@wrongstack/cli 1.0.6 → 1.0.7

package/dist/{webui-server-OBV5JYJV.js → webui-server-3NYXBZHX.js}

@@ -1,14 +1,14 @@
-import {
-  createHqCommandDispatcher,
-  createProjectKanbanAssignHandler,
-  createProjectKanbanTransitionHandler
-} from "./chunk-KNMIBKLV.js";
 import {
   createKanbanRunMirror
 } from "./chunk-VCYZ3WZV.js";
 import {
   WEBUI_SESSION_CHILD_CAPABILITIES
 } from "./chunk-GPPRNAKW.js";
+import {
+  createHqCommandDispatcher,
+  createProjectKanbanAssignHandler,
+  createProjectKanbanTransitionHandler
+} from "./chunk-JY52HWL6.js";
 import {
   startCliHqConnection
 } from "./chunk-TE3Q32JP.js";
@@ -37,6 +37,7 @@ import {
   envFlag,
   findFreePort,
   findInstalledPackageJson,
+  integrationConnectSources,
   isStrictPort,
   resolveAuthToken,
   resolvePendingConfirmsForSession,
@@ -47,8 +48,8 @@ import {
   startWebUILiveStatusLogger,
   toSessionHistoryEntries
 } from "@wrongstack/webui-server";
-import { WebSocketServer } from "ws";
 import { verifyClient as verifyWsClient2 } from "@wrongstack/webui-server/server/ws-auth";
+import { WebSocketServer } from "ws";
 
 // src/webui-server/client-registration.ts
 import { mailboxSessionTag } from "@wrongstack/core/coordination";
@@ -69,10 +70,13 @@ function createWebuiClientRegistration(deps) {
       capabilities: options.capabilities
     }),
     ...control ? {
-      createCommandHandler: (mailbox) => createHqCommandDispatcher({
+      createCommandHandler: (mailbox, approvals) => createHqCommandDispatcher({
         steerMailbox: mailbox,
         interruptLeader: control.interruptLeader,
         allowRunCommand: control.allowRunCommand,
+        // Same registry the approval bridge publishes from, so every
+        // prompt HQ shows is one this handler can actually answer.
+        resolveApproval: (toolUseId, decision, sessionId) => approvals.resolve(toolUseId, decision, sessionId),
         ...deps.projectRoot ? {
           kanbanTransition: createProjectKanbanTransitionHandler(deps.projectRoot),
           kanbanAssign: createProjectKanbanAssignHandler(deps.projectRoot)
@@ -294,7 +298,7 @@ function startWebuiCredentialWatcher({
         }
       } catch {
       }
-      const routingChanged = snapshot.fallbackModels !== void 0 || snapshot.fallbackBridge !== void 0 || hadFallbackBridge || snapshot.fallbackProfiles !== void 0 || snapshot.favoriteModels !== void 0 || snapshot.favoriteModelsOnly !== void 0 || snapshot.modelMatrix !== void 0 || snapshot.fallbackAuto !== void 0;
+      const routingChanged = snapshot.fallbackModels !== void 0 || snapshot.fallbackBridge !== void 0 || hadFallbackBridge || snapshot.fallbackProfiles !== void 0 || snapshot.favoriteModels !== void 0 || snapshot.disabledModels !== void 0 || snapshot.favoriteModelsOnly !== void 0 || snapshot.modelMatrix !== void 0 || snapshot.fallbackAuto !== void 0;
       if (routingChanged) {
         const configStore = opts.agent.container?.safeResolve?.(TOKENS.ConfigStore);
         configStore?.update({
@@ -302,6 +306,7 @@ function startWebuiCredentialWatcher({
           fallbackBridge: snapshot.fallbackBridge ?? "",
           ...snapshot.fallbackProfiles !== void 0 ? { fallbackProfiles: snapshot.fallbackProfiles } : {},
           ...snapshot.favoriteModels !== void 0 ? { favoriteModels: snapshot.favoriteModels } : {},
+          ...snapshot.disabledModels !== void 0 ? { disabledModels: snapshot.disabledModels } : {},
           ...snapshot.favoriteModelsOnly !== void 0 ? { favoriteModelsOnly: snapshot.favoriteModelsOnly } : {},
           ...snapshot.modelMatrix !== void 0 ? { modelMatrix: snapshot.modelMatrix } : {},
           ...snapshot.fallbackAuto !== void 0 ? { fallbackAuto: snapshot.fallbackAuto } : {}
@@ -782,6 +787,12 @@ function createPrefsSeeding(opts) {
     opts.appConfig = { ...opts.appConfig, ...patch };
   };
   const persistPrefs = async (payload) => {
+    if (typeof payload["provider"] === "string") {
+      patchLiveAppConfig({ provider: payload["provider"] });
+    }
+    if (typeof payload["model"] === "string") {
+      patchLiveAppConfig({ model: payload["model"] });
+    }
     if (Array.isArray(payload["fallbackModels"])) {
       patchLiveAppConfig({ fallbackModels: payload["fallbackModels"] });
     }
@@ -793,6 +804,9 @@ function createPrefsSeeding(opts) {
     if (Array.isArray(payload["favoriteModels"])) {
       patchLiveAppConfig({ favoriteModels: payload["favoriteModels"] });
     }
+    if (Array.isArray(payload["disabledModels"])) {
+      patchLiveAppConfig({ disabledModels: payload["disabledModels"] });
+    }
     if (typeof payload["favoriteModelsOnly"] === "boolean") {
       patchLiveAppConfig({ favoriteModelsOnly: payload["favoriteModelsOnly"] });
     }
@@ -852,7 +866,9 @@ function createPrefsSeeding(opts) {
 // src/webui-server/route-contexts.ts
 import * as path5 from "node:path";
 import {
+  normalizeSubagentModelPlan,
   seedSessionSubagentPolicy,
+  setSessionSubagentModelPlan,
   setSessionSubagentsAllowed
 } from "@wrongstack/core/coordination";
 import { TOKENS as TOKENS2 } from "@wrongstack/core/kernel";
@@ -980,6 +996,10 @@ function createWebuiRouteContexts({
       sessionId ? getSessionAgent(sessionId).ctx : opts.agent.ctx,
       allowed
     ),
+    setSubagentModelPlan: (plan, sessionId) => setSessionSubagentModelPlan(
+      sessionId ? getSessionAgent(sessionId).ctx : opts.agent.ctx,
+      normalizeSubagentModelPlan(plan)
+    ),
     persist: persistPrefs,
     setYolo: opts.onYoloSwitch,
     setAutonomy: opts.onAutonomySwitch,
@@ -1101,6 +1121,7 @@ function createWebuiRouteContexts({
   };
   const connectionCtx = {
     agent: opts.agent,
+    events: opts.events,
     getAgent: getSessionAgent,
     // Non-creating peek for the hasSession ownership gate (background-tab
     // requests are legitimate; arbitrary strings are not).
@@ -1499,6 +1520,10 @@ async function runWebUI(opts) {
     requireToken,
     deferListen: surface === "simpleui",
     strictPort,
+    // HQ / WrongProxy status chips fetch those endpoints straight from the
+    // browser; without their origins in `connect-src` the page's own CSP
+    // blocks the probe and both chips report a healthy server as down.
+    getExtraConnectSrc: () => integrationConnectSources(opts.appConfig),
     ...opts.getVectorMemoryStore ? { getVectorMemoryStore: opts.getVectorMemoryStore } : {},
     ...opts.vectorMemoryModelCacheDir ? { vectorMemoryModelCacheDir: opts.vectorMemoryModelCacheDir } : {}
   });
@@ -1511,9 +1536,7 @@ async function runWebUI(opts) {
     wsHost: host,
     expectedToken: wsToken,
     requireToken,
-    allowedHostnames: [publicUrl, publicWsUrl].filter(
-      (value) => Boolean(value)
-    ),
+    allowedHostnames: [publicUrl, publicWsUrl].filter((value) => Boolean(value)),
     allowBrowserUrlToken: Boolean(publicWsUrl),
     allowCrossPortLoopbackCookie: process.env["WRONGSTACK_WEBUI_DEV_CROSS_PORT_WS"] === "1"
   });
@@ -1648,6 +1671,7 @@ async function runWebUI(opts) {
     ),
     modelsRegistry: opts.modelsRegistry,
     providerAuthRegistry: opts.providerAuthRegistry,
+    getDisabledModels: () => opts.appConfig?.disabledModels ?? [],
     send,
     broadcast,
     log: (m) => console.log(m)
@@ -1974,4 +1998,4 @@ async function runWebUI(opts) {
 export {
   runWebUI
 };
-//# sourceMappingURL=webui-server-OBV5JYJV.js.map
+//# sourceMappingURL=webui-server-3NYXBZHX.js.map

package/dist/wiring/hq-telemetry.d.ts

@@ -5,6 +5,7 @@ import type { Config, SessionWriter } from '@wrongstack/core/types';
 import type { MCPRegistry } from '@wrongstack/mcp';
 import { createHqCommandDispatcher, type HqCommandController } from '../hq-command-controller.js';
 import type { KanbanHqSyncStats } from '../kanban-hq-sync.js';
+import type { ApprovalMirrorRef } from '../permission-prompt-mirror.js';
 /**
  * Mutable holder for the HQ publisher reference. The ref is created in
  * cli-main.ts before `brainMailbox` (which captures it via closure) and
@@ -28,6 +29,12 @@ interface SetupHqTelemetryDeps {
     teardownHandlers: (() => void)[];
     mailboxSessionTag: (sessionId: string) => string;
     hqPublisherRef: HqPublisherRef;
+    /**
+     * Late-bound handle the plain REPL's prompt delegate reads through. Populated
+     * here because this is where the registry is created; until then the REPL
+     * prompt simply runs unmirrored.
+     */
+    approvalMirror?: ApprovalMirrorRef | undefined;
     mcpRegistry: Pick<MCPRegistry, 'onOperation' | 'operationalHealth'>;
 }
 interface HqTelemetryResult {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/cli",
-  "version": "1.0.6",
+  "version": "1.0.7",
   "license": "MIT",
   "description": "WrongStack CLI — terminal AI coding agent with provider catalog from models.dev. Provides `wrongstack` and `wstack` binaries.",
   "keywords": [
@@ -41,36 +41,36 @@
     "data"
   ],
   "dependencies": {
-    "@wrongstack/acp": "1.0.6",
-    "@wrongstack/bench": "1.0.6",
-    "@wrongstack/core": "1.0.6",
-    "@wrongstack/primitives": "1.0.6",
-    "@wrongstack/kanban": "1.0.6",
-    "@wrongstack/mcp": "1.0.6",
-    "@wrongstack/persistence": "1.0.6",
-    "@wrongstack/plug-lsp": "1.0.6",
-    "@wrongstack/plugins": "1.0.6",
-    "@wrongstack/providers": "1.0.6",
-    "@wrongstack/requirement-intake": "1.0.6",
-    "@wrongstack/runtime": "1.0.6",
-    "@wrongstack/sage": "1.0.6",
-    "@wrongstack/sdd": "1.0.6",
-    "@wrongstack/security-scanner": "1.0.6",
-    "@wrongstack/simpleui": "1.0.6",
-    "@wrongstack/techstack": "1.0.6",
-    "@wrongstack/telegram": "1.0.6",
-    "@wrongstack/tools": "1.0.6",
-    "@wrongstack/tui": "1.0.6",
-    "@wrongstack/vector-memory": "1.0.6",
-    "@wrongstack/webui": "1.0.6",
-    "@wrongstack/webui-hq": "1.0.6",
-    "@wrongstack/webui-protocol": "1.0.6",
-    "@wrongstack/wrongtrace": "1.0.6",
-    "@wrongstack/webui-server": "1.0.6",
+    "@wrongstack/acp": "1.0.7",
+    "@wrongstack/bench": "1.0.7",
+    "@wrongstack/core": "1.0.7",
+    "@wrongstack/primitives": "1.0.7",
+    "@wrongstack/kanban": "1.0.7",
+    "@wrongstack/mcp": "1.0.7",
+    "@wrongstack/persistence": "1.0.7",
+    "@wrongstack/plug-lsp": "1.0.7",
+    "@wrongstack/plugins": "1.0.7",
+    "@wrongstack/providers": "1.0.7",
+    "@wrongstack/requirement-intake": "1.0.7",
+    "@wrongstack/runtime": "1.0.7",
+    "@wrongstack/sage": "1.0.7",
+    "@wrongstack/sdd": "1.0.7",
+    "@wrongstack/security-scanner": "1.0.7",
+    "@wrongstack/simpleui": "1.0.7",
+    "@wrongstack/techstack": "1.0.7",
+    "@wrongstack/telegram": "1.0.7",
+    "@wrongstack/tools": "1.0.7",
+    "@wrongstack/tui": "1.0.7",
+    "@wrongstack/vector-memory": "1.0.7",
+    "@wrongstack/webui": "1.0.7",
+    "@wrongstack/webui-hq": "1.0.7",
+    "@wrongstack/webui-protocol": "1.0.7",
+    "@wrongstack/wrongtrace": "1.0.7",
+    "@wrongstack/webui-server": "1.0.7",
     "ws": "^8.21.3"
   },
   "optionalDependencies": {
-    "@wrongstack/desktop": "1.0.6"
+    "@wrongstack/desktop": "1.0.7"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",