@wrongstack/webui-server 0.284.1 → 0.285.0

package/dist/server/handlers.js.map

@@ -1 +1,7 @@
-{"version":3,"sources":["../../src/server/ws-payload-validation.ts","../../src/server/handlers/worklist-handlers.ts"],"names":[],"mappings":";AAEA,SAAS,SAAS,KAAA,EAAkD;AAClE,EAAA,OAAO,OAAO,UAAU,QAAA,IAAY,KAAA,KAAU,QAAQ,CAAC,KAAA,CAAM,QAAQ,KAAK,CAAA;AAC5E;AA2NO,SAAS,+BACd,OAAA,EACiD;AACjD,EAAA,IAAI,CAAC,QAAA,CAAS,OAAO,CAAA,EAAG;AACtB,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,OAAA,EAAS;AAAA,KACX;AAAA,EACF;AACA,EAAA,MAAM,QAAA,GAAW,QAAQ,UAAU,CAAA;AACnC,EAAA,IAAI,OAAO,QAAA,KAAa,QAAA,IAAY,SAAS,IAAA,EAAK,CAAE,WAAW,CAAA,EAAG;AAChE,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,OAAA,EAAS,+DAAA,EAAgE;AAAA,EAC/F;AACA,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAO,EAAE,UAAS,EAAE;AACzC;;;AC5NA,SAAS,UAAA,CACP,EAAA,EACA,GAAA,EACA,EAAA,EACA,OAAA,EACM;AACN,EAAA,GAAA,CAAI,IAAA,CAAK,IAAI,EAAE,IAAA,EAAM,KAAK,IAAA,GAAO,OAAA,EAAS,SAAS,CAAA;AACrD;AAEA,SAAS,cAAA,CACP,KACA,OAAA,EAC2B;AAC3B,EAAA,MAAM,QAAA,GAAW,QAAQ,WAAW,CAAA;AACpC,EAAA,MAAM,QAAA,GAAW,GAAA,CAAI,OAAA,CAAQ,OAAA,EAAS,EAAA,IAAM,EAAA;AAC5C,EAAA,MAAM,YAAY,OAAO,QAAA,KAAa,YAAY,QAAA,CAAS,MAAA,GAAS,IAAI,QAAA,GAAW,QAAA;AACnF,EAAA,OAAO,EAAE,GAAG,OAAA,EAAS,SAAA,EAAU;AACjC;AAwBO,SAAS,cAAA,CAAe,KAAsB,EAAA,EAAqB;AACxE,EAAA,GAAA,CAAI,IAAA,CAAK,EAAA,EAAI,EAAE,IAAA,EAAM,iBAAiB,OAAA,EAAS,cAAA,CAAe,GAAA,EAAK,EAAE,OAAO,GAAA,CAAI,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA;AACpG;AAEO,SAAS,gBAAA,CAAiB,KAAsB,EAAA,EAAqB;AAC1E,EAAA,GAAA,CAAI,YAAA,GAAe,EAAE,CAAA;AACrB,EAAA,GAAA,CAAI,SAAA,CAAU,EAAE,IAAA,EAAM,eAAA,EAAiB,OAAA,EAAS,eAAe,GAAA,EAAK,EAAE,CAAA,EAAG,CAAA;AACzE,EAAA,UAAA,CAAW,EAAA,EAAI,GAAA,EAAK,IAAA,EAAM,qBAAqB,CAAA;AACjD;AAEO,SAAS,iBAAA,CACd,GAAA,EACA,EAAA,EACA,OAAA,EACM;AACN,EAAA,IAAI,CAAC,OAAA,IAAY,OAAA,CAAQ,OAAO,MAAA,IAAa,OAAA,CAAQ,UAAU,MAAA,EAAY;AACzE,IAAA,UAAA,CAAW,EAAA,EAAI,GAAA,EAAK,KAAA,EAAO,oCAAoC,CAAA;AAC/D,IAAA;AAAA,EACF;AACA,EAAA,MAAM,IAAA,GACJ,OAAA,CAAQ,EAAA,KAAO,MAAA,GACX,GAAA,CAAI,QAAQ,KAAA,CAAM,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,EAAA,KAAO,QAAQ,EAAE,CAAA,GACnD,GAAA,CAAI,OAAA,CAAQ,KAAA,CAAM,MAAA,CAAO,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,KAAO,OAAA,CAAQ,KAAgB,CAAA;AACxE,EAAA,GAAA,CAAI,eAAe,IAAI,CAAA;AACvB,EAAA,GAAA,CAAI,SAAA,CAAU,EAAE,IAAA,EAAM,eAAA,EAAiB,OAAA,EAAS,cAAA,CAAe,GAAA,EAAK,EAAE,KAAA,EAAO,IAAA,EAAM,CAAA,EAAG,CAAA;AACtF,EAAA,UAAA,CAAW,EAAA,EAAI,GAAA,EAAK,IAAA,EAAM,oBAAoB,CAAA;AAChD;AAEO,SAAS,gBAAA,CACd,GAAA,EACA,EAAA,EACA,OAAA,EACM;AACN,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,EAAA,KAAO,OAAA,CAAQ,EAAE,CAAA;AAC9D,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,UAAA,CAAW,IAAI,GAAA,EAAK,KAAA,EAAO,CAAA,iBAAA,EAAoB,OAAA,CAAQ,EAAE,CAAA,EAAA,CAAI,CAAA;AAC7D,IAAA;AAAA,EACF;AACA,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,KAAA,CAAM,GAAA;AAAA,IAAI,CAAC,CAAA,KAClC,CAAA,CAAE,EAAA,KAAO,OAAA,CAAQ,EAAA,GACb,EAAE,GAAG,CAAA,EAAG,GAAI,OAAA,CAAQ,MAAA,KAAW,MAAA,IAAa,EAAE,MAAA,EAAQ,OAAA,CAAQ,MAAA,EAAO,EAAI,GAAI,OAAA,CAAQ,UAAA,KAAe,MAAA,IAAa,EAAE,UAAA,EAAY,OAAA,CAAQ,UAAA,EAAW,EAAG,GACrJ;AAAA,GACN;AACA,EAAA,GAAA,CAAI,eAAe,IAAI,CAAA;AACvB,EAAA,GAAA,CAAI,SAAA,CAAU,EAAE,IAAA,EAAM,eAAA,EAAiB,OAAA,EAAS,cAAA,CAAe,GAAA,EAAK,EAAE,KAAA,EAAO,IAAA,EAAM,CAAA,EAAG,CAAA;AACtF,EAAA,UAAA,CAAW,IAAI,GAAA,EAAK,IAAA,EAAM,CAAA,MAAA,EAAS,IAAA,CAAK,OAAO,CAAA,UAAA,CAAY,CAAA;AAC7D;AAIA,eAAsB,cAAA,CAAe,KAAsB,EAAA,EAA8B;AACvF,EAAA,MAAM,QAAA,GAAW,GAAA,CAAI,OAAA,CAAQ,IAAA,CAAK,WAAW,CAAA;AAC7C,EAAA,IAAI,OAAO,QAAA,KAAa,QAAA,IAAY,QAAA,EAAU;AAC5C,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,SAAA,EAAU,GAAI,MAAM,OAAO,kBAAkB,CAAA;AACrD,MAAA,MAAM,IAAA,GAAO,MAAM,SAAA,CAAU,QAAQ,CAAA;AACrC,MAAA,GAAA,CAAI,KAAK,EAAA,EAAI,EAAE,IAAA,EAAM,eAAA,EAAiB,SAAS,cAAA,CAAe,GAAA,EAAK,EAAE,KAAA,EAAO,MAAM,KAAA,IAAS,EAAC,EAAG,GAAG,CAAA;AAAA,IACpG,CAAA,CAAA,MAAQ;AACN,MAAA,GAAA,CAAI,IAAA,CAAK,EAAA,EAAI,EAAE,IAAA,EAAM,iBAAiB,OAAA,EAAS,cAAA,CAAe,GAAA,EAAK,EAAE,KAAA,EAAO,EAAC,EAAG,GAAG,CAAA;AAAA,IACrF;AAAA,EACF,CAAA,MAAO;AACL,IAAA,GAAA,CAAI,KAAK,EAAA,EAAI;AAAA,MACX,IAAA,EAAM,eAAA;AAAA,MACN,OAAA,EAAS,eAAe,GAAA,EAAK,EAAE,OAAO,EAAC,EAAG,KAAA,EAAO,8BAAA,EAAgC;AAAA,KAClF,CAAA;AAAA,EACH;AACF;AAEA,eAAsB,gBAAA,CACpB,GAAA,EACA,EAAA,EACA,OAAA,EAIe;AACf,EAAA,MAAM,QAAA,GAAW,GAAA,CAAI,OAAA,CAAQ,IAAA,CAAK,WAAW,CAAA;AAC7C,EAAA,IAAI,OAAO,QAAA,KAAa,QAAA,IAAY,CAAC,QAAA,EAAU;AAC7C,IAAA,UAAA,CAAW,EAAA,EAAI,GAAA,EAAK,KAAA,EAAO,kDAAkD,CAAA;AAC7E,IAAA;AAAA,EACF;AACA,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,SAAA,EAAW,SAAA,EAAU,GAAI,MAAM,OAAO,kBAAkB,CAAA;AAChE,IAAA,MAAM,IAAA,GAAO,MAAM,SAAA,CAAU,QAAQ,CAAA;AACrC,IAAA,IAAI,CAAC,IAAA,EAAM;AACT,MAAA,UAAA,CAAW,EAAA,EAAI,GAAA,EAAK,KAAA,EAAO,qBAAqB,CAAA;AAChD,MAAA;AAAA,IACF;AACA,IAAA,MAAM,GAAA,GAAM,KAAK,KAAA,CAAM,SAAA,CAAU,CAAC,CAAA,KAAM,CAAA,CAAE,EAAA,KAAO,OAAA,CAAQ,EAAE,CAAA;AAC3D,IAAA,IAAI,QAAQ,CAAA,CAAA,EAAI;AACd,MAAA,UAAA,CAAW,IAAI,GAAA,EAAK,KAAA,EAAO,CAAA,MAAA,EAAS,OAAA,CAAQ,EAAE,CAAA,YAAA,CAAc,CAAA;AAC5D,MAAA;AAAA,IACF;AACA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAC/B,IAAA,IAAI,CAAC,QAAA,EAAU;AAIb,MAAA,UAAA,CAAW,IAAI,GAAA,EAAK,KAAA,EAAO,CAAA,MAAA,EAAS,OAAA,CAAQ,EAAE,CAAA,YAAA,CAAc,CAAA;AAC5D,MAAA;AAAA,IACF;AACA,IAAA,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,GAAI,EAAE,GAAG,QAAA,EAAU,MAAA,EAAQ,QAAQ,MAAA,EAAO;AACxD,IAAA,MAAM,SAAA,CAAU,UAAU,IAAI,CAAA;AAC9B,IAAA,GAAA,CAAI,SAAA,CAAU,EAAE,IAAA,EAAM,eAAA,EAAiB,OAAA,EAAS,cAAA,CAAe,GAAA,EAAK,EAAE,KAAA,EAAO,IAAA,CAAK,KAAA,EAAO,GAAG,CAAA;AAC5F,IAAA,UAAA,CAAW,EAAA,EAAI,KAAK,IAAA,EAAM,CAAA,MAAA,EAAS,QAAQ,EAAE,CAAA,SAAA,EAAY,OAAA,CAAQ,MAAM,CAAA,CAAA,CAAG,CAAA;AAAA,EAC5E,SAAS,GAAA,EAAK;AACZ,IAAA,UAAA,CAAW,EAAA,EAAI,GAAA,EAAK,KAAA,EAAO,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,EACxC;AACF;AAIA,eAAsB,aAAA,CAAc,KAAsB,EAAA,EAA8B;AACtF,EAAA,MAAM,QAAA,GAAW,GAAA,CAAI,OAAA,CAAQ,IAAA,CAAK,WAAW,CAAA;AAC7C,EAAA,MAAM,SAAA,GAAY,GAAA,CAAI,OAAA,CAAQ,OAAA,EAAS,EAAA,IAAM,EAAA;AAC7C,EAAA,IAAI,OAAO,QAAA,KAAa,QAAA,IAAY,QAAA,EAAU;AAC5C,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,QAAA,EAAS,GAAI,MAAM,OAAO,kBAAkB,CAAA;AACpD,MAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,QAAQ,CAAA;AACpC,MAAA,GAAA,CAAI,KAAK,EAAA,EAAI;AAAA,QACX,IAAA,EAAM,cAAA;AAAA,QACN,OAAA,EAAS,eAAe,GAAA,EAAK;AAAA,UAC3B,MAAM,IAAA,IAAQ;AAAA,YACZ,OAAA,EAAS,CAAA;AAAA,YACT,SAAA;AAAA,YACA,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,YAClC,OAAO;AAAC;AACV,SACD;AAAA,OACF,CAAA;AAAA,IACH,CAAA,CAAA,MAAQ;AACN,MAAA,GAAA,CAAI,KAAK,EAAA,EAAI;AAAA,QACX,IAAA,EAAM,cAAA;AAAA,QACN,OAAA,EAAS,eAAe,GAAA,EAAK;AAAA,UAC3B,IAAA,EAAM;AAAA,YACJ,OAAA,EAAS,CAAA;AAAA,YACT,SAAA;AAAA,YACA,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,YAClC,OAAO;AAAC;AACV,SACD;AAAA,OACF,CAAA;AAAA,IACH;AAAA,EACF,CAAA,MAAO;AACL,IAAA,GAAA,CAAI,KAAK,EAAA,EAAI;AAAA,MACX,IAAA,EAAM,cAAA;AAAA,MACN,OAAA,EAAS,eAAe,GAAA,EAAK,EAAE,MAAM,IAAA,EAAM,KAAA,EAAO,oDAAoD;AAAA,KACvG,CAAA;AAAA,EACH;AACF;AAEA,eAAsB,qBAAA,CAAsB,GAAA,EAAsB,EAAA,EAAe,QAAA,EAAiC;AAChH,EAAA,MAAM,QAAA,GAAW,GAAA,CAAI,OAAA,CAAQ,IAAA,CAAK,WAAW,CAAA;AAC7C,EAAA,MAAM,SAAA,GAAY,GAAA,CAAI,OAAA,CAAQ,OAAA,EAAS,EAAA,IAAM,EAAA;AAC7C,EAAA,IAAI,OAAO,QAAA,KAAa,QAAA,IAAY,CAAC,QAAA,EAAU;AAC7C,IAAA,UAAA,CAAW,EAAA,EAAI,GAAA,EAAK,KAAA,EAAO,kDAAkD,CAAA;AAC7E,IAAA;AAAA,EACF;AACA,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,iBAAiB,QAAA,EAAU,QAAA,EAAU,WAAW,WAAA,EAAY,GAAI,MAAM,OAAO,kBAAkB,CAAA;AACvG,IAAA,MAAM,GAAA,GAAM,gBAAgB,QAAQ,CAAA;AACpC,IAAA,IAAI,CAAC,GAAA,EAAK;AACR,MAAA,UAAA,CAAW,EAAA,EAAI,GAAA,EAAK,KAAA,EAAO,CAAA,kBAAA,EAAqB,QAAQ,CAAA,EAAA,CAAI,CAAA;AAC5D,MAAA;AAAA,IACF;AACA,IAAA,IAAI,OAAQ,MAAM,QAAA,CAAS,QAAQ,CAAA,IAAM,UAAU,SAAS,CAAA;AAC5D,IAAA,KAAA,MAAW,IAAA,IAAQ,IAAI,KAAA,EAAO;AAC5B,MAAA,CAAC,EAAE,MAAK,GAAI,WAAA,CAAY,MAAM,IAAA,CAAK,KAAA,EAAO,KAAK,OAAO,CAAA;AAAA,IACxD;AACA,IAAA,MAAM,QAAA,CAAS,UAAU,IAAI,CAAA;AAC7B,IAAA,UAAA,CAAW,EAAA,EAAI,GAAA,EAAK,IAAA,EAAM,CAAA,kBAAA,EAAqB,GAAA,CAAI,IAAI,CAAA,SAAA,EAAO,GAAA,CAAI,KAAA,CAAM,MAAM,CAAA,aAAA,CAAe,CAAA;AAC7F,IAAA,GAAA,CAAI,SAAA,CAAU,EAAE,IAAA,EAAM,cAAA,EAAgB,OAAA,EAAS,cAAA,CAAe,GAAA,EAAK,EAAE,IAAA,EAAM,CAAA,EAAG,CAAA;AAAA,EAChF,SAAS,GAAA,EAAK;AACZ,IAAA,UAAA,CAAW,EAAA,EAAI,GAAA,EAAK,KAAA,EAAO,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,EACxC;AACF;AAEA,eAAsB,oBAAA,CACpB,GAAA,EACA,EAAA,EACA,OAAA,EACe;AACf,EAAA,MAAM,QAAA,GAAW,GAAA,CAAI,OAAA,CAAQ,IAAA,CAAK,WAAW,CAAA;AAC7C,EAAA,MAAM,SAAA,GAAY,GAAA,CAAI,OAAA,CAAQ,OAAA,EAAS,EAAA,IAAM,EAAA;AAC7C,EAAA,IAAI,OAAO,QAAA,KAAa,QAAA,IAAY,CAAC,QAAA,EAAU;AAC7C,IAAA,UAAA,CAAW,EAAA,EAAI,GAAA,EAAK,KAAA,EAAO,kDAAkD,CAAA;AAC7E,IAAA;AAAA,EACF;AACA,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,UAAA,EAAY,iBAAA,EAAkB,GAAI,MAAM,OAAO,kBAAkB,CAAA;AACzE,IAAA,IAAI,OAAA,GAAU,KAAA;AACd,IAAA,MAAM,OAAO,MAAM,UAAA,CAAW,QAAA,EAAU,SAAA,EAAW,OAAO,CAAA,KAAM;AAC9D,MAAA,MAAM,SAAS,CAAA,CAAE,SAAA;AACjB,MAAA,MAAM,UAAU,iBAAA,CAAkB,CAAA,EAAG,OAAA,CAAQ,MAAA,EAAQ,QAAQ,MAAM,CAAA;AACnE,MAAA,OAAA,GAAU,QAAQ,SAAA,KAAc,MAAA;AAChC,MAAA,OAAO,OAAA;AAAA,IACT,CAAC,CAAA;AACD,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,UAAA,CAAW,IAAI,GAAA,EAAK,KAAA,EAAO,CAAA,sBAAA,EAAyB,OAAA,CAAQ,MAAM,CAAA,EAAA,CAAI,CAAA;AACtE,MAAA;AAAA,IACF;AACA,IAAA,UAAA,CAAW,IAAI,GAAA,EAAK,IAAA,EAAM,CAAA,6BAAA,EAAgC,OAAA,CAAQ,MAAM,CAAA,EAAA,CAAI,CAAA;AAC5E,IAAA,GAAA,CAAI,SAAA,CAAU,EAAE,IAAA,EAAM,cAAA,EAAgB,OAAA,EAAS,cAAA,CAAe,GAAA,EAAK,EAAE,IAAA,EAAM,CAAA,EAAG,CAAA;AAAA,EAChF,SAAS,GAAA,EAAK;AACZ,IAAA,UAAA,CAAW,EAAA,EAAI,GAAA,EAAK,KAAA,EAAO,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,EACxC;AACF;AAcA,eAAsB,qBAAA,CACpB,GAAA,EACA,EAAA,EACA,GAAA,EACe;AACf,EAAA,QAAQ,IAAI,IAAA;AAAM,IAChB,KAAK,WAAA;AACH,MAAA,cAAA,CAAe,KAAK,EAAE,CAAA;AACtB,MAAA;AAAA,IACF,KAAK,aAAA;AACH,MAAA,gBAAA,CAAiB,KAAK,EAAE,CAAA;AACxB,MAAA;AAAA,IACF,KAAK,cAAA;AACH,MAAA,iBAAA,CAAkB,GAAA,EAAK,EAAA,EAAI,GAAA,CAAI,OAAsD,CAAA;AACrF,MAAA;AAAA,IACF,KAAK,aAAA;AACH,MAAA,gBAAA;AAAA,QACE,GAAA;AAAA,QACA,EAAA;AAAA,QACA,GAAA,CAAI;AAAA,OACN;AACA,MAAA;AAAA,IACF,KAAK,WAAA;AACH,MAAA,MAAM,cAAA,CAAe,KAAK,EAAE,CAAA;AAC5B,MAAA;AAAA,IACF,KAAK,aAAA;AACH,MAAA,MAAM,gBAAA;AAAA,QACJ,GAAA;AAAA,QACA,EAAA;AAAA,QACA,GAAA,CAAI;AAAA,OAIN;AACA,MAAA;AAAA,IACF,KAAK,UAAA;AACH,MAAA,MAAM,aAAA,CAAc,KAAK,EAAE,CAAA;AAC3B,MAAA;AAAA,IACF,KAAK,mBAAA,EAAqB;AACxB,MAAA,MAAM,MAAA,GAAS,8BAAA,CAA+B,GAAA,CAAI,OAAO,CAAA;AACzD,MAAA,IAAI,CAAC,OAAO,EAAA,EAAI;AACd,QAAA,UAAA,CAAW,EAAA,EAAI,GAAA,EAAK,KAAA,EAAO,MAAA,CAAO,OAAO,CAAA;AACzC,QAAA;AAAA,MACF;AACA,MAAA,MAAM,qBAAA,CAAsB,GAAA,EAAK,EAAA,EAAI,MAAA,CAAO,MAAM,QAAQ,CAAA;AAC1D,MAAA;AAAA,IACF;AAAA,IACA,KAAK,kBAAA;AACH,MAAA,MAAM,oBAAA;AAAA,QACJ,GAAA;AAAA,QACA,EAAA;AAAA,QACA,GAAA,CAAI;AAAA,OACN;AACA,MAAA;AAAA;AAEN","file":"handlers.js","sourcesContent":["export type PayloadValidationResult<T> = { ok: true; value: T } | { ok: false; message: string };\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nexport interface ModelSwitchPayload {\n  provider: string;\n  model: string;\n}\n\nexport function validateModelSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ModelSwitchPayload> {\n  if (!isRecord(payload)) {\n    return {\n      ok: false,\n      message: 'model.switch payload must be an object with string provider and model',\n    };\n  }\n  const provider = payload['provider'];\n  const model = payload['model'];\n  if (typeof provider !== 'string' || provider.trim().length === 0) {\n    return { ok: false, message: 'model.switch payload.provider must be a non-empty string' };\n  }\n  if (typeof model !== 'string' || model.trim().length === 0) {\n    return { ok: false, message: 'model.switch payload.model must be a non-empty string' };\n  }\n  return { ok: true, value: { provider, model } };\n}\n\nexport interface PrefsUpdatePayload {\n  prefs: Record<string, unknown>;\n}\n\nconst AUTONOMY_VALUES = new Set(['off', 'suggest', 'auto', 'eternal', 'eternal-parallel']);\n\nexport interface MailboxMessagesPayload {\n  limit?: number;\n  agentId?: string;\n  unreadOnly?: boolean;\n  incompleteOnly?: boolean;\n}\n\nexport function validateMailboxMessagesPayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxMessagesPayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.messages payload must be an object when provided' };\n  }\n  const limit = payload['limit'];\n  const agentId = payload['agentId'];\n  const unreadOnly = payload['unreadOnly'];\n  const incompleteOnly = payload['incompleteOnly'];\n  if (limit !== undefined && (typeof limit !== 'number' || !Number.isFinite(limit) || limit < 1)) {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.limit must be a positive number when provided',\n    };\n  }\n  if (agentId !== undefined && typeof agentId !== 'string') {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.agentId must be a string when provided',\n    };\n  }\n  if (unreadOnly !== undefined && typeof unreadOnly !== 'boolean') {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.unreadOnly must be a boolean when provided',\n    };\n  }\n  if (incompleteOnly !== undefined && typeof incompleteOnly !== 'boolean') {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.incompleteOnly must be a boolean when provided',\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      ...(limit !== undefined ? { limit: limit as number } : {}),\n      ...(agentId !== undefined ? { agentId: agentId as string } : {}),\n      ...(unreadOnly !== undefined ? { unreadOnly: unreadOnly as boolean } : {}),\n      ...(incompleteOnly !== undefined ? { incompleteOnly: incompleteOnly as boolean } : {}),\n    },\n  };\n}\n\nexport interface MailboxAgentsPayload {\n  onlineOnly?: boolean;\n}\n\nexport function validateMailboxAgentsPayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxAgentsPayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.agents payload must be an object when provided' };\n  }\n  const onlineOnly = payload['onlineOnly'];\n  if (onlineOnly !== undefined && typeof onlineOnly !== 'boolean') {\n    return {\n      ok: false,\n      message: 'mailbox.agents payload.onlineOnly must be a boolean when provided',\n    };\n  }\n  return {\n    ok: true,\n    value: { ...(onlineOnly !== undefined ? { onlineOnly: onlineOnly as boolean } : {}) },\n  };\n}\n\nexport interface MailboxPurgePayload {\n  completedMaxAgeMs?: number;\n  incompleteMaxAgeMs?: number;\n}\n\nexport function validateMailboxPurgePayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxPurgePayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.purge payload must be an object when provided' };\n  }\n  const completedMaxAgeMs = payload['completedMaxAgeMs'];\n  const incompleteMaxAgeMs = payload['incompleteMaxAgeMs'];\n  if (\n    completedMaxAgeMs !== undefined &&\n    (typeof completedMaxAgeMs !== 'number' ||\n      !Number.isFinite(completedMaxAgeMs) ||\n      completedMaxAgeMs < 0)\n  ) {\n    return {\n      ok: false,\n      message:\n        'mailbox.purge payload.completedMaxAgeMs must be a non-negative number when provided',\n    };\n  }\n  if (\n    incompleteMaxAgeMs !== undefined &&\n    (typeof incompleteMaxAgeMs !== 'number' ||\n      !Number.isFinite(incompleteMaxAgeMs) ||\n      incompleteMaxAgeMs < 0)\n  ) {\n    return {\n      ok: false,\n      message:\n        'mailbox.purge payload.incompleteMaxAgeMs must be a non-negative number when provided',\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      ...(completedMaxAgeMs !== undefined ? { completedMaxAgeMs: completedMaxAgeMs as number } : {}),\n      ...(incompleteMaxAgeMs !== undefined\n        ? { incompleteMaxAgeMs: incompleteMaxAgeMs as number }\n        : {}),\n    },\n  };\n}\n\nexport interface BrainRiskPayload {\n  level: string;\n}\n\nconst BRAIN_RISK_VALUES = new Set(['off', 'low', 'medium', 'high', 'all']);\n\nexport function validateBrainRiskPayload(\n  payload: unknown,\n): PayloadValidationResult<BrainRiskPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'brain.risk payload must be an object with string level' };\n  }\n  const level = payload['level'];\n  if (typeof level !== 'string' || !BRAIN_RISK_VALUES.has(level)) {\n    return {\n      ok: false,\n      message: 'brain.risk payload.level must be one of off, low, medium, high, all',\n    };\n  }\n  return { ok: true, value: { level } };\n}\n\nexport interface BrainAskPayload {\n  question: string;\n}\n\nexport function validateBrainAskPayload(\n  payload: unknown,\n): PayloadValidationResult<BrainAskPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'brain.ask payload must be an object with string question' };\n  }\n  const question = payload['question'];\n  if (typeof question !== 'string' || question.trim().length === 0) {\n    return { ok: false, message: 'brain.ask payload.question must be a non-empty string' };\n  }\n  return { ok: true, value: { question: question.trim() } };\n}\n\nexport interface AutonomySwitchPayload {\n  mode: string;\n}\n\nexport function validateAutonomySwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<AutonomySwitchPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'autonomy.switch payload must be an object with string mode' };\n  }\n  const mode = payload['mode'];\n  if (typeof mode !== 'string' || !AUTONOMY_VALUES.has(mode)) {\n    return { ok: false, message: 'autonomy.switch payload.mode must be a valid autonomy mode' };\n  }\n  return { ok: true, value: { mode } };\n}\n\nexport interface PlanTemplateUsePayload {\n  template: string;\n}\n\nexport function validatePlanTemplateUsePayload(\n  payload: unknown,\n): PayloadValidationResult<PlanTemplateUsePayload> {\n  if (!isRecord(payload)) {\n    return {\n      ok: false,\n      message: 'plan.template_use payload must be an object with string template',\n    };\n  }\n  const template = payload['template'];\n  if (typeof template !== 'string' || template.trim().length === 0) {\n    return { ok: false, message: 'plan.template_use payload.template must be a non-empty string' };\n  }\n  return { ok: true, value: { template } };\n}\nconst CONTEXT_STRATEGY_VALUES = new Set(['hybrid', 'intelligent', 'selective']);\nconst CONTEXT_MODE_VALUES = new Set(['balanced', 'frugal', 'deep', 'archival']);\nconst TOKEN_SAVING_TIER_VALUES = new Set(['off', 'minimal', 'light', 'medium', 'aggressive']);\nconst ENHANCE_LANGUAGE_VALUES = new Set(['original', 'english']);\nconst LOG_LEVEL_VALUES = new Set(['debug', 'info', 'warn', 'error']);\nconst AUDIT_LEVEL_VALUES = new Set(['minimal', 'standard', 'full']);\nconst REASONING_MODE_VALUES = new Set(['auto', 'on', 'off']);\nconst REASONING_EFFORT_VALUES = new Set([\n  'none',\n  'minimal',\n  'low',\n  'medium',\n  'high',\n  'xhigh',\n  'max',\n]);\nconst CACHE_TTL_VALUES = new Set(['default', '5m', '1h']);\n\nconst BOOLEAN_PREF_KEYS = new Set([\n  'yolo',\n  'chime',\n  'confirmExit',\n  'streamFleet',\n  'nextPrediction',\n  'titleAnimation',\n  'enhanceEnabled',\n  'featureMcp',\n  'featurePlugins',\n  'featureMemory',\n  'featureSkills',\n  'featureModelsRegistry',\n  'indexOnStart',\n  'contextAutoCompact',\n  'tgSessionEnd',\n  'tgDelegate',\n  'reasoningPreserve',\n  'hqEnabled',\n  'hqRawContent',\n  'fallbackAuto',\n  'favoriteModelsOnly',\n]);\n\n/** Keys whose value must be an array of strings (e.g. an ordered model list). */\nconst STRING_ARRAY_PREF_KEYS = new Set(['fallbackModels', 'favoriteModels']);\nconst STRING_ARRAY_RECORD_PREF_KEYS = new Set(['fallbackProfiles']);\nconst MODEL_MATRIX_PREF_KEYS = new Set(['modelMatrix']);\n\nconst NUMBER_PREF_KEYS = new Set([\n  'autonomyDelayMs',\n  'autoProceedMaxIterations',\n  'maxIterations',\n  'maxConcurrent',\n  'enhanceDelayMs',\n  'tgLongToolMs',\n]);\n\nconst STRING_PREF_KEYS = new Set(['hqUrl', 'hqToken', 'uiLocale']);\n\nconst ENUM_PREF_KEYS: Record<string, Set<string>> = {\n  autonomy: AUTONOMY_VALUES,\n  contextStrategy: CONTEXT_STRATEGY_VALUES,\n  contextMode: CONTEXT_MODE_VALUES,\n  tokenSavingTier: TOKEN_SAVING_TIER_VALUES,\n  enhanceLanguage: ENHANCE_LANGUAGE_VALUES,\n  logLevel: LOG_LEVEL_VALUES,\n  auditLevel: AUDIT_LEVEL_VALUES,\n  reasoningMode: REASONING_MODE_VALUES,\n  reasoningEffort: REASONING_EFFORT_VALUES,\n  cacheTtl: CACHE_TTL_VALUES,\n};\n\nfunction validateModelRuntimeValue(modelRuntime: Record<string, unknown>, path: string): string | null {\n  const reasoning = modelRuntime['reasoning'];\n  if (reasoning !== undefined) {\n    if (!isRecord(reasoning)) return `${path}.reasoning must be an object when provided`;\n    const mode = reasoning['mode'];\n    const effort = reasoning['effort'];\n    const preserve = reasoning['preserve'];\n    if (mode !== undefined && (typeof mode !== 'string' || !REASONING_MODE_VALUES.has(mode))) {\n      return `${path}.reasoning.mode must be one of: ${Array.from(REASONING_MODE_VALUES).join(', ')}`;\n    }\n    if (effort !== undefined && (typeof effort !== 'string' || !REASONING_EFFORT_VALUES.has(effort))) {\n      return `${path}.reasoning.effort must be one of: ${Array.from(REASONING_EFFORT_VALUES).join(', ')}`;\n    }\n    if (preserve !== undefined && typeof preserve !== 'boolean') {\n      return `${path}.reasoning.preserve must be a boolean when provided`;\n    }\n  }\n\n  const cache = modelRuntime['cache'];\n  if (cache !== undefined) {\n    if (!isRecord(cache)) return `${path}.cache must be an object when provided`;\n    const ttl = cache['ttl'];\n    if (ttl !== undefined && (typeof ttl !== 'string' || !CACHE_TTL_VALUES.has(ttl) || ttl === 'default')) {\n      return `${path}.cache.ttl must be one of: 5m, 1h`;\n    }\n  }\n\n  const parameters = modelRuntime['parameters'];\n  if (parameters !== undefined && !isRecord(parameters)) {\n    return `${path}.parameters must be an object when provided`;\n  }\n\n  return null;\n}\n\nfunction validatePreferenceValue(key: string, value: unknown): string | null {\n  if (BOOLEAN_PREF_KEYS.has(key)) {\n    return typeof value === 'boolean' ? null : `prefs.update payload.${key} must be a boolean`;\n  }\n  if (NUMBER_PREF_KEYS.has(key)) {\n    return typeof value === 'number' && Number.isFinite(value)\n      ? null\n      : `prefs.update payload.${key} must be a finite number`;\n  }\n  if (STRING_PREF_KEYS.has(key)) {\n    return typeof value === 'string' ? null : `prefs.update payload.${key} must be a string`;\n  }\n  if (STRING_ARRAY_PREF_KEYS.has(key)) {\n    return Array.isArray(value) && value.every((v) => typeof v === 'string')\n      ? null\n      : `prefs.update payload.${key} must be an array of strings`;\n  }\n  if (STRING_ARRAY_RECORD_PREF_KEYS.has(key)) {\n    return isRecord(value) &&\n      Object.values(value).every(\n        (v) => Array.isArray(v) && v.every((item) => typeof item === 'string'),\n      )\n      ? null\n      : `prefs.update payload.${key} must be an object of string arrays`;\n  }\n  if (MODEL_MATRIX_PREF_KEYS.has(key)) {\n    if (!isRecord(value)) return `prefs.update payload.${key} must be an object`;\n    for (const entry of Object.values(value)) {\n      if (!isRecord(entry)) return `prefs.update payload.${key} entries must be objects`;\n      const provider = entry['provider'];\n      const model = entry['model'];\n      const fallbackProfile = entry['fallbackProfile'];\n      const modelRuntime = entry['modelRuntime'];\n      if (provider !== undefined && typeof provider !== 'string') {\n        return `prefs.update payload.${key}.provider must be a string when provided`;\n      }\n      if (model !== undefined && typeof model !== 'string') {\n        return `prefs.update payload.${key}.model must be a string when provided`;\n      }\n      if (fallbackProfile !== undefined && typeof fallbackProfile !== 'string') {\n        return `prefs.update payload.${key}.fallbackProfile must be a string when provided`;\n      }\n      if (modelRuntime !== undefined && !isRecord(modelRuntime)) {\n        return `prefs.update payload.${key}.modelRuntime must be an object when provided`;\n      }\n      if (isRecord(modelRuntime)) {\n        const runtimeError = validateModelRuntimeValue(modelRuntime, `prefs.update payload.${key}.modelRuntime`);\n        if (runtimeError) return runtimeError;\n      }\n      if (model === undefined && fallbackProfile === undefined && modelRuntime === undefined) {\n        return `prefs.update payload.${key} entries require model, fallbackProfile, or modelRuntime`;\n      }\n    }\n    return null;\n  }\n  const allowed = ENUM_PREF_KEYS[key];\n  if (allowed) {\n    return typeof value === 'string' && allowed.has(value)\n      ? null\n      : `prefs.update payload.${key} must be one of: ${Array.from(allowed).join(', ')}`;\n  }\n  return `prefs.update payload contains unknown preference key: ${key}`;\n}\n\nexport function validatePrefsUpdatePayload(\n  payload: unknown,\n): PayloadValidationResult<PrefsUpdatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'prefs.update payload must be an object' };\n  }\n  for (const [key, value] of Object.entries(payload)) {\n    const error = validatePreferenceValue(key, value);\n    if (error) return { ok: false, message: error };\n  }\n  return { ok: true, value: { prefs: payload } };\n}\n\nexport interface SkillsCreatePayload {\n  name: string;\n  description: string;\n  scope: 'project' | 'global';\n}\n\nexport function validateSkillsCreatePayload(\n  payload: unknown,\n): PayloadValidationResult<SkillsCreatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'skills.create payload must be an object' };\n  }\n  const name = payload['name'];\n  const description = payload['description'];\n  const scope = payload['scope'];\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'Skill name is required' };\n  }\n  if (!/^[a-z0-9]+(-[a-z0-9]+)*$/.test(name.trim())) {\n    return { ok: false, message: 'Skill name must be kebab-case (e.g. my-new-skill)' };\n  }\n  if (typeof description !== 'string' || description.trim().length === 0) {\n    return { ok: false, message: 'Description/trigger is required' };\n  }\n  if (scope !== 'project' && scope !== 'global') {\n    return { ok: false, message: 'skills.create payload.scope must be project or global' };\n  }\n  return { ok: true, value: { name, description, scope } };\n}\n\nexport interface SkillsEditPayload {\n  name: string;\n  body: string;\n}\n\nexport function validateSkillsEditPayload(\n  payload: unknown,\n): PayloadValidationResult<SkillsEditPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'skills.edit payload must be an object' };\n  }\n  const name = payload['name'];\n  const body = payload['body'];\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'Skill name is required' };\n  }\n  if (typeof body !== 'string' || body.length === 0) {\n    return { ok: false, message: 'Skill body is required' };\n  }\n  return { ok: true, value: { name, body } };\n}\n\nexport interface ProcessKillPayload {\n  pid: number;\n}\n\nexport function validateProcessKillPayload(\n  payload: unknown,\n): PayloadValidationResult<ProcessKillPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'process.kill payload must be an object with numeric pid' };\n  }\n  const pid = payload['pid'];\n  if (typeof pid !== 'number' || !Number.isInteger(pid) || pid <= 0) {\n    return { ok: false, message: 'process.kill payload.pid must be a positive integer' };\n  }\n  return { ok: true, value: { pid } };\n}\n\nexport interface WorkingDirSetPayload {\n  path: string;\n}\n\nexport function validateWorkingDirSetPayload(\n  payload: unknown,\n): PayloadValidationResult<WorkingDirSetPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'working_dir.set payload must be an object with string path' };\n  }\n  const newPath = payload['path'];\n  if (typeof newPath !== 'string' || newPath.trim().length === 0) {\n    return { ok: false, message: 'working_dir.set payload.path must be a non-empty string' };\n  }\n  return { ok: true, value: { path: newPath } };\n}\n\nexport interface ModeSwitchPayload {\n  id: string;\n}\n\nexport function validateModeSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ModeSwitchPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mode.switch payload must be an object with string id' };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'mode.switch payload.id must be a non-empty string' };\n  }\n  return { ok: true, value: { id } };\n}\n\nexport interface ContextModeIdPayload {\n  id: string;\n}\n\nfunction validateContextModeIdPayload(\n  payload: unknown,\n  type: 'context.mode.switch' | 'context.mode.delete',\n): PayloadValidationResult<ContextModeIdPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: `${type} payload must be an object with string id` };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: `${type} payload.id must be a non-empty string` };\n  }\n  return { ok: true, value: { id } };\n}\n\nexport function validateContextModeSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeIdPayload> {\n  return validateContextModeIdPayload(payload, 'context.mode.switch');\n}\n\nexport function validateContextModeDeletePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeIdPayload> {\n  return validateContextModeIdPayload(payload, 'context.mode.delete');\n}\n\nexport interface ContextModeCreatePayload {\n  id: string;\n  name: string;\n  description: string;\n  thresholds: { warn: number; soft: number; hard: number };\n  preserveK: number;\n  eliseThreshold: number;\n}\n\nfunction isFiniteNumber(value: unknown): value is number {\n  return typeof value === 'number' && Number.isFinite(value);\n}\n\nexport function validateContextModeCreatePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeCreatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'context.mode.create payload must be an object' };\n  }\n  const id = payload['id'];\n  const name = payload['name'];\n  const description = payload['description'];\n  const thresholds = payload['thresholds'];\n  const preserveK = payload['preserveK'];\n  const eliseThreshold = payload['eliseThreshold'];\n\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'context.mode.create payload.id must be a non-empty string' };\n  }\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'context.mode.create payload.name must be a non-empty string' };\n  }\n  if (typeof description !== 'string') {\n    return { ok: false, message: 'context.mode.create payload.description must be a string' };\n  }\n  if (!isRecord(thresholds)) {\n    return {\n      ok: false,\n      message:\n        'context.mode.create payload.thresholds must be an object with warn/soft/hard numbers',\n    };\n  }\n  if (\n    !isFiniteNumber(thresholds['warn']) ||\n    !isFiniteNumber(thresholds['soft']) ||\n    !isFiniteNumber(thresholds['hard'])\n  ) {\n    return {\n      ok: false,\n      message: 'context.mode.create payload.thresholds.warn/soft/hard must be finite numbers',\n    };\n  }\n  if (!isFiniteNumber(preserveK)) {\n    return { ok: false, message: 'context.mode.create payload.preserveK must be a finite number' };\n  }\n  if (!isFiniteNumber(eliseThreshold)) {\n    return {\n      ok: false,\n      message: 'context.mode.create payload.eliseThreshold must be a finite number',\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      id,\n      name,\n      description,\n      thresholds: { warn: thresholds['warn'], soft: thresholds['soft'], hard: thresholds['hard'] },\n      preserveK,\n      eliseThreshold,\n    },\n  };\n}\n\nexport interface ContextModeUpdatePayload {\n  id: string;\n  name?: string;\n  description?: string;\n  thresholds?: { warn?: number; soft?: number; hard?: number };\n  preserveK?: number;\n  eliseThreshold?: number;\n}\n\nexport function validateContextModeUpdatePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeUpdatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'context.mode.update payload must be an object' };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'context.mode.update payload.id must be a non-empty string' };\n  }\n\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.name must be a string when provided',\n    };\n  }\n\n  const description = payload['description'];\n  if (description !== undefined && typeof description !== 'string') {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.description must be a string when provided',\n    };\n  }\n\n  const thresholds = payload['thresholds'];\n  let validatedThresholds: ContextModeUpdatePayload['thresholds'];\n  if (thresholds !== undefined) {\n    if (!isRecord(thresholds)) {\n      return {\n        ok: false,\n        message: 'context.mode.update payload.thresholds must be an object when provided',\n      };\n    }\n    for (const key of ['warn', 'soft', 'hard'] as const) {\n      const val = thresholds[key];\n      if (val !== undefined && !isFiniteNumber(val)) {\n        return {\n          ok: false,\n          message: `context.mode.update payload.thresholds.${key} must be a finite number when provided`,\n        };\n      }\n    }\n    validatedThresholds = {\n      ...(typeof thresholds['warn'] === 'number' ? { warn: thresholds['warn'] } : {}),\n      ...(typeof thresholds['soft'] === 'number' ? { soft: thresholds['soft'] } : {}),\n      ...(typeof thresholds['hard'] === 'number' ? { hard: thresholds['hard'] } : {}),\n    };\n  }\n\n  const preserveK = payload['preserveK'];\n  if (preserveK !== undefined && !isFiniteNumber(preserveK)) {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.preserveK must be a finite number when provided',\n    };\n  }\n\n  const eliseThreshold = payload['eliseThreshold'];\n  if (eliseThreshold !== undefined && !isFiniteNumber(eliseThreshold)) {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.eliseThreshold must be a finite number when provided',\n    };\n  }\n\n  return {\n    ok: true,\n    value: {\n      id,\n      ...(typeof name === 'string' ? { name } : {}),\n      ...(typeof description === 'string' ? { description } : {}),\n      ...(validatedThresholds !== undefined ? { thresholds: validatedThresholds } : {}),\n      ...(typeof preserveK === 'number' ? { preserveK } : {}),\n      ...(typeof eliseThreshold === 'number' ? { eliseThreshold } : {}),\n    },\n  };\n}\n\nexport interface ShellOpenPayload {\n  path: string;\n  target?: 'file' | 'terminal';\n}\n\nexport function validateShellOpenPayload(\n  payload: unknown,\n): PayloadValidationResult<ShellOpenPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'shell.open payload must be an object with string path' };\n  }\n  const path = payload['path'];\n  if (typeof path !== 'string' || path.trim().length === 0) {\n    return { ok: false, message: 'shell.open payload.path must be a non-empty string' };\n  }\n  const target = payload['target'];\n  if (target !== undefined && target !== 'file' && target !== 'terminal') {\n    return {\n      ok: false,\n      message: 'shell.open payload.target must be \"file\" or \"terminal\" when provided',\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      path,\n      ...(target !== undefined ? { target: target as 'file' | 'terminal' } : {}),\n    },\n  };\n}\n\nexport interface GitDiffPayload {\n  path: string;\n}\n\nexport function validateGitDiffPayload(payload: unknown): PayloadValidationResult<GitDiffPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'git.diff payload must be an object' };\n  }\n  const path = payload['path'];\n  if (path === undefined || path === null) {\n    return { ok: true, value: { path: '' } };\n  }\n  if (typeof path !== 'string') {\n    return { ok: false, message: 'git.diff payload.path must be a string when provided' };\n  }\n  return { ok: true, value: { path } };\n}\n\nexport interface ProjectsAddPayload {\n  root: string;\n  name?: string;\n}\n\nexport function validateProjectsAddPayload(\n  payload: unknown,\n): PayloadValidationResult<ProjectsAddPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'projects.add payload must be an object with string root' };\n  }\n  const root = payload['root'];\n  if (typeof root !== 'string' || root.trim().length === 0) {\n    return { ok: false, message: 'projects.add payload.root must be a non-empty string' };\n  }\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return { ok: false, message: 'projects.add payload.name must be a string when provided' };\n  }\n  return {\n    ok: true,\n    value: { root, ...(typeof name === 'string' ? { name } : {}) },\n  };\n}\n\nexport interface ProjectsSelectPayload {\n  root: string;\n  name?: string;\n}\n\nexport function validateProjectsSelectPayload(\n  payload: unknown,\n): PayloadValidationResult<ProjectsSelectPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'projects.select payload must be an object with string root' };\n  }\n  const root = payload['root'];\n  if (typeof root !== 'string' || root.trim().length === 0) {\n    return { ok: false, message: 'projects.select payload.root must be a non-empty string' };\n  }\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return { ok: false, message: 'projects.select payload.name must be a string when provided' };\n  }\n  return {\n    ok: true,\n    value: { root, ...(typeof name === 'string' ? { name } : {}) },\n  };\n}\n","// ── Shared Worklist Handlers ─────────────────────────────────────────────────\n// Extracted from standalone server (packages/webui/src/server/index.ts) and CLI\n// embedded server (packages/cli/src/webui-server/). Both servers use these\n// handlers for todos, tasks, and plan operations. Keep them in sync.\n//\n// Message types handled here:\n//   todos.get | todos.clear | todos.remove | todo.update\n//   tasks.get | task.update\n//   plan.get | plan.template_use | plan.item.update\n// ─────────────────────────────────────────────────────────────────────────────\n\nimport type { WebSocket } from 'ws';\nimport type { TodoItem } from '@wrongstack/core';\nimport { validatePlanTemplateUsePayload } from '../ws-payload-validation.js';\n\n// ── Shared result helper ───────────────────────────────────────────────────────\n\nfunction sendResult(\n  ws: WebSocket,\n  ctx: WorklistContext,\n  ok: boolean,\n  message: string,\n): void {\n  ctx.send(ws, { type: ok ? 'ok' : 'error', message });\n}\n\nfunction sessionPayload<T extends Record<string, unknown>>(\n  ctx: WorklistContext,\n  payload: T,\n): T & { sessionId: string } {\n  const provided = payload['sessionId'];\n  const fallback = ctx.context.session?.id ?? '';\n  const sessionId = typeof provided === 'string' && provided.length > 0 ? provided : fallback;\n  return { ...payload, sessionId };\n}\n\n// ── Context interface ─────────────────────────────────────────────────────────\n// Both servers satisfy this with their own local state.\n\nexport interface WorklistContext {\n  context: {\n    todos: TodoItem[];\n    meta: Record<string, unknown>;\n    session: { id: string } | null;\n    state?: unknown;\n  };\n  send: (ws: WebSocket, msg: object) => void;\n  broadcast: (msg: object) => void;\n  /**\n   * Optional mutator for in-memory todo state. Servers that manage live\n   * agent state (e.g. the CLI embedded server) provide this so handlers\n   * can update the agent's todo list directly. Standalone server may omit.\n   */\n  replaceTodos?: (todos: TodoItem[]) => void;\n}\n\n// ── Todos ─────────────────────────────────────────────────────────────────────\n\nexport function handleTodosGet(ctx: WorklistContext, ws: WebSocket): void {\n  ctx.send(ws, { type: 'todos.updated', payload: sessionPayload(ctx, { todos: ctx.context.todos }) });\n}\n\nexport function handleTodosClear(ctx: WorklistContext, ws: WebSocket): void {\n  ctx.replaceTodos?.([]);\n  ctx.broadcast({ type: 'todos.cleared', payload: sessionPayload(ctx, {}) });\n  sendResult(ws, ctx, true, 'Todo board cleared.');\n}\n\nexport function handleTodosRemove(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { id?: string; index?: number } | undefined,\n): void {\n  if (!payload || (payload.id === undefined && payload.index === undefined)) {\n    sendResult(ws, ctx, false, 'todos.remove requires id or index.');\n    return;\n  }\n  const next =\n    payload.id !== undefined\n      ? ctx.context.todos.filter((t) => t.id !== payload.id)\n      : ctx.context.todos.filter((_, i) => i !== (payload.index as number));\n  ctx.replaceTodos?.(next);\n  ctx.broadcast({ type: 'todos.updated', payload: sessionPayload(ctx, { todos: next }) });\n  sendResult(ws, ctx, true, 'Todo item removed.');\n}\n\nexport function handleTodoUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { id: string; status?: TodoItem['status']; activeForm?: string },\n): void {\n  const todo = ctx.context.todos.find((t) => t.id === payload.id);\n  if (!todo) {\n    sendResult(ws, ctx, false, `No todo with id \"${payload.id}\".`);\n    return;\n  }\n  const next = ctx.context.todos.map((t) =>\n    t.id === payload.id\n      ? { ...t, ...(payload.status !== undefined && { status: payload.status }), ...(payload.activeForm !== undefined && { activeForm: payload.activeForm }) }\n      : t,\n  );\n  ctx.replaceTodos?.(next);\n  ctx.broadcast({ type: 'todos.updated', payload: sessionPayload(ctx, { todos: next }) });\n  sendResult(ws, ctx, true, `Todo \"${todo.content}\" updated.`);\n}\n\n// ── Tasks ─────────────────────────────────────────────────────────────────────\n\nexport async function handleTasksGet(ctx: WorklistContext, ws: WebSocket): Promise<void> {\n  const taskPath = ctx.context.meta['task.path'];\n  if (typeof taskPath === 'string' && taskPath) {\n    try {\n      const { loadTasks } = await import('@wrongstack/core');\n      const file = await loadTasks(taskPath);\n      ctx.send(ws, { type: 'tasks.updated', payload: sessionPayload(ctx, { tasks: file?.tasks ?? [] }) });\n    } catch {\n      ctx.send(ws, { type: 'tasks.updated', payload: sessionPayload(ctx, { tasks: [] }) });\n    }\n  } else {\n    ctx.send(ws, {\n      type: 'tasks.updated',\n      payload: sessionPayload(ctx, { tasks: [], error: 'Task storage not configured.' }),\n    });\n  }\n}\n\nexport async function handleTaskUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: {\n    id: string;\n    status: 'pending' | 'in_progress' | 'blocked' | 'failed' | 'review' | 'completed';\n  },\n): Promise<void> {\n  const taskPath = ctx.context.meta['task.path'];\n  if (typeof taskPath !== 'string' || !taskPath) {\n    sendResult(ws, ctx, false, 'Task storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { loadTasks, saveTasks } = await import('@wrongstack/core');\n    const file = await loadTasks(taskPath);\n    if (!file) {\n      sendResult(ws, ctx, false, 'No task file found.');\n      return;\n    }\n    const idx = file.tasks.findIndex((t) => t.id === payload.id);\n    if (idx === -1) {\n      sendResult(ws, ctx, false, `Task \"${payload.id}\" not found.`);\n      return;\n    }\n    const existing = file.tasks[idx];\n    if (!existing) {\n      // noUncheckedIndexedAccess: array access can be undefined. We just\n      // confirmed idx is in-range via findIndex, but the type system needs\n      // the explicit guard.\n      sendResult(ws, ctx, false, `Task \"${payload.id}\" not found.`);\n      return;\n    }\n    file.tasks[idx] = { ...existing, status: payload.status };\n    await saveTasks(taskPath, file);\n    ctx.broadcast({ type: 'tasks.updated', payload: sessionPayload(ctx, { tasks: file.tasks }) });\n    sendResult(ws, ctx, true, `Task \"${payload.id}\" marked ${payload.status}.`);\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\n// ── Plan ───────────────────────────────────────────────────────────────────────\n\nexport async function handlePlanGet(ctx: WorklistContext, ws: WebSocket): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath === 'string' && planPath) {\n    try {\n      const { loadPlan } = await import('@wrongstack/core');\n      const plan = await loadPlan(planPath);\n      ctx.send(ws, {\n        type: 'plan.updated',\n        payload: sessionPayload(ctx, {\n          plan: plan ?? {\n            version: 1,\n            sessionId,\n            updatedAt: new Date().toISOString(),\n            items: [],\n          },\n        }),\n      });\n    } catch {\n      ctx.send(ws, {\n        type: 'plan.updated',\n        payload: sessionPayload(ctx, {\n          plan: {\n            version: 1,\n            sessionId,\n            updatedAt: new Date().toISOString(),\n            items: [],\n          },\n        }),\n      });\n    }\n  } else {\n    ctx.send(ws, {\n      type: 'plan.updated',\n      payload: sessionPayload(ctx, { plan: null, error: 'Plan storage is not configured for this session.' }),\n    });\n  }\n}\n\nexport async function handlePlanTemplateUse(ctx: WorklistContext, ws: WebSocket, template: string): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath !== 'string' || !planPath) {\n    sendResult(ws, ctx, false, 'Plan storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { getPlanTemplate, loadPlan, savePlan, emptyPlan, addPlanItem } = await import('@wrongstack/core');\n    const tpl = getPlanTemplate(template);\n    if (!tpl) {\n      sendResult(ws, ctx, false, `Unknown template \"${template}\".`);\n      return;\n    }\n    let plan = (await loadPlan(planPath)) ?? emptyPlan(sessionId);\n    for (const item of tpl.items) {\n      ({ plan } = addPlanItem(plan, item.title, item.details));\n    }\n    await savePlan(planPath, plan);\n    sendResult(ws, ctx, true, `Applied template \"${tpl.name}\" — ${tpl.items.length} items added.`);\n    ctx.broadcast({ type: 'plan.updated', payload: sessionPayload(ctx, { plan }) });\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\nexport async function handlePlanItemUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { target: string; status: 'open' | 'in_progress' | 'done' },\n): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath !== 'string' || !planPath) {\n    sendResult(ws, ctx, false, 'Plan storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { mutatePlan, setPlanItemStatus } = await import('@wrongstack/core');\n    let changed = false;\n    const plan = await mutatePlan(planPath, sessionId, async (p) => {\n      const before = p.updatedAt;\n      const updated = setPlanItemStatus(p, payload.target, payload.status);\n      changed = updated.updatedAt !== before;\n      return updated;\n    });\n    if (!changed) {\n      sendResult(ws, ctx, false, `No plan item matched \"${payload.target}\".`);\n      return;\n    }\n    sendResult(ws, ctx, true, `Plan item status updated to \"${payload.status}\".`);\n    ctx.broadcast({ type: 'plan.updated', payload: sessionPayload(ctx, { plan }) });\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\n// ── Dispatcher ──────────────────────────────────────────────────────────────────\n// Single entry point for the nine worklist message types, so the host server's\n// switch delegates one grouped case here instead of repeating the per-type\n// `makeWorklistContext()` boilerplate. Unknown types are a no-op (the caller\n// only routes worklist types to this function).\n\n/** Loosely-typed worklist WS message — payload shapes are narrowed per case. */\nexport interface WorklistMessage {\n  type: string;\n  payload?: unknown;\n}\n\nexport async function handleWorklistMessage(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  msg: WorklistMessage,\n): Promise<void> {\n  switch (msg.type) {\n    case 'todos.get':\n      handleTodosGet(ctx, ws);\n      return;\n    case 'todos.clear':\n      handleTodosClear(ctx, ws);\n      return;\n    case 'todos.remove':\n      handleTodosRemove(ctx, ws, msg.payload as { id?: string; index?: number } | undefined);\n      return;\n    case 'todo.update':\n      handleTodoUpdate(\n        ctx,\n        ws,\n        msg.payload as { id: string; status?: TodoItem['status']; activeForm?: string },\n      );\n      return;\n    case 'tasks.get':\n      await handleTasksGet(ctx, ws);\n      return;\n    case 'task.update':\n      await handleTaskUpdate(\n        ctx,\n        ws,\n        msg.payload as {\n          id: string;\n          status: 'pending' | 'in_progress' | 'blocked' | 'failed' | 'review' | 'completed';\n        },\n      );\n      return;\n    case 'plan.get':\n      await handlePlanGet(ctx, ws);\n      return;\n    case 'plan.template_use': {\n      const parsed = validatePlanTemplateUsePayload(msg.payload);\n      if (!parsed.ok) {\n        sendResult(ws, ctx, false, parsed.message);\n        return;\n      }\n      await handlePlanTemplateUse(ctx, ws, parsed.value.template);\n      return;\n    }\n    case 'plan.item.update':\n      await handlePlanItemUpdate(\n        ctx,\n        ws,\n        msg.payload as { target: string; status: 'open' | 'in_progress' | 'done' },\n      );\n      return;\n  }\n}\n"]}
+{
+  "version": 3,
+  "sources": ["../../src/server/ws-payload-validation.ts", "../../src/server/handlers/worklist-handlers.ts"],
+  "sourcesContent": ["export type PayloadValidationResult<T> = { ok: true; value: T } | { ok: false; message: string };\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nexport interface ModelSwitchPayload {\n  provider: string;\n  model: string;\n}\n\nexport function validateModelSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ModelSwitchPayload> {\n  if (!isRecord(payload)) {\n    return {\n      ok: false,\n      message: 'model.switch payload must be an object with string provider and model',\n    };\n  }\n  const provider = payload['provider'];\n  const model = payload['model'];\n  if (typeof provider !== 'string' || provider.trim().length === 0) {\n    return { ok: false, message: 'model.switch payload.provider must be a non-empty string' };\n  }\n  if (typeof model !== 'string' || model.trim().length === 0) {\n    return { ok: false, message: 'model.switch payload.model must be a non-empty string' };\n  }\n  return { ok: true, value: { provider, model } };\n}\n\nexport interface PrefsUpdatePayload {\n  prefs: Record<string, unknown>;\n}\n\nconst AUTONOMY_VALUES = new Set(['off', 'suggest', 'auto', 'eternal', 'eternal-parallel']);\n\nexport interface MailboxMessagesPayload {\n  limit?: number;\n  agentId?: string;\n  unreadOnly?: boolean;\n  incompleteOnly?: boolean;\n}\n\nexport function validateMailboxMessagesPayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxMessagesPayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.messages payload must be an object when provided' };\n  }\n  const limit = payload['limit'];\n  const agentId = payload['agentId'];\n  const unreadOnly = payload['unreadOnly'];\n  const incompleteOnly = payload['incompleteOnly'];\n  if (limit !== undefined && (typeof limit !== 'number' || !Number.isFinite(limit) || limit < 1)) {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.limit must be a positive number when provided',\n    };\n  }\n  if (agentId !== undefined && typeof agentId !== 'string') {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.agentId must be a string when provided',\n    };\n  }\n  if (unreadOnly !== undefined && typeof unreadOnly !== 'boolean') {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.unreadOnly must be a boolean when provided',\n    };\n  }\n  if (incompleteOnly !== undefined && typeof incompleteOnly !== 'boolean') {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.incompleteOnly must be a boolean when provided',\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      ...(limit !== undefined ? { limit: limit as number } : {}),\n      ...(agentId !== undefined ? { agentId: agentId as string } : {}),\n      ...(unreadOnly !== undefined ? { unreadOnly: unreadOnly as boolean } : {}),\n      ...(incompleteOnly !== undefined ? { incompleteOnly: incompleteOnly as boolean } : {}),\n    },\n  };\n}\n\nexport interface MailboxAgentsPayload {\n  onlineOnly?: boolean;\n}\n\nexport function validateMailboxAgentsPayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxAgentsPayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.agents payload must be an object when provided' };\n  }\n  const onlineOnly = payload['onlineOnly'];\n  if (onlineOnly !== undefined && typeof onlineOnly !== 'boolean') {\n    return {\n      ok: false,\n      message: 'mailbox.agents payload.onlineOnly must be a boolean when provided',\n    };\n  }\n  return {\n    ok: true,\n    value: { ...(onlineOnly !== undefined ? { onlineOnly: onlineOnly as boolean } : {}) },\n  };\n}\n\nexport interface MailboxPurgePayload {\n  completedMaxAgeMs?: number;\n  incompleteMaxAgeMs?: number;\n}\n\nexport function validateMailboxPurgePayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxPurgePayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.purge payload must be an object when provided' };\n  }\n  const completedMaxAgeMs = payload['completedMaxAgeMs'];\n  const incompleteMaxAgeMs = payload['incompleteMaxAgeMs'];\n  if (\n    completedMaxAgeMs !== undefined &&\n    (typeof completedMaxAgeMs !== 'number' ||\n      !Number.isFinite(completedMaxAgeMs) ||\n      completedMaxAgeMs < 0)\n  ) {\n    return {\n      ok: false,\n      message:\n        'mailbox.purge payload.completedMaxAgeMs must be a non-negative number when provided',\n    };\n  }\n  if (\n    incompleteMaxAgeMs !== undefined &&\n    (typeof incompleteMaxAgeMs !== 'number' ||\n      !Number.isFinite(incompleteMaxAgeMs) ||\n      incompleteMaxAgeMs < 0)\n  ) {\n    return {\n      ok: false,\n      message:\n        'mailbox.purge payload.incompleteMaxAgeMs must be a non-negative number when provided',\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      ...(completedMaxAgeMs !== undefined ? { completedMaxAgeMs: completedMaxAgeMs as number } : {}),\n      ...(incompleteMaxAgeMs !== undefined\n        ? { incompleteMaxAgeMs: incompleteMaxAgeMs as number }\n        : {}),\n    },\n  };\n}\n\nexport interface BrainRiskPayload {\n  level: string;\n}\n\nconst BRAIN_RISK_VALUES = new Set(['off', 'low', 'medium', 'high', 'all']);\n\nexport function validateBrainRiskPayload(\n  payload: unknown,\n): PayloadValidationResult<BrainRiskPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'brain.risk payload must be an object with string level' };\n  }\n  const level = payload['level'];\n  if (typeof level !== 'string' || !BRAIN_RISK_VALUES.has(level)) {\n    return {\n      ok: false,\n      message: 'brain.risk payload.level must be one of off, low, medium, high, all',\n    };\n  }\n  return { ok: true, value: { level } };\n}\n\nexport interface BrainAskPayload {\n  question: string;\n}\n\nexport function validateBrainAskPayload(\n  payload: unknown,\n): PayloadValidationResult<BrainAskPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'brain.ask payload must be an object with string question' };\n  }\n  const question = payload['question'];\n  if (typeof question !== 'string' || question.trim().length === 0) {\n    return { ok: false, message: 'brain.ask payload.question must be a non-empty string' };\n  }\n  return { ok: true, value: { question: question.trim() } };\n}\n\nexport interface AutonomySwitchPayload {\n  mode: string;\n}\n\nexport function validateAutonomySwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<AutonomySwitchPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'autonomy.switch payload must be an object with string mode' };\n  }\n  const mode = payload['mode'];\n  if (typeof mode !== 'string' || !AUTONOMY_VALUES.has(mode)) {\n    return { ok: false, message: 'autonomy.switch payload.mode must be a valid autonomy mode' };\n  }\n  return { ok: true, value: { mode } };\n}\n\nexport interface PlanTemplateUsePayload {\n  template: string;\n}\n\nexport function validatePlanTemplateUsePayload(\n  payload: unknown,\n): PayloadValidationResult<PlanTemplateUsePayload> {\n  if (!isRecord(payload)) {\n    return {\n      ok: false,\n      message: 'plan.template_use payload must be an object with string template',\n    };\n  }\n  const template = payload['template'];\n  if (typeof template !== 'string' || template.trim().length === 0) {\n    return { ok: false, message: 'plan.template_use payload.template must be a non-empty string' };\n  }\n  return { ok: true, value: { template } };\n}\nconst CONTEXT_STRATEGY_VALUES = new Set(['hybrid', 'intelligent', 'selective']);\nconst CONTEXT_MODE_VALUES = new Set(['balanced', 'frugal', 'deep', 'archival']);\nconst TOKEN_SAVING_TIER_VALUES = new Set(['off', 'minimal', 'light', 'medium', 'aggressive']);\nconst ENHANCE_LANGUAGE_VALUES = new Set(['original', 'english']);\nconst LOG_LEVEL_VALUES = new Set(['debug', 'info', 'warn', 'error']);\nconst AUDIT_LEVEL_VALUES = new Set(['minimal', 'standard', 'full']);\nconst REASONING_MODE_VALUES = new Set(['auto', 'on', 'off']);\nconst REASONING_EFFORT_VALUES = new Set([\n  'none',\n  'minimal',\n  'low',\n  'medium',\n  'high',\n  'xhigh',\n  'max',\n]);\nconst CACHE_TTL_VALUES = new Set(['default', '5m', '1h']);\n\nconst BOOLEAN_PREF_KEYS = new Set([\n  'yolo',\n  'chime',\n  'confirmExit',\n  'streamFleet',\n  'nextPrediction',\n  'titleAnimation',\n  'enhanceEnabled',\n  'featureMcp',\n  'featurePlugins',\n  'featureMemory',\n  'featureSkills',\n  'featureModelsRegistry',\n  'indexOnStart',\n  'contextAutoCompact',\n  'tgSessionEnd',\n  'tgDelegate',\n  'reasoningPreserve',\n  'hqEnabled',\n  'hqRawContent',\n  'fallbackAuto',\n  'favoriteModelsOnly',\n]);\n\n/** Keys whose value must be an array of strings (e.g. an ordered model list). */\nconst STRING_ARRAY_PREF_KEYS = new Set(['fallbackModels', 'favoriteModels']);\nconst STRING_ARRAY_RECORD_PREF_KEYS = new Set(['fallbackProfiles']);\nconst MODEL_MATRIX_PREF_KEYS = new Set(['modelMatrix']);\n\nconst NUMBER_PREF_KEYS = new Set([\n  'autonomyDelayMs',\n  'autoProceedMaxIterations',\n  'maxIterations',\n  'maxConcurrent',\n  'enhanceDelayMs',\n  'tgLongToolMs',\n]);\n\nconst STRING_PREF_KEYS = new Set(['hqUrl', 'hqToken', 'uiLocale']);\n\nconst ENUM_PREF_KEYS: Record<string, Set<string>> = {\n  autonomy: AUTONOMY_VALUES,\n  contextStrategy: CONTEXT_STRATEGY_VALUES,\n  contextMode: CONTEXT_MODE_VALUES,\n  tokenSavingTier: TOKEN_SAVING_TIER_VALUES,\n  enhanceLanguage: ENHANCE_LANGUAGE_VALUES,\n  logLevel: LOG_LEVEL_VALUES,\n  auditLevel: AUDIT_LEVEL_VALUES,\n  reasoningMode: REASONING_MODE_VALUES,\n  reasoningEffort: REASONING_EFFORT_VALUES,\n  cacheTtl: CACHE_TTL_VALUES,\n};\n\nfunction validateModelRuntimeValue(modelRuntime: Record<string, unknown>, path: string): string | null {\n  const reasoning = modelRuntime['reasoning'];\n  if (reasoning !== undefined) {\n    if (!isRecord(reasoning)) return `${path}.reasoning must be an object when provided`;\n    const mode = reasoning['mode'];\n    const effort = reasoning['effort'];\n    const preserve = reasoning['preserve'];\n    if (mode !== undefined && (typeof mode !== 'string' || !REASONING_MODE_VALUES.has(mode))) {\n      return `${path}.reasoning.mode must be one of: ${Array.from(REASONING_MODE_VALUES).join(', ')}`;\n    }\n    if (effort !== undefined && (typeof effort !== 'string' || !REASONING_EFFORT_VALUES.has(effort))) {\n      return `${path}.reasoning.effort must be one of: ${Array.from(REASONING_EFFORT_VALUES).join(', ')}`;\n    }\n    if (preserve !== undefined && typeof preserve !== 'boolean') {\n      return `${path}.reasoning.preserve must be a boolean when provided`;\n    }\n  }\n\n  const cache = modelRuntime['cache'];\n  if (cache !== undefined) {\n    if (!isRecord(cache)) return `${path}.cache must be an object when provided`;\n    const ttl = cache['ttl'];\n    if (ttl !== undefined && (typeof ttl !== 'string' || !CACHE_TTL_VALUES.has(ttl) || ttl === 'default')) {\n      return `${path}.cache.ttl must be one of: 5m, 1h`;\n    }\n  }\n\n  const parameters = modelRuntime['parameters'];\n  if (parameters !== undefined && !isRecord(parameters)) {\n    return `${path}.parameters must be an object when provided`;\n  }\n\n  return null;\n}\n\nfunction validatePreferenceValue(key: string, value: unknown): string | null {\n  if (BOOLEAN_PREF_KEYS.has(key)) {\n    return typeof value === 'boolean' ? null : `prefs.update payload.${key} must be a boolean`;\n  }\n  if (NUMBER_PREF_KEYS.has(key)) {\n    return typeof value === 'number' && Number.isFinite(value)\n      ? null\n      : `prefs.update payload.${key} must be a finite number`;\n  }\n  if (STRING_PREF_KEYS.has(key)) {\n    return typeof value === 'string' ? null : `prefs.update payload.${key} must be a string`;\n  }\n  if (STRING_ARRAY_PREF_KEYS.has(key)) {\n    return Array.isArray(value) && value.every((v) => typeof v === 'string')\n      ? null\n      : `prefs.update payload.${key} must be an array of strings`;\n  }\n  if (STRING_ARRAY_RECORD_PREF_KEYS.has(key)) {\n    return isRecord(value) &&\n      Object.values(value).every(\n        (v) => Array.isArray(v) && v.every((item) => typeof item === 'string'),\n      )\n      ? null\n      : `prefs.update payload.${key} must be an object of string arrays`;\n  }\n  if (MODEL_MATRIX_PREF_KEYS.has(key)) {\n    if (!isRecord(value)) return `prefs.update payload.${key} must be an object`;\n    for (const entry of Object.values(value)) {\n      if (!isRecord(entry)) return `prefs.update payload.${key} entries must be objects`;\n      const provider = entry['provider'];\n      const model = entry['model'];\n      const fallbackProfile = entry['fallbackProfile'];\n      const modelRuntime = entry['modelRuntime'];\n      if (provider !== undefined && typeof provider !== 'string') {\n        return `prefs.update payload.${key}.provider must be a string when provided`;\n      }\n      if (model !== undefined && typeof model !== 'string') {\n        return `prefs.update payload.${key}.model must be a string when provided`;\n      }\n      if (fallbackProfile !== undefined && typeof fallbackProfile !== 'string') {\n        return `prefs.update payload.${key}.fallbackProfile must be a string when provided`;\n      }\n      if (modelRuntime !== undefined && !isRecord(modelRuntime)) {\n        return `prefs.update payload.${key}.modelRuntime must be an object when provided`;\n      }\n      if (isRecord(modelRuntime)) {\n        const runtimeError = validateModelRuntimeValue(modelRuntime, `prefs.update payload.${key}.modelRuntime`);\n        if (runtimeError) return runtimeError;\n      }\n      if (model === undefined && fallbackProfile === undefined && modelRuntime === undefined) {\n        return `prefs.update payload.${key} entries require model, fallbackProfile, or modelRuntime`;\n      }\n    }\n    return null;\n  }\n  const allowed = ENUM_PREF_KEYS[key];\n  if (allowed) {\n    return typeof value === 'string' && allowed.has(value)\n      ? null\n      : `prefs.update payload.${key} must be one of: ${Array.from(allowed).join(', ')}`;\n  }\n  return `prefs.update payload contains unknown preference key: ${key}`;\n}\n\nexport function validatePrefsUpdatePayload(\n  payload: unknown,\n): PayloadValidationResult<PrefsUpdatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'prefs.update payload must be an object' };\n  }\n  for (const [key, value] of Object.entries(payload)) {\n    const error = validatePreferenceValue(key, value);\n    if (error) return { ok: false, message: error };\n  }\n  return { ok: true, value: { prefs: payload } };\n}\n\nexport interface SkillsCreatePayload {\n  name: string;\n  description: string;\n  scope: 'project' | 'global';\n}\n\nexport function validateSkillsCreatePayload(\n  payload: unknown,\n): PayloadValidationResult<SkillsCreatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'skills.create payload must be an object' };\n  }\n  const name = payload['name'];\n  const description = payload['description'];\n  const scope = payload['scope'];\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'Skill name is required' };\n  }\n  if (!/^[a-z0-9]+(-[a-z0-9]+)*$/.test(name.trim())) {\n    return { ok: false, message: 'Skill name must be kebab-case (e.g. my-new-skill)' };\n  }\n  if (typeof description !== 'string' || description.trim().length === 0) {\n    return { ok: false, message: 'Description/trigger is required' };\n  }\n  if (scope !== 'project' && scope !== 'global') {\n    return { ok: false, message: 'skills.create payload.scope must be project or global' };\n  }\n  return { ok: true, value: { name, description, scope } };\n}\n\nexport interface SkillsEditPayload {\n  name: string;\n  body: string;\n}\n\nexport function validateSkillsEditPayload(\n  payload: unknown,\n): PayloadValidationResult<SkillsEditPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'skills.edit payload must be an object' };\n  }\n  const name = payload['name'];\n  const body = payload['body'];\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'Skill name is required' };\n  }\n  if (typeof body !== 'string' || body.length === 0) {\n    return { ok: false, message: 'Skill body is required' };\n  }\n  return { ok: true, value: { name, body } };\n}\n\nexport interface ProcessKillPayload {\n  pid: number;\n}\n\nexport function validateProcessKillPayload(\n  payload: unknown,\n): PayloadValidationResult<ProcessKillPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'process.kill payload must be an object with numeric pid' };\n  }\n  const pid = payload['pid'];\n  if (typeof pid !== 'number' || !Number.isInteger(pid) || pid <= 0) {\n    return { ok: false, message: 'process.kill payload.pid must be a positive integer' };\n  }\n  return { ok: true, value: { pid } };\n}\n\nexport interface WorkingDirSetPayload {\n  path: string;\n}\n\nexport function validateWorkingDirSetPayload(\n  payload: unknown,\n): PayloadValidationResult<WorkingDirSetPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'working_dir.set payload must be an object with string path' };\n  }\n  const newPath = payload['path'];\n  if (typeof newPath !== 'string' || newPath.trim().length === 0) {\n    return { ok: false, message: 'working_dir.set payload.path must be a non-empty string' };\n  }\n  return { ok: true, value: { path: newPath } };\n}\n\nexport interface ModeSwitchPayload {\n  id: string;\n}\n\nexport function validateModeSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ModeSwitchPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mode.switch payload must be an object with string id' };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'mode.switch payload.id must be a non-empty string' };\n  }\n  return { ok: true, value: { id } };\n}\n\nexport interface ContextModeIdPayload {\n  id: string;\n}\n\nfunction validateContextModeIdPayload(\n  payload: unknown,\n  type: 'context.mode.switch' | 'context.mode.delete',\n): PayloadValidationResult<ContextModeIdPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: `${type} payload must be an object with string id` };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: `${type} payload.id must be a non-empty string` };\n  }\n  return { ok: true, value: { id } };\n}\n\nexport function validateContextModeSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeIdPayload> {\n  return validateContextModeIdPayload(payload, 'context.mode.switch');\n}\n\nexport function validateContextModeDeletePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeIdPayload> {\n  return validateContextModeIdPayload(payload, 'context.mode.delete');\n}\n\nexport interface ContextModeCreatePayload {\n  id: string;\n  name: string;\n  description: string;\n  thresholds: { warn: number; soft: number; hard: number };\n  preserveK: number;\n  eliseThreshold: number;\n}\n\nfunction isFiniteNumber(value: unknown): value is number {\n  return typeof value === 'number' && Number.isFinite(value);\n}\n\nexport function validateContextModeCreatePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeCreatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'context.mode.create payload must be an object' };\n  }\n  const id = payload['id'];\n  const name = payload['name'];\n  const description = payload['description'];\n  const thresholds = payload['thresholds'];\n  const preserveK = payload['preserveK'];\n  const eliseThreshold = payload['eliseThreshold'];\n\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'context.mode.create payload.id must be a non-empty string' };\n  }\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'context.mode.create payload.name must be a non-empty string' };\n  }\n  if (typeof description !== 'string') {\n    return { ok: false, message: 'context.mode.create payload.description must be a string' };\n  }\n  if (!isRecord(thresholds)) {\n    return {\n      ok: false,\n      message:\n        'context.mode.create payload.thresholds must be an object with warn/soft/hard numbers',\n    };\n  }\n  if (\n    !isFiniteNumber(thresholds['warn']) ||\n    !isFiniteNumber(thresholds['soft']) ||\n    !isFiniteNumber(thresholds['hard'])\n  ) {\n    return {\n      ok: false,\n      message: 'context.mode.create payload.thresholds.warn/soft/hard must be finite numbers',\n    };\n  }\n  if (!isFiniteNumber(preserveK)) {\n    return { ok: false, message: 'context.mode.create payload.preserveK must be a finite number' };\n  }\n  if (!isFiniteNumber(eliseThreshold)) {\n    return {\n      ok: false,\n      message: 'context.mode.create payload.eliseThreshold must be a finite number',\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      id,\n      name,\n      description,\n      thresholds: { warn: thresholds['warn'], soft: thresholds['soft'], hard: thresholds['hard'] },\n      preserveK,\n      eliseThreshold,\n    },\n  };\n}\n\nexport interface ContextModeUpdatePayload {\n  id: string;\n  name?: string;\n  description?: string;\n  thresholds?: { warn?: number; soft?: number; hard?: number };\n  preserveK?: number;\n  eliseThreshold?: number;\n}\n\nexport function validateContextModeUpdatePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeUpdatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'context.mode.update payload must be an object' };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'context.mode.update payload.id must be a non-empty string' };\n  }\n\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.name must be a string when provided',\n    };\n  }\n\n  const description = payload['description'];\n  if (description !== undefined && typeof description !== 'string') {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.description must be a string when provided',\n    };\n  }\n\n  const thresholds = payload['thresholds'];\n  let validatedThresholds: ContextModeUpdatePayload['thresholds'];\n  if (thresholds !== undefined) {\n    if (!isRecord(thresholds)) {\n      return {\n        ok: false,\n        message: 'context.mode.update payload.thresholds must be an object when provided',\n      };\n    }\n    for (const key of ['warn', 'soft', 'hard'] as const) {\n      const val = thresholds[key];\n      if (val !== undefined && !isFiniteNumber(val)) {\n        return {\n          ok: false,\n          message: `context.mode.update payload.thresholds.${key} must be a finite number when provided`,\n        };\n      }\n    }\n    validatedThresholds = {\n      ...(typeof thresholds['warn'] === 'number' ? { warn: thresholds['warn'] } : {}),\n      ...(typeof thresholds['soft'] === 'number' ? { soft: thresholds['soft'] } : {}),\n      ...(typeof thresholds['hard'] === 'number' ? { hard: thresholds['hard'] } : {}),\n    };\n  }\n\n  const preserveK = payload['preserveK'];\n  if (preserveK !== undefined && !isFiniteNumber(preserveK)) {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.preserveK must be a finite number when provided',\n    };\n  }\n\n  const eliseThreshold = payload['eliseThreshold'];\n  if (eliseThreshold !== undefined && !isFiniteNumber(eliseThreshold)) {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.eliseThreshold must be a finite number when provided',\n    };\n  }\n\n  return {\n    ok: true,\n    value: {\n      id,\n      ...(typeof name === 'string' ? { name } : {}),\n      ...(typeof description === 'string' ? { description } : {}),\n      ...(validatedThresholds !== undefined ? { thresholds: validatedThresholds } : {}),\n      ...(typeof preserveK === 'number' ? { preserveK } : {}),\n      ...(typeof eliseThreshold === 'number' ? { eliseThreshold } : {}),\n    },\n  };\n}\n\nexport interface ShellOpenPayload {\n  path: string;\n  target?: 'file' | 'terminal';\n}\n\nexport function validateShellOpenPayload(\n  payload: unknown,\n): PayloadValidationResult<ShellOpenPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'shell.open payload must be an object with string path' };\n  }\n  const path = payload['path'];\n  if (typeof path !== 'string' || path.trim().length === 0) {\n    return { ok: false, message: 'shell.open payload.path must be a non-empty string' };\n  }\n  const target = payload['target'];\n  if (target !== undefined && target !== 'file' && target !== 'terminal') {\n    return {\n      ok: false,\n      message: 'shell.open payload.target must be \"file\" or \"terminal\" when provided',\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      path,\n      ...(target !== undefined ? { target: target as 'file' | 'terminal' } : {}),\n    },\n  };\n}\n\nexport interface GitDiffPayload {\n  path: string;\n}\n\nexport function validateGitDiffPayload(payload: unknown): PayloadValidationResult<GitDiffPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'git.diff payload must be an object' };\n  }\n  const path = payload['path'];\n  if (path === undefined || path === null) {\n    return { ok: true, value: { path: '' } };\n  }\n  if (typeof path !== 'string') {\n    return { ok: false, message: 'git.diff payload.path must be a string when provided' };\n  }\n  return { ok: true, value: { path } };\n}\n\nexport interface ProjectsAddPayload {\n  root: string;\n  name?: string;\n}\n\nexport function validateProjectsAddPayload(\n  payload: unknown,\n): PayloadValidationResult<ProjectsAddPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'projects.add payload must be an object with string root' };\n  }\n  const root = payload['root'];\n  if (typeof root !== 'string' || root.trim().length === 0) {\n    return { ok: false, message: 'projects.add payload.root must be a non-empty string' };\n  }\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return { ok: false, message: 'projects.add payload.name must be a string when provided' };\n  }\n  return {\n    ok: true,\n    value: { root, ...(typeof name === 'string' ? { name } : {}) },\n  };\n}\n\nexport interface ProjectsSelectPayload {\n  root: string;\n  name?: string;\n}\n\nexport function validateProjectsSelectPayload(\n  payload: unknown,\n): PayloadValidationResult<ProjectsSelectPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'projects.select payload must be an object with string root' };\n  }\n  const root = payload['root'];\n  if (typeof root !== 'string' || root.trim().length === 0) {\n    return { ok: false, message: 'projects.select payload.root must be a non-empty string' };\n  }\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return { ok: false, message: 'projects.select payload.name must be a string when provided' };\n  }\n  return {\n    ok: true,\n    value: { root, ...(typeof name === 'string' ? { name } : {}) },\n  };\n}\n", "// \u2500\u2500 Shared Worklist Handlers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// Extracted from standalone server (packages/webui/src/server/index.ts) and CLI\n// embedded server (packages/cli/src/webui-server/). Both servers use these\n// handlers for todos, tasks, and plan operations. Keep them in sync.\n//\n// Message types handled here:\n//   todos.get | todos.clear | todos.remove | todo.update\n//   tasks.get | task.update\n//   plan.get | plan.template_use | plan.item.update\n// \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nimport type { WebSocket } from 'ws';\nimport type { TodoItem } from '@wrongstack/core';\nimport { validatePlanTemplateUsePayload } from '../ws-payload-validation.js';\n\n// \u2500\u2500 Shared result helper \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nfunction sendResult(\n  ws: WebSocket,\n  ctx: WorklistContext,\n  ok: boolean,\n  message: string,\n): void {\n  ctx.send(ws, { type: ok ? 'ok' : 'error', message });\n}\n\nfunction sessionPayload<T extends Record<string, unknown>>(\n  ctx: WorklistContext,\n  payload: T,\n): T & { sessionId: string } {\n  const provided = payload['sessionId'];\n  const fallback = ctx.context.session?.id ?? '';\n  const sessionId = typeof provided === 'string' && provided.length > 0 ? provided : fallback;\n  return { ...payload, sessionId };\n}\n\n// \u2500\u2500 Context interface \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// Both servers satisfy this with their own local state.\n\nexport interface WorklistContext {\n  context: {\n    todos: TodoItem[];\n    meta: Record<string, unknown>;\n    session: { id: string } | null;\n    state?: unknown;\n  };\n  send: (ws: WebSocket, msg: object) => void;\n  broadcast: (msg: object) => void;\n  /**\n   * Optional mutator for in-memory todo state. Servers that manage live\n   * agent state (e.g. the CLI embedded server) provide this so handlers\n   * can update the agent's todo list directly. Standalone server may omit.\n   */\n  replaceTodos?: (todos: TodoItem[]) => void;\n}\n\n// \u2500\u2500 Todos \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport function handleTodosGet(ctx: WorklistContext, ws: WebSocket): void {\n  ctx.send(ws, { type: 'todos.updated', payload: sessionPayload(ctx, { todos: ctx.context.todos }) });\n}\n\nexport function handleTodosClear(ctx: WorklistContext, ws: WebSocket): void {\n  ctx.replaceTodos?.([]);\n  ctx.broadcast({ type: 'todos.cleared', payload: sessionPayload(ctx, {}) });\n  sendResult(ws, ctx, true, 'Todo board cleared.');\n}\n\nexport function handleTodosRemove(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { id?: string; index?: number } | undefined,\n): void {\n  if (!payload || (payload.id === undefined && payload.index === undefined)) {\n    sendResult(ws, ctx, false, 'todos.remove requires id or index.');\n    return;\n  }\n  const next =\n    payload.id !== undefined\n      ? ctx.context.todos.filter((t) => t.id !== payload.id)\n      : ctx.context.todos.filter((_, i) => i !== (payload.index as number));\n  ctx.replaceTodos?.(next);\n  ctx.broadcast({ type: 'todos.updated', payload: sessionPayload(ctx, { todos: next }) });\n  sendResult(ws, ctx, true, 'Todo item removed.');\n}\n\nexport function handleTodoUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { id: string; status?: TodoItem['status']; activeForm?: string },\n): void {\n  const todo = ctx.context.todos.find((t) => t.id === payload.id);\n  if (!todo) {\n    sendResult(ws, ctx, false, `No todo with id \"${payload.id}\".`);\n    return;\n  }\n  const next = ctx.context.todos.map((t) =>\n    t.id === payload.id\n      ? { ...t, ...(payload.status !== undefined && { status: payload.status }), ...(payload.activeForm !== undefined && { activeForm: payload.activeForm }) }\n      : t,\n  );\n  ctx.replaceTodos?.(next);\n  ctx.broadcast({ type: 'todos.updated', payload: sessionPayload(ctx, { todos: next }) });\n  sendResult(ws, ctx, true, `Todo \"${todo.content}\" updated.`);\n}\n\n// \u2500\u2500 Tasks \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport async function handleTasksGet(ctx: WorklistContext, ws: WebSocket): Promise<void> {\n  const taskPath = ctx.context.meta['task.path'];\n  if (typeof taskPath === 'string' && taskPath) {\n    try {\n      const { loadTasks } = await import('@wrongstack/core');\n      const file = await loadTasks(taskPath);\n      ctx.send(ws, { type: 'tasks.updated', payload: sessionPayload(ctx, { tasks: file?.tasks ?? [] }) });\n    } catch {\n      ctx.send(ws, { type: 'tasks.updated', payload: sessionPayload(ctx, { tasks: [] }) });\n    }\n  } else {\n    ctx.send(ws, {\n      type: 'tasks.updated',\n      payload: sessionPayload(ctx, { tasks: [], error: 'Task storage not configured.' }),\n    });\n  }\n}\n\nexport async function handleTaskUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: {\n    id: string;\n    status: 'pending' | 'in_progress' | 'blocked' | 'failed' | 'review' | 'completed';\n  },\n): Promise<void> {\n  const taskPath = ctx.context.meta['task.path'];\n  if (typeof taskPath !== 'string' || !taskPath) {\n    sendResult(ws, ctx, false, 'Task storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { loadTasks, saveTasks } = await import('@wrongstack/core');\n    const file = await loadTasks(taskPath);\n    if (!file) {\n      sendResult(ws, ctx, false, 'No task file found.');\n      return;\n    }\n    const idx = file.tasks.findIndex((t) => t.id === payload.id);\n    if (idx === -1) {\n      sendResult(ws, ctx, false, `Task \"${payload.id}\" not found.`);\n      return;\n    }\n    const existing = file.tasks[idx];\n    if (!existing) {\n      // noUncheckedIndexedAccess: array access can be undefined. We just\n      // confirmed idx is in-range via findIndex, but the type system needs\n      // the explicit guard.\n      sendResult(ws, ctx, false, `Task \"${payload.id}\" not found.`);\n      return;\n    }\n    file.tasks[idx] = { ...existing, status: payload.status };\n    await saveTasks(taskPath, file);\n    ctx.broadcast({ type: 'tasks.updated', payload: sessionPayload(ctx, { tasks: file.tasks }) });\n    sendResult(ws, ctx, true, `Task \"${payload.id}\" marked ${payload.status}.`);\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\n// \u2500\u2500 Plan \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport async function handlePlanGet(ctx: WorklistContext, ws: WebSocket): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath === 'string' && planPath) {\n    try {\n      const { loadPlan } = await import('@wrongstack/core');\n      const plan = await loadPlan(planPath);\n      ctx.send(ws, {\n        type: 'plan.updated',\n        payload: sessionPayload(ctx, {\n          plan: plan ?? {\n            version: 1,\n            sessionId,\n            updatedAt: new Date().toISOString(),\n            items: [],\n          },\n        }),\n      });\n    } catch {\n      ctx.send(ws, {\n        type: 'plan.updated',\n        payload: sessionPayload(ctx, {\n          plan: {\n            version: 1,\n            sessionId,\n            updatedAt: new Date().toISOString(),\n            items: [],\n          },\n        }),\n      });\n    }\n  } else {\n    ctx.send(ws, {\n      type: 'plan.updated',\n      payload: sessionPayload(ctx, { plan: null, error: 'Plan storage is not configured for this session.' }),\n    });\n  }\n}\n\nexport async function handlePlanTemplateUse(ctx: WorklistContext, ws: WebSocket, template: string): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath !== 'string' || !planPath) {\n    sendResult(ws, ctx, false, 'Plan storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { getPlanTemplate, loadPlan, savePlan, emptyPlan, addPlanItem } = await import('@wrongstack/core');\n    const tpl = getPlanTemplate(template);\n    if (!tpl) {\n      sendResult(ws, ctx, false, `Unknown template \"${template}\".`);\n      return;\n    }\n    let plan = (await loadPlan(planPath)) ?? emptyPlan(sessionId);\n    for (const item of tpl.items) {\n      ({ plan } = addPlanItem(plan, item.title, item.details));\n    }\n    await savePlan(planPath, plan);\n    sendResult(ws, ctx, true, `Applied template \"${tpl.name}\" \u2014 ${tpl.items.length} items added.`);\n    ctx.broadcast({ type: 'plan.updated', payload: sessionPayload(ctx, { plan }) });\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\nexport async function handlePlanItemUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { target: string; status: 'open' | 'in_progress' | 'done' },\n): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath !== 'string' || !planPath) {\n    sendResult(ws, ctx, false, 'Plan storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { mutatePlan, setPlanItemStatus } = await import('@wrongstack/core');\n    let changed = false;\n    const plan = await mutatePlan(planPath, sessionId, async (p) => {\n      const before = p.updatedAt;\n      const updated = setPlanItemStatus(p, payload.target, payload.status);\n      changed = updated.updatedAt !== before;\n      return updated;\n    });\n    if (!changed) {\n      sendResult(ws, ctx, false, `No plan item matched \"${payload.target}\".`);\n      return;\n    }\n    sendResult(ws, ctx, true, `Plan item status updated to \"${payload.status}\".`);\n    ctx.broadcast({ type: 'plan.updated', payload: sessionPayload(ctx, { plan }) });\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\n// \u2500\u2500 Dispatcher \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// Single entry point for the nine worklist message types, so the host server's\n// switch delegates one grouped case here instead of repeating the per-type\n// `makeWorklistContext()` boilerplate. Unknown types are a no-op (the caller\n// only routes worklist types to this function).\n\n/** Loosely-typed worklist WS message \u2014 payload shapes are narrowed per case. */\nexport interface WorklistMessage {\n  type: string;\n  payload?: unknown;\n}\n\nexport async function handleWorklistMessage(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  msg: WorklistMessage,\n): Promise<void> {\n  switch (msg.type) {\n    case 'todos.get':\n      handleTodosGet(ctx, ws);\n      return;\n    case 'todos.clear':\n      handleTodosClear(ctx, ws);\n      return;\n    case 'todos.remove':\n      handleTodosRemove(ctx, ws, msg.payload as { id?: string; index?: number } | undefined);\n      return;\n    case 'todo.update':\n      handleTodoUpdate(\n        ctx,\n        ws,\n        msg.payload as { id: string; status?: TodoItem['status']; activeForm?: string },\n      );\n      return;\n    case 'tasks.get':\n      await handleTasksGet(ctx, ws);\n      return;\n    case 'task.update':\n      await handleTaskUpdate(\n        ctx,\n        ws,\n        msg.payload as {\n          id: string;\n          status: 'pending' | 'in_progress' | 'blocked' | 'failed' | 'review' | 'completed';\n        },\n      );\n      return;\n    case 'plan.get':\n      await handlePlanGet(ctx, ws);\n      return;\n    case 'plan.template_use': {\n      const parsed = validatePlanTemplateUsePayload(msg.payload);\n      if (!parsed.ok) {\n        sendResult(ws, ctx, false, parsed.message);\n        return;\n      }\n      await handlePlanTemplateUse(ctx, ws, parsed.value.template);\n      return;\n    }\n    case 'plan.item.update':\n      await handlePlanItemUpdate(\n        ctx,\n        ws,\n        msg.payload as { target: string; status: 'open' | 'in_progress' | 'done' },\n      );\n      return;\n  }\n}\n"],
+  "mappings": ";AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AA2NO,SAAS,+BACd,SACiD;AACjD,MAAI,CAAC,SAAS,OAAO,GAAG;AACtB,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,SAAS;AAAA,IACX;AAAA,EACF;AACA,QAAM,WAAW,QAAQ,UAAU;AACnC,MAAI,OAAO,aAAa,YAAY,SAAS,KAAK,EAAE,WAAW,GAAG;AAChE,WAAO,EAAE,IAAI,OAAO,SAAS,gEAAgE;AAAA,EAC/F;AACA,SAAO,EAAE,IAAI,MAAM,OAAO,EAAE,SAAS,EAAE;AACzC;;;AC5NA,SAAS,WACP,IACA,KACA,IACA,SACM;AACN,MAAI,KAAK,IAAI,EAAE,MAAM,KAAK,OAAO,SAAS,QAAQ,CAAC;AACrD;AAEA,SAAS,eACP,KACA,SAC2B;AAC3B,QAAM,WAAW,QAAQ,WAAW;AACpC,QAAM,WAAW,IAAI,QAAQ,SAAS,MAAM;AAC5C,QAAM,YAAY,OAAO,aAAa,YAAY,SAAS,SAAS,IAAI,WAAW;AACnF,SAAO,EAAE,GAAG,SAAS,UAAU;AACjC;AAwBO,SAAS,eAAe,KAAsB,IAAqB;AACxE,MAAI,KAAK,IAAI,EAAE,MAAM,iBAAiB,SAAS,eAAe,KAAK,EAAE,OAAO,IAAI,QAAQ,MAAM,CAAC,EAAE,CAAC;AACpG;AAEO,SAAS,iBAAiB,KAAsB,IAAqB;AAC1E,MAAI,eAAe,CAAC,CAAC;AACrB,MAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,eAAe,KAAK,CAAC,CAAC,EAAE,CAAC;AACzE,aAAW,IAAI,KAAK,MAAM,qBAAqB;AACjD;AAEO,SAAS,kBACd,KACA,IACA,SACM;AACN,MAAI,CAAC,WAAY,QAAQ,OAAO,UAAa,QAAQ,UAAU,QAAY;AACzE,eAAW,IAAI,KAAK,OAAO,oCAAoC;AAC/D;AAAA,EACF;AACA,QAAM,OACJ,QAAQ,OAAO,SACX,IAAI,QAAQ,MAAM,OAAO,CAAC,MAAM,EAAE,OAAO,QAAQ,EAAE,IACnD,IAAI,QAAQ,MAAM,OAAO,CAAC,GAAG,MAAM,MAAO,QAAQ,KAAgB;AACxE,MAAI,eAAe,IAAI;AACvB,MAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,eAAe,KAAK,EAAE,OAAO,KAAK,CAAC,EAAE,CAAC;AACtF,aAAW,IAAI,KAAK,MAAM,oBAAoB;AAChD;AAEO,SAAS,iBACd,KACA,IACA,SACM;AACN,QAAM,OAAO,IAAI,QAAQ,MAAM,KAAK,CAAC,MAAM,EAAE,OAAO,QAAQ,EAAE;AAC9D,MAAI,CAAC,MAAM;AACT,eAAW,IAAI,KAAK,OAAO,oBAAoB,QAAQ,EAAE,IAAI;AAC7D;AAAA,EACF;AACA,QAAM,OAAO,IAAI,QAAQ,MAAM;AAAA,IAAI,CAAC,MAClC,EAAE,OAAO,QAAQ,KACb,EAAE,GAAG,GAAG,GAAI,QAAQ,WAAW,UAAa,EAAE,QAAQ,QAAQ,OAAO,GAAI,GAAI,QAAQ,eAAe,UAAa,EAAE,YAAY,QAAQ,WAAW,EAAG,IACrJ;AAAA,EACN;AACA,MAAI,eAAe,IAAI;AACvB,MAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,eAAe,KAAK,EAAE,OAAO,KAAK,CAAC,EAAE,CAAC;AACtF,aAAW,IAAI,KAAK,MAAM,SAAS,KAAK,OAAO,YAAY;AAC7D;AAIA,eAAsB,eAAe,KAAsB,IAA8B;AACvF,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,MAAI,OAAO,aAAa,YAAY,UAAU;AAC5C,QAAI;AACF,YAAM,EAAE,UAAU,IAAI,MAAM,OAAO,kBAAkB;AACrD,YAAM,OAAO,MAAM,UAAU,QAAQ;AACrC,UAAI,KAAK,IAAI,EAAE,MAAM,iBAAiB,SAAS,eAAe,KAAK,EAAE,OAAO,MAAM,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;AAAA,IACpG,QAAQ;AACN,UAAI,KAAK,IAAI,EAAE,MAAM,iBAAiB,SAAS,eAAe,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;AAAA,IACrF;AAAA,EACF,OAAO;AACL,QAAI,KAAK,IAAI;AAAA,MACX,MAAM;AAAA,MACN,SAAS,eAAe,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,+BAA+B,CAAC;AAAA,IACnF,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,iBACpB,KACA,IACA,SAIe;AACf,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,MAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,eAAW,IAAI,KAAK,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,UAAM,EAAE,WAAW,UAAU,IAAI,MAAM,OAAO,kBAAkB;AAChE,UAAM,OAAO,MAAM,UAAU,QAAQ;AACrC,QAAI,CAAC,MAAM;AACT,iBAAW,IAAI,KAAK,OAAO,qBAAqB;AAChD;AAAA,IACF;AACA,UAAM,MAAM,KAAK,MAAM,UAAU,CAAC,MAAM,EAAE,OAAO,QAAQ,EAAE;AAC3D,QAAI,QAAQ,IAAI;AACd,iBAAW,IAAI,KAAK,OAAO,SAAS,QAAQ,EAAE,cAAc;AAC5D;AAAA,IACF;AACA,UAAM,WAAW,KAAK,MAAM,GAAG;AAC/B,QAAI,CAAC,UAAU;AAIb,iBAAW,IAAI,KAAK,OAAO,SAAS,QAAQ,EAAE,cAAc;AAC5D;AAAA,IACF;AACA,SAAK,MAAM,GAAG,IAAI,EAAE,GAAG,UAAU,QAAQ,QAAQ,OAAO;AACxD,UAAM,UAAU,UAAU,IAAI;AAC9B,QAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,eAAe,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC,EAAE,CAAC;AAC5F,eAAW,IAAI,KAAK,MAAM,SAAS,QAAQ,EAAE,YAAY,QAAQ,MAAM,GAAG;AAAA,EAC5E,SAAS,KAAK;AACZ,eAAW,IAAI,KAAK,OAAO,OAAO,GAAG,CAAC;AAAA,EACxC;AACF;AAIA,eAAsB,cAAc,KAAsB,IAA8B;AACtF,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,QAAM,YAAY,IAAI,QAAQ,SAAS,MAAM;AAC7C,MAAI,OAAO,aAAa,YAAY,UAAU;AAC5C,QAAI;AACF,YAAM,EAAE,SAAS,IAAI,MAAM,OAAO,kBAAkB;AACpD,YAAM,OAAO,MAAM,SAAS,QAAQ;AACpC,UAAI,KAAK,IAAI;AAAA,QACX,MAAM;AAAA,QACN,SAAS,eAAe,KAAK;AAAA,UAC3B,MAAM,QAAQ;AAAA,YACZ,SAAS;AAAA,YACT;AAAA,YACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YAClC,OAAO,CAAC;AAAA,UACV;AAAA,QACF,CAAC;AAAA,MACH,CAAC;AAAA,IACH,QAAQ;AACN,UAAI,KAAK,IAAI;AAAA,QACX,MAAM;AAAA,QACN,SAAS,eAAe,KAAK;AAAA,UAC3B,MAAM;AAAA,YACJ,SAAS;AAAA,YACT;AAAA,YACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YAClC,OAAO,CAAC;AAAA,UACV;AAAA,QACF,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAAA,EACF,OAAO;AACL,QAAI,KAAK,IAAI;AAAA,MACX,MAAM;AAAA,MACN,SAAS,eAAe,KAAK,EAAE,MAAM,MAAM,OAAO,mDAAmD,CAAC;AAAA,IACxG,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,sBAAsB,KAAsB,IAAe,UAAiC;AAChH,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,QAAM,YAAY,IAAI,QAAQ,SAAS,MAAM;AAC7C,MAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,eAAW,IAAI,KAAK,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,UAAM,EAAE,iBAAiB,UAAU,UAAU,WAAW,YAAY,IAAI,MAAM,OAAO,kBAAkB;AACvG,UAAM,MAAM,gBAAgB,QAAQ;AACpC,QAAI,CAAC,KAAK;AACR,iBAAW,IAAI,KAAK,OAAO,qBAAqB,QAAQ,IAAI;AAC5D;AAAA,IACF;AACA,QAAI,OAAQ,MAAM,SAAS,QAAQ,KAAM,UAAU,SAAS;AAC5D,eAAW,QAAQ,IAAI,OAAO;AAC5B,OAAC,EAAE,KAAK,IAAI,YAAY,MAAM,KAAK,OAAO,KAAK,OAAO;AAAA,IACxD;AACA,UAAM,SAAS,UAAU,IAAI;AAC7B,eAAW,IAAI,KAAK,MAAM,qBAAqB,IAAI,IAAI,YAAO,IAAI,MAAM,MAAM,eAAe;AAC7F,QAAI,UAAU,EAAE,MAAM,gBAAgB,SAAS,eAAe,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;AAAA,EAChF,SAAS,KAAK;AACZ,eAAW,IAAI,KAAK,OAAO,OAAO,GAAG,CAAC;AAAA,EACxC;AACF;AAEA,eAAsB,qBACpB,KACA,IACA,SACe;AACf,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,QAAM,YAAY,IAAI,QAAQ,SAAS,MAAM;AAC7C,MAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,eAAW,IAAI,KAAK,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,UAAM,EAAE,YAAY,kBAAkB,IAAI,MAAM,OAAO,kBAAkB;AACzE,QAAI,UAAU;AACd,UAAM,OAAO,MAAM,WAAW,UAAU,WAAW,OAAO,MAAM;AAC9D,YAAM,SAAS,EAAE;AACjB,YAAM,UAAU,kBAAkB,GAAG,QAAQ,QAAQ,QAAQ,MAAM;AACnE,gBAAU,QAAQ,cAAc;AAChC,aAAO;AAAA,IACT,CAAC;AACD,QAAI,CAAC,SAAS;AACZ,iBAAW,IAAI,KAAK,OAAO,yBAAyB,QAAQ,MAAM,IAAI;AACtE;AAAA,IACF;AACA,eAAW,IAAI,KAAK,MAAM,gCAAgC,QAAQ,MAAM,IAAI;AAC5E,QAAI,UAAU,EAAE,MAAM,gBAAgB,SAAS,eAAe,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;AAAA,EAChF,SAAS,KAAK;AACZ,eAAW,IAAI,KAAK,OAAO,OAAO,GAAG,CAAC;AAAA,EACxC;AACF;AAcA,eAAsB,sBACpB,KACA,IACA,KACe;AACf,UAAQ,IAAI,MAAM;AAAA,IAChB,KAAK;AACH,qBAAe,KAAK,EAAE;AACtB;AAAA,IACF,KAAK;AACH,uBAAiB,KAAK,EAAE;AACxB;AAAA,IACF,KAAK;AACH,wBAAkB,KAAK,IAAI,IAAI,OAAsD;AACrF;AAAA,IACF,KAAK;AACH;AAAA,QACE;AAAA,QACA;AAAA,QACA,IAAI;AAAA,MACN;AACA;AAAA,IACF,KAAK;AACH,YAAM,eAAe,KAAK,EAAE;AAC5B;AAAA,IACF,KAAK;AACH,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA,IAAI;AAAA,MAIN;AACA;AAAA,IACF,KAAK;AACH,YAAM,cAAc,KAAK,EAAE;AAC3B;AAAA,IACF,KAAK,qBAAqB;AACxB,YAAM,SAAS,+BAA+B,IAAI,OAAO;AACzD,UAAI,CAAC,OAAO,IAAI;AACd,mBAAW,IAAI,KAAK,OAAO,OAAO,OAAO;AACzC;AAAA,MACF;AACA,YAAM,sBAAsB,KAAK,IAAI,OAAO,MAAM,QAAQ;AAC1D;AAAA,IACF;AAAA,IACA,KAAK;AACH,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA,IAAI;AAAA,MACN;AACA;AAAA,EACJ;AACF;",
+  "names": []
+}

package/dist/server/http-server/analytics-handler.d.ts

@@ -0,0 +1,35 @@
+/**
+ * HTTP /api/analytics handler for the WebUI server.
+ *
+ * Accepts a batch of analytics events from the frontend, validates them,
+ * and stores them for later aggregation. Events are kept in a small
+ * in-memory ring buffer (last 1000) and can be retrieved via GET for
+ * debugging or exported to an external system.
+ *
+ * The endpoint is intentionally simple: no persistent storage, no external
+ * dependencies. If you need durable analytics, poll the GET endpoint
+ * and ship the events to your own aggregation pipeline (PostHog,
+ * Segment, etc.).
+ */
+import type * as http from 'node:http';
+export interface AnalyticsEvent {
+    event: string;
+    category: string;
+    label?: string | undefined;
+    value?: number | undefined;
+    metadata?: Record<string, unknown> | undefined;
+    timestamp: string;
+    sessionId?: string | undefined;
+    userAgent?: string | undefined;
+}
+/** POST /api/analytics — ingest a batch of events from the frontend. */
+export declare function handleApiAnalyticsPost(res: http.ServerResponse, req: http.IncomingMessage): Promise<void>;
+/** GET /api/analytics — retrieve the last N events (debug/export). */
+export declare function handleApiAnalyticsGet(res: http.ServerResponse, url: URL): Promise<void>;
+/** GET /api/analytics/summary — aggregated stats for quick inspection. */
+export declare function handleApiAnalyticsSummary(res: http.ServerResponse): Promise<void>;
+/** Clear the in-memory buffer (useful for testing). */
+export declare function clearAnalyticsBuffer(): void;
+/** Get a snapshot of the buffer (useful for testing). */
+export declare function getAnalyticsBuffer(): readonly AnalyticsEvent[];
+//# sourceMappingURL=analytics-handler.d.ts.map

package/dist/server/http-server/analytics-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics-handler.d.ts","sourceRoot":"","sources":["../../../src/server/http-server/analytics-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,KAAK,IAAI,MAAM,WAAW,CAAC;AAEvC,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAgED,wEAAwE;AACxE,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,GAAG,EAAE,IAAI,CAAC,eAAe,GACxB,OAAO,CAAC,IAAI,CAAC,CAkCf;AAED,sEAAsE;AACtE,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,0EAA0E;AAC1E,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,IAAI,CAAC,cAAc,GACvB,OAAO,CAAC,IAAI,CAAC,CAaf;AAED,uDAAuD;AACvD,wBAAgB,oBAAoB,IAAI,IAAI,CAI3C;AAED,yDAAyD;AACzD,wBAAgB,kBAAkB,IAAI,SAAS,cAAc,EAAE,CAE9D"}

package/dist/server/http-server/api-handlers.d.ts

@@ -0,0 +1,44 @@
+/**
+ * HTTP /api/* request handlers for the WebUI server — extracted from
+ * http-server.ts to keep the static-serve/routing concern separate from the
+ * (substantial) Fleet-HQ session/mailbox API. Every handler is a pure,
+ * param-based function: it takes the Node req/res plus the globalRoot and reads
+ * the cross-process SessionRegistry / GlobalMailbox via dynamic core imports.
+ * createHttpServer() in http-server.ts dispatches to these.
+ */
+import type * as http from 'node:http';
+export declare function handleApiSessions(res: http.ServerResponse, globalRoot: string | undefined): Promise<void>;
+export declare function handleApiSessionAgents(res: http.ServerResponse, globalRoot: string | undefined, sessionId: string): Promise<void>;
+export declare function handleApiSessionEvents(res: http.ServerResponse, globalRoot: string | undefined, sessionId: string, limit: number): Promise<void>;
+export declare function handleApiSessionMessage(res: http.ServerResponse, req: http.IncomingMessage, globalRoot: string | undefined, sessionId: string): Promise<void>;
+/**
+ * GET /api/sessions/:id/mailbox — the human↔leader thread for a session.
+ *
+ * Returns the messages exchanged between the operator (human@webui) and this
+ * session's leader, newest last, with read-receipts (readBy) and completion/
+ * outcome. This is what makes the WebUI's two-way loop *visible*: after Fleet
+ * HQ sends a steer/ask, the panel shows whether the target read it (✓) and any
+ * reply the agent posted back.
+ */
+export declare function handleApiSessionMailbox(res: http.ServerResponse, globalRoot: string | undefined, sessionId: string): Promise<void>;
+/**
+ * POST /api/sessions/:id/interrupt — cooperatively halt a running session.
+ *
+ * Sends a high-priority `control` mailbox message. The target's agent-loop
+ * checks the mailbox before each LLM call; on seeing a fresh control:interrupt
+ * it stops gracefully at the next iteration boundary (it does NOT kill the
+ * process — for a hard stop use the process panel's PID kill). Cross-process
+ * interrupt is necessarily cooperative: the WebUI server can't reach another
+ * process's AbortController, only its mailbox.
+ */
+export declare function handleApiSessionInterrupt(res: http.ServerResponse, req: http.IncomingMessage, globalRoot: string | undefined, sessionId: string): Promise<void>;
+/**
+ * POST /api/fleet/broadcast — send one message to every live session's leader.
+ *
+ * Resolves all non-stale sessions in the same project as the WebUI host and
+ * sends the message to each session's `leader@<tag>` (a true per-leader fan-out
+ * rather than the bare '*' broadcast, so every live leader's mailbox loop —
+ * which queries its session-bound id — actually receives it).
+ */
+export declare function handleApiFleetBroadcast(res: http.ServerResponse, req: http.IncomingMessage, globalRoot: string | undefined): Promise<void>;
+//# sourceMappingURL=api-handlers.d.ts.map

package/dist/server/http-server/api-handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-handlers.d.ts","sourceRoot":"","sources":["../../../src/server/http-server/api-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,KAAK,IAAI,MAAM,WAAW,CAAC;AAEvC,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,OAAO,CAAC,IAAI,CAAC,CAwCf;AAED,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAqCf;AAoJD,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CA8Cf;AAwBD,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CA0Ef;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAuDf;AAED;;;;;;;;;GASG;AACH,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CA+Cf;AAED;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,OAAO,CAAC,IAAI,CAAC,CA4Ef"}

package/dist/server/http-server.d.ts

@@ -0,0 +1,108 @@
+import * as http from 'node:http';
+import type { FileWatcherMetrics } from './setup-events.js';
+export interface CreateHttpServerOptions {
+    /** Port to listen on. Defaults to 3456 (or the `PORT` env var). */
+    port?: number | undefined;
+    /** Host/interface to bind. Typically the loopback for the WebUI. */
+    host: string;
+    /** Resolved path to the directory containing the built React assets. */
+    distDir: string;
+    /**
+     * WS port — appears in the CSP `connect-src` directive so the browser
+     * is allowed to open a WebSocket back to the local server.
+     */
+    wsPort: number;
+    /**
+     * Public WebSocket URL injected into the frontend. Use this behind tunnels or
+     * reverse proxies where the browser-facing WS URL differs from host:wsPort.
+     */
+    publicWsUrl?: string | undefined;
+    /**
+     * Path to the global WrongStack root (~/.wrongstack). Used by the
+     * /api/sessions and /api/sessions/:id/agents endpoints to read the
+     * cross-process SessionRegistry.
+     */
+    globalRoot?: string | undefined;
+    /**
+     * Shared auth token for HTTP and WS access. Required for non-loopback
+     * binds (LAN exposure). Loopback binds accept local browser access without
+     * a token (the WS path's loopback-bootstrap policy — see ws-auth.ts).
+     */
+    apiToken?: string | undefined;
+    /** Force HTTP token auth even on loopback binds, useful behind public tunnels. */
+    requireToken?: boolean | undefined;
+    /**
+     * If true, the `/ws-auth` endpoint exchanges a `?token=` query param (or
+     * `X-WS-Token` header) for an `HttpOnly` auth cookie. The cookie is then
+     * sent automatically on the WS upgrade, closing the C-598 query-string
+     * token exposure class. Default: true. Set to false to keep the legacy
+     * URL-token-only flow (e.g. in tests that don't want cookie state).
+     */
+    enableWsCookie?: boolean | undefined;
+    /**
+     * Optional file watcher metrics object. When provided, the
+     * /debug/watcher-metrics endpoint will be enabled to expose these metrics.
+     */
+    watcherMetrics?: FileWatcherMetrics | undefined;
+    /**
+     * Push-on-write hook. `POST /api/fleet/ping` (loopback only) invokes this to
+     * trigger an immediate fleet re-broadcast, so a TUI/REPL's registry write
+     * reaches the map without waiting on the file-watch/poll. Best-effort.
+     */
+    onFleetPing?: (() => void) | undefined;
+}
+/**
+ * Inject the live WS port into the served HTML so the frontend connects to
+ * THIS instance's backend instead of a hardcoded default. Enables running
+ * several WebUI instances simultaneously on different PORT/WS_PORT pairs
+ * (e.g. one per project) — each instance serves HTML stamped with its own
+ * WS port.
+ *
+ * A `<meta>` tag is used deliberately rather than an inline `<script>`: the
+ * CSP sets `script-src 'self'`, which would block an inline script, but meta
+ * tags are not subject to script-src. The frontend reads
+ * `meta[name="wrongstack-ws-port"]` (see ws-client.ts `defaultWsUrl`).
+ */
+export declare function injectWsPort(html: string, wsPort: number): string;
+export declare function injectWsConfig(html: string, opts: {
+    wsPort: number;
+    publicWsUrl?: string | undefined;
+}): string;
+/** Build the Content-Security-Policy value for the given WS port. */
+export declare function buildCspHeader(wsPort: number, requestHost?: string | undefined, publicWsUrl?: string | undefined): string;
+/**
+ * Returns true when `candidate` (a fully-resolved absolute path) lies
+ * strictly inside `distDir` (or equals it). Used to reject path-traversal
+ * attempts after `path.resolve` has normalised any `..` segments.
+ *
+ * Exported so tests can assert the guard's contract without having to
+ * also defeat the WHATWG URL normaliser (which strips `..` from the
+ * path string *before* the request even reaches the server, making a
+ * black-box test via fetch impossible).
+ */
+export declare function isInsideDist(candidate: string, distDir: string): boolean;
+/**
+ * Decode a `:id` path segment captured by the `/api/sessions/:id/*` routes.
+ *
+ * Session ids are `YYYY-MM-DD/sess_<ULID>` — they contain a literal
+ * `/`. The frontend builds the URL with `encodeURIComponent(sessionId)`, so
+ * that slash arrives as `%2F`. The route regex `([^/]+)` correctly captures
+ * the whole percent-encoded segment (there is no real `/` in `%2F`), but the
+ * SessionRegistry is keyed by the *decoded* id — so the capture must be
+ * `decodeURIComponent`d before lookup. Without this, every
+ * `/api/sessions/:id/{events,message,agents}` request 404s (the registry has
+ * `2026-…/…` but we looked up `2026-…%2F…`), which broke the Fleet HQ
+ * watch-stream and the steer-message composer.
+ *
+ * Malformed percent-encoding (a lone `%`) makes `decodeURIComponent` throw;
+ * fall back to the raw segment so the caller still gets a clean 404 rather
+ * than a 500.
+ */
+export declare function decodeSessionId(segment: string): string;
+/**
+ * Create the static-file HTTP server. Returns the `http.Server` (not
+ * listening yet) so the caller can attach to a `shutdown()` hook and
+ * coordinate the listen() with the WebSocket bootstrap.
+ */
+export declare function createHttpServer(opts: CreateHttpServerOptions): http.Server;
+//# sourceMappingURL=http-server.d.ts.map

package/dist/server/http-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-server.d.ts","sourceRoot":"","sources":["../../src/server/http-server.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAiBlC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,MAAM,WAAW,uBAAuB;IACtC,mEAAmE;IACnE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,kFAAkF;IAClF,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACnC;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACrC;;;OAGG;IACH,cAAc,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAChD;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC;CACxC;AAYD;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CASjE;AAUD,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GACzD,MAAM,CAQR;AA2DD,qEAAqE;AACrE,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,EAChC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,GAC/B,MAAM,CAoBR;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAIxE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAMvD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,uBAAuB,GAAG,IAAI,CAAC,MAAM,CA0T3E"}

package/dist/server/index.d.ts

@@ -0,0 +1,93 @@
+/**
+ * @wrongstack/webui/server — public API barrel.
+ *
+ * Phase 1d of the god-module split: `startWebUI` and all server-internal
+ * logic moved to `./start-webui.ts`. This file is now a pure re-export
+ * surface so the CLI's embedded `--webui` mode and external consumers
+ * import shared handlers, types, and utilities from one place.
+ *
+ * The package's `exports["./server"]` field points here.
+ */
+export { AutoPhaseWebSocketHandler } from './autophase-ws-handler.js';
+export { type CompletionHandlerOptions, type CompletionItemKind, type CompletionSuggestion, createToolLspCompletionSource, handleCompletionRequest, type LspCompletionSource, type LspCompletionSourceRequest, } from './completion-handlers.js';
+export { type CustomContextMode, type CustomModeStore, createCustomModeStore, } from './custom-context-modes.js';
+export { type DesignContext, handleDesignList, handleDesignMaterialize, handleDesignSet, handleDesignState, handleDesignUse, handleDesignVerify, } from './design-handlers.js';
+export { createEternalSubscription, type EternalBroadcast, type EternalSubscribe, type EternalSubscription, } from './eternal-iteration-broadcast.js';
+export { handleFilesList, handleFilesRead, handleFilesTree, handleFilesWrite, } from './file-handlers.js';
+export { handleGitChanges, handleGitDiff, handleGitInfo } from './git-handlers.js';
+export type { CreateHttpServerOptions } from './http-server.js';
+export { buildCspHeader, createHttpServer, injectWsPort } from './http-server.js';
+export { defaultBaseDir, formatInstances, listInstances, registerInstance, registryPath, unregisterInstance, type WebUIInstanceRecord, } from './instance-registry.js';
+export { handleMcpAdd, handleMcpDisable, handleMcpDiscover, handleMcpEnable, handleMcpList, handleMcpRemove, handleMcpRestart, handleMcpSleep, handleMcpUpdate, handleMcpWake, } from './mcp-handlers.js';
+export { handleMemoryForget, handleMemoryList, handleMemoryRemember, } from './memory-handlers.js';
+export { browserOpenCommand, openBrowser } from './open-browser.js';
+export { findFreePort, isPortFree } from './port-utils.js';
+export { handlePromptsContent, handlePromptsCreate, handlePromptsFavorite, handlePromptsList, handlePromptsRecent, handlePromptsSearch, handlePromptsUsed, type PromptsContext, } from './prompts-handlers.js';
+export { createProviderConfigIO } from './provider-config-standalone.js';
+export { loadSavedProviders, saveProviders } from './provider-config-io.js';
+export { addProvider, deleteKey, type KeyOpResult, maskedKey, normalizeKeys, type ProvidersRecord, removeProvider, setActiveKey, upsertKey, writeKeysBack, } from './provider-keys.js';
+export { SddBoardWebSocketHandler } from './sdd-board-ws-handler.js';
+export { buildSddWizardDeps, type SddWizardWiringOptions } from './sdd-wizard-wiring.js';
+export { type SddWizardDeps, SddWizardWebSocketHandler } from './sdd-wizard-ws-handler.js';
+export { handleShellOpen, type ShellOpenRequest, type ShellOpenResult, type ShellOpenTarget, } from './shell-open.js';
+export { handleSkillsContent, handleSkillsCreate, handleSkillsEdit, handleSkillsExport, handleSkillsInstall, handleSkillsUninstall, handleSkillsUpdate, type SkillsContext, } from './skills-handlers.js';
+export { SpecsWebSocketHandler } from './specs-ws-handler.js';
+export { type ContextBreakdown, estimateTokens, type MessageTokenEntry, messagePreview, messageTokens, stringifyContent, type ToolTokenEntry, } from './token-estimator.js';
+export type { BackendServices, ConnectedClient, WebUIOptions, WSClientMessage, WSServerMessage, } from './types.js';
+export { WorktreeWebSocketHandler } from './worktree-ws-handler.js';
+export { extractToken, hostHeaderOk, isLoopbackBind, isLoopbackHostname, tokenMatches, type VerifyClientInput, verifyClient, } from './ws-auth.js';
+export { broadcast, buildWebUIAccessUrl, envFlag, errMessage, generateAuthToken, hostForBrowserUrl, resolveAuthToken, send, sendResult, } from './ws-utils.js';
+export { startWebUI } from './start-webui.js';
+export { handleAutoPhaseRoute } from './autophase-routes.js';
+export type { AutoPhaseRouteHandlers } from './autophase-routes.js';
+export { bootConfig, patchConfig } from './boot.js';
+export { setupWebUICodebaseIndexing } from './codebase-indexing.js';
+export { handleGoalGet } from './goal-handlers.js';
+export { handleProcessKill, handleProcessKillAll, handleProcessList, } from './process-handlers.js';
+export { handleBrainRoute } from './brain-routes.js';
+export type { BrainRouteHandlers } from './brain-routes.js';
+export { CollaborationWebSocketHandler } from './collaboration-ws-handler.js';
+export { SKIP_DIRS, isHiddenEntry, rankFiles } from './file-picker.js';
+export { handleWorklistMessage } from './handlers/worklist-handlers.js';
+export type { WorklistContext } from './handlers/worklist-handlers.js';
+export { decodeSessionId, injectWsConfig, isInsideDist } from './http-server.js';
+export { clearAnalyticsBuffer, getAnalyticsBuffer, handleApiAnalyticsGet, handleApiAnalyticsPost, handleApiAnalyticsSummary } from './http-server/analytics-handler.js';
+export { isPidAlive } from './instance-registry.js';
+export { createShutdown, registerShutdownHandlers } from './lifecycle.js';
+export { handleMailboxMessages } from './mailbox-handlers.js';
+export { handleMailboxRoute } from './mailbox-routes.js';
+export type { MailboxRouteHandlers } from './mailbox-routes.js';
+export { handleMcpRoute } from './mcp-routes.js';
+export { handleModeRoute } from './mode-routes.js';
+export type { ModeRouteHandlers } from './mode-routes.js';
+export { resolveProviderCatalogForModels, resolveProviderModelMetadata } from './model-catalog.js';
+export { isPathInside, resolveWorkingDirInsideProject } from './path-containment.js';
+export { resolveAllPendingConfirms, resolveYoloEligiblePendingConfirms } from './pending-confirms.js';
+export type { PendingConfirm } from './pending-confirms.js';
+export { persistPrefsToConfig } from './pref-helpers.js';
+export { handlePrefsRoute } from './prefs-routes.js';
+export { handleProjectRoute } from './project-routes.js';
+export type { ProjectRouteHandlers } from './project-routes.js';
+export { ensureProjectDataDir, loadManifest, projectsJsonPath, saveManifest } from './projects-manifest.js';
+export { createProviderHandlers, projectSavedProviders } from './provider-handlers.js';
+export type { SavedProviderView } from './provider-handlers.js';
+export { handleProviderRoute } from './provider-routes.js';
+export type { ProviderRouteHandlers } from './provider-routes.js';
+export { createConfigWriteLock, createProviderStore } from './provider-store.js';
+export type { ProviderStore } from './provider-store.js';
+export { handleSddBoardRoute } from './sdd-board-routes.js';
+export { handleSddWizardRoute } from './sdd-wizard-routes.js';
+export { handleSessionRoute } from './session-routes.js';
+export type { SessionRouteHandlers } from './session-routes.js';
+export { setupEvents, statusProjectHashFromWatchFilename } from './setup-events.js';
+export { handleShellGitRoute } from './shell-git-routes.js';
+export type { ShellGitRouteHandlers } from './shell-git-routes.js';
+export { handleSkillsList } from './skills-handlers.js';
+export { handleSpecsRoute } from './specs-routes.js';
+export { TerminalWebSocketHandler } from './terminal-ws-handler.js';
+export { estimateContextBreakdown } from './token-estimator.js';
+export { computeUsageCost, getCostRates } from './usage-cost.js';
+export { extractTokenFromCookie, isWildcardBind } from './ws-auth.js';
+export { validateAutonomySwitchPayload, validateBrainAskPayload, validateBrainRiskPayload, validateContextModeCreatePayload, validateContextModeDeletePayload, validateContextModeSwitchPayload, validateContextModeUpdatePayload, validateGitDiffPayload, validateMailboxAgentsPayload, validateMailboxMessagesPayload, validateMailboxPurgePayload, validateModeSwitchPayload, validateModelSwitchPayload, validatePlanTemplateUsePayload, validatePrefsUpdatePayload, validateProcessKillPayload, validateProjectsAddPayload, validateProjectsSelectPayload, validateShellOpenPayload, validateSkillsCreatePayload, validateSkillsEditPayload, validateWorkingDirSetPayload } from './ws-payload-validation.js';
+export { createZipBuffer, readZipEntries, type ZipEntryInput } from './zip.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EACL,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,GAChC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,qBAAqB,GACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,aAAa,EAClB,gBAAgB,EAChB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,yBAAyB,EACzB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,GACzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,eAAe,EACf,eAAe,EACf,eAAe,EACf,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACnF,YAAY,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EACL,cAAc,EACd,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,YAAY,EACZ,kBAAkB,EAClB,KAAK,mBAAmB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,aAAa,GACd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,KAAK,cAAc,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EACL,WAAW,EACX,SAAS,EACT,KAAK,WAAW,EAChB,SAAS,EACT,aAAa,EACb,KAAK,eAAe,EACpB,cAAc,EACd,YAAY,EACZ,SAAS,EACT,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,KAAK,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,KAAK,aAAa,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAC3F,OAAO,EACL,eAAe,EACf,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,KAAK,aAAa,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EACL,KAAK,gBAAgB,EACrB,cAAc,EACd,KAAK,iBAAiB,EACtB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,KAAK,cAAc,GACpB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,eAAe,EACf,eAAe,EACf,YAAY,EACZ,eAAe,EACf,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,YAAY,EACZ,KAAK,iBAAiB,EACtB,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,OAAO,EACP,UAAU,EACV,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,IAAI,EACJ,UAAU,GACX,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAO9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,YAAY,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,YAAY,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,YAAY,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AACxK,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,+BAA+B,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AACnG,OAAO,EAAE,YAAY,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,EAAE,yBAAyB,EAAE,kCAAkC,EAAE,MAAM,uBAAuB,CAAC;AACtG,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC5G,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACvF,YAAY,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,YAAY,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACjF,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,kCAAkC,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,YAAY,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,EAAE,6BAA6B,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,gCAAgC,EAAE,gCAAgC,EAAE,gCAAgC,EAAE,gCAAgC,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,8BAA8B,EAAE,2BAA2B,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,yBAAyB,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AACnrB,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,UAAU,CAAC"}