@wrongstack/cli 1.0.26 → 1.0.27

package/dist/{import-claude-code-32PCSIQI.js → import-claude-code-AYG24RG2.js}

@@ -17,6 +17,25 @@ import { mcpEnvPlaceholders } from "@wrongstack/mcp";
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
+var REPOSITORY_STRIPPED_MCP_FIELDS = [
+  "permission",
+  "bearerTokenEnv",
+  "passthroughEnv",
+  "allowPrivateNetworks"
+];
+function envReads(config) {
+  const reads = new Set(mcpEnvPlaceholders(config));
+  if (config.bearerTokenEnv) reads.add(config.bearerTokenEnv);
+  for (const name of config.passthroughEnv ?? []) reads.add(name);
+  return [...reads];
+}
+function describeTarget(config) {
+  if (typeof config.command === "string") {
+    return `runs: ${[config.command, ...config.args ?? []].join(" ")}`;
+  }
+  if (typeof config.url === "string") return `connects to: ${config.url}`;
+  return void 0;
+}
 function samePath(a, b) {
   const norm = (p) => {
     const resolved = path.resolve(p).replace(/[\\/]+$/, "");
@@ -58,10 +77,22 @@ function planClaudeCodeImport(opts) {
       const exists2 = Object.hasOwn(opts.existingServers, name);
       const repository = source === "repository";
       const enabled = !repository || opts.enableProjectServers;
-      const reads = mcpEnvPlaceholders(config);
+      const stripped = [];
+      if (repository) {
+        for (const field of REPOSITORY_STRIPPED_MCP_FIELDS) {
+          if (config[field] === void 0) continue;
+          delete config[field];
+          stripped.push(field);
+        }
+        config.origin = "repository";
+      }
+      const reads = envReads(config);
+      const target = describeTarget(config);
       const notes2 = [
+        target,
         repository && !enabled ? "from the repository \u2014 imported disabled; review, then `/mcp enable`" : void 0,
-        reads.length > 0 ? `reads environment: ${reads.join(", ")}` : void 0
+        reads.length > 0 ? `reads environment: ${reads.join(", ")}` : void 0,
+        stripped.length > 0 ? `not imported from the repository: ${stripped.join(", ")} (set them yourself after review)` : void 0
       ].filter((note) => note !== void 0);
       mcp.push({
         name,
@@ -77,8 +108,8 @@ function planClaudeCodeImport(opts) {
     projectEntry(sources.userState, opts.projectRoot)?.["mcpServers"],
     "claude-project-local"
   );
-  collect(sources.projectMcp?.["mcpServers"] ?? sources.projectMcp, "repository");
   collect(sources.userState?.["mcpServers"], "claude-user");
+  collect(sources.projectMcp?.["mcpServers"] ?? sources.projectMcp, "repository");
   const notes = [];
   if (sources.skillDirs.length > 0) {
     notes.push(
@@ -229,8 +260,9 @@ Wrote ${writes.length} server(s) to ${configPath}.`);
   return 0;
 };
 export {
+  REPOSITORY_STRIPPED_MCP_FIELDS,
   importClaudeCodeCmd,
   planClaudeCodeImport,
   readClaudeCodeSources
 };
-//# sourceMappingURL=import-claude-code-32PCSIQI.js.map
+//# sourceMappingURL=import-claude-code-AYG24RG2.js.map

package/dist/index.js

@@ -20,14 +20,14 @@ async function main(argv) {
     applyAsciiMode(earlyFlags);
   }
   if (earlyFlags["help"] === true || earlyFlags["version"] === true) {
-    const { handleHelpVersionShortCircuit } = await import("./short-circuit-flags-74Y5N6CF.js");
+    const { handleHelpVersionShortCircuit } = await import("./short-circuit-flags-5TNTJPQR.js");
     const earlyExit = await handleHelpVersionShortCircuit(argv);
     if (earlyExit !== null) return earlyExit;
   }
-  const { initializeCli } = await import("./cli-context-UVGAN3NO.js");
+  const { initializeCli } = await import("./cli-context-C7RBSWHF.js");
   const cliCtx = await initializeCli(argv);
   if (typeof cliCtx === "number") return cliCtx;
-  const { runInteractive } = await import("./cli-main-TN3KZ2P6.js");
+  const { runInteractive } = await import("./cli-main-TQTH73ZK.js");
   return runInteractive(cliCtx);
 }
 

package/dist/live-settings-input.d.ts

@@ -19,6 +19,7 @@ export interface LiveSettingsInput {
     featureMemory?: boolean | undefined;
     featureSkills?: boolean | undefined;
     featureModelsRegistry?: boolean | undefined;
+    featureToolCoach?: boolean | undefined;
     featureTokenSaving?: TokenSavingTier | undefined;
     allowOutsideProjectRoot?: boolean | undefined;
     contextAutoCompact?: boolean | undefined;

package/dist/{mailbox-serve-NW5VZG7R.js → mailbox-serve-GNGXEQ2R.js}

@@ -1,6 +1,6 @@
 import {
   startCliHqConnection
-} from "./chunk-KJS5543T.js";
+} from "./chunk-RGFWGUAB.js";
 import "./chunk-F5DCFAKI.js";
 
 // src/subcommands/handlers/mailbox-serve.ts
@@ -361,4 +361,4 @@ function printHelp(deps) {
 export {
   mailboxServeCmd
 };
-//# sourceMappingURL=mailbox-serve-NW5VZG7R.js.map
+//# sourceMappingURL=mailbox-serve-GNGXEQ2R.js.map

package/dist/{modeldiag-36VODVIH.js → modeldiag-W7XAE625.js}

@@ -20,7 +20,7 @@ import {
 } from "./chunk-BBHWW6LR.js";
 import {
   resolveRawProviderConnection
-} from "./chunk-S4FFHDJG.js";
+} from "./chunk-SDJCLEK6.js";
 import {
   mutateConfigProviders
 } from "./chunk-LUMETJFO.js";
@@ -825,4 +825,4 @@ var modeldiagCmd = async (args, deps) => {
 export {
   modeldiagCmd
 };
-//# sourceMappingURL=modeldiag-36VODVIH.js.map
+//# sourceMappingURL=modeldiag-W7XAE625.js.map

package/dist/{remote-O5WXHLWV.js → remote-GB5VXCCT.js}

@@ -28,6 +28,13 @@ import { buildChildEnv, toErrorMessage } from "@wrongstack/core/utils";
 
 // src/remote/remote-target.ts
 function parseRemoteTarget(input) {
+  const target = parseRemoteTargetText(input);
+  if (target.destination.startsWith("-")) {
+    throw new Error(`A remote host cannot start with "-" (got ${target.destination})`);
+  }
+  return target;
+}
+function parseRemoteTargetText(input) {
   const text = input.trim();
   if (text.startsWith("ssh://")) {
     let url;
@@ -73,22 +80,30 @@ function buildTargetFor(os, arch, musl) {
   throw new Error(`Remote machines running ${os} are not supported (Linux and macOS are).`);
 }
 var REMOTE_BIN_DIR = '"$HOME"/.wrongstack/remote';
+function stateScript(path3) {
+  return `dir=${shPath(path3)}
+abs=$(cd "$dir" 2>/dev/null && pwd -P) || abs=
+key=$(printf '%s' "$abs" | cksum | tr ' ' '-')
+state_dir=${REMOTE_BIN_DIR}/servers
+state="$state_dir/$key.json"
+token_file="$state_dir/$key.token"
+log="$state_dir/$key.log"`;
+}
 function probeScript(path3) {
   return `set -u
 printf 'os=%s\\n' "$(uname -s 2>/dev/null)"
 printf 'arch=%s\\n' "$(uname -m 2>/dev/null)"
 if ls /lib/ld-musl-* >/dev/null 2>&1; then echo musl=1; else echo musl=0; fi
-dir=${shPath(path3)}
+${stateScript(path3)}
 if [ -d "$dir" ]; then echo path=1; else echo path=0; fi
 for f in ${REMOTE_BIN_DIR}/wstack-*; do
   [ -x "$f" ] && printf 'version=%s\\n' "\${f##*/wstack-}"
 done
-state="$dir/.wrongstack/remote-webui.json"
-if [ -f "$state" ] && [ -f "$dir/.wrongstack/remote-webui.token" ]; then
+if [ -n "$abs" ] && [ -f "$state" ] && [ -f "$token_file" ]; then
   pid=$(sed -n 's/.*"pid":\\([0-9]*\\).*/\\1/p' "$state")
   if [ -n "$pid" ] && kill -0 "$pid" 2>/dev/null; then
     printf 'server=%s\\n' "$(tr -d '\\n' < "$state")"
-    printf 'token=%s\\n' "$(cat "$dir/.wrongstack/remote-webui.token")"
+    printf 'token=%s\\n' "$(cat "$token_file")"
   fi
 fi
 `;
@@ -141,12 +156,12 @@ var NO_PROVIDER = ["No provider or model configured", "Saved provider/model is n
 function startScript(options) {
   const bin = remoteBinaryPath(options.version);
   return `set -u
-dir=${shPath(options.path)}
-cd "$dir" || { echo error=path; exit 3; }
 umask 077
-mkdir -p .wrongstack
-printf '%s' ${shQuote(options.token)} > .wrongstack/remote-webui.token
-log=.wrongstack/remote-webui.log
+${stateScript(options.path)}
+cd "$dir" || { echo error=path; exit 3; }
+mkdir -p "$state_dir"
+chmod 700 "$state_dir"
+printf '%s' ${shQuote(options.token)} > "$token_file"
 export WEBUI_TOKEN=${shQuote(options.token)}
 launch() {
   : > "$log"
@@ -171,21 +186,21 @@ await_port() {
 }
 launch
 await_port
-state=$?
-if [ "$state" -eq 1 ] && grep -q ${NO_PROVIDER.map((line) => `-e ${shQuote(line)}`).join(" ")} "$log"; then
+status=$?
+if [ "$status" -eq 1 ] && grep -q ${NO_PROVIDER.map((line) => `-e ${shQuote(line)}`).join(" ")} "$log"; then
   echo setup=1
   launch --provider wrongstack-setup --model no-api-key
   await_port
-  state=$?
+  status=$?
 fi
-if [ "$state" -eq 0 ]; then
-  printf '{"pid":%s,"port":%s,"version":"%s"}\\n' "$pid" "$port" ${shQuote(options.version)} > .wrongstack/remote-webui.json
+if [ "$status" -eq 0 ]; then
+  printf '{"pid":%s,"port":%s,"version":"%s"}\\n' "$pid" "$port" ${shQuote(options.version)} > "$state"
   echo "port=$port"
   echo "pid=$pid"
   exit 0
 fi
-rm -f .wrongstack/remote-webui.token
-if [ "$state" -eq 1 ]; then
+rm -f "$token_file"
+if [ "$status" -eq 1 ]; then
   echo error=exited
   tail -n 30 "$log" | sed 's/^/log=/'
   exit 4
@@ -197,12 +212,11 @@ exit 5
 }
 function stopScript(path3) {
   return `set -u
-dir=${shPath(path3)}
-state="$dir/.wrongstack/remote-webui.json"
-[ -f "$state" ] || exit 0
+${stateScript(path3)}
+[ -n "$abs" ] && [ -f "$state" ] || exit 0
 pid=$(sed -n 's/.*"pid":\\([0-9]*\\).*/\\1/p' "$state")
 [ -n "$pid" ] && kill "$pid" 2>/dev/null
-rm -f "$state" "$dir/.wrongstack/remote-webui.token"
+rm -f "$state" "$token_file"
 echo stopped=1
 `;
 }
@@ -333,7 +347,7 @@ async function runRemoteSession(opts) {
           await exited(tunnel);
           opts.signal.removeEventListener("abort", stopTunnel);
           throw new Error(
-            `The WebUI on ${opts.target.destination} did not answer through the SSH tunnel. Check that its sshd allows port forwarding (AllowTcpForwarding) and see ${opts.target.path}/.wrongstack/remote-webui.log there.`
+            `The WebUI on ${opts.target.destination} did not answer through the SSH tunnel. Check that its sshd allows port forwarding (AllowTcpForwarding) and see the host log under ~/.wrongstack/remote/servers/ there.`
           );
         }
       }
@@ -406,7 +420,7 @@ function sshCommandLine(target, options) {
 function systemSsh(target, options) {
   const base = sshCommandLine(target, options);
   const run = (remoteCommand, input) => new Promise((resolve2) => {
-    const child = spawn("ssh", [...base, target.destination, remoteCommand], {
+    const child = spawn("ssh", [...base, "--", target.destination, remoteCommand], {
       stdio: ["pipe", "pipe", "inherit"],
       env: { ...buildChildEnv(), ...sshAgentEnv() },
       windowsHide: true
@@ -431,6 +445,7 @@ function systemSsh(target, options) {
       "ExitOnForwardFailure=yes",
       "-L",
       `127.0.0.1:${localPort}:127.0.0.1:${remotePort}`,
+      "--",
       target.destination
     ],
     {
@@ -558,4 +573,4 @@ export {
   remoteCmd,
   runRemoteCommand
 };
-//# sourceMappingURL=remote-O5WXHLWV.js.map
+//# sourceMappingURL=remote-GB5VXCCT.js.map

package/dist/{sessions-config-SXTTLNXA.js → sessions-config-XHLXJ5C3.js}

@@ -33,6 +33,40 @@ function redactKeys(obj) {
 import * as fsp from "node:fs/promises";
 import * as path from "node:path";
 import { color } from "@wrongstack/core/utils";
+var STORE_SIDECAR_JSONL_NAMES = /* @__PURE__ */ new Set(["_index.jsonl", "_mailbox.jsonl"]);
+var SESSION_SIDECAR_JSONL_SUFFIXES = [".replay.jsonl", ".audit.jsonl", ".annotations.jsonl"];
+function isSubagentTranscriptFile(name) {
+  const lower = name.toLowerCase();
+  if (!lower.endsWith(".jsonl")) return false;
+  if (STORE_SIDECAR_JSONL_NAMES.has(lower)) return false;
+  return !SESSION_SIDECAR_JSONL_SUFFIXES.some((suffix) => lower.endsWith(suffix));
+}
+async function collectSubagentTranscripts(subagentsDir) {
+  let entries;
+  try {
+    entries = await fsp.readdir(subagentsDir, { withFileTypes: true });
+  } catch {
+    return [];
+  }
+  const out = [];
+  for (const entry of entries) {
+    if (entry.isFile()) {
+      if (isSubagentTranscriptFile(entry.name)) out.push(entry.name);
+      continue;
+    }
+    if (!entry.isDirectory() || entry.name === "transcripts" || entry.name === "shared") continue;
+    let nested;
+    try {
+      nested = await fsp.readdir(path.join(subagentsDir, entry.name));
+    } catch {
+      continue;
+    }
+    for (const name of nested) {
+      if (isSubagentTranscriptFile(name)) out.push(`${entry.name}/${name}`);
+    }
+  }
+  return out;
+}
 var sessionsFleetCmd = async (args, deps) => {
   const runId = args.find((a) => !a.startsWith("-"));
   if (runId) {
@@ -40,10 +74,46 @@ var sessionsFleetCmd = async (args, deps) => {
   }
   return listFleetRuns(deps);
 };
+async function hasFleetRunArtifacts(dir) {
+  const markers = await Promise.all(
+    ["fleet.json", "checkpoint.json", "subagents"].map(
+      (name) => fsp.access(path.join(dir, name)).then(
+        () => true,
+        () => false
+      )
+    )
+  );
+  return markers.some((found) => found);
+}
+async function discoverFleetRunIds(projectSessions) {
+  const entries = await fsp.readdir(projectSessions, { withFileTypes: true });
+  const ids = [];
+  for (const entry of entries) {
+    if (!entry.isDirectory()) continue;
+    const dir = path.join(projectSessions, entry.name);
+    if (await hasFleetRunArtifacts(dir)) {
+      ids.push(entry.name);
+      continue;
+    }
+    let children;
+    try {
+      children = await fsp.readdir(dir, { withFileTypes: true });
+    } catch {
+      continue;
+    }
+    for (const child of children) {
+      if (!child.isDirectory()) continue;
+      if (await hasFleetRunArtifacts(path.join(dir, child.name))) {
+        ids.push(`${entry.name}/${child.name}`);
+      }
+    }
+  }
+  return ids;
+}
 async function listFleetRuns(deps) {
   let entries = [];
   try {
-    entries = await fsp.readdir(deps.paths.projectSessions);
+    entries = await discoverFleetRunIds(deps.paths.projectSessions);
   } catch {
     deps.renderer.writeError(`Cannot read projectSessions: ${deps.paths.projectSessions}
 `);
@@ -69,8 +139,8 @@ async function listFleetRuns(deps) {
             () => true,
             () => false
           ),
-          fsp.readdir(path.join(runDir, "subagents")).then(
-            (files) => files.filter((f) => f.endsWith(".jsonl")).length,
+          collectSubagentTranscripts(path.join(runDir, "subagents")).then(
+            (files) => files.length,
             () => 0
           )
         ]);
@@ -189,8 +259,7 @@ Fleet Run: ${runId}
   const subagentsDir = path.join(runDir, "subagents");
   let subagentFiles = [];
   try {
-    subagentFiles = await fsp.readdir(subagentsDir);
-    subagentFiles = subagentFiles.filter((f) => f.endsWith(".jsonl"));
+    subagentFiles = await collectSubagentTranscripts(subagentsDir);
   } catch {
   }
   if (subagentFiles.length > 0) {
@@ -456,4 +525,4 @@ export {
   configCmd,
   sessionsCmd
 };
-//# sourceMappingURL=sessions-config-SXTTLNXA.js.map
+//# sourceMappingURL=sessions-config-XHLXJ5C3.js.map

package/dist/{short-circuit-flags-74Y5N6CF.js → short-circuit-flags-5TNTJPQR.js}

@@ -1,10 +1,10 @@
 import {
   handleHelpVersionShortCircuit
-} from "./chunk-WQV2NP57.js";
+} from "./chunk-HFZH2XJN.js";
 import "./chunk-5JYDKG5B.js";
 import "./chunk-F5DCFAKI.js";
 import "./chunk-Q4INH2DG.js";
 export {
   handleHelpVersionShortCircuit
 };
-//# sourceMappingURL=short-circuit-flags-74Y5N6CF.js.map
+//# sourceMappingURL=short-circuit-flags-5TNTJPQR.js.map

package/dist/slash-commands/theme.d.ts

@@ -1,5 +1,18 @@
-import type { InputReader, SlashCommand } from '@wrongstack/core/types';
+import type { InputReader, SlashCommand, ThemePresetId } from '@wrongstack/core/types';
 import type { SlashCommandContext } from './command-context.js';
+interface ThemeOption {
+    id: ThemePresetId;
+    name: string;
+    desc: string;
+}
+/**
+ * The CLI's picker rows, exported for the TUI↔CLI agreement test
+ * (`packages/cli/tests/theme-metadata-agreement.test.ts`). The TUI derives its
+ * own rows from the same `THEME_PRESET_META` record, so this export is the
+ * second side of that comparison — it must stay in step with `THEME_OPTIONS`
+ * above.
+ */
+export declare const cliThemePickerOptions: readonly ThemeOption[];
 /**
  * Windowed slice of the theme list for the raw-terminal picker — mirrors the
  * math in the TUI's `useWindowedPicker` (same centering + marker rules) so
@@ -35,4 +48,5 @@ export declare function truncateDesc(desc: string, columns: number, active: bool
 export declare function buildThemeCommand(opts: SlashCommandContext & {
     inputReader?: InputReader | undefined;
 }): SlashCommand;
+export {};
 //# sourceMappingURL=theme.d.ts.map

package/dist/subcommands/handlers/import-claude-code.d.ts

@@ -28,6 +28,16 @@ export interface ClaudeCodeSources {
     /** Skill directories that exist. */
     skillDirs: string[];
 }
+/**
+ * Fields a repository entry may not carry into the user's profile. Each one
+ * widens what the server gets on enable beyond "run this command / reach this
+ * URL": `permission` pre-approves every tool it exposes, `bearerTokenEnv` and
+ * `passthroughEnv` send the named environment variables to it, and
+ * `allowPrivateNetworks` lifts the internal-network guard. The repository
+ * chooses the command and URL, so it must not also choose those
+ * (WS-2026-09-26-05). The user can still set them after reviewing.
+ */
+export declare const REPOSITORY_STRIPPED_MCP_FIELDS: readonly ['permission', 'bearerTokenEnv', 'passthroughEnv', 'allowPrivateNetworks'];
 /** Decide what an import would do. Pure: no reads, no writes. */
 export declare function planClaudeCodeImport(opts: {
     sources: ClaudeCodeSources;

package/dist/subcommands/handlers/sessions-fleet.d.ts

@@ -1,15 +1,3 @@
 import type { SubcommandHandler } from '../contracts.js';
-/**
- * `wrongstack sessions fleet [runId]`
- *
- * Lists fleet run artifacts under `projectSessions/<runId>/`.
- * When runId is omitted, lists all fleet runs discovered under projectSessions.
- *
- * Artifacts shown:
- *   - fleet.json         (manifest)
- *   - checkpoint.json    (state snapshot, if present)
- *   - shared/            (scratchpad directory)
- *   - subagents/         (per-subagent JSONL transcripts)
- */
 export declare const sessionsFleetCmd: SubcommandHandler;
 //# sourceMappingURL=sessions-fleet.d.ts.map

package/dist/{subcommands-Q6ORSB2E.js → subcommands-BHQYLDSD.js}

@@ -1,9 +1,9 @@
 import {
   subcommandNames,
   subcommands
-} from "./chunk-BEHGRNOQ.js";
+} from "./chunk-N57IU5FG.js";
 export {
   subcommandNames,
   subcommands
 };
-//# sourceMappingURL=subcommands-Q6ORSB2E.js.map
+//# sourceMappingURL=subcommands-BHQYLDSD.js.map

package/dist/{webui-server-YTHLRFD2.js → webui-server-GCXIO3JY.js}

@@ -11,10 +11,10 @@ import {
   createHqCommandDispatcher,
   createProjectKanbanAssignHandler,
   createProjectKanbanTransitionHandler
-} from "./chunk-2EBVTYJR.js";
+} from "./chunk-NRXWOMK7.js";
 import {
   startCliHqConnection
-} from "./chunk-KJS5543T.js";
+} from "./chunk-RGFWGUAB.js";
 import {
   CLI_VERSION
 } from "./chunk-F5DCFAKI.js";
@@ -427,7 +427,10 @@ function createWebuiClientRegistration(deps) {
     ...deps.getSessionWriter ? { getSessionWriter: deps.getSessionWriter } : {},
     startHqConnection: (options) => startCliHqConnection({
       ...options,
-      capabilities: options.capabilities
+      capabilities: options.capabilities,
+      // Embedded in the CLI host, whose own HQ connection already syncs
+      // this project's Kanban boards; a second sync is a second writer.
+      ownKanbanSync: false
     }),
     ...control ? {
       createCommandHandler: (mailbox, approvals) => createHqCommandDispatcher({
@@ -437,6 +440,9 @@ function createWebuiClientRegistration(deps) {
         // Same registry the approval bridge publishes from, so every
         // prompt HQ shows is one this handler can actually answer.
         resolveApproval: (toolUseId, decision, sessionId) => approvals.resolve(toolUseId, decision, sessionId),
+        // Same registry again: it publishes `user_input.requested`, so
+        // it has to be the one that answers `answer-input`.
+        resolveUserInput: (requestId, response, sessionId) => approvals.resolveUserInput?.(requestId, response, sessionId) ?? false,
         ...deps.projectRoot ? {
           kanbanTransition: createProjectKanbanTransitionHandler(deps.projectRoot),
           kanbanAssign: createProjectKanbanAssignHandler(deps.projectRoot)
@@ -462,6 +468,20 @@ function createWebuiClientRegistration(deps) {
 
 // src/webui-client-observability.ts
 function createEmbeddedClientRegistration(opts, clients, abortControllers, getSessionAgents) {
+  const interruptSession = (sessionId) => {
+    const leaderId = sessionId ?? opts.session.id;
+    const controller = abortControllers.get(leaderId);
+    if (!controller) return false;
+    controller.abort();
+    try {
+      void Promise.resolve(opts.stopSessionFleet?.(leaderId)).catch(() => void 0);
+    } catch {
+    }
+    return true;
+  };
+  if (opts.interruptController) {
+    opts.interruptController.abortLeader = () => interruptSession(opts.agent.ctx.session?.id ?? opts.session.id);
+  }
   return createWebuiClientRegistration({
     projectRoot: opts.projectRoot,
     appConfig: opts.appConfig,
@@ -478,36 +498,23 @@ function createEmbeddedClientRegistration(opts, clients, abortControllers, getSe
       }
       return [...ids];
     },
-    // `cli-main` already runs a tracker and a bridge for the boot session.
-    // Announcing it here too would put two trackers on one bus flushing the
-    // same agent list.
-    isSessionOwnedElsewhere: (sessionId) => sessionId === opts.session.id,
+    // `cli-main` already runs a tracker and a bridge for the root
+    // conversation; announcing it here too would put two trackers on one bus
+    // flushing the same agent list. Compared against the LIVE root writer:
+    // the CLI host's telemetry follows `ctx.session`, so once the root moves
+    // (session.new / resume) the old boot id is an ordinary tab this client
+    // must publish, and the new root id must not be published twice.
+    isSessionOwnedElsewhere: (sessionId) => sessionId === (opts.agent.ctx.session?.id ?? opts.session.id),
     // The tab's own journal, so HQ takes its turns from the write path
     // instead of tailing the file.
     getSessionWriter: (sessionId) => getSessionAgents()?.peek(sessionId)?.ctx.session,
     hqControl: {
-      // HQ speaks for the LEADER — the boot session, the one it registered
-      // itself under (`hqSessionId`) — not for whatever else the browser
-      // has open. This used to abort every controller in the map and clear
-      // it, so a remote "interrupt" issued against the leader also killed
-      // the three other tabs' in-flight runs. Deleting the entries was
-      // wrong on its own terms too: the run's own `end()` owns removal, and
-      // clearing early makes `isRunActive` lie to every tab still running.
-      // Every open tab is its own session with its own abort controller, so
-      // the command's session is the one that gets stopped. Falling back to
-      // the boot session keeps a dashboard that sends no session — every one
-      // before this existed — behaving exactly as before.
-      interruptLeader: (sessionId) => {
-        const leaderId = sessionId ?? opts.session.id;
-        const controller = abortControllers.get(leaderId);
-        if (!controller) return false;
-        controller.abort();
-        try {
-          void Promise.resolve(opts.stopSessionFleet?.(leaderId)).catch(() => void 0);
-        } catch {
-        }
-        return true;
-      },
+      interruptLeader: interruptSession,
+      ...opts.hqFleetControl ? {
+        killFleet: opts.hqFleetControl.killFleet,
+        terminateAgent: opts.hqFleetControl.terminateAgent,
+        spawnAgent: opts.hqFleetControl.spawnAgent
+      } : {},
       allowRunCommand: () => opts.hqAllowExec === true,
       // A command naming a tab this process no longer holds is refused, not
       // redirected onto the boot session: the operator picked a terminal,
@@ -2237,4 +2244,4 @@ async function runWebUI(opts) {
 export {
   runWebUI
 };
-//# sourceMappingURL=webui-server-YTHLRFD2.js.map
+//# sourceMappingURL=webui-server-GCXIO3JY.js.map

package/dist/webui-server-options.d.ts

@@ -69,6 +69,16 @@ export interface CliWebUIOptions {
      * stopping one must never reach into another's fleet.
      */
     stopSessionFleet?: ((sessionId: string) => void | Promise<void>) | undefined;
+    /**
+     * The host's interrupt seam. HQ addresses the root conversation through the
+     * CLI host's own publisher, whose "abort leader" calls `abortLeader()`; the
+     * embedded server binds it to that conversation's run controller.
+     */
+    interruptController?: {
+        abortLeader: () => boolean;
+    } | undefined;
+    /** HQ fleet commands for a tab's session (abort fleet / agent, spawn). */
+    hqFleetControl?: import('./hq-fleet-control.js').HqFleetControl | undefined;
     /**
      * A tab was closed: release the host-side helpers pinned to its
      * conversation (explore companion, shadow-review bookkeeping).

package/dist/wiring/command-host-state.d.ts

@@ -15,6 +15,8 @@ interface CommandHostStateInput {
     setConfig: (config: Config) => void;
     getDirector: () => Director | null;
     hqCommandController: HqCommandController;
+    /** Several conversations share the Director (WebUI host): see `HqFleetScope`. */
+    hqMultiConversation?: boolean | undefined;
     multiAgentHost: MultiAgentHost;
     events: EventBus;
     sessionRef: {

package/dist/wiring/hq-telemetry.d.ts

@@ -36,6 +36,18 @@ interface SetupHqTelemetryDeps {
      */
     approvalMirror?: ApprovalMirrorRef | undefined;
     mcpRegistry: Pick<MCPRegistry, 'onOperation' | 'operationalHealth'>;
+    /**
+     * The LIVE conversation writer. An in-process `/resume` and an in-place
+     * project switch replace `ctx.session`; `session` above is only the boot
+     * writer. Defaults to it for hosts that never swap.
+     */
+    liveSession?: (() => SessionWriter) | undefined;
+    /** The LIVE project root (an in-place project switch re-roots the process). */
+    liveProjectRoot?: (() => string) | undefined;
+    /** How often the live session/project is compared to what HQ is bound to. */
+    scopeCheckIntervalMs?: number | undefined;
+    /** The LIVE app config, so `/hq` changes re-point the running connection. */
+    getConfig?: (() => Config) | undefined;
 }
 interface HqTelemetryResult {
     hqCommandController: HqCommandController;