@wrongstack/webui-server 0.284.1 → 0.286.0

package/dist/server/setup-events.d.ts

@@ -0,0 +1,67 @@
+import type { Context, EventBus, SessionEventBridge, WstackPaths } from '@wrongstack/core';
+import type { WebSocket } from 'ws';
+import type { ConnectedClient, WSServerMessage } from './types.js';
+import type { PendingConfirm } from './pending-confirms.js';
+/** Metrics for the file watcher that watches status.json files. */
+export interface FileWatcherMetrics {
+    /** Number of status.json filesystem events detected after filename filtering. */
+    fileChangesDetected: number;
+    filesProcessed: number;
+    broadcastsSent: number;
+    debounceResets: number;
+    totalDebounceDelayMs: number;
+    activeProjects: number;
+    /** Average debounce delay in ms across all broadcasts. */
+    averageDebounceDelayMs: number;
+    /** Whether the file watcher is currently active. */
+    watcherActive: boolean;
+}
+export interface SetupEventsDeps {
+    events: EventBus;
+    broadcast: (clients: Map<WebSocket, ConnectedClient>, msg: WSServerMessage) => void;
+    clients: Map<WebSocket, ConnectedClient>;
+    config: {
+        tools?: {
+            maxIterations?: number | undefined;
+        };
+    };
+    context: Context;
+    pendingConfirms: Map<string, PendingConfirm>;
+    /** Optional global config dir (~/.wrongstack) — enables SessionRegistry poll for fleet view. */
+    globalConfigPath?: string | undefined;
+    /**
+     * Audit-level-aware session log bridge. When provided, tool/error/provider
+     * events are persisted to the session JSONL (same contract as the CLI) —
+     * without it, standalone-WebUI sessions carry no audit events and resume
+     * with no tool history.
+     */
+    sessionBridge?: SessionEventBridge | undefined;
+    /** Optional wpaths for writing status.json file. */
+    wpaths?: WstackPaths | undefined;
+    /**
+     * Optional object to populate with file watcher metrics.
+     * When provided, the setupEvents function will populate this object
+     * with real-time metrics from the file watcher.
+     */
+    watcherMetrics?: FileWatcherMetrics | undefined;
+    /**
+     * Receives the internal `broadcastSessions` fn so the HTTP layer can trigger
+     * an immediate fleet re-broadcast on `POST /api/fleet/ping` (push-on-write
+     * from a TUI/REPL), instead of waiting on the registry file-watch/poll.
+     */
+    onFleetBroadcaster?: ((fn: () => Promise<void>) => void) | undefined;
+}
+export declare function statusProjectHashFromWatchFilename(projectsDir: string, filename: string | Buffer): string | null;
+/**
+ * Wire kernel events to WS broadcasts and (when wpaths/globalConfigPath are
+ * given) start the status-file watcher and session-poll interval.
+ *
+ * Returns a disposer that stops the watcher, clears the metrics/poll
+ * intervals, and flushes pending debounce timers. Callers MUST invoke it on
+ * shutdown — the watcher is `persistent: true` and the metrics interval is not
+ * `unref`'d, so without disposal they keep the process alive and leak across
+ * server restarts. (Previously this was hung off a non-existent
+ * `process.on('cleanup')` event that never fired.)
+ */
+export declare function setupEvents(deps: SetupEventsDeps): () => void;
+//# sourceMappingURL=setup-events.d.ts.map

package/dist/server/setup-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-events.d.ts","sourceRoot":"","sources":["../../src/server/setup-events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAuB,kBAAkB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAChH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAM5D,mEAAmE;AACnE,MAAM,WAAW,kBAAkB;IACjC,iFAAiF;IACjF,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,0DAA0D;IAC1D,sBAAsB,EAAE,MAAM,CAAC;IAC/B,oDAAoD;IACpD,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,QAAQ,CAAC;IACjB,SAAS,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,GAAG,EAAE,eAAe,KAAK,IAAI,CAAC;IACpF,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACzC,MAAM,EAAE;QAAE,KAAK,CAAC,EAAE;YAAE,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;SAAE,CAAA;KAAE,CAAC;IAC3D,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC7C,gGAAgG;IAChG,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC/C,oDAAoD;IACpD,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IACjC;;;;OAIG;IACH,cAAc,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAChD;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CACtE;AAED,wBAAgB,kCAAkC,CAChD,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GAAG,MAAM,GACxB,MAAM,GAAG,IAAI,CAOf;AAOD;;;;;;;;;;GAUG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,MAAM,IAAI,CAk8B7D"}

package/dist/server/setup-screen.d.ts

@@ -0,0 +1,44 @@
+/**
+ * First-run setup + active-provider resolution.
+ *
+ * Phase 1b of the god-module split (issue: God-modules >1500 lines).
+ * `startWebUI` in `./index.ts` previously inlined the provider-resolution
+ * ladder (configured provider → first saved provider → stub provider +
+ * `needsSetup` flag). This module lifts that ladder into a single pure-ish
+ * function so `index.ts` reads as orchestration, not branching.
+ *
+ * No behaviour change: the three branches, the structured error logs, the
+ * `needsSetup` flag, and the stub provider's exact shape are preserved
+ * verbatim. The function throws on the same failures the inline code did.
+ */
+import type { Provider, ProviderRegistry } from '@wrongstack/core';
+import type { Config } from '@wrongstack/core/types';
+export interface ResolveSetupProviderOptions {
+    config: Config;
+    /** True when neither provider nor model is set in config. */
+    needsProvider: boolean;
+    providerRegistry: ProviderRegistry;
+}
+export interface ResolvedSetupProvider {
+    provider: Provider;
+    /**
+     * True when no provider could be resolved and a stub was created — the
+     * frontend should show the onboarding/setup screen. False otherwise.
+     * (The caller merges this into its existing `needsSetup` flag.)
+     */
+    needsSetup: boolean;
+}
+/**
+ * Resolve the active provider from config, mirroring the inline ladder that
+ * used to live in `startWebUI`:
+ *
+ *   1. provider + model configured → build from the configured provider.
+ *   2. no active provider but saved providers exist → build from the first
+ *      saved provider (vault already decrypted its key).
+ *   3. no providers at all → boot with an inert placeholder provider and signal
+ *      `needsSetup` so the frontend shows the onboarding screen.
+ *
+ * Throws on provider-construction failure (same as the inline code).
+ */
+export declare function resolveSetupProvider(opts: ResolveSetupProviderOptions): ResolvedSetupProvider;
+//# sourceMappingURL=setup-screen.d.ts.map

package/dist/server/setup-screen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-screen.d.ts","sourceRoot":"","sources":["../../src/server/setup-screen.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAkB,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAGnF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAuCrD,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,gBAAgB,CAAC;CACpC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,QAAQ,CAAC;IACnB;;;;OAIG;IACH,UAAU,EAAE,OAAO,CAAC;CACrB;AAaD;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,2BAA2B,GAChC,qBAAqB,CAkDvB"}

package/dist/server/shell-git-routes.d.ts

@@ -0,0 +1,10 @@
+import type { WebSocket } from 'ws';
+import type { WSClientMessage } from './types.js';
+export interface ShellGitRouteHandlers {
+    gitInfo: (ws: WebSocket) => Promise<void>;
+    gitChanges: (ws: WebSocket) => Promise<void>;
+    gitDiff: (ws: WebSocket, msg: WSClientMessage) => Promise<void>;
+    shellOpen: (ws: WebSocket, msg: WSClientMessage) => Promise<void>;
+}
+export declare function handleShellGitRoute(ws: WebSocket, msg: WSClientMessage, handlers: ShellGitRouteHandlers): Promise<boolean>;
+//# sourceMappingURL=shell-git-routes.d.ts.map

package/dist/server/shell-git-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-git-routes.d.ts","sourceRoot":"","sources":["../../src/server/shell-git-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,CAAC,EAAE,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,UAAU,EAAE,CAAC,EAAE,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,SAAS,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACnE;AAED,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,eAAe,EACpB,QAAQ,EAAE,qBAAqB,GAC9B,OAAO,CAAC,OAAO,CAAC,CAiBlB"}

package/dist/server/shell-open.d.ts

@@ -0,0 +1,12 @@
+import type { Logger } from '@wrongstack/core';
+export type ShellOpenTarget = 'terminal' | 'file-manager';
+export interface ShellOpenRequest {
+    path: string;
+    target: ShellOpenTarget;
+}
+export interface ShellOpenResult {
+    success: boolean;
+    message: string;
+}
+export declare function handleShellOpen(req: ShellOpenRequest, logger: Logger): Promise<ShellOpenResult>;
+//# sourceMappingURL=shell-open.d.ts.map

package/dist/server/shell-open.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-open.d.ts","sourceRoot":"","sources":["../../src/server/shell-open.ts"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/C,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,cAAc,CAAC;AAE1D,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAeD,wBAAsB,eAAe,CACnC,GAAG,EAAE,gBAAgB,EACrB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,eAAe,CAAC,CAyD1B"}

package/dist/server/skills-handlers.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Shared skills WebSocket handlers for both the standalone WebUI server
+ * (`packages/webui/src/server/index.ts`) and the CLI's `--webui` embedded
+ * server (`packages/cli/src/webui-server.ts`).
+ *
+ * These were previously inlined in BOTH servers, and the CLI copy had
+ * drifted — it only wired `skills.list`, so `skills.content` /
+ * `skills.export` / `skills.update` (and install/uninstall/create/edit)
+ * fell through to the "Unhandled message type" warning even though the
+ * SkillsPanel sends them. Extracting the full set here gives both servers
+ * one source of truth. Each function handles the full request→response
+ * cycle for one message type; callers drop them into their switch:
+ *
+ *   case 'skills.content': return handleSkillsContent(ws, skillsCtx, msg);
+ *
+ * The logic is a verbatim lift of the standalone's inline cases — only the
+ * dependency references changed (`skillLoader`/`skillInstaller`/
+ * `projectRoot` → `ctx.*`, local `send`/`errMessage` → imported helpers).
+ */
+import type { WebSocket } from 'ws';
+import type { SkillLoader } from '@wrongstack/core';
+import type { SkillInstaller } from '@wrongstack/core/skills';
+export interface SkillsContext {
+    /** Backs skills.list/content/edit/export. Absent ⇒ feature disabled. */
+    skillLoader: SkillLoader | undefined;
+    /** Backs skills.install/uninstall/update. Absent ⇒ those ops disabled. */
+    skillInstaller: SkillInstaller | undefined;
+    /** Project root — used by skills.create to write `.wrongstack/skills/…`. */
+    projectRoot: string;
+    /** Project skills directory, normally `<project>/.wrongstack/skills`. */
+    projectSkillsDir?: string | undefined;
+    /** User-global skills directory, normally `~/.wrongstack/skills`. */
+    globalSkillsDir?: string | undefined;
+}
+/**
+ * List installed skills. Enriches each manifest with the source URL + git
+ * ref recorded by the installer (when present), so the panel can show
+ * provenance and offer update/uninstall.
+ */
+export declare function handleSkillsList(ws: WebSocket, ctx: SkillsContext): Promise<void>;
+/**
+ * Read a single skill's body + its directory's related files + which other
+ * skills reference it by name. Powers the skill detail/preview view.
+ */
+export declare function handleSkillsContent(ws: WebSocket, ctx: SkillsContext, msg: unknown): Promise<void>;
+/**
+ * Install a skill from a git ref (`owner/repo` or URL). Optional `global`
+ * installs into the user-wide skills dir instead of the project's.
+ */
+export declare function handleSkillsInstall(ws: WebSocket, ctx: SkillsContext, msg: unknown): Promise<void>;
+/**
+ * Uninstall a skill by name. Optional `global` restricts/Targets the
+ * user-wide install.
+ */
+export declare function handleSkillsUninstall(ws: WebSocket, ctx: SkillsContext, msg: unknown): Promise<void>;
+/**
+ * Update one skill (`name`) or all installed skills (when `name` is
+ * omitted). Reports per-skill updated/unchanged/error tallies.
+ */
+export declare function handleSkillsUpdate(ws: WebSocket, ctx: SkillsContext, msg: unknown): Promise<void>;
+/**
+ * Scaffold a new project- or global-scoped skill from a name + description.
+ * Writes a templated `SKILL.md` under `.wrongstack/skills/<name>/` (project)
+ * or the user-wide skills dir (global).
+ */
+export declare function handleSkillsCreate(ws: WebSocket, ctx: SkillsContext, msg: unknown): Promise<void>;
+/**
+ * Overwrite a skill's body. Refuses bundled skills (read-only) and unknown
+ * names.
+ */
+export declare function handleSkillsEdit(ws: WebSocket, ctx: SkillsContext, msg: unknown): Promise<void>;
+/**
+ * Export every readable skill as a base64-encoded zip (one folder per skill,
+ * each with its `SKILL.md`). Powers the panel's "Export all" button.
+ */
+export declare function handleSkillsExport(ws: WebSocket, ctx: SkillsContext): Promise<void>;
+//# sourceMappingURL=skills-handlers.d.ts.map

package/dist/server/skills-handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills-handlers.d.ts","sourceRoot":"","sources":["../../src/server/skills-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAM9D,MAAM,WAAW,aAAa;IAC5B,wEAAwE;IACxE,WAAW,EAAE,WAAW,GAAG,SAAS,CAAC;IACrC,0EAA0E;IAC1E,cAAc,EAAE,cAAc,GAAG,SAAS,CAAC;IAC3C,4EAA4E;IAC5E,WAAW,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,qEAAqE;IACrE,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAID;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAoDvF;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,IAAI,CAAC,CAuDf;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,IAAI,CAAC,CAqBf;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,IAAI,CAAC,CA0Ff;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,IAAI,CAAC,CA+Bf;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBzF"}

package/dist/server/specs-routes.d.ts

@@ -0,0 +1,11 @@
+import type { WebSocket } from 'ws';
+import type { WSClientMessage } from './types.js';
+export interface SpecsRouteHandlers {
+    handleMessage: (msg: {
+        type: string;
+        payload?: Record<string, unknown>;
+    }) => Promise<void>;
+}
+/** Forward any `specs.*` message to the SpecsWebSocketHandler. */
+export declare function handleSpecsRoute(_ws: WebSocket, msg: WSClientMessage, handlers: SpecsRouteHandlers): Promise<boolean>;
+//# sourceMappingURL=specs-routes.d.ts.map

package/dist/server/specs-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"specs-routes.d.ts","sourceRoot":"","sources":["../../src/server/specs-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,CAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5F;AAED,kEAAkE;AAClE,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,SAAS,EACd,GAAG,EAAE,eAAe,EACpB,QAAQ,EAAE,kBAAkB,GAC3B,OAAO,CAAC,OAAO,CAAC,CAIlB"}

package/dist/server/specs-ws-handler.d.ts

@@ -0,0 +1,34 @@
+import type { WebSocket } from 'ws';
+interface SpecsWSMessage {
+    type: string;
+    payload?: Record<string, unknown>;
+}
+/**
+ * SpecsWebSocketHandler — read-only-ish browser of persisted SDD specs and their
+ * task graphs, rendered as a FORGE-style dependency board (topological phase
+ * columns + dependency refs). Shared by both webui servers via specs-routes.
+ *
+ * Message types:
+ *   specs.list                       → all specs + progress
+ *   specs.get { specId }             → one spec's dependency board
+ *   specs.taskStatus { graphId, taskId, status } → update + rebroadcast
+ */
+export declare class SpecsWebSocketHandler {
+    private specStore;
+    private graphStore;
+    private clients;
+    constructor(specsDir: string, taskGraphsDir: string);
+    addClient(ws: WebSocket): void;
+    handleMessage(msg: SpecsWSMessage): Promise<void>;
+    private buildList;
+    private broadcastList;
+    private sendList;
+    private broadcastDetail;
+    private findGraphForSpec;
+    private buildDetail;
+    private updateTaskStatus;
+    private broadcast;
+    private send;
+}
+export {};
+//# sourceMappingURL=specs-ws-handler.d.ts.map

package/dist/server/specs-ws-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"specs-ws-handler.d.ts","sourceRoot":"","sources":["../../src/server/specs-ws-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAcpC,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAgBD;;;;;;;;;GASG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,UAAU,CAAiB;IACnC,OAAO,CAAC,OAAO,CAAuB;IAEtC,YAAY,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAGlD;IAED,SAAS,CAAC,EAAE,EAAE,SAAS,GAAG,IAAI,CAM7B;IAEK,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBtD;YAIa,SAAS;YAiBT,aAAa;YAIb,QAAQ;YAMR,eAAe;YAUf,gBAAgB;IAM9B,OAAO,CAAC,WAAW;YAuEL,gBAAgB;IAkB9B,OAAO,CAAC,SAAS;IAOjB,OAAO,CAAC,IAAI;CAGb"}

package/dist/server/standalone-session-identity.d.ts

@@ -0,0 +1,35 @@
+import type { Config, EventBus, Logger, SessionRegistry, SessionStore } from '@wrongstack/core';
+import { AgentStatusTracker } from '@wrongstack/core';
+export interface StandaloneSessionIdentityPaths {
+    globalRoot: string;
+    projectRoot: string;
+    projectSlug: string;
+    projectSessions: string;
+}
+export interface StandaloneSessionIdentityOptions {
+    config: Config;
+    events: EventBus;
+    logger: Logger;
+    paths: StandaloneSessionIdentityPaths;
+    workingDir: string;
+    initialSessionId: string;
+    sessionStore?: SessionStore | undefined;
+    sessionRegistry?: SessionRegistry | undefined;
+    /** Embedded hosts can keep ownership of their existing recovery lock. */
+    manageRecoveryLock?: boolean | undefined;
+    /** Test/embedding escape hatch; production defaults to enabled. */
+    enableHqTelemetry?: boolean | undefined;
+}
+export interface StandaloneSessionIdentityLifecycle {
+    readonly statusTracker: AgentStatusTracker | undefined;
+    activate(sessionId: string): Promise<void>;
+    stop(): Promise<void>;
+}
+/**
+ * Own the cross-surface identity associated with the standalone WebUI's live
+ * session writer. Session routes call {@link activate} after swapping writers;
+ * shutdown calls {@link stop}. Transitions are serialized and every optional
+ * external surface is fail-soft, while identity selection itself stays live.
+ */
+export declare function createStandaloneSessionIdentityLifecycle(opts: StandaloneSessionIdentityOptions): Promise<StandaloneSessionIdentityLifecycle>;
+//# sourceMappingURL=standalone-session-identity.d.ts.map

package/dist/server/standalone-session-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"standalone-session-identity.d.ts","sourceRoot":"","sources":["../../src/server/standalone-session-identity.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChG,OAAO,EACL,kBAAkB,EAInB,MAAM,kBAAkB,CAAC;AAG1B,MAAM,WAAW,8BAA8B;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gCAAgC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,QAAQ,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,8BAA8B,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IACxC,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAC9C,yEAAyE;IACzE,kBAAkB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACzC,mEAAmE;IACnE,iBAAiB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,aAAa,EAAE,kBAAkB,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAsB,wCAAwC,CAC5D,IAAI,EAAE,gCAAgC,GACrC,OAAO,CAAC,kCAAkC,CAAC,CAqL7C"}

package/dist/server/start-webui.d.ts

@@ -0,0 +1,29 @@
+import type { WebUIOptions } from './types.js';
+export declare function startWebUI(opts?: WebUIOptions & {
+    wsPort?: number | undefined;
+    wsHost?: string | undefined;
+    httpPort?: number | undefined;
+    accessToken?: string | undefined;
+    publicUrl?: string | undefined;
+    publicWsUrl?: string | undefined;
+    requireToken?: boolean | undefined;
+    open?: boolean | undefined;
+}): Promise<void>;
+/**
+ * Webui-side mailbox bridge discovery.
+ *
+ * The webui doesn't spawn a bridge — the bridge (`wstack mailbox serve`)
+ * is spawned by any CLI surface via the auto-bootstrap wiring. We just
+ * probe the per-project lock for an already-running instance and stash
+ * the discovered handle on `ctx.meta['mailboxBridge']` so any later
+ * code (the `/mailbox` HTTP surface, agent-status broadcasters,
+ * external-agent proxy) can find it without re-running discovery.
+ *
+ * If no bridge is running, we log a breadcrumb so the user knows
+ * to start one (`wstack --repl`, `wstack --webui`, or
+ * `wstack mailbox serve` standalone).
+ *
+ * Best-effort: never throws. A failure (missing lock dir, ENOENT,
+ * etc.) logs at warn level and returns — the webui keeps running.
+ */
+//# sourceMappingURL=start-webui.d.ts.map

package/dist/server/start-webui.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-webui.d.ts","sourceRoot":"","sources":["../../src/server/start-webui.ts"],"names":[],"mappings":"AAgEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,wBAAsB,UAAU,CAC9B,IAAI,GAAE,YAAY,GAAG;IACnB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACnC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACvB,GACL,OAAO,CAAC,IAAI,CAAC,CA4hBf;AAED;;;;;;;;;;;;;;;;GAgBG"}

package/dist/server/terminal-ws-handler.d.ts

@@ -0,0 +1,70 @@
+import type { WebSocket } from 'ws';
+import type { Logger } from '@wrongstack/core';
+/** Loose inbound shape — matches the server's internal WSClientMessage. */
+type IncomingMessage = {
+    type: string;
+    payload?: unknown;
+};
+type PtyExit = {
+    exitCode: number;
+    signal?: number | undefined;
+};
+interface PtyProcess {
+    readonly pid?: number | undefined;
+    write(data: string): void;
+    resize(cols: number, rows: number): void;
+    kill(): void;
+    onData(cb: (data: string) => void): unknown;
+    onExit(cb: (event: PtyExit) => void): unknown;
+}
+interface NodePtyApi {
+    spawn(file: string, args: string[], opts: {
+        name: string;
+        cols: number;
+        rows: number;
+        cwd: string;
+        env: Record<string, string | undefined>;
+        useConptyDll?: boolean | undefined;
+    }): PtyProcess;
+}
+type LoadNodePty = () => NodePtyApi | null;
+type KillProcessTree = (pid: number) => void;
+/**
+ * TerminalWebSocketHandler — backs the WebUI's integrated terminal panel.
+ *
+ * Mirrors the lifecycle shape of WorktreeWebSocketHandler but is *per-client*
+ * and *interactive*: each connected WebSocket owns a map of real node-pty
+ * sessions keyed by a client-chosen id. Browser xterm.js ⇄ pty wiring:
+ *   - `terminal.create` → spawn a shell pty, stream its output back
+ *   - `terminal.input`  → write keystrokes to the pty
+ *   - `terminal.resize` → propagate xterm's fit dimensions
+ *   - `terminal.close`  → kill the pty
+ * When a client disconnects, every pty it owns is killed (no orphan shells).
+ */
+export declare class TerminalWebSocketHandler {
+    /** Resolves the cwd new terminals open in — tracks the live working dir. */
+    private readonly getCwd;
+    private readonly logger;
+    private readonly loadNodePty;
+    private readonly killProcessTree;
+    /** ws → (terminalId → pty). */
+    private readonly sessions;
+    constructor(
+    /** Resolves the cwd new terminals open in — tracks the live working dir. */
+    getCwd: () => string, logger: Logger, loadNodePty?: LoadNodePty, killProcessTree?: KillProcessTree);
+    addClient(ws: WebSocket): void;
+    /** Kill every pty owned by every client (server shutdown). */
+    dispose(): void;
+    /** True if this message was a terminal.* message (handled here). */
+    handleMessage(ws: WebSocket, msg: IncomingMessage): boolean;
+    private create;
+    private input;
+    private resize;
+    private close;
+    private disposeClient;
+    private killPty;
+    private killWindowsProcessTree;
+    private send;
+}
+export {};
+//# sourceMappingURL=terminal-ws-handler.d.ts.map

package/dist/server/terminal-ws-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-ws-handler.d.ts","sourceRoot":"","sources":["../../src/server/terminal-ws-handler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAI/C,2EAA2E;AAC3E,KAAK,eAAe,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAC3D,KAAK,OAAO,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AACjE,UAAU,UAAU;IAClB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,IAAI,IAAI,IAAI,CAAC;IACb,MAAM,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC;IAC5C,MAAM,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC;CAC/C;AACD,UAAU,UAAU;IAClB,KAAK,CACH,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;QACxC,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;KACpC,GACA,UAAU,CAAC;CACf;AACD,KAAK,WAAW,GAAG,MAAM,UAAU,GAAG,IAAI,CAAC;AAC3C,KAAK,eAAe,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;AAS7C;;;;;;;;;;;GAWG;AACH,qBAAa,wBAAwB;IAKjC,4EAA4E;IAC5E,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,eAAe;IARlC,+BAA+B;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiD;IAE1E;IACE,4EAA4E;IAC3D,MAAM,EAAE,MAAM,MAAM,EACpB,MAAM,EAAE,MAAM,EACd,WAAW,GAAE,WAAgC,EAC7C,eAAe,GAAE,eAAwC,EACxE;IAEJ,SAAS,CAAC,EAAE,EAAE,SAAS,GAAG,IAAI,CAI7B;IAED,8DAA8D;IAC9D,OAAO,IAAI,IAAI,CAEd;IAED,oEAAoE;IACpE,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAmB1D;IAID,OAAO,CAAC,MAAM;IAgEd,OAAO,CAAC,KAAK;IAKb,OAAO,CAAC,MAAM;IAUd,OAAO,CAAC,KAAK;IAQb,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,OAAO;IAYf,OAAO,CAAC,sBAAsB;IAkB9B,OAAO,CAAC,IAAI;CAOb"}

package/dist/server/token-estimator.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Per-section context-window token estimate for the `context.debug` command.
+ *
+ * Uses the simple 4-chars-per-token heuristic — not exact, but close enough to
+ * spot which section (system prompt, tool schemas, or message history) is
+ * eating the context window. Tool schemas in particular are easy to overlook:
+ * each tool ships its full JSON schema to the model every turn, so 20+ builtins
+ * can cost 10-20k tokens on their own.
+ *
+ * Extracted from `index.ts` as a pure function so the breakdown maths can be
+ * unit tested without standing up a Context/ToolRegistry.
+ */
+/** 4-chars-per-token heuristic estimate for a string. */
+export declare function estimateTokens(s: string): number;
+/** Stringify arbitrary content for length estimation (JSON, with fallbacks). */
+export declare function stringifyContent(c: unknown): string;
+interface PromptBlock {
+    text?: string | undefined;
+}
+interface ToolLike {
+    name: string;
+    inputSchema?: unknown | undefined;
+    description?: string | undefined;
+}
+interface MessageLike {
+    role: string;
+    content: unknown;
+}
+export interface ToolTokenEntry {
+    name: string;
+    tokens: number;
+}
+export interface MessageTokenEntry {
+    index: number;
+    role: string;
+    tokens: number;
+    preview: string;
+}
+export interface ContextBreakdown {
+    total: number;
+    systemPrompt: number;
+    tools: {
+        total: number;
+        count: number;
+        breakdown: ToolTokenEntry[];
+    };
+    messages: {
+        total: number;
+        count: number;
+        breakdown: MessageTokenEntry[];
+    };
+}
+export declare function messageTokens(content: unknown): number;
+export declare function messagePreview(content: unknown): string;
+/**
+ * Compute the per-section token breakdown for the active context. Mirrors the
+ * shape the `context.debug` WS reply expects (minus the `mode`/`policy` fields,
+ * which the caller layers on from `context.meta`).
+ */
+export declare function estimateContextBreakdown(input: {
+    systemPrompt: ReadonlyArray<PromptBlock>;
+    tools: ReadonlyArray<ToolLike>;
+    messages: ReadonlyArray<MessageLike>;
+}): ContextBreakdown;
+export {};
+//# sourceMappingURL=token-estimator.d.ts.map

package/dist/server/token-estimator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-estimator.d.ts","sourceRoot":"","sources":["../../src/server/token-estimator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,yDAAyD;AACzD,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,gFAAgF;AAChF,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAOnD;AAED,UAAU,WAAW;IACnB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B;AACD,UAAU,QAAQ;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAClC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAQD,UAAU,WAAW;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,cAAc,EAAE,CAAA;KAAE,CAAC;IACrE,QAAQ,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,iBAAiB,EAAE,CAAA;KAAE,CAAC;CAC5E;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAWtD;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAevD;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,YAAY,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;IACzC,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC/B,QAAQ,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;CACtC,GAAG,gBAAgB,CA4BnB"}