map and clear
-      // it, so a remote "interrupt" issued against the leader also killed
-      // the three other tabs' in-flight runs. Deleting the entries was
-      // wrong on its own terms too: the run's own `end()` owns removal, and
-      // clearing early makes `isRunActive` lie to every tab still running.
-      // Every open tab is its own session with its own abort controller, so
-      // the command's session is the one that gets stopped. Falling back to
-      // the boot session keeps a dashboard that sends no session — every one
-      // before this existed — behaving exactly as before.
-      interruptLeader: (sessionId) => {
-        const leaderId = sessionId ?? opts.session.id;
-        const controller = abortControllers.get(leaderId);
-        if (!controller) return false;
-        controller.abort();
-        try {
-          void Promise.resolve(opts.stopSessionFleet?.(leaderId)).catch(() => void 0);
-        } catch {
-        }
-        return true;
-      },
-      allowRunCommand: () => opts.hqAllowExec === true,
-      // A command naming a tab this process no longer holds is refused, not
-      // redirected onto the boot session: the operator picked a terminal,
-      // and steering a different one is worse than not steering at all.
-      ownsSession: (sessionId) => sessionId === opts.session.id || sessionAgentsRef?.has(sessionId) === true
-    }
-  });
+  const { register: registerWebuiClient, unregister: unregisterWebuiClient } = createEmbeddedClientRegistration(opts, clients, abortControllers, () => sessionAgentsRef);
   registerWebuiClient();
   const wsToken = resolveAuthToken(opts.accessToken);
   const publicHostnames = [publicUrl, publicWsUrl].map((value) => {
@@ -1728,28 +1806,13 @@ async function runWebUI(opts) {
     broadcast,
     logger: { warn: (message) => consoleLogger.warn(message) }
   }) : void 0;
-  const stopLiveStatusLogger = startWebUILiveStatusLogger({
-    events: opts.events,
-    dashboard: terminalLogView,
-    getSessionList: () => {
-      const ids = /* @__PURE__ */ new Set();
-      for (const client of clients.values()) {
-        if (client.sessionId) ids.add(client.sessionId);
-        for (const id of client.sessionIds ?? []) ids.add(id);
-      }
-      const currentId = opts.agent.ctx.session?.id ?? opts.session.id;
-      if (ids.size === 0 && currentId) ids.add(currentId);
-      return Array.from(ids).map((id) => {
-        const ctx = sessionAgentsRef?.peek(id)?.ctx;
-        return {
-          id,
-          model: ctx?.model ?? opts.agent.ctx.model ?? "",
-          provider: ctx?.provider?.id ?? opts.agent.ctx.provider?.id ?? "",
-          isRunning: abortControllers.has(id)
-        };
-      });
-    }
-  });
+  const stopLiveStatusLogger = startEmbeddedLiveStatusLogger(
+    opts,
+    clients,
+    abortControllers,
+    () => sessionAgentsRef,
+    terminalLogView
+  );
   const releaseSessionSalvage = addFatalSalvageHook(() => {
     try {
       sessionAgents.flushAllSync();
@@ -1837,6 +1900,7 @@ async function runWebUI(opts) {
   const shutdown = () => signalShutdown?.();
   let embeddedAutoHealDispose = null;
   const handleMessage = createEmbeddedMessageRouter({
+    jevVault: getVault(opts.globalConfigPath ?? opts.profileConfigPath),
     trustBoundary,
     opts,
     logger: consoleLogger,
@@ -2030,4 +2094,4 @@ async function runWebUI(opts) {
 export {
   runWebUI
 };
-//# sourceMappingURL=webui-server-MRPGTTKL.js.map
+//# sourceMappingURL=webui-server-L2SICPTB.js.map

package/dist/webui-server-options.d.ts

@@ -262,6 +262,17 @@ export interface CliWebUIOptions {
         fallbackProfile?: string | undefined;
         skills?: string[] | undefined;
         tools?: string[] | undefined;
+        signal?: AbortSignal | undefined;
+        context?: {
+            sessionId?: string;
+            kanban?: {
+                boardId?: string;
+                taskId?: string;
+                projectRoot?: string;
+                leaseId?: string;
+                managementToken?: string;
+            };
+        } | undefined;
         name?: string | undefined;
         allowedCapabilities?: readonly string[] | undefined;
         onDone?: ((result: {

package/dist/webui-server.d.ts

@@ -1,7 +1,21 @@
+/**
+ * CLI embedded WebUI server — the backend behind `wrongstack --webui`.
+ *
+ * `runWebUI(opts)` boots a WebSocket bridge (and, when the webui package
+ * is built, the static HTTP frontend) over the *same* agent/events/
+ * session instances the REPL and eternal-autonomy loop use, then routes
+ * browser messages through a `handleMessage` switch.
+ *
+ * Most self-contained concerns live under `webui-server/*`; this file now
+ * assembles CLI-owned instances, route contexts, WebSocket lifecycle, and the
+ * embedded shared router.
+ *
+ * Public surface: `runWebUI` plus WS message shapes.
+ */
 import type { WSClientMessage as EmbeddedWSClientMessage, WSServerMessage as EmbeddedWSServerMessage } from './webui-server/contracts.js';
+import type { CliWebUIOptions } from './webui-server-options.js';
 export type WSClientMessage = EmbeddedWSClientMessage;
 export type WSServerMessage = EmbeddedWSServerMessage;
-import type { CliWebUIOptions } from './webui-server-options.js';
 export type { CliWebUIOptions } from './webui-server-options.js';
 export declare function runWebUI(opts: CliWebUIOptions): Promise<void>;
 //# sourceMappingURL=webui-server.d.ts.map

package/dist/wiring/domain-glossary.d.ts

@@ -14,10 +14,11 @@
  * build, which is exactly what the glossary block was supposed to
  * avoid.
  *
- * Instead, we ask SAGE for only the `domain-term`-tagged subset using
- * the typed `SageServiceLike.searchSage({ query: 'domain-term', limit })`
- * op (which performs the tag/keyword filter at the SQL layer), then map
- * the resulting `Sage[]` into the canonical `MemoryEntry` shape that
+ * Instead, we ask SAGE for rows the `domain-term` query matches using the
+ * typed `SageServiceLike.searchSage({ query: 'domain-term', limit })` op
+ * (an FTS keyword match over text+tags+audience — NOT a tag filter), keep
+ * only rows that actually carry the `domain-term` tag, then map the
+ * resulting `Sage[]` into the canonical `MemoryEntry` shape that
  * `renderDomainGlossary` in `packages/core/src/core/system-prompt-glossary.ts`
  * is typed against.
  *

package/dist/wiring/plugins.d.ts

@@ -96,7 +96,7 @@ export interface PluginsWiringDeps {
         configDir: string;
         /**
          * Per-project root (`~/.wrongstack/projects/<slug>/`). Plugins that
-         * need project-scoped state (todo-tracker, etc.) should put their
+         * need project-scoped state (context-pins, etc.) should put their
          * files here so they follow the same lifecycle as goals/SDD
          * boards/tasks.
          */

package/dist/wiring/provider-persisters.d.ts

@@ -0,0 +1,24 @@
+import type { Config, Logger, SecretVault } from '@wrongstack/core/types';
+import type { WstackPaths } from '@wrongstack/core/utils';
+export { applyProviderOAuthRefresh } from '@wrongstack/providers';
+/**
+ * Install the process-wide provider persisters: rotated OAuth tokens and a
+ * subscription provider's live model list, both written back to the active
+ * profile config.
+ *
+ * Installed at TWO points on purpose. The interactive path installs them after
+ * the launch menu, but `boot()` dispatches subcommands before that — and one
+ * of those subcommands is `wstack acp`, the long-lived server an editor spawns
+ * (Zed, JetBrains, VS Code). Without an installed persister its refreshes
+ * rotated the token in memory only: Codex and Claude invalidate the previous
+ * refresh token on use, so the config kept a dead one and the next launch
+ * demanded a fresh sign-in. Re-installing later is harmless — the second call
+ * replaces the first with an equivalent writer.
+ */
+export declare function installProviderPersisters(args: {
+    config: Pick<Config, 'activeProfile'>;
+    paths: Pick<WstackPaths, 'profileConfig'>;
+    vault: SecretVault;
+    logger?: Pick<Logger, 'warn'> | undefined;
+}): void;
+//# sourceMappingURL=provider-persisters.d.ts.map

package/dist/wiring/provider-runtime.d.ts

@@ -41,7 +41,15 @@ interface ResolvedProviderCfg {
      */
     factoryType: string;
 }
-export declare function resolveProviderCfg(config: Pick<Config, 'providers' | 'apiKey' | 'baseUrl'>, providerId: string, opts?: {
+type ProviderConnectionConfig = Pick<Config, 'providers' | 'apiKey' | 'baseUrl'> & {
+    provider?: string;
+};
+/** Resolve account-owned connection values before any proxy rewriting. */
+export declare function resolveRawProviderConnection(config: ProviderConnectionConfig, providerId: string): {
+    apiKey: string | undefined;
+    baseUrl: string | undefined;
+};
+export declare function resolveProviderCfg(config: ProviderConnectionConfig, providerId: string, opts?: {
     /**
      * Log the rewrite decision for this provider build. Structural
      * (info only) so hosts can pass core's Logger, a child logger, or a

package/dist/wiring/runtime-dispatch-state.d.ts

@@ -2,7 +2,7 @@
 import type { Agent, Context } from '@wrongstack/core/agent';
 import type { EventBus } from '@wrongstack/core/kernel';
 import type { ToolRegistry } from '@wrongstack/core/registry';
-import type { Config, ConfigStore, MemoryPort } from '@wrongstack/core/types';
+import type { Config, ConfigStore, MemoryPort, SkillLoader } from '@wrongstack/core/types';
 import type { PluginPickerItem, ToolPickerItem } from '../execute-deps.js';
 import { setupSage } from './sage.js';
 interface RuntimeDispatchStateInput {
@@ -12,6 +12,8 @@ interface RuntimeDispatchStateInput {
     profileConfigPath: string;
     pipelines: Parameters<typeof setupSage>[0]['pipelines'];
     memoryStore: MemoryPort;
+    /** Roster the skill suggester ranks. Undefined when skills are disabled. */
+    skillLoader: SkillLoader | undefined;
     logger: Parameters<typeof setupSage>[0]['logger'];
     events: EventBus;
     agent: Agent;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/cli",
-  "version": "1.0.17",
+  "version": "1.0.24",
   "license": "MIT",
   "description": "WrongStack CLI — terminal AI coding agent with provider catalog from models.dev. Provides `wrongstack` and `wstack` binaries.",
   "keywords": [
@@ -41,36 +41,36 @@
     "data"
   ],
   "dependencies": {
-    "@wrongstack/acp": "1.0.17",
-    "@wrongstack/bench": "1.0.17",
-    "@wrongstack/core": "1.0.17",
-    "@wrongstack/kanban": "1.0.17",
-    "@wrongstack/mcp": "1.0.17",
-    "@wrongstack/persistence": "1.0.17",
-    "@wrongstack/plug-lsp": "1.0.17",
-    "@wrongstack/plugins": "1.0.17",
-    "@wrongstack/primitives": "1.0.17",
-    "@wrongstack/providers": "1.0.17",
-    "@wrongstack/requirement-intake": "1.0.17",
-    "@wrongstack/runtime": "1.0.17",
-    "@wrongstack/sage": "1.0.17",
-    "@wrongstack/sdd": "1.0.17",
-    "@wrongstack/security-scanner": "1.0.17",
-    "@wrongstack/simpleui": "1.0.17",
-    "@wrongstack/techstack": "1.0.17",
-    "@wrongstack/telegram": "1.0.17",
-    "@wrongstack/tools": "1.0.17",
-    "@wrongstack/tui": "1.0.17",
-    "@wrongstack/vector-memory": "1.0.17",
-    "@wrongstack/webui": "1.0.17",
-    "@wrongstack/webui-hq": "1.0.17",
-    "@wrongstack/webui-protocol": "1.0.17",
-    "@wrongstack/webui-server": "1.0.17",
-    "@wrongstack/wrongtrace": "1.0.17",
+    "@wrongstack/acp": "1.0.24",
+    "@wrongstack/bench": "1.0.24",
+    "@wrongstack/core": "1.0.24",
+    "@wrongstack/kanban": "1.0.24",
+    "@wrongstack/mcp": "1.0.24",
+    "@wrongstack/persistence": "1.0.24",
+    "@wrongstack/plug-lsp": "1.0.24",
+    "@wrongstack/plugins": "1.0.24",
+    "@wrongstack/primitives": "1.0.24",
+    "@wrongstack/providers": "1.0.24",
+    "@wrongstack/requirement-intake": "1.0.24",
+    "@wrongstack/runtime": "1.0.24",
+    "@wrongstack/sage": "1.0.24",
+    "@wrongstack/sdd": "1.0.24",
+    "@wrongstack/security-scanner": "1.0.24",
+    "@wrongstack/simpleui": "1.0.24",
+    "@wrongstack/techstack": "1.0.24",
+    "@wrongstack/telegram": "1.0.24",
+    "@wrongstack/tools": "1.0.24",
+    "@wrongstack/tui": "1.0.24",
+    "@wrongstack/vector-memory": "1.0.24",
+    "@wrongstack/webui": "1.0.24",
+    "@wrongstack/webui-hq": "1.0.24",
+    "@wrongstack/webui-protocol": "1.0.24",
+    "@wrongstack/webui-server": "1.0.24",
+    "@wrongstack/wrongtrace": "1.0.24",
     "ws": "^8.21.3"
   },
   "optionalDependencies": {
-    "@wrongstack/desktop": "1.0.17"
+    "@wrongstack/desktop": "1.0.24"
   },
   "devDependencies": {
     "@types/node": "^26.5.1",