@wrongstack/webui-server 0.293.0 → 0.295.0

package/dist/server/handlers.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
-  "sources": ["../../src/server/ws-payload-validation.ts", "../../src/server/handlers/worklist-handlers.ts"],
-  "sourcesContent": ["import { FORBIDDEN_PROTO_KEYS } from '@wrongstack/core/utils';\n\ntype PayloadValidationResult<T> = { ok: true; value: T } | { ok: false; message: string };\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\ninterface ModelSwitchPayload {\n  provider: string;\n  model: string;\n}\n\nexport function validateModelSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ModelSwitchPayload> {\n  if (!isRecord(payload)) {\n    return {\n      ok: false,\n      message: 'model.switch payload must be an object with string provider and model',\n    };\n  }\n  const provider = payload['provider'];\n  const model = payload['model'];\n  if (typeof provider !== 'string' || provider.trim().length === 0) {\n    return { ok: false, message: 'model.switch payload.provider must be a non-empty string' };\n  }\n  if (typeof model !== 'string' || model.trim().length === 0) {\n    return { ok: false, message: 'model.switch payload.model must be a non-empty string' };\n  }\n  return { ok: true, value: { provider, model } };\n}\n\ninterface PrefsUpdatePayload {\n  prefs: Record<string, unknown>;\n}\n\nconst AUTONOMY_VALUES = new Set(['off', 'suggest', 'auto', 'eternal', 'eternal-parallel']);\n\ninterface MailboxMessagesPayload {\n  limit?: number;\n  agentId?: string;\n  unreadOnly?: boolean;\n  incompleteOnly?: boolean;\n}\n\nexport function validateMailboxMessagesPayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxMessagesPayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.messages payload must be an object when provided' };\n  }\n  const limit = payload['limit'];\n  const agentId = payload['agentId'];\n  const unreadOnly = payload['unreadOnly'];\n  const incompleteOnly = payload['incompleteOnly'];\n  if (limit !== undefined && (typeof limit !== 'number' || !Number.isFinite(limit) || limit < 1)) {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.limit must be a positive number when provided',\n    };\n  }\n  if (agentId !== undefined && typeof agentId !== 'string') {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.agentId must be a string when provided',\n    };\n  }\n  if (unreadOnly !== undefined && typeof unreadOnly !== 'boolean') {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.unreadOnly must be a boolean when provided',\n    };\n  }\n  if (incompleteOnly !== undefined && typeof incompleteOnly !== 'boolean') {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.incompleteOnly must be a boolean when provided',\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      ...(limit !== undefined ? { limit: limit as number } : {}),\n      ...(agentId !== undefined ? { agentId: agentId as string } : {}),\n      ...(unreadOnly !== undefined ? { unreadOnly: unreadOnly as boolean } : {}),\n      ...(incompleteOnly !== undefined ? { incompleteOnly: incompleteOnly as boolean } : {}),\n    },\n  };\n}\n\ninterface MailboxAgentsPayload {\n  onlineOnly?: boolean;\n}\n\nexport function validateMailboxAgentsPayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxAgentsPayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.agents payload must be an object when provided' };\n  }\n  const onlineOnly = payload['onlineOnly'];\n  if (onlineOnly !== undefined && typeof onlineOnly !== 'boolean') {\n    return {\n      ok: false,\n      message: 'mailbox.agents payload.onlineOnly must be a boolean when provided',\n    };\n  }\n  return {\n    ok: true,\n    value: { ...(onlineOnly !== undefined ? { onlineOnly: onlineOnly as boolean } : {}) },\n  };\n}\n\ninterface MailboxPurgePayload {\n  completedMaxAgeMs?: number;\n  incompleteMaxAgeMs?: number;\n}\n\nexport function validateMailboxPurgePayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxPurgePayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.purge payload must be an object when provided' };\n  }\n  const completedMaxAgeMs = payload['completedMaxAgeMs'];\n  const incompleteMaxAgeMs = payload['incompleteMaxAgeMs'];\n  if (\n    completedMaxAgeMs !== undefined &&\n    (typeof completedMaxAgeMs !== 'number' ||\n      !Number.isFinite(completedMaxAgeMs) ||\n      completedMaxAgeMs < 0)\n  ) {\n    return {\n      ok: false,\n      message:\n        'mailbox.purge payload.completedMaxAgeMs must be a non-negative number when provided',\n    };\n  }\n  if (\n    incompleteMaxAgeMs !== undefined &&\n    (typeof incompleteMaxAgeMs !== 'number' ||\n      !Number.isFinite(incompleteMaxAgeMs) ||\n      incompleteMaxAgeMs < 0)\n  ) {\n    return {\n      ok: false,\n      message:\n        'mailbox.purge payload.incompleteMaxAgeMs must be a non-negative number when provided',\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      ...(completedMaxAgeMs !== undefined\n        ? { completedMaxAgeMs: completedMaxAgeMs as number }\n        : {}),\n      ...(incompleteMaxAgeMs !== undefined\n        ? { incompleteMaxAgeMs: incompleteMaxAgeMs as number }\n        : {}),\n    },\n  };\n}\n\ninterface BrainRiskPayload {\n  level: string;\n}\n\nconst BRAIN_RISK_VALUES = new Set(['off', 'low', 'medium', 'high', 'all']);\n\nexport function validateBrainRiskPayload(\n  payload: unknown,\n): PayloadValidationResult<BrainRiskPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'brain.risk payload must be an object with string level' };\n  }\n  const level = payload['level'];\n  if (typeof level !== 'string' || !BRAIN_RISK_VALUES.has(level)) {\n    return {\n      ok: false,\n      message: 'brain.risk payload.level must be one of off, low, medium, high, all',\n    };\n  }\n  return { ok: true, value: { level } };\n}\n\ninterface BrainAskPayload {\n  question: string;\n}\n\nexport function validateBrainAskPayload(\n  payload: unknown,\n): PayloadValidationResult<BrainAskPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'brain.ask payload must be an object with string question' };\n  }\n  const question = payload['question'];\n  if (typeof question !== 'string' || question.trim().length === 0) {\n    return { ok: false, message: 'brain.ask payload.question must be a non-empty string' };\n  }\n  return { ok: true, value: { question: question.trim() } };\n}\n\ninterface BrainConfigSetPayload {\n  patch: Record<string, unknown>;\n}\n\nexport function validateBrainConfigSetPayload(\n  payload: unknown,\n): PayloadValidationResult<BrainConfigSetPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'brain.config.set payload must be an object with a patch object' };\n  }\n  const patch = payload['patch'];\n  if (!isRecord(patch)) {\n    // Field-level validation happens in BrainRuntime.apply(), which throws\n    // BEFORE any live state changes \u2014 this only guards the envelope shape.\n    return { ok: false, message: 'brain.config.set payload.patch must be an object' };\n  }\n  return { ok: true, value: { patch } };\n}\n\ninterface AutonomySwitchPayload {\n  mode: string;\n}\n\nexport function validateAutonomySwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<AutonomySwitchPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'autonomy.switch payload must be an object with string mode' };\n  }\n  const mode = payload['mode'];\n  if (typeof mode !== 'string' || !AUTONOMY_VALUES.has(mode)) {\n    return { ok: false, message: 'autonomy.switch payload.mode must be a valid autonomy mode' };\n  }\n  return { ok: true, value: { mode } };\n}\n\ninterface PlanTemplateUsePayload {\n  template: string;\n}\n\nexport function validatePlanTemplateUsePayload(\n  payload: unknown,\n): PayloadValidationResult<PlanTemplateUsePayload> {\n  if (!isRecord(payload)) {\n    return {\n      ok: false,\n      message: 'plan.template_use payload must be an object with string template',\n    };\n  }\n  const template = payload['template'];\n  if (typeof template !== 'string' || template.trim().length === 0) {\n    return { ok: false, message: 'plan.template_use payload.template must be a non-empty string' };\n  }\n  return { ok: true, value: { template } };\n}\nconst CONTEXT_STRATEGY_VALUES = new Set(['hybrid', 'intelligent', 'selective']);\nconst CONTEXT_MODE_VALUES = new Set(['balanced', 'frugal', 'deep', 'archival']);\nconst TOKEN_SAVING_TIER_VALUES = new Set(['off', 'minimal', 'light', 'medium', 'aggressive']);\nconst ENHANCE_LANGUAGE_VALUES = new Set(['original', 'english']);\nconst LOG_LEVEL_VALUES = new Set(['debug', 'info', 'warn', 'error']);\nconst AUDIT_LEVEL_VALUES = new Set(['minimal', 'standard', 'full']);\nconst REASONING_MODE_VALUES = new Set(['auto', 'on', 'off']);\nconst REASONING_EFFORT_VALUES = new Set([\n  'none',\n  'minimal',\n  'low',\n  'medium',\n  'high',\n  'xhigh',\n  'max',\n]);\nconst CACHE_TTL_VALUES = new Set(['default', '5m', '1h']);\n\nconst BOOLEAN_PREF_KEYS = new Set([\n  'yolo',\n  'chime',\n  'confirmExit',\n  'nextPrediction',\n  'titleAnimation',\n  'enhanceEnabled',\n  'featureMcp',\n  'featurePlugins',\n  'featureMemory',\n  'featureSkills',\n  'featureModelsRegistry',\n  'indexOnStart',\n  'contextAutoCompact',\n  'tgSessionEnd',\n  'tgDelegate',\n  'reasoningPreserve',\n  'hqEnabled',\n  'hqRawContent',\n  'fallbackAuto',\n  'favoriteModelsOnly',\n  'modelAvailabilitySchedule',\n  'breakerEnabled',\n  'debugStream',\n  // Chimera + auto-review master toggles\n  'chimeraEnabled',\n  'autoReviewEnabled',\n  'showModelReasoning',\n]);\n\n/** Keys whose value must be an array of strings (e.g. an ordered model list). */\nconst STRING_ARRAY_PREF_KEYS = new Set([\n  'fallbackModels',\n  'favoriteModels',\n  // Auto-review explicit fallback chain (derived when fallbackProfile is unset;\n  // surfaced for visibility/override).\n  'autoReviewFallbackModels',\n]);\nconst STRING_ARRAY_RECORD_PREF_KEYS = new Set(['fallbackProfiles']);\nconst MODEL_MATRIX_PREF_KEYS = new Set(['modelMatrix']);\n// Object of booleans, e.g. { 'plugin-name': true }. Parity with the embedded\n// server, which accepts `pluginsEnabled` and persists it to\n// extensions.<name>.enabled \u2014 the standalone server rejected it as unknown.\nconst BOOLEAN_RECORD_PREF_KEYS = new Set(['pluginsEnabled']);\n\nconst NUMBER_PREF_KEYS = new Set([\n  'autonomyDelayMs',\n  'autoProceedMaxIterations',\n  'maxIterations',\n  'maxConcurrent',\n  'enhanceDelayMs',\n  'tgLongToolMs',\n  'breakerAutoKillResetMs',\n  // Chimera + auto-review numeric knobs\n  'chimeraMaxFiles',\n  'autoReviewDebounceMs',\n  'autoReviewMaxFilesPerBatch',\n  'autoReviewMaxConcurrentReviews',\n]);\n\nconst STRING_PREF_KEYS = new Set([\n  'hqUrl',\n  'hqToken',\n  'uiLocale',\n  'thinkingWord',\n  'refinerProvider',\n  'refinerModel',\n  'refinerFallbackProfile',\n  // Chimera + auto-review override strings\n  'chimeraProvider',\n  'chimeraModel',\n  'autoReviewProvider',\n  'autoReviewModel',\n  'autoReviewFallbackProfile',\n]);\n\nconst ENUM_PREF_KEYS: Record<string, Set<string>> = {\n  autonomy: AUTONOMY_VALUES,\n  contextStrategy: CONTEXT_STRATEGY_VALUES,\n  contextMode: CONTEXT_MODE_VALUES,\n  tokenSavingTier: TOKEN_SAVING_TIER_VALUES,\n  enhanceLanguage: ENHANCE_LANGUAGE_VALUES,\n  logLevel: LOG_LEVEL_VALUES,\n  auditLevel: AUDIT_LEVEL_VALUES,\n  reasoningMode: REASONING_MODE_VALUES,\n  reasoningEffort: REASONING_EFFORT_VALUES,\n  cacheTtl: CACHE_TTL_VALUES,\n  statuslineMode: new Set(['minimum', 'detailed', 'no-color']),\n  animationStyle: new Set(['rainbow', 'wave', 'pulse', 'dots', 'breathe', 'cycle']),\n  fsAccess: new Set(['unrestricted', 'project']),\n  // Chimera autoFix + auto-review cascade threshold\n  chimeraAutoFix: new Set(['off', 'ask', 'auto']),\n  autoReviewCascadeOn: new Set(['off', 'critical', 'high']),\n  fleetChatVerbosity: new Set(['off', 'full']),\n};\n\nfunction validateModelRuntimeValue(\n  modelRuntime: Record<string, unknown>,\n  path: string,\n): string | null {\n  const reasoning = modelRuntime['reasoning'];\n  if (reasoning !== undefined) {\n    if (!isRecord(reasoning)) return `${path}.reasoning must be an object when provided`;\n    const mode = reasoning['mode'];\n    const effort = reasoning['effort'];\n    const preserve = reasoning['preserve'];\n    if (mode !== undefined && (typeof mode !== 'string' || !REASONING_MODE_VALUES.has(mode))) {\n      return `${path}.reasoning.mode must be one of: ${Array.from(REASONING_MODE_VALUES).join(', ')}`;\n    }\n    if (\n      effort !== undefined &&\n      (typeof effort !== 'string' || !REASONING_EFFORT_VALUES.has(effort))\n    ) {\n      return `${path}.reasoning.effort must be one of: ${Array.from(REASONING_EFFORT_VALUES).join(', ')}`;\n    }\n    if (preserve !== undefined && typeof preserve !== 'boolean') {\n      return `${path}.reasoning.preserve must be a boolean when provided`;\n    }\n  }\n\n  const cache = modelRuntime['cache'];\n  if (cache !== undefined) {\n    if (!isRecord(cache)) return `${path}.cache must be an object when provided`;\n    const ttl = cache['ttl'];\n    if (\n      ttl !== undefined &&\n      (typeof ttl !== 'string' || !CACHE_TTL_VALUES.has(ttl) || ttl === 'default')\n    ) {\n      return `${path}.cache.ttl must be one of: 5m, 1h`;\n    }\n  }\n\n  const parameters = modelRuntime['parameters'];\n  if (parameters !== undefined && !isRecord(parameters)) {\n    return `${path}.parameters must be an object when provided`;\n  }\n\n  return null;\n}\n\nfunction validatePreferenceValue(key: string, value: unknown): string | null {\n  if (BOOLEAN_PREF_KEYS.has(key)) {\n    return typeof value === 'boolean' ? null : `prefs.update payload.${key} must be a boolean`;\n  }\n  if (NUMBER_PREF_KEYS.has(key)) {\n    return typeof value === 'number' && Number.isFinite(value)\n      ? null\n      : `prefs.update payload.${key} must be a finite number`;\n  }\n  if (STRING_PREF_KEYS.has(key)) {\n    return typeof value === 'string' ? null : `prefs.update payload.${key} must be a string`;\n  }\n  if (STRING_ARRAY_PREF_KEYS.has(key)) {\n    return Array.isArray(value) && value.every((v) => typeof v === 'string')\n      ? null\n      : `prefs.update payload.${key} must be an array of strings`;\n  }\n  if (STRING_ARRAY_RECORD_PREF_KEYS.has(key)) {\n    return isRecord(value) &&\n      Object.values(value).every(\n        (v) => Array.isArray(v) && v.every((item) => typeof item === 'string'),\n      )\n      ? null\n      : `prefs.update payload.${key} must be an object of string arrays`;\n  }\n  if (BOOLEAN_RECORD_PREF_KEYS.has(key)) {\n    if (!isRecord(value) || !Object.values(value).every((v) => typeof v === 'boolean')) {\n      return `prefs.update payload.${key} must be an object of booleans`;\n    }\n    // The KEYS here are plugin names that get used as property keys downstream\n    // (extensions.<name>.enabled), so they must be checked too \u2014 validating\n    // only the values let `{\"__proto__\": true}` through to a write that\n    // polluted Object.prototype. The persist layer guards as well; this\n    // rejects loudly instead of silently dropping the entry.\n    const badKey = Object.keys(value).find((k) => FORBIDDEN_PROTO_KEYS.has(k));\n    if (badKey) {\n      return `prefs.update payload.${key} contains a forbidden key: ${badKey}`;\n    }\n    return null;\n  }\n  if (MODEL_MATRIX_PREF_KEYS.has(key)) {\n    if (!isRecord(value)) return `prefs.update payload.${key} must be an object`;\n    for (const entry of Object.values(value)) {\n      if (!isRecord(entry)) return `prefs.update payload.${key} entries must be objects`;\n      const provider = entry['provider'];\n      const model = entry['model'];\n      const fallbackProfile = entry['fallbackProfile'];\n      const modelRuntime = entry['modelRuntime'];\n      if (provider !== undefined && typeof provider !== 'string') {\n        return `prefs.update payload.${key}.provider must be a string when provided`;\n      }\n      if (model !== undefined && typeof model !== 'string') {\n        return `prefs.update payload.${key}.model must be a string when provided`;\n      }\n      if (fallbackProfile !== undefined && typeof fallbackProfile !== 'string') {\n        return `prefs.update payload.${key}.fallbackProfile must be a string when provided`;\n      }\n      if (modelRuntime !== undefined && !isRecord(modelRuntime)) {\n        return `prefs.update payload.${key}.modelRuntime must be an object when provided`;\n      }\n      if (isRecord(modelRuntime)) {\n        const runtimeError = validateModelRuntimeValue(\n          modelRuntime,\n          `prefs.update payload.${key}.modelRuntime`,\n        );\n        if (runtimeError) return runtimeError;\n      }\n      if (model === undefined && fallbackProfile === undefined && modelRuntime === undefined) {\n        return `prefs.update payload.${key} entries require model, fallbackProfile, or modelRuntime`;\n      }\n    }\n    return null;\n  }\n  const allowed = ENUM_PREF_KEYS[key];\n  if (allowed) {\n    return typeof value === 'string' && allowed.has(value)\n      ? null\n      : `prefs.update payload.${key} must be one of: ${Array.from(allowed).join(', ')}`;\n  }\n  return `prefs.update payload contains unknown preference key: ${key}`;\n}\n\nexport function validatePrefsUpdatePayload(\n  payload: unknown,\n): PayloadValidationResult<PrefsUpdatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'prefs.update payload must be an object' };\n  }\n  for (const [key, value] of Object.entries(payload)) {\n    const error = validatePreferenceValue(key, value);\n    if (error) return { ok: false, message: error };\n  }\n  return { ok: true, value: { prefs: payload } };\n}\n\ninterface SkillsCreatePayload {\n  name: string;\n  description: string;\n  scope: 'project' | 'global';\n}\n\nexport function validateSkillsCreatePayload(\n  payload: unknown,\n): PayloadValidationResult<SkillsCreatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'skills.create payload must be an object' };\n  }\n  const name = payload['name'];\n  const description = payload['description'];\n  const scope = payload['scope'];\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'Skill name is required' };\n  }\n  if (!/^[a-z0-9]+(-[a-z0-9]+)*$/.test(name.trim())) {\n    return { ok: false, message: 'Skill name must be kebab-case (e.g. my-new-skill)' };\n  }\n  if (typeof description !== 'string' || description.trim().length === 0) {\n    return { ok: false, message: 'Description/trigger is required' };\n  }\n  if (scope !== 'project' && scope !== 'global') {\n    return { ok: false, message: 'skills.create payload.scope must be project or global' };\n  }\n  return { ok: true, value: { name, description, scope } };\n}\n\ninterface SkillsEditPayload {\n  name: string;\n  body: string;\n}\n\nexport function validateSkillsEditPayload(\n  payload: unknown,\n): PayloadValidationResult<SkillsEditPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'skills.edit payload must be an object' };\n  }\n  const name = payload['name'];\n  const body = payload['body'];\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'Skill name is required' };\n  }\n  if (typeof body !== 'string' || body.length === 0) {\n    return { ok: false, message: 'Skill body is required' };\n  }\n  return { ok: true, value: { name, body } };\n}\n\ninterface ProcessKillPayload {\n  pid: number;\n}\n\nexport function validateProcessKillPayload(\n  payload: unknown,\n): PayloadValidationResult<ProcessKillPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'process.kill payload must be an object with numeric pid' };\n  }\n  const pid = payload['pid'];\n  if (typeof pid !== 'number' || !Number.isInteger(pid) || pid <= 0) {\n    return { ok: false, message: 'process.kill payload.pid must be a positive integer' };\n  }\n  return { ok: true, value: { pid } };\n}\n\ninterface WorkingDirSetPayload {\n  path: string;\n}\n\nexport function validateWorkingDirSetPayload(\n  payload: unknown,\n): PayloadValidationResult<WorkingDirSetPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'working_dir.set payload must be an object with string path' };\n  }\n  const newPath = payload['path'];\n  if (typeof newPath !== 'string' || newPath.trim().length === 0) {\n    return { ok: false, message: 'working_dir.set payload.path must be a non-empty string' };\n  }\n  return { ok: true, value: { path: newPath } };\n}\n\ninterface ModeSwitchPayload {\n  id: string;\n}\n\nexport function validateModeSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ModeSwitchPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mode.switch payload must be an object with string id' };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'mode.switch payload.id must be a non-empty string' };\n  }\n  return { ok: true, value: { id } };\n}\n\ninterface ContextModeIdPayload {\n  id: string;\n}\n\nfunction validateContextModeIdPayload(\n  payload: unknown,\n  type: 'context.mode.switch' | 'context.mode.delete',\n): PayloadValidationResult<ContextModeIdPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: `${type} payload must be an object with string id` };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: `${type} payload.id must be a non-empty string` };\n  }\n  return { ok: true, value: { id } };\n}\n\nexport function validateContextModeSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeIdPayload> {\n  return validateContextModeIdPayload(payload, 'context.mode.switch');\n}\n\nexport function validateContextModeDeletePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeIdPayload> {\n  return validateContextModeIdPayload(payload, 'context.mode.delete');\n}\n\ninterface ContextModeCreatePayload {\n  id: string;\n  name: string;\n  description: string;\n  thresholds: { warn: number; soft: number; hard: number };\n  preserveK: number;\n  eliseThreshold: number;\n}\n\nfunction isFiniteNumber(value: unknown): value is number {\n  return typeof value === 'number' && Number.isFinite(value);\n}\n\nexport function validateContextModeCreatePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeCreatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'context.mode.create payload must be an object' };\n  }\n  const id = payload['id'];\n  const name = payload['name'];\n  const description = payload['description'];\n  const thresholds = payload['thresholds'];\n  const preserveK = payload['preserveK'];\n  const eliseThreshold = payload['eliseThreshold'];\n\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'context.mode.create payload.id must be a non-empty string' };\n  }\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'context.mode.create payload.name must be a non-empty string' };\n  }\n  if (typeof description !== 'string') {\n    return { ok: false, message: 'context.mode.create payload.description must be a string' };\n  }\n  if (!isRecord(thresholds)) {\n    return {\n      ok: false,\n      message:\n        'context.mode.create payload.thresholds must be an object with warn/soft/hard numbers',\n    };\n  }\n  if (\n    !isFiniteNumber(thresholds['warn']) ||\n    !isFiniteNumber(thresholds['soft']) ||\n    !isFiniteNumber(thresholds['hard'])\n  ) {\n    return {\n      ok: false,\n      message: 'context.mode.create payload.thresholds.warn/soft/hard must be finite numbers',\n    };\n  }\n  if (!isFiniteNumber(preserveK)) {\n    return { ok: false, message: 'context.mode.create payload.preserveK must be a finite number' };\n  }\n  if (!isFiniteNumber(eliseThreshold)) {\n    return {\n      ok: false,\n      message: 'context.mode.create payload.eliseThreshold must be a finite number',\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      id,\n      name,\n      description,\n      thresholds: { warn: thresholds['warn'], soft: thresholds['soft'], hard: thresholds['hard'] },\n      preserveK,\n      eliseThreshold,\n    },\n  };\n}\n\ninterface ContextModeUpdatePayload {\n  id: string;\n  name?: string;\n  description?: string;\n  thresholds?: { warn?: number; soft?: number; hard?: number };\n  preserveK?: number;\n  eliseThreshold?: number;\n}\n\nexport function validateContextModeUpdatePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeUpdatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'context.mode.update payload must be an object' };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'context.mode.update payload.id must be a non-empty string' };\n  }\n\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.name must be a string when provided',\n    };\n  }\n\n  const description = payload['description'];\n  if (description !== undefined && typeof description !== 'string') {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.description must be a string when provided',\n    };\n  }\n\n  const thresholds = payload['thresholds'];\n  let validatedThresholds: ContextModeUpdatePayload['thresholds'];\n  if (thresholds !== undefined) {\n    if (!isRecord(thresholds)) {\n      return {\n        ok: false,\n        message: 'context.mode.update payload.thresholds must be an object when provided',\n      };\n    }\n    for (const key of ['warn', 'soft', 'hard'] as const) {\n      const val = thresholds[key];\n      if (val !== undefined && !isFiniteNumber(val)) {\n        return {\n          ok: false,\n          message: `context.mode.update payload.thresholds.${key} must be a finite number when provided`,\n        };\n      }\n    }\n    validatedThresholds = {\n      ...(typeof thresholds['warn'] === 'number' ? { warn: thresholds['warn'] } : {}),\n      ...(typeof thresholds['soft'] === 'number' ? { soft: thresholds['soft'] } : {}),\n      ...(typeof thresholds['hard'] === 'number' ? { hard: thresholds['hard'] } : {}),\n    };\n  }\n\n  const preserveK = payload['preserveK'];\n  if (preserveK !== undefined && !isFiniteNumber(preserveK)) {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.preserveK must be a finite number when provided',\n    };\n  }\n\n  const eliseThreshold = payload['eliseThreshold'];\n  if (eliseThreshold !== undefined && !isFiniteNumber(eliseThreshold)) {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.eliseThreshold must be a finite number when provided',\n    };\n  }\n\n  return {\n    ok: true,\n    value: {\n      id,\n      ...(typeof name === 'string' ? { name } : {}),\n      ...(typeof description === 'string' ? { description } : {}),\n      ...(validatedThresholds !== undefined ? { thresholds: validatedThresholds } : {}),\n      ...(typeof preserveK === 'number' ? { preserveK } : {}),\n      ...(typeof eliseThreshold === 'number' ? { eliseThreshold } : {}),\n    },\n  };\n}\n\ninterface ShellOpenPayload {\n  path: string;\n  target?: 'file' | 'terminal';\n}\n\nexport function validateShellOpenPayload(\n  payload: unknown,\n): PayloadValidationResult<ShellOpenPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'shell.open payload must be an object with string path' };\n  }\n  const path = payload['path'];\n  if (typeof path !== 'string' || path.trim().length === 0) {\n    return { ok: false, message: 'shell.open payload.path must be a non-empty string' };\n  }\n  const target = payload['target'];\n  if (target !== undefined && target !== 'file' && target !== 'terminal') {\n    return {\n      ok: false,\n      message: 'shell.open payload.target must be \"file\" or \"terminal\" when provided',\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      path,\n      ...(target !== undefined ? { target: target as 'file' | 'terminal' } : {}),\n    },\n  };\n}\n\ninterface GitDiffPayload {\n  path: string;\n}\n\nexport function validateGitDiffPayload(payload: unknown): PayloadValidationResult<GitDiffPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'git.diff payload must be an object' };\n  }\n  const path = payload['path'];\n  if (path === undefined || path === null) {\n    return { ok: true, value: { path: '' } };\n  }\n  if (typeof path !== 'string') {\n    return { ok: false, message: 'git.diff payload.path must be a string when provided' };\n  }\n  return { ok: true, value: { path } };\n}\n\ninterface ProjectsAddPayload {\n  root: string;\n  name?: string;\n}\n\nexport function validateProjectsAddPayload(\n  payload: unknown,\n): PayloadValidationResult<ProjectsAddPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'projects.add payload must be an object with string root' };\n  }\n  const root = payload['root'];\n  if (typeof root !== 'string' || root.trim().length === 0) {\n    return { ok: false, message: 'projects.add payload.root must be a non-empty string' };\n  }\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return { ok: false, message: 'projects.add payload.name must be a string when provided' };\n  }\n  return {\n    ok: true,\n    value: { root, ...(typeof name === 'string' ? { name } : {}) },\n  };\n}\n\ninterface ProjectsSelectPayload {\n  root: string;\n  name?: string;\n}\n\nexport function validateProjectsSelectPayload(\n  payload: unknown,\n): PayloadValidationResult<ProjectsSelectPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'projects.select payload must be an object with string root' };\n  }\n  const root = payload['root'];\n  if (typeof root !== 'string' || root.trim().length === 0) {\n    return { ok: false, message: 'projects.select payload.root must be a non-empty string' };\n  }\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return { ok: false, message: 'projects.select payload.name must be a string when provided' };\n  }\n  return {\n    ok: true,\n    value: { root, ...(typeof name === 'string' ? { name } : {}) },\n  };\n}\n", "// \u2500\u2500 Shared Worklist Handlers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// Extracted from standalone server (packages/webui/src/server/index.ts) and CLI\n// embedded server (packages/cli/src/webui-server/). Both servers use these\n// handlers for todos, tasks, and plan operations. Keep them in sync.\n//\n// Message types handled here:\n//   todos.get | todos.clear | todos.remove | todo.update\n//   tasks.get | task.update\n//   plan.get | plan.template_use | plan.item.update\n// \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nimport type { WebSocket } from 'ws';\nimport type { TodoItem } from '@wrongstack/core';\nimport { validatePlanTemplateUsePayload } from '../ws-payload-validation.js';\n\n// \u2500\u2500 Shared result helper \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nfunction sendResult(\n  ws: WebSocket,\n  ctx: WorklistContext,\n  ok: boolean,\n  message: string,\n): void {\n  ctx.send(ws, { type: ok ? 'ok' : 'error', message });\n}\n\nfunction sessionPayload<T extends Record<string, unknown>>(\n  ctx: WorklistContext,\n  payload: T,\n): T & { sessionId: string } {\n  const provided = payload['sessionId'];\n  const fallback = ctx.context.session?.id ?? '';\n  const sessionId = typeof provided === 'string' && provided.length > 0 ? provided : fallback;\n  return { ...payload, sessionId };\n}\n\n// \u2500\u2500 Context interface \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// Both servers satisfy this with their own local state.\n\nexport interface WorklistContext {\n  context: {\n    todos: TodoItem[];\n    meta: Record<string, unknown>;\n    session: { id: string } | null;\n    state?: unknown;\n  };\n  send: (ws: WebSocket, msg: object) => void;\n  broadcast: (msg: object) => void;\n  /**\n   * Optional mutator for in-memory todo state. Servers that manage live\n   * agent state (e.g. the CLI embedded server) provide this so handlers\n   * can update the agent's todo list directly. Standalone server may omit.\n   */\n  replaceTodos?: (todos: TodoItem[]) => void;\n}\n\n// \u2500\u2500 Todos \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport function handleTodosGet(ctx: WorklistContext, ws: WebSocket): void {\n  ctx.send(ws, { type: 'todos.updated', payload: sessionPayload(ctx, { todos: ctx.context.todos }) });\n}\n\nexport function handleTodosClear(ctx: WorklistContext, ws: WebSocket): void {\n  ctx.replaceTodos?.([]);\n  ctx.broadcast({ type: 'todos.cleared', payload: sessionPayload(ctx, {}) });\n  sendResult(ws, ctx, true, 'Todo board cleared.');\n}\n\nexport function handleTodosRemove(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { id?: string; index?: number } | undefined,\n): void {\n  if (!payload || (payload.id === undefined && payload.index === undefined)) {\n    sendResult(ws, ctx, false, 'todos.remove requires id or index.');\n    return;\n  }\n  const next =\n    payload.id !== undefined\n      ? ctx.context.todos.filter((t) => t.id !== payload.id)\n      : ctx.context.todos.filter((_, i) => i !== (payload.index as number));\n  ctx.replaceTodos?.(next);\n  ctx.broadcast({ type: 'todos.updated', payload: sessionPayload(ctx, { todos: next }) });\n  sendResult(ws, ctx, true, 'Todo item removed.');\n}\n\nexport function handleTodoUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { id: string; status?: TodoItem['status']; activeForm?: string },\n): void {\n  const todo = ctx.context.todos.find((t) => t.id === payload.id);\n  if (!todo) {\n    sendResult(ws, ctx, false, `No todo with id \"${payload.id}\".`);\n    return;\n  }\n  const next = ctx.context.todos.map((t) =>\n    t.id === payload.id\n      ? { ...t, ...(payload.status !== undefined && { status: payload.status }), ...(payload.activeForm !== undefined && { activeForm: payload.activeForm }) }\n      : t,\n  );\n  ctx.replaceTodos?.(next);\n  ctx.broadcast({ type: 'todos.updated', payload: sessionPayload(ctx, { todos: next }) });\n  sendResult(ws, ctx, true, `Todo \"${todo.content}\" updated.`);\n}\n\n// \u2500\u2500 Tasks \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport async function handleTasksGet(ctx: WorklistContext, ws: WebSocket): Promise<void> {\n  const taskPath = ctx.context.meta['task.path'];\n  if (typeof taskPath === 'string' && taskPath) {\n    try {\n      const { loadTasks } = await import('@wrongstack/core');\n      const file = await loadTasks(taskPath);\n      ctx.send(ws, { type: 'tasks.updated', payload: sessionPayload(ctx, { tasks: file?.tasks ?? [] }) });\n    } catch {\n      ctx.send(ws, { type: 'tasks.updated', payload: sessionPayload(ctx, { tasks: [] }) });\n    }\n  } else {\n    ctx.send(ws, {\n      type: 'tasks.updated',\n      payload: sessionPayload(ctx, { tasks: [], error: 'Task storage not configured.' }),\n    });\n  }\n}\n\nexport async function handleTaskUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: {\n    id: string;\n    status: 'pending' | 'in_progress' | 'blocked' | 'failed' | 'review' | 'completed';\n  },\n): Promise<void> {\n  const taskPath = ctx.context.meta['task.path'];\n  if (typeof taskPath !== 'string' || !taskPath) {\n    sendResult(ws, ctx, false, 'Task storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { loadTasks, saveTasks } = await import('@wrongstack/core');\n    const file = await loadTasks(taskPath);\n    if (!file) {\n      sendResult(ws, ctx, false, 'No task file found.');\n      return;\n    }\n    const idx = file.tasks.findIndex((t) => t.id === payload.id);\n    if (idx === -1) {\n      sendResult(ws, ctx, false, `Task \"${payload.id}\" not found.`);\n      return;\n    }\n    const existing = file.tasks[idx];\n    if (!existing) {\n      // noUncheckedIndexedAccess: array access can be undefined. We just\n      // confirmed idx is in-range via findIndex, but the type system needs\n      // the explicit guard.\n      sendResult(ws, ctx, false, `Task \"${payload.id}\" not found.`);\n      return;\n    }\n    file.tasks[idx] = { ...existing, status: payload.status };\n    await saveTasks(taskPath, file);\n    ctx.broadcast({ type: 'tasks.updated', payload: sessionPayload(ctx, { tasks: file.tasks }) });\n    sendResult(ws, ctx, true, `Task \"${payload.id}\" marked ${payload.status}.`);\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\n// \u2500\u2500 Plan \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport async function handlePlanGet(ctx: WorklistContext, ws: WebSocket): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath === 'string' && planPath) {\n    try {\n      const { loadPlan } = await import('@wrongstack/core');\n      const plan = await loadPlan(planPath);\n      ctx.send(ws, {\n        type: 'plan.updated',\n        payload: sessionPayload(ctx, {\n          plan: plan ?? {\n            version: 1,\n            sessionId,\n            updatedAt: new Date().toISOString(),\n            items: [],\n          },\n        }),\n      });\n    } catch {\n      ctx.send(ws, {\n        type: 'plan.updated',\n        payload: sessionPayload(ctx, {\n          plan: {\n            version: 1,\n            sessionId,\n            updatedAt: new Date().toISOString(),\n            items: [],\n          },\n        }),\n      });\n    }\n  } else {\n    ctx.send(ws, {\n      type: 'plan.updated',\n      payload: sessionPayload(ctx, { plan: null, error: 'Plan storage is not configured for this session.' }),\n    });\n  }\n}\n\nexport async function handlePlanTemplateUse(ctx: WorklistContext, ws: WebSocket, template: string): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath !== 'string' || !planPath) {\n    sendResult(ws, ctx, false, 'Plan storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { getPlanTemplate, loadPlan, savePlan, emptyPlan, addPlanItem } = await import('@wrongstack/core');\n    const tpl = getPlanTemplate(template);\n    if (!tpl) {\n      sendResult(ws, ctx, false, `Unknown template \"${template}\".`);\n      return;\n    }\n    let plan = (await loadPlan(planPath)) ?? emptyPlan(sessionId);\n    for (const item of tpl.items) {\n      ({ plan } = addPlanItem(plan, item.title, item.details));\n    }\n    await savePlan(planPath, plan);\n    sendResult(ws, ctx, true, `Applied template \"${tpl.name}\" \u2014 ${tpl.items.length} items added.`);\n    ctx.broadcast({ type: 'plan.updated', payload: sessionPayload(ctx, { plan }) });\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\nexport async function handlePlanItemUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { target: string; status: 'open' | 'in_progress' | 'done' },\n): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath !== 'string' || !planPath) {\n    sendResult(ws, ctx, false, 'Plan storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { mutatePlan, setPlanItemStatus } = await import('@wrongstack/core');\n    let changed = false;\n    const plan = await mutatePlan(planPath, sessionId, async (p) => {\n      const before = p.updatedAt;\n      const updated = setPlanItemStatus(p, payload.target, payload.status);\n      changed = updated.updatedAt !== before;\n      return updated;\n    });\n    if (!changed) {\n      sendResult(ws, ctx, false, `No plan item matched \"${payload.target}\".`);\n      return;\n    }\n    sendResult(ws, ctx, true, `Plan item status updated to \"${payload.status}\".`);\n    ctx.broadcast({ type: 'plan.updated', payload: sessionPayload(ctx, { plan }) });\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\n// \u2500\u2500 Dispatcher \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// Single entry point for the nine worklist message types, so the host server's\n// switch delegates one grouped case here instead of repeating the per-type\n// `makeWorklistContext()` boilerplate. Unknown types are a no-op (the caller\n// only routes worklist types to this function).\n\n/** Loosely-typed worklist WS message \u2014 payload shapes are narrowed per case. */\nexport interface WorklistMessage {\n  type: string;\n  payload?: unknown;\n}\n\nexport async function handleWorklistMessage(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  msg: WorklistMessage,\n): Promise<void> {\n  switch (msg.type) {\n    case 'todos.get':\n      handleTodosGet(ctx, ws);\n      return;\n    case 'todos.clear':\n      handleTodosClear(ctx, ws);\n      return;\n    case 'todos.remove':\n      handleTodosRemove(ctx, ws, msg.payload as { id?: string; index?: number } | undefined);\n      return;\n    case 'todo.update':\n      handleTodoUpdate(\n        ctx,\n        ws,\n        msg.payload as { id: string; status?: TodoItem['status']; activeForm?: string },\n      );\n      return;\n    case 'tasks.get':\n      await handleTasksGet(ctx, ws);\n      return;\n    case 'task.update':\n      await handleTaskUpdate(\n        ctx,\n        ws,\n        msg.payload as {\n          id: string;\n          status: 'pending' | 'in_progress' | 'blocked' | 'failed' | 'review' | 'completed';\n        },\n      );\n      return;\n    case 'plan.get':\n      await handlePlanGet(ctx, ws);\n      return;\n    case 'plan.template_use': {\n      const parsed = validatePlanTemplateUsePayload(msg.payload);\n      if (!parsed.ok) {\n        sendResult(ws, ctx, false, parsed.message);\n        return;\n      }\n      await handlePlanTemplateUse(ctx, ws, parsed.value.template);\n      return;\n    }\n    case 'plan.item.update':\n      await handlePlanItemUpdate(\n        ctx,\n        ws,\n        msg.payload as { target: string; status: 'open' | 'in_progress' | 'done' },\n      );\n      return;\n  }\n}\n"],
-  "mappings": ";AAAA,SAAS,4BAA4B;AAIrC,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAgPO,SAAS,+BACd,SACiD;AACjD,MAAI,CAAC,SAAS,OAAO,GAAG;AACtB,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,SAAS;AAAA,IACX;AAAA,EACF;AACA,QAAM,WAAW,QAAQ,UAAU;AACnC,MAAI,OAAO,aAAa,YAAY,SAAS,KAAK,EAAE,WAAW,GAAG;AAChE,WAAO,EAAE,IAAI,OAAO,SAAS,gEAAgE;AAAA,EAC/F;AACA,SAAO,EAAE,IAAI,MAAM,OAAO,EAAE,SAAS,EAAE;AACzC;;;ACnPA,SAAS,WACP,IACA,KACA,IACA,SACM;AACN,MAAI,KAAK,IAAI,EAAE,MAAM,KAAK,OAAO,SAAS,QAAQ,CAAC;AACrD;AAEA,SAAS,eACP,KACA,SAC2B;AAC3B,QAAM,WAAW,QAAQ,WAAW;AACpC,QAAM,WAAW,IAAI,QAAQ,SAAS,MAAM;AAC5C,QAAM,YAAY,OAAO,aAAa,YAAY,SAAS,SAAS,IAAI,WAAW;AACnF,SAAO,EAAE,GAAG,SAAS,UAAU;AACjC;AAwBO,SAAS,eAAe,KAAsB,IAAqB;AACxE,MAAI,KAAK,IAAI,EAAE,MAAM,iBAAiB,SAAS,eAAe,KAAK,EAAE,OAAO,IAAI,QAAQ,MAAM,CAAC,EAAE,CAAC;AACpG;AAEO,SAAS,iBAAiB,KAAsB,IAAqB;AAC1E,MAAI,eAAe,CAAC,CAAC;AACrB,MAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,eAAe,KAAK,CAAC,CAAC,EAAE,CAAC;AACzE,aAAW,IAAI,KAAK,MAAM,qBAAqB;AACjD;AAEO,SAAS,kBACd,KACA,IACA,SACM;AACN,MAAI,CAAC,WAAY,QAAQ,OAAO,UAAa,QAAQ,UAAU,QAAY;AACzE,eAAW,IAAI,KAAK,OAAO,oCAAoC;AAC/D;AAAA,EACF;AACA,QAAM,OACJ,QAAQ,OAAO,SACX,IAAI,QAAQ,MAAM,OAAO,CAAC,MAAM,EAAE,OAAO,QAAQ,EAAE,IACnD,IAAI,QAAQ,MAAM,OAAO,CAAC,GAAG,MAAM,MAAO,QAAQ,KAAgB;AACxE,MAAI,eAAe,IAAI;AACvB,MAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,eAAe,KAAK,EAAE,OAAO,KAAK,CAAC,EAAE,CAAC;AACtF,aAAW,IAAI,KAAK,MAAM,oBAAoB;AAChD;AAEO,SAAS,iBACd,KACA,IACA,SACM;AACN,QAAM,OAAO,IAAI,QAAQ,MAAM,KAAK,CAAC,MAAM,EAAE,OAAO,QAAQ,EAAE;AAC9D,MAAI,CAAC,MAAM;AACT,eAAW,IAAI,KAAK,OAAO,oBAAoB,QAAQ,EAAE,IAAI;AAC7D;AAAA,EACF;AACA,QAAM,OAAO,IAAI,QAAQ,MAAM;AAAA,IAAI,CAAC,MAClC,EAAE,OAAO,QAAQ,KACb,EAAE,GAAG,GAAG,GAAI,QAAQ,WAAW,UAAa,EAAE,QAAQ,QAAQ,OAAO,GAAI,GAAI,QAAQ,eAAe,UAAa,EAAE,YAAY,QAAQ,WAAW,EAAG,IACrJ;AAAA,EACN;AACA,MAAI,eAAe,IAAI;AACvB,MAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,eAAe,KAAK,EAAE,OAAO,KAAK,CAAC,EAAE,CAAC;AACtF,aAAW,IAAI,KAAK,MAAM,SAAS,KAAK,OAAO,YAAY;AAC7D;AAIA,eAAsB,eAAe,KAAsB,IAA8B;AACvF,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,MAAI,OAAO,aAAa,YAAY,UAAU;AAC5C,QAAI;AACF,YAAM,EAAE,UAAU,IAAI,MAAM,OAAO,kBAAkB;AACrD,YAAM,OAAO,MAAM,UAAU,QAAQ;AACrC,UAAI,KAAK,IAAI,EAAE,MAAM,iBAAiB,SAAS,eAAe,KAAK,EAAE,OAAO,MAAM,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;AAAA,IACpG,QAAQ;AACN,UAAI,KAAK,IAAI,EAAE,MAAM,iBAAiB,SAAS,eAAe,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;AAAA,IACrF;AAAA,EACF,OAAO;AACL,QAAI,KAAK,IAAI;AAAA,MACX,MAAM;AAAA,MACN,SAAS,eAAe,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,+BAA+B,CAAC;AAAA,IACnF,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,iBACpB,KACA,IACA,SAIe;AACf,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,MAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,eAAW,IAAI,KAAK,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,UAAM,EAAE,WAAW,UAAU,IAAI,MAAM,OAAO,kBAAkB;AAChE,UAAM,OAAO,MAAM,UAAU,QAAQ;AACrC,QAAI,CAAC,MAAM;AACT,iBAAW,IAAI,KAAK,OAAO,qBAAqB;AAChD;AAAA,IACF;AACA,UAAM,MAAM,KAAK,MAAM,UAAU,CAAC,MAAM,EAAE,OAAO,QAAQ,EAAE;AAC3D,QAAI,QAAQ,IAAI;AACd,iBAAW,IAAI,KAAK,OAAO,SAAS,QAAQ,EAAE,cAAc;AAC5D;AAAA,IACF;AACA,UAAM,WAAW,KAAK,MAAM,GAAG;AAC/B,QAAI,CAAC,UAAU;AAIb,iBAAW,IAAI,KAAK,OAAO,SAAS,QAAQ,EAAE,cAAc;AAC5D;AAAA,IACF;AACA,SAAK,MAAM,GAAG,IAAI,EAAE,GAAG,UAAU,QAAQ,QAAQ,OAAO;AACxD,UAAM,UAAU,UAAU,IAAI;AAC9B,QAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,eAAe,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC,EAAE,CAAC;AAC5F,eAAW,IAAI,KAAK,MAAM,SAAS,QAAQ,EAAE,YAAY,QAAQ,MAAM,GAAG;AAAA,EAC5E,SAAS,KAAK;AACZ,eAAW,IAAI,KAAK,OAAO,OAAO,GAAG,CAAC;AAAA,EACxC;AACF;AAIA,eAAsB,cAAc,KAAsB,IAA8B;AACtF,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,QAAM,YAAY,IAAI,QAAQ,SAAS,MAAM;AAC7C,MAAI,OAAO,aAAa,YAAY,UAAU;AAC5C,QAAI;AACF,YAAM,EAAE,SAAS,IAAI,MAAM,OAAO,kBAAkB;AACpD,YAAM,OAAO,MAAM,SAAS,QAAQ;AACpC,UAAI,KAAK,IAAI;AAAA,QACX,MAAM;AAAA,QACN,SAAS,eAAe,KAAK;AAAA,UAC3B,MAAM,QAAQ;AAAA,YACZ,SAAS;AAAA,YACT;AAAA,YACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YAClC,OAAO,CAAC;AAAA,UACV;AAAA,QACF,CAAC;AAAA,MACH,CAAC;AAAA,IACH,QAAQ;AACN,UAAI,KAAK,IAAI;AAAA,QACX,MAAM;AAAA,QACN,SAAS,eAAe,KAAK;AAAA,UAC3B,MAAM;AAAA,YACJ,SAAS;AAAA,YACT;AAAA,YACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YAClC,OAAO,CAAC;AAAA,UACV;AAAA,QACF,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAAA,EACF,OAAO;AACL,QAAI,KAAK,IAAI;AAAA,MACX,MAAM;AAAA,MACN,SAAS,eAAe,KAAK,EAAE,MAAM,MAAM,OAAO,mDAAmD,CAAC;AAAA,IACxG,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,sBAAsB,KAAsB,IAAe,UAAiC;AAChH,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,QAAM,YAAY,IAAI,QAAQ,SAAS,MAAM;AAC7C,MAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,eAAW,IAAI,KAAK,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,UAAM,EAAE,iBAAiB,UAAU,UAAU,WAAW,YAAY,IAAI,MAAM,OAAO,kBAAkB;AACvG,UAAM,MAAM,gBAAgB,QAAQ;AACpC,QAAI,CAAC,KAAK;AACR,iBAAW,IAAI,KAAK,OAAO,qBAAqB,QAAQ,IAAI;AAC5D;AAAA,IACF;AACA,QAAI,OAAQ,MAAM,SAAS,QAAQ,KAAM,UAAU,SAAS;AAC5D,eAAW,QAAQ,IAAI,OAAO;AAC5B,OAAC,EAAE,KAAK,IAAI,YAAY,MAAM,KAAK,OAAO,KAAK,OAAO;AAAA,IACxD;AACA,UAAM,SAAS,UAAU,IAAI;AAC7B,eAAW,IAAI,KAAK,MAAM,qBAAqB,IAAI,IAAI,YAAO,IAAI,MAAM,MAAM,eAAe;AAC7F,QAAI,UAAU,EAAE,MAAM,gBAAgB,SAAS,eAAe,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;AAAA,EAChF,SAAS,KAAK;AACZ,eAAW,IAAI,KAAK,OAAO,OAAO,GAAG,CAAC;AAAA,EACxC;AACF;AAEA,eAAsB,qBACpB,KACA,IACA,SACe;AACf,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,QAAM,YAAY,IAAI,QAAQ,SAAS,MAAM;AAC7C,MAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,eAAW,IAAI,KAAK,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,UAAM,EAAE,YAAY,kBAAkB,IAAI,MAAM,OAAO,kBAAkB;AACzE,QAAI,UAAU;AACd,UAAM,OAAO,MAAM,WAAW,UAAU,WAAW,OAAO,MAAM;AAC9D,YAAM,SAAS,EAAE;AACjB,YAAM,UAAU,kBAAkB,GAAG,QAAQ,QAAQ,QAAQ,MAAM;AACnE,gBAAU,QAAQ,cAAc;AAChC,aAAO;AAAA,IACT,CAAC;AACD,QAAI,CAAC,SAAS;AACZ,iBAAW,IAAI,KAAK,OAAO,yBAAyB,QAAQ,MAAM,IAAI;AACtE;AAAA,IACF;AACA,eAAW,IAAI,KAAK,MAAM,gCAAgC,QAAQ,MAAM,IAAI;AAC5E,QAAI,UAAU,EAAE,MAAM,gBAAgB,SAAS,eAAe,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;AAAA,EAChF,SAAS,KAAK;AACZ,eAAW,IAAI,KAAK,OAAO,OAAO,GAAG,CAAC;AAAA,EACxC;AACF;AAcA,eAAsB,sBACpB,KACA,IACA,KACe;AACf,UAAQ,IAAI,MAAM;AAAA,IAChB,KAAK;AACH,qBAAe,KAAK,EAAE;AACtB;AAAA,IACF,KAAK;AACH,uBAAiB,KAAK,EAAE;AACxB;AAAA,IACF,KAAK;AACH,wBAAkB,KAAK,IAAI,IAAI,OAAsD;AACrF;AAAA,IACF,KAAK;AACH;AAAA,QACE;AAAA,QACA;AAAA,QACA,IAAI;AAAA,MACN;AACA;AAAA,IACF,KAAK;AACH,YAAM,eAAe,KAAK,EAAE;AAC5B;AAAA,IACF,KAAK;AACH,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA,IAAI;AAAA,MAIN;AACA;AAAA,IACF,KAAK;AACH,YAAM,cAAc,KAAK,EAAE;AAC3B;AAAA,IACF,KAAK,qBAAqB;AACxB,YAAM,SAAS,+BAA+B,IAAI,OAAO;AACzD,UAAI,CAAC,OAAO,IAAI;AACd,mBAAW,IAAI,KAAK,OAAO,OAAO,OAAO;AACzC;AAAA,MACF;AACA,YAAM,sBAAsB,KAAK,IAAI,OAAO,MAAM,QAAQ;AAC1D;AAAA,IACF;AAAA,IACA,KAAK;AACH,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA,IAAI;AAAA,MACN;AACA;AAAA,EACJ;AACF;",
+  "sources": ["../../src/server/handlers/worklist-handlers.ts", "../../src/server/ws-payload-validation.ts"],
+  "sourcesContent": ["import {\n  addPlanItem,\n  emptyPlan,\n  getPlanTemplate,\n  loadPlan,\n  loadTasks,\n  mutatePlan,\n  mutateTasks,\n  savePlan,\n  setPlanItemStatus,\n} from '@wrongstack/core/storage';\nimport type { TodoItem } from '@wrongstack/core/agent';\nimport type { WebSocket } from 'ws';\nimport type { WSServerMessage } from '../types.js';\nimport { validatePlanTemplateUsePayload } from '../ws-payload-validation.js';\n\nexport interface WorklistContext {\n  context: {\n    todos: TodoItem[];\n    meta: Record<string, unknown>;\n    session: { id: string } | null;\n  };\n  send: (ws: WebSocket, msg: WSServerMessage) => void;\n  broadcast: (msg: WSServerMessage) => void;\n  replaceTodos?: ((todos: TodoItem[]) => void) | undefined;\n}\n\nexport interface WorklistMessage {\n  type: string;\n  payload?: unknown;\n}\n\nfunction sendResult(ctx: WorklistContext, ws: WebSocket, success: boolean, message: string): void {\n  ctx.send(ws, { type: 'key.operation_result', payload: { success, message } });\n}\n\nfunction currentSessionId(ctx: WorklistContext): string {\n  return ctx.context.session?.id ?? '';\n}\n\nfunction sessionPayload<T extends Record<string, unknown>>(\n  ctx: WorklistContext,\n  payload: T,\n): T & { sessionId: string } {\n  const provided = payload['sessionId'];\n  const sessionId =\n    typeof provided === 'string' && provided.length > 0 ? provided : currentSessionId(ctx);\n  return { ...payload, sessionId };\n}\n\nfunction planPathOf(ctx: WorklistContext): string | undefined {\n  const value = ctx.context.meta['plan.path'];\n  return typeof value === 'string' && value ? value : undefined;\n}\n\nfunction taskPathOf(ctx: WorklistContext): string | undefined {\n  const value = ctx.context.meta['task.path'];\n  return typeof value === 'string' && value ? value : undefined;\n}\n\nexport function handleTodosGet(ctx: WorklistContext, ws: WebSocket): void {\n  ctx.send(ws, {\n    type: 'todos.updated',\n    payload: sessionPayload(ctx, { todos: [...ctx.context.todos] }),\n  });\n}\n\nexport function handleTodosClear(ctx: WorklistContext, ws: WebSocket): void {\n  ctx.replaceTodos?.([]);\n  sendResult(ctx, ws, true, 'Todos cleared');\n  ctx.broadcast({ type: 'todos.updated', payload: sessionPayload(ctx, { todos: [] }) });\n}\n\nexport function handleTodosRemove(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { id?: string | undefined; index?: number | undefined } | undefined,\n): void {\n  if (!payload) {\n    sendResult(ctx, ws, false, 'Missing id or index');\n    return;\n  }\n  const todos = ctx.context.todos;\n  let targetIndex = -1;\n  if (typeof payload.id === 'string') {\n    targetIndex = todos.findIndex((todo) => todo.id === payload.id);\n  } else if (typeof payload.index === 'number' && payload.index > 0) {\n    targetIndex = payload.index - 1;\n  }\n  const removed = todos[targetIndex];\n  if (targetIndex < 0 || !removed) {\n    sendResult(ctx, ws, false, 'Todo not found');\n    return;\n  }\n  const next = [...todos.slice(0, targetIndex), ...todos.slice(targetIndex + 1)];\n  ctx.replaceTodos?.(next);\n  sendResult(ctx, ws, true, `Removed: ${removed.content}`);\n  ctx.broadcast({ type: 'todos.updated', payload: sessionPayload(ctx, { todos: next }) });\n}\n\nexport function handleTodoUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { id: string; status?: TodoItem['status'] | undefined; activeForm?: string | undefined },\n): void {\n  const index = ctx.context.todos.findIndex((todo) => todo.id === payload.id);\n  const existing = ctx.context.todos[index];\n  if (index === -1 || !existing) {\n    sendResult(ctx, ws, false, 'Todo not found');\n    return;\n  }\n  const next = [...ctx.context.todos];\n  next[index] = {\n    ...existing,\n    status: payload.status ?? existing.status,\n    activeForm: payload.activeForm !== undefined ? payload.activeForm : existing.activeForm,\n  };\n  ctx.replaceTodos?.(next);\n  sendResult(ctx, ws, true, `Todo \"${existing.content}\" updated`);\n  ctx.broadcast({ type: 'todos.updated', payload: sessionPayload(ctx, { todos: next }) });\n}\n\nexport async function handleTasksGet(ctx: WorklistContext, ws: WebSocket): Promise<void> {\n  const taskPath = taskPathOf(ctx);\n  if (!taskPath) {\n    ctx.send(ws, {\n      type: 'tasks.updated',\n      payload: sessionPayload(ctx, { tasks: [], error: 'Task storage not configured.' }),\n    });\n    return;\n  }\n  try {\n    const file = await loadTasks(taskPath);\n    ctx.send(ws, {\n      type: 'tasks.updated',\n      payload: sessionPayload(ctx, { tasks: file?.tasks ?? [] }),\n    });\n  } catch {\n    ctx.send(ws, { type: 'tasks.updated', payload: sessionPayload(ctx, { tasks: [] }) });\n  }\n}\n\nexport async function handleTaskUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: {\n    id: string;\n    status: 'pending' | 'in_progress' | 'blocked' | 'failed' | 'review' | 'completed';\n  },\n): Promise<void> {\n  const taskPath = taskPathOf(ctx);\n  if (!taskPath) {\n    sendResult(ctx, ws, false, 'Task storage not configured.');\n    return;\n  }\n  try {\n    const file = await mutateTasks(taskPath, currentSessionId(ctx), async (tasks) => {\n      const task = tasks.tasks.find((candidate) => candidate.id === payload.id);\n      if (!task) return tasks;\n      task.status = payload.status;\n      task.updatedAt = new Date().toISOString();\n      return tasks;\n    });\n    sendResult(ctx, ws, true, `Task status updated to \"${payload.status}\".`);\n    ctx.broadcast({\n      type: 'tasks.updated',\n      payload: sessionPayload(ctx, { tasks: file.tasks }),\n    });\n  } catch (error) {\n    sendResult(ctx, ws, false, error instanceof Error ? error.message : String(error));\n  }\n}\n\nexport async function handlePlanGet(ctx: WorklistContext, ws: WebSocket): Promise<void> {\n  const planPath = planPathOf(ctx);\n  const emptySnapshot = () => ({\n    version: 1,\n    sessionId: currentSessionId(ctx),\n    updatedAt: new Date().toISOString(),\n    items: [],\n  });\n  if (!planPath) {\n    ctx.send(ws, {\n      type: 'plan.updated',\n      payload: sessionPayload(ctx, {\n        plan: null,\n        error: 'Plan storage is not configured for this session.',\n      }),\n    });\n    return;\n  }\n  try {\n    const plan = await loadPlan(planPath);\n    ctx.send(ws, {\n      type: 'plan.updated',\n      payload: sessionPayload(ctx, { plan: plan ?? emptySnapshot() }),\n    });\n  } catch {\n    ctx.send(ws, {\n      type: 'plan.updated',\n      payload: sessionPayload(ctx, { plan: emptySnapshot() }),\n    });\n  }\n}\n\nexport async function handlePlanTemplateUse(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  template: string,\n): Promise<void> {\n  const planPath = planPathOf(ctx);\n  if (!planPath) {\n    sendResult(ctx, ws, false, 'Plan storage is not configured for this session.');\n    return;\n  }\n  try {\n    const templateDefinition = getPlanTemplate(template);\n    if (!templateDefinition) {\n      sendResult(ctx, ws, false, `Unknown template \"${template}\".`);\n      return;\n    }\n    let plan = (await loadPlan(planPath)) ?? emptyPlan(currentSessionId(ctx));\n    for (const item of templateDefinition.items) {\n      ({ plan } = addPlanItem(plan, item.title, item.details));\n    }\n    await savePlan(planPath, plan);\n    sendResult(\n      ctx,\n      ws,\n      true,\n      `Applied template \"${templateDefinition.name}\" \u2014 ${templateDefinition.items.length} items added.`,\n    );\n    ctx.broadcast({ type: 'plan.updated', payload: sessionPayload(ctx, { plan }) });\n  } catch (error) {\n    sendResult(ctx, ws, false, error instanceof Error ? error.message : String(error));\n  }\n}\n\nexport async function handlePlanItemUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { target: string; status: 'open' | 'in_progress' | 'done' },\n): Promise<void> {\n  const planPath = planPathOf(ctx);\n  if (!planPath) {\n    sendResult(ctx, ws, false, 'Plan storage is not configured for this session.');\n    return;\n  }\n  try {\n    let changed = false;\n    const plan = await mutatePlan(planPath, currentSessionId(ctx), async (currentPlan) => {\n      const before = currentPlan.updatedAt;\n      const next = setPlanItemStatus(currentPlan, payload.target, payload.status);\n      changed = next.updatedAt !== before;\n      return next;\n    });\n    if (!changed) {\n      sendResult(ctx, ws, false, `No plan item matched \"${payload.target}\".`);\n      return;\n    }\n    sendResult(ctx, ws, true, `Plan item status updated to \"${payload.status}\".`);\n    ctx.broadcast({ type: 'plan.updated', payload: sessionPayload(ctx, { plan }) });\n  } catch (error) {\n    sendResult(ctx, ws, false, error instanceof Error ? error.message : String(error));\n  }\n}\n\nexport async function handleWorklistMessage(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  message: WorklistMessage,\n): Promise<void> {\n  switch (message.type) {\n    case 'todos.get':\n      handleTodosGet(ctx, ws);\n      return;\n    case 'todos.clear':\n      handleTodosClear(ctx, ws);\n      return;\n    case 'todos.remove':\n      handleTodosRemove(ctx, ws, message.payload as { id?: string; index?: number } | undefined);\n      return;\n    case 'todo.update':\n      handleTodoUpdate(\n        ctx,\n        ws,\n        message.payload as {\n          id: string;\n          status?: TodoItem['status'];\n          activeForm?: string;\n        },\n      );\n      return;\n    case 'tasks.get':\n      await handleTasksGet(ctx, ws);\n      return;\n    case 'task.update':\n      await handleTaskUpdate(\n        ctx,\n        ws,\n        message.payload as {\n          id: string;\n          status: 'pending' | 'in_progress' | 'blocked' | 'failed' | 'review' | 'completed';\n        },\n      );\n      return;\n    case 'plan.get':\n      await handlePlanGet(ctx, ws);\n      return;\n    case 'plan.template_use': {\n      const parsed = validatePlanTemplateUsePayload(message.payload);\n      if (!parsed.ok) {\n        sendResult(ctx, ws, false, parsed.message);\n        return;\n      }\n      await handlePlanTemplateUse(ctx, ws, parsed.value.template);\n      return;\n    }\n    case 'plan.item.update':\n      await handlePlanItemUpdate(\n        ctx,\n        ws,\n        message.payload as { target: string; status: 'open' | 'in_progress' | 'done' },\n      );\n  }\n}\n", "import { FORBIDDEN_PROTO_KEYS } from '@wrongstack/core/utils';\n\ntype PayloadValidationResult<T> = { ok: true; value: T } | { ok: false; message: string };\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\ninterface ModelSwitchPayload {\n  provider: string;\n  model: string;\n}\n\nexport function validateModelSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ModelSwitchPayload> {\n  if (!isRecord(payload)) {\n    return {\n      ok: false,\n      message: 'model.switch payload must be an object with string provider and model',\n    };\n  }\n  const provider = payload['provider'];\n  const model = payload['model'];\n  if (typeof provider !== 'string' || provider.trim().length === 0) {\n    return { ok: false, message: 'model.switch payload.provider must be a non-empty string' };\n  }\n  if (typeof model !== 'string' || model.trim().length === 0) {\n    return { ok: false, message: 'model.switch payload.model must be a non-empty string' };\n  }\n  return { ok: true, value: { provider, model } };\n}\n\ninterface PrefsUpdatePayload {\n  prefs: Record<string, unknown>;\n}\n\nconst AUTONOMY_VALUES = new Set(['off', 'suggest', 'auto', 'eternal', 'eternal-parallel']);\n\ninterface MailboxMessagesPayload {\n  limit?: number;\n  agentId?: string;\n  unreadOnly?: boolean;\n  incompleteOnly?: boolean;\n}\n\nexport function validateMailboxMessagesPayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxMessagesPayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.messages payload must be an object when provided' };\n  }\n  const limit = payload['limit'];\n  const agentId = payload['agentId'];\n  const unreadOnly = payload['unreadOnly'];\n  const incompleteOnly = payload['incompleteOnly'];\n  if (limit !== undefined && (typeof limit !== 'number' || !Number.isFinite(limit) || limit < 1)) {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.limit must be a positive number when provided',\n    };\n  }\n  if (agentId !== undefined && typeof agentId !== 'string') {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.agentId must be a string when provided',\n    };\n  }\n  if (unreadOnly !== undefined && typeof unreadOnly !== 'boolean') {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.unreadOnly must be a boolean when provided',\n    };\n  }\n  if (incompleteOnly !== undefined && typeof incompleteOnly !== 'boolean') {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.incompleteOnly must be a boolean when provided',\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      ...(limit !== undefined ? { limit: limit as number } : {}),\n      ...(agentId !== undefined ? { agentId: agentId as string } : {}),\n      ...(unreadOnly !== undefined ? { unreadOnly: unreadOnly as boolean } : {}),\n      ...(incompleteOnly !== undefined ? { incompleteOnly: incompleteOnly as boolean } : {}),\n    },\n  };\n}\n\ninterface MailboxAgentsPayload {\n  onlineOnly?: boolean;\n}\n\nconst MAILBOX_SEND_TYPES = new Set([\n  'note',\n  'ask',\n  'assign',\n  'steer',\n  'btw',\n  'broadcast',\n  'status',\n  'result',\n  'review',\n]);\n\nexport interface MailboxSendPayload {\n  requestId: string;\n  to: string;\n  type: 'note' | 'ask' | 'assign' | 'steer' | 'btw' | 'broadcast' | 'status' | 'result' | 'review';\n  audience: 'all' | 'leaders';\n  subject: string;\n  body: string;\n  priority: 'low' | 'normal' | 'high';\n  replyTo?: string | undefined;\n}\n\nexport function validateMailboxSendPayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxSendPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.send payload must be an object' };\n  }\n  const requestId = payload['requestId'];\n  const rawTo = payload['to'];\n  const rawType = payload['type'];\n  const rawAudience = payload['audience'];\n  const rawSubject = payload['subject'];\n  const rawBody = payload['body'];\n  const rawPriority = payload['priority'];\n  const rawReplyTo = payload['replyTo'];\n\n  if (typeof requestId !== 'string' || requestId.trim().length === 0) {\n    return { ok: false, message: 'mailbox.send payload.requestId must be a non-empty string' };\n  }\n  if (typeof rawTo !== 'string' || rawTo.trim().length === 0) {\n    return { ok: false, message: 'mailbox.send payload.to must be a non-empty string' };\n  }\n  if (typeof rawType !== 'string' || !MAILBOX_SEND_TYPES.has(rawType)) {\n    return {\n      ok: false,\n      message: 'mailbox.send payload.type must be a supported non-control message type',\n    };\n  }\n  if (rawAudience !== 'all' && rawAudience !== 'leaders') {\n    return { ok: false, message: 'mailbox.send payload.audience must be all or leaders' };\n  }\n  if (typeof rawSubject !== 'string' || rawSubject.trim().length === 0) {\n    return { ok: false, message: 'mailbox.send payload.subject must be a non-empty string' };\n  }\n  if (typeof rawBody !== 'string' || rawBody.trim().length === 0) {\n    return { ok: false, message: 'mailbox.send payload.body must be a non-empty string' };\n  }\n  if (rawPriority !== 'low' && rawPriority !== 'normal' && rawPriority !== 'high') {\n    return { ok: false, message: 'mailbox.send payload.priority must be low, normal, or high' };\n  }\n  if (rawReplyTo !== undefined && typeof rawReplyTo !== 'string') {\n    return { ok: false, message: 'mailbox.send payload.replyTo must be a string when provided' };\n  }\n\n  const type = rawType as MailboxSendPayload['type'];\n  const to = type === 'broadcast' ? '*' : rawTo.trim();\n  if ((type === 'assign' || type === 'steer') && (to === '*' || to.toLowerCase() === 'all')) {\n    return {\n      ok: false,\n      message: `mailbox.send payload.type ${type} requires a specific recipient`,\n    };\n  }\n\n  return {\n    ok: true,\n    value: {\n      requestId: requestId.trim(),\n      to,\n      type,\n      audience: rawAudience,\n      subject: rawSubject.trim(),\n      body: rawBody.trim(),\n      priority: rawPriority,\n      ...(rawReplyTo !== undefined ? { replyTo: rawReplyTo } : {}),\n    },\n  };\n}\n\nexport function validateMailboxAgentsPayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxAgentsPayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.agents payload must be an object when provided' };\n  }\n  const onlineOnly = payload['onlineOnly'];\n  if (onlineOnly !== undefined && typeof onlineOnly !== 'boolean') {\n    return {\n      ok: false,\n      message: 'mailbox.agents payload.onlineOnly must be a boolean when provided',\n    };\n  }\n  return {\n    ok: true,\n    value: { ...(onlineOnly !== undefined ? { onlineOnly: onlineOnly as boolean } : {}) },\n  };\n}\n\ninterface MailboxPurgePayload {\n  completedMaxAgeMs?: number;\n  incompleteMaxAgeMs?: number;\n}\n\nexport function validateMailboxPurgePayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxPurgePayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.purge payload must be an object when provided' };\n  }\n  const completedMaxAgeMs = payload['completedMaxAgeMs'];\n  const incompleteMaxAgeMs = payload['incompleteMaxAgeMs'];\n  if (\n    completedMaxAgeMs !== undefined &&\n    (typeof completedMaxAgeMs !== 'number' ||\n      !Number.isFinite(completedMaxAgeMs) ||\n      completedMaxAgeMs < 0)\n  ) {\n    return {\n      ok: false,\n      message:\n        'mailbox.purge payload.completedMaxAgeMs must be a non-negative number when provided',\n    };\n  }\n  if (\n    incompleteMaxAgeMs !== undefined &&\n    (typeof incompleteMaxAgeMs !== 'number' ||\n      !Number.isFinite(incompleteMaxAgeMs) ||\n      incompleteMaxAgeMs < 0)\n  ) {\n    return {\n      ok: false,\n      message:\n        'mailbox.purge payload.incompleteMaxAgeMs must be a non-negative number when provided',\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      ...(completedMaxAgeMs !== undefined\n        ? { completedMaxAgeMs: completedMaxAgeMs as number }\n        : {}),\n      ...(incompleteMaxAgeMs !== undefined\n        ? { incompleteMaxAgeMs: incompleteMaxAgeMs as number }\n        : {}),\n    },\n  };\n}\n\ninterface BrainRiskPayload {\n  level: string;\n}\n\nconst BRAIN_RISK_VALUES = new Set(['off', 'low', 'medium', 'high', 'all']);\n\nexport function validateBrainRiskPayload(\n  payload: unknown,\n): PayloadValidationResult<BrainRiskPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'brain.risk payload must be an object with string level' };\n  }\n  const level = payload['level'];\n  if (typeof level !== 'string' || !BRAIN_RISK_VALUES.has(level)) {\n    return {\n      ok: false,\n      message: 'brain.risk payload.level must be one of off, low, medium, high, all',\n    };\n  }\n  return { ok: true, value: { level } };\n}\n\ninterface BrainAskPayload {\n  question: string;\n}\n\nexport function validateBrainAskPayload(\n  payload: unknown,\n): PayloadValidationResult<BrainAskPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'brain.ask payload must be an object with string question' };\n  }\n  const question = payload['question'];\n  if (typeof question !== 'string' || question.trim().length === 0) {\n    return { ok: false, message: 'brain.ask payload.question must be a non-empty string' };\n  }\n  return { ok: true, value: { question: question.trim() } };\n}\n\ninterface BrainConfigSetPayload {\n  patch: Record<string, unknown>;\n}\n\nexport function validateBrainConfigSetPayload(\n  payload: unknown,\n): PayloadValidationResult<BrainConfigSetPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'brain.config.set payload must be an object with a patch object' };\n  }\n  const patch = payload['patch'];\n  if (!isRecord(patch)) {\n    // Field-level validation happens in BrainRuntime.apply(), which throws\n    // BEFORE any live state changes \u2014 this only guards the envelope shape.\n    return { ok: false, message: 'brain.config.set payload.patch must be an object' };\n  }\n  return { ok: true, value: { patch } };\n}\n\ninterface AutonomySwitchPayload {\n  mode: string;\n}\n\nexport function validateAutonomySwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<AutonomySwitchPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'autonomy.switch payload must be an object with string mode' };\n  }\n  const mode = payload['mode'];\n  if (typeof mode !== 'string' || !AUTONOMY_VALUES.has(mode)) {\n    return { ok: false, message: 'autonomy.switch payload.mode must be a valid autonomy mode' };\n  }\n  return { ok: true, value: { mode } };\n}\n\ninterface PlanTemplateUsePayload {\n  template: string;\n}\n\nexport function validatePlanTemplateUsePayload(\n  payload: unknown,\n): PayloadValidationResult<PlanTemplateUsePayload> {\n  if (!isRecord(payload)) {\n    return {\n      ok: false,\n      message: 'plan.template_use payload must be an object with string template',\n    };\n  }\n  const template = payload['template'];\n  if (typeof template !== 'string' || template.trim().length === 0) {\n    return { ok: false, message: 'plan.template_use payload.template must be a non-empty string' };\n  }\n  return { ok: true, value: { template } };\n}\nconst CONTEXT_STRATEGY_VALUES = new Set(['hybrid', 'intelligent', 'selective']);\nconst CONTEXT_MODE_VALUES = new Set(['balanced', 'frugal', 'deep', 'archival']);\nconst TOKEN_SAVING_TIER_VALUES = new Set(['off', 'minimal', 'light', 'medium', 'aggressive']);\nconst ENHANCE_LANGUAGE_VALUES = new Set(['original', 'english']);\nconst LOG_LEVEL_VALUES = new Set(['debug', 'info', 'warn', 'error']);\nconst AUDIT_LEVEL_VALUES = new Set(['minimal', 'standard', 'full']);\nconst REASONING_MODE_VALUES = new Set(['auto', 'on', 'off']);\nconst REASONING_EFFORT_VALUES = new Set([\n  'none',\n  'minimal',\n  'low',\n  'medium',\n  'high',\n  'xhigh',\n  'max',\n]);\nconst CACHE_TTL_VALUES = new Set(['default', '5m', '1h']);\n\nconst BOOLEAN_PREF_KEYS = new Set([\n  'yolo',\n  'chime',\n  'confirmExit',\n  'nextPrediction',\n  'titleAnimation',\n  'enhanceEnabled',\n  'featureMcp',\n  'featurePlugins',\n  'featureMemory',\n  'featureSkills',\n  'featureModelsRegistry',\n  'indexOnStart',\n  'contextAutoCompact',\n  'tgSessionEnd',\n  'tgDelegate',\n  'reasoningPreserve',\n  'hqEnabled',\n  'hqRawContent',\n  'fallbackAuto',\n  'favoriteModelsOnly',\n  'modelAvailabilitySchedule',\n  'breakerEnabled',\n  'debugStream',\n  // Chimera + auto-review master toggles\n  'chimeraEnabled',\n  'autoReviewEnabled',\n  'showModelReasoning',\n]);\n\n/** Keys whose value must be an array of strings (e.g. an ordered model list). */\nconst STRING_ARRAY_PREF_KEYS = new Set([\n  'fallbackModels',\n  'favoriteModels',\n  // Auto-review explicit fallback chain (derived when fallbackProfile is unset;\n  // surfaced for visibility/override).\n  'autoReviewFallbackModels',\n]);\nconst STRING_ARRAY_RECORD_PREF_KEYS = new Set(['fallbackProfiles']);\nconst MODEL_MATRIX_PREF_KEYS = new Set(['modelMatrix']);\n// Object of booleans, e.g. { 'plugin-name': true }. Parity with the embedded\n// server, which accepts `pluginsEnabled` and persists it to\n// extensions.<name>.enabled \u2014 the standalone server rejected it as unknown.\nconst BOOLEAN_RECORD_PREF_KEYS = new Set(['pluginsEnabled']);\n\nconst NUMBER_PREF_KEYS = new Set([\n  'autonomyDelayMs',\n  'autoProceedMaxIterations',\n  'maxIterations',\n  'maxConcurrent',\n  'enhanceDelayMs',\n  'tgLongToolMs',\n  'breakerAutoKillResetMs',\n  // Chimera + auto-review numeric knobs\n  'chimeraMaxFiles',\n  'autoReviewDebounceMs',\n  'autoReviewMaxFilesPerBatch',\n  'autoReviewMaxConcurrentReviews',\n]);\n\nconst STRING_PREF_KEYS = new Set([\n  'hqUrl',\n  'hqToken',\n  'uiLocale',\n  'thinkingWord',\n  'refinerProvider',\n  'refinerModel',\n  'refinerFallbackProfile',\n  // Chimera + auto-review override strings\n  'chimeraProvider',\n  'chimeraModel',\n  'autoReviewProvider',\n  'autoReviewModel',\n  'autoReviewFallbackProfile',\n]);\n\nconst ENUM_PREF_KEYS: Record<string, Set<string>> = {\n  autonomy: AUTONOMY_VALUES,\n  contextStrategy: CONTEXT_STRATEGY_VALUES,\n  contextMode: CONTEXT_MODE_VALUES,\n  tokenSavingTier: TOKEN_SAVING_TIER_VALUES,\n  enhanceLanguage: ENHANCE_LANGUAGE_VALUES,\n  logLevel: LOG_LEVEL_VALUES,\n  auditLevel: AUDIT_LEVEL_VALUES,\n  reasoningMode: REASONING_MODE_VALUES,\n  reasoningEffort: REASONING_EFFORT_VALUES,\n  cacheTtl: CACHE_TTL_VALUES,\n  statuslineMode: new Set(['minimum', 'detailed', 'no-color']),\n  animationStyle: new Set(['rainbow', 'wave', 'pulse', 'dots', 'breathe', 'cycle']),\n  fsAccess: new Set(['unrestricted', 'project']),\n  // Chimera autoFix + auto-review cascade threshold\n  chimeraAutoFix: new Set(['off', 'ask', 'auto']),\n  autoReviewCascadeOn: new Set(['off', 'critical', 'high']),\n  fleetChatVerbosity: new Set(['off', 'full']),\n};\n\nfunction validateModelRuntimeValue(\n  modelRuntime: Record<string, unknown>,\n  path: string,\n): string | null {\n  const reasoning = modelRuntime['reasoning'];\n  if (reasoning !== undefined) {\n    if (!isRecord(reasoning)) return `${path}.reasoning must be an object when provided`;\n    const mode = reasoning['mode'];\n    const effort = reasoning['effort'];\n    const preserve = reasoning['preserve'];\n    if (mode !== undefined && (typeof mode !== 'string' || !REASONING_MODE_VALUES.has(mode))) {\n      return `${path}.reasoning.mode must be one of: ${Array.from(REASONING_MODE_VALUES).join(', ')}`;\n    }\n    if (\n      effort !== undefined &&\n      (typeof effort !== 'string' || !REASONING_EFFORT_VALUES.has(effort))\n    ) {\n      return `${path}.reasoning.effort must be one of: ${Array.from(REASONING_EFFORT_VALUES).join(', ')}`;\n    }\n    if (preserve !== undefined && typeof preserve !== 'boolean') {\n      return `${path}.reasoning.preserve must be a boolean when provided`;\n    }\n  }\n\n  const cache = modelRuntime['cache'];\n  if (cache !== undefined) {\n    if (!isRecord(cache)) return `${path}.cache must be an object when provided`;\n    const ttl = cache['ttl'];\n    if (\n      ttl !== undefined &&\n      (typeof ttl !== 'string' || !CACHE_TTL_VALUES.has(ttl) || ttl === 'default')\n    ) {\n      return `${path}.cache.ttl must be one of: 5m, 1h`;\n    }\n  }\n\n  const parameters = modelRuntime['parameters'];\n  if (parameters !== undefined && !isRecord(parameters)) {\n    return `${path}.parameters must be an object when provided`;\n  }\n\n  return null;\n}\n\nfunction validatePreferenceValue(key: string, value: unknown): string | null {\n  if (BOOLEAN_PREF_KEYS.has(key)) {\n    return typeof value === 'boolean' ? null : `prefs.update payload.${key} must be a boolean`;\n  }\n  if (NUMBER_PREF_KEYS.has(key)) {\n    return typeof value === 'number' && Number.isFinite(value)\n      ? null\n      : `prefs.update payload.${key} must be a finite number`;\n  }\n  if (STRING_PREF_KEYS.has(key)) {\n    return typeof value === 'string' ? null : `prefs.update payload.${key} must be a string`;\n  }\n  if (STRING_ARRAY_PREF_KEYS.has(key)) {\n    return Array.isArray(value) && value.every((v) => typeof v === 'string')\n      ? null\n      : `prefs.update payload.${key} must be an array of strings`;\n  }\n  if (STRING_ARRAY_RECORD_PREF_KEYS.has(key)) {\n    return isRecord(value) &&\n      Object.values(value).every(\n        (v) => Array.isArray(v) && v.every((item) => typeof item === 'string'),\n      )\n      ? null\n      : `prefs.update payload.${key} must be an object of string arrays`;\n  }\n  if (BOOLEAN_RECORD_PREF_KEYS.has(key)) {\n    if (!isRecord(value) || !Object.values(value).every((v) => typeof v === 'boolean')) {\n      return `prefs.update payload.${key} must be an object of booleans`;\n    }\n    // The KEYS here are plugin names that get used as property keys downstream\n    // (extensions.<name>.enabled), so they must be checked too \u2014 validating\n    // only the values let `{\"__proto__\": true}` through to a write that\n    // polluted Object.prototype. The persist layer guards as well; this\n    // rejects loudly instead of silently dropping the entry.\n    const badKey = Object.keys(value).find((k) => FORBIDDEN_PROTO_KEYS.has(k));\n    if (badKey) {\n      return `prefs.update payload.${key} contains a forbidden key: ${badKey}`;\n    }\n    return null;\n  }\n  if (MODEL_MATRIX_PREF_KEYS.has(key)) {\n    if (!isRecord(value)) return `prefs.update payload.${key} must be an object`;\n    for (const entry of Object.values(value)) {\n      if (!isRecord(entry)) return `prefs.update payload.${key} entries must be objects`;\n      const provider = entry['provider'];\n      const model = entry['model'];\n      const fallbackProfile = entry['fallbackProfile'];\n      const modelRuntime = entry['modelRuntime'];\n      if (provider !== undefined && typeof provider !== 'string') {\n        return `prefs.update payload.${key}.provider must be a string when provided`;\n      }\n      if (model !== undefined && typeof model !== 'string') {\n        return `prefs.update payload.${key}.model must be a string when provided`;\n      }\n      if (fallbackProfile !== undefined && typeof fallbackProfile !== 'string') {\n        return `prefs.update payload.${key}.fallbackProfile must be a string when provided`;\n      }\n      if (modelRuntime !== undefined && !isRecord(modelRuntime)) {\n        return `prefs.update payload.${key}.modelRuntime must be an object when provided`;\n      }\n      if (isRecord(modelRuntime)) {\n        const runtimeError = validateModelRuntimeValue(\n          modelRuntime,\n          `prefs.update payload.${key}.modelRuntime`,\n        );\n        if (runtimeError) return runtimeError;\n      }\n      if (model === undefined && fallbackProfile === undefined && modelRuntime === undefined) {\n        return `prefs.update payload.${key} entries require model, fallbackProfile, or modelRuntime`;\n      }\n    }\n    return null;\n  }\n  const allowed = ENUM_PREF_KEYS[key];\n  if (allowed) {\n    return typeof value === 'string' && allowed.has(value)\n      ? null\n      : `prefs.update payload.${key} must be one of: ${Array.from(allowed).join(', ')}`;\n  }\n  return `prefs.update payload contains unknown preference key: ${key}`;\n}\n\nexport function validatePrefsUpdatePayload(\n  payload: unknown,\n): PayloadValidationResult<PrefsUpdatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'prefs.update payload must be an object' };\n  }\n  for (const [key, value] of Object.entries(payload)) {\n    const error = validatePreferenceValue(key, value);\n    if (error) return { ok: false, message: error };\n  }\n  return { ok: true, value: { prefs: payload } };\n}\n\ninterface SkillsCreatePayload {\n  name: string;\n  description: string;\n  scope: 'project' | 'global';\n}\n\nexport function validateSkillsCreatePayload(\n  payload: unknown,\n): PayloadValidationResult<SkillsCreatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'skills.create payload must be an object' };\n  }\n  const name = payload['name'];\n  const description = payload['description'];\n  const scope = payload['scope'];\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'Skill name is required' };\n  }\n  if (!/^[a-z0-9]+(-[a-z0-9]+)*$/.test(name.trim())) {\n    return { ok: false, message: 'Skill name must be kebab-case (e.g. my-new-skill)' };\n  }\n  if (typeof description !== 'string' || description.trim().length === 0) {\n    return { ok: false, message: 'Description/trigger is required' };\n  }\n  if (scope !== 'project' && scope !== 'global') {\n    return { ok: false, message: 'skills.create payload.scope must be project or global' };\n  }\n  return { ok: true, value: { name, description, scope } };\n}\n\ninterface SkillsEditPayload {\n  name: string;\n  body: string;\n}\n\nexport function validateSkillsEditPayload(\n  payload: unknown,\n): PayloadValidationResult<SkillsEditPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'skills.edit payload must be an object' };\n  }\n  const name = payload['name'];\n  const body = payload['body'];\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'Skill name is required' };\n  }\n  if (typeof body !== 'string' || body.length === 0) {\n    return { ok: false, message: 'Skill body is required' };\n  }\n  return { ok: true, value: { name, body } };\n}\n\ninterface ProcessKillPayload {\n  pid: number;\n}\n\nexport function validateProcessKillPayload(\n  payload: unknown,\n): PayloadValidationResult<ProcessKillPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'process.kill payload must be an object with numeric pid' };\n  }\n  const pid = payload['pid'];\n  if (typeof pid !== 'number' || !Number.isInteger(pid) || pid <= 0) {\n    return { ok: false, message: 'process.kill payload.pid must be a positive integer' };\n  }\n  return { ok: true, value: { pid } };\n}\n\ninterface WorkingDirSetPayload {\n  path: string;\n}\n\nexport function validateWorkingDirSetPayload(\n  payload: unknown,\n): PayloadValidationResult<WorkingDirSetPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'working_dir.set payload must be an object with string path' };\n  }\n  const newPath = payload['path'];\n  if (typeof newPath !== 'string' || newPath.trim().length === 0) {\n    return { ok: false, message: 'working_dir.set payload.path must be a non-empty string' };\n  }\n  return { ok: true, value: { path: newPath } };\n}\n\ninterface ModeSwitchPayload {\n  id: string;\n}\n\nexport function validateModeSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ModeSwitchPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mode.switch payload must be an object with string id' };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'mode.switch payload.id must be a non-empty string' };\n  }\n  return { ok: true, value: { id } };\n}\n\ninterface ContextModeIdPayload {\n  id: string;\n}\n\nfunction validateContextModeIdPayload(\n  payload: unknown,\n  type: 'context.mode.switch' | 'context.mode.delete',\n): PayloadValidationResult<ContextModeIdPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: `${type} payload must be an object with string id` };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: `${type} payload.id must be a non-empty string` };\n  }\n  return { ok: true, value: { id } };\n}\n\nexport function validateContextModeSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeIdPayload> {\n  return validateContextModeIdPayload(payload, 'context.mode.switch');\n}\n\nexport function validateContextModeDeletePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeIdPayload> {\n  return validateContextModeIdPayload(payload, 'context.mode.delete');\n}\n\ninterface ContextModeCreatePayload {\n  id: string;\n  name: string;\n  description: string;\n  thresholds: { warn: number; soft: number; hard: number };\n  preserveK: number;\n  eliseThreshold: number;\n}\n\nfunction isFiniteNumber(value: unknown): value is number {\n  return typeof value === 'number' && Number.isFinite(value);\n}\n\nexport function validateContextModeCreatePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeCreatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'context.mode.create payload must be an object' };\n  }\n  const id = payload['id'];\n  const name = payload['name'];\n  const description = payload['description'];\n  const thresholds = payload['thresholds'];\n  const preserveK = payload['preserveK'];\n  const eliseThreshold = payload['eliseThreshold'];\n\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'context.mode.create payload.id must be a non-empty string' };\n  }\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'context.mode.create payload.name must be a non-empty string' };\n  }\n  if (typeof description !== 'string') {\n    return { ok: false, message: 'context.mode.create payload.description must be a string' };\n  }\n  if (!isRecord(thresholds)) {\n    return {\n      ok: false,\n      message:\n        'context.mode.create payload.thresholds must be an object with warn/soft/hard numbers',\n    };\n  }\n  if (\n    !isFiniteNumber(thresholds['warn']) ||\n    !isFiniteNumber(thresholds['soft']) ||\n    !isFiniteNumber(thresholds['hard'])\n  ) {\n    return {\n      ok: false,\n      message: 'context.mode.create payload.thresholds.warn/soft/hard must be finite numbers',\n    };\n  }\n  if (!isFiniteNumber(preserveK)) {\n    return { ok: false, message: 'context.mode.create payload.preserveK must be a finite number' };\n  }\n  if (!isFiniteNumber(eliseThreshold)) {\n    return {\n      ok: false,\n      message: 'context.mode.create payload.eliseThreshold must be a finite number',\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      id,\n      name,\n      description,\n      thresholds: { warn: thresholds['warn'], soft: thresholds['soft'], hard: thresholds['hard'] },\n      preserveK,\n      eliseThreshold,\n    },\n  };\n}\n\ninterface ContextModeUpdatePayload {\n  id: string;\n  name?: string;\n  description?: string;\n  thresholds?: { warn?: number; soft?: number; hard?: number };\n  preserveK?: number;\n  eliseThreshold?: number;\n}\n\nexport function validateContextModeUpdatePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeUpdatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'context.mode.update payload must be an object' };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'context.mode.update payload.id must be a non-empty string' };\n  }\n\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.name must be a string when provided',\n    };\n  }\n\n  const description = payload['description'];\n  if (description !== undefined && typeof description !== 'string') {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.description must be a string when provided',\n    };\n  }\n\n  const thresholds = payload['thresholds'];\n  let validatedThresholds: ContextModeUpdatePayload['thresholds'];\n  if (thresholds !== undefined) {\n    if (!isRecord(thresholds)) {\n      return {\n        ok: false,\n        message: 'context.mode.update payload.thresholds must be an object when provided',\n      };\n    }\n    for (const key of ['warn', 'soft', 'hard'] as const) {\n      const val = thresholds[key];\n      if (val !== undefined && !isFiniteNumber(val)) {\n        return {\n          ok: false,\n          message: `context.mode.update payload.thresholds.${key} must be a finite number when provided`,\n        };\n      }\n    }\n    validatedThresholds = {\n      ...(typeof thresholds['warn'] === 'number' ? { warn: thresholds['warn'] } : {}),\n      ...(typeof thresholds['soft'] === 'number' ? { soft: thresholds['soft'] } : {}),\n      ...(typeof thresholds['hard'] === 'number' ? { hard: thresholds['hard'] } : {}),\n    };\n  }\n\n  const preserveK = payload['preserveK'];\n  if (preserveK !== undefined && !isFiniteNumber(preserveK)) {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.preserveK must be a finite number when provided',\n    };\n  }\n\n  const eliseThreshold = payload['eliseThreshold'];\n  if (eliseThreshold !== undefined && !isFiniteNumber(eliseThreshold)) {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.eliseThreshold must be a finite number when provided',\n    };\n  }\n\n  return {\n    ok: true,\n    value: {\n      id,\n      ...(typeof name === 'string' ? { name } : {}),\n      ...(typeof description === 'string' ? { description } : {}),\n      ...(validatedThresholds !== undefined ? { thresholds: validatedThresholds } : {}),\n      ...(typeof preserveK === 'number' ? { preserveK } : {}),\n      ...(typeof eliseThreshold === 'number' ? { eliseThreshold } : {}),\n    },\n  };\n}\n\ninterface ShellOpenPayload {\n  path: string;\n  target?: 'file' | 'terminal';\n}\n\nexport function validateShellOpenPayload(\n  payload: unknown,\n): PayloadValidationResult<ShellOpenPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'shell.open payload must be an object with string path' };\n  }\n  const path = payload['path'];\n  if (typeof path !== 'string' || path.trim().length === 0) {\n    return { ok: false, message: 'shell.open payload.path must be a non-empty string' };\n  }\n  const target = payload['target'];\n  if (target !== undefined && target !== 'file' && target !== 'terminal') {\n    return {\n      ok: false,\n      message: 'shell.open payload.target must be \"file\" or \"terminal\" when provided',\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      path,\n      ...(target !== undefined ? { target: target as 'file' | 'terminal' } : {}),\n    },\n  };\n}\n\ninterface GitDiffPayload {\n  path: string;\n}\n\nexport function validateGitDiffPayload(payload: unknown): PayloadValidationResult<GitDiffPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'git.diff payload must be an object' };\n  }\n  const path = payload['path'];\n  if (path === undefined || path === null) {\n    return { ok: true, value: { path: '' } };\n  }\n  if (typeof path !== 'string') {\n    return { ok: false, message: 'git.diff payload.path must be a string when provided' };\n  }\n  return { ok: true, value: { path } };\n}\n\ninterface ProjectsAddPayload {\n  root: string;\n  name?: string;\n}\n\nexport function validateProjectsAddPayload(\n  payload: unknown,\n): PayloadValidationResult<ProjectsAddPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'projects.add payload must be an object with string root' };\n  }\n  const root = payload['root'];\n  if (typeof root !== 'string' || root.trim().length === 0) {\n    return { ok: false, message: 'projects.add payload.root must be a non-empty string' };\n  }\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return { ok: false, message: 'projects.add payload.name must be a string when provided' };\n  }\n  return {\n    ok: true,\n    value: { root, ...(typeof name === 'string' ? { name } : {}) },\n  };\n}\n\ninterface ProjectsSelectPayload {\n  root: string;\n  name?: string;\n}\n\nexport function validateProjectsSelectPayload(\n  payload: unknown,\n): PayloadValidationResult<ProjectsSelectPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'projects.select payload must be an object with string root' };\n  }\n  const root = payload['root'];\n  if (typeof root !== 'string' || root.trim().length === 0) {\n    return { ok: false, message: 'projects.select payload.root must be a non-empty string' };\n  }\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return { ok: false, message: 'projects.select payload.name must be a string when provided' };\n  }\n  return {\n    ok: true,\n    value: { root, ...(typeof name === 'string' ? { name } : {}) },\n  };\n}\n"],
+  "mappings": ";AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;;;ACVP,SAAS,4BAA4B;AAIrC,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AA0UO,SAAS,+BACd,SACiD;AACjD,MAAI,CAAC,SAAS,OAAO,GAAG;AACtB,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,SAAS;AAAA,IACX;AAAA,EACF;AACA,QAAM,WAAW,QAAQ,UAAU;AACnC,MAAI,OAAO,aAAa,YAAY,SAAS,KAAK,EAAE,WAAW,GAAG;AAChE,WAAO,EAAE,IAAI,OAAO,SAAS,gEAAgE;AAAA,EAC/F;AACA,SAAO,EAAE,IAAI,MAAM,OAAO,EAAE,SAAS,EAAE;AACzC;;;AD9TA,SAAS,WAAW,KAAsB,IAAe,SAAkB,SAAuB;AAChG,MAAI,KAAK,IAAI,EAAE,MAAM,wBAAwB,SAAS,EAAE,SAAS,QAAQ,EAAE,CAAC;AAC9E;AAEA,SAAS,iBAAiB,KAA8B;AACtD,SAAO,IAAI,QAAQ,SAAS,MAAM;AACpC;AAEA,SAAS,eACP,KACA,SAC2B;AAC3B,QAAM,WAAW,QAAQ,WAAW;AACpC,QAAM,YACJ,OAAO,aAAa,YAAY,SAAS,SAAS,IAAI,WAAW,iBAAiB,GAAG;AACvF,SAAO,EAAE,GAAG,SAAS,UAAU;AACjC;AAEA,SAAS,WAAW,KAA0C;AAC5D,QAAM,QAAQ,IAAI,QAAQ,KAAK,WAAW;AAC1C,SAAO,OAAO,UAAU,YAAY,QAAQ,QAAQ;AACtD;AAEA,SAAS,WAAW,KAA0C;AAC5D,QAAM,QAAQ,IAAI,QAAQ,KAAK,WAAW;AAC1C,SAAO,OAAO,UAAU,YAAY,QAAQ,QAAQ;AACtD;AAEO,SAAS,eAAe,KAAsB,IAAqB;AACxE,MAAI,KAAK,IAAI;AAAA,IACX,MAAM;AAAA,IACN,SAAS,eAAe,KAAK,EAAE,OAAO,CAAC,GAAG,IAAI,QAAQ,KAAK,EAAE,CAAC;AAAA,EAChE,CAAC;AACH;AAEO,SAAS,iBAAiB,KAAsB,IAAqB;AAC1E,MAAI,eAAe,CAAC,CAAC;AACrB,aAAW,KAAK,IAAI,MAAM,eAAe;AACzC,MAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,eAAe,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;AACtF;AAEO,SAAS,kBACd,KACA,IACA,SACM;AACN,MAAI,CAAC,SAAS;AACZ,eAAW,KAAK,IAAI,OAAO,qBAAqB;AAChD;AAAA,EACF;AACA,QAAM,QAAQ,IAAI,QAAQ;AAC1B,MAAI,cAAc;AAClB,MAAI,OAAO,QAAQ,OAAO,UAAU;AAClC,kBAAc,MAAM,UAAU,CAAC,SAAS,KAAK,OAAO,QAAQ,EAAE;AAAA,EAChE,WAAW,OAAO,QAAQ,UAAU,YAAY,QAAQ,QAAQ,GAAG;AACjE,kBAAc,QAAQ,QAAQ;AAAA,EAChC;AACA,QAAM,UAAU,MAAM,WAAW;AACjC,MAAI,cAAc,KAAK,CAAC,SAAS;AAC/B,eAAW,KAAK,IAAI,OAAO,gBAAgB;AAC3C;AAAA,EACF;AACA,QAAM,OAAO,CAAC,GAAG,MAAM,MAAM,GAAG,WAAW,GAAG,GAAG,MAAM,MAAM,cAAc,CAAC,CAAC;AAC7E,MAAI,eAAe,IAAI;AACvB,aAAW,KAAK,IAAI,MAAM,YAAY,QAAQ,OAAO,EAAE;AACvD,MAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,eAAe,KAAK,EAAE,OAAO,KAAK,CAAC,EAAE,CAAC;AACxF;AAEO,SAAS,iBACd,KACA,IACA,SACM;AACN,QAAM,QAAQ,IAAI,QAAQ,MAAM,UAAU,CAAC,SAAS,KAAK,OAAO,QAAQ,EAAE;AAC1E,QAAM,WAAW,IAAI,QAAQ,MAAM,KAAK;AACxC,MAAI,UAAU,MAAM,CAAC,UAAU;AAC7B,eAAW,KAAK,IAAI,OAAO,gBAAgB;AAC3C;AAAA,EACF;AACA,QAAM,OAAO,CAAC,GAAG,IAAI,QAAQ,KAAK;AAClC,OAAK,KAAK,IAAI;AAAA,IACZ,GAAG;AAAA,IACH,QAAQ,QAAQ,UAAU,SAAS;AAAA,IACnC,YAAY,QAAQ,eAAe,SAAY,QAAQ,aAAa,SAAS;AAAA,EAC/E;AACA,MAAI,eAAe,IAAI;AACvB,aAAW,KAAK,IAAI,MAAM,SAAS,SAAS,OAAO,WAAW;AAC9D,MAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,eAAe,KAAK,EAAE,OAAO,KAAK,CAAC,EAAE,CAAC;AACxF;AAEA,eAAsB,eAAe,KAAsB,IAA8B;AACvF,QAAM,WAAW,WAAW,GAAG;AAC/B,MAAI,CAAC,UAAU;AACb,QAAI,KAAK,IAAI;AAAA,MACX,MAAM;AAAA,MACN,SAAS,eAAe,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,+BAA+B,CAAC;AAAA,IACnF,CAAC;AACD;AAAA,EACF;AACA,MAAI;AACF,UAAM,OAAO,MAAM,UAAU,QAAQ;AACrC,QAAI,KAAK,IAAI;AAAA,MACX,MAAM;AAAA,MACN,SAAS,eAAe,KAAK,EAAE,OAAO,MAAM,SAAS,CAAC,EAAE,CAAC;AAAA,IAC3D,CAAC;AAAA,EACH,QAAQ;AACN,QAAI,KAAK,IAAI,EAAE,MAAM,iBAAiB,SAAS,eAAe,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;AAAA,EACrF;AACF;AAEA,eAAsB,iBACpB,KACA,IACA,SAIe;AACf,QAAM,WAAW,WAAW,GAAG;AAC/B,MAAI,CAAC,UAAU;AACb,eAAW,KAAK,IAAI,OAAO,8BAA8B;AACzD;AAAA,EACF;AACA,MAAI;AACF,UAAM,OAAO,MAAM,YAAY,UAAU,iBAAiB,GAAG,GAAG,OAAO,UAAU;AAC/E,YAAM,OAAO,MAAM,MAAM,KAAK,CAAC,cAAc,UAAU,OAAO,QAAQ,EAAE;AACxE,UAAI,CAAC,KAAM,QAAO;AAClB,WAAK,SAAS,QAAQ;AACtB,WAAK,aAAY,oBAAI,KAAK,GAAE,YAAY;AACxC,aAAO;AAAA,IACT,CAAC;AACD,eAAW,KAAK,IAAI,MAAM,2BAA2B,QAAQ,MAAM,IAAI;AACvE,QAAI,UAAU;AAAA,MACZ,MAAM;AAAA,MACN,SAAS,eAAe,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;AAAA,IACpD,CAAC;AAAA,EACH,SAAS,OAAO;AACd,eAAW,KAAK,IAAI,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,EACnF;AACF;AAEA,eAAsB,cAAc,KAAsB,IAA8B;AACtF,QAAM,WAAW,WAAW,GAAG;AAC/B,QAAM,gBAAgB,OAAO;AAAA,IAC3B,SAAS;AAAA,IACT,WAAW,iBAAiB,GAAG;AAAA,IAC/B,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,OAAO,CAAC;AAAA,EACV;AACA,MAAI,CAAC,UAAU;AACb,QAAI,KAAK,IAAI;AAAA,MACX,MAAM;AAAA,MACN,SAAS,eAAe,KAAK;AAAA,QAC3B,MAAM;AAAA,QACN,OAAO;AAAA,MACT,CAAC;AAAA,IACH,CAAC;AACD;AAAA,EACF;AACA,MAAI;AACF,UAAM,OAAO,MAAM,SAAS,QAAQ;AACpC,QAAI,KAAK,IAAI;AAAA,MACX,MAAM;AAAA,MACN,SAAS,eAAe,KAAK,EAAE,MAAM,QAAQ,cAAc,EAAE,CAAC;AAAA,IAChE,CAAC;AAAA,EACH,QAAQ;AACN,QAAI,KAAK,IAAI;AAAA,MACX,MAAM;AAAA,MACN,SAAS,eAAe,KAAK,EAAE,MAAM,cAAc,EAAE,CAAC;AAAA,IACxD,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,sBACpB,KACA,IACA,UACe;AACf,QAAM,WAAW,WAAW,GAAG;AAC/B,MAAI,CAAC,UAAU;AACb,eAAW,KAAK,IAAI,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,UAAM,qBAAqB,gBAAgB,QAAQ;AACnD,QAAI,CAAC,oBAAoB;AACvB,iBAAW,KAAK,IAAI,OAAO,qBAAqB,QAAQ,IAAI;AAC5D;AAAA,IACF;AACA,QAAI,OAAQ,MAAM,SAAS,QAAQ,KAAM,UAAU,iBAAiB,GAAG,CAAC;AACxE,eAAW,QAAQ,mBAAmB,OAAO;AAC3C,OAAC,EAAE,KAAK,IAAI,YAAY,MAAM,KAAK,OAAO,KAAK,OAAO;AAAA,IACxD;AACA,UAAM,SAAS,UAAU,IAAI;AAC7B;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA,qBAAqB,mBAAmB,IAAI,YAAO,mBAAmB,MAAM,MAAM;AAAA,IACpF;AACA,QAAI,UAAU,EAAE,MAAM,gBAAgB,SAAS,eAAe,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;AAAA,EAChF,SAAS,OAAO;AACd,eAAW,KAAK,IAAI,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,EACnF;AACF;AAEA,eAAsB,qBACpB,KACA,IACA,SACe;AACf,QAAM,WAAW,WAAW,GAAG;AAC/B,MAAI,CAAC,UAAU;AACb,eAAW,KAAK,IAAI,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,QAAI,UAAU;AACd,UAAM,OAAO,MAAM,WAAW,UAAU,iBAAiB,GAAG,GAAG,OAAO,gBAAgB;AACpF,YAAM,SAAS,YAAY;AAC3B,YAAM,OAAO,kBAAkB,aAAa,QAAQ,QAAQ,QAAQ,MAAM;AAC1E,gBAAU,KAAK,cAAc;AAC7B,aAAO;AAAA,IACT,CAAC;AACD,QAAI,CAAC,SAAS;AACZ,iBAAW,KAAK,IAAI,OAAO,yBAAyB,QAAQ,MAAM,IAAI;AACtE;AAAA,IACF;AACA,eAAW,KAAK,IAAI,MAAM,gCAAgC,QAAQ,MAAM,IAAI;AAC5E,QAAI,UAAU,EAAE,MAAM,gBAAgB,SAAS,eAAe,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;AAAA,EAChF,SAAS,OAAO;AACd,eAAW,KAAK,IAAI,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,EACnF;AACF;AAEA,eAAsB,sBACpB,KACA,IACA,SACe;AACf,UAAQ,QAAQ,MAAM;AAAA,IACpB,KAAK;AACH,qBAAe,KAAK,EAAE;AACtB;AAAA,IACF,KAAK;AACH,uBAAiB,KAAK,EAAE;AACxB;AAAA,IACF,KAAK;AACH,wBAAkB,KAAK,IAAI,QAAQ,OAAsD;AACzF;AAAA,IACF,KAAK;AACH;AAAA,QACE;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,MAKV;AACA;AAAA,IACF,KAAK;AACH,YAAM,eAAe,KAAK,EAAE;AAC5B;AAAA,IACF,KAAK;AACH,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,MAIV;AACA;AAAA,IACF,KAAK;AACH,YAAM,cAAc,KAAK,EAAE;AAC3B;AAAA,IACF,KAAK,qBAAqB;AACxB,YAAM,SAAS,+BAA+B,QAAQ,OAAO;AAC7D,UAAI,CAAC,OAAO,IAAI;AACd,mBAAW,KAAK,IAAI,OAAO,OAAO,OAAO;AACzC;AAAA,MACF;AACA,YAAM,sBAAsB,KAAK,IAAI,OAAO,MAAM,QAAQ;AAC1D;AAAA,IACF;AAAA,IACA,KAAK;AACH,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,MACV;AAAA,EACJ;AACF;",
   "names": []
 }

package/dist/server/host-routes.d.ts

@@ -0,0 +1,7 @@
+import type { WebSocket } from 'ws';
+import type { WSClientMessage } from './types.js';
+export interface HostRouteHandlers {
+    shutdown: (ws: WebSocket, msg: WSClientMessage) => Promise<void> | void;
+}
+export declare function handleHostRoute(ws: WebSocket, msg: WSClientMessage, handlers: HostRouteHandlers): Promise<boolean>;
+//# sourceMappingURL=host-routes.d.ts.map

package/dist/server/host-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-routes.d.ts","sourceRoot":"","sources":["../../src/server/host-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACzE;AAED,wBAAsB,eAAe,CACnC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,eAAe,EACpB,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAAC,OAAO,CAAC,CAQlB"}

package/dist/server/http-server/analytics-handler.d.ts

@@ -22,6 +22,8 @@ export interface AnalyticsEvent {
     sessionId?: string | undefined;
     userAgent?: string | undefined;
 }
+export declare const ANALYTICS_MAX_BODY_BYTES: number;
+export declare const ANALYTICS_MAX_EVENT_BYTES: number;
 /** POST /api/analytics — ingest a batch of events from the frontend. */
 export declare function handleApiAnalyticsPost(res: http.ServerResponse, req: http.IncomingMessage): Promise<void>;
 /** GET /api/analytics — retrieve the last N events (debug/export). */

package/dist/server/http-server/analytics-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"analytics-handler.d.ts","sourceRoot":"","sources":["../../../src/server/http-server/analytics-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,KAAK,IAAI,MAAM,WAAW,CAAC;AAEvC,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAgED,wEAAwE;AACxE,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,GAAG,EAAE,IAAI,CAAC,eAAe,GACxB,OAAO,CAAC,IAAI,CAAC,CAkCf;AAED,sEAAsE;AACtE,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,0EAA0E;AAC1E,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,IAAI,CAAC,cAAc,GACvB,OAAO,CAAC,IAAI,CAAC,CAaf;AAED,uDAAuD;AACvD,wBAAgB,oBAAoB,IAAI,IAAI,CAI3C;AAED,yDAAyD;AACzD,wBAAgB,kBAAkB,IAAI,SAAS,cAAc,EAAE,CAE9D"}
+{"version":3,"file":"analytics-handler.d.ts","sourceRoot":"","sources":["../../../src/server/http-server/analytics-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,KAAK,IAAI,MAAM,WAAW,CAAC;AAEvC,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAID,eAAO,MAAM,wBAAwB,QAAa,CAAC;AACnD,eAAO,MAAM,yBAAyB,QAAY,CAAC;AAgGnD,wEAAwE;AACxE,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,GAAG,EAAE,IAAI,CAAC,eAAe,GACxB,OAAO,CAAC,IAAI,CAAC,CAmCf;AAED,sEAAsE;AACtE,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAO7F;AAED,0EAA0E;AAC1E,wBAAsB,yBAAyB,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAavF;AAED,uDAAuD;AACvD,wBAAgB,oBAAoB,IAAI,IAAI,CAI3C;AAED,yDAAyD;AACzD,wBAAgB,kBAAkB,IAAI,SAAS,cAAc,EAAE,CAE9D"}

package/dist/server/http-server/api-handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-handlers.d.ts","sourceRoot":"","sources":["../../../src/server/http-server/api-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,KAAK,IAAI,MAAM,WAAW,CAAC;AAEvC,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,OAAO,CAAC,IAAI,CAAC,CAwCf;AAED,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAqCf;AAoJD,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CA8Cf;AAwBD,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CA0Ef;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAuDf;AAED;;;;;;;;;GASG;AACH,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CA+Cf;AAED;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,OAAO,CAAC,IAAI,CAAC,CA4Ef"}
+{"version":3,"file":"api-handlers.d.ts","sourceRoot":"","sources":["../../../src/server/http-server/api-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,KAAK,IAAI,MAAM,WAAW,CAAC;AAEvC,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,OAAO,CAAC,IAAI,CAAC,CAwCf;AAED,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAqCf;AAoJD,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CA+Cf;AAwBD,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CA2Ef;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAwDf;AAED;;;;;;;;;GASG;AACH,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAgDf;AAED;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,OAAO,CAAC,IAAI,CAAC,CA6Ef"}

package/dist/server/http-server.d.ts

@@ -1,6 +1,6 @@
 import * as http from 'node:http';
-import { type TechStackEvent } from './techstack-handlers.js';
 import type { FileWatcherMetrics } from './setup-events.js';
+import { type TechStackEvent } from './techstack-handlers.js';
 export interface CreateHttpServerOptions {
     /** Port to listen on. Defaults to 3456 (or the `PORT` env var). */
     port?: number | undefined;
@@ -8,11 +8,6 @@ export interface CreateHttpServerOptions {
     host: string;
     /** Resolved path to the directory containing the built React assets. */
     distDir: string;
-    /**
-     * WS port — appears in the CSP `connect-src` directive so the browser
-     * is allowed to open a WebSocket back to the local server.
-     */
-    wsPort: number;
     /**
      * Public WebSocket URL injected into the frontend. Use this behind tunnels or
      * reverse proxies where the browser-facing WS URL differs from host:wsPort.
@@ -67,29 +62,31 @@ export interface CreateHttpServerOptions {
      * A getter, not a value — see `TechStackHandlerDeps.getLlm`.
      */
     getLlm?: (() => {
-        provider: import('@wrongstack/core').Provider;
+        provider: import('@wrongstack/core/types').Provider;
         model: string;
     } | undefined) | undefined;
+    /** Permission-governed language_package bridge for approved remediation. */
+    executePackageOperation?: import('./techstack-handlers.js').TechStackHandlerDeps['executePackageOperation'];
 }
-/**
- * Inject the live WS port into the served HTML so the frontend connects to
- * THIS instance's backend instead of a hardcoded default. Enables running
- * several WebUI instances simultaneously on different PORT/WS_PORT pairs
- * (e.g. one per project) — each instance serves HTML stamped with its own
- * WS port.
- *
- * A `<meta>` tag is used deliberately rather than an inline `<script>`: the
- * CSP sets `script-src 'self'`, which would block an inline script, but meta
- * tags are not subject to script-src. The frontend reads
- * `meta[name="wrongstack-ws-port"]` (see ws-client.ts `defaultWsUrl`).
- */
-export declare function injectWsPort(html: string, wsPort: number): string;
 export declare function injectWsConfig(html: string, opts: {
-    wsPort: number;
     publicWsUrl?: string | undefined;
 }): string;
-/** Build the Content-Security-Policy value for the given WS port. */
-export declare function buildCspHeader(wsPort: number, requestHost?: string | undefined, publicWsUrl?: string | undefined): string;
+/**
+ * Build the Content-Security-Policy value for the WebUI.
+ *
+ * Adds explicit `ws://`/`wss://` entries for loopback addresses (`127.0.0.1`,
+ * `localhost`) so `connect-src` covers WebSocket even in strict CSP
+ * implementations that distinguish `ws:` from `http:` origins.
+ *
+ * @param publicWsUrl - Optional public-facing WS URL (tunnel/reverse-proxy).
+ *   When set, this origin is added to `connect-src` as a `ws://`/`wss://` entry.
+ * @param host - The server bind host. When it matches a known loopback address
+ *   (`127.0.0.1`, `::1`, `[::1]`, or `localhost`), explicit `ws://`/`wss://`
+ *   entries for all three canonical loopback hosts are added to `connect-src`.
+ * @param port - The server listen port. Defaults to `3456`. Unnecessary when
+ *   only publicWsUrl is used (no loopback branch).
+ */
+export declare function buildCspHeader(publicWsUrl?: string | undefined, host?: string, port?: number): string;
 /**
  * Returns true when `candidate` (a fully-resolved absolute path) lies
  * strictly inside `distDir` (or equals it). Used to reject path-traversal

package/dist/server/http-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-server.d.ts","sourceRoot":"","sources":["../../src/server/http-server.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAsBlC,OAAO,EAQL,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,MAAM,WAAW,uBAAuB;IACtC,mEAAmE;IACnE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,kFAAkF;IAClF,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACnC;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACrC;;;OAGG;IACH,cAAc,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAChD;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC;IACvC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IACjE;;;;;OAKG;IACH,MAAM,CAAC,EACH,CAAC,MAAM;QAAE,QAAQ,EAAE,OAAO,kBAAkB,EAAE,QAAQ,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC,GACpF,SAAS,CAAC;CACf;AAYD;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CASjE;AAUD,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GACzD,MAAM,CAQR;AAiED,qEAAqE;AACrE,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,EAChC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,GAC/B,MAAM,CAoBR;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAIxE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAMvD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,uBAAuB,GAAG,IAAI,CAAC,MAAM,CAye3E"}
+{"version":3,"file":"http-server.d.ts","sourceRoot":"","sources":["../../src/server/http-server.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAuBlC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAWL,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAC;AAQjC,MAAM,WAAW,uBAAuB;IACtC,mEAAmE;IACnE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,kFAAkF;IAClF,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACnC;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACrC;;;OAGG;IACH,cAAc,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAChD;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC;IACvC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IACjE;;;;;OAKG;IACH,MAAM,CAAC,EACH,CAAC,MAAM;QAAE,QAAQ,EAAE,OAAO,wBAAwB,EAAE,QAAQ,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC,GAC1F,SAAS,CAAC;IACd,4EAA4E;IAC5E,uBAAuB,CAAC,EAAE,OAAO,yBAAyB,EAAE,oBAAoB,CAAC,yBAAyB,CAAC,CAAC;CAC7G;AAoBD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAAG,MAAM,CAU/F;AAkED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,cAAc,CAC5B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,EAChC,IAAI,CAAC,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,MAAM,GACZ,MAAM,CA4BR;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAIxE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAMvD;AAmBD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,uBAAuB,GAAG,IAAI,CAAC,MAAM,CA6f3E"}

package/dist/server/index.d.ts

@@ -8,15 +8,23 @@
  *
  * The package's `exports["./server"]` field points here.
  */
+export { type AutonomyRouteHandlers, createAutonomyRouteHandlers, handleAutonomyRoute, } from './autonomy-routes.js';
 export { bootConfig, patchConfig } from './boot.js';
 export type { BrainRouteHandlers } from './brain-routes.js';
 export { handleBrainRoute } from './brain-routes.js';
+export { type ChronicleRouteContext, type ChronicleRouteEngine, handleChronicleRoute, } from './chronicle-routes.js';
+export { type ClientTransportRouteHandlers, handleClientTransportRoute, } from './client-transport-routes.js';
 export { setupWebUICodebaseIndexing } from './codebase-indexing.js';
 export { type CodeMapFileTarget, type CodeMapOperation, extractCodeMapFileTargets, normalizeCodeMapFileTarget, } from './codemap-telemetry.js';
 export { type CollaborationHandlerOptions, CollaborationWebSocketHandler, } from './collaboration-ws-handler.js';
 export { type CompletionHandlerOptions, type CompletionItemKind, type CompletionSuggestion, createToolLspCompletionSource, handleCompletionRequest, type LspCompletionSource, type LspCompletionSourceRequest, } from './completion-handlers.js';
+export { type CompletionRouteHandlers, handleCompletionRoute } from './completion-routes.js';
+export { type ContentRouteContext, handleContentRoute } from './content-routes.js';
+export { type ConversationRouteHandlers, handleConversationRoute, } from './conversation-routes.js';
+export { createConversationOperations, type ConversationOperationsContext, type ConversationRunControl, } from './conversation-operations.js';
+export { createConnectionLifecycle, type ConnectionLifecycleOptions, } from './connection-lifecycle.js';
 export { type CustomContextMode, type CustomModeStore, createCustomModeStore, } from './custom-context-modes.js';
-export { type DesignContext, handleDesignList, handleDesignMaterialize, handleDesignSet, handleDesignState, handleDesignUse, handleDesignVerify, } from './design-handlers.js';
+export { type DesignContext, handleDesignList, handleDesignMaterialize, handleDesignSet, handleDesignState, handleDesignSwap, handleDesignTune, handleDesignUse, handleDesignVerify, } from './design-handlers.js';
 export { createEternalSubscription, type EternalBroadcast, type EternalSubscribe, type EternalSubscription, } from './eternal-iteration-broadcast.js';
 export { handleFilesList, handleFilesRead, handleFilesTree, handleFilesWrite, } from './file-handlers.js';
 export { isHiddenEntry, rankFiles, SKIP_DIRS } from './file-picker.js';
@@ -24,66 +32,91 @@ export { handleGitChanges, handleGitDiff, handleGitInfo } from './git-handlers.j
 export { handleGoalGet } from './goal-handlers.js';
 export type { GoalRouteHandlers } from './goal-routes.js';
 export { handleGoalRoute } from './goal-routes.js';
+export { type GoalSnapshotRouteHandlers, handleGoalSnapshotRoute, } from './goal-snapshot-routes.js';
 export { GoalWebSocketHandler } from './goal-ws-handler.js';
 export type { WorklistContext } from './handlers/worklist-handlers.js';
 export { handleWorklistMessage } from './handlers/worklist-handlers.js';
+export { type HostRouteHandlers, handleHostRoute } from './host-routes.js';
 export { clearAnalyticsBuffer, getAnalyticsBuffer, handleApiAnalyticsGet, handleApiAnalyticsPost, handleApiAnalyticsSummary, } from './http-server/analytics-handler.js';
 export type { CreateHttpServerOptions } from './http-server.js';
-export { buildCspHeader, createHttpServer, decodeSessionId, injectWsConfig, injectWsPort, isInsideDist, } from './http-server.js';
+export { buildCspHeader, createHttpServer, decodeSessionId, injectWsConfig, isInsideDist, } from './http-server.js';
 export { defaultBaseDir, formatInstances, isPidAlive, listInstances, registerInstance, registryPath, unregisterInstance, type WebUIInstanceRecord, } from './instance-registry.js';
-export type { KanbanBoardPage } from './kanban-routes.js';
-export { paginateKanbanBoards } from './kanban-routes.js';
+export { handleIntrospectionRoute, type IntrospectionRouteContext, } from './introspection-routes.js';
+export { handleKanbanTaskDispatch, type KanbanDispatchContext, type KanbanDispatchResult, type KanbanTaskDispatcher, parseResolvedDispatchRoute, type ResolvedDispatchRoute, } from './kanban-dispatch.js';
+export { handleKanbanHostRoute, type KanbanHostRouteHandlers } from './kanban-host-routes.js';
+export type { KanbanBoardPage, KanbanRouteContext } from './kanban-routes.js';
+export { handleKanbanRoute, paginateKanbanBoards } from './kanban-routes.js';
 export { createShutdown, registerShutdownHandlers } from './lifecycle.js';
-export { handleMailboxMessages } from './mailbox-handlers.js';
-export type { MailboxRouteHandlers } from './mailbox-routes.js';
-export { handleMailboxRoute } from './mailbox-routes.js';
+export { handleConfigDoctor, type ConfigDoctorDeps, } from './config-doctor.js';
+export { getMailboxForDeps, handleMailboxAgents, handleMailboxClear, handleMailboxCompact, handleMailboxMessages, handleMailboxPurge, type MailboxHandlerDeps, } from './mailbox-handlers.js';
+export { createMailboxRouteHandlers, handleMailboxRoute, type MailboxRouteContext, type MailboxRouteHandlers, } from './mailbox-routes.js';
 export { handleMcpAdd, handleMcpDisable, handleMcpDiscover, handleMcpEnable, handleMcpList, handleMcpPromptGet, handleMcpPrompts, handleMcpRemove, handleMcpResourceRead, handleMcpResources, handleMcpRestart, handleMcpSleep, handleMcpUpdate, handleMcpWake, } from './mcp-handlers.js';
+export type { McpRouteHandlers } from './mcp-routes.js';
 export { handleMcpRoute } from './mcp-routes.js';
-export { handleMemoryList, handleSuperMemoryBackfillRecoverable, handleSuperMemoryCandidateResolve, handleSuperMemoryDelete, handleSuperMemoryForFile, handleSuperMemoryGet, handleSuperMemoryGraph, handleSuperMemoryList, handleSuperMemoryListPage, handleSuperMemoryRecover, handleSuperMemoryRemember, handleSuperMemoryUpdate, } from './memory-handlers.js';
+export { handleMemoryList, handleSageBackfillRecoverable, handleSageCandidateResolve, handleSageDelete, handleSageForFile, handleSageGet, handleSageGraph, handleSageList, handleSageListPage, handleSageRecover, handleSageRemember, handleSageUpdate, } from './memory-handlers.js';
+export { handleMemoryRoute, type MemoryRouteContext } from './memory-routes.js';
+export { createModeOperations, type ModeOperationsContext } from './mode-operations.js';
 export type { ModeRouteHandlers } from './mode-routes.js';
-export { handleModeRoute } from './mode-routes.js';
+export { createModeRouteHandlers, handleModeRoute } from './mode-routes.js';
 export { resolveProviderCatalogForModels, resolveProviderModelMetadata } from './model-catalog.js';
+export { createModelOperations, type ModelOperationsContext, type ModelRefinePayload, } from './model-operations.js';
 export { browserOpenCommand, openBrowser } from './open-browser.js';
 export { isPathInside, resolveWorkingDirInsideProject } from './path-containment.js';
-export type { PendingConfirm } from './pending-confirms.js';
-export { resolveAllPendingConfirms, resolveYoloEligiblePendingConfirms, } from './pending-confirms.js';
+export type { ConfirmDecision, PendingConfirm } from './pending-confirms.js';
+export { isDestructivePendingConfirm, resolveAllPendingConfirms, resolveYoloEligiblePendingConfirms, } from './pending-confirms.js';
 export { findFreePort, getSurfaceDefaultPorts, isPortFree, SURFACE_DEFAULT_PORTS, type SurfaceKind, surfaceLabel, } from './port-utils.js';
-export { persistPrefsToConfig } from './pref-helpers.js';
-export { handlePrefsRoute } from './prefs-routes.js';
+export { ensureDistDir, resolveDistDir, startStaticServe, type EnsureDistDeps, type ResolveDistOptions, type StaticServeDeps, type StaticServeHandle, type StaticServeOptions, } from './frontend-static-serve.js';
+export { announceWebuiReady, createWebuiShutdown, registerWebuiInstance, registerWebuiSignalHandlers, type AnnounceWebuiReadyParams, type RegisterWebuiInstanceDeps, type RegisterWebuiInstanceParams, type WebuiShutdownResources, } from './embedded-lifecycle.js';
+export { createStreamCoalescer, type StreamCoalescer, type StreamCoalescerDeps, type ToolProgressPayload, } from './stream-coalescer.js';
+export { createWebuiClientPresence, type WebuiClientPresence, type WebuiClientPresenceDeps, type WebuiHqConnection, type WebuiHqConnectionOptions, } from './client-presence.js';
+export { handleBrainAsk, handleBrainConfigGet, handleBrainConfigSet, handleBrainRisk, handleBrainStatus, type BrainHandlerContext, type BrainLogEntry, type BrainTransportContext, } from './brain-handlers.js';
+export { buildTaskGraphFromGoalPhase, buildTaskGraphFromSddSnapshot, createKanbanRunMirror, type KanbanRunMirror, type KanbanRunMirrorDeps, } from './kanban-run-mirror.js';
+export { createKanbanSupervisor, type KanbanSupervisor, type KanbanSupervisorDeps, type KanbanSupervisorDispatchOptions, } from './kanban-supervisor.js';
+export { seedContextMeta } from './context-meta.js';
+export { type ConfigWriteLockHolder, type PrefHelperDeps, PREF_KEYS, persistPrefsToConfig, prefSnapshot, } from './pref-helpers.js';
+export { handleAutonomySwitch, handlePrefsGet, handlePrefsUpdate, type PrefsHandlerContext, } from './prefs-handlers.js';
+export { createPrefsRouteHandlers, handlePrefsRoute, type PrefsRouteHandlers, } from './prefs-routes.js';
 export { handleProcessKill, handleProcessKillAll, handleProcessList, } from './process-handlers.js';
+export { handleProcessRoute, type ProcessRouteHandlers } from './process-routes.js';
+export { applyEmbeddedModelSwitch, broadcastEmbeddedGoalSnapshot, createEmbeddedConversationRoutes, createEmbeddedProjectRoutes, createEmbeddedProviderOperations, createEmbeddedSessionRoutes, type EmbeddedAgentConfigContext, type EmbeddedConversationContext, type EmbeddedHostTransport, type EmbeddedProjectContext, type EmbeddedProviderContext, type EmbeddedProviderStore, type EmbeddedSessionContext, type EmbeddedSessionOptions, } from './embedded-host-adapters.js';
+export { createEmbeddedMessageRouter, type EmbeddedMessageRouter, type EmbeddedMessageRouterDeps, type EmbeddedMessageRouterOptions, } from './embedded-message-router.js';
+export { createRouteFamilyDispatcher, type RouteFamilyDispatcher, type RouteFamilyDispatcherOptions, type RouteFamilyTable, } from './route-family-dispatcher.js';
 export type { ProjectRouteHandlers } from './project-routes.js';
 export { handleProjectRoute } from './project-routes.js';
-export { ensureProjectDataDir, loadManifest, projectsJsonPath, saveManifest, } from './projects-manifest.js';
+export { createProjectHandlers, type ProjectHandlersContext } from './project-handlers.js';
+export { ensureProjectDataDir, loadManifest, projectsJsonPath, saveManifest, touchProjectInManifest, } from './projects-manifest.js';
 export { handlePromptsContent, handlePromptsCreate, handlePromptsFavorite, handlePromptsList, handlePromptsRecent, handlePromptsSearch, handlePromptsUsed, type PromptsContext, } from './prompts-handlers.js';
 export { loadSavedProviders, saveProviders } from './provider-config-io.js';
 export { createProviderConfigIO } from './provider-config-standalone.js';
-export type { SavedProviderView } from './provider-handlers.js';
-export { createProviderHandlers, projectSavedProviders } from './provider-handlers.js';
+export { createProviderHandlers, createProviderOperations, type ProviderOperationsDeps, type ProviderPersistence, probeModelDescriptors, projectSavedProviders, type SavedProviderView, } from './provider-handlers.js';
 export { addProvider, deleteKey, type KeyOpResult, maskedKey, normalizeKeys, type ProvidersRecord, removeProvider, setActiveKey, upsertKey, writeKeysBack, } from './provider-keys.js';
-export type { ProviderRouteHandlers } from './provider-routes.js';
+export type { ProviderMutationHandlers, ProviderRouteHandlers } from './provider-routes.js';
 export { handleProviderRoute } from './provider-routes.js';
 export type { ProviderStore } from './provider-store.js';
 export { createConfigWriteLock, createProviderStore } from './provider-store.js';
-export { handleSddBoardRoute } from './sdd-board-routes.js';
+export { handleSddBoardRoute, type SddBoardRouteHandlers } from './sdd-board-routes.js';
 export { SddBoardWebSocketHandler } from './sdd-board-ws-handler.js';
-export { handleSddWizardRoute } from './sdd-wizard-routes.js';
+export { handleSddWizardRoute, type SddWizardRouteHandlers } from './sdd-wizard-routes.js';
 export { buildSddWizardDeps, type SddWizardWiringOptions, type StartSddRunFromGraphConfig, type StartSddRunFromGraphDeps, startSddRunFromGraph, } from './sdd-wizard-wiring.js';
 export { type SddWizardDeps, SddWizardWebSocketHandler } from './sdd-wizard-ws-handler.js';
 export { type SessionHistoryWireEntry, toSessionHistoryEntries, toSessionHistoryEntry, } from './session-history.js';
 export type { SessionRouteHandlers } from './session-routes.js';
 export { handleSessionRoute } from './session-routes.js';
+export { createSessionHandlers, type SessionHandlersContext } from './session-handlers.js';
 export { setupEvents, statusProjectHashFromWatchFilename } from './setup-events.js';
 export type { ShellGitRouteHandlers } from './shell-git-routes.js';
 export { handleShellGitRoute } from './shell-git-routes.js';
-export { handleShellOpen, type ShellOpenRequest, type ShellOpenResult, type ShellOpenTarget, } from './shell-open.js';
+export { handleShellOpen, type ShellOpenOptions, type ShellOpenRequest, type ShellOpenResult, type ShellOpenTarget, } from './shell-open.js';
 export { handleSkillsContent, handleSkillsCreate, handleSkillsEdit, handleSkillsExport, handleSkillsInstall, handleSkillsList, handleSkillsUninstall, handleSkillsUpdate, type SkillsContext, } from './skills-handlers.js';
-export { handleSpecsRoute } from './specs-routes.js';
+export { handleSpecsRoute, type SpecsRouteHandlers } from './specs-routes.js';
 export { SpecsWebSocketHandler } from './specs-ws-handler.js';
 export { startWebUI } from './start-webui.js';
 export { TerminalWebSocketHandler } from './terminal-ws-handler.js';
 export { type ContextBreakdown, estimateContextBreakdown, estimateTokens, type MessageTokenEntry, messagePreview, messageTokens, stringifyContent, type ToolTokenEntry, } from './token-estimator.js';
 export type { BackendServices, ConnectedClient, WebUIOptions, WSClientMessage, WSServerMessage, } from './types.js';
-export { computeUsageCost, getCostRates } from './usage-cost.js';
+export { computeUsageCost, getCostRates, type CostRates, type TokenUsage, } from './usage-cost.js';
+export { createWorklistRouteHandlers, handleWorklistRoute, type WorklistRouteContext, type WorklistRouteHandlers, } from './worklist-routes.js';
+export { handleWorktreeRoute, type WorktreeRouteHandlers } from './worktree-routes.js';
 export { WorktreeWebSocketHandler } from './worktree-ws-handler.js';
 export { extractToken, extractTokenFromCookie, hostHeaderOk, isLoopbackBind, isLoopbackHostname, isWildcardBind, tokenMatches, type VerifyClientInput, verifyClient, } from './ws-auth.js';
 export { validateAutonomySwitchPayload, validateBrainAskPayload, validateBrainRiskPayload, validateContextModeCreatePayload, validateContextModeDeletePayload, validateContextModeSwitchPayload, validateContextModeUpdatePayload, validateGitDiffPayload, validateMailboxAgentsPayload, validateMailboxMessagesPayload, validateMailboxPurgePayload, validateModelSwitchPayload, validateModeSwitchPayload, validatePlanTemplateUsePayload, validatePrefsUpdatePayload, validateProcessKillPayload, validateProjectsAddPayload, validateProjectsSelectPayload, validateShellOpenPayload, validateSkillsCreatePayload, validateSkillsEditPayload, validateWorkingDirSetPayload, } from './ws-payload-validation.js';