@wrongstack/cli 1.1.5 → 1.1.7

package/dist/{acp-NKUEYJDZ.js → acp-DJWUTU5J.js}

@@ -4,13 +4,13 @@ import {
   loadCachedAcpRegistry,
   refreshAcpRegistry,
   setupProvider
-} from "./chunk-M7FNHCE3.js";
+} from "./chunk-EAATL6FL.js";
 import {
   createHqCommandDispatcher,
   wrongstackBridgeSetup
-} from "./chunk-5SGMUDP5.js";
+} from "./chunk-QRWXHGLB.js";
 import "./chunk-3LEIFO5D.js";
-import "./chunk-VEESMPTX.js";
+import "./chunk-PGC44T7N.js";
 import {
   startCliHqConnection
 } from "./chunk-76JE54WD.js";
@@ -18,7 +18,7 @@ import {
   WebSocketServer
 } from "./chunk-OZCYZYN2.js";
 import "./chunk-UFRVTBV6.js";
-import "./chunk-LUEO5HLZ.js";
+import "./chunk-X4DEQLAZ.js";
 import "./chunk-HKMOIIPQ.js";
 import "./chunk-W23PY4IJ.js";
 
@@ -1124,7 +1124,7 @@ var acpCmd = async (args, deps) => {
   const sub = args[0];
   const loginIndex = sub === "auth" ? 0 : (sub === "server" || sub === "serve") && args[1] === "auth" ? 1 : -1;
   if (loginIndex >= 0) {
-    const { authCmd } = await import("./auth-2ZG5DBHS.js");
+    const { authCmd } = await import("./auth-XOJIPFFX.js");
     return authCmd(args.slice(loginIndex + 1), deps);
   }
   if (!sub || sub === "server" || sub === "serve") {
@@ -1205,4 +1205,4 @@ parallel:
 export {
   acpCmd
 };
-//# sourceMappingURL=acp-NKUEYJDZ.js.map
+//# sourceMappingURL=acp-DJWUTU5J.js.map

package/dist/acp-leader/acp-leader-host.d.ts

@@ -40,6 +40,13 @@ export interface AcpLeaderHost {
     runTool(name: string, input: Record<string, unknown>, run?: {
         sessionId?: string | undefined;
         approve?: ((tool: Tool, input: Record<string, unknown>) => Promise<boolean>) | undefined;
+        /**
+         * Settle the call's tool card here: no tool_result reaches the
+         * conversation, and the caller's own stream does not draw one (the
+         * WrongForge leader's `wstack_*` calls). An ACP agent reports its fleet
+         * calls itself, so its cards come from its stream instead.
+         */
+        announce?: boolean | undefined;
     }): Promise<{
         content: string;
         isError: boolean;

package/dist/acp-leader/acp-leader-provider.d.ts

@@ -1,6 +1,15 @@
 import type { AgentContextUsage, Capabilities, Config, Provider, ProviderFactory, Request, Response, StreamEvent } from '@wrongstack/core/types';
 import { ACP_LEADER_PROVIDER_ID } from './acp-leader-host.js';
 export { ACP_LEADER_PROVIDER_ID };
+/**
+ * The side model the user set for an agent leader (`acp.leader.sideModel`),
+ * without falling back to the fallback chain: a leader that can answer side
+ * requests itself (WrongForge) must not hand them to `fallbackModels[0]`.
+ */
+export declare function explicitLeaderSideModel(config: Config): {
+    provider: string;
+    model: string;
+} | undefined;
 export declare function leaderSideModel(config: Config): {
     provider: string;
     model: string;
@@ -58,6 +67,7 @@ export declare class AcpLeaderProvider implements Provider {
     private observeContext;
     private publishContext;
     private loadAcp;
+    private dropFleetGrants;
     private drop;
     /** The persistent agent session for this conversation, started on first use. */
     private sessionFor;

package/dist/acp-leader/acp-leader-skills.d.ts

@@ -0,0 +1,5 @@
+/** The WrongStack `skill` tool as an agent sees it on this route, if offered. */
+export declare function externalSkillLoader(offered: readonly string[] | undefined, prefix: string): string | undefined;
+/** `text` with its required-skills marker rewritten for an agent leader. */
+export declare function externalSkillDirective(text: string, loader: string | undefined): string;
+//# sourceMappingURL=acp-leader-skills.d.ts.map

package/dist/acp-leader/acp-leader-stream.d.ts

@@ -34,6 +34,13 @@ export declare class TextBlocks {
     text(chunk: string): void;
     close(): void;
 }
+interface CardOutput {
+    output: string;
+    fullOutput?: string | undefined;
+    outputBytes: number;
+}
+/** A card's output fields for a result text that no tool_result will carry. */
+export declare function cardOutputForText(text: string): CardOutput;
 /**
  * The agent's own tool calls as the host's tool cards: `tool.started` once a
  * call is announced, `tool.executed` once it settles. Named by the agent's
@@ -80,4 +87,5 @@ export declare function agentTurnError(err: unknown, agentId: string, classify:
     error: ProviderError;
     dead: boolean;
 };
+export {};
 //# sourceMappingURL=acp-leader-stream.d.ts.map

package/dist/{auth-2ZG5DBHS.js → auth-XOJIPFFX.js}

@@ -44,7 +44,7 @@ import {
 import "./chunk-BCKVNORU.js";
 import {
   parseAuthFlags
-} from "./chunk-M7PSENGF.js";
+} from "./chunk-CL3BU45P.js";
 import "./chunk-W23PY4IJ.js";
 
 // src/subcommands/handlers/auth.ts
@@ -745,4 +745,4 @@ async function runAuthRemove(deps, providerId) {
 export {
   authCmd
 };
-//# sourceMappingURL=auth-2ZG5DBHS.js.map
+//# sourceMappingURL=auth-XOJIPFFX.js.map

package/dist/{chunk-UROB7MK5.js → chunk-BQ5OMSZG.js}

@@ -33,7 +33,7 @@ var helpCmd = async (_args, deps) => {
       ["wstack", "Interactive session (REPL or TUI, picked at launch)"],
       ['wstack "<task>"', 'Run one task and exit (also: --prompt "<task>")'],
       ["wstack quick", "Straight into the TUI with saved defaults"],
-      ["wstack webui | simpleui", "Browser UI / minimal chat UI for this project"],
+      ["wstack webui | simpleui | vibeui", "Browser UI / minimal chat / focused coding workspace"],
       ["wstack desktop", "WrongStack Desktop (requires @wrongstack/desktop)"],
       ["wstack hq", "HQ command center across projects and machines"],
       ["wstack remote <user@host:/path>", "Run on a remote machine over SSH; WebUI tunneled here"],
@@ -129,6 +129,7 @@ var helpCmd = async (_args, deps) => {
         "--simpleui [same flags] [--full-auto]",
         "Minimal chat UI; --full-auto = YOLO + autonomy for this run only"
       ],
+      ["--vibeui [same browser flags]", "Focused coding workspace (default port 3476)"],
       [
         "--hq [--host <h>] [--port <n>] [--password <p>] [--tunnel] [--open]",
         "HQ server (+ --hq-allowlist, --hq-public-url)"
@@ -158,4 +159,4 @@ export {
   versionCmd,
   helpCmd
 };
-//# sourceMappingURL=chunk-UROB7MK5.js.map
+//# sourceMappingURL=chunk-BQ5OMSZG.js.map

package/dist/{chunk-M7PSENGF.js → chunk-CL3BU45P.js}

@@ -54,6 +54,7 @@ var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "webui",
   "webui-session-child",
   "simpleui",
+  "vibeui",
   "full-auto",
   "desktop",
   "open",
@@ -205,11 +206,11 @@ function parseArgs(argv) {
   return { flags, positional };
 }
 function normalizeSurfaceAliases(flags, positional) {
-  if (flags["simpleui"]) flags["webui"] = true;
+  if (flags["simpleui"] || flags["vibeui"]) flags["webui"] = true;
   if (flags["webui-session-child"]) flags["webui"] = true;
   const first = positional[0];
-  if (first === "simpleui") {
-    flags["simpleui"] = true;
+  if (first === "simpleui" || first === "vibeui") {
+    flags[first] = true;
     flags["webui"] = true;
     positional.splice(0, 1);
     return;
@@ -313,4 +314,4 @@ export {
   parseAuthFlags,
   parseSpawnFlags
 };
-//# sourceMappingURL=chunk-M7PSENGF.js.map
+//# sourceMappingURL=chunk-CL3BU45P.js.map

package/dist/{chunk-M7FNHCE3.js → chunk-EAATL6FL.js}

@@ -3,7 +3,7 @@ import {
   reportWrongForgeQuota,
   writeWrongForgeInfoCache,
   wrongstackBridgeSetup
-} from "./chunk-5SGMUDP5.js";
+} from "./chunk-QRWXHGLB.js";
 import {
   isRestrictedMode
 } from "./chunk-3LEIFO5D.js";
@@ -21,7 +21,7 @@ import {
   toProgress,
   wfTokens,
   wrongForgeCall
-} from "./chunk-VEESMPTX.js";
+} from "./chunk-PGC44T7N.js";
 import {
   buildProviderForId,
   resolveProviderCfgWithProxy
@@ -30,7 +30,7 @@ import {
   ACP_LEADER_PROVIDER_ID,
   acpLeaderHost,
   trackAcpLeader
-} from "./chunk-LUEO5HLZ.js";
+} from "./chunk-X4DEQLAZ.js";
 
 // src/acp-agent-list.ts
 import { REGISTRY_ID_ALIASES } from "@wrongstack/acp";
@@ -569,6 +569,7 @@ function publishLeaderContext(events, sessionId, reading, fallbackMaxContext) {
 
 // src/acp-leader/acp-leader-fleet.ts
 import { randomBytes } from "node:crypto";
+import { toErrorMessage as toErrorMessage2 } from "@wrongstack/core/utils";
 import { MCPServer, serveHttp } from "@wrongstack/mcp";
 var FLEET_SERVER_NAME = "wrongstack-fleet";
 var FLEET_TOOLS = [
@@ -579,7 +580,10 @@ var FLEET_TOOLS = [
   "roll_up",
   "fleet_status",
   "session_note",
-  "terminate_subagent"
+  "terminate_subagent",
+  // Not a fleet tool, but it too must run in this process: WrongStack's
+  // skills (a /bughunt playbook) reach the agent only through it.
+  "skill"
 ];
 var MCP_PREFIX = `mcp__${FLEET_SERVER_NAME}__`;
 function fleetToolName(mcpName) {
@@ -605,7 +609,11 @@ async function startFleetEndpoint(host, run) {
         if (!offered.has(name)) {
           return { content: `Tool "${name}" is not offered here`, isError: true };
         }
-        return run ? host.runTool(name, args, run) : host.runTool(name, args);
+        try {
+          return await (run ? host.runTool(name, args, run) : host.runTool(name, args));
+        } catch (err) {
+          return { content: `Failed to execute ${name}: ${toErrorMessage2(err)}`, isError: true };
+        }
       }
     }
   });
@@ -631,7 +639,11 @@ function fleetNote(tools) {
     ...has("fleet_status") ? ["- fleet_status: what is running and its progress."] : [],
     ...has("roll_up") ? ["- roll_up: the full result of finished tasks."] : [],
     ...has("session_note") ? ["- session_note: steer a running worker."] : [],
-    ...has("terminate_subagent") ? ["- terminate_subagent: stop a worker."] : []
+    ...has("terminate_subagent") ? ["- terminate_subagent: stop a worker."] : [],
+    ...has("skill") ? [
+      "- skill: load one of WrongStack's skills by name (follow nextOffset to the last page);",
+      "  a task that names WrongStack skills means these."
+    ] : []
   ].join("\n");
 }
 
@@ -674,9 +686,28 @@ function writeLeaderSession(stateDir, sessionId, record) {
   return writing.catch(() => void 0);
 }
 
+// src/acp-leader/acp-leader-skills.ts
+import { parseRequiredSkillsMarker } from "@wrongstack/core/skills";
+var MARKERS = /<!--\s*wrongstack:required-skills\s+[\s\S]*?-->/g;
+function externalSkillLoader(offered, prefix) {
+  return offered?.includes("skill") ? `${prefix}skill` : void 0;
+}
+function externalSkillDirective(text, loader) {
+  const skills = parseRequiredSkillsMarker(text);
+  if (!skills) return text;
+  const list = skills.join(", ");
+  const line = loader ? `[WrongStack] This task's playbook skills: ${list}. They are WrongStack skills: load each with the \`${loader}\` tool, following nextOffset to the last page, before changing code. Where the text below names the \`skill\` tool or a $name, it means that tool and these skills.` : `[WrongStack] This task's playbook skills: ${list}. This route offers no WrongStack skill tool: load them with your own skill tool if you have them, otherwise follow the protocol below without them.`;
+  let first = true;
+  return text.replace(MARKERS, () => {
+    if (!first) return "";
+    first = false;
+    return line;
+  });
+}
+
 // src/acp-leader/acp-leader-stream.ts
 import { ProviderError } from "@wrongstack/core/types";
-import { toErrorMessage as toErrorMessage2 } from "@wrongstack/core/utils";
+import { toErrorMessage as toErrorMessage3 } from "@wrongstack/core/utils";
 var StreamQueue = class {
   items = [];
   wake;
@@ -742,10 +773,7 @@ function clip(text, max) {
   if (last >= 55296 && last <= 56319) end -= 1;
   return `${text.slice(0, end)}\u2026`;
 }
-function cardOutput(call) {
-  const raw = call.rawOutput;
-  const text = call.output ?? (raw ? typeof raw.output === "string" ? raw.output : JSON.stringify(raw) : void 0);
-  if (text === void 0) return void 0;
+function cardOutputForText(text) {
   const output = clip(text, OUTPUT_PREVIEW_CHARS);
   return {
     output,
@@ -754,6 +782,12 @@ function cardOutput(call) {
     outputBytes: Buffer.byteLength(text)
   };
 }
+function cardOutput(call) {
+  const raw = call.rawOutput;
+  const text = call.output ?? (raw ? typeof raw.output === "string" ? raw.output : JSON.stringify(raw) : void 0);
+  if (text === void 0) return void 0;
+  return cardOutputForText(text);
+}
 var ToolCardRelay = class {
   constructor(events, meta) {
     this.events = events;
@@ -886,7 +920,7 @@ function agentTurnError(err, agentId, classify) {
     };
   }
   const kind = err?.kind;
-  const message = `${agentId}: ${toErrorMessage2(err)}`;
+  const message = `${agentId}: ${toErrorMessage3(err)}`;
   if (kind === "stalled") {
     return {
       error: new ProviderError(message, 408, false, "acp", { kind: "timeout", cause: err }),
@@ -941,8 +975,11 @@ function parseSideModel(ref) {
   if (provider === ACP_LEADER_PROVIDER_ID) return void 0;
   return { provider, model: ref.slice(slash + 1) };
 }
+function explicitLeaderSideModel(config) {
+  return parseSideModel(config.acp?.leader?.sideModel);
+}
 function leaderSideModel(config) {
-  return parseSideModel(config.acp?.leader?.sideModel) ?? parseSideModel(config.fallbackBridge) ?? parseSideModel(config.fallbackModels?.[0]);
+  return explicitLeaderSideModel(config) ?? parseSideModel(config.fallbackBridge) ?? parseSideModel(config.fallbackModels?.[0]);
 }
 function isLeaderTurn(req) {
   const { sessionId, threadId } = req.cache ?? {};
@@ -1060,7 +1097,10 @@ var AcpLeaderProvider = class {
   }
   /** The turn's prompt; an agent joining a conversation under way gets the turns before it. */
   promptText(leader, req) {
-    const latest = latestUserText(req.messages);
+    const latest = externalSkillDirective(
+      latestUserText(req.messages),
+      externalSkillLoader(leader.fleet?.tools, `mcp__${FLEET_SERVER_NAME}__`)
+    );
     const earlier = leader.joined ? void 0 : earlierConversation(req.messages);
     leader.joined = true;
     const prompt = earlier ? `${earlier}
@@ -1136,8 +1176,20 @@ ${withNotes}` : withNotes;
     this.acp ??= await import("@wrongstack/acp");
     return this.acp;
   }
+  dropFleetGrants(sessionId) {
+    for (const grantKey of this.fleetGrants.keys()) {
+      try {
+        const parsed = JSON.parse(grantKey);
+        if (Array.isArray(parsed) && parsed[0] === sessionId) {
+          this.fleetGrants.delete(grantKey);
+        }
+      } catch {
+      }
+    }
+  }
   drop(key, leader) {
     this.sessions.delete(key);
+    this.dropFleetGrants(key);
     void leader.session.close().catch(() => {
     });
     void leader.fleet?.close().catch(() => {
@@ -1312,6 +1364,7 @@ ${fleetNote(fleet.tools)}` : "")
   async closeAll() {
     const all = [...this.sessions.values()];
     this.sessions.clear();
+    this.fleetGrants.clear();
     await Promise.all(
       all.map(
         (p) => p.then((leader) => {
@@ -1371,7 +1424,7 @@ import { registerBuiltinProviderAuthStrategies } from "@wrongstack/providers/oau
 // src/wrongforge-leader/wrongforge-leader-provider.ts
 import { consumeBtwNotes as consumeBtwNotes3 } from "@wrongstack/core/agent";
 import { ProviderError as ProviderError3 } from "@wrongstack/core/types";
-import { toErrorMessage as toErrorMessage4 } from "@wrongstack/core/utils";
+import { toErrorMessage as toErrorMessage5 } from "@wrongstack/core/utils";
 
 // src/wrongforge-leader/wrongforge-leader-gateway.ts
 import { randomBytes as randomBytes2 } from "node:crypto";
@@ -1379,7 +1432,7 @@ import http from "node:http";
 import {
   compactToolDefinitionForWire,
   subjectForToolInput as subjectForToolInput2,
-  toErrorMessage as toErrorMessage3
+  toErrorMessage as toErrorMessage4
 } from "@wrongstack/core/utils";
 import { timingSafeTokenEqual } from "@wrongstack/primitives";
 var NOT_OFFERED = /* @__PURE__ */ new Set([
@@ -1475,14 +1528,17 @@ async function startLeaderGateway(host, sessionId) {
       }
       host.runTool(name, input, {
         sessionId,
-        approve: (t, i) => askUser(host, sessionId, t, i)
+        approve: (t, i) => askUser(host, sessionId, t, i),
+        // The provider draws no card for a `wstack_*` call (its events are
+        // marked external), so the session's card is settled here.
+        announce: true
       }).then(
         (r) => send(res, 200, { ok: !r.isError, tool: name, content: r.content }),
         (err) => send(res, 200, {
           ok: false,
           tool: name,
           error: "tool_failed",
-          message: toErrorMessage3(err)
+          message: toErrorMessage4(err)
         })
       );
     });
@@ -1582,7 +1638,7 @@ function providerError(err, id) {
     if (err.status >= 500) return make(err.message, err.status, true, "server");
     return make(`${err.code}: ${err.message}`, err.status, false, "invalid_request");
   }
-  return make(toErrorMessage4(err), 0, false, "unknown");
+  return make(toErrorMessage5(err), 0, false, "unknown");
 }
 function taskError(record, id) {
   const make = (message, status, retryable, kind) => new ProviderError3(`WrongForge: ${message}`, status, retryable, id, { kind });
@@ -1657,19 +1713,27 @@ var WrongForgeLeaderProvider = class {
     }
     return choice.id;
   }
-  /** A configured side model, when the user named one. */
-  sideProvider() {
-    const ref = leaderSideModel(this.config());
+  /**
+   * A side model for a turn WrongForge does not lead. `explicitOnly` (a side
+   * request through `complete()`) takes only the model the user named in
+   * `acp.leader.sideModel`: WrongForge answers those itself (`oneShot`), and
+   * handing them to `fallbackModels[0]` let that model take over the session.
+   * A worker's turn may still fall back to the fallback chain, since `oneShot`
+   * would leave it without tools.
+   */
+  sideProvider(explicitOnly = false) {
+    const config = this.config();
+    const ref = explicitOnly ? explicitLeaderSideModel(config) : leaderSideModel(config);
     if (!ref || ref.provider === this.id) return void 0;
     let provider = this.sideProviders.get(ref.provider);
     if (!provider) {
-      provider = this.opts.buildProvider(ref.provider, this.config());
+      provider = this.opts.buildProvider(ref.provider, config);
       if (provider) this.sideProviders.set(ref.provider, provider);
     }
     return provider ? { provider, model: ref.model } : void 0;
   }
   async complete(req, opts) {
-    const side = this.sideProvider();
+    const side = this.sideProvider(true);
     if (side) return side.provider.complete({ ...req, model: side.model }, opts);
     return this.oneShot(req, opts.signal);
   }
@@ -1739,8 +1803,16 @@ var WrongForgeLeaderProvider = class {
     try {
       info = await this.info(call, opts.signal);
       model = this.model(req.model, info);
-      if (host) leader.gateway ??= startLeaderGateway(host, key).catch(() => void 0);
+      if (host && !leader.gateway) {
+        leader.gateway = startLeaderGateway(host, key).catch(() => {
+          leader.gateway = void 0;
+          return void 0;
+        });
+      }
       gateway = await leader.gateway;
+      if (!gateway) {
+        leader.gateway = void 0;
+      }
       joinedBefore = leader.joined ?? await this.wfSessionExists(call, leader, opts.signal);
     } catch (err) {
       throw providerError(err, this.id);
@@ -1764,7 +1836,7 @@ var WrongForgeLeaderProvider = class {
         "POST",
         "/v1/tasks",
         {
-          prompt: this.promptText(req, joinedBefore),
+          prompt: this.promptText(req, joinedBefore, gateway),
           session_id: leader.wfSessionId,
           workdir: host?.projectRoot ?? process.cwd(),
           ...model ? { model } : {},
@@ -1780,6 +1852,10 @@ var WrongForgeLeaderProvider = class {
       );
       taskId = task.id;
       leader.joined = true;
+      if (opts.signal.aborted) {
+        cancelTask(call, taskId, "interrupted in WrongStack");
+        throw new WfAborted();
+      }
       for await (const ev of followTask(call, task.id, opts.signal)) {
         if (ev.type === "task.heartbeat" || ev.type === "step.finished") {
           void reportWrongForgeQuota({ providerId: this.id, fetchImpl: this.opts.fetchImpl });
@@ -1831,8 +1907,11 @@ var WrongForgeLeaderProvider = class {
     }
   }
   /** The turn's prompt; WrongForge joining a conversation under way gets the turns before it. */
-  promptText(req, joined) {
-    const latest = latestUserText(req.messages);
+  promptText(req, joined, gateway) {
+    const latest = externalSkillDirective(
+      latestUserText(req.messages),
+      gateway ? externalSkillLoader(gateway.tools, gateway.spec.name_prefix ?? "") : void 0
+    );
     const earlier = joined ? void 0 : earlierConversation(req.messages);
     const prompt = earlier ? `${earlier}
 
@@ -2043,7 +2122,7 @@ Try \`wstack models refresh\` once you have network access.`,
       cause: err
     });
   }
-  if (config.features.modelsRegistry && !acpLeader) {
+  if (config.features.modelsRegistry && !acpLeader && !wrongForgeLeader) {
     provider = await withCatalogCapabilities(
       modelsRegistry,
       config.provider,
@@ -2062,9 +2141,10 @@ export {
   wrongstackAcpPermissionPolicy,
   recordAcpRateLimit,
   startAcpTurnReminders,
+  cardOutputForText,
   WRONGFORGE_REASONING,
   wrongForgeRuntime,
   setupProvider,
   createGracefulShutdown
 };
-//# sourceMappingURL=chunk-M7FNHCE3.js.map
+//# sourceMappingURL=chunk-EAATL6FL.js.map

package/dist/{chunk-JFYQGMMM.js → chunk-FWUIKCCO.js}

@@ -201,6 +201,7 @@ var LoginAttemptStore = class _LoginAttemptStore {
   store = /* @__PURE__ */ new Map();
   writeTimer;
   dirty = false;
+  writeTail = Promise.resolve();
   filePath;
   debounceMs;
   retentionMs;
@@ -339,9 +340,7 @@ var LoginAttemptStore = class _LoginAttemptStore {
       clearTimeout(this.writeTimer);
       this.writeTimer = void 0;
     }
-    if (this.dirty) {
-      await this.writeToDisk();
-    }
+    await this.writeToDisk();
   }
   scheduleWrite() {
     this.dirty = true;
@@ -352,7 +351,14 @@ var LoginAttemptStore = class _LoginAttemptStore {
     }, this.debounceMs);
     this.writeTimer.unref?.();
   }
-  async writeToDisk() {
+  writeToDisk() {
+    const pending = this.writeTail.then(() => {
+      return this.dirty ? this.writeSnapshotToDisk() : void 0;
+    });
+    this.writeTail = pending.catch(() => void 0);
+    return pending;
+  }
+  async writeSnapshotToDisk() {
     this.dirty = false;
     const now = Date.now();
     const cutoff = now - this.retentionMs;
@@ -3733,52 +3739,51 @@ ${terminalText("Reachable from other machines on your network:", "blue", { bold:
 
 // src/hq-server/server-lifecycle.ts
 function createHqServerShutdown(params) {
-  let closed = false;
-  return () => new Promise((res) => {
-    if (closed) {
-      res();
-      return;
-    }
-    closed = true;
-    clearInterval(params.cleanupTimer);
-    clearInterval(params.browserHeartbeatTimer);
-    clearInterval(params.timeseriesFlushTimer);
-    clearInterval(params.sessionCleanupTimer);
-    params.stopAlertEngine();
-    params.authWatcher.close();
-    params.snapshotBroadcaster.close();
-    params.bootstrapStore.clear();
-    params.persistence.timeseries.flush();
-    for (const ws of [...params.browsers, ...params.clients.keys()]) {
-      try {
-        ws.close(1001, "HQ shutting down");
-        ws.terminate();
-      } catch {
+  let closing;
+  return () => {
+    if (closing) return closing;
+    closing = new Promise((res) => {
+      clearInterval(params.cleanupTimer);
+      clearInterval(params.browserHeartbeatTimer);
+      clearInterval(params.timeseriesFlushTimer);
+      clearInterval(params.sessionCleanupTimer);
+      params.stopAlertEngine();
+      params.authWatcher.close();
+      params.snapshotBroadcaster.close();
+      params.bootstrapStore.clear();
+      params.persistence.timeseries.flush();
+      for (const ws of [...params.browsers, ...params.clients.keys()]) {
+        try {
+          ws.close(1001, "HQ shutting down");
+          ws.terminate();
+        } catch {
+        }
       }
-    }
-    params.wss.close();
-    params.mailboxManager.close();
-    params.httpServer.close(() => {
-      const mailboxCloses = [...params.mailboxManager.mailboxGateways.values()].map(
-        ({ mailbox }) => mailbox.close().catch(() => void 0)
-      );
-      params.mailboxManager.mailboxGateways.clear();
-      params.mailboxManager.mailboxGatewayLastUsed.clear();
-      void Promise.all([
-        ...mailboxCloses,
-        // Chimera/race: flush the login-attempt store INSIDE the awaited
-        // shutdown set — the old fire-and-forget `void flush()` let close()
-        // resolve before the debounced write landed, so persistence tests
-        // had to sleep past it (and restarts could miss lockout state).
-        params.loginAttempts.flush(),
-        params.persistence.eventLog.drain(),
-        params.persistence.snapshotStore.drain(),
-        params.persistence.timeseries.drain(),
-        params.persistence.kanban.drain(),
-        params.persistence.sage?.drain()
-      ]).then(() => clearHqRuntimeMarker(params.dataDir, params.hqUrl)).catch(() => void 0).finally(() => res());
+      params.wss.close();
+      params.mailboxManager.close();
+      params.httpServer.close(() => {
+        const mailboxCloses = [...params.mailboxManager.mailboxGateways.values()].map(
+          ({ mailbox }) => mailbox.close().catch(() => void 0)
+        );
+        params.mailboxManager.mailboxGateways.clear();
+        params.mailboxManager.mailboxGatewayLastUsed.clear();
+        void Promise.allSettled([
+          ...mailboxCloses,
+          // Chimera/race: flush the login-attempt store INSIDE the awaited
+          // shutdown set — the old fire-and-forget `void flush()` let close()
+          // resolve before the debounced write landed, so persistence tests
+          // had to sleep past it (and restarts could miss lockout state).
+          params.loginAttempts.flush(),
+          params.persistence.eventLog.drain(),
+          params.persistence.snapshotStore.drain(),
+          params.persistence.timeseries.drain(),
+          params.persistence.kanban.drain(),
+          params.persistence.sage?.drain()
+        ]).then(() => clearHqRuntimeMarker(params.dataDir, params.hqUrl)).catch(() => void 0).finally(() => res());
+      });
     });
-  });
+    return closing;
+  };
 }
 
 // src/hq-server/socket-credentials.ts
@@ -5385,4 +5390,4 @@ export {
   startHqServer,
   HqInsecureExposureError2 as HqInsecureExposureError
 };
-//# sourceMappingURL=chunk-JFYQGMMM.js.map
+//# sourceMappingURL=chunk-FWUIKCCO.js.map