@wrongstack/cli 1.0.3 → 1.0.4

package/dist/{diag-doctor-7LYUYU35.js → diag-doctor-PCER6KHH.js}

@@ -1,6 +1,6 @@
 import {
   startProxyProbe
-} from "./chunk-JHPXJRRI.js";
+} from "./chunk-4XCBEUBX.js";
 import {
   formatGateCounterReport,
   loadWrongTraceGateCounters
@@ -382,4 +382,4 @@ export {
   doctorCmd,
   proxyCmd
 };
-//# sourceMappingURL=diag-doctor-7LYUYU35.js.map
+//# sourceMappingURL=diag-doctor-PCER6KHH.js.map

package/dist/{execution-KH7WJNAX.js → execution-RAZDDQFC.js}

@@ -11,17 +11,6 @@ import {
   resolveActualTarget,
   resolvePersistPath
 } from "./chunk-JACOMTIH.js";
-import {
-  theme
-} from "./chunk-QD544J2B.js";
-import {
-  WEBUI_SESSION_CHILD_CAPABILITIES,
-  writeWebuiSessionChildError,
-  writeWebuiSessionChildReady
-} from "./chunk-GPPRNAKW.js";
-import {
-  fmtTok
-} from "./chunk-EWKESL4L.js";
 import "./chunk-WHOIR577.js";
 import {
   advanceToNextTask,
@@ -36,6 +25,17 @@ import {
   trySaveSpecFromAIOutput,
   trySaveTasksFromAIOutput
 } from "./chunk-JHUJUIOH.js";
+import {
+  theme
+} from "./chunk-QD544J2B.js";
+import {
+  fmtTok
+} from "./chunk-EWKESL4L.js";
+import {
+  WEBUI_SESSION_CHILD_CAPABILITIES,
+  writeWebuiSessionChildError,
+  writeWebuiSessionChildReady
+} from "./chunk-GPPRNAKW.js";
 import {
   terminalLink,
   terminalText
@@ -212,7 +212,7 @@ async function runWebUIDispatch(ctx) {
   const isSimpleUi = !isSessionChild && flags["simpleui"] === true;
   agent.disableInteractiveConfirmation();
   renderer.setSilent(true);
-  const { runWebUI } = await import("./webui-server-QWBUT7BO.js");
+  const { runWebUI } = await import("./webui-server-OBV5JYJV.js");
   const flagValue = (names) => {
     for (const name of names) {
       if (!Object.hasOwn(flags, name)) continue;
@@ -416,7 +416,7 @@ async function runWebUIDispatch(ctx) {
       applyLiveSettings?.({ yolo: enabled });
     },
     onWrongProxyPrefsChange: (payload) => {
-      void import("./proxy-wiring-MGRSKZZB.js").then(
+      void import("./proxy-wiring-K2DORFFL.js").then(
         ({ applyWrongProxyPrefs }) => applyWrongProxyPrefs(payload)
       );
     }
@@ -1937,6 +1937,7 @@ function createSettingsAdapter(ctx) {
       breakerEnabled: cfg.circuitBreaker?.enabled === true,
       breakerAutoKillResetMs: cfg.circuitBreaker?.autoKillResetMs ?? 6e4,
       showModelReasoning: autonomy?.showModelReasoning ?? false,
+      toolResultViewMode: autonomy?.toolResultViewMode === "minimal" || autonomy?.toolResultViewMode === "full" ? autonomy.toolResultViewMode : "normal",
       showAgentSwarmPanel: coerceAgentSwarmMode(autonomy?.showAgentSwarmPanel),
       showSidebar: autonomy?.showSidebar ?? true,
       // Migrate the legacy `autonomy.showAgentSwarmPanel: 'sidebar'` into
@@ -1963,7 +1964,7 @@ function createSettingsAdapter(ctx) {
   }
   async function saveSettings(s) {
     try {
-      if (s.mode !== void 0 || s.delayMs !== void 0 || s.titleAnimation !== void 0 || s.yolo !== void 0 || s.fleetChatVerbosity !== void 0 || s.chime !== void 0 || s.confirmExit !== void 0 || s.mouseMode !== void 0 || s.featureMcp !== void 0 || s.featurePlugins !== void 0 || s.featureMemory !== void 0 || s.featureSkills !== void 0 || s.featureModelsRegistry !== void 0 || s.featureTokenSaving !== void 0 || s.allowOutsideProjectRoot !== void 0 || s.contextAutoCompact !== void 0 || s.contextStrategy !== void 0 || s.contextMode !== void 0 || s.maxConcurrent !== void 0 || s.logLevel !== void 0 || s.auditLevel !== void 0 || s.indexOnStart !== void 0 || s.maxIterations !== void 0 || s.multiDiffSummaryThreshold !== void 0 || s.nextStepsTool !== void 0 || s.restrictFsToRoot !== void 0 || s.nextPrediction !== void 0 || s.debugStream !== void 0 || s.shellBangWarningDontShowAgain !== void 0 || s.configScope !== void 0 || s.enhanceDelayMs !== void 0 || s.enhanceEnabled !== void 0 || s.preRefineSeconds !== void 0 || s.enhanceLanguage !== void 0 || s.midRunSendPicker !== void 0 || s.statuslineMode !== void 0 || s.thinkingWord !== void 0 || s.animationStyle !== void 0 || s.autonomyNextPrompt !== void 0 || s.autoProceedMaxIterations !== void 0 || s.reasoningMode !== void 0 || s.reasoningEffort !== void 0 || s.reasoningPreserve !== void 0 || s.cacheTtl !== void 0 || s.breakerEnabled !== void 0 || s.breakerAutoKillResetMs !== void 0 || s.showModelReasoning !== void 0 || s.showAgentSwarmPanel !== void 0 || s.showSidebar !== void 0 || s.panelPositions !== void 0 || s.showSageMemoryInject !== void 0 || s.sageMemoryInjectThreshold !== void 0 || s.readSymbols !== void 0 || // WrongProxy / WrongTrace: gate the persisted-section write on
+      if (s.mode !== void 0 || s.delayMs !== void 0 || s.titleAnimation !== void 0 || s.yolo !== void 0 || s.fleetChatVerbosity !== void 0 || s.chime !== void 0 || s.confirmExit !== void 0 || s.mouseMode !== void 0 || s.featureMcp !== void 0 || s.featurePlugins !== void 0 || s.featureMemory !== void 0 || s.featureSkills !== void 0 || s.featureModelsRegistry !== void 0 || s.featureTokenSaving !== void 0 || s.allowOutsideProjectRoot !== void 0 || s.contextAutoCompact !== void 0 || s.contextStrategy !== void 0 || s.contextMode !== void 0 || s.maxConcurrent !== void 0 || s.logLevel !== void 0 || s.auditLevel !== void 0 || s.indexOnStart !== void 0 || s.maxIterations !== void 0 || s.multiDiffSummaryThreshold !== void 0 || s.nextStepsTool !== void 0 || s.restrictFsToRoot !== void 0 || s.nextPrediction !== void 0 || s.debugStream !== void 0 || s.shellBangWarningDontShowAgain !== void 0 || s.configScope !== void 0 || s.enhanceDelayMs !== void 0 || s.enhanceEnabled !== void 0 || s.preRefineSeconds !== void 0 || s.enhanceLanguage !== void 0 || s.midRunSendPicker !== void 0 || s.statuslineMode !== void 0 || s.thinkingWord !== void 0 || s.animationStyle !== void 0 || s.autonomyNextPrompt !== void 0 || s.autoProceedMaxIterations !== void 0 || s.reasoningMode !== void 0 || s.reasoningEffort !== void 0 || s.reasoningPreserve !== void 0 || s.cacheTtl !== void 0 || s.breakerEnabled !== void 0 || s.breakerAutoKillResetMs !== void 0 || s.showModelReasoning !== void 0 || s.toolResultViewMode !== void 0 || s.showAgentSwarmPanel !== void 0 || s.showSidebar !== void 0 || s.panelPositions !== void 0 || s.showSageMemoryInject !== void 0 || s.sageMemoryInjectThreshold !== void 0 || s.readSymbols !== void 0 || // WrongProxy / WrongTrace: gate the persisted-section write on
       // either key being present in the live patch. Without this, a
       // picker toggle round-trip would silently no-op the persistence
       // layer (the runtime probe would never read the change).
@@ -2018,6 +2019,7 @@ function createSettingsAdapter(ctx) {
           autonomy.thinkingWord = normalizeTuiThinkingWord(s.thinkingWord);
         if (s.animationStyle !== void 0) autonomy.animationStyle = s.animationStyle;
         if (s.showModelReasoning !== void 0) autonomy.showModelReasoning = s.showModelReasoning;
+        if (s.toolResultViewMode !== void 0) autonomy.toolResultViewMode = s.toolResultViewMode;
         if (s.showAgentSwarmPanel !== void 0)
           autonomy.showAgentSwarmPanel = s.showAgentSwarmPanel;
         if (s.showSidebar !== void 0) autonomy.showSidebar = s.showSidebar;
@@ -4369,6 +4371,87 @@ async function persistChimeraReview(payload, projectDir) {
   }
 }
 
+// src/execution-specialist-trigger.ts
+import { randomUUID as randomUUID4 } from "node:crypto";
+var SPECIALIST_MAX_ITERATIONS = 30;
+var SPECIALIST_MAX_TOOL_CALLS = 120;
+var SPECIALIST_TIMEOUT_MS = 6 * 60 * 1e3;
+function installSpecialistTriggerHandler({
+  events,
+  director,
+  session,
+  teardownHandlers,
+  trackWork
+}) {
+  const off = events.onPattern(
+    "fleet.specialist_needed",
+    (_event, payload) => {
+      const request = payload;
+      const dir = director;
+      if (!dir) return;
+      if (!request?.role || !request.task) return;
+      const work = (async () => {
+        try {
+          const subagentId = await dir.spawn({
+            name: `trigger-${request.role}`,
+            role: request.role,
+            tier: request.tier,
+            maxIterations: SPECIALIST_MAX_ITERATIONS,
+            maxToolCalls: SPECIALIST_MAX_TOOL_CALLS,
+            timeoutMs: SPECIALIST_TIMEOUT_MS,
+            // Triggered specialists are background infrastructure, like
+            // reviewers: they must not eat the leader's lifetime spawn budget,
+            // which the user reserved for work they asked for.
+            spawnBudgetExempt: true
+          });
+          const taskId = await dir.assign({
+            id: randomUUID4(),
+            description: request.task,
+            subagentId,
+            timeoutMs: SPECIALIST_TIMEOUT_MS
+          });
+          const [result] = await dir.awaitTasks([taskId]);
+          if (result?.status === "success") {
+            const text = typeof result.result === "string" ? result.result : JSON.stringify(result.result);
+            await session.append({
+              type: "llm_response",
+              ts: (/* @__PURE__ */ new Date()).toISOString(),
+              content: [
+                {
+                  type: "text",
+                  text: `\u{1F514} ${request.role} (triggered by ${request.paths.length} changed file(s)) \u2014 ${text}`
+                }
+              ],
+              stopReason: "end_turn",
+              usage: { input: 0, output: 0 }
+            });
+            return;
+          }
+          await session.append({
+            type: "error",
+            ts: (/* @__PURE__ */ new Date()).toISOString(),
+            message: `\u{1F514} ${request.role} trigger ${result?.status ?? "unknown"}: ${result?.error?.message ?? "no result"}`,
+            phase: "agent"
+          });
+        } catch (err) {
+          try {
+            await session.append({
+              type: "error",
+              ts: (/* @__PURE__ */ new Date()).toISOString(),
+              message: `\u{1F514} ${request.role} trigger failed to run: ${err instanceof Error ? err.message : String(err)}`,
+              phase: "agent"
+            });
+          } catch {
+          }
+        }
+      })();
+      trackWork?.(work);
+    },
+    "specialist-trigger"
+  );
+  if (off) teardownHandlers.push(off);
+}
+
 // src/execution-storage-observability.ts
 function installStorageObservability(events, rootTraceId) {
   const isStorageNamespace = (event) => event === "storage.read" || event === "storage.write" || event === "storage.error" || event.startsWith("storage.");
@@ -6217,6 +6300,15 @@ async function execute(deps) {
       chimeraWork.track(work);
     }
   });
+  installSpecialistTriggerHandler({
+    events,
+    director,
+    session,
+    teardownHandlers: chimeraTeardowns,
+    trackWork: (work) => {
+      chimeraWork.track(work);
+    }
+  });
   installChimeraCascadeHandler({
     events,
     director,
@@ -6748,4 +6840,4 @@ export {
   execute,
   resolveReviewerFallbackModels
 };
-//# sourceMappingURL=execution-KH7WJNAX.js.map
+//# sourceMappingURL=execution-RAZDDQFC.js.map

package/dist/execution-specialist-trigger.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Spawns the roster specialist a file-pattern trigger asked for.
+ *
+ * The detection half lives in core (`specialist-trigger-plugin.ts`) and knows
+ * nothing about the fleet; this is the other side of that boundary, mirroring
+ * how `chimera.review_needed` is handled. A host with no Director simply never
+ * spawns, and the plugin keeps working as a pure detector.
+ *
+ * What it deliberately does not do: retry ladders, model pinning, cascades, or
+ * report persistence. A specialist woken by a glob is a background opinion,
+ * not a gate — if the model is down, the right outcome is one line in the
+ * transcript saying so, not a chain of failovers spending more money on an
+ * opinion nobody asked for.
+ */
+import type { Director } from '@wrongstack/core/coordination';
+import type { EventBus } from '@wrongstack/core/kernel';
+import type { SessionWriter } from '@wrongstack/core/types';
+export interface InstallSpecialistTriggerHandlerOptions {
+    events: EventBus;
+    director: Director | null | undefined;
+    session: SessionWriter;
+    /** Session-scoped disposers, drained at session end. */
+    teardownHandlers: Array<() => void>;
+    /** Registers background work so the session waits for it before closing. */
+    trackWork?: ((work: Promise<void>) => void) | undefined;
+}
+export declare function installSpecialistTriggerHandler({ events, director, session, teardownHandlers, trackWork, }: InstallSpecialistTriggerHandlerOptions): void;
+//# sourceMappingURL=execution-specialist-trigger.d.ts.map

package/dist/fleet/acp-live-progress.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Bridge ACP session/update progress onto the same buses in-process
+ * subagents use, so TUI fleet chat, WebUI Agents panel, and HQ timeline
+ * can watch Claude Code / Gemini / Kimi the same way they watch a native worker.
+ */
+import type { ACPProgressEvent } from '@wrongstack/acp';
+import type { FleetBus } from '@wrongstack/core/coordination';
+import type { EventBus } from '@wrongstack/core/kernel';
+export interface PublishAcpLiveProgressOpts {
+    event: ACPProgressEvent;
+    subagentId: string;
+    agentName: string;
+    sessionId?: string | undefined;
+    taskId?: string | undefined;
+    fleet?: Pick<FleetBus, 'emit'> | undefined;
+    hostEvents?: Pick<EventBus, 'emit'> | undefined;
+}
+export declare function publishAcpLiveProgress(opts: PublishAcpLiveProgressOpts): void;
+//# sourceMappingURL=acp-live-progress.d.ts.map

package/dist/fleet/host-acp-runner-cache.d.ts

@@ -1,9 +1,11 @@
 import type { SubagentRunner } from '@wrongstack/core/types';
+import { type BuildAcpSubagentRunnerOptions } from './host-acp.js';
 export declare class HostAcpRunnerCache {
     private readonly maxEntries;
+    private readonly resolveOpts?;
     private readonly runners;
     private readonly accessOrder;
-    constructor(maxEntries?: number);
+    constructor(maxEntries?: number, resolveOpts?: (() => BuildAcpSubagentRunnerOptions | undefined) | undefined);
     get(subagentId: string): Promise<SubagentRunner>;
 }
 //# sourceMappingURL=host-acp-runner-cache.d.ts.map

package/dist/fleet/host-acp.d.ts

@@ -1,3 +1,15 @@
-import type { SubagentRunner } from '@wrongstack/core/types';
-export declare function buildAcpSubagentRunner(subagentId: string): Promise<SubagentRunner>;
+import { type ACPProgressEvent, type AcpAgentCommandOverrides, type AcpLiveCatalog } from '@wrongstack/acp';
+import type { SubagentRunContext, SubagentRunner, TaskSpec } from '@wrongstack/core/types';
+export type AcpLivePublisher = (ctx: SubagentRunContext, task: TaskSpec, event: ACPProgressEvent) => void;
+export interface BuildAcpSubagentRunnerOptions {
+    overrides?: AcpAgentCommandOverrides | undefined;
+    live?: AcpLiveCatalog | undefined;
+    publishLive?: AcpLivePublisher | undefined;
+}
+/**
+ * Same command resolution as `wstack acp spawn` / `/acp` — user override,
+ * bundled catalog, synced registry, then the legacy map. Director / `--bg`
+ * must not use a different argv than the CLI spawn path.
+ */
+export declare function buildAcpSubagentRunner(subagentId: string, options?: BuildAcpSubagentRunnerOptions): Promise<SubagentRunner>;
 //# sourceMappingURL=host-acp.d.ts.map

package/dist/fleet/host.d.ts

@@ -120,6 +120,7 @@ export declare class MultiAgentHost {
      */
     buildSubagentRunner(config: Config): Promise<SubagentRunner>;
     buildACPRunner(subagentId: string): Promise<SubagentRunner>;
+    private acpCommandOpts;
     spawnACP(subagentId: string, task: string, config: Config): Promise<string>;
     private filterTools;
     private mailboxProjectDir;

package/dist/{hq-IG3YRGCO.js → hq-5XHEIIH6.js}

@@ -2,8 +2,15 @@ import {
   parseTokenTtlValue
 } from "./chunk-UZ2TMHNH.js";
 import {
+  resolveHqPasswordInput
+} from "./chunk-AUQDGU5D.js";
+import {
+  normalizeHqPublicOrigin,
   resolveAuditActor
-} from "./chunk-Q5GTM25S.js";
+} from "./chunk-I7V2OYVH.js";
+import {
+  parseHqIpAllowlist
+} from "./chunk-Q7E3BPDU.js";
 
 // src/subcommands/handlers/hq.ts
 import * as fs from "node:fs/promises";
@@ -14,6 +21,7 @@ import {
   hqAuthAuditPath,
   hqAuthContentHash,
   hqAuthFilePath,
+  isLoopbackHost,
   logHqAuthAudit,
   mintHqToken,
   mutateHqAuthFile,
@@ -40,6 +48,10 @@ var hqCmd = async (args, deps) => {
   if (sub === "audit") {
     return hqAuditCmd(args.slice(1), deps);
   }
+  if (sub === "service") {
+    const { hqServiceCmd } = await import("./hq-service-L5INQFM4.js");
+    return hqServiceCmd(args.slice(1), deps);
+  }
   if (sub === "help" || sub === "--help") {
     printHelp(deps);
     return 0;
@@ -50,15 +62,53 @@ var hqCmd = async (args, deps) => {
   return 1;
 };
 async function startServer(deps) {
-  const { startHqServer } = await import("./hq-server-OILU3NPI.js");
+  const { startHqServer } = await import("./hq-server-CNUTBWTK.js");
   const dataDir = resolveDataDir(deps);
   const flags = deps.flags ?? {};
-  const host = typeof flags["host"] === "string" ? flags["host"] : HQ_CLI_DEFAULT_HOST;
+  const rawPublicUrl = typeof flags["hq-public-url"] === "string" ? flags["hq-public-url"] : process.env.WRONGSTACK_HQ_PUBLIC_URL;
+  let publicOrigin;
+  if (rawPublicUrl !== void 0 && rawPublicUrl.trim() !== "") {
+    try {
+      publicOrigin = normalizeHqPublicOrigin(rawPublicUrl);
+    } catch (cause) {
+      deps.renderer.writeError(`${cause instanceof Error ? cause.message : String(cause)}
+`);
+      return 1;
+    }
+  }
+  const host = typeof flags["host"] === "string" ? flags["host"] : publicOrigin !== void 0 ? "127.0.0.1" : HQ_CLI_DEFAULT_HOST;
   const port = typeof flags["port"] === "string" ? Number.parseInt(flags["port"], 10) : 3499;
+  if (publicOrigin !== void 0 && !isLoopbackHost(host)) {
+    deps.renderer.writeError(
+      "Persistent public HQ requires a loopback bind. Remove --host or use --host 127.0.0.1.\n"
+    );
+    return 1;
+  }
   const strictPort = flags["strict-port"] === true;
   const open = flags["open"] === true;
-  const password = typeof flags["password"] === "string" ? flags["password"] : process.env.WRONGSTACK_HQ_PASSWORD;
+  let password;
+  try {
+    password = await resolveHqPasswordInput({
+      ...typeof flags["password"] === "string" ? { explicitPassword: flags["password"] } : {}
+    });
+  } catch (cause) {
+    deps.renderer.writeError(`${cause instanceof Error ? cause.message : String(cause)}
+`);
+    return 1;
+  }
+  const bootstrapPasswordOnly = /^(?:1|true)$/i.test(
+    process.env.WRONGSTACK_HQ_BOOTSTRAP_PASSWORD_ONLY?.trim() ?? ""
+  );
   const allowInsecureOpen = flags["insecure-open"] === true;
+  const rawAllowlist = typeof flags["hq-allowlist"] === "string" ? flags["hq-allowlist"] : process.env.WRONGSTACK_HQ_ALLOWLIST;
+  let ipAllowlist;
+  try {
+    ipAllowlist = parseHqIpAllowlist(rawAllowlist);
+  } catch (cause) {
+    deps.renderer.writeError(`${cause instanceof Error ? cause.message : String(cause)}
+`);
+    return 1;
+  }
   const rawTtl = typeof flags["hq-token-ttl"] === "string" ? flags["hq-token-ttl"] : void 0;
   let tokenTtlMs;
   if (rawTtl !== void 0 && rawTtl.length > 0) {
@@ -94,9 +144,13 @@ async function startServer(deps) {
       strictPort,
       dataDir,
       allowInsecureOpen,
+      secureCookies: publicOrigin !== void 0,
+      requireBrowserAuth: publicOrigin !== void 0,
       ...password !== void 0 ? { password } : {},
+      ...bootstrapPasswordOnly ? { bootstrapPasswordOnly: true } : {},
       ...tokenTtlMs !== void 0 ? { tokenTtlMs } : {},
-      ...trustedProxyHops !== void 0 ? { trustedProxyHops } : {}
+      ...trustedProxyHops !== void 0 ? { trustedProxyHops } : {},
+      ...ipAllowlist !== void 0 ? { ipAllowlist } : {}
     });
   } catch (err) {
     if (err instanceof HqInsecureExposureError) {
@@ -106,14 +160,34 @@ async function startServer(deps) {
     }
     throw err;
   }
+  if (publicOrigin !== void 0) {
+    if (handle.firstRunSetup?.passwordMode !== true) {
+      await handle.close();
+      deps.renderer.writeError(
+        "Persistent public HQ requires password mode. Set WRONGSTACK_HQ_PASSWORD and retry.\n"
+      );
+      return 1;
+    }
+    handle.trustPublicOrigin(publicOrigin);
+    deps.renderer.write(`Public endpoint:  ${publicOrigin}/
+`);
+    deps.renderer.write(`Public mobile:    ${publicOrigin}/mobile
+`);
+  }
   if (open) {
     try {
       const { openBrowser } = await import("@wrongstack/webui-server");
-      openBrowser(handle.firstRunSetup?.browserUrl ?? `http://${handle.host}:${handle.port}`);
+      openBrowser(
+        publicOrigin ?? handle.firstRunSetup?.browserUrl ?? `http://${handle.host}:${handle.port}`
+      );
     } catch {
     }
   }
   writeStartupInfo(deps, handle);
+  deps.renderer.write(
+    ipAllowlist === void 0 ? "Network allowlist: disabled (authentication remains required when configured).\n" : `Network allowlist: active (${ipAllowlist.length} configured rule${ipAllowlist.length === 1 ? "" : "s"} + loopback).
+`
+  );
   await new Promise((resolve) => {
     const shutdown = async () => {
       try {
@@ -137,9 +211,34 @@ function writeStartupInfo(deps, handle) {
 `);
     deps.renderer.write(`Browser endpoint: http://${handle.host}:${handle.port}
 `);
+    deps.renderer.write(
+      `Mobile endpoint:  http://${handle.host}:${handle.port}/mobile (password required)
+`
+    );
+    return;
+  }
+  if (process.env.WRONGSTACK_HQ_SUPPRESS_STARTUP_SECRETS === "1") {
+    deps.renderer.write(`Browser endpoint: http://${handle.host}:${handle.port}
+`);
+    deps.renderer.write(
+      `Mobile endpoint:  http://${handle.host}:${handle.port}/mobile (password required)
+`
+    );
+    deps.renderer.write(`Client endpoint:  ws://${handle.host}:${handle.port}/ws/client
+`);
+    deps.renderer.write(
+      `Startup credentials suppressed; auth state is stored in ${handle.firstRunSetup.dataDir}.
+`
+    );
     return;
   }
+  const mobileUrl = new URL(handle.firstRunSetup.browserUrl);
+  mobileUrl.pathname = "/mobile";
+  mobileUrl.search = "";
+  mobileUrl.hash = "";
   deps.renderer.write(`Browser endpoint: ${handle.firstRunSetup.browserUrl}
+`);
+  deps.renderer.write(`Mobile endpoint:  ${mobileUrl.toString()} (password required)
 `);
   deps.renderer.write(`Client endpoint:  ${handle.firstRunSetup.clientUrl}
 `);
@@ -537,7 +636,7 @@ async function tokenRevoke(args, deps) {
   return 0;
 }
 function printHelp(deps) {
-  deps.renderer.write(`Usage: wstack hq <serve | token | audit>
+  deps.renderer.write(`Usage: wstack hq <serve | token | audit | service>
 `);
   deps.renderer.write("\n");
   deps.renderer.write(`  wstack hq                      Start the HQ command center server.
@@ -564,6 +663,18 @@ function printHelp(deps) {
 `);
   deps.renderer.write(
     `  wstack hq audit verify         Re-derive auth.json contentHash for forensic comparison.
+`
+  );
+  deps.renderer.write(
+    `  wstack hq service install      Install persistent Ubuntu/systemd service + updater timer.
+`
+  );
+  deps.renderer.write(`  wstack hq service status       Show service and updater status.
+`);
+  deps.renderer.write(`  wstack hq service update       Run the guarded update job now.
+`);
+  deps.renderer.write(
+    `  wstack hq service uninstall    Remove units but preserve HQ data and secret file.
 `
   );
   deps.renderer.write("\n");
@@ -579,6 +690,10 @@ function printHelp(deps) {
   );
   deps.renderer.write(
     `  --tunnel            Publish a temporary *.trycloudflare.com URL (requires cloudflared).
+`
+  );
+  deps.renderer.write(
+    `  --hq-public-url <https-origin>  Trust a persistent TLS reverse-proxy origin; binds loopback and requires password mode.
 `
   );
   deps.renderer.write(`  --password <value>  Set or rotate the browser login password.
@@ -599,6 +714,10 @@ function printHelp(deps) {
     `  --hq-trusted-proxy-hops <n>  Trust the rightmost n X-Forwarded-For entries when rate-limiting logins.
                         Default 0 (ignore the header). Set to the real hop count behind a tunnel,
                         otherwise every user shares one backoff bucket. Never guess high.
+`
+  );
+  deps.renderer.write(
+    `  --hq-allowlist <csv>  Optional source IP/CIDR allowlist (for example 203.0.113.4,10.0.0.0/8).
 `
   );
   deps.renderer.write(`  --open              Open the dashboard in the default browser.
@@ -708,4 +827,4 @@ export {
   hqCmd,
   resolveAuditActor
 };
-//# sourceMappingURL=hq-IG3YRGCO.js.map
+//# sourceMappingURL=hq-5XHEIIH6.js.map

package/dist/hq-command-controller.d.ts

@@ -6,8 +6,9 @@
  * (`director`, the rebound `interruptLeader`) are not yet defined at HQ-connect
  * time.
  *
- * The five command types route through the agent's own decision loop or the
- * project mailbox, so they inherit existing guardrails. `run-command` (raw
+ * Conversational commands route through the agent's own decision loop or the
+ * project mailbox; Kanban commands route through its project IPC owner, so
+ * both inherit existing guardrails. `run-command` (raw
  * shell) is deliberately NOT wired here — it requires a separately-audited
  * escalation policy (operator flag + per-token `control.execute` + allowlist)
  * and is left as a stub that rejects until that policy exists.
@@ -67,7 +68,35 @@ export interface HqCommandController {
     ownsSession?: ((sessionId: string) => boolean) | undefined;
     /** Whether raw shell execution is explicitly opted-in by the operator. */
     allowRunCommand: () => boolean;
+    /** Apply a lifecycle transition through the project's Kanban IPC client. */
+    kanbanTransition?: ((input: {
+        boardId: string;
+        taskId: string;
+        to: 'backlog' | 'todo' | 'running' | 'review' | 'done';
+        comment: string;
+        sessionId?: string | undefined;
+    }) => Promise<string>) | undefined;
+    /** Assign a card through the project owner while preserving active leases. */
+    kanbanAssign?: ((input: {
+        boardId: string;
+        taskId: string;
+        agentId: string;
+        assignee: string;
+        comment: string;
+        sessionId?: string | undefined;
+    }) => Promise<string>) | undefined;
+    /** Claim and dispatch one ready card through this host's canonical Director path. */
+    kanbanDispatch?: ((input: {
+        boardId: string;
+        taskId: string;
+        comment: string;
+        sessionId?: string | undefined;
+    }) => Promise<string>) | undefined;
 }
+/** Bind HQ transitions to the same project-scoped IPC path every other client uses. */
+export declare function createProjectKanbanTransitionHandler(projectRoot: string): NonNullable<HqCommandController['kanbanTransition']>;
+/** Bind guarded HQ assignment to the canonical project-scoped Kanban owner. */
+export declare function createProjectKanbanAssignHandler(projectRoot: string): NonNullable<HqCommandController['kanbanAssign']>;
 /**
  * Build the `onCommand` handler for an HQ publisher. The handler validates
  * the command, dispatches through the controller, and returns an ack result

package/dist/hq-server/client-address.d.ts

@@ -35,6 +35,8 @@
  * @module hq-server/client-address
  */
 import type * as http from 'node:http';
+/** The actual TCP peer, with IPv4-mapped IPv6 normalized. Never reads headers. */
+export declare function resolveSocketAddress(req: http.IncomingMessage): string | undefined;
 /**
  * Parse one `X-Forwarded-For` element into a bare address, or `undefined` when
  * it is not one. Handles `1.2.3.4`, `1.2.3.4:5678`, `[::1]`, and `[::1]:5678`.

package/dist/hq-server/ip-allowlist.d.ts

@@ -0,0 +1,16 @@
+export interface HqIpAllowlist {
+    readonly entries: readonly string[];
+    allows(address: string | undefined): boolean;
+}
+/**
+ * Build the optional HQ admission allowlist.
+ *
+ * Matching is intentionally performed against the TCP peer, never a forwarded
+ * header. When HQ is directly reachable on 0.0.0.0, trusting a client-supplied
+ * X-Forwarded-For value here would turn the allowlist into a bypass. Loopback
+ * remains implicit so local administration and health checks cannot be locked
+ * out by a remote-only list.
+ */
+export declare function createHqIpAllowlist(rules: readonly string[] | undefined): HqIpAllowlist | undefined;
+export declare function parseHqIpAllowlist(value: string | undefined): string[] | undefined;
+//# sourceMappingURL=ip-allowlist.d.ts.map

package/dist/hq-server/preflight.d.ts

@@ -4,6 +4,7 @@ interface HqPreflightOptions {
     port?: number;
     dataDir?: string;
     password?: string;
+    bootstrapPasswordOnly?: boolean;
     tokenTtlMs?: number;
     requireBrowserAuth?: boolean;
     allowInsecureOpen?: boolean;

package/dist/hq-server/routes/auth/password-routes.d.ts

@@ -3,7 +3,7 @@ import type { LoginAttemptStore } from '../../login-attempt-store.js';
 import type { HqRouterMutableAuth, HqSessionEntry } from '../../types.js';
 import { type ApplyHqAuthFile } from './common.js';
 export declare function handleApiAuthStatus(req: http.IncomingMessage, res: http.ServerResponse, url: URL, mutableAuth: HqRouterMutableAuth, sessions: Map<string, HqSessionEntry>, requireBrowserAuth: boolean | undefined, trustedPublicOrigins: Set<string>, secureCookies: boolean | undefined): Promise<void>;
-export declare function handleApiLogin(req: http.IncomingMessage, res: http.ServerResponse, mutableAuth: HqRouterMutableAuth, sessions: Map<string, HqSessionEntry>, loginAttempts: LoginAttemptStore, secureCookies: boolean | undefined, trustedProxyHops: number): Promise<void>;
+export declare function handleApiLogin(req: http.IncomingMessage, res: http.ServerResponse, mutableAuth: HqRouterMutableAuth, sessions: Map<string, HqSessionEntry>, loginAttempts: LoginAttemptStore, secureCookies: boolean | undefined, trustedProxyHops: number, sessionCapabilities?: string[]): Promise<void>;
 export declare function handleApiLogout(req: http.IncomingMessage, res: http.ServerResponse, mutableAuth: HqRouterMutableAuth, sessions: Map<string, HqSessionEntry>, secureCookies: boolean | undefined): Promise<void>;
 export declare function handleApiPassword(req: http.IncomingMessage, res: http.ServerResponse, mutableAuth: HqRouterMutableAuth, sessions: Map<string, HqSessionEntry>, dataDir: string, secureCookies: boolean | undefined, requireBrowserAuth: boolean | undefined, applyAuthFile: ApplyHqAuthFile): Promise<void>;
 //# sourceMappingURL=password-routes.d.ts.map

package/dist/hq-server/routes.d.ts

@@ -8,10 +8,8 @@
  * @module hq-server/routes
  */
 import type * as http from 'node:http';
-import type { createMailboxHttpRouter } from '@wrongstack/core/coordination';
-import type { Mailbox, MailboxHttpAccessDecision, MailboxHttpRateLimiter } from '@wrongstack/core/coordination';
-import type { HqAlertEngine, HqCommandAuditLog, HqEventEnvelope, HqSnapshot, HqTranscriptEntry } from '@wrongstack/core/hq';
-import type { createHqPersistence } from '@wrongstack/core/hq';
+import type { createMailboxHttpRouter, Mailbox, MailboxHttpAccessDecision, MailboxHttpRateLimiter } from '@wrongstack/core/coordination';
+import type { createHqPersistence, HqAlertEngine, HqCommandAuditLog, HqEventEnvelope, HqSnapshot, HqTranscriptEntry } from '@wrongstack/core/hq';
 import type { TrustBoundary } from '@wrongstack/core/security';
 import type { WebSocket } from 'ws';
 import * as HqServerAuth from './auth.js';
@@ -41,6 +39,7 @@ export declare const agentMessageToEntry: typeof HqServerUtils.agentMessageToEnt
 export declare const readLocalSubagentTranscript: typeof HqServerUtils.readLocalSubagentTranscript;
 export declare const lanIPv4Addresses: typeof HqServerUtils.lanIPv4Addresses;
 export declare const hqRuntimeMarkerPath: typeof HqServerUtils.hqRuntimeMarkerPath;
+import type { HqIpAllowlist } from './ip-allowlist.js';
 import type { LoginAttemptStore } from './login-attempt-store.js';
 import type { ConnectedClient, HqRouterMutableAuth, HqSessionEntry, HqSnapshotBroadcaster, ProjectDetail, TranscriptRing } from './types.js';
 export type { ConnectedClient, HqSnapshotBroadcaster, ProjectDetail, TranscriptRing };
@@ -99,6 +98,8 @@ export interface HqRouterDeps {
      * Defaults to 0, which ignores `X-Forwarded-For` entirely.
      */
     trustedProxyHops?: number | undefined;
+    /** TCP-peer allowlist shared by HTTP and WebSocket admission. */
+    ipAllowlist?: HqIpAllowlist | undefined;
 }
 /**
  * Create the HTTP request listener that handles all `/api/*` routes as well

package/dist/hq-server/secret-input.d.ts

@@ -0,0 +1,7 @@
+export interface ResolveHqPasswordOptions {
+    explicitPassword?: string | undefined;
+    environment?: NodeJS.ProcessEnv | undefined;
+}
+/** Resolve HQ password input without putting Docker/Kubernetes secrets in argv or env values. */
+export declare function resolveHqPasswordInput(options?: ResolveHqPasswordOptions): Promise<string | undefined>;
+//# sourceMappingURL=secret-input.d.ts.map