@wrongstack/cli 1.0.35 → 1.0.37

package/dist/{acp-T77EAEDB.js → acp-HCGUTFNE.js}

@@ -4,15 +4,19 @@ import {
   loadCachedAcpRegistry,
   refreshAcpRegistry,
   setupProvider
-} from "./chunk-65VNCAF6.js";
+} from "./chunk-ZNNFEKDZ.js";
 import {
   createHqCommandDispatcher
-} from "./chunk-NRXWOMK7.js";
+} from "./chunk-XT3NAHRX.js";
 import {
   startCliHqConnection
-} from "./chunk-4UWCMBPG.js";
-import "./chunk-SDJCLEK6.js";
-import "./chunk-F5DCFAKI.js";
+} from "./chunk-76JE54WD.js";
+import {
+  WebSocketServer
+} from "./chunk-OZCYZYN2.js";
+import "./chunk-UFRVTBV6.js";
+import "./chunk-HKMOIIPQ.js";
+import "./chunk-W23PY4IJ.js";
 
 // src/subcommands/handlers/acp-agents.ts
 import {
@@ -331,7 +335,6 @@ import {
   WsBridgeTransport
 } from "@wrongstack/acp/agent";
 import { leaderDeliveryHub } from "@wrongstack/core/coordination";
-import { WebSocketServer } from "ws";
 
 // src/acp-hq-telemetry.ts
 import * as path from "node:path";
@@ -1112,7 +1115,7 @@ var acpCmd = async (args, deps) => {
   const sub = args[0];
   const loginIndex = sub === "auth" ? 0 : (sub === "server" || sub === "serve") && args[1] === "auth" ? 1 : -1;
   if (loginIndex >= 0) {
-    const { authCmd } = await import("./auth-M6LXZTDA.js");
+    const { authCmd } = await import("./auth-ANOVZVHE.js");
     return authCmd(args.slice(loginIndex + 1), deps);
   }
   if (!sub || sub === "server" || sub === "serve") {
@@ -1193,4 +1196,4 @@ parallel:
 export {
   acpCmd
 };
-//# sourceMappingURL=acp-T77EAEDB.js.map
+//# sourceMappingURL=acp-HCGUTFNE.js.map

package/dist/ascii-mode-B6PKLRHM.js

@@ -0,0 +1,8 @@
+import {
+  applyAsciiMode
+} from "./chunk-UVF3BGET.js";
+import "./chunk-W23PY4IJ.js";
+export {
+  applyAsciiMode
+};
+//# sourceMappingURL=ascii-mode-B6PKLRHM.js.map

package/dist/{audit-KCBTHUQI.js → audit-NH7NUKBV.js}

@@ -1,6 +1,7 @@
 import {
   restoreFlags
-} from "./chunk-CSAPOCBP.js";
+} from "./chunk-QC6CLAK7.js";
+import "./chunk-W23PY4IJ.js";
 
 // src/subcommands/handlers/audit.ts
 import { ToolAuditLog } from "@wrongstack/core/storage";
@@ -102,4 +103,4 @@ async function listAudits(log, dir, deps) {
 export {
   auditCmd
 };
-//# sourceMappingURL=audit-KCBTHUQI.js.map
+//# sourceMappingURL=audit-NH7NUKBV.js.map

package/dist/{auth-M6LXZTDA.js → auth-ANOVZVHE.js}

@@ -1,6 +1,6 @@
 import {
   providerCloudConfig
-} from "./chunk-TXAFIERF.js";
+} from "./chunk-BAWRRA6O.js";
 import {
   addCustomProvider,
   addFromCatalog,
@@ -20,12 +20,12 @@ import {
   runOAuthLoginKind,
   runOAuthLoginMenu,
   validateFamily
-} from "./chunk-GZSKLXYG.js";
+} from "./chunk-RAWHRRUJ.js";
 import {
   renderAuthLocalHelpToString,
   wantsLocalHelp
-} from "./chunk-YTEOAWOJ.js";
-import "./chunk-RKU66D2O.js";
+} from "./chunk-ZXX3MJRL.js";
+import "./chunk-57PSSEBR.js";
 import {
   loadConfigProviders,
   maskedKey,
@@ -33,18 +33,19 @@ import {
   normalizeKeys,
   nowIso,
   writeKeysBack
-} from "./chunk-ZYACRPLN.js";
+} from "./chunk-ZCXZGYO5.js";
 import {
   activeProfileConfigPath
-} from "./chunk-YMXXOOFN.js";
-import "./chunk-4BX2YDTQ.js";
+} from "./chunk-SPSHEZ46.js";
+import "./chunk-BIGSVBPI.js";
 import {
   restoreFlags
-} from "./chunk-CSAPOCBP.js";
-import "./chunk-DAKVBMD4.js";
+} from "./chunk-QC6CLAK7.js";
+import "./chunk-BCKVNORU.js";
 import {
   parseAuthFlags
-} from "./chunk-CJSHS2K7.js";
+} from "./chunk-75OLD563.js";
+import "./chunk-W23PY4IJ.js";
 
 // src/subcommands/handlers/auth.ts
 import { color as color6 } from "@wrongstack/core/utils";
@@ -748,4 +749,4 @@ async function runAuthRemove(deps, providerId) {
 export {
   authCmd
 };
-//# sourceMappingURL=auth-M6LXZTDA.js.map
+//# sourceMappingURL=auth-ANOVZVHE.js.map

package/dist/auto-discover-providers-V75ICIBG.js

@@ -0,0 +1,8 @@
+import {
+  discoverAndMergeProviders
+} from "./chunk-RBZVDWTL.js";
+import "./chunk-W23PY4IJ.js";
+export {
+  discoverAndMergeProviders
+};
+//# sourceMappingURL=auto-discover-providers-V75ICIBG.js.map

package/dist/{automation-MCDFCIMV.js → automation-O7ZRZSFS.js}

@@ -1,3 +1,4 @@
+import "./chunk-W23PY4IJ.js";
 
 // src/subcommands/handlers/automation.ts
 import { randomBytes } from "node:crypto";
@@ -38,7 +39,10 @@ async function resolveAutomationCredentialBundle(refs, paths, vault) {
     let config = profiles.get(ref.profile);
     if (!config) {
       config = decryptConfigSecrets(
-        JSON.parse(await readFile(paths.profileConfig(ref.profile), "utf8")),
+        // A leading UTF-8 BOM is valid (RFC 8259); the config loader accepts it.
+        JSON.parse(
+          (await readFile(paths.profileConfig(ref.profile), "utf8")).replace(/^\uFEFF/, "")
+        ),
         vault
       );
       profiles.set(ref.profile, config);
@@ -201,7 +205,10 @@ var automationCmd = async (args, deps) => {
         for (const ref of spec.credentials ?? []) {
           try {
             const profile = JSON.parse(
-              await readFile2(deps.paths.profileConfig(ref.profile), "utf8")
+              (await readFile2(deps.paths.profileConfig(ref.profile), "utf8")).replace(
+                /^\uFEFF/,
+                ""
+              )
             );
             const provider = profile.providers && Object.hasOwn(profile.providers, ref.provider) ? profile.providers[ref.provider] : void 0;
             const key = provider?.apiKeys?.find(
@@ -326,8 +333,17 @@ Token file: ${path.join(directory, "token.txt")}
           mode: 384
         })
       );
+      let lastTickError;
       while (!abort.signal.aborted) {
-        await service.tick();
+        try {
+          await service.tick();
+          lastTickError = void 0;
+        } catch (error) {
+          const message = toErrorMessage(error);
+          if (message !== lastTickError) deps.renderer.write(`automation: ${message}
+`);
+          lastTickError = message;
+        }
         await new Promise((resolve2) => {
           const done = () => {
             clearTimeout(timer);
@@ -366,4 +382,4 @@ Token file: ${path.join(directory, "token.txt")}
 export {
   automationCmd
 };
-//# sourceMappingURL=automation-MCDFCIMV.js.map
+//# sourceMappingURL=automation-O7ZRZSFS.js.map

package/dist/{bench-MMZHFHDL.js → bench-NDYES33Y.js}

@@ -1,6 +1,7 @@
 import {
   CLI_VERSION
-} from "./chunk-F5DCFAKI.js";
+} from "./chunk-HKMOIIPQ.js";
+import "./chunk-W23PY4IJ.js";
 
 // src/subcommands/handlers/bench.ts
 import * as fs from "node:fs/promises";
@@ -523,4 +524,4 @@ async function benchList(_args, deps) {
 export {
   benchCmd
 };
-//# sourceMappingURL=bench-MMZHFHDL.js.map
+//# sourceMappingURL=bench-NDYES33Y.js.map

package/dist/boot/governance-evidence-candidate.d.ts

@@ -1,2 +1,2 @@
-export { createGovernanceEvidenceCandidate, } from '@wrongstack/runtime/governance-bootstrap';
+export { createGovernanceEvidenceCandidate } from '@wrongstack/runtime/governance-bootstrap';
 //# sourceMappingURL=governance-evidence-candidate.d.ts.map

package/dist/boot/system-prompt-menu.d.ts

@@ -63,6 +63,11 @@ export declare function runSystemPromptMenu(deps: {
      * replaced silently — the gate still defaults to it.
      */
     suggestScout?: boolean | undefined;
+    /**
+     * `launch.rememberStartupChoices`: return the saved variant without the
+     * "Continue with …?" question. No effect on first run (nothing saved).
+     */
+    reuseLast?: boolean | undefined;
 }): Promise<SystemInstructionVariant>;
 /** Outcome of {@link maybeRunSystemPromptMenu}. */
 export interface SystemPromptMenuOutcome {
@@ -115,5 +120,7 @@ export declare function maybeRunSystemPromptMenu(opts: {
     persist?: typeof persistSystemPromptVariant | undefined;
     /** The launch folder is not a project — see `runSystemPromptMenu`. */
     outsideProject?: boolean | undefined;
+    /** Reuse the saved variant without asking — see `runSystemPromptMenu`. */
+    reuseLast?: boolean | undefined;
 }): Promise<SystemPromptMenuOutcome>;
 //# sourceMappingURL=system-prompt-menu.d.ts.map

package/dist/boot/tui-settings-adapter.d.ts

@@ -1,15 +1,3 @@
-/**
- * TUI Settings adapter — extracted from the runTui() options literal.
- *
- * Phase C step 1. The getSettings/saveSettings pair (~337 lines) reads
- * config from the ConfigStore and persists changes to disk. This module
- * owns both functions, receiving its dependencies through a typed context.
- *
- * `getSettings()` maps the full Config into the flat LiveSettingsInput
- * shape the TUI SettingsPicker consumes. `saveSettings()` does the
- * reverse: read → modify → encrypt → atomic-write for every section,
- * then syncs the in-memory store and applies live runtime effects.
- */
 import type { ConfigStore, FleetChatVerbosity, SecretVault } from '@wrongstack/core/types';
 import type { WstackPaths } from '@wrongstack/core/utils';
 import type { LiveSettingsInput } from '../live-settings-input.js';

package/dist/{boot-auto-thin-YMAZI3QL.js → boot-auto-thin-7D4OVEWA.js}

@@ -1,10 +1,11 @@
 import {
   persistConfigSetting
-} from "./chunk-KMU7GF7X.js";
+} from "./chunk-C2BBH4S4.js";
 import {
   activeProfileConfigPath
-} from "./chunk-YMXXOOFN.js";
-import "./chunk-4BX2YDTQ.js";
+} from "./chunk-SPSHEZ46.js";
+import "./chunk-BIGSVBPI.js";
+import "./chunk-W23PY4IJ.js";
 
 // src/boot/boot-auto-thin.ts
 import {
@@ -99,4 +100,4 @@ async function runBootAutoThin(deps) {
 export {
   runBootAutoThin
 };
-//# sourceMappingURL=boot-auto-thin-YMAZI3QL.js.map
+//# sourceMappingURL=boot-auto-thin-7D4OVEWA.js.map

package/dist/boot-provider-selection.d.ts

@@ -44,6 +44,15 @@ export declare function resolveBundledPromptsDir(): string | undefined;
  * warning + exit.
  */
 export declare function isHomeDirectory(cwd: string, userHome: string): boolean;
+/**
+ * `launch.rememberStartupChoices` (TUI Settings → "Reuse startup choices"):
+ * when on, the boot gates reuse the saved provider/model, system-prompt
+ * variant and mode/YOLO/autonomy without asking "Continue with these?".
+ * Unset means on; only an explicit `false` brings the questions back.
+ */
+export declare function shouldReuseStartupChoices(config: Pick<Config, 'launch'>): boolean;
+/** One dim line telling the user how to get the startup questions back. */
+export declare const REUSE_STARTUP_CHOICES_HINT = "(ask every launch: /settings reuse-startup-choices off)";
 /**
  * Determine whether the first-run YOLO disclosure notice should be printed
  * to stderr. Exported for testing.

package/dist/{chronicle-PBJS7BN6.js → chronicle-WBK3TJRB.js}

@@ -1,3 +1,4 @@
+import "./chunk-W23PY4IJ.js";
 
 // src/subcommands/handlers/chronicle.ts
 import { statSync } from "node:fs";
@@ -275,4 +276,4 @@ function tryStat(file) {
 export {
   chronicleCmd
 };
-//# sourceMappingURL=chronicle-PBJS7BN6.js.map
+//# sourceMappingURL=chronicle-WBK3TJRB.js.map

package/dist/{chunk-R4QGL6GB.js → chunk-2MV474XR.js}

@@ -7,4 +7,4 @@ import {
 export {
   createKanbanSupervisor
 };
-//# sourceMappingURL=chunk-R4QGL6GB.js.map
+//# sourceMappingURL=chunk-2MV474XR.js.map

package/dist/{chunk-AFOH6CHO.js → chunk-3EXRPTAU.js}

@@ -236,4 +236,4 @@ export {
   recordTimeseriesSignal,
   sanitizeApiError
 };
-//# sourceMappingURL=chunk-AFOH6CHO.js.map
+//# sourceMappingURL=chunk-3EXRPTAU.js.map

package/dist/{chunk-2EZ2DHOW.js → chunk-3R3OADC5.js}

@@ -1,6 +1,6 @@
 import {
   renderAuthLocalHelpToString
-} from "./chunk-YTEOAWOJ.js";
+} from "./chunk-ZXX3MJRL.js";
 
 // src/subcommands/handlers/per-subcommand-help.ts
 import { color as color3 } from "@wrongstack/core/utils";
@@ -1296,4 +1296,4 @@ export {
   subcommandsWithFocusedHelp,
   renderGenericHelp
 };
-//# sourceMappingURL=chunk-2EZ2DHOW.js.map
+//# sourceMappingURL=chunk-3R3OADC5.js.map

package/dist/{chunk-RKU66D2O.js → chunk-57PSSEBR.js}

@@ -113,4 +113,4 @@ export {
   hasApiKey,
   buildPickableProviders
 };
-//# sourceMappingURL=chunk-RKU66D2O.js.map
+//# sourceMappingURL=chunk-57PSSEBR.js.map

package/dist/{chunk-2CMMWRQH.js → chunk-5TRZZHMN.js}

@@ -1,6 +1,6 @@
 import {
   theme
-} from "./chunk-QD544J2B.js";
+} from "./chunk-JTTV2EVA.js";
 
 // src/boot/tool-restriction-flags.ts
 function parseToolList(flag, value) {
@@ -608,4 +608,4 @@ export {
   detectProjectFacts,
   renderAgentsTemplate
 };
-//# sourceMappingURL=chunk-2CMMWRQH.js.map
+//# sourceMappingURL=chunk-5TRZZHMN.js.map

package/dist/{chunk-RWNI5OWT.js → chunk-6KJU6POA.js}

@@ -1,9 +1,9 @@
 import {
   buildWin32CmdShimInvocation
-} from "./chunk-BHXAKTBE.js";
+} from "./chunk-C4654QI2.js";
 import {
   checkForUpdate
-} from "./chunk-DIOODAYM.js";
+} from "./chunk-H53EXXAU.js";
 
 // src/subcommands/handlers/update.ts
 import { spawn } from "node:child_process";
@@ -80,9 +80,9 @@ async function runUpdateCommand(args, deps) {
   }
   if (isStandaloneBinary()) {
     const [{ updateStandaloneBinary }, { standaloneUpdater }, { STANDALONE_TARGET }] = await Promise.all([
-      import("./standalone-update-HZHDZZOR.js"),
-      import("./standalone-auto-update-VQC4GYCM.js"),
-      import("./version-JB2UAV2A.js")
+      import("./standalone-update-6U4NP5MN.js"),
+      import("./standalone-auto-update-X5SK4M5B.js"),
+      import("./version-Q6KJ23GB.js")
     ]);
     const updater = standaloneUpdater({
       executable: realpathSync(process.execPath),
@@ -406,4 +406,4 @@ export {
   detectUpdatePackageManager,
   detectUpdatePackageName
 };
-//# sourceMappingURL=chunk-RWNI5OWT.js.map
+//# sourceMappingURL=chunk-6KJU6POA.js.map

package/dist/{chunk-AKESWZH5.js → chunk-6VPWQ4TG.js}

@@ -1,7 +1,7 @@
 import {
   API_VERSION,
   CLI_VERSION
-} from "./chunk-F5DCFAKI.js";
+} from "./chunk-HKMOIIPQ.js";
 
 // src/subcommands/handlers/version-help.ts
 import * as os from "node:os";
@@ -157,4 +157,4 @@ export {
   versionCmd,
   helpCmd
 };
-//# sourceMappingURL=chunk-AKESWZH5.js.map
+//# sourceMappingURL=chunk-6VPWQ4TG.js.map

package/dist/{chunk-CJSHS2K7.js → chunk-75OLD563.js}

@@ -311,4 +311,4 @@ export {
   parseAuthFlags,
   parseSpawnFlags
 };
-//# sourceMappingURL=chunk-CJSHS2K7.js.map
+//# sourceMappingURL=chunk-75OLD563.js.map

package/dist/{chunk-4UWCMBPG.js → chunk-76JE54WD.js}

@@ -1,10 +1,12 @@
+import {
+  WebSocket
+} from "./chunk-OZCYZYN2.js";
 import {
   CLI_VERSION
-} from "./chunk-F5DCFAKI.js";
+} from "./chunk-HKMOIIPQ.js";
 
 // src/hq-publisher.ts
 import { createHqPublisherFromEnv, resolveHqConfig } from "@wrongstack/core/hq";
-import { WebSocket } from "ws";
 
 // src/kanban-hq-sync.ts
 import {
@@ -413,9 +415,9 @@ function pruneExpiredTombstones(state, now) {
   return changed;
 }
 async function readState(projectRoot) {
+  const raw = await readKanbanMetadata(projectRoot, SYNC_STATE_KEY);
+  if (raw === null) return { boards: {}, tombstones: {} };
   try {
-    const raw = await readKanbanMetadata(projectRoot, SYNC_STATE_KEY);
-    if (raw === null) return { boards: {}, tombstones: {} };
     const parsed = JSON.parse(raw);
     return { boards: parsed.boards ?? {}, tombstones: parsed.tombstones ?? {} };
   } catch {
@@ -686,4 +688,4 @@ function startCliHqConnection(options) {
 export {
   startCliHqConnection
 };
-//# sourceMappingURL=chunk-4UWCMBPG.js.map
+//# sourceMappingURL=chunk-76JE54WD.js.map

package/dist/{chunk-7BNBD4PE.js → chunk-7IY2UTBE.js}

@@ -1,6 +1,6 @@
 import {
   loadManifest
-} from "./chunk-X4LW5CZM.js";
+} from "./chunk-UBDLNC3N.js";
 
 // src/project-picker.ts
 import { color } from "@wrongstack/core/utils";
@@ -415,4 +415,4 @@ export {
   skipDivider,
   runProjectPicker
 };
-//# sourceMappingURL=chunk-7BNBD4PE.js.map
+//# sourceMappingURL=chunk-7IY2UTBE.js.map

package/dist/{chunk-6Z6C6ZHH.js → chunk-AWRZWPJ3.js}

@@ -1,7 +1,7 @@
 import {
   terminalLink,
   terminalText
-} from "./chunk-HXJYHAR4.js";
+} from "./chunk-QVITQ425.js";
 import {
   MAX_AGENT_RINGS,
   MAX_TRANSCRIPT_SESSIONS,
@@ -24,10 +24,14 @@ import {
   sanitizeApiError,
   truncateHqSummary,
   writeInvalidBody
-} from "./chunk-AFOH6CHO.js";
+} from "./chunk-3EXRPTAU.js";
 import {
   createHqIpAllowlist
-} from "./chunk-Q7E3BPDU.js";
+} from "./chunk-OGVSKS4Q.js";
+import {
+  WebSocket,
+  WebSocketServer
+} from "./chunk-OZCYZYN2.js";
 
 // src/hq-server.ts
 import { randomUUID as randomUUID6 } from "node:crypto";
@@ -49,7 +53,7 @@ import {
   watchHqAuthFile
 } from "@wrongstack/core/hq";
 import { createCompatibilityTrustBoundary } from "@wrongstack/core/security";
-import { WebSocket as WebSocket4, WebSocketServer } from "ws";
+import { isPidAlive } from "@wrongstack/core/utils";
 
 // src/hq-recovery-html.ts
 var HQ_RECOVERY_HTML = `<!doctype html>
@@ -1685,7 +1689,6 @@ import { tokenHasCapability, validateHqCommand } from "@wrongstack/core/hq";
 
 // src/hq-server/snapshot.ts
 import { summarizeCommandLatency } from "@wrongstack/core/hq";
-import { WebSocket } from "ws";
 var HQ_SNAPSHOT_BROADCAST_DEBOUNCE_MS = 100;
 var HQ_SNAPSHOT_PERSIST_MIN_INTERVAL_MS = 3e3;
 var HQ_BROWSER_MAX_BUFFERED_BYTES = 32 * 1024 * 1024;
@@ -2889,8 +2892,8 @@ async function handleApiAgentMessages(req, res, match, agentMessages) {
 // src/hq-server/routes/system-handlers.ts
 async function handleApiSystemUpdate(res) {
   const [{ checkForUpdate }, { detectUpdatePackageName }] = await Promise.all([
-    import("./update-check-VLVT4IV2.js"),
-    import("./update-6OEPAEUV.js")
+    import("./update-check-JBGP4ZFI.js"),
+    import("./update-54W7GUS5.js")
   ]);
   const packageName = detectUpdatePackageName();
   const info = await checkForUpdate({ packageName });
@@ -3780,11 +3783,10 @@ function createHqServerShutdown(params) {
 
 // src/hq-server/socket-credentials.ts
 import { hqTokenKey as hqTokenKey2, isTokenExpired as isTokenExpired4 } from "@wrongstack/core/hq";
-import { WebSocket as WebSocket2 } from "ws";
 function createHqSocketCredentialEnforcer(state) {
   const closeSessionSockets = (sessionId, reason) => {
     for (const [browser, boundSessionId] of state.browserSocketSessions) {
-      if (boundSessionId === sessionId && browser.readyState === WebSocket2.OPEN) {
+      if (boundSessionId === sessionId && browser.readyState === WebSocket.OPEN) {
         browser.close(1008, reason);
       }
     }
@@ -3801,7 +3803,7 @@ function createHqSocketCredentialEnforcer(state) {
       const frame = JSON.stringify({ type: "hq.auth_revoked", revokedTokenKeys: keys });
       const revokedIds = new Set(ids);
       for (const ws of state.browsers) {
-        if (ws.readyState !== WebSocket2.OPEN) continue;
+        if (ws.readyState !== WebSocket.OPEN) continue;
         const sessionId = state.browserSocketSessions.get(ws);
         if (sessionId !== void 0) {
           const session = state.sessions.get(sessionId);
@@ -3817,7 +3819,7 @@ function createHqSocketCredentialEnforcer(state) {
       for (const [browser, key] of state.browserSocketTokenKeys ?? []) {
         const token = state.mutableAuth.browserTokenObjs.get(key);
         const live = state.mutableAuth.browserTokens.has(key) && token !== void 0 && !isTokenExpired4(token, now);
-        if (!live && browser.readyState === WebSocket2.OPEN) {
+        if (!live && browser.readyState === WebSocket.OPEN) {
           browser.close(1008, "Browser token expired or revoked");
         }
       }
@@ -3852,7 +3854,6 @@ import {
   tokenHasCapability as tokenHasCapability3
 } from "@wrongstack/core/hq";
 import { toErrorMessage as toErrorMessage2 } from "@wrongstack/core/utils";
-import { WebSocket as WebSocket3 } from "ws";
 
 // src/hq-server/sage-sync-send.ts
 import { chunkHqSageRecords } from "@wrongstack/core/hq";
@@ -4524,7 +4525,7 @@ function handleClient(ws, clients, browsers, eventLog, auth, snapshotBroadcaster
       for (const [otherWs, otherClient] of clients) {
         if (otherWs === ws || otherClient.clientId !== payload.client.clientId) continue;
         const otherTokenKey = otherClient.authToken === void 0 ? void 0 : hqTokenKey3(otherClient.authToken);
-        if (otherTokenKey !== helloTokenKey && otherWs.readyState === WebSocket3.OPEN) {
+        if (otherTokenKey !== helloTokenKey && otherWs.readyState === WebSocket.OPEN) {
           ws.close(4003, "clientId is held by another credential");
           return;
         }
@@ -4640,7 +4641,7 @@ function handleClient(ws, clients, browsers, eventLog, auth, snapshotBroadcaster
         }
         if (toSend.length > 0) {
           const batch = JSON.stringify({ type: "hq.command_batch", commands: toSend });
-          if (ws.readyState === WebSocket3.OPEN) ws.send(batch);
+          if (ws.readyState === WebSocket.OPEN) ws.send(batch);
           const dispatchedAt = Date.now();
           for (const cmd of toSend) {
             auditLog?.update(cmd.commandId, { status: "delivered", dispatchedAt });
@@ -5002,14 +5003,7 @@ async function startHqServerWithAuth(options, host, port, dataDir, firstRunAuth)
           const metadataPath = path8.join(projectDir, ".mailbox-server.json");
           const ownerPid = await fs4.readFile(metadataPath, "utf8").then((raw) => JSON.parse(raw).pid).catch(() => void 0);
           if (ownerPid === void 0) return;
-          let ownerAlive = false;
-          try {
-            process.kill(ownerPid, 0);
-            ownerAlive = true;
-          } catch {
-            ownerAlive = false;
-          }
-          if (!ownerAlive) {
+          if (!isPidAlive(ownerPid)) {
             await fs4.rm(metadataPath, { force: true }).catch(() => {
             });
             return;
@@ -5031,7 +5025,7 @@ async function startHqServerWithAuth(options, host, port, dataDir, firstRunAuth)
         const msg = toAlertMessage(alert);
         const data = JSON.stringify(msg);
         for (const ws of browsers) {
-          if (ws.readyState === WebSocket4.OPEN) ws.send(data);
+          if (ws.readyState === WebSocket.OPEN) ws.send(data);
         }
       },
       onPersist: (alert) => persistence.alertLog.append(alert)
@@ -5153,7 +5147,7 @@ async function startHqServerWithAuth(options, host, port, dataDir, firstRunAuth)
     const closeSocketsOfRemovedSessions = (before) => {
       for (const [browser, sessionId] of browserSocketSessions) {
         if (!before.has(sessionId) || sessions.has(sessionId)) continue;
-        if (browser.readyState === WebSocket4.OPEN) {
+        if (browser.readyState === WebSocket.OPEN) {
           browser.close(1008, "Browser session revoked");
         }
       }
@@ -5171,7 +5165,7 @@ async function startHqServerWithAuth(options, host, port, dataDir, firstRunAuth)
         serverTime: (/* @__PURE__ */ new Date()).toISOString()
       });
       for (const browser of browsers) {
-        if (browser.readyState === WebSocket4.OPEN) browser.send(heartbeat);
+        if (browser.readyState === WebSocket.OPEN) browser.send(heartbeat);
       }
     }, options.browserHeartbeatIntervalMs ?? BROWSER_HEARTBEAT_INTERVAL_MS);
     browserHeartbeatTimer.unref?.();
@@ -5367,4 +5361,4 @@ export {
   startHqServer,
   HqInsecureExposureError2 as HqInsecureExposureError
 };
-//# sourceMappingURL=chunk-6Z6C6ZHH.js.map
+//# sourceMappingURL=chunk-AWRZWPJ3.js.map

package/dist/{chunk-TXAFIERF.js → chunk-BAWRRA6O.js}

@@ -1,7 +1,7 @@
 import {
   loadConfigProviders,
   mutateConfigProviders
-} from "./chunk-ZYACRPLN.js";
+} from "./chunk-ZCXZGYO5.js";
 
 // src/provider-cloud-config.ts
 import {
@@ -34,4 +34,4 @@ async function providerCloudConfig(id, updates, configPath, vault) {
 export {
   providerCloudConfig
 };
-//# sourceMappingURL=chunk-TXAFIERF.js.map
+//# sourceMappingURL=chunk-BAWRRA6O.js.map

package/dist/{chunk-DAKVBMD4.js → chunk-BCKVNORU.js}

@@ -33,4 +33,4 @@ function openBrowser(url) {
 export {
   openBrowser
 };
-//# sourceMappingURL=chunk-DAKVBMD4.js.map
+//# sourceMappingURL=chunk-BCKVNORU.js.map