@wrongstack/cli 1.1.4 → 1.1.6

package/dist/{acp-MZ5MQBFN.js → acp-CZBSFQB7.js}

@@ -4,12 +4,13 @@ import {
   loadCachedAcpRegistry,
   refreshAcpRegistry,
   setupProvider
-} from "./chunk-COGI7EQU.js";
+} from "./chunk-EAATL6FL.js";
 import {
   createHqCommandDispatcher,
   wrongstackBridgeSetup
-} from "./chunk-JKTJSLUT.js";
+} from "./chunk-QRWXHGLB.js";
 import "./chunk-3LEIFO5D.js";
+import "./chunk-PGC44T7N.js";
 import {
   startCliHqConnection
 } from "./chunk-76JE54WD.js";
@@ -17,7 +18,7 @@ import {
   WebSocketServer
 } from "./chunk-OZCYZYN2.js";
 import "./chunk-UFRVTBV6.js";
-import "./chunk-GKGWPFW2.js";
+import "./chunk-X4DEQLAZ.js";
 import "./chunk-HKMOIIPQ.js";
 import "./chunk-W23PY4IJ.js";
 
@@ -1123,7 +1124,7 @@ var acpCmd = async (args, deps) => {
   const sub = args[0];
   const loginIndex = sub === "auth" ? 0 : (sub === "server" || sub === "serve") && args[1] === "auth" ? 1 : -1;
   if (loginIndex >= 0) {
-    const { authCmd } = await import("./auth-IHQS6AFW.js");
+    const { authCmd } = await import("./auth-2ZG5DBHS.js");
     return authCmd(args.slice(loginIndex + 1), deps);
   }
   if (!sub || sub === "server" || sub === "serve") {
@@ -1204,4 +1205,4 @@ parallel:
 export {
   acpCmd
 };
-//# sourceMappingURL=acp-MZ5MQBFN.js.map
+//# sourceMappingURL=acp-CZBSFQB7.js.map

package/dist/acp-leader/acp-leader-confirm.d.ts

@@ -11,6 +11,8 @@ export interface EventConfirmRequest {
     signal: AbortSignal;
     /** Where an "always" or "deny" answer is remembered, as for the leader's own tools. */
     permission?: Pick<PermissionPolicy, 'trust' | 'deny'> | undefined;
+    /** The context the policy evaluates the agent's calls in: an exact-input answer is keyed to it. */
+    context: Parameters<PermissionPolicy['evaluate']>[2];
     timeoutMs?: number | undefined;
 }
 /** Resolves true when the user approved the call. */

package/dist/acp-leader/acp-leader-host-binding.d.ts

@@ -10,6 +10,7 @@ export interface AcpLeaderHostOptions {
     stateDir?: string | undefined;
     getConfig(): Config;
     getTool(name: string): Tool | undefined;
+    listTools?(): Tool[];
     confirmAwaiter?: ConfirmAwaiter | undefined;
 }
 export declare function createAcpLeaderHost(opts: AcpLeaderHostOptions): AcpLeaderHost;

package/dist/acp-leader/acp-leader-host.d.ts

@@ -28,6 +28,8 @@ export interface AcpLeaderHost {
     /** That agent's context, which the policy reads (files already read, the session). */
     context(sessionId?: string): Parameters<PermissionPolicy['evaluate']>[2];
     getTool(name: string): Tool | undefined;
+    /** Every tool the leader has (the WrongForge leader offers them over its gateway). */
+    listTools?(): Tool[];
     /**
      * Run one of the leader's tools as the leader would — the executor and
      * context of the agent running `sessionId`, so permissions, hooks, events
@@ -38,6 +40,13 @@ export interface AcpLeaderHost {
     runTool(name: string, input: Record<string, unknown>, run?: {
         sessionId?: string | undefined;
         approve?: ((tool: Tool, input: Record<string, unknown>) => Promise<boolean>) | undefined;
+        /**
+         * Settle the call's tool card here: no tool_result reaches the
+         * conversation, and the caller's own stream does not draw one (the
+         * WrongForge leader's `wstack_*` calls). An ACP agent reports its fleet
+         * calls itself, so its cards come from its stream instead.
+         */
+        announce?: boolean | undefined;
     }): Promise<{
         content: string;
         isError: boolean;

package/dist/acp-leader/acp-leader-picker.d.ts

@@ -3,19 +3,22 @@ import type { Config, Provider, ProviderConfig } from '@wrongstack/core/types';
 export interface PickableHostProvider {
     id: string;
     type: string;
+    refreshQuota?: () => Promise<boolean>;
     models: Array<{
         id: string;
         name: string;
         description: string;
         contextWindow?: number;
+        reasoningEffortLevels?: string[];
+        effortSupported?: boolean;
     }>;
 }
 /** The `acp` entry, or none when no ACP agent is installed. */
 export declare function acpLeaderPickable(config: Config | undefined): PickableHostProvider[];
 /**
- * Build the ACP leader from the host's provider registry, where its factory
- * is registered; undefined for every other provider, which the WebUI builds
- * as before.
+ * Build a host-registered leader (the ACP leader, WrongForge) from the host's
+ * provider registry, where its factory is registered; undefined for every
+ * other provider, which the WebUI builds as before.
  */
 export declare function buildAcpLeaderProvider(registry: Pick<ProviderRegistry, 'has' | 'create'> | undefined, providerId: string, config: ProviderConfig): Provider | undefined;
 //# sourceMappingURL=acp-leader-picker.d.ts.map

package/dist/acp-leader/acp-leader-provider.d.ts

@@ -1,6 +1,15 @@
 import type { AgentContextUsage, Capabilities, Config, Provider, ProviderFactory, Request, Response, StreamEvent } from '@wrongstack/core/types';
 import { ACP_LEADER_PROVIDER_ID } from './acp-leader-host.js';
 export { ACP_LEADER_PROVIDER_ID };
+/**
+ * The side model the user set for an agent leader (`acp.leader.sideModel`),
+ * without falling back to the fallback chain: a leader that can answer side
+ * requests itself (WrongForge) must not hand them to `fallbackModels[0]`.
+ */
+export declare function explicitLeaderSideModel(config: Config): {
+    provider: string;
+    model: string;
+} | undefined;
 export declare function leaderSideModel(config: Config): {
     provider: string;
     model: string;
@@ -58,6 +67,7 @@ export declare class AcpLeaderProvider implements Provider {
     private observeContext;
     private publishContext;
     private loadAcp;
+    private dropFleetGrants;
     private drop;
     /** The persistent agent session for this conversation, started on first use. */
     private sessionFor;

package/dist/acp-leader/acp-leader-skills.d.ts

@@ -0,0 +1,5 @@
+/** The WrongStack `skill` tool as an agent sees it on this route, if offered. */
+export declare function externalSkillLoader(offered: readonly string[] | undefined, prefix: string): string | undefined;
+/** `text` with its required-skills marker rewritten for an agent leader. */
+export declare function externalSkillDirective(text: string, loader: string | undefined): string;
+//# sourceMappingURL=acp-leader-skills.d.ts.map

package/dist/acp-leader/acp-leader-stream.d.ts

@@ -34,6 +34,13 @@ export declare class TextBlocks {
     text(chunk: string): void;
     close(): void;
 }
+interface CardOutput {
+    output: string;
+    fullOutput?: string | undefined;
+    outputBytes: number;
+}
+/** A card's output fields for a result text that no tool_result will carry. */
+export declare function cardOutputForText(text: string): CardOutput;
 /**
  * The agent's own tool calls as the host's tool cards: `tool.started` once a
  * call is announced, `tool.executed` once it settles. Named by the agent's
@@ -47,6 +54,7 @@ export declare class ToolCardRelay {
     constructor(events: EventBus | undefined, meta: {
         sessionId?: string | undefined;
         model: string;
+        provider?: string | undefined;
     });
     update(call: ACPCapturedToolCall): void;
 }
@@ -79,4 +87,5 @@ export declare function agentTurnError(err: unknown, agentId: string, classify:
     error: ProviderError;
     dead: boolean;
 };
+export {};
 //# sourceMappingURL=acp-leader-stream.d.ts.map

package/dist/{auth-IHQS6AFW.js → auth-2ZG5DBHS.js}

@@ -20,7 +20,7 @@ import {
   runOAuthLoginKind,
   runOAuthLoginMenu,
   validateFamily
-} from "./chunk-I5LJLKA3.js";
+} from "./chunk-MKMM5RIW.js";
 import {
   renderAuthLocalHelpToString,
   wantsLocalHelp
@@ -37,14 +37,14 @@ import {
 import {
   activeProfileConfigPath
 } from "./chunk-SPSHEZ46.js";
-import "./chunk-BIGSVBPI.js";
+import "./chunk-KNYIEQAY.js";
 import {
   restoreFlags
 } from "./chunk-QC6CLAK7.js";
 import "./chunk-BCKVNORU.js";
 import {
   parseAuthFlags
-} from "./chunk-75OLD563.js";
+} from "./chunk-M7PSENGF.js";
 import "./chunk-W23PY4IJ.js";
 
 // src/subcommands/handlers/auth.ts
@@ -745,4 +745,4 @@ async function runAuthRemove(deps, providerId) {
 export {
   authCmd
 };
-//# sourceMappingURL=auth-IHQS6AFW.js.map
+//# sourceMappingURL=auth-2ZG5DBHS.js.map

package/dist/boot/launch-menu-arrow.d.ts

@@ -0,0 +1,20 @@
+import type { LaunchMenuMode, RunLaunchMenuDeps } from './launch-menu-types.js';
+interface ArrowPickResult {
+    cancelled: boolean;
+    mode: LaunchMenuMode;
+}
+/**
+ * Raw-mode arrow-key selector over {@link MODE_OPTIONS}.
+ *
+ * Keys: ↑/↓ (or k/j) move, Enter launches, 1–5 jump-launch, q/Esc/Ctrl+C
+ * cancel. A live countdown auto-launches the highlighted option after
+ * {@link MENU_TIMEOUT_MS}; any keypress stops the countdown. On settle the
+ * whole block collapses to a single confirmation line so scrollback stays
+ * tidy.
+ *
+ * Returns `null` when raw mode is unavailable or fails to engage —
+ * the caller then runs the numbered readline prompt instead.
+ */
+export declare function promptModeArrow(deps: RunLaunchMenuDeps): Promise<ArrowPickResult | null>;
+export {};
+//# sourceMappingURL=launch-menu-arrow.d.ts.map

package/dist/boot/launch-menu-types.d.ts

@@ -0,0 +1,36 @@
+import type { LaunchMenuChoice } from '@wrongstack/core/types';
+import type { ReadlineInputReader } from '../input-reader.js';
+import type { TerminalRenderer } from '../renderer.js';
+/** Top-level surfaces the user can launch from the menu. */
+export type LaunchMenuMode = LaunchMenuChoice['mode'];
+/** Surfaces that bind a TCP listener and therefore need a port/host prompt. */
+export type NetworkLaunchMode = Exclude<LaunchMenuMode, 'tui-repl' | 'desktop'>;
+export declare const DEFAULT_PORTS: Record<NetworkLaunchMode, number>;
+/** Numbered choices shown to the user. Order MUST match the menu printout. */
+export declare const MODE_OPTIONS: ReadonlyArray<{
+    key: number;
+    mode: LaunchMenuMode;
+    label: string;
+    hint: string;
+    icon: string;
+}>;
+export declare const MENU_TIMEOUT_MS = 8000;
+export interface RunLaunchMenuDeps {
+    argv: string[];
+    flags: Record<string, string | boolean>;
+    positional: string[];
+    renderer: TerminalRenderer;
+    reader: ReadlineInputReader;
+    /**
+     * Last saved menu choice, if any. When provided the menu shows a
+     * one-line summary + "Continue? [Y/n/q]" gate before re-asking,
+     * matching the `runLaunchPrompts` pattern.
+     */
+    lastChoice?: LaunchMenuChoice | undefined;
+    /**
+     * Override the default ports (used by tests). Production callers
+     * should leave this unset.
+     */
+    defaultPorts?: Partial<typeof DEFAULT_PORTS> | undefined;
+}
+//# sourceMappingURL=launch-menu-types.d.ts.map

package/dist/boot/launch-menu.d.ts

@@ -1,40 +1,5 @@
-/**
- * Interactive launch menu — surfaced when `wstack` is invoked with no
- * mode flag (no `--webui`, `--simpleui`, `--hq`, or `--desktop`) and no
- * positional subcommand, on an interactive TTY.
- *
- * The menu asks the user **once** which top-level surface to launch:
- *   1) TUI / REPL  — interactive terminal (the historical default)
- *   2) WebUI       — browser-based project UI (port 3456 by default)
- *   3) SimpleUI    — lightweight browser UI  (port 3466 by default)
- *   4) HQ          — project-independent HQ dashboard (port 3499)
- *   5) Desktop     — Electron desktop shell (`wstack --desktop`)
- *
- * It returns either:
- *   - `null`         — caller should fall through to the historical
- *                       boot() flow unchanged (menu skipped).
- *   - `LaunchChoice` — caller should honor the selection:
- *                       * `tui-repl` → proceed to boot() with no flag
- *                         changes (the inner pre-launch prompts still
- *                         ask TUI vs REPL + YOLO + autonomy).
- *                       * `webui` / `simpleui` → caller injects the
- *                         surface flag + chosen port into argv.
- *                       * `hq` → caller dispatches to the HQ
- *                         short-circuit with the chosen port/host.
- *                       * `desktop` → caller injects `--desktop` and
- *                         dispatches to the desktop short-circuit.
- *
- * Why this lives in `boot/`: it sits next to the other entry-point
- * short-circuits (`short-circuit-{flags,desktop,hq}.ts`) and is
- * consumed by `cli-context.ts` between those short-circuits and
- * `boot()`. It deliberately does NOT take any DI container, agent,
- * or session — those are owned by the post-boot phase.
- */
 import type { LaunchMenuChoice } from '@wrongstack/core/types';
-import type { ReadlineInputReader } from '../input-reader.js';
-import type { TerminalRenderer } from '../renderer.js';
-/** Top-level surfaces the user can launch from the menu. */
-type LaunchMenuMode = LaunchMenuChoice['mode'];
+import type { RunLaunchMenuDeps } from './launch-menu-types.js';
 /** Resolved menu result — the caller must act on this, not re-derive. */
 interface LaunchMenuResult extends LaunchMenuChoice {
     /**
@@ -43,9 +8,6 @@ interface LaunchMenuResult extends LaunchMenuChoice {
      */
     cancelled: boolean;
 }
-/** Surfaces that bind a TCP listener and therefore need a port/host prompt. */
-type NetworkLaunchMode = Exclude<LaunchMenuMode, 'tui-repl' | 'desktop'>;
-declare const DEFAULT_PORTS: Record<NetworkLaunchMode, number>;
 /**
  * Pure predicate — extracted so unit tests can lock the skip
  * conditions down without booting a renderer or reader.
@@ -62,24 +24,6 @@ declare const DEFAULT_PORTS: Record<NetworkLaunchMode, number>;
  *     query. The user already said what they wanted.
  */
 export declare function shouldSkipMenu(argv: string[], flags: Record<string, string | boolean>, positional: string[]): boolean;
-interface RunLaunchMenuDeps {
-    argv: string[];
-    flags: Record<string, string | boolean>;
-    positional: string[];
-    renderer: TerminalRenderer;
-    reader: ReadlineInputReader;
-    /**
-     * Last saved menu choice, if any. When provided the menu shows a
-     * one-line summary + "Continue? [Y/n/q]" gate before re-asking,
-     * matching the `runLaunchPrompts` pattern.
-     */
-    lastChoice?: LaunchMenuChoice | undefined;
-    /**
-     * Override the default ports (used by tests). Production callers
-     * should leave this unset.
-     */
-    defaultPorts?: Partial<typeof DEFAULT_PORTS> | undefined;
-}
 /**
  * Run the interactive launch menu.
  *

package/dist/boot/tui-session-resume-rollback.d.ts

@@ -0,0 +1,31 @@
+import type { TodoItem } from '@wrongstack/core/agent';
+import type { SessionResumeClaim } from '@wrongstack/core/storage';
+import type { SessionWriter } from '@wrongstack/core/types';
+import type { SessionResumeContext } from './tui-session-resume-contracts.js';
+type ResumeAgent = SessionResumeContext['agent'];
+/** What a failed resume had claimed or swapped, and what it captured before. */
+export interface FailedResumeState {
+    agent: ResumeAgent;
+    state: SessionResumeContext['state'];
+    previousSessionId: string | undefined;
+    identityClaimed: boolean;
+    resumeClaim: SessionResumeClaim | undefined;
+    writerSwapped: boolean;
+    openedWriter: SessionWriter | undefined;
+    oldWriter: ResumeAgent['ctx']['session'] | undefined;
+    oldMessages: ResumeAgent['ctx']['messages'] | undefined;
+    oldSessionRefCurrent: SessionWriter | undefined;
+    previousDetachFn: SessionResumeContext['state']['detachActiveTodosCheckpoint'];
+    oldTodos: TodoItem[];
+    oldPlanPath: unknown;
+    oldTaskPath: unknown;
+}
+/**
+ * Undo a failed resume: release or roll back the session identity, then close
+ * the writer it opened — or, after the writer swap, put the agent's writer,
+ * messages and sidecars back. Best-effort throughout: a throw here would mask
+ * the original failure, so every step swallows and logs.
+ */
+export declare function rollbackFailedResume(r: FailedResumeState): Promise<void>;
+export {};
+//# sourceMappingURL=tui-session-resume-rollback.d.ts.map

package/dist/{boot-auto-thin-7D4OVEWA.js → boot-auto-thin-N2CIGTXE.js}

@@ -1,10 +1,10 @@
 import {
   persistConfigSetting
-} from "./chunk-C2BBH4S4.js";
+} from "./chunk-E3MJFAFR.js";
 import {
   activeProfileConfigPath
 } from "./chunk-SPSHEZ46.js";
-import "./chunk-BIGSVBPI.js";
+import "./chunk-KNYIEQAY.js";
 import "./chunk-W23PY4IJ.js";
 
 // src/boot/boot-auto-thin.ts
@@ -100,4 +100,4 @@ async function runBootAutoThin(deps) {
 export {
   runBootAutoThin
 };
-//# sourceMappingURL=boot-auto-thin-7D4OVEWA.js.map
+//# sourceMappingURL=boot-auto-thin-N2CIGTXE.js.map

package/dist/{chunk-TZPKOS5G.js → chunk-2XQ6SRKG.js}

@@ -4,7 +4,7 @@ import {
 import {
   PLUGIN_AUDIT_ENTRIES,
   loadExternalPlugins
-} from "./chunk-VAQXOZKP.js";
+} from "./chunk-AJM4EFCM.js";
 
 // src/wiring/plugins.ts
 import { join } from "node:path";
@@ -306,4 +306,4 @@ export {
   BUILTIN_PLUGIN_NAME_HINTS,
   setupPlugins
 };
-//# sourceMappingURL=chunk-TZPKOS5G.js.map
+//# sourceMappingURL=chunk-2XQ6SRKG.js.map

package/dist/{chunk-3EXRPTAU.js → chunk-5TQ65PXQ.js}

@@ -1,19 +1,7 @@
 
-// src/hq-server/audit-actor.ts
-import * as os from "node:os";
-function resolveAuditActor() {
-  const user = (process.env.USERNAME ?? process.env.USER ?? "").toString();
-  try {
-    const host = os.hostname();
-    return user ? `${user}@${host}` : `cli@${host}`;
-  } catch {
-    return user ? `${user}@unknown` : "cli";
-  }
-}
-
 // src/hq-server/utils.ts
 import * as fs from "node:fs/promises";
-import * as os2 from "node:os";
+import * as os from "node:os";
 import * as path from "node:path";
 import { resolveHqDataDir } from "@wrongstack/core/hq";
 import { isSafeSessionId as coreIsSafeSessionId } from "@wrongstack/core/utils";
@@ -166,7 +154,7 @@ function hqRuntimeMarkerPath(dataDir) {
 function lanIPv4Addresses() {
   const out = [];
   try {
-    const ifaces = os2.networkInterfaces();
+    const ifaces = os.networkInterfaces();
     for (const name of Object.keys(ifaces)) {
       for (const ni of ifaces[name] ?? []) {
         if (ni.family === "IPv4" && !ni.internal) out.push(ni.address);
@@ -212,8 +200,19 @@ function recordTimeseriesSignal(persistence, event) {
   }
 }
 
+// src/hq-server/audit-actor.ts
+import * as os2 from "node:os";
+function resolveAuditActor() {
+  const user = (process.env.USERNAME ?? process.env.USER ?? "").toString();
+  try {
+    const host = os2.hostname();
+    return user ? `${user}@${host}` : `cli@${host}`;
+  } catch {
+    return user ? `${user}@unknown` : "cli";
+  }
+}
+
 export {
-  resolveAuditActor,
   TRANSCRIPT_RING_MAX,
   MAX_TRANSCRIPT_SESSIONS,
   MAX_AGENT_RINGS,
@@ -234,6 +233,7 @@ export {
   truncateHqSummary,
   hqMachineKey,
   recordTimeseriesSignal,
-  sanitizeApiError
+  sanitizeApiError,
+  resolveAuditActor
 };
-//# sourceMappingURL=chunk-3EXRPTAU.js.map
+//# sourceMappingURL=chunk-5TQ65PXQ.js.map