@wrongstack/webui-server 0.284.0 → 0.285.0

package/dist/server/usage-cost.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Token-usage cost math for the WebUI server.
+ *
+ * models.dev pricing is expressed in **dollars per 1,000,000 tokens**, and
+ * providers omit the field entirely for free/unmetered plans. Both the
+ * `session.start` payload (which ships the per-token rates to the client) and
+ * `stats.get` (which reports an actual dollar figure) repeated the same
+ * "read `model.cost.*` with a `?? 0` fallback, then divide by 1e6" logic
+ * inline. Pulling it here keeps the rate normalization and the cost formula in
+ * one tested place — a wrong field name or a missing `/ 1e6` silently produces
+ * a plausible-but-wrong number, which is exactly what a unit test should pin.
+ */
+/** Per-1,000,000-token pricing, normalized to numbers (0 when unpriced). */
+export interface CostRates {
+    /** $ per 1M input tokens. */
+    input: number;
+    /** $ per 1M output tokens. */
+    output: number;
+    /** $ per 1M cache-read tokens. */
+    cacheRead: number;
+}
+/** Token counts for a turn/session. `cacheRead` is optional (older counters). */
+export interface TokenUsage {
+    input: number;
+    output: number;
+    cacheRead?: number | undefined;
+}
+/**
+ * Normalize a models.dev model object's pricing into {@link CostRates}.
+ * Missing model, missing `cost`, or missing individual fields all yield 0 —
+ * free/unmetered plans report `$0` rather than crashing.
+ */
+export declare function getCostRates(model: unknown): CostRates;
+/**
+ * Dollar cost of `usage` at the given per-1M-token `rates`. Returns 0 when all
+ * rates are 0 (unpriced plan).
+ */
+export declare function computeUsageCost(usage: TokenUsage, rates: CostRates): number;
+//# sourceMappingURL=usage-cost.d.ts.map

package/dist/server/usage-cost.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage-cost.d.ts","sourceRoot":"","sources":["../../src/server/usage-cost.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,4EAA4E;AAC5E,MAAM,WAAW,SAAS;IACxB,6BAA6B;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,iFAAiF;AACjF,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,CAStD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,GAAG,MAAM,CAO5E"}

package/dist/server/worktree-ws-handler.d.ts

@@ -0,0 +1,67 @@
+import type { WebSocket } from 'ws';
+import type { EventBus, Logger } from '@wrongstack/core';
+export interface WorktreeManagementDeps {
+    projectRoot: string;
+    /** Board snapshot dir — powers the cross-process liveness guard on cleanup. */
+    boardsDir: string;
+}
+/**
+ * WorktreeWebSocketHandler — mirrors AutoPhaseWebSocketHandler. Subscribes to
+ * the shared EventBus `worktree.*` lifecycle events, keeps a live snapshot of
+ * every worktree, and broadcasts:
+ *   - `worktree.event` incrementally (drives the flowing activity strip)
+ *   - `worktree.state`  on connect + on a 2s timer (drives swim-lanes/DAG)
+ */
+export declare class WorktreeWebSocketHandler {
+    private readonly events;
+    private readonly logger;
+    private readonly management?;
+    private readonly clients;
+    private readonly handles;
+    private baseBranch;
+    private broadcastInterval;
+    private readonly offs;
+    constructor(events: EventBus, logger: Logger, management?: WorktreeManagementDeps | undefined);
+    addClient(ws: WebSocket): void;
+    /** Handle worktree-panel control messages (scan / clean / per-row ops). */
+    handleMessage(msg: {
+        type: string;
+        payload?: Record<string, unknown>;
+    }): Promise<boolean>;
+    dispose(): void;
+    /** Absolute managed-worktrees root for this project. */
+    private worktreesRoot;
+    /** True iff `dir` resolves strictly inside the managed worktrees root. */
+    private underRoot;
+    /** Branches of worktrees a live in-session run currently owns. */
+    private liveActiveBranches;
+    /**
+     * Scan the disk for managed worktrees/branches NOT owned by a live in-session
+     * run and broadcast them as orphans, with whether it is safe to clean now.
+     * No-op (empty inventory) when management deps were not wired.
+     */
+    private scanAndBroadcast;
+    /**
+     * Force-remove every orphaned worktree + branch. Refused while a run is live —
+     * in this session (active handles) OR another process (the SDD board liveness
+     * guard inside cleanupStaleSddWorktrees). Best-effort; reports the outcome.
+     */
+    private cleanupOrphans;
+    /** Remove/discard ONE worktree + branch. Refused while a live run owns it. */
+    private removeOne;
+    /** Squash-merge ONE branch into base. Refused while a live run owns it. */
+    private mergeBranch;
+    /** Compact change summary for one worktree checkout. */
+    private diffOne;
+    private subscribe;
+    private upsert;
+    private patch;
+    private activity;
+    private stateMessage;
+    private broadcastState;
+    private ensureBroadcast;
+    private stopBroadcast;
+    private broadcast;
+    private send;
+}
+//# sourceMappingURL=worktree-ws-handler.d.ts.map

package/dist/server/worktree-ws-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree-ws-handler.d.ts","sourceRoot":"","sources":["../../src/server/worktree-ws-handler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAmBzD,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,qBAAa,wBAAwB;IAQjC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;IAT9B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyC;IACjE,OAAO,CAAC,UAAU,CAAM;IACxB,OAAO,CAAC,iBAAiB,CAA+C;IACxE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAyB;IAE9C,YACmB,MAAM,EAAE,QAAQ,EAChB,MAAM,EAAE,MAAM,EACd,UAAU,CAAC,EAAE,sBAAsB,GAAG,SAAS,EAGjE;IAED,SAAS,CAAC,EAAE,EAAE,SAAS,GAAG,IAAI,CAO7B;IAED,2EAA2E;IACrE,aAAa,CAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAsB9F;IAED,OAAO,IAAI,IAAI,CAId;IAID,wDAAwD;IACxD,OAAO,CAAC,aAAa;IAIrB,0EAA0E;IAC1E,OAAO,CAAC,SAAS;IAMjB,kEAAkE;IAClE,OAAO,CAAC,kBAAkB;IAQ1B;;;;OAIG;YACW,gBAAgB;IAuC9B;;;;OAIG;YACW,cAAc;IAoC5B,8EAA8E;YAChE,SAAS;IAkCvB,2EAA2E;YAC7D,WAAW;IAsBzB,wDAAwD;YAC1C,OAAO;IAgBrB,OAAO,CAAC,SAAS;IA8DjB,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,KAAK;IAMb,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,eAAe;IAMvB,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,SAAS;IAWjB,OAAO,CAAC,IAAI;CAOb"}

package/dist/server/ws-auth.d.ts

@@ -0,0 +1,83 @@
+/** A hostname that refers to the local machine. */
+export declare function isLoopbackHostname(hostname: string): boolean;
+/** True when the server is bound to a loopback interface (vs. LAN/0.0.0.0). */
+export declare function isLoopbackBind(wsHost: string): boolean;
+/**
+ * True when the server is bound to a wildcard address that exposes it on every
+ * interface — IPv4 `0.0.0.0` OR IPv6 `::` (and its bracketed form). The
+ * "LAN exposure = deny" guards below must treat both families identically; a
+ * `::` bind is exactly as exposed as `0.0.0.0` and previously slipped past the
+ * `wsHost === '0.0.0.0'` string check.
+ */
+export declare function isWildcardBind(wsHost: string): boolean;
+/**
+ * Constant-time comparison of a provided token against the expected one.
+ * A length mismatch short-circuits (lengths aren't secret); equal-length
+ * inputs are compared with `timingSafeEqual` so the token can't be recovered
+ * byte-by-byte via response timing.
+ */
+export declare function tokenMatches(provided: string | undefined, expected: string): boolean;
+/** Pull the `token` query param out of a request URL (`/?token=…`). */
+export declare function extractToken(url: string): string | undefined;
+/**
+ * Pull the `ws_token` value out of a Cookie header (`Cookie: ws_token=…`).
+ * The WebUI's auth-token cookie is set via `Set-Cookie: ws_token=<token>;
+ * HttpOnly; SameSite=Strict; Path=/` from the `/ws-auth` HTTP endpoint. The
+ * browser then sends it back automatically on the WS upgrade request —
+ * closing the C-598 (Information Exposure Through Query String) class
+ * because the token never appears in the URL, browser history, or
+ * reverse-proxy access logs.
+ *
+ * Returns `undefined` if the cookie header is absent or malformed.
+ */
+export declare function extractTokenFromCookie(cookieHeader: string | string[] | undefined): string | undefined;
+/**
+ * DNS-rebinding defense. On a loopback bind, the `Host` header must resolve to
+ * a loopback name. When the operator deliberately exposes the socket (wsHost is
+ * a LAN/0.0.0.0 address) the Host is legitimately non-loopback, so the guard is
+ * skipped and connection auth falls to the token check.
+ */
+export declare function hostHeaderOk(input: {
+    hostHeader: string | undefined;
+    wsHost: string;
+    allowedHostnames?: readonly string[] | undefined;
+}): boolean;
+export interface VerifyClientInput {
+    /** Browser `Origin` header, or undefined for non-browser clients. */
+    origin?: string | undefined;
+    /** Request URL (`req.url`) — carries the `?token=…` query param. */
+    url: string;
+    /** `Host` header (`req.headers.host`). */
+    hostHeader?: string | undefined;
+    /** Peer address (`req.socket.remoteAddress`). */
+    remoteAddress?: string | undefined;
+    /** `Cookie` header (`req.headers.cookie`). Carries `ws_token=…` when the
+     *  browser went through `/ws-auth` to set the HttpOnly auth cookie. */
+    cookieHeader?: string | string[] | undefined;
+    /** Host/interface the WS server is bound to. */
+    wsHost: string;
+    /** The server's generated auth token. */
+    expectedToken: string;
+    /** Force token auth even for loopback binds, useful behind public tunnels. */
+    requireToken?: boolean | undefined;
+    /** Extra Host header names allowed on loopback binds, e.g. a tunnel hostname. */
+    allowedHostnames?: readonly string[] | undefined;
+    /** Allow browser WS URL tokens for explicit public WS URLs where cookies cannot cross hostnames. */
+    allowBrowserUrlToken?: boolean | undefined;
+}
+/**
+ * Decide whether to accept an incoming WebSocket handshake. Pure mirror of the
+ * closure previously inlined in `index.ts`; see the module doc for the layered
+ * policy. Returns `true` to accept, `false` to reject.
+ *
+ * Token sources, in priority order:
+ *  1. `Cookie: ws_token=…` (browser clients that went through `/ws-auth`)
+ *  2. `?token=…` URL query param (non-browser clients: curl, scripts)
+ *
+ * Browser clients (with an `Origin` header) are restricted to the cookie path —
+ * URL token is rejected for them, closing the C-598 query-string token
+ * exposure class. Non-browser clients keep the URL-token fallback so curl
+ * and tests continue to work.
+ */
+export declare function verifyClient(input: VerifyClientInput): boolean;
+//# sourceMappingURL=ws-auth.d.ts.map

package/dist/server/ws-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-auth.d.ts","sourceRoot":"","sources":["../../src/server/ws-auth.ts"],"names":[],"mappings":"AA+BA,mDAAmD;AACnD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAO5D;AAwBD,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEtD;AAYD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAMpF;AAED,uEAAuE;AACvE,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAG5D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAkBtG;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAClC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAClD,GAAG,OAAO,CAYV;AAED,MAAM,WAAW,iBAAiB;IAChC,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAC;IACZ,0CAA0C;IAC1C,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,iDAAiD;IACjD,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC;2EACuE;IACvE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;IAC7C,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,aAAa,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACnC,iFAAiF;IACjF,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACjD,oGAAoG;IACpG,oBAAoB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC5C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAuD9D"}

package/dist/server/ws-payload-validation.d.ts

@@ -0,0 +1,122 @@
+export type PayloadValidationResult<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    message: string;
+};
+export interface ModelSwitchPayload {
+    provider: string;
+    model: string;
+}
+export declare function validateModelSwitchPayload(payload: unknown): PayloadValidationResult<ModelSwitchPayload>;
+export interface PrefsUpdatePayload {
+    prefs: Record<string, unknown>;
+}
+export interface MailboxMessagesPayload {
+    limit?: number;
+    agentId?: string;
+    unreadOnly?: boolean;
+    incompleteOnly?: boolean;
+}
+export declare function validateMailboxMessagesPayload(payload: unknown): PayloadValidationResult<MailboxMessagesPayload | undefined>;
+export interface MailboxAgentsPayload {
+    onlineOnly?: boolean;
+}
+export declare function validateMailboxAgentsPayload(payload: unknown): PayloadValidationResult<MailboxAgentsPayload | undefined>;
+export interface MailboxPurgePayload {
+    completedMaxAgeMs?: number;
+    incompleteMaxAgeMs?: number;
+}
+export declare function validateMailboxPurgePayload(payload: unknown): PayloadValidationResult<MailboxPurgePayload | undefined>;
+export interface BrainRiskPayload {
+    level: string;
+}
+export declare function validateBrainRiskPayload(payload: unknown): PayloadValidationResult<BrainRiskPayload>;
+export interface BrainAskPayload {
+    question: string;
+}
+export declare function validateBrainAskPayload(payload: unknown): PayloadValidationResult<BrainAskPayload>;
+export interface AutonomySwitchPayload {
+    mode: string;
+}
+export declare function validateAutonomySwitchPayload(payload: unknown): PayloadValidationResult<AutonomySwitchPayload>;
+export interface PlanTemplateUsePayload {
+    template: string;
+}
+export declare function validatePlanTemplateUsePayload(payload: unknown): PayloadValidationResult<PlanTemplateUsePayload>;
+export declare function validatePrefsUpdatePayload(payload: unknown): PayloadValidationResult<PrefsUpdatePayload>;
+export interface SkillsCreatePayload {
+    name: string;
+    description: string;
+    scope: 'project' | 'global';
+}
+export declare function validateSkillsCreatePayload(payload: unknown): PayloadValidationResult<SkillsCreatePayload>;
+export interface SkillsEditPayload {
+    name: string;
+    body: string;
+}
+export declare function validateSkillsEditPayload(payload: unknown): PayloadValidationResult<SkillsEditPayload>;
+export interface ProcessKillPayload {
+    pid: number;
+}
+export declare function validateProcessKillPayload(payload: unknown): PayloadValidationResult<ProcessKillPayload>;
+export interface WorkingDirSetPayload {
+    path: string;
+}
+export declare function validateWorkingDirSetPayload(payload: unknown): PayloadValidationResult<WorkingDirSetPayload>;
+export interface ModeSwitchPayload {
+    id: string;
+}
+export declare function validateModeSwitchPayload(payload: unknown): PayloadValidationResult<ModeSwitchPayload>;
+export interface ContextModeIdPayload {
+    id: string;
+}
+export declare function validateContextModeSwitchPayload(payload: unknown): PayloadValidationResult<ContextModeIdPayload>;
+export declare function validateContextModeDeletePayload(payload: unknown): PayloadValidationResult<ContextModeIdPayload>;
+export interface ContextModeCreatePayload {
+    id: string;
+    name: string;
+    description: string;
+    thresholds: {
+        warn: number;
+        soft: number;
+        hard: number;
+    };
+    preserveK: number;
+    eliseThreshold: number;
+}
+export declare function validateContextModeCreatePayload(payload: unknown): PayloadValidationResult<ContextModeCreatePayload>;
+export interface ContextModeUpdatePayload {
+    id: string;
+    name?: string;
+    description?: string;
+    thresholds?: {
+        warn?: number;
+        soft?: number;
+        hard?: number;
+    };
+    preserveK?: number;
+    eliseThreshold?: number;
+}
+export declare function validateContextModeUpdatePayload(payload: unknown): PayloadValidationResult<ContextModeUpdatePayload>;
+export interface ShellOpenPayload {
+    path: string;
+    target?: 'file' | 'terminal';
+}
+export declare function validateShellOpenPayload(payload: unknown): PayloadValidationResult<ShellOpenPayload>;
+export interface GitDiffPayload {
+    path: string;
+}
+export declare function validateGitDiffPayload(payload: unknown): PayloadValidationResult<GitDiffPayload>;
+export interface ProjectsAddPayload {
+    root: string;
+    name?: string;
+}
+export declare function validateProjectsAddPayload(payload: unknown): PayloadValidationResult<ProjectsAddPayload>;
+export interface ProjectsSelectPayload {
+    root: string;
+    name?: string;
+}
+export declare function validateProjectsSelectPayload(payload: unknown): PayloadValidationResult<ProjectsSelectPayload>;
+//# sourceMappingURL=ws-payload-validation.d.ts.map

package/dist/server/ws-payload-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-payload-validation.d.ts","sourceRoot":"","sources":["../../src/server/ws-payload-validation.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,uBAAuB,CAAC,CAAC,IAAI;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAMjG,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,OAAO,GACf,uBAAuB,CAAC,kBAAkB,CAAC,CAgB7C;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAID,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,OAAO,GACf,uBAAuB,CAAC,sBAAsB,GAAG,SAAS,CAAC,CA0C7D;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,OAAO,GACf,uBAAuB,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAgB3D;AAED,MAAM,WAAW,mBAAmB;IAClC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,OAAO,GACf,uBAAuB,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAwC1D;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;CACf;AAID,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,OAAO,GACf,uBAAuB,CAAC,gBAAgB,CAAC,CAY3C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,OAAO,GACf,uBAAuB,CAAC,eAAe,CAAC,CAS1C;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,OAAO,GACf,uBAAuB,CAAC,qBAAqB,CAAC,CAShD;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,OAAO,GACf,uBAAuB,CAAC,sBAAsB,CAAC,CAYjD;AA2KD,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,OAAO,GACf,uBAAuB,CAAC,kBAAkB,CAAC,CAS7C;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,SAAS,GAAG,QAAQ,CAAC;CAC7B;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,OAAO,GACf,uBAAuB,CAAC,mBAAmB,CAAC,CAoB9C;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,OAAO,GACf,uBAAuB,CAAC,iBAAiB,CAAC,CAa5C;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,OAAO,GACf,uBAAuB,CAAC,kBAAkB,CAAC,CAS7C;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,OAAO,GACf,uBAAuB,CAAC,oBAAoB,CAAC,CAS/C;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,OAAO,GACf,uBAAuB,CAAC,iBAAiB,CAAC,CAS5C;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;CACZ;AAgBD,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,OAAO,GACf,uBAAuB,CAAC,oBAAoB,CAAC,CAE/C;AAED,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,OAAO,GACf,uBAAuB,CAAC,oBAAoB,CAAC,CAE/C;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB;AAMD,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,OAAO,GACf,uBAAuB,CAAC,wBAAwB,CAAC,CAyDnD;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,OAAO,GACf,uBAAuB,CAAC,wBAAwB,CAAC,CA6EnD;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;CAC9B;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,OAAO,GACf,uBAAuB,CAAC,gBAAgB,CAAC,CAsB3C;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAYhG;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,OAAO,GACf,uBAAuB,CAAC,kBAAkB,CAAC,CAgB7C;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,OAAO,GACf,uBAAuB,CAAC,qBAAqB,CAAC,CAgBhD"}

package/dist/server/ws-utils.d.ts

@@ -0,0 +1,38 @@
+import { WebSocket } from 'ws';
+import type { ConnectedClient } from './types.js';
+/**
+ * Send a JSON message to a single WebSocket client.
+ * No-op when the socket is not in OPEN state (disconnected / closing).
+ */
+export declare function send(ws: WebSocket, msg: object): void;
+/**
+ * Broadcast a JSON message to every connected client.
+ * Swallows per-socket send errors — a client that disconnected between the
+ * readyState check and `ws.send()` is cleaned up by its own `close` handler.
+ */
+export declare function broadcast(clients: Map<WebSocket, ConnectedClient>, msg: object): void;
+/**
+ * Send a success/failure result message (used by key.* and provider.* handlers).
+ * The frontend expects `key.operation_result` with `{ success, message }`.
+ */
+export declare function sendResult(ws: WebSocket, success: boolean, message: string): void;
+/**
+ * Extract a human-readable message from an unknown thrown value.
+ */
+export declare function errMessage(err: unknown): string;
+/**
+ * Generate a cryptographically random WebSocket auth token (hex string).
+ * Shared between standalone and CLI-embedded WebUI servers.
+ */
+export declare function generateAuthToken(): string;
+export declare function resolveAuthToken(explicit?: string | undefined): string;
+export declare function hostForBrowserUrl(bindHost: string): string;
+export declare function buildWebUIAccessUrl(opts: {
+    host: string;
+    port: number;
+    token?: string | undefined;
+    protocol?: 'http' | 'https' | undefined;
+    publicUrl?: string | undefined;
+}): string;
+export declare function envFlag(name: string): boolean;
+//# sourceMappingURL=ws-utils.d.ts.map

package/dist/server/ws-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-utils.d.ts","sourceRoot":"","sources":["../../src/server/ws-utils.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD;;;GAGG;AACH,wBAAgB,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAIrD;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CACvB,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,EACxC,GAAG,EAAE,MAAM,GACV,IAAI,CAYN;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAEjF;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAE/C;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAMtE;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAK1D;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,GAAG,MAAM,CAgBT;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAG7C"}

package/dist/server/zip.d.ts

@@ -0,0 +1,9 @@
+export interface ZipEntryInput {
+    name: string;
+    data: string | Uint8Array;
+}
+/** Create a standards-compliant ZIP archive using only Node built-ins. */
+export declare function createZipBuffer(entries: ZipEntryInput[]): Buffer;
+/** Minimal reader for validation/import paths; rejects encrypted or unsafe entries. */
+export declare function readZipEntries(archive: Uint8Array): Map<string, Buffer>;
+//# sourceMappingURL=zip.d.ts.map

package/dist/server/zip.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zip.d.ts","sourceRoot":"","sources":["../../src/server/zip.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,UAAU,CAAC;CAC3B;AAED,0EAA0E;AAC1E,wBAAgB,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,MAAM,CAiDhE;AAED,uFAAuF;AACvF,wBAAgB,cAAc,CAAC,OAAO,EAAE,UAAU,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAyCvE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/webui-server",
-  "version": "0.284.0",
+  "version": "0.285.0",
   "license": "MIT",
   "description": "WrongStack WebUI HTTP/WebSocket server module — extracted from @wrongstack/webui in PR #243/244 to remove the CLI -> @wrongstack/webui/server cross-package edge (audit §3.1.1). Pure backend: HTTP routes, WebSocket handlers, MCP tool wrappers, HTML serving. The web frontend lives in @wrongstack/webui; this package is the standalone server it can run on.",
   "keywords": [
@@ -37,27 +37,26 @@
     "dist"
   ],
   "dependencies": {
-    "jszip": "^3.10.1",
     "ws": "^8.21.0",
-    "@wrongstack/core": "0.284.0",
-    "@wrongstack/kanban": "0.284.0",
-    "@wrongstack/runtime": "0.284.0",
-    "@wrongstack/mcp": "0.284.0",
-    "@wrongstack/providers": "0.284.0",
-    "@wrongstack/tools": "0.284.0",
-    "@wrongstack/sdd": "0.284.0"
+    "@wrongstack/core": "0.285.0",
+    "@wrongstack/kanban": "0.285.0",
+    "@wrongstack/providers": "0.285.0",
+    "@wrongstack/super-memory": "0.285.0",
+    "@wrongstack/sdd": "0.285.0",
+    "@wrongstack/mcp": "0.285.0",
+    "@wrongstack/tools": "0.285.0",
+    "@wrongstack/runtime": "0.285.0"
   },
   "devDependencies": {
     "@types/node": "^26.0.1",
     "@types/ws": "^8.18.1",
-    "tsup": "^8.5.1",
-    "typescript": "^6.0.3"
+    "typescript": "^7.0.2"
   },
   "publishConfig": {
     "access": "public"
   },
   "scripts": {
-    "build": "tsup",
+    "build": "node ../../scripts/build-package.mjs",
     "typecheck": "tsc --noEmit",
     "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\""
   }