@wrongstack/cli 1.0.3 → 1.0.4

package/dist/{plugins-U7KGQAUG.js → plugins-WJLW6ULV.js}

@@ -6,7 +6,7 @@ import {
   pluginNameFromSpec,
   setupPlugins,
   warnIfDeprecatedPluginName
-} from "./chunk-U6KCWRMC.js";
+} from "./chunk-XJ7K67PP.js";
 import "./chunk-EWKESL4L.js";
 import "./chunk-SIS37L3W.js";
 export {
@@ -18,4 +18,4 @@ export {
   setupPlugins,
   warnIfDeprecatedPluginName
 };
-//# sourceMappingURL=plugins-U7KGQAUG.js.map
+//# sourceMappingURL=plugins-WJLW6ULV.js.map

package/dist/projects-LMNAGGEU.js

@@ -0,0 +1,36 @@
+
+// src/subcommands/handlers/projects.ts
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import { color } from "@wrongstack/core/utils";
+var projectsCmd = async (_args, deps) => {
+  const manifestPath = path.join(deps.paths.globalRoot, "projects.json");
+  let entries;
+  try {
+    const parsed = JSON.parse(await fs.readFile(manifestPath, "utf8"));
+    entries = Array.isArray(parsed.projects) ? parsed.projects : [];
+  } catch {
+    deps.renderer.write("No projects tracked yet.\n");
+    return 0;
+  }
+  if (entries.length === 0) {
+    deps.renderer.write("No projects tracked yet.\n");
+    return 0;
+  }
+  const sorted = [...entries].sort((a, b) => (b.lastSeen ?? "").localeCompare(a.lastSeen ?? ""));
+  const slugWidth = Math.min(
+    Math.max(...sorted.map((entry) => (entry.slug ?? "").length), 4),
+    40
+  );
+  for (const entry of sorted) {
+    const slug = (entry.slug ?? "?").padEnd(slugWidth);
+    const seen = entry.lastSeen ?? "";
+    deps.renderer.write(`  ${color.dim(slug)}  ${color.dim(seen)}  ${entry.root ?? "?"}
+`);
+  }
+  return 0;
+};
+export {
+  projectsCmd
+};
+//# sourceMappingURL=projects-LMNAGGEU.js.map

package/dist/{proxy-wiring-MGRSKZZB.js → proxy-wiring-K2DORFFL.js}

@@ -3,12 +3,12 @@ import {
   awaitFirstWrongProxyProbe,
   bootstrapWrongProxy,
   shutdownWrongProxy
-} from "./chunk-VOTTENR5.js";
-import "./chunk-JHPXJRRI.js";
+} from "./chunk-CDY4D5QK.js";
+import "./chunk-4XCBEUBX.js";
 export {
   applyWrongProxyPrefs,
   awaitFirstWrongProxyProbe,
   bootstrapWrongProxy,
   shutdownWrongProxy
 };
-//# sourceMappingURL=proxy-wiring-MGRSKZZB.js.map
+//# sourceMappingURL=proxy-wiring-K2DORFFL.js.map

package/dist/short-circuit-flags-YDMLAQ5R.js

@@ -0,0 +1,10 @@
+import {
+  handleHelpVersionShortCircuit
+} from "./chunk-U6PGWDMZ.js";
+import "./chunk-6WRKAACA.js";
+import "./chunk-XJXDOF63.js";
+import "./chunk-EK2P53GL.js";
+export {
+  handleHelpVersionShortCircuit
+};
+//# sourceMappingURL=short-circuit-flags-YDMLAQ5R.js.map

package/dist/slash-commands/acp.d.ts

@@ -10,6 +10,9 @@ import type { SlashCommandContext } from './command-context.js';
  *   /acp <agent-id> <task>       run a task on one agent (inline, streamed)
  *   /acp <agent-id> --bg <task>  run it as a background fleet subagent
  *   /acp parallel <csv> <task>   fan a task out to several agents at once
+ *   /acp parallel <csv> --bg <task>  same, but each agent runs as a background
+ *                             fleet subagent — live progress shows in /agents,
+ *                             the TUI fleet panel and the WebUI Agents panel
  *   /acp probe [csv]             handshake-test agents (what actually works)
  *   /acp bench [csv] [--fs]      end-to-end verify each agent + graded report
  *   /acp sync                    pull the official agentclientprotocol/registry

package/dist/slash-commands/command-context.d.ts

@@ -259,6 +259,16 @@ export interface SlashCommandContext {
     onContextLimit?: ((tokens?: number) => number) | undefined;
     /** Toggle or query YOLO mode at runtime. Pass undefined to query, boolean to set. */
     onYolo?: ((setTo?: boolean) => boolean) | undefined;
+    /**
+     * Read, or set, which kinds of damage still prompt while YOLO is on.
+     *
+     * Returns the EFFECTIVE map after any update — the locked kinds report `true`
+     * whatever was asked, so a caller can tell an ignored "off" from a real one.
+     */
+    onYoloConfirm?: ((update?: {
+        kind: import('@wrongstack/core/security').DestructiveKind;
+        confirm: boolean;
+    }) => Record<string, boolean>) | undefined;
     /** Toggle or query next-task prediction. Pass undefined to query, boolean to set. */
     onNextPredict?: ((setTo?: boolean) => boolean) | undefined;
     /**
@@ -596,6 +606,18 @@ export interface SlashCommandContext {
     brainTierStats?: (() => import('@wrongstack/core/coordination').BrainTierStats) | undefined;
     /** Config store for reading/writing config sections at runtime (e.g. settings menu). */
     configStore: import('@wrongstack/core/types').ConfigStore;
+    /**
+     * Host hook that adopts the store's new merged config after an in-process
+     * selection change (today only `/profile switch`). The host's own `config`
+     * object is a distinct snapshot from the store's, so a command that mutates
+     * the store must hand the result back or the host keeps reading the values
+     * it booted with.
+     *
+     * Optional by design: only the interactive CLI has a live merged config to
+     * keep in step. Surfaces that leave it unset still persist the selection to
+     * the bootstrap and pick it up on their next start.
+     */
+    onActiveProfileChange?: ((next: import('@wrongstack/core/types').Config) => void) | undefined;
     /**
      * Optional accessor for the Chronicle metrics store. When wired, the
      * `/tool autothin candidates` and `apply` commands can read the

package/dist/slash-commands/ensemble.d.ts

@@ -13,5 +13,5 @@ import type { SlashCommandContext } from './command-context.js';
  *
  * Run /ensemble (no args) to see usage and the list of available agents.
  */
-export declare function buildEnsembleCommand(_opts: SlashCommandContext): SlashCommand;
+export declare function buildEnsembleCommand(opts: SlashCommandContext): SlashCommand;
 //# sourceMappingURL=ensemble.d.ts.map

package/dist/slash-commands/profile.d.ts

@@ -10,6 +10,13 @@ import type { SlashCommandContext } from './command-context.js';
  *   /profile list                  Show available profiles (● = active)
  *   /profile switch <name>         Switch to an existing profile
  *   /profile copy <name>           Copy the active profile's settings to a new profile
+ *
+ * `switch` writes the bootstrap (the durable selection read at next boot) and
+ * then pushes `activeProfile` through the live ConfigStore, which is the only
+ * event source the provider-runtime rebind watcher observes. `syncConfig` is
+ * the host's own copy of the merged config; it is a separate object from the
+ * store, so it has to be told too or the host keeps routing against the
+ * profile that was active when it booted.
  */
 export declare function buildProfileCommand(opts: SlashCommandContext): SlashCommand;
 //# sourceMappingURL=profile.d.ts.map

package/dist/subcommands/handlers/hq.d.ts

@@ -11,6 +11,7 @@
  *   wstack hq token list --client   → list issued client tokens
  *   wstack hq token revoke <id>    → revoke a browser token (prefix match)
  *   wstack hq token revoke --client <id> → revoke a client token
+ *   wstack hq service install|status|update|uninstall → Ubuntu systemd lifecycle
  *
  * All subcommands accept `--data-dir <path>` to override the HQ data
  * directory (default `~/.wrongstack/hq`, honors `WRONGSTACK_HOME` /

package/dist/subcommands/handlers/projects.d.ts

@@ -1,3 +1,17 @@
 import type { SubcommandHandler } from '../contracts.js';
+/**
+ * List the projects WrongStack has actually been used in.
+ *
+ * The source is `~/.wrongstack/projects.json`, the manifest `boot.ts` writes
+ * on every start and the one `/project` already reads.
+ *
+ * This used to enumerate the `~/.wrongstack/projects/` DIRECTORY instead, which
+ * is not the same thing: that directory also holds per-run scratch state for
+ * ephemeral roots — Chimera review worktrees and the like — which are created
+ * by the hundred and carry no `meta.json`. On a working machine the listing was
+ * 1,495 rows of which 1,461 printed `(no meta)` and 262 were single-use
+ * `chimera-*` scratch dirs, against 30 real entries in the manifest. The
+ * command was unusable for the one question it answers.
+ */
 export declare const projectsCmd: SubcommandHandler;
 //# sourceMappingURL=projects.d.ts.map

package/dist/{subcommands-CUTGBDKP.js → subcommands-7N4RIK6H.js}

@@ -1,9 +1,9 @@
 import {
   subcommandNames,
   subcommands
-} from "./chunk-IUEKNHPT.js";
+} from "./chunk-BIWE22O5.js";
 export {
   subcommandNames,
   subcommands
 };
-//# sourceMappingURL=subcommands-CUTGBDKP.js.map
+//# sourceMappingURL=subcommands-7N4RIK6H.js.map

package/dist/{version-help-MYKF724O.js → version-help-WXI42PZ3.js}

@@ -1,10 +1,10 @@
 import {
   helpCmd,
   versionCmd
-} from "./chunk-FPIWTJ2G.js";
+} from "./chunk-6WRKAACA.js";
 import "./chunk-XJXDOF63.js";
 export {
   helpCmd,
   versionCmd
 };
-//# sourceMappingURL=version-help-MYKF724O.js.map
+//# sourceMappingURL=version-help-WXI42PZ3.js.map

package/dist/{webui-server-QWBUT7BO.js → webui-server-OBV5JYJV.js}

@@ -1,6 +1,8 @@
 import {
-  createHqCommandDispatcher
-} from "./chunk-IMWXXF4J.js";
+  createHqCommandDispatcher,
+  createProjectKanbanAssignHandler,
+  createProjectKanbanTransitionHandler
+} from "./chunk-KNMIBKLV.js";
 import {
   createKanbanRunMirror
 } from "./chunk-VCYZ3WZV.js";
@@ -71,6 +73,10 @@ function createWebuiClientRegistration(deps) {
         steerMailbox: mailbox,
         interruptLeader: control.interruptLeader,
         allowRunCommand: control.allowRunCommand,
+        ...deps.projectRoot ? {
+          kanbanTransition: createProjectKanbanTransitionHandler(deps.projectRoot),
+          kanbanAssign: createProjectKanbanAssignHandler(deps.projectRoot)
+        } : {},
         // The session HQ actually SHOWS for this client — the boot
         // session the telemetry bridge publishes under and the only one
         // `interruptLeader` speaks for. `getSessionId` follows whichever
@@ -1968,4 +1974,4 @@ async function runWebUI(opts) {
 export {
   runWebUI
 };
-//# sourceMappingURL=webui-server-QWBUT7BO.js.map
+//# sourceMappingURL=webui-server-OBV5JYJV.js.map

package/dist/wiring/cli-slash-commands-setup.d.ts

@@ -53,6 +53,12 @@ export declare function setupCliSlashCommands(params: {
     agentMonitor: B['agentMonitor'];
     onPanelOpen: B['onPanelOpen'];
     configStore: B['configStore'];
+    /**
+     * Forwards the store's new merged config back to the host after an in-process
+     * selection change (`/profile switch`). Optional: hosts without a live merged
+     * config leave it unset and the selection still applies on their next boot.
+     */
+    onActiveProfileChange?: B['onActiveProfileChange'];
     secretInputController: {
         readSecret: NonNullable<B['readSecret']>;
         readText: NonNullable<B['readText']>;
@@ -79,6 +85,7 @@ export declare function setupCliSlashCommands(params: {
     };
     mcpRegistry: SE['mcpRegistry'];
     setYoloMode: SE['onYolo'];
+    setYoloConfirm: SE['onYoloConfirm'];
     getNextPredict: SE['getNextPredict'];
     setNextPredict: SE['setNextPredict'];
     getCurrentSuggestions: SE['getCurrentSuggestions'];

package/dist/wiring/codebase-embeddings.d.ts

@@ -5,7 +5,7 @@
  * already emits 384-dimensional vectors — the width `file_vectors` stores. It
  * arrives here rather than inside `packages/tools` for two reasons:
  *
- *  - `@huggingface/transformers` is an **optional** dependency. A repository
+ *  - `@huggingface/transformers` is an **opt-in** backend. A repository
  *    that never enables semantic search should not have to install a model
  *    runtime, and `packages/tools` must stay importable without one.
  *  - A function cannot cross the project daemon's IPC boundary. The daemon
@@ -23,7 +23,7 @@ import type { EmbeddingPort } from '@wrongstack/tools';
  * Build the embedding port, or `undefined` when semantic search is off or
  * unavailable.
  *
- * The dynamic import is what keeps `@huggingface/transformers` optional: a
+ * The dynamic import is what keeps `@huggingface/transformers` opt-in: a
  * missing package throws here and is reported as "unavailable", never as a
  * startup failure.
  */

package/dist/wiring/command-host-state.d.ts

@@ -1,6 +1,7 @@
 /** Mutable command-host state created after the runtime fleet is available. */
 import { type BrainArbiter, type Director } from '@wrongstack/core/coordination';
 import type { EventBus } from '@wrongstack/core/kernel';
+import { type DestructiveKind } from '@wrongstack/core/security';
 import type { StatuslineDensities, StatuslineLines } from '@wrongstack/core/statusline';
 import { type Config, type SessionWriter } from '@wrongstack/core/types';
 import type { WstackPaths } from '@wrongstack/core/utils';
@@ -28,6 +29,8 @@ interface CommandHostStateInput {
     permissionPolicy: {
         setYolo?(enabled: boolean): void;
         getYolo?(): boolean;
+        setYoloConfirmKinds?(kinds: Iterable<DestructiveKind>): void;
+        getYoloConfirmKinds?(): ReadonlySet<DestructiveKind>;
     };
     /**
      * The live conversation's meta bag.
@@ -179,6 +182,10 @@ export declare function setupCommandHostState(input: CommandHostStateInput): Pro
         } | null>) | undefined;
     };
     setYoloMode: (enabled?: boolean) => boolean;
+    setYoloConfirm: (update?: {
+        kind: DestructiveKind;
+        confirm: boolean;
+    }) => Record<DestructiveKind, boolean>;
     secretInputController: {
         readSecret: (prompt: string) => Promise<string>;
         readText: (prompt: string) => Promise<string>;

package/dist/wiring/pipeline.d.ts

@@ -82,6 +82,8 @@ export declare function createAgent(params: {
             /** Opt-in Kanban governance gate; see ToolsConfig.kanbanGovernance. */
             kanbanGovernance?: boolean | undefined;
             loopDetection?: import('@wrongstack/core/types').LoopDetectionConfig | undefined;
+            autoExtendLimit?: boolean | undefined;
+            maxAutoExtensions?: number | undefined;
         };
     };
     confirmAwaiter: import('@wrongstack/core/agent').AgentInit['confirmAwaiter'];

package/dist/wiring/provider-runtime-setup.d.ts

@@ -3,7 +3,7 @@ import type { ProviderModelStatusTracker } from '@wrongstack/core/coordination';
 import type { EventBus } from '@wrongstack/core/kernel';
 import type { ProviderRegistry } from '@wrongstack/core/registry';
 import type { Config, Logger, ModelsRegistry, Provider, ProviderConfig, SecretVault } from '@wrongstack/core/types';
-import type { WstackPaths } from '@wrongstack/core/utils';
+import { type WstackPaths } from '@wrongstack/core/utils';
 export declare function serializeProviderRuntimeSnapshot(snapshot: unknown): string;
 type AnyObj = any;
 export interface ProviderRuntimeDeps {

package/dist/wiring/session-command-handlers.d.ts

@@ -7,7 +7,7 @@ import type { MultiAgentHost } from '../multi-agent.js';
 import type { SessionStats } from '../session-stats.js';
 import type { BuiltinSlashCommandDeps } from './slash-commands.js';
 type SlashCommandDeps = BuiltinSlashCommandDeps;
-type SessionCommandHandlers = Pick<SlashCommandDeps, 'onPlugin' | 'onContextLimit' | 'onMcp' | 'mcpRegistry' | 'mcpStatus' | 'onYolo' | 'onNextPredict' | 'onSuggestions' | 'onExit' | 'onBeforeExit' | 'onClear' | 'onNewSession' | 'onDiag' | 'onStats' | 'generateCommitMessage' | 'onDispatchClassify'>;
+type SessionCommandHandlers = Pick<SlashCommandDeps, 'onPlugin' | 'onContextLimit' | 'onMcp' | 'mcpRegistry' | 'mcpStatus' | 'onYolo' | 'onYoloConfirm' | 'onNextPredict' | 'onSuggestions' | 'onExit' | 'onBeforeExit' | 'onClear' | 'onNewSession' | 'onDiag' | 'onStats' | 'generateCommitMessage' | 'onDispatchClassify'>;
 interface ErrorRecord {
     ts: string;
     phase: string;
@@ -30,6 +30,7 @@ interface SessionCommandHandlersInput {
     setEventMaxContext: (tokens: number) => void;
     mcpRegistry: MCPRegistry;
     onYolo: NonNullable<SlashCommandDeps['onYolo']>;
+    onYoloConfirm: SlashCommandDeps['onYoloConfirm'];
     getNextPredict: () => boolean;
     setNextPredict: (enabled: boolean) => void;
     getCurrentSuggestions: () => string[];

package/dist/wiring/slash-commands.d.ts

@@ -65,6 +65,7 @@ interface SlashCommandsDeps {
         }): Promise<CompactReport>;
     };
     configStore: ConfigStore;
+    onActiveProfileChange?: BuiltinSlashCommandDeps['onActiveProfileChange'];
     /** Called by /clear after wiping the session on disk — tells the TUI to reset its UI state. */
     onNewSession?: (() => Promise<void>) | undefined;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/cli",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "license": "MIT",
   "description": "WrongStack CLI — terminal AI coding agent with provider catalog from models.dev. Provides `wrongstack` and `wstack` binaries.",
   "keywords": [
@@ -41,36 +41,36 @@
     "data"
   ],
   "dependencies": {
-    "@wrongstack/acp": "1.0.3",
-    "@wrongstack/bench": "1.0.3",
-    "@wrongstack/core": "1.0.3",
-    "@wrongstack/primitives": "1.0.3",
-    "@wrongstack/kanban": "1.0.3",
-    "@wrongstack/mcp": "1.0.3",
-    "@wrongstack/persistence": "1.0.3",
-    "@wrongstack/plug-lsp": "1.0.3",
-    "@wrongstack/plugins": "1.0.3",
-    "@wrongstack/providers": "1.0.3",
-    "@wrongstack/requirement-intake": "1.0.3",
-    "@wrongstack/runtime": "1.0.3",
-    "@wrongstack/sage": "1.0.3",
-    "@wrongstack/sdd": "1.0.3",
-    "@wrongstack/security-scanner": "1.0.3",
-    "@wrongstack/simpleui": "1.0.3",
-    "@wrongstack/techstack": "1.0.3",
-    "@wrongstack/telegram": "1.0.3",
-    "@wrongstack/tools": "1.0.3",
-    "@wrongstack/tui": "1.0.3",
-    "@wrongstack/vector-memory": "1.0.3",
-    "@wrongstack/webui": "1.0.3",
-    "@wrongstack/webui-hq": "1.0.3",
-    "@wrongstack/webui-protocol": "1.0.3",
-    "@wrongstack/wrongtrace": "1.0.3",
-    "@wrongstack/webui-server": "1.0.3",
+    "@wrongstack/acp": "1.0.4",
+    "@wrongstack/bench": "1.0.4",
+    "@wrongstack/core": "1.0.4",
+    "@wrongstack/primitives": "1.0.4",
+    "@wrongstack/kanban": "1.0.4",
+    "@wrongstack/mcp": "1.0.4",
+    "@wrongstack/persistence": "1.0.4",
+    "@wrongstack/plug-lsp": "1.0.4",
+    "@wrongstack/plugins": "1.0.4",
+    "@wrongstack/providers": "1.0.4",
+    "@wrongstack/requirement-intake": "1.0.4",
+    "@wrongstack/runtime": "1.0.4",
+    "@wrongstack/sage": "1.0.4",
+    "@wrongstack/sdd": "1.0.4",
+    "@wrongstack/security-scanner": "1.0.4",
+    "@wrongstack/simpleui": "1.0.4",
+    "@wrongstack/techstack": "1.0.4",
+    "@wrongstack/telegram": "1.0.4",
+    "@wrongstack/tools": "1.0.4",
+    "@wrongstack/tui": "1.0.4",
+    "@wrongstack/vector-memory": "1.0.4",
+    "@wrongstack/webui": "1.0.4",
+    "@wrongstack/webui-hq": "1.0.4",
+    "@wrongstack/webui-protocol": "1.0.4",
+    "@wrongstack/wrongtrace": "1.0.4",
+    "@wrongstack/webui-server": "1.0.4",
     "ws": "^8.21.3"
   },
   "optionalDependencies": {
-    "@wrongstack/desktop": "1.0.3"
+    "@wrongstack/desktop": "1.0.4"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",

package/dist/chunk-Q5GTM25S.js

@@ -1,17 +0,0 @@
-
-// src/hq-server/audit-actor.ts
-import * as os from "node:os";
-function resolveAuditActor() {
-  const user = (process.env.USERNAME ?? process.env.USER ?? "").toString();
-  try {
-    const host = os.hostname();
-    return user ? `${user}@${host}` : `cli@${host}`;
-  } catch {
-    return user ? `${user}@unknown` : "cli";
-  }
-}
-
-export {
-  resolveAuditActor
-};
-//# sourceMappingURL=chunk-Q5GTM25S.js.map

package/dist/projects-L6C6XLDY.js

@@ -1,37 +0,0 @@
-
-// src/subcommands/handlers/projects.ts
-import * as fs from "node:fs/promises";
-import * as path from "node:path";
-import { color } from "@wrongstack/core/utils";
-var projectsCmd = async (_args, deps) => {
-  const projectsRoot = path.join(deps.paths.globalRoot, "projects");
-  try {
-    const entries = await fs.readdir(projectsRoot);
-    if (entries.length === 0) {
-      deps.renderer.write("No projects tracked.\n");
-      return 0;
-    }
-    for (const hash of entries) {
-      try {
-        const meta = JSON.parse(
-          await fs.readFile(path.join(projectsRoot, hash, "meta.json"), "utf8")
-        );
-        deps.renderer.write(
-          `  ${color.dim(hash)}  ${color.dim(meta.lastSeen ?? "")}  ${meta.root ?? "?"}
-`
-        );
-      } catch {
-        deps.renderer.write(`  ${color.dim(hash)}  ${color.dim("(no meta)")}
-`);
-      }
-    }
-    return 0;
-  } catch {
-    deps.renderer.write("No projects directory.\n");
-    return 0;
-  }
-};
-export {
-  projectsCmd
-};
-//# sourceMappingURL=projects-L6C6XLDY.js.map

package/dist/short-circuit-flags-ZNZX44MC.js

@@ -1,10 +0,0 @@
-import {
-  handleHelpVersionShortCircuit
-} from "./chunk-4NHD5OXJ.js";
-import "./chunk-FPIWTJ2G.js";
-import "./chunk-XJXDOF63.js";
-import "./chunk-E6RFXHWD.js";
-export {
-  handleHelpVersionShortCircuit
-};
-//# sourceMappingURL=short-circuit-flags-ZNZX44MC.js.map