@wrongstack/webui-server 0.285.0 → 0.286.0

package/dist/server/entry.js

@@ -2992,7 +2992,7 @@ function mapStatus(raw) {
       return "stopped";
   }
 }
-function toView(info) {
+function toView(info, health) {
   const view = {
     name: info.name,
     transport: info.transport,
@@ -3004,6 +3004,7 @@ function toView(info) {
   };
   if (info.description !== void 0) view.description = info.description;
   if (info.lazy !== void 0) view.lazy = info.lazy;
+  if (health !== void 0) view.health = health;
   return view;
 }
 function deps(ws, globalConfigPath, registry) {
@@ -3029,7 +3030,13 @@ async function handleMcpList(ws, _msg, globalConfigPath, mcpRegistry) {
     registry: mcpRegistry,
     presets: allServers()
   });
-  send(ws, { type: "mcp.list", payload: { servers: servers.map(toView) } });
+  const health = new Map(
+    (typeof mcpRegistry.operationalHealth === "function" ? mcpRegistry.operationalHealth() : []).map((item) => [item.name, item])
+  );
+  send(ws, {
+    type: "mcp.list",
+    payload: { servers: servers.map((server) => toView(server, health.get(server.name))) }
+  });
 }
 async function handleMcpAdd(ws, msg, globalConfigPath, mcpRegistry) {
   const d = deps(ws, globalConfigPath, mcpRegistry);
@@ -3179,6 +3186,99 @@ async function handleMcpDiscover(ws, msg, globalConfigPath, mcpRegistry) {
     payload: { success: result.ok, message: result.message }
   });
 }
+async function handleMcpResources(ws, msg, _globalConfigPath, mcpRegistry) {
+  if (!mcpRegistry) return sendContentError(ws, "resources", "", "MCP registry is not available.");
+  const payload = payloadRecord(msg);
+  let serverName = "";
+  try {
+    serverName = requiredPayloadString(payload, "name");
+    const refresh = payload["refresh"] === true;
+    const [resources, resourceTemplates] = await Promise.all([
+      mcpRegistry.listResources(serverName, { refresh }),
+      mcpRegistry.listResourceTemplates(serverName, { refresh })
+    ]);
+    send(ws, {
+      type: "mcp.resources",
+      payload: { name: serverName, resources, resourceTemplates }
+    });
+  } catch (err) {
+    sendContentError(ws, "resources", serverName, errorMessage(err));
+  }
+}
+async function handleMcpPrompts(ws, msg, _globalConfigPath, mcpRegistry) {
+  if (!mcpRegistry) return sendContentError(ws, "prompts", "", "MCP registry is not available.");
+  const payload = payloadRecord(msg);
+  let serverName = "";
+  try {
+    serverName = requiredPayloadString(payload, "name");
+    const prompts = await mcpRegistry.listPrompts(serverName, {
+      refresh: payload["refresh"] === true
+    });
+    send(ws, { type: "mcp.prompts", payload: { name: serverName, prompts } });
+  } catch (err) {
+    sendContentError(ws, "prompts", serverName, errorMessage(err));
+  }
+}
+async function handleMcpResourceRead(ws, msg, _globalConfigPath, mcpRegistry) {
+  if (!mcpRegistry)
+    return sendContentError(ws, "resource.read", "", "MCP registry is not available.");
+  const payload = payloadRecord(msg);
+  let serverName = "";
+  try {
+    serverName = requiredPayloadString(payload, "name");
+    const insertion = await mcpRegistry.selectResourceForInsertion(
+      serverName,
+      requiredPayloadString(payload, "uri")
+    );
+    send(ws, { type: "mcp.content.selected", payload: insertion });
+  } catch (err) {
+    sendContentError(ws, "resource.read", serverName, errorMessage(err));
+  }
+}
+async function handleMcpPromptGet(ws, msg, _globalConfigPath, mcpRegistry) {
+  if (!mcpRegistry) return sendContentError(ws, "prompt.get", "", "MCP registry is not available.");
+  const payload = payloadRecord(msg);
+  let serverName = "";
+  try {
+    serverName = requiredPayloadString(payload, "name");
+    const insertion = await mcpRegistry.selectPromptForInsertion(
+      serverName,
+      requiredPayloadString(payload, "prompt"),
+      promptArguments(payload["arguments"])
+    );
+    send(ws, { type: "mcp.content.selected", payload: insertion });
+  } catch (err) {
+    sendContentError(ws, "prompt.get", serverName, errorMessage(err));
+  }
+}
+function payloadRecord(msg) {
+  return msg.payload && typeof msg.payload === "object" && !Array.isArray(msg.payload) ? msg.payload : {};
+}
+function requiredPayloadString(payload, field) {
+  const value = payload[field];
+  if (typeof value !== "string" || value.length === 0) {
+    throw new Error(`MCP payload field "${field}" must be a non-empty string`);
+  }
+  return value;
+}
+function promptArguments(value) {
+  if (value === void 0) return void 0;
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("MCP prompt arguments must be an object");
+  }
+  const args = {};
+  for (const [key, item] of Object.entries(value)) {
+    if (typeof item !== "string") throw new Error(`MCP prompt argument "${key}" must be a string`);
+    args[key] = item;
+  }
+  return args;
+}
+function sendContentError(ws, action, name2, error) {
+  send(ws, { type: "mcp.content.error", payload: { action, name: name2, error } });
+}
+function errorMessage(err) {
+  return err instanceof Error ? err.message : String(err);
+}
 
 // src/server/memory-handlers.ts
 async function handleMemoryList(ws, memoryStore) {
@@ -4254,6 +4354,16 @@ function validateBrainAskPayload(payload) {
   }
   return { ok: true, value: { question: question.trim() } };
 }
+function validateBrainConfigSetPayload(payload) {
+  if (!isRecord(payload)) {
+    return { ok: false, message: "brain.config.set payload must be an object with a patch object" };
+  }
+  const patch = payload["patch"];
+  if (!isRecord(patch)) {
+    return { ok: false, message: "brain.config.set payload.patch must be an object" };
+  }
+  return { ok: true, value: { patch } };
+}
 function validateAutonomySwitchPayload(payload) {
   if (!isRecord(payload)) {
     return { ok: false, message: "autonomy.switch payload must be an object with string mode" };
@@ -4315,7 +4425,9 @@ var BOOLEAN_PREF_KEYS = /* @__PURE__ */ new Set([
   "hqEnabled",
   "hqRawContent",
   "fallbackAuto",
-  "favoriteModelsOnly"
+  "favoriteModelsOnly",
+  "breakerEnabled",
+  "debugStream"
 ]);
 var STRING_ARRAY_PREF_KEYS = /* @__PURE__ */ new Set(["fallbackModels", "favoriteModels"]);
 var STRING_ARRAY_RECORD_PREF_KEYS = /* @__PURE__ */ new Set(["fallbackProfiles"]);
@@ -4326,9 +4438,17 @@ var NUMBER_PREF_KEYS = /* @__PURE__ */ new Set([
   "maxIterations",
   "maxConcurrent",
   "enhanceDelayMs",
-  "tgLongToolMs"
+  "tgLongToolMs",
+  "breakerAutoKillResetMs"
+]);
+var STRING_PREF_KEYS = /* @__PURE__ */ new Set([
+  "hqUrl",
+  "hqToken",
+  "uiLocale",
+  "thinkingWord",
+  "refinerProvider",
+  "refinerModel"
 ]);
-var STRING_PREF_KEYS = /* @__PURE__ */ new Set(["hqUrl", "hqToken", "uiLocale"]);
 var ENUM_PREF_KEYS = {
   autonomy: AUTONOMY_VALUES,
   contextStrategy: CONTEXT_STRATEGY_VALUES,
@@ -4339,7 +4459,10 @@ var ENUM_PREF_KEYS = {
   auditLevel: AUDIT_LEVEL_VALUES,
   reasoningMode: REASONING_MODE_VALUES,
   reasoningEffort: REASONING_EFFORT_VALUES,
-  cacheTtl: CACHE_TTL_VALUES
+  cacheTtl: CACHE_TTL_VALUES,
+  statuslineMode: /* @__PURE__ */ new Set(["minimum", "detailed", "no-color"]),
+  animationStyle: /* @__PURE__ */ new Set(["rainbow", "wave", "pulse", "dots", "breathe", "cycle"]),
+  fsAccess: /* @__PURE__ */ new Set(["unrestricted", "project"])
 };
 function validateModelRuntimeValue(modelRuntime, path22) {
   const reasoning = modelRuntime["reasoning"];
@@ -5662,6 +5785,10 @@ function shouldLogWatcherStats() {
 function setupEvents(deps2) {
   const { events, broadcast: broadcast2, clients, config, context, pendingConfirms, globalConfigPath, sessionBridge, wpaths, watcherMetrics, onFleetBroadcaster } = deps2;
   const disposers = [];
+  let disposed = false;
+  const on = (event, listener) => {
+    disposers.push(events.on(event, listener));
+  };
   const currentSessionId = () => context.session?.id ?? "";
   const sessionPayload2 = (payload) => {
     const provided = payload["sessionId"];
@@ -5677,20 +5804,20 @@ function setupEvents(deps2) {
     sessionBridge?.append(event).catch(() => {
     });
   };
-  events.on("iteration.started", (e) => {
+  on("iteration.started", (e) => {
     const maxIt = typeof context.meta["maxIterations"] === "number" ? context.meta["maxIterations"] : config.tools?.maxIterations ?? 100;
     broadcast2(clients, {
       type: "iteration.started",
       payload: sessionPayload2({ sessionId: e.sessionId, index: e.index, maxIterations: maxIt })
     });
   });
-  events.on("iteration.completed", (e) => {
+  on("iteration.completed", (e) => {
     broadcast2(clients, {
       type: "iteration.completed",
       payload: sessionPayload2({ sessionId: e.sessionId, index: e.index, totalIterations: e.index + 1 })
     });
   });
-  events.on("iteration.limit_reached", (e) => {
+  on("iteration.limit_reached", (e) => {
     broadcast2(clients, {
       type: "iteration.limit_reached",
       payload: sessionPayload2({
@@ -5700,19 +5827,19 @@ function setupEvents(deps2) {
       })
     });
   });
-  events.on("provider.text_delta", (e) => {
+  on("provider.text_delta", (e) => {
     broadcast2(clients, { type: "provider.text_delta", payload: sessionPayload2({ sessionId: e.sessionId, text: e.text, messageId: "current" }) });
   });
-  events.on("provider.thinking_delta", (e) => {
+  on("provider.thinking_delta", (e) => {
     broadcast2(clients, { type: "provider.thinking_delta", payload: sessionPayload2({ sessionId: e.sessionId, text: e.text }) });
   });
-  events.on("provider.stream_error", (e) => {
+  on("provider.stream_error", (e) => {
     broadcast2(clients, {
       type: "provider.stream_error",
       payload: sessionPayload2({ sessionId: e.sessionId, eventType: e.eventType, message: e.msg })
     });
   });
-  events.on("tool.started", (e) => {
+  on("tool.started", (e) => {
     broadcast2(clients, {
       type: "tool.started",
       payload: sessionPayload2({ sessionId: e.sessionId, id: e.id, name: e.name, input: e.input, messageId: `tool_${e.id}` })
@@ -5725,7 +5852,7 @@ function setupEvents(deps2) {
       input: e.input
     });
   });
-  events.on("tool.progress", (e) => {
+  on("tool.progress", (e) => {
     broadcast2(clients, {
       type: "tool.progress",
       // Nested `event` shape — the client handler reads `payload.event?.text`
@@ -5746,7 +5873,7 @@ function setupEvents(deps2) {
       }
     });
   });
-  events.on("tool.executed", (e) => {
+  on("tool.executed", (e) => {
     broadcast2(clients, {
       type: "tool.executed",
       payload: sessionPayload2({ sessionId: e.sessionId, id: e.id, name: e.name, durationMs: e.durationMs, ok: e.ok, input: e.input, output: e.output })
@@ -5804,7 +5931,7 @@ function setupEvents(deps2) {
       })();
     }
   });
-  events.on("tool.loop_detected", (e) => {
+  on("tool.loop_detected", (e) => {
     broadcast2(clients, {
       type: "tool.loop_detected",
       payload: sessionPayload2({
@@ -5816,19 +5943,19 @@ function setupEvents(deps2) {
       })
     });
   });
-  events.on("trust.persisted", (e) => {
+  on("trust.persisted", (e) => {
     broadcast2(clients, {
       type: "trust.persisted",
       payload: sessionPayload2({ sessionId: e.sessionId, tool: e.tool, pattern: e.pattern, decision: e.decision })
     });
   });
-  events.on("delegate.started", (e) => {
+  on("delegate.started", (e) => {
     broadcast2(clients, {
       type: "delegate.started",
       payload: sessionPayload2({ sessionId: e.sessionId, target: e.target, task: e.task })
     });
   });
-  events.on("delegate.completed", (e) => {
+  on("delegate.completed", (e) => {
     broadcast2(clients, {
       type: "delegate.completed",
       payload: sessionPayload2({
@@ -5846,7 +5973,7 @@ function setupEvents(deps2) {
       })
     });
   });
-  events.on("provider.response", (e) => {
+  on("provider.response", (e) => {
     broadcast2(clients, {
       type: "provider.response",
       payload: sessionPayload2({
@@ -5858,7 +5985,7 @@ function setupEvents(deps2) {
       })
     });
   });
-  events.on("ctx.pct", (e) => {
+  on("ctx.pct", (e) => {
     broadcast2(clients, {
       type: "ctx.pct",
       payload: sessionPayload2({ sessionId: e.sessionId, load: e.load, tokens: e.tokens, maxContext: e.maxContext })
@@ -5875,28 +6002,28 @@ function setupEvents(deps2) {
       })
     });
   });
-  events.on("ctx.max_context", (e) => {
+  on("ctx.max_context", (e) => {
     broadcast2(clients, {
       type: "ctx.max_context",
       payload: sessionPayload2({ sessionId: e.sessionId, providerId: e.providerId, modelId: e.modelId, maxContext: e.maxContext })
     });
   });
-  events.on("token.threshold", (e) => {
+  on("token.threshold", (e) => {
     broadcast2(clients, {
       type: "token.threshold",
       payload: sessionPayload2({ sessionId: e.sessionId, used: e.used, limit: e.limit })
     });
   });
-  events.on("token.cost_estimate_unavailable", (e) => {
+  on("token.cost_estimate_unavailable", (e) => {
     broadcast2(clients, {
       type: "token.cost_estimate_unavailable",
       payload: sessionPayload2({ sessionId: e.sessionId, model: e.model })
     });
   });
-  events.on("context.repaired", (e) => {
+  on("context.repaired", (e) => {
     broadcast2(clients, { type: "context.repaired", payload: sessionPayload2({ sessionId: e.sessionId, removedToolUses: e.removedToolUses, removedToolResults: e.removedToolResults, removedMessages: e.removedMessages }) });
   });
-  events.on("tool.confirm_needed", (e) => {
+  on("tool.confirm_needed", (e) => {
     const id = e.toolUseId ?? `confirm_${Date.now()}`;
     const payload = sessionPayload2({ sessionId: e.sessionId, id, toolName: e.tool?.name ?? "unknown", input: e.input, suggestedPattern: e.suggestedPattern, decisionSource: e.decisionSource, riskTier: e.riskTier });
     pendingConfirms.set(id, {
@@ -5907,7 +6034,7 @@ function setupEvents(deps2) {
     });
     broadcast2(clients, { type: "tool.confirm_needed", payload });
   });
-  events.on("error", (e) => {
+  on("error", (e) => {
     broadcast2(clients, { type: "error", payload: sessionPayload2({ sessionId: e.sessionId, phase: e.phase, message: e.err instanceof Error ? e.err.message : String(e.err) }) });
     appendForCurrentSession(e.sessionId, {
       type: "error",
@@ -5916,13 +6043,13 @@ function setupEvents(deps2) {
       phase: e.phase
     });
   });
-  events.on("session.damaged", (e) => {
+  on("session.damaged", (e) => {
     broadcast2(clients, {
       type: "session.damaged",
       payload: { sessionId: e.sessionId, detail: e.detail }
     });
   });
-  events.on("session.rewound", (e) => {
+  on("session.rewound", (e) => {
     broadcast2(clients, {
       type: "session.rewound",
       payload: sessionPayload2({
@@ -5933,7 +6060,7 @@ function setupEvents(deps2) {
       })
     });
   });
-  events.on("checkpoint.written", (e) => {
+  on("checkpoint.written", (e) => {
     broadcast2(clients, {
       type: "checkpoint.written",
       payload: sessionPayload2({
@@ -5945,19 +6072,19 @@ function setupEvents(deps2) {
       })
     });
   });
-  events.on("in_flight.started", (e) => {
+  on("in_flight.started", (e) => {
     broadcast2(clients, {
       type: "in_flight.started",
       payload: sessionPayload2({ sessionId: e.sessionId, context: e.context, ts: e.ts })
     });
   });
-  events.on("in_flight.ended", (e) => {
+  on("in_flight.ended", (e) => {
     broadcast2(clients, {
       type: "in_flight.ended",
       payload: sessionPayload2({ sessionId: e.sessionId, reason: e.reason, ts: e.ts })
     });
   });
-  events.on("provider.retry", (e) => {
+  on("provider.retry", (e) => {
     broadcast2(clients, {
       type: "provider.retry",
       payload: sessionPayload2({
@@ -5979,7 +6106,7 @@ function setupEvents(deps2) {
       description: e.description
     });
   });
-  events.on("provider.error", (e) => {
+  on("provider.error", (e) => {
     broadcast2(clients, {
       type: "provider.error",
       payload: sessionPayload2({
@@ -5999,7 +6126,7 @@ function setupEvents(deps2) {
       retryable: e.retryable
     });
   });
-  events.on("provider.fallback", (e) => {
+  on("provider.fallback", (e) => {
     broadcast2(clients, {
       type: "provider.fallback",
       payload: sessionPayload2({
@@ -6011,7 +6138,7 @@ function setupEvents(deps2) {
       })
     });
   });
-  events.on("compaction.fired", (e) => {
+  on("compaction.fired", (e) => {
     broadcast2(clients, {
       type: "context.compacted",
       payload: sessionPayload2({
@@ -6023,7 +6150,7 @@ function setupEvents(deps2) {
       })
     });
   });
-  events.on("compaction.failed", (e) => {
+  on("compaction.failed", (e) => {
     broadcast2(clients, {
       type: "compaction.failed",
       payload: sessionPayload2({
@@ -6038,25 +6165,25 @@ function setupEvents(deps2) {
       })
     });
   });
-  events.on("mcp.server.connected", (e) => {
+  on("mcp.server.connected", (e) => {
     broadcast2(clients, {
       type: "mcp.server.connected",
       payload: { name: e.name, toolCount: e.toolCount }
     });
   });
-  events.on("mcp.server.reconnected", (e) => {
+  on("mcp.server.reconnected", (e) => {
     broadcast2(clients, {
       type: "mcp.server.reconnected",
       payload: { name: e.name, toolCount: e.toolCount }
     });
   });
-  events.on("mcp.server.disconnected", (e) => {
+  on("mcp.server.disconnected", (e) => {
     broadcast2(clients, {
       type: "mcp.server.disconnected",
       payload: { name: e.name, reason: e.reason }
     });
   });
-  events.on("coordinator.stats", (e) => {
+  on("coordinator.stats", (e) => {
     broadcast2(clients, {
       type: "coordinator.stats",
       payload: sessionPayload2({
@@ -6084,16 +6211,16 @@ function setupEvents(deps2) {
     broadcast2(clients, { type: "mailbox.agent_registered", payload });
   });
   const forwardSubagent = (kind, payload) => broadcast2(clients, { type: "subagent.event", payload: sessionPayload2({ kind, ...payload }) });
-  events.on("subagent.spawned", (e) => forwardSubagent("spawned", { sessionId: e.sessionId, subagentId: e.subagentId, taskId: e.taskId, name: e.name, provider: e.provider, model: e.model, description: e.description }));
-  events.on("subagent.task_started", (e) => forwardSubagent("task_started", { sessionId: e.sessionId, subagentId: e.subagentId, taskId: e.taskId, description: e.description }));
-  events.on("subagent.tool_executed", (e) => forwardSubagent("tool_executed", { sessionId: e.sessionId, subagentId: e.subagentId, toolName: e.name, durationMs: e.durationMs, ok: e.ok }));
-  events.on("subagent.iteration_summary", (e) => forwardSubagent("iteration_summary", { sessionId: e.sessionId, subagentId: e.subagentId, iteration: e.iteration, toolCalls: e.toolCalls, costUsd: e.costUsd, currentTool: e.currentTool, partialText: e.partialText }));
-  events.on("subagent.budget_warning", (e) => forwardSubagent("budget_warning", { sessionId: e.sessionId, subagentId: e.subagentId, budgetKind: e.kind, used: e.used, limit: e.limit }));
-  events.on("subagent.budget_extended", (e) => forwardSubagent("budget_extended", { sessionId: e.sessionId, subagentId: e.subagentId, budgetKind: e.kind, newLimit: e.newLimit, totalExtensions: e.totalExtensions }));
-  events.on("subagent.ctx_pct", (e) => forwardSubagent("ctx_pct", { sessionId: e.sessionId, subagentId: e.subagentId, load: e.load, tokens: e.tokens, maxContext: e.maxContext }));
-  events.on("subagent.task_completed", (e) => forwardSubagent("task_completed", { sessionId: e.sessionId, subagentId: e.subagentId, status: e.status, iterations: e.iterations, toolCalls: e.toolCalls, finalText: e.finalText, failureReason: e.error?.kind, error: e.error ? { kind: e.error.kind, message: e.error.message } : void 0 }));
-  events.on("subagent.removed", (e) => forwardSubagent("removed", { sessionId: e.sessionId, subagentId: e.subagentId, reason: e.reason }));
-  events.on("agent.timeline.message", (e) => {
+  on("subagent.spawned", (e) => forwardSubagent("spawned", { sessionId: e.sessionId, subagentId: e.subagentId, taskId: e.taskId, name: e.name, provider: e.provider, model: e.model, description: e.description }));
+  on("subagent.task_started", (e) => forwardSubagent("task_started", { sessionId: e.sessionId, subagentId: e.subagentId, taskId: e.taskId, description: e.description }));
+  on("subagent.tool_executed", (e) => forwardSubagent("tool_executed", { sessionId: e.sessionId, subagentId: e.subagentId, toolName: e.name, durationMs: e.durationMs, ok: e.ok }));
+  on("subagent.iteration_summary", (e) => forwardSubagent("iteration_summary", { sessionId: e.sessionId, subagentId: e.subagentId, iteration: e.iteration, toolCalls: e.toolCalls, costUsd: e.costUsd, currentTool: e.currentTool, partialText: e.partialText }));
+  on("subagent.budget_warning", (e) => forwardSubagent("budget_warning", { sessionId: e.sessionId, subagentId: e.subagentId, budgetKind: e.kind, used: e.used, limit: e.limit }));
+  on("subagent.budget_extended", (e) => forwardSubagent("budget_extended", { sessionId: e.sessionId, subagentId: e.subagentId, budgetKind: e.kind, newLimit: e.newLimit, totalExtensions: e.totalExtensions }));
+  on("subagent.ctx_pct", (e) => forwardSubagent("ctx_pct", { sessionId: e.sessionId, subagentId: e.subagentId, load: e.load, tokens: e.tokens, maxContext: e.maxContext }));
+  on("subagent.task_completed", (e) => forwardSubagent("task_completed", { sessionId: e.sessionId, subagentId: e.subagentId, status: e.status, iterations: e.iterations, toolCalls: e.toolCalls, finalText: e.finalText, failureReason: e.error?.kind, error: e.error ? { kind: e.error.kind, message: e.error.message } : void 0 }));
+  on("subagent.removed", (e) => forwardSubagent("removed", { sessionId: e.sessionId, subagentId: e.subagentId, reason: e.reason }));
+  on("agent.timeline.message", (e) => {
     broadcast2(clients, {
       type: "agent.timeline.message",
       payload: sessionPayload2({
@@ -6109,7 +6236,7 @@ function setupEvents(deps2) {
       })
     });
   });
-  events.on("agent.status_changed", (e) => {
+  on("agent.status_changed", (e) => {
     broadcast2(clients, {
       type: "agent.status_changed",
       payload: sessionPayload2({
@@ -6124,7 +6251,7 @@ function setupEvents(deps2) {
     });
   });
   let leaderSpawned = false;
-  events.on("iteration.started", (e) => {
+  on("iteration.started", (e) => {
     if (!leaderSpawned) {
       leaderSpawned = true;
       const provider = context.provider?.id ?? "unknown";
@@ -6138,7 +6265,7 @@ function setupEvents(deps2) {
       });
     }
   });
-  events.on("tool.executed", (e) => {
+  on("tool.executed", (e) => {
     forwardSubagent("tool_executed", {
       sessionId: e.sessionId,
       subagentId: "leader",
@@ -6147,7 +6274,7 @@ function setupEvents(deps2) {
       ok: e.ok
     });
   });
-  events.on("provider.response", (e) => {
+  on("provider.response", (e) => {
     if (e.usage?.input != null) {
       const maxCtx = context.provider.capabilities.maxContext;
       const rawLoad = maxCtx > 0 ? e.usage.input / maxCtx : 0;
@@ -6164,7 +6291,7 @@ function setupEvents(deps2) {
       });
     }
   });
-  events.on("iteration.completed", (e) => {
+  on("iteration.completed", (e) => {
     if (!leaderSpawned) {
       leaderSpawned = true;
       const provider = context.provider?.id ?? "unknown";
@@ -6196,7 +6323,7 @@ function setupEvents(deps2) {
       payload: sessionPayload2({ event: eventName, ...payload })
     });
   });
-  events.on("client.status", async (e) => {
+  on("client.status", async (e) => {
     broadcast2(clients, { type: "client.status_update", payload: e });
     if (wpaths?.projectStatus) {
       try {
@@ -6282,6 +6409,7 @@ function setupEvents(deps2) {
     const startWatcher = async () => {
       try {
         await fs10.mkdir(projectsDir, { recursive: true });
+        if (disposed) return;
         watcher = fsWatch(projectsDir, { persistent: true, recursive: true }, async (eventType, filename) => {
           if (eventType !== "change" && eventType !== "rename") return;
           if (filename == null) return;
@@ -6312,7 +6440,7 @@ function setupEvents(deps2) {
         );
       }
     };
-    events.on("client.status", (e) => {
+    on("client.status", (e) => {
       if (e.projectHash) {
         const hash = String(e.projectHash);
         if (!knownProjectHashes.has(hash)) {
@@ -6352,7 +6480,9 @@ function setupEvents(deps2) {
         const registry = new SessionRegistry(globalRoot);
         const sessions = await registry.list();
         const mySlug = sessions.find((s) => s.pid === process.pid)?.projectSlug;
-        const live = sessions.filter((s) => s.status !== "stale").filter((s) => mySlug ? s.projectSlug === mySlug : true).map((s) => ({
+        const live = sessions.filter(
+          (s) => s.status === "active" || s.status === "idle"
+        ).filter((s) => mySlug ? s.projectSlug === mySlug : true).map((s) => ({
           sessionId: s.sessionId,
           projectName: s.projectName,
           projectSlug: s.projectSlug,
@@ -6406,6 +6536,8 @@ function setupEvents(deps2) {
     void broadcastSessions();
   }
   return () => {
+    if (disposed) return;
+    disposed = true;
     for (const dispose of disposers) {
       try {
         dispose();
@@ -6632,7 +6764,7 @@ function createWsServers(ports, accessToken) {
     allowedHostnames: publicHostnames,
     allowBrowserUrlToken: Boolean(ports.publicWsUrl)
   });
-  const WS_MAX_PAYLOAD = 8 * 1024 * 1024;
+  const WS_MAX_PAYLOAD = 20 * 1024 * 1024;
   const wssPrimary = new WebSocketServer({
     port: ports.wsPort,
     host: ports.wsHost,
@@ -6740,12 +6872,10 @@ function registerShutdown(deps2) {
 }
 
 // src/server/pre-context-services.ts
-import * as path14 from "node:path";
+import * as path15 from "node:path";
 import { createRequire as createRequire2 } from "node:module";
-import { WebSocket as WebSocket2 } from "ws";
 import { DefaultTokenCounter } from "@wrongstack/core/infrastructure";
 import {
-  AgentStatusTracker,
   AnnotationsStore,
   DEFAULT_SESSION_PRUNE_DAYS,
   DefaultModelsRegistry,
@@ -6756,7 +6886,6 @@ import {
   DefaultSkillLoader,
   DefaultSystemPromptBuilder,
   EventBus,
-  FleetNotifier,
   GlobalMailbox,
   PromptUsageStore,
   ProviderRegistry,
@@ -6767,8 +6896,8 @@ import {
   applyToolDescriptionModes,
   applyToolResultRenderModes,
   configureChildEnvGitIdentity,
+  getSessionRegistry as getSessionRegistry2,
   resolveContextWindowPolicy,
-  getSessionRegistry,
   makeMailboxTool,
   makeMailInboxTool,
   makeFleetStatusTool,
@@ -6777,7 +6906,12 @@ import {
 import {
   createSuperMemoryTools
 } from "@wrongstack/super-memory";
-import { MCPRegistry } from "@wrongstack/mcp";
+import {
+  MCPAuthorizationManager,
+  MCPRegistry,
+  MCPVaultTokenStore,
+  createVaultBackedMcpAuthorizationProviderFactory
+} from "@wrongstack/mcp";
 import { buildProviderFactoriesFromRegistry } from "@wrongstack/providers";
 import { createDefaultContainer } from "@wrongstack/runtime";
 import {
@@ -6789,7 +6923,7 @@ import {
   rememberTool,
   searchMemoryTool
 } from "@wrongstack/tools";
-import { toErrorMessage as toErrorMessage5 } from "@wrongstack/core/utils";
+import { sessionScopedPath, toErrorMessage as toErrorMessage5 } from "@wrongstack/core/utils";
 
 // src/server/setup-screen.ts
 import { expectDefined as expectDefined2 } from "@wrongstack/core";
@@ -6927,6 +7061,20 @@ function seedContextMeta(config, context) {
     meta["reasoningPreserve"] = mr.reasoning?.preserve === true;
     meta["cacheTtl"] = mr.cache?.ttl ?? "default";
   }
+  meta["refinerProvider"] = autonomyCfg["refinerProvider"] ?? "";
+  meta["refinerModel"] = autonomyCfg["refinerModel"] ?? "";
+  meta["thinkingWord"] = autonomyCfg["thinkingWord"] ?? "thinking";
+  meta["statuslineMode"] = autonomyCfg["statuslineMode"] ?? "detailed";
+  meta["animationStyle"] = autonomyCfg["animationStyle"] ?? "rainbow";
+  meta["breakerEnabled"] = config.circuitBreaker?.enabled === true;
+  meta["breakerAutoKillResetMs"] = config.circuitBreaker?.autoKillResetMs ?? 6e4;
+  {
+    const featuresAllow = config.features?.allowOutsideProjectRoot;
+    const toolsRestrict = config.tools?.restrictToProjectRoot;
+    const allow = featuresAllow !== void 0 ? featuresAllow : toolsRestrict !== void 0 ? !toolsRestrict : true;
+    meta["fsAccess"] = allow ? "unrestricted" : "project";
+  }
+  meta["debugStream"] = config.debugStream === true;
   const hqConfig = config.hq;
   meta["hqEnabled"] = hqConfig?.enabled === true;
   meta["hqUrl"] = hqConfig?.url ?? "";
@@ -7023,10 +7171,188 @@ async function discoverAndMergeWebuiProviders(opts) {
   }
 }
 
+// src/server/standalone-session-identity.ts
+import * as path14 from "node:path";
+import {
+  AgentStatusTracker,
+  FleetNotifier,
+  getSessionRegistry,
+  RecoveryLock
+} from "@wrongstack/core";
+import { WebSocket as WebSocket2 } from "ws";
+async function createStandaloneSessionIdentityLifecycle(opts) {
+  const { paths, events, logger } = opts;
+  const registry = opts.sessionRegistry ?? getSessionRegistry(paths.globalRoot);
+  const fleetNotifier = new FleetNotifier({
+    baseDir: paths.globalRoot,
+    projectRoot: paths.projectRoot,
+    selfPid: process.pid
+  });
+  let activeSessionId = opts.initialSessionId;
+  let stopped = false;
+  let transition = Promise.resolve();
+  const statusTracker = new AgentStatusTracker({
+    events,
+    registry,
+    sessionId: () => activeSessionId,
+    onUpdate: () => fleetNotifier.notify()
+  });
+  const register = async (sessionId) => {
+    try {
+      await registry.register({
+        sessionId,
+        projectSlug: paths.projectSlug,
+        projectRoot: paths.projectRoot,
+        projectName: path14.basename(paths.projectRoot),
+        workingDir: opts.workingDir,
+        clientType: "webui",
+        pid: process.pid,
+        startedAt: (/* @__PURE__ */ new Date()).toISOString(),
+        agents: statusTracker.getAgents()
+      });
+      fleetNotifier.notify();
+    } catch (err) {
+      logger.debug?.(`WebUI session registry update failed: ${errorMessage2(err)}`);
+    }
+  };
+  await register(activeSessionId);
+  statusTracker.start();
+  const recoveryLock = opts.manageRecoveryLock === false ? void 0 : new RecoveryLock({ dir: paths.projectSessions, sessionStore: opts.sessionStore });
+  let ownsRecoveryLock = false;
+  if (recoveryLock) {
+    try {
+      await recoveryLock.write(activeSessionId);
+      ownsRecoveryLock = true;
+    } catch {
+    }
+  }
+  let stopHqBridges = () => {
+  };
+  let closeHqPublisher = () => {
+  };
+  let restartHqBridges = (_sessionId) => {
+  };
+  if (opts.enableHqTelemetry !== false) {
+    try {
+      const core = await import("@wrongstack/core");
+      const publisher = core.createHqPublisherFromEnv({
+        clientKind: "webui",
+        projectRoot: paths.projectRoot,
+        projectName: path14.basename(paths.projectRoot),
+        appConfig: opts.config,
+        socketFactory: (url) => new WebSocket2(url)
+      });
+      if (publisher) {
+        publisher.connect();
+        closeHqPublisher = () => publisher.close();
+        restartHqBridges = (sessionId) => {
+          stopHqBridges();
+          const stops = [];
+          const add = (start) => {
+            try {
+              stops.push(start());
+            } catch {
+            }
+          };
+          add(
+            () => core.startSessionTelemetryBridge({
+              publisher,
+              events,
+              sessionId,
+              projectRoot: paths.projectRoot,
+              projectName: path14.basename(paths.projectRoot),
+              globalRoot: paths.globalRoot,
+              initialAgents: statusTracker.getAgents(),
+              startedAt: (/* @__PURE__ */ new Date()).toISOString()
+            })
+          );
+          add(
+            () => core.startFleetTelemetryBridge({
+              events,
+              publisher,
+              runId: sessionId,
+              sessionId
+            })
+          );
+          add(() => core.startBrainTelemetryBridge({ events, publisher, sessionId }));
+          add(() => core.startWorktreeTelemetryBridge({ events, publisher, sessionId }));
+          add(
+            () => core.startToolTelemetryBridge({
+              events,
+              publisher,
+              projectRoot: paths.projectRoot,
+              sessionId
+            })
+          );
+          add(() => core.startCostTelemetryBridge({ events, publisher, sessionId }));
+          stopHqBridges = () => {
+            for (const stop2 of stops.splice(0)) {
+              try {
+                stop2();
+              } catch {
+              }
+            }
+          };
+        };
+        restartHqBridges(activeSessionId);
+      }
+    } catch (err) {
+      logger.debug?.(`WebUI HQ telemetry unavailable: ${errorMessage2(err)}`);
+    }
+  }
+  const repointRecovery = async (sessionId) => {
+    if (!recoveryLock) return;
+    try {
+      if (ownsRecoveryLock) await recoveryLock.clear();
+      await recoveryLock.write(sessionId);
+      ownsRecoveryLock = true;
+    } catch {
+      ownsRecoveryLock = false;
+    }
+  };
+  const activate = async (sessionId) => {
+    if (stopped || sessionId === activeSessionId) return;
+    transition = transition.then(async () => {
+      if (stopped || sessionId === activeSessionId) return;
+      activeSessionId = sessionId;
+      await register(sessionId);
+      await repointRecovery(sessionId);
+      try {
+        restartHqBridges(sessionId);
+      } catch (err) {
+        logger.debug?.(`WebUI HQ session swap failed: ${errorMessage2(err)}`);
+      }
+    });
+    await transition;
+  };
+  const stop = async () => {
+    if (stopped) return;
+    stopped = true;
+    await transition.catch(() => void 0);
+    statusTracker.stop();
+    stopHqBridges();
+    closeHqPublisher();
+    fleetNotifier.dispose();
+    try {
+      await registry.markClosing();
+      await registry.unregister();
+    } catch {
+    }
+    if (recoveryLock && ownsRecoveryLock) {
+      await recoveryLock.clear().catch(() => void 0);
+      ownsRecoveryLock = false;
+    }
+  };
+  return { statusTracker, activate, stop };
+}
+function errorMessage2(err) {
+  return err instanceof Error ? err.message : String(err);
+}
+
 // src/server/pre-context-services.ts
 var GITHUB_PROVIDERS_OVERLAY_URL = "https://raw.githubusercontent.com/WrongStack/WrongStack/main/packages/cli/data/providers.json";
 async function createPreContextServices(input) {
-  const { config, wpaths, logger, opts, projectRoot, workingDir, needsProvider } = input;
+  const { config, wpaths, logger, opts, vault, projectRoot, workingDir, needsProvider } = input;
   const modelsRegistry = opts.services?.modelsRegistry ?? new DefaultModelsRegistry({
     cacheFile: wpaths.modelsCache,
     ttlSeconds: 0,
@@ -7045,7 +7371,7 @@ async function createPreContextServices(input) {
     await discoverAndMergeWebuiProviders({
       config,
       registry: modelsRegistry,
-      cacheDir: path14.dirname(wpaths.modelsCache),
+      cacheDir: path15.dirname(wpaths.modelsCache),
       logger
     });
   } catch (err) {
@@ -7088,10 +7414,23 @@ async function createPreContextServices(input) {
   configureDangerBypass(config.tools?.exec?.danger ?? {});
   configureChildEnvGitIdentity(config.git?.identity ?? null);
   console.log("[WebUI] Tool registry loaded:", toolRegistry.list().length, "tools");
-  const mcpRegistry = new MCPRegistry({ toolRegistry, events, log: logger, cacheDir: wpaths.cacheDir });
+  const mcpTokenStore = new MCPVaultTokenStore(
+    path15.join(wpaths.projectDir, "mcp-auth.json"),
+    vault
+  );
+  const mcpAuthorizationManager = new MCPAuthorizationManager({ store: mcpTokenStore });
+  const mcpRegistry = new MCPRegistry({
+    toolRegistry,
+    events,
+    log: logger,
+    cacheDir: wpaths.cacheDir,
+    authorizationProviderFactory: createVaultBackedMcpAuthorizationProviderFactory({
+      store: mcpTokenStore
+    }),
+    authorizationManager: mcpAuthorizationManager
+  });
   if (config.features.mcp && config.mcpServers) {
     for (const [name2, cfg] of Object.entries(config.mcpServers)) {
-      if (cfg.enabled === false) continue;
       void mcpRegistry.start({ ...cfg, name: name2 }).catch((err) => {
         logger.warn(`MCP server "${name2}" failed to start at boot`, err);
       });
@@ -7106,7 +7445,7 @@ async function createPreContextServices(input) {
     // surface via the SessionRegistry.
     isSessionInUse: async (sessionId) => {
       try {
-        const registry = getSessionRegistry(wpaths.globalRoot);
+        const registry = getSessionRegistry2(wpaths.globalRoot);
         const live = await registry.listByProject(wpaths.projectSlug);
         const hit = live.find((e) => e.sessionId === sessionId);
         if (hit) {
@@ -7131,120 +7470,22 @@ async function createPreContextServices(input) {
     await input.touchProject(projectRoot, workingDir);
   } catch {
   }
-  let statusTracker;
-  try {
-    const registry = getSessionRegistry(wpaths.globalRoot);
-    await registry.register({
-      sessionId: session.id,
-      projectSlug: wpaths.projectSlug,
+  const sessionIdentity = await createStandaloneSessionIdentityLifecycle({
+    config,
+    events,
+    logger,
+    paths: {
+      globalRoot: wpaths.globalRoot,
       projectRoot,
-      projectName: path14.basename(projectRoot),
-      workingDir,
-      clientType: "webui",
-      pid: process.pid,
-      startedAt: (/* @__PURE__ */ new Date()).toISOString()
-    });
-    const fleetNotifier = new FleetNotifier({ baseDir: wpaths.globalRoot, projectRoot, selfPid: process.pid });
-    statusTracker = new AgentStatusTracker({
-      events,
-      registry,
-      sessionId: () => session.id,
-      onUpdate: () => fleetNotifier.notify()
-    });
-    statusTracker.start();
-    let stopHqSessionBridge;
-    let hqTelemetryPublisher;
-    const stopHqAuxBridges = [];
-    try {
-      const {
-        createHqPublisherFromEnv,
-        startSessionTelemetryBridge,
-        startFleetTelemetryBridge,
-        startBrainTelemetryBridge,
-        startWorktreeTelemetryBridge,
-        startToolTelemetryBridge,
-        startCostTelemetryBridge
-      } = await import("@wrongstack/core");
-      const hqTelemetry = createHqPublisherFromEnv({
-        clientKind: "webui",
-        projectRoot,
-        projectName: path14.basename(projectRoot),
-        appConfig: config,
-        socketFactory: (url) => new WebSocket2(url)
-      });
-      if (hqTelemetry) {
-        hqTelemetry.connect();
-        hqTelemetryPublisher = hqTelemetry;
-        stopHqSessionBridge = startSessionTelemetryBridge({
-          publisher: hqTelemetry,
-          events,
-          sessionId: session.id,
-          projectRoot,
-          projectName: path14.basename(projectRoot),
-          globalRoot: wpaths.globalRoot,
-          initialAgents: statusTracker?.getAgents(),
-          startedAt: (/* @__PURE__ */ new Date()).toISOString()
-        });
-        try {
-          stopHqAuxBridges.push(
-            startFleetTelemetryBridge({ events, publisher: hqTelemetry, runId: session.id, sessionId: session.id })
-          );
-        } catch {
-        }
-        try {
-          stopHqAuxBridges.push(
-            startBrainTelemetryBridge({ events, publisher: hqTelemetry, sessionId: session.id })
-          );
-        } catch {
-        }
-        try {
-          stopHqAuxBridges.push(
-            startWorktreeTelemetryBridge({ events, publisher: hqTelemetry, sessionId: session.id })
-          );
-        } catch {
-        }
-        try {
-          stopHqAuxBridges.push(
-            startToolTelemetryBridge({ events, publisher: hqTelemetry, projectRoot, sessionId: session.id })
-          );
-        } catch {
-        }
-        try {
-          stopHqAuxBridges.push(
-            startCostTelemetryBridge({ events, publisher: hqTelemetry, sessionId: session.id })
-          );
-        } catch {
-        }
-      }
-    } catch {
-    }
-    const stopTracking = async () => {
-      try {
-        fleetNotifier.dispose();
-        await registry.markClosing();
-        statusTracker?.stop();
-        stopHqSessionBridge?.();
-        for (const stop of stopHqAuxBridges) {
-          try {
-            stop();
-          } catch {
-          }
-        }
-        hqTelemetryPublisher?.close();
-      } catch {
-      }
-    };
-    process.once("beforeExit", () => {
-      void stopTracking();
-    });
-    process.once("SIGINT", () => {
-      void stopTracking();
-    });
-    process.once("SIGTERM", () => {
-      void stopTracking();
-    });
-  } catch {
-  }
+      projectSlug: wpaths.projectSlug,
+      projectSessions: wpaths.projectSessions
+    },
+    workingDir,
+    initialSessionId: session.id,
+    sessionStore,
+    manageRecoveryLock: !opts.services?.session
+  });
+  const statusTracker = sessionIdentity.statusTracker;
   let context;
   const tokenCounter = new DefaultTokenCounter({
     registry: modelsRegistry,
@@ -7269,7 +7510,7 @@ async function createPreContextServices(input) {
   const modelCapabilitiesRef = { current: modelCapabilities };
   const skillLoader = config.features.skills ? new DefaultSkillLoader({ paths: wpaths }) : void 0;
   const skillInstaller = config.features.skills ? new SkillInstaller({
-    manifestPath: path14.join(wpaths.globalRoot, "installed-skills.json"),
+    manifestPath: path15.join(wpaths.globalRoot, "installed-skills.json"),
     projectSkillsDir: wpaths.inProjectSkills,
     globalSkillsDir: wpaths.globalSkills,
     projectHash: wpaths.projectHash,
@@ -7279,7 +7520,7 @@ async function createPreContextServices(input) {
   const bundledPromptsDir = promptsEnabled ? (() => {
     try {
       const req = createRequire2(import.meta.url);
-      return path14.join(path14.dirname(req.resolve("@wrongstack/core/package.json")), "data", "prompts");
+      return path15.join(path15.dirname(req.resolve("@wrongstack/core/package.json")), "data", "prompts");
     } catch {
       return void 0;
     }
@@ -7331,6 +7572,14 @@ async function createPreContextServices(input) {
   const initialContextPolicy = resolveContextWindowPolicy(config.context);
   context.meta["contextWindowMode"] = initialContextPolicy.id;
   context.meta["contextWindowPolicy"] = initialContextPolicy;
+  context.state.setMeta(
+    "plan.path",
+    sessionScopedPath(wpaths.projectSessions, session.id, ".plan.json")
+  );
+  context.state.setMeta(
+    "task.path",
+    sessionScopedPath(wpaths.projectSessions, session.id, ".tasks.json")
+  );
   seedContextMeta(config, context);
   return {
     modelsRegistry,
@@ -7347,6 +7596,7 @@ async function createPreContextServices(input) {
     session,
     sessionStartedAt,
     statusTracker,
+    sessionIdentity,
     tokenCounter,
     modeStore,
     modeId,
@@ -7396,6 +7646,7 @@ function patchConfig(config, updates) {
 }
 
 // src/server/backend-services.ts
+import { join as join12 } from "node:path";
 import {
   Agent,
   AutoCompactionMiddleware as AutoCompactionMiddlewareCtor,
@@ -7409,9 +7660,10 @@ import {
   installDesignStudioMiddleware,
   ObservableBrainArbiter as ObservableBrainArbiterCtor,
   resolveContextWindowPolicy as resolveContextWindowPolicy2,
-  createAutonomyBrain,
-  createTieredBrainArbiter,
-  DefaultBrainArbiter,
+  BrainDecisionLedger,
+  createBrainRuntime,
+  resolveBrainConfigDefaults,
+  EscalationRoutingBrainArbiter,
   GlobalMailbox as GlobalMailbox2,
   mailboxSessionTag,
   SessionMemoryConsolidator,
@@ -7425,12 +7677,13 @@ import { toErrorMessage as toErrorMessage6 } from "@wrongstack/core/utils";
 var REPLAY_LIMIT = 50;
 var PAUSE_TIMEOUT_MS = 6e4;
 var CollaborationWebSocketHandler = class {
-  constructor(events, logger, reader, annotations, bus) {
+  constructor(events, logger, reader, annotations, bus, options = {}) {
     this.events = events;
     this.logger = logger;
     this.reader = reader;
     this.annotations = annotations;
     this.bus = bus;
+    this.options = options;
     this.subscribe();
     this.bus?.onInjectionConsumed((info) => this.broadcastInjectionConsumed(info));
   }
@@ -7439,6 +7692,7 @@ var CollaborationWebSocketHandler = class {
   reader;
   annotations;
   bus;
+  options;
   clients = /* @__PURE__ */ new Set();
   /** sessionId → participants currently watching it. */
   bySession = /* @__PURE__ */ new Map();
@@ -7466,11 +7720,16 @@ var CollaborationWebSocketHandler = class {
   handleMessage(ws, msg) {
     if (msg.type === "collab.join") {
       const payload = msg.payload;
-      if (!payload?.sessionId) {
+      if (typeof payload?.sessionId !== "string" || payload.sessionId.trim().length === 0) {
         this.send(ws, this.errorMessage("collab.join requires sessionId"));
         return true;
       }
-      this.join(ws, payload.sessionId, payload.role ?? "observer");
+      const role = payload.role ?? "observer";
+      if (role !== "observer" && role !== "annotator" && role !== "controller") {
+        this.send(ws, this.errorMessage(`unknown collaboration role '${String(role)}'`));
+        return true;
+      }
+      this.join(ws, payload.sessionId, role);
       return true;
     }
     if (msg.type === "collab.leave") {
@@ -7505,6 +7764,20 @@ var CollaborationWebSocketHandler = class {
   }
   // ── Join / leave flow ──────────────────────────────────────────────────
   join(ws, sessionId, role) {
+    const activeSessionId = this.options.getActiveSessionId?.();
+    if (activeSessionId !== void 0 && sessionId !== activeSessionId) {
+      this.send(
+        ws,
+        this.errorMessage(
+          `collab.join sessionId mismatch (active: ${activeSessionId})`
+        )
+      );
+      return;
+    }
+    if (this.findParticipant(ws)) {
+      this.send(ws, this.errorMessage("collab.join requires leaving the current session first"));
+      return;
+    }
     if (role === "controller" && !this.bus) {
       this.send(
         ws,
@@ -7523,6 +7796,13 @@ var CollaborationWebSocketHandler = class {
       );
       return;
     }
+    if (role !== "observer" && this.options.authorizeRole?.({ ws, sessionId, requestedRole: role }) !== true) {
+      this.send(
+        ws,
+        this.errorMessage(`role '${role}' requires explicit server authorization`)
+      );
+      return;
+    }
     const participant = {
       participantId: randomUUID(),
       ws,
@@ -7776,17 +8056,13 @@ var CollaborationWebSocketHandler = class {
       type: "collab.event",
       payload: { kind, payload, at: (/* @__PURE__ */ new Date()).toISOString() }
     };
-    const data = JSON.stringify(msg);
-    for (const bucket of this.bySession.values()) {
-      for (const p of bucket) {
-        try {
-          if (p.ws.readyState === 1) p.ws.send(data);
-        } catch (err) {
-          this.logger.debug?.(
-            `collab broadcast failed: ${toErrorMessage6(err)}`
-          );
-        }
-      }
+    const activeSessionId = this.options.getActiveSessionId?.();
+    if (activeSessionId !== void 0) {
+      this.broadcast(activeSessionId, msg);
+      return;
+    }
+    for (const sessionId of this.bySession.keys()) {
+      this.broadcast(sessionId, msg);
     }
   }
   /**
@@ -8110,7 +8386,8 @@ var CollaborationWebSocketHandler = class {
    * Bus callback: a queued injection was spliced into a real tool call. Re-emit
    * `collab.injection.granted` with phase `'consumed'` and the now-known tool
    * name. The injection carries no sessionId, so resolve it from the author's
-   * current session; if they've already left, fall back to every live session.
+   * current participant. If the author has left, fail closed rather than leak
+   * the payload to unrelated sessions.
    */
   broadcastInjectionConsumed(info) {
     let sessionId = null;
@@ -8139,14 +8416,16 @@ var CollaborationWebSocketHandler = class {
     if (sessionId) {
       this.broadcast(sessionId, message(sessionId));
     } else {
-      for (const sid of this.bySession.keys()) this.broadcast(sid, message(sid));
+      this.logger.debug?.(
+        `collab: consumed injection ${info.toolUseId} has no live author; broadcast suppressed`
+      );
     }
   }
 };
 
 // src/server/codebase-indexing.ts
 import * as fs12 from "node:fs";
-import * as path15 from "node:path";
+import * as path16 from "node:path";
 import {
   cancelPendingReindexes,
   enqueueReindex,
@@ -8199,7 +8478,7 @@ function setupWebUICodebaseIndexing(deps2) {
         if (!filename) return;
         const rel = filename.toString();
         if (isIgnored(rel)) return;
-        const abs = path15.resolve(deps2.projectRoot, rel);
+        const abs = path16.resolve(deps2.projectRoot, rel);
         enqueueFile(abs);
       });
       watcher.on("error", (err) => deps2.logger.debug(`webui codebase index watcher error: ${err}`));
@@ -8212,7 +8491,7 @@ function setupWebUICodebaseIndexing(deps2) {
   }
   function enqueueFile(filePath) {
     if (!idx.onEdit && !idx.watchExternal) return;
-    const abs = path15.isAbsolute(filePath) ? path15.normalize(filePath) : path15.resolve(deps2.projectRoot, filePath);
+    const abs = path16.isAbsolute(filePath) ? path16.normalize(filePath) : path16.resolve(deps2.projectRoot, filePath);
     if (!isInside2(deps2.projectRoot, abs) || !isIndexableFile(abs)) return;
     enqueueReindex({
       projectRoot: deps2.projectRoot,
@@ -8249,9 +8528,9 @@ function isIgnored(rel) {
   return rel.split(/[/\\]/).some((seg) => IGNORE_DIRS.has(seg));
 }
 function isInside2(root, target) {
-  const normalizedRoot = path15.resolve(root);
-  const normalizedTarget = path15.resolve(target);
-  return normalizedTarget === normalizedRoot || normalizedTarget.startsWith(normalizedRoot + path15.sep);
+  const normalizedRoot = path16.resolve(root);
+  const normalizedTarget = path16.resolve(target);
+  return normalizedTarget === normalizedRoot || normalizedTarget.startsWith(normalizedRoot + path16.sep);
 }
 
 // src/server/discover-mailbox-bridge.ts
@@ -8784,21 +9063,59 @@ async function createAgentServices(input) {
     agent.extensions.register(new SessionMemoryConsolidator({ memoryStore }));
   }
   console.log("[WebUI] Agent initialized");
-  const brainSettings = { maxAutoRisk: "medium" };
-  const autonomousBrain = {
-    decide: (request) => createAutonomyBrain({
-      provider,
-      model: context.model,
-      maxAutoRisk: "all"
-      // the tiered ceiling gates risk — keep inner permissive
-    }).decide(request)
+  const brainCfg = resolveBrainConfigDefaults(config.brain, {
+    fallbackModels: config.fallbackModels
+  });
+  const brainLedgerPath = join12(wpaths.projectDir, "brain-ledger.jsonl");
+  let brainLedgerEnabled = brainCfg.ledger?.enabled !== false;
+  let brainLedger;
+  const startBrainLedger = () => {
+    if (brainLedger) return;
+    brainLedger = new BrainDecisionLedger({ events, filePath: brainLedgerPath });
+    void brainLedger.start();
+  };
+  if (brainLedgerEnabled) startBrainLedger();
+  const brainRuntime = createBrainRuntime({
+    initialConfig: brainCfg,
+    defaultProviderId: config.provider,
+    sessionProvider: () => provider,
+    sessionModel: () => context.model,
+    resolveProvider: (providerId) => {
+      const savedCfg = config.providers?.[providerId] ?? {};
+      return providerRegistry.create({
+        ...savedCfg,
+        apiKey: savedCfg.apiKey ?? config.apiKey,
+        baseUrl: savedCfg.baseUrl ?? config.baseUrl,
+        type: providerId
+      });
+    },
+    ledger: {
+      getPath: () => brainLedgerEnabled ? brainLedgerPath : void 0,
+      isEnabled: () => brainLedgerEnabled,
+      setEnabled: (on) => {
+        brainLedgerEnabled = on;
+        if (on) {
+          startBrainLedger();
+        } else {
+          void brainLedger?.stop();
+          brainLedger = void 0;
+        }
+      },
+      failureStreakFor: (request) => brainLedger?.failureStreakFor(request) ?? 0,
+      getDecisionDigest: (request) => brainLedger?.digestFor(request)
+    },
+    persist: input.persistBrainConfig
+  });
+  const brainSettings = {
+    get maxAutoRisk() {
+      return brainRuntime.getMaxAutoRisk();
+    },
+    set maxAutoRisk(level) {
+      void brainRuntime.apply({ maxAutoRisk: level }).persisted;
+    }
   };
   const brain = new ObservableBrainArbiterCtor(
-    createTieredBrainArbiter({
-      policy: new DefaultBrainArbiter(),
-      autonomous: autonomousBrain,
-      getMaxAutoRisk: () => brainSettings.maxAutoRisk
-    }),
+    new EscalationRoutingBrainArbiter(brainRuntime.arbiter, void 0, () => "headless"),
     events
   );
   container.bind(TOKENS2.BrainArbiter, () => brain);
@@ -8838,6 +9155,12 @@ async function createAgentServices(input) {
   const brainMonitor = new BrainMonitor({
     events,
     brain,
+    toolFailureStreak: brainCfg.monitor?.toolFailureStreak,
+    errorStormCount: brainCfg.monitor?.errorStormCount,
+    stallMs: brainCfg.monitor?.stallMs,
+    fileChurnThreshold: brainCfg.monitor?.fileChurnThreshold,
+    fileChurnWindowMs: brainCfg.monitor?.fileChurnWindowMs,
+    cooldownMs: brainCfg.monitor?.cooldownMs,
     sessionId: () => context.session?.id,
     intervene: async ({ subject, body }) => {
       const tag = mailboxSessionTag(input.sessionGetter().id);
@@ -8902,7 +9225,10 @@ async function createAgentServices(input) {
     logger,
     input.sessionReader,
     input.annotationsStore,
-    collabBus
+    collabBus,
+    {
+      getActiveSessionId: () => context.session.id
+    }
   );
   return {
     collabBus,
@@ -8914,8 +9240,13 @@ async function createAgentServices(input) {
     pipelines,
     brain,
     brainSettings,
+    brainRuntime,
     brainLog,
     brainMonitor,
+    // Getter: ledger toggles swap the instance, shutdown must stop the LIVE one.
+    get brainLedger() {
+      return brainLedger;
+    },
     codebaseIndexing,
     autoPhaseHandler,
     specsHandler,
@@ -9091,7 +9422,18 @@ function createConnectionHandler(opts) {
 }
 
 // src/server/message-dispatcher.ts
-import path16 from "node:path";
+import path17 from "node:path";
+import {
+  buildUserContentBlocks,
+  IncomingImageError,
+  parseIncomingImages
+} from "@wrongstack/core/utils";
+import {
+  createToolVisionAdapters,
+  ImageInputUnsupportedError,
+  routeImagesForModel,
+  VisionUrlBlockedError
+} from "@wrongstack/runtime/vision";
 
 // src/server/autophase-routes.ts
 async function handleAutoPhaseRoute(_ws, msg, handlers) {
@@ -9112,6 +9454,12 @@ async function handleBrainRoute(ws, msg, handlers) {
     case "brain.ask":
       await handlers.ask(ws, msg);
       return true;
+    case "brain.config.get":
+      await handlers.configGet(ws, msg);
+      return true;
+    case "brain.config.set":
+      await handlers.configSet(ws, msg);
+      return true;
     default:
       return false;
   }
@@ -9842,6 +10190,9 @@ async function handleKanbanRoute(ws, msg, ctx) {
           "Kanban agent dispatch is only available from the CLI-hosted WebUI runtime."
         );
         return true;
+      case "kanban.capabilities":
+        ok(ws, type, { dispatchSupported: false });
+        return true;
       case "kanban.task.remove": {
         const boardId = payload?.boardId;
         const taskId = payload?.taskId;
@@ -9921,6 +10272,9 @@ async function handleMailboxRoute(ws, msg, handlers) {
     case "mailbox.purge":
       await handlers.purge(ws, msg);
       return true;
+    case "mailbox.compact":
+      await handlers.compact(ws, msg);
+      return true;
     default:
       return false;
   }
@@ -9959,6 +10313,18 @@ async function handleMcpRoute(ws, msg, handlers) {
     case "mcp.discover":
       await handlers.discover(ws, msg);
       return true;
+    case "mcp.resources":
+      await handlers.resources(ws, msg);
+      return true;
+    case "mcp.prompts":
+      await handlers.prompts(ws, msg);
+      return true;
+    case "mcp.resource.read":
+      await handlers.resourceRead(ws, msg);
+      return true;
+    case "mcp.prompt.get":
+      await handlers.promptGet(ws, msg);
+      return true;
     default:
       return false;
   }
@@ -10348,7 +10714,7 @@ function createMessageDispatcher(opts) {
       skillLoader: deps2.skillLoader,
       skillInstaller: deps2.skillInstaller,
       projectRoot,
-      projectSkillsDir: path16.join(projectRoot, ".wrongstack", "skills"),
+      projectSkillsDir: path17.join(projectRoot, ".wrongstack", "skills"),
       globalSkillsDir: deps2.wpaths.globalSkills
     };
   }
@@ -10421,7 +10787,8 @@ function createMessageDispatcher(opts) {
       }
       case "user_message": {
         if (!ensureCurrentSession(ws, msg, "user_message")) return;
-        const content = msg.payload.content;
+        const userPayload = msg.payload;
+        const content = userPayload.content;
         if (runLock.get()) {
           send(ws, {
             type: "error",
@@ -10435,8 +10802,24 @@ function createMessageDispatcher(opts) {
         const thisRun = new AbortController();
         runLock.set(thisRun);
         try {
+          let input = content;
+          const imageBlocks = parseIncomingImages(userPayload.images, userPayload.imageBase64);
+          if (imageBlocks.length > 0) {
+            const routed = await routeImagesForModel(
+              buildUserContentBlocks(content, imageBlocks),
+              {
+                supportsVision: deps2.agent.ctx.provider.capabilities.vision,
+                adapters: () => createToolVisionAdapters(deps2.agent.tools),
+                ctx: deps2.agent.ctx,
+                signal: thisRun.signal,
+                providerId: deps2.agent.ctx.provider.id,
+                model: deps2.agent.ctx.model
+              }
+            );
+            input = routed.blocks;
+          }
           const maxIt = typeof deps2.context.meta["maxIterations"] === "number" ? deps2.context.meta["maxIterations"] : void 0;
-          const result = await deps2.agent.run(content, {
+          const result = await deps2.agent.run(input, {
             signal: thisRun.signal,
             maxIterations: maxIt
           });
@@ -10454,13 +10837,24 @@ function createMessageDispatcher(opts) {
             })
           });
         } catch (err) {
-          send(ws, {
-            type: "error",
-            payload: sessionPayload2({
-              phase: "agent.run",
-              message: errMessage(err)
-            })
-          });
+          if (err instanceof IncomingImageError || err instanceof ImageInputUnsupportedError || err instanceof VisionUrlBlockedError) {
+            send(ws, {
+              type: "error",
+              payload: sessionPayload2({
+                phase: "user_message",
+                ...err instanceof ImageInputUnsupportedError ? { code: "vision_unsupported" } : {},
+                message: err.message
+              })
+            });
+          } else {
+            send(ws, {
+              type: "error",
+              payload: sessionPayload2({
+                phase: "agent.run",
+                message: errMessage(err)
+              })
+            });
+          }
         } finally {
           if (runLock.get() === thisRun) {
             runLock.set(null);
@@ -10508,7 +10902,7 @@ function createMessageDispatcher(opts) {
         break;
       }
       case "tool.disable": {
-        const name2 = (msg.payload ?? {}).name;
+        const name2 = msg.payload?.name;
         if (!name2) {
           send(ws, { type: "error", payload: { message: "tool.disable requires a name" } });
           break;
@@ -10523,7 +10917,7 @@ function createMessageDispatcher(opts) {
         break;
       }
       case "tool.enable": {
-        const name2 = (msg.payload ?? {}).name;
+        const name2 = msg.payload?.name;
         if (!name2) {
           send(ws, { type: "error", payload: { message: "tool.enable requires a name" } });
           break;
@@ -10567,6 +10961,14 @@ function createMessageDispatcher(opts) {
         throw new Error("handleMcpRoute did not claim mcp.restart \u2014 check chain order");
       case "mcp.discover":
         throw new Error("handleMcpRoute did not claim mcp.discover \u2014 check chain order");
+      case "mcp.resources":
+        throw new Error("handleMcpRoute did not claim mcp.resources \u2014 check chain order");
+      case "mcp.prompts":
+        throw new Error("handleMcpRoute did not claim mcp.prompts \u2014 check chain order");
+      case "mcp.resource.read":
+        throw new Error("handleMcpRoute did not claim mcp.resource.read \u2014 check chain order");
+      case "mcp.prompt.get":
+        throw new Error("handleMcpRoute did not claim mcp.prompt.get \u2014 check chain order");
       // Skills — full request→response cycle lives in skills-handlers.ts.
       case "skills.list":
         await handleSkillsList(ws, makeSkillsContext());
@@ -10867,7 +11269,19 @@ var PREF_KEYS = [
   "favoriteModels",
   "favoriteModelsOnly",
   "modelMatrix",
-  "fallbackAuto"
+  "fallbackAuto",
+  // Refiner + TUI visual prefs (parity with the CLI's embedded server —
+  // these were browser-editable there but rejected as unknown keys here).
+  "refinerProvider",
+  "refinerModel",
+  "thinkingWord",
+  "statuslineMode",
+  "animationStyle",
+  // Safety / system prefs (parity with /settings breaker, fs-access, debug-stream).
+  "breakerEnabled",
+  "breakerAutoKillResetMs",
+  "fsAccess",
+  "debugStream"
 ];
 function prefSnapshot(contextMeta) {
   const snapshot = {};
@@ -10938,6 +11352,16 @@ async function persistPrefsToConfig(deps2, holder, payload) {
       setAutonomy("enhanceDelayMs", payload["enhanceDelayMs"]);
     if (typeof payload["enhanceLanguage"] === "string")
       setAutonomy("enhanceLanguage", payload["enhanceLanguage"]);
+    if (typeof payload["refinerProvider"] === "string")
+      setAutonomy("refinerProvider", payload["refinerProvider"]);
+    if (typeof payload["refinerModel"] === "string")
+      setAutonomy("refinerModel", payload["refinerModel"]);
+    if (typeof payload["thinkingWord"] === "string")
+      setAutonomy("thinkingWord", payload["thinkingWord"]);
+    if (typeof payload["statuslineMode"] === "string")
+      setAutonomy("statuslineMode", payload["statuslineMode"]);
+    if (typeof payload["animationStyle"] === "string")
+      setAutonomy("animationStyle", payload["animationStyle"]);
     if (autonomyTouched) decrypted.autonomy = autonomyCfg;
     if (typeof payload["nextPrediction"] === "boolean")
       decrypted.nextPrediction = payload["nextPrediction"];
@@ -11055,16 +11479,34 @@ async function persistPrefsToConfig(deps2, holder, payload) {
       }
       decrypted.modelRuntime = mr;
     }
+    if (typeof payload["breakerEnabled"] === "boolean" || typeof payload["breakerAutoKillResetMs"] === "number") {
+      const cb = decrypted.circuitBreaker ?? {};
+      if (typeof payload["breakerEnabled"] === "boolean") cb.enabled = payload["breakerEnabled"];
+      if (typeof payload["breakerAutoKillResetMs"] === "number")
+        cb.autoKillResetMs = payload["breakerAutoKillResetMs"];
+      decrypted.circuitBreaker = cb;
+    }
+    if (payload["fsAccess"] === "unrestricted" || payload["fsAccess"] === "project") {
+      const restrict = payload["fsAccess"] === "project";
+      const toolsCfg = decrypted.tools ?? {};
+      toolsCfg.restrictToProjectRoot = restrict;
+      decrypted.tools = toolsCfg;
+      const featsCfg = decrypted.features ?? {};
+      featsCfg.allowOutsideProjectRoot = !restrict;
+      decrypted.features = featsCfg;
+    }
+    if (typeof payload["debugStream"] === "boolean")
+      decrypted.debugStream = payload["debugStream"];
   }, "prefs");
 }
 
 // src/server/projects-manifest.ts
 import * as fs14 from "node:fs/promises";
-import * as path17 from "node:path";
+import * as path18 from "node:path";
 import { projectSlug } from "@wrongstack/core";
 function projectsJsonPath(globalConfigPath) {
-  const base = path17.dirname(globalConfigPath);
-  return path17.join(base, "projects.json");
+  const base = path18.dirname(globalConfigPath);
+  return path18.join(base, "projects.json");
 }
 async function loadManifest(globalConfigPath) {
   try {
@@ -11077,15 +11519,15 @@ async function loadManifest(globalConfigPath) {
 }
 async function saveManifest(manifest, globalConfigPath) {
   const file = projectsJsonPath(globalConfigPath);
-  await fs14.mkdir(path17.dirname(file), { recursive: true });
+  await fs14.mkdir(path18.dirname(file), { recursive: true });
   await fs14.writeFile(file, JSON.stringify(manifest, null, 2), "utf8");
 }
 function generateProjectSlug(rootPath) {
   return projectSlug(rootPath);
 }
 async function ensureProjectDataDir(slug, globalConfigPath) {
-  const base = path17.dirname(globalConfigPath);
-  const dir = path17.join(base, "projects", slug);
+  const base = path18.dirname(globalConfigPath);
+  const dir = path18.join(base, "projects", slug);
   await fs14.mkdir(dir, { recursive: true });
   return dir;
 }
@@ -11502,6 +11944,16 @@ async function handleMailboxPurge(ws, deps2, opts) {
     send(ws, { type: "mailbox.purged", payload: { error: errMessage(err) } });
   }
 }
+async function handleMailboxCompact(ws, deps2, opts) {
+  try {
+    const dir = resolveProjectDir2(deps2.projectRoot, deps2.globalRoot);
+    const mb = new GlobalMailbox3(dir);
+    const result = await mb.autoCompact(opts);
+    send(ws, { type: "mailbox.compacted", payload: result });
+  } catch (err) {
+    send(ws, { type: "mailbox.compacted", payload: { error: errMessage(err) } });
+  }
+}
 
 // src/server/mode-handlers.ts
 import {
@@ -11590,7 +12042,7 @@ function createModeHandlers(ctx) {
 }
 
 // src/server/project-handlers.ts
-import * as path18 from "node:path";
+import * as path19 from "node:path";
 function createProjectHandlers(ctx) {
   return {
     listProjects: async (ws) => {
@@ -11616,7 +12068,7 @@ function createProjectHandlers(ctx) {
     selectProject: async (ws, msg) => {
       const payload = msg.payload;
       const root = typeof payload?.root === "string" ? payload.root : "";
-      const name2 = typeof payload?.name === "string" ? payload.name : root ? path18.basename(root) : "";
+      const name2 = typeof payload?.name === "string" ? payload.name : root ? path19.basename(root) : "";
       send(ws, {
         type: "projects.selected",
         payload: {
@@ -11651,12 +12103,12 @@ function createProjectHandlers(ctx) {
 }
 
 // src/server/session-handlers.ts
-import * as path19 from "node:path";
 import {
   DEFAULT_CONTEXT_WINDOW_MODE_ID,
   repairToolUseAdjacency,
   resolveContextWindowPolicy as resolveContextWindowPolicy3
 } from "@wrongstack/core";
+import { sessionScopedPath as sessionScopedPath2 } from "@wrongstack/core/utils";
 function createSessionHandlers(ctx) {
   const currentSessionId = () => ctx.getSession().id;
   const sessionPayload2 = (payload) => {
@@ -11682,33 +12134,46 @@ function createSessionHandlers(ctx) {
     });
     return false;
   };
+  const finalizeSession = async (writer) => {
+    await writer.append({
+      type: "session_end",
+      ts: (/* @__PURE__ */ new Date()).toISOString(),
+      usage: ctx.tokenCounter.total()
+    }).catch(() => void 0);
+    await writer.close().catch(() => void 0);
+  };
+  const activateSession = async (next, messages, usage) => {
+    const current = ctx.getSession();
+    if (current !== next) await finalizeSession(current);
+    ctx.setSession(next);
+    ctx.context.session = next;
+    ctx.context.state.replaceMessages(messages);
+    ctx.context.state.replaceTodos([]);
+    ctx.context.readFiles.clear();
+    ctx.context.fileMtimes.clear();
+    ctx.context.state.setMeta(
+      "plan.path",
+      sessionScopedPath2(ctx.sessionsDir, next.id, ".plan.json")
+    );
+    ctx.context.state.setMeta(
+      "task.path",
+      sessionScopedPath2(ctx.sessionsDir, next.id, ".tasks.json")
+    );
+    ctx.tokenCounter.reset();
+    if (usage) ctx.tokenCounter.account(usage, ctx.config.model);
+    ctx.setSessionStartedAt(Date.now());
+    await ctx.onSessionSwapped(next.id);
+  };
   return {
     newSession: async (ws, msg) => {
       if (!ensureCurrentSession(ws, msg, "session.new")) return;
-      const session = ctx.getSession();
-      try {
-        await session.append({
-          type: "session_end",
-          ts: (/* @__PURE__ */ new Date()).toISOString(),
-          usage: ctx.tokenCounter.total()
-        });
-        await session.close();
-      } catch {
-      }
       const next = await ctx.getSessionStore().create({
         id: "",
         title: "",
         model: ctx.config.model,
         provider: ctx.config.provider
       });
-      ctx.setSession(next);
-      ctx.context.session = next;
-      ctx.context.state.replaceMessages([]);
-      ctx.context.state.replaceTodos([]);
-      ctx.context.readFiles.clear();
-      ctx.context.fileMtimes.clear();
-      ctx.tokenCounter.reset();
-      ctx.setSessionStartedAt(Date.now());
+      await activateSession(next, []);
       broadcast(ctx.clients, { type: "session.start", payload: await ctx.sessionStartPayload() });
     },
     clearContext: async (ws, msg) => {
@@ -11964,23 +12429,7 @@ function createSessionHandlers(ctx) {
           return;
         }
         const resumed = await ctx.getSessionStore().resume(id);
-        try {
-          await current.append({
-            type: "session_end",
-            ts: (/* @__PURE__ */ new Date()).toISOString(),
-            usage: ctx.tokenCounter.total()
-          });
-          await current.close();
-        } catch {
-        }
-        ctx.setSession(resumed.writer);
-        ctx.context.session = resumed.writer;
-        ctx.context.state.replaceMessages(resumed.data.messages);
-        ctx.context.readFiles.clear();
-        ctx.context.fileMtimes.clear();
-        ctx.tokenCounter.reset();
-        ctx.tokenCounter.account(resumed.data.usage, ctx.config.model);
-        ctx.setSessionStartedAt(Date.now());
+        await activateSession(resumed.writer, resumed.data.messages, resumed.data.usage);
         broadcast(ctx.clients, {
           type: "session.start",
           payload: {
@@ -12004,10 +12453,7 @@ function createSessionHandlers(ctx) {
       try {
         const { DefaultSessionRewinder } = await import("@wrongstack/core");
         const projectRoot = ctx.getProjectRoot();
-        const rewinder = new DefaultSessionRewinder(
-          path19.join(projectRoot, ".wrongstack", "sessions"),
-          projectRoot
-        );
+        const rewinder = new DefaultSessionRewinder(ctx.sessionsDir, projectRoot);
         const checkpoints = await rewinder.listCheckpoints(ctx.getSession().id);
         send(ws, { type: "session.checkpoints", payload: sessionPayload2({ checkpoints }) });
       } catch {
@@ -12020,10 +12466,7 @@ function createSessionHandlers(ctx) {
       try {
         const { DefaultSessionRewinder } = await import("@wrongstack/core");
         const projectRoot = ctx.getProjectRoot();
-        const rewinder = new DefaultSessionRewinder(
-          path19.join(projectRoot, ".wrongstack", "sessions"),
-          projectRoot
-        );
+        const rewinder = new DefaultSessionRewinder(ctx.sessionsDir, projectRoot);
         await rewinder.rewindToCheckpoint(ctx.getSession().id, checkpointIndex);
         await ctx.context.session.truncateToCheckpoint(checkpointIndex);
         sendResult(ws, true, `Rewound to checkpoint ${checkpointIndex}`);
@@ -12239,8 +12682,10 @@ function buildRoutes(state, deps2, cb) {
     getProjectRoot: state.getProjectRoot,
     getSession: state.getSession,
     getSessionStore: state.getSessionStore,
+    sessionsDir: deps2.wpaths.projectSessions,
     setSession: state.setSession,
     setSessionStartedAt: state.setSessionStartedAt,
+    onSessionSwapped: cb.onSessionSwapped,
     sessionStartPayload: cb.sessionStartPayload
   });
   const projectRoutes = createProjectHandlers({
@@ -12335,6 +12780,17 @@ function buildRoutes(state, deps2, cb) {
           deps2.pipelines.contextWindow.remove("AutoCompaction", { optional: true });
         }
       }
+      if (typeof payload["breakerEnabled"] === "boolean" || typeof payload["breakerAutoKillResetMs"] === "number") {
+        const { getProcessRegistry } = await import("@wrongstack/tools");
+        getProcessRegistry().setBreakerConfig({
+          ...typeof payload["breakerEnabled"] === "boolean" ? { enabled: payload["breakerEnabled"] } : {},
+          ...typeof payload["breakerAutoKillResetMs"] === "number" ? { autoKillResetMs: payload["breakerAutoKillResetMs"] } : {}
+        });
+      }
+      if (typeof payload["debugStream"] === "boolean") {
+        const { setDebugStreamEnabled } = await import("@wrongstack/providers");
+        setDebugStreamEnabled(payload["debugStream"]);
+      }
       if (typeof payload["logLevel"] === "string") {
         const valid = ["debug", "info", "warn", "error"];
         if (valid.includes(payload["logLevel"])) {
@@ -12412,6 +12868,13 @@ function buildRoutes(state, deps2, cb) {
         { projectRoot: state.getProjectRoot(), globalRoot: path20.dirname(deps2.globalConfigPath) },
         parsed.value
       );
+    },
+    compact: (ws, msg) => {
+      return handleMailboxCompact(
+        ws,
+        { projectRoot: state.getProjectRoot(), globalRoot: path20.dirname(deps2.globalConfigPath) },
+        msg.payload ?? {}
+      );
     }
   };
   const mcpRoutes = {
@@ -12424,14 +12887,29 @@ function buildRoutes(state, deps2, cb) {
     sleep: (ws, msg) => handleMcpSleep(ws, msg, deps2.globalConfigPath, deps2.mcpRegistry),
     wake: (ws, msg) => handleMcpWake(ws, msg, deps2.globalConfigPath, deps2.mcpRegistry),
     restart: (ws, msg) => handleMcpRestart(ws, msg, deps2.globalConfigPath, deps2.mcpRegistry),
-    discover: (ws, msg) => handleMcpDiscover(ws, msg, deps2.globalConfigPath, deps2.mcpRegistry)
+    discover: (ws, msg) => handleMcpDiscover(ws, msg, deps2.globalConfigPath, deps2.mcpRegistry),
+    resources: (ws, msg) => handleMcpResources(ws, msg, deps2.globalConfigPath, deps2.mcpRegistry),
+    prompts: (ws, msg) => handleMcpPrompts(ws, msg, deps2.globalConfigPath, deps2.mcpRegistry),
+    resourceRead: (ws, msg) => handleMcpResourceRead(ws, msg, deps2.globalConfigPath, deps2.mcpRegistry),
+    promptGet: (ws, msg) => handleMcpPromptGet(ws, msg, deps2.globalConfigPath, deps2.mcpRegistry)
+  };
+  const sendBrainStatus = (ws) => {
+    const snapshot = deps2.brainRuntime.getSnapshot();
+    send(ws, {
+      type: "brain.status",
+      payload: {
+        maxAutoRisk: deps2.brainSettings.maxAutoRisk,
+        log: deps2.brainLog,
+        mode: snapshot.mode,
+        poolLabels: snapshot.poolLabels,
+        councilLabels: snapshot.councilLabels,
+        ledgerPath: snapshot.ledger.path
+      }
+    });
   };
   const brainRoutes = {
     status: (ws) => {
-      send(ws, {
-        type: "brain.status",
-        payload: { maxAutoRisk: deps2.brainSettings.maxAutoRisk, log: deps2.brainLog }
-      });
+      sendBrainStatus(ws);
     },
     risk: (ws, msg) => {
       const parsed = validateBrainRiskPayload(msg.payload);
@@ -12441,11 +12919,43 @@ function buildRoutes(state, deps2, cb) {
       }
       const { level } = parsed.value;
       deps2.brainSettings.maxAutoRisk = level;
+      sendBrainStatus(ws);
+    },
+    configGet: (ws) => {
       send(ws, {
-        type: "brain.status",
-        payload: { maxAutoRisk: deps2.brainSettings.maxAutoRisk, log: deps2.brainLog }
+        type: "brain.config",
+        payload: { config: deps2.brainRuntime.getSnapshot(), persisted: true }
       });
     },
+    configSet: async (ws, msg) => {
+      const parsed = validateBrainConfigSetPayload(msg.payload);
+      if (!parsed.ok) {
+        sendResult(ws, false, parsed.message);
+        return;
+      }
+      try {
+        const { persisted } = deps2.brainRuntime.apply(parsed.value.patch);
+        const result = await persisted;
+        send(ws, {
+          type: "brain.config",
+          payload: {
+            config: deps2.brainRuntime.getSnapshot(),
+            persisted: result.ok,
+            ...result.ok ? {} : { error: result.error ?? "Persist failed." }
+          }
+        });
+        sendBrainStatus(ws);
+      } catch (err) {
+        send(ws, {
+          type: "brain.config",
+          payload: {
+            config: deps2.brainRuntime.getSnapshot(),
+            persisted: false,
+            error: `Invalid Brain setting: ${errMessage(err)}`
+          }
+        });
+      }
+    },
     ask: async (ws, msg) => {
       const parsed = validateBrainAskPayload(msg.payload);
       if (!parsed.ok) {
@@ -12553,7 +13063,8 @@ async function startWebUI(opts = {}) {
     promptsCtx,
     modelCapabilitiesRef,
     provider,
-    context
+    context,
+    sessionIdentity
   } = preContext;
   let sessionStore = preContext.sessionStore;
   let session = preContext.session;
@@ -12586,7 +13097,12 @@ async function startWebUI(opts = {}) {
     modelCapabilitiesRef,
     sessionGetter: () => session,
     sessionReader,
-    annotationsStore
+    annotationsStore,
+    // Brain settings persist to the GLOBAL config only (config.brain is on
+    // the in-project deny list), serialized behind the shared write lock.
+    persistBrainConfig: (brainConfig) => updateGlobalConfig2((decrypted) => {
+      decrypted["brain"] = brainConfig;
+    }, "brain.config")
   });
   const {
     compactor,
@@ -12596,6 +13112,7 @@ async function startWebUI(opts = {}) {
     pipelines,
     brain,
     brainSettings,
+    brainRuntime,
     brainLog,
     brainMonitor,
     codebaseIndexing,
@@ -12766,10 +13283,12 @@ async function startWebUI(opts = {}) {
     terminalHandler,
     brain,
     brainSettings,
+    brainRuntime,
     brainLog
   };
   const cb = {
     sessionStartPayload,
+    onSessionSwapped: (sessionId) => sessionIdentity.activate(sessionId),
     updateAutoCompactionMaxContext,
     updateGlobalConfig: updateGlobalConfig2,
     persistPrefsToConfig: persistPrefsToConfig2,
@@ -12895,7 +13414,10 @@ async function startWebUI(opts = {}) {
     onShutdown: async () => {
       credentialWatcherClose?.();
       brainMonitor.stop();
+      await agentServices.brainLedger?.stop().catch(() => {
+      });
       await mcpRegistry.stopAll().catch(() => void 0);
+      await sessionIdentity.stop();
       eventArming.getDispose()?.();
       if (eternalSubscription) {
         eternalSubscription.dispose();