@wrongstack/cli 1.1.2 → 1.1.5

package/dist/{auth-ANOVZVHE.js → auth-2ZG5DBHS.js}

@@ -20,7 +20,7 @@ import {
   runOAuthLoginKind,
   runOAuthLoginMenu,
   validateFamily
-} from "./chunk-RAWHRRUJ.js";
+} from "./chunk-MKMM5RIW.js";
 import {
   renderAuthLocalHelpToString,
   wantsLocalHelp
@@ -37,29 +37,20 @@ import {
 import {
   activeProfileConfigPath
 } from "./chunk-SPSHEZ46.js";
-import "./chunk-BIGSVBPI.js";
+import "./chunk-KNYIEQAY.js";
 import {
   restoreFlags
 } from "./chunk-QC6CLAK7.js";
 import "./chunk-BCKVNORU.js";
 import {
   parseAuthFlags
-} from "./chunk-75OLD563.js";
+} from "./chunk-M7PSENGF.js";
 import "./chunk-W23PY4IJ.js";
 
 // src/subcommands/handlers/auth.ts
-import { color as color6 } from "@wrongstack/core/utils";
+import { color as color5 } from "@wrongstack/core/utils";
 import { authProfileAliasError as authProfileAliasError2 } from "@wrongstack/providers";
-
-// src/auth-menu/anthropic-oauth.ts
-import {
-  FetchError,
-  ParseError
-} from "@wrongstack/core/types";
-import { color } from "@wrongstack/core/utils";
-var REDIRECT_PORT = 53692;
-var REDIRECT_PATH = "/callback";
-var REDIRECT_URI = `http://localhost:${REDIRECT_PORT}${REDIRECT_PATH}`;
+import { retiredProviderAuthLoginHint } from "@wrongstack/providers/oauth";
 
 // src/auth-menu/direct.ts
 import { authProfileAliasError } from "@wrongstack/providers";
@@ -142,16 +133,16 @@ async function runAuthDirect(deps, opts) {
 
 // src/auth-menu/github-copilot-oauth.ts
 import {
-  FetchError as FetchError2,
-  ParseError as ParseError2
+  FetchError,
+  ParseError
 } from "@wrongstack/core/types";
-import { color as color2 } from "@wrongstack/core/utils";
+import { color } from "@wrongstack/core/utils";
 import { copilotBaseUrlFromToken, refreshCopilotToken } from "@wrongstack/providers";
 import { fetchCopilotModels as fetchAccountCopilotModels } from "@wrongstack/providers/oauth";
 import { isUsableCopilotChatModel } from "@wrongstack/providers/oauth";
 
 // src/auth-menu/openai-codex-oauth.ts
-import { color as color3 } from "@wrongstack/core/utils";
+import { color as color2 } from "@wrongstack/core/utils";
 import {
   buildCodexAuthorizeUrl,
   CODEX_BASE_URL,
@@ -187,10 +178,10 @@ import {
 } from "@wrongstack/providers/oauth";
 
 // src/auth-menu/top-menu.ts
-import { color as color5 } from "@wrongstack/core/utils";
+import { color as color4 } from "@wrongstack/core/utils";
 
 // src/auth-menu/provider-menu.ts
-import { color as color4, expectDefined } from "@wrongstack/core/utils";
+import { color as color3, expectDefined } from "@wrongstack/core/utils";
 async function manageProvider(providerId, deps) {
   for (; ; ) {
     const providers = await loadProviders(deps);
@@ -203,7 +194,7 @@ async function manageProvider(providerId, deps) {
     renderProviderHeader(deps.renderer, providerId, cfg);
     renderActions(deps.renderer, keys.length);
     const raw = (await deps.reader.readLine(`
-${color4.amber("?")} ${providerId} > `)).trim();
+${color3.amber("?")} ${providerId} > `)).trim();
     if (!raw || raw === "b" || raw === "back" || raw === "q" || raw === "quit") {
       return;
     }
@@ -234,7 +225,7 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
         },
         deps.profileConfigPath
       );
-      deps.renderer.write(`  ${color4.green("\u2713")} Removed ${providerId}.
+      deps.renderer.write(`  ${color3.green("\u2713")} Removed ${providerId}.
 `);
       return "exit";
     }
@@ -258,7 +249,7 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
       },
       deps.profileConfigPath
     );
-    deps.renderer.write(`  ${color4.green("\u2713")} Updated ${providerId}/${target.label}.
+    deps.renderer.write(`  ${color3.green("\u2713")} Updated ${providerId}/${target.label}.
 `);
     return "continue";
   }
@@ -285,7 +276,7 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
       },
       deps.profileConfigPath
     );
-    deps.renderer.write(`  ${color4.green("\u2713")} Deleted ${providerId}/${target.label}.
+    deps.renderer.write(`  ${color3.green("\u2713")} Deleted ${providerId}/${target.label}.
 `);
     return "continue";
   }
@@ -304,14 +295,14 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
       },
       deps.profileConfigPath
     );
-    deps.renderer.write(`  ${color4.green("\u2713")} Active key \u2192 ${color4.bold(target.label)}.
+    deps.renderer.write(`  ${color3.green("\u2713")} Active key \u2192 ${color3.bold(target.label)}.
 `);
     return "continue";
   }
   if (verb === "f" || verb === "family") {
     const current = cfg.family ?? "";
     const ans = (await deps.reader.readLine(
-      `  ${color4.amber("?")} Family ${color4.dim(`(anthropic | openai | openai-compatible | google, empty = unset, current: ${current || "unset"})`)}: `
+      `  ${color3.amber("?")} Family ${color3.dim(`(anthropic | openai | openai-compatible | google, empty = unset, current: ${current || "unset"})`)}: `
     )).trim();
     if (ans !== "") {
       const validated = validateFamily(ans);
@@ -331,7 +322,7 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
         },
         deps.profileConfigPath
       );
-      deps.renderer.write(`  ${color4.green("\u2713")} family \u2192 ${validated}
+      deps.renderer.write(`  ${color3.green("\u2713")} family \u2192 ${validated}
 `);
     } else {
       await mutateConfigProviders(
@@ -344,7 +335,7 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
         },
         deps.profileConfigPath
       );
-      deps.renderer.write(`  ${color4.green("\u2713")} family \u2192 (unset)
+      deps.renderer.write(`  ${color3.green("\u2713")} family \u2192 (unset)
 `);
     }
     return "continue";
@@ -352,7 +343,7 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
   if (verb === "B" || verb === "baseurl" || verb === "base-url" || verb === "url") {
     const current = cfg.baseUrl ?? "";
     const ans = (await deps.reader.readLine(
-      `  ${color4.amber("?")} Base URL ${color4.dim(`(empty = unset, current: ${current || "unset"})`)}: `
+      `  ${color3.amber("?")} Base URL ${color3.dim(`(empty = unset, current: ${current || "unset"})`)}: `
     )).trim();
     await mutateConfigProviders(
       deps.profileConfigPath,
@@ -365,14 +356,14 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
       },
       deps.profileConfigPath
     );
-    deps.renderer.write(`  ${color4.green("\u2713")} baseUrl \u2192 ${ans || "(unset)"}
+    deps.renderer.write(`  ${color3.green("\u2713")} baseUrl \u2192 ${ans || "(unset)"}
 `);
     return "continue";
   }
   if (verb === "m" || verb === "models") {
     const current = (cfg.models ?? []).join(", ");
     const ans = (await deps.reader.readLine(
-      `  ${color4.amber("?")} Model ids ${color4.dim(`(comma-separated, empty = catalog default, current: ${current || "none"})`)}: `
+      `  ${color3.amber("?")} Model ids ${color3.dim(`(comma-separated, empty = catalog default, current: ${current || "none"})`)}: `
     )).trim();
     const list = ans ? ans.split(",").map((s) => s.trim()).filter(Boolean) : [];
     await mutateConfigProviders(
@@ -387,7 +378,7 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
       deps.profileConfigPath
     );
     deps.renderer.write(
-      `  ${color4.green("\u2713")} models \u2192 ${list.length === 0 ? "(catalog default)" : list.join(", ")}
+      `  ${color3.green("\u2713")} models \u2192 ${list.length === 0 ? "(catalog default)" : list.join(", ")}
 `
     );
     return "continue";
@@ -410,9 +401,9 @@ async function runTopMenu(deps) {
     renderTopMenu(deps.renderer, providers);
     const ids = Object.keys(providers).sort();
     const choice = (await deps.reader.readLine(`
-${color5.amber("?")} Pick: `)).trim().toLowerCase();
+${color4.amber("?")} Pick: `)).trim().toLowerCase();
     if (!choice || choice === "q" || choice === "quit" || choice === "exit") {
-      deps.renderer.write(color5.dim("Done.\n"));
+      deps.renderer.write(color4.dim("Done.\n"));
       return 0;
     }
     if (choice === "a" || choice === "add") {
@@ -589,17 +580,22 @@ var authCmd = async (args, deps) => {
   if (first === "login") {
     const pid = (flags.positional[1] ?? "").toLowerCase();
     if (!pid) return runOAuthLoginKind(menuDeps, "chatgpt", { providerId: flags.alias });
+    const retiredHint = retiredProviderAuthLoginHint(pid);
+    if (retiredHint) {
+      deps.renderer.writeError(retiredHint);
+      return 1;
+    }
     const kind = resolveOAuthKind(pid, { allowNumeric: false, deps: menuDeps });
     if (kind) return runOAuthLoginKind(menuDeps, kind, { providerId: flags.alias });
     const available = providerAuthStrategiesFor(menuDeps);
     deps.renderer.writeError(`Unknown OAuth login strategy "${pid}".`);
     for (const strategy of available) {
       deps.renderer.write(
-        color6.dim(`  Sign in with ${strategy.label}: `) + color6.bold(`wstack auth login ${strategy.id}`) + "\n"
+        color5.dim(`  Sign in with ${strategy.label}: `) + color5.bold(`wstack auth login ${strategy.id}`) + "\n"
       );
     }
     deps.renderer.write(
-      color6.dim("  For an API key instead: ") + color6.bold(`wstack auth ${pid}`) + "\n"
+      color5.dim("  For an API key instead: ") + color5.bold(`wstack auth ${pid}`) + "\n"
     );
     return 1;
   }
@@ -623,14 +619,14 @@ async function runAuthList(deps) {
   const ids = Object.keys(providers).sort();
   if (ids.length === 0) {
     deps.renderer.write(
-      `${color6.dim("No providers configured.")}
-${color6.dim("Run")} ${color6.bold("wstack auth")} ${color6.dim("to add one.")}
+      `${color5.dim("No providers configured.")}
+${color5.dim("Run")} ${color5.bold("wstack auth")} ${color5.dim("to add one.")}
 `
     );
     return 0;
   }
   deps.renderer.write(`
-${color6.bold("Saved providers")} ${color6.dim(`(${ids.length})`)}
+${color5.bold("Saved providers")} ${color5.dim(`(${ids.length})`)}
 
 `);
   for (const id of ids) {
@@ -638,34 +634,34 @@ ${color6.bold("Saved providers")} ${color6.dim(`(${ids.length})`)}
     if (!cfg) continue;
     const keys = normalizeKeys(cfg);
     const active = cfg.activeKey ?? keys[0]?.label;
-    const famTag = cfg.family ? `${cfg.family}` : color6.amber("no-family");
-    const aliasHint = cfg.type && cfg.type !== id ? color6.dim(` (\u2192 ${cfg.type})`) : "";
-    const modelHint = cfg.models && cfg.models.length > 0 ? color6.dim(` [${cfg.models.length} models]`) : "";
-    deps.renderer.write(`  ${color6.bold(id)}${aliasHint}
+    const famTag = cfg.family ? `${cfg.family}` : color5.amber("no-family");
+    const aliasHint = cfg.type && cfg.type !== id ? color5.dim(` (\u2192 ${cfg.type})`) : "";
+    const modelHint = cfg.models && cfg.models.length > 0 ? color5.dim(` [${cfg.models.length} models]`) : "";
+    deps.renderer.write(`  ${color5.bold(id)}${aliasHint}
 `);
     deps.renderer.write(
-      `    family:  ${famTag}  baseUrl: ${cfg.baseUrl ?? color6.dim("unset")}${modelHint}
+      `    family:  ${famTag}  baseUrl: ${cfg.baseUrl ?? color5.dim("unset")}${modelHint}
 `
     );
     if (keys.length === 0) {
-      deps.renderer.write(`    ${color6.amber("no keys")}
+      deps.renderer.write(`    ${color5.amber("no keys")}
 `);
     } else {
       deps.renderer.write(
-        `    ${color6.dim(`${keys.length} key${keys.length === 1 ? "" : "s"}:`)}
+        `    ${color5.dim(`${keys.length} key${keys.length === 1 ? "" : "s"}:`)}
 `
       );
       for (const k of keys) {
-        const marker = k.label === active ? color6.green("\u25CF") : color6.dim("\u25CB");
+        const marker = k.label === active ? color5.green("\u25CF") : color5.dim("\u25CB");
         deps.renderer.write(
-          `      ${marker} ${k.label.padEnd(18)} ${maskedKey(k.apiKey)}  ${color6.dim(k.createdAt)}
+          `      ${marker} ${k.label.padEnd(18)} ${maskedKey(k.apiKey)}  ${color5.dim(k.createdAt)}
 `
         );
       }
     }
     deps.renderer.write("\n");
   }
-  deps.renderer.write(color6.dim(`Manage: wstack auth   Add key: wstack auth <provider>
+  deps.renderer.write(color5.dim(`Manage: wstack auth   Add key: wstack auth <provider>
 `));
   return 0;
 }
@@ -681,7 +677,7 @@ async function runAuthStatus(deps, providerId) {
   if (!cfg) {
     deps.renderer.writeError(`Provider "${providerId}" not found in config.`);
     deps.renderer.write(
-      color6.dim(`Run ${color6.bold("wstack auth list")} to see saved providers.
+      color5.dim(`Run ${color5.bold("wstack auth list")} to see saved providers.
 `)
     );
     return 1;
@@ -690,32 +686,32 @@ async function runAuthStatus(deps, providerId) {
   const active = cfg.activeKey ?? keys[0]?.label;
   const lines = [
     `
-${color6.bold(providerId)} ${cfg.family ? color6.dim(`[${cfg.family}]`) : color6.amber("[no family]")}`,
+${color5.bold(providerId)} ${cfg.family ? color5.dim(`[${cfg.family}]`) : color5.amber("[no family]")}`,
     "",
-    `  type:    ${color6.cyan(cfg.type ?? providerId)}`,
-    `  family:  ${cfg.family ? color6.cyan(cfg.family) : color6.dim("unset")}`,
-    `  baseUrl: ${cfg.baseUrl ? color6.cyan(cfg.baseUrl) : color6.dim("unset")}`
+    `  type:    ${color5.cyan(cfg.type ?? providerId)}`,
+    `  family:  ${cfg.family ? color5.cyan(cfg.family) : color5.dim("unset")}`,
+    `  baseUrl: ${cfg.baseUrl ? color5.cyan(cfg.baseUrl) : color5.dim("unset")}`
   ];
   if (cfg.models?.length) {
-    lines.push(`  models:  ${color6.cyan(cfg.models.join(", "))}`);
+    lines.push(`  models:  ${color5.cyan(cfg.models.join(", "))}`);
   }
   if (cfg.envVars?.length) {
-    lines.push(`  envVars: ${color6.cyan(cfg.envVars.join(", "))}`);
+    lines.push(`  envVars: ${color5.cyan(cfg.envVars.join(", "))}`);
   }
   lines.push("");
   if (keys.length === 0) {
-    lines.push(color6.amber("  (no keys saved)"));
+    lines.push(color5.amber("  (no keys saved)"));
   } else {
-    lines.push(`  ${color6.dim("Keys:")}`);
+    lines.push(`  ${color5.dim("Keys:")}`);
     for (const k of keys) {
-      const marker = k.label === active ? color6.green("\u25CF") : color6.dim("\u25CB");
+      const marker = k.label === active ? color5.green("\u25CF") : color5.dim("\u25CB");
       lines.push(
-        `    ${marker} ${color6.bold(k.label.padEnd(18))} ${maskedKey(k.apiKey)}  ${color6.dim(k.createdAt)}`
+        `    ${marker} ${color5.bold(k.label.padEnd(18))} ${maskedKey(k.apiKey)}  ${color5.dim(k.createdAt)}`
       );
     }
   }
   lines.push("");
-  lines.push(color6.dim(`Manage: wstack auth \u2192 pick ${providerId}`));
+  lines.push(color5.dim(`Manage: wstack auth \u2192 pick ${providerId}`));
   deps.renderer.write(lines.join("\n") + "\n");
   return 0;
 }
@@ -726,19 +722,19 @@ async function runAuthRemove(deps, providerId) {
     return 1;
   }
   deps.renderer.write(
-    `${color6.amber("!")} This will remove "${providerId}" and all its saved keys.
+    `${color5.amber("!")} This will remove "${providerId}" and all its saved keys.
 `
   );
-  const answer = (await deps.reader.readLine(`  ${color6.amber("?")} Confirm removal? ${color6.dim("[y/N]")} `)).trim().toLowerCase();
+  const answer = (await deps.reader.readLine(`  ${color5.amber("?")} Confirm removal? ${color5.dim("[y/N]")} `)).trim().toLowerCase();
   if (answer !== "y" && answer !== "yes") {
-    deps.renderer.write(color6.dim("Cancelled.\n"));
+    deps.renderer.write(color5.dim("Cancelled.\n"));
     return 0;
   }
   try {
     await mutateConfigProviders(deps.profileConfigPath, deps.vault, (all) => {
       delete all[providerId];
     });
-    deps.renderer.write(`  ${color6.green("\u2713")} Removed ${color6.bold(providerId)}.
+    deps.renderer.write(`  ${color5.green("\u2713")} Removed ${color5.bold(providerId)}.
 `);
     return 0;
   } catch (err) {
@@ -749,4 +745,4 @@ async function runAuthRemove(deps, providerId) {
 export {
   authCmd
 };
-//# sourceMappingURL=auth-ANOVZVHE.js.map
+//# sourceMappingURL=auth-2ZG5DBHS.js.map

package/dist/auth-menu/index.d.ts

@@ -1,10 +1,9 @@
-export { CLAUDE_PROVIDER_ID, type ClaudeLoginOptions, type ClaudeTokens, runClaudeOAuthLogin, } from './anthropic-oauth.js';
 export { runAuthDirect } from './direct.js';
-export { providerAuthRegistryFor, providerAuthStrategiesFor, runProviderAuthLogin, } from './provider-auth-login.js';
 export { COPILOT_PROVIDER_ID, type CopilotLoginOptions, runCopilotOAuthLogin, } from './github-copilot-oauth.js';
 export { LOCAL_LLM_PRESETS, type LocalLlmPresetEntry, type ProbeOptions, type ProbeResult, probeLocalLlm, type RunAuthLocalOptions, resolveModelList, runAuthLocal, } from './local.js';
 export { type OAuthMenuKind, resolveOAuthKind, runOAuthLoginChoice, runOAuthLoginKind, runOAuthLoginMenu, } from './oauth-menu.js';
 export { CODEX_BASE_URL, CODEX_CATALOG_FAMILIES, CODEX_PROVIDER_ID, type CodexLoginOptions, type CodexTokens, extractAccountId, FALLBACK_CODEX_MODELS, fallbackCodexModelIds, fallbackCodexProviderModels, fetchCodexModels, filterCurrentCodexModelIds, isCodexCatalogModel, refreshCodexToken, resolveCodexModels, runCodexOAuthLogin, } from './openai-codex-oauth.js';
+export { providerAuthRegistryFor, providerAuthStrategiesFor, runProviderAuthLogin, } from './provider-auth-login.js';
 export { runTopMenu as runAuthMenu } from './top-menu.js';
 export type { AuthMenuDeps } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/boot/dispatch-webui.d.ts

@@ -1,3 +1,19 @@
+/**
+ * WebUI dispatch — extracted from the tail of `execute()`.
+ *
+ * PR 6 of Issue #29 (partial). The TUI-vs-REPL-vs-WebUI fork at the
+ * end of `execute()` is a ~1,600-line `if/else if/else if/else`
+ * chain. The WebUI branch is the most self-contained of the four: it
+ * constructs a `runWebUI` options object from already-available deps,
+ * wires SIGINT handling, and returns an exit code. Extracting it
+ * first lets `execute()` shrink by ~100 lines and isolates the
+ * WebUI-specific wiring (port resolution, browser banner and autonomy
+ * forwarding) in a single named module.
+ *
+ * The TUI branch (~1,388 lines) and the single-shot branch are left
+ * inline — they are too deeply coupled to local mutable state for a
+ * single-PR extraction.
+ */
 import type { Agent } from '@wrongstack/core/agent';
 import type { BrainArbiter } from '@wrongstack/core/coordination';
 import type { JournalEntry } from '@wrongstack/core/goal';

package/dist/boot/launch-menu-arrow.d.ts

@@ -0,0 +1,20 @@
+import type { LaunchMenuMode, RunLaunchMenuDeps } from './launch-menu-types.js';
+interface ArrowPickResult {
+    cancelled: boolean;
+    mode: LaunchMenuMode;
+}
+/**
+ * Raw-mode arrow-key selector over {@link MODE_OPTIONS}.
+ *
+ * Keys: ↑/↓ (or k/j) move, Enter launches, 1–5 jump-launch, q/Esc/Ctrl+C
+ * cancel. A live countdown auto-launches the highlighted option after
+ * {@link MENU_TIMEOUT_MS}; any keypress stops the countdown. On settle the
+ * whole block collapses to a single confirmation line so scrollback stays
+ * tidy.
+ *
+ * Returns `null` when raw mode is unavailable or fails to engage —
+ * the caller then runs the numbered readline prompt instead.
+ */
+export declare function promptModeArrow(deps: RunLaunchMenuDeps): Promise<ArrowPickResult | null>;
+export {};
+//# sourceMappingURL=launch-menu-arrow.d.ts.map

package/dist/boot/launch-menu-types.d.ts

@@ -0,0 +1,36 @@
+import type { LaunchMenuChoice } from '@wrongstack/core/types';
+import type { ReadlineInputReader } from '../input-reader.js';
+import type { TerminalRenderer } from '../renderer.js';
+/** Top-level surfaces the user can launch from the menu. */
+export type LaunchMenuMode = LaunchMenuChoice['mode'];
+/** Surfaces that bind a TCP listener and therefore need a port/host prompt. */
+export type NetworkLaunchMode = Exclude<LaunchMenuMode, 'tui-repl' | 'desktop'>;
+export declare const DEFAULT_PORTS: Record<NetworkLaunchMode, number>;
+/** Numbered choices shown to the user. Order MUST match the menu printout. */
+export declare const MODE_OPTIONS: ReadonlyArray<{
+    key: number;
+    mode: LaunchMenuMode;
+    label: string;
+    hint: string;
+    icon: string;
+}>;
+export declare const MENU_TIMEOUT_MS = 8000;
+export interface RunLaunchMenuDeps {
+    argv: string[];
+    flags: Record<string, string | boolean>;
+    positional: string[];
+    renderer: TerminalRenderer;
+    reader: ReadlineInputReader;
+    /**
+     * Last saved menu choice, if any. When provided the menu shows a
+     * one-line summary + "Continue? [Y/n/q]" gate before re-asking,
+     * matching the `runLaunchPrompts` pattern.
+     */
+    lastChoice?: LaunchMenuChoice | undefined;
+    /**
+     * Override the default ports (used by tests). Production callers
+     * should leave this unset.
+     */
+    defaultPorts?: Partial<typeof DEFAULT_PORTS> | undefined;
+}
+//# sourceMappingURL=launch-menu-types.d.ts.map

package/dist/boot/launch-menu.d.ts

@@ -1,40 +1,5 @@
-/**
- * Interactive launch menu — surfaced when `wstack` is invoked with no
- * mode flag (no `--webui`, `--simpleui`, `--hq`, or `--desktop`) and no
- * positional subcommand, on an interactive TTY.
- *
- * The menu asks the user **once** which top-level surface to launch:
- *   1) TUI / REPL  — interactive terminal (the historical default)
- *   2) WebUI       — browser-based project UI (port 3456 by default)
- *   3) SimpleUI    — lightweight browser UI  (port 3466 by default)
- *   4) HQ          — project-independent HQ dashboard (port 3499)
- *   5) Desktop     — Electron desktop shell (`wstack --desktop`)
- *
- * It returns either:
- *   - `null`         — caller should fall through to the historical
- *                       boot() flow unchanged (menu skipped).
- *   - `LaunchChoice` — caller should honor the selection:
- *                       * `tui-repl` → proceed to boot() with no flag
- *                         changes (the inner pre-launch prompts still
- *                         ask TUI vs REPL + YOLO + autonomy).
- *                       * `webui` / `simpleui` → caller injects the
- *                         surface flag + chosen port into argv.
- *                       * `hq` → caller dispatches to the HQ
- *                         short-circuit with the chosen port/host.
- *                       * `desktop` → caller injects `--desktop` and
- *                         dispatches to the desktop short-circuit.
- *
- * Why this lives in `boot/`: it sits next to the other entry-point
- * short-circuits (`short-circuit-{flags,desktop,hq}.ts`) and is
- * consumed by `cli-context.ts` between those short-circuits and
- * `boot()`. It deliberately does NOT take any DI container, agent,
- * or session — those are owned by the post-boot phase.
- */
 import type { LaunchMenuChoice } from '@wrongstack/core/types';
-import type { ReadlineInputReader } from '../input-reader.js';
-import type { TerminalRenderer } from '../renderer.js';
-/** Top-level surfaces the user can launch from the menu. */
-type LaunchMenuMode = LaunchMenuChoice['mode'];
+import type { RunLaunchMenuDeps } from './launch-menu-types.js';
 /** Resolved menu result — the caller must act on this, not re-derive. */
 interface LaunchMenuResult extends LaunchMenuChoice {
     /**
@@ -43,9 +8,6 @@ interface LaunchMenuResult extends LaunchMenuChoice {
      */
     cancelled: boolean;
 }
-/** Surfaces that bind a TCP listener and therefore need a port/host prompt. */
-type NetworkLaunchMode = Exclude<LaunchMenuMode, 'tui-repl' | 'desktop'>;
-declare const DEFAULT_PORTS: Record<NetworkLaunchMode, number>;
 /**
  * Pure predicate — extracted so unit tests can lock the skip
  * conditions down without booting a renderer or reader.
@@ -62,24 +24,6 @@ declare const DEFAULT_PORTS: Record<NetworkLaunchMode, number>;
  *     query. The user already said what they wanted.
  */
 export declare function shouldSkipMenu(argv: string[], flags: Record<string, string | boolean>, positional: string[]): boolean;
-interface RunLaunchMenuDeps {
-    argv: string[];
-    flags: Record<string, string | boolean>;
-    positional: string[];
-    renderer: TerminalRenderer;
-    reader: ReadlineInputReader;
-    /**
-     * Last saved menu choice, if any. When provided the menu shows a
-     * one-line summary + "Continue? [Y/n/q]" gate before re-asking,
-     * matching the `runLaunchPrompts` pattern.
-     */
-    lastChoice?: LaunchMenuChoice | undefined;
-    /**
-     * Override the default ports (used by tests). Production callers
-     * should leave this unset.
-     */
-    defaultPorts?: Partial<typeof DEFAULT_PORTS> | undefined;
-}
 /**
  * Run the interactive launch menu.
  *

package/dist/boot/tui-session-resume-rollback.d.ts

@@ -0,0 +1,31 @@
+import type { TodoItem } from '@wrongstack/core/agent';
+import type { SessionResumeClaim } from '@wrongstack/core/storage';
+import type { SessionWriter } from '@wrongstack/core/types';
+import type { SessionResumeContext } from './tui-session-resume-contracts.js';
+type ResumeAgent = SessionResumeContext['agent'];
+/** What a failed resume had claimed or swapped, and what it captured before. */
+export interface FailedResumeState {
+    agent: ResumeAgent;
+    state: SessionResumeContext['state'];
+    previousSessionId: string | undefined;
+    identityClaimed: boolean;
+    resumeClaim: SessionResumeClaim | undefined;
+    writerSwapped: boolean;
+    openedWriter: SessionWriter | undefined;
+    oldWriter: ResumeAgent['ctx']['session'] | undefined;
+    oldMessages: ResumeAgent['ctx']['messages'] | undefined;
+    oldSessionRefCurrent: SessionWriter | undefined;
+    previousDetachFn: SessionResumeContext['state']['detachActiveTodosCheckpoint'];
+    oldTodos: TodoItem[];
+    oldPlanPath: unknown;
+    oldTaskPath: unknown;
+}
+/**
+ * Undo a failed resume: release or roll back the session identity, then close
+ * the writer it opened — or, after the writer swap, put the agent's writer,
+ * messages and sidecars back. Best-effort throughout: a throw here would mask
+ * the original failure, so every step swallows and logs.
+ */
+export declare function rollbackFailedResume(r: FailedResumeState): Promise<void>;
+export {};
+//# sourceMappingURL=tui-session-resume-rollback.d.ts.map

package/dist/{boot-auto-thin-7D4OVEWA.js → boot-auto-thin-N2CIGTXE.js}

@@ -1,10 +1,10 @@
 import {
   persistConfigSetting
-} from "./chunk-C2BBH4S4.js";
+} from "./chunk-E3MJFAFR.js";
 import {
   activeProfileConfigPath
 } from "./chunk-SPSHEZ46.js";
-import "./chunk-BIGSVBPI.js";
+import "./chunk-KNYIEQAY.js";
 import "./chunk-W23PY4IJ.js";
 
 // src/boot/boot-auto-thin.ts
@@ -100,4 +100,4 @@ async function runBootAutoThin(deps) {
 export {
   runBootAutoThin
 };
-//# sourceMappingURL=boot-auto-thin-7D4OVEWA.js.map
+//# sourceMappingURL=boot-auto-thin-N2CIGTXE.js.map

package/dist/{chunk-TZPKOS5G.js → chunk-2XQ6SRKG.js}

@@ -4,7 +4,7 @@ import {
 import {
   PLUGIN_AUDIT_ENTRIES,
   loadExternalPlugins
-} from "./chunk-VAQXOZKP.js";
+} from "./chunk-AJM4EFCM.js";
 
 // src/wiring/plugins.ts
 import { join } from "node:path";
@@ -306,4 +306,4 @@ export {
   BUILTIN_PLUGIN_NAME_HINTS,
   setupPlugins
 };
-//# sourceMappingURL=chunk-TZPKOS5G.js.map
+//# sourceMappingURL=chunk-2XQ6SRKG.js.map

package/dist/chunk-3LEIFO5D.js

@@ -0,0 +1,65 @@
+
+// src/boot/restricted-mode.ts
+import { lockToProjectRoot, lockYoloOff, ToolCapabilities } from "@wrongstack/core/security";
+var RESTRICTED_ENV = "WRONGSTACK_RESTRICTED";
+var RESTRICTED_DENY_CAPABILITIES = [
+  ToolCapabilities.SHELL_ARBITRARY,
+  ToolCapabilities.SHELL_RESTRICTED,
+  ToolCapabilities.SHELL_EXEC,
+  ToolCapabilities.NET_OUTBOUND,
+  ToolCapabilities.PACKAGE_INSTALL,
+  ToolCapabilities.CONFIG_MUTATE,
+  ToolCapabilities.FS_WRITE_OUTSIDE_PROJECT,
+  ToolCapabilities.TOOL_MUTATE_ANY,
+  ToolCapabilities.MCP_PROXY
+];
+var CONFLICTING_FLAGS = [
+  "yolo",
+  "yolo-plus",
+  "yolo-destructive",
+  "full-auto",
+  "mcp-config",
+  // Pre-approving a tool would let writes skip the prompt this mode promises.
+  "allowed-tools"
+];
+function isRestrictedMode(flags) {
+  return flags["restricted"] === true || process.env[RESTRICTED_ENV] === "1";
+}
+function validateRestrictedMode(flags) {
+  if (!isRestrictedMode(flags)) return false;
+  const conflict = CONFLICTING_FLAGS.find(
+    (name) => flags[name] !== void 0 && flags[name] !== false
+  );
+  if (conflict) throw new Error(`--${conflict} cannot be combined with --restricted`);
+  return true;
+}
+function withRestrictedTools(restriction, restricted) {
+  if (!restricted) return restriction;
+  return {
+    ...restriction?.only ? { only: restriction.only } : {},
+    deny: [...restriction?.deny ?? [], "mcp__*"],
+    denyCapabilities: RESTRICTED_DENY_CAPABILITIES,
+    requireDeclaredCapabilities: true
+  };
+}
+var RESTRICTED_NOTICE = "Restricted mode: no shell, network, installs or MCP tools; files stay inside the project; YOLO is off.";
+var announced = false;
+function activateRestrictedMode(flags, write) {
+  if (!validateRestrictedMode(flags)) return false;
+  lockToProjectRoot();
+  lockYoloOff();
+  process.env[RESTRICTED_ENV] = "1";
+  if (!announced) {
+    announced = true;
+    write(`${RESTRICTED_NOTICE}
+`);
+  }
+  return true;
+}
+
+export {
+  isRestrictedMode,
+  withRestrictedTools,
+  activateRestrictedMode
+};
+//# sourceMappingURL=chunk-3LEIFO5D.js.map