@wrongstack/webui-server 0.293.0 → 0.295.1

package/dist/server/memory-handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory-handlers.d.ts","sourceRoot":"","sources":["../../src/server/memory-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AA2IpC;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAmB7F;AA+BD;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,SAAS,EACb,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,IAAI,CAAC,CAcf;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,yBAAyB,CAC7C,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,IAAI,CAAC,CA0Df;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,IAAI,CAAC,CAuBf;AAED,yFAAyF;AACzF,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,IAAI,CAAC,CAwCf;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,IAAI,CAAC,CA8Bf;AAED;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC7C,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,IAAI,CAAC,CAoCf;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,IAAI,CAAC,CAkCf;AAED;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAC5C,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,IAAI,CAAC,CA6Cf;AAED;;;;;;;;GAQG;AACH,wBAAsB,iCAAiC,CACrD,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,IAAI,CAAC,CAuDf;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,oCAAoC,CACxD,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,IAAI,CAAC,CA8Cf;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,IAAI,CAAC,CA2Bf"}
+{"version":3,"file":"memory-handlers.d.ts","sourceRoot":"","sources":["../../src/server/memory-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AA0BpC;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAoB5F;AA+BD;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAe1F;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,UAAU,GACtB,OAAO,CAAC,IAAI,CAAC,CA2Df;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,UAAU,GACtB,OAAO,CAAC,IAAI,CAAC,CAwBf;AAED,yFAAyF;AACzF,wBAAsB,eAAe,CACnC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,UAAU,GACtB,OAAO,CAAC,IAAI,CAAC,CAyCf;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,UAAU,GACtB,OAAO,CAAC,IAAI,CAAC,CA+Bf;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,UAAU,GACtB,OAAO,CAAC,IAAI,CAAC,CAqCf;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,UAAU,GACtB,OAAO,CAAC,IAAI,CAAC,CA4Cf;AAED;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,UAAU,GACtB,OAAO,CAAC,IAAI,CAAC,CA8Cf;AAED;;;;;;;;GAQG;AACH,wBAAsB,0BAA0B,CAC9C,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,UAAU,GACtB,OAAO,CAAC,IAAI,CAAC,CAwDf;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,6BAA6B,CACjD,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,UAAU,GACtB,OAAO,CAAC,IAAI,CAAC,CA+Cf;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,UAAU,GACtB,OAAO,CAAC,IAAI,CAAC,CA4Bf"}

package/dist/server/memory-routes.d.ts

@@ -0,0 +1,11 @@
+import type { MemoryPort } from '@wrongstack/core/types';
+import type { WebSocket } from 'ws';
+import type { WSClientMessage, WSServerMessage } from './types.js';
+export interface MemoryRouteContext {
+    getMemoryStore: () => MemoryPort | undefined;
+    send: (ws: WebSocket, message: WSServerMessage) => void;
+    sendResult: (ws: WebSocket, success: boolean, message: string) => void;
+}
+/** Canonical Memory/Sage routing and unavailable-store behavior. */
+export declare function handleMemoryRoute(ctx: MemoryRouteContext, ws: WebSocket, message: WSClientMessage): Promise<boolean>;
+//# sourceMappingURL=memory-routes.d.ts.map

package/dist/server/memory-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-routes.d.ts","sourceRoot":"","sources":["../../src/server/memory-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAepC,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEnE,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,MAAM,UAAU,GAAG,SAAS,CAAC;IAC7C,IAAI,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,KAAK,IAAI,CAAC;IACxD,UAAU,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACxE;AAiBD,oEAAoE;AACpE,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,kBAAkB,EACvB,EAAE,EAAE,SAAS,EACb,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,OAAO,CAAC,CA+ClB"}

package/dist/server/message-dispatcher.d.ts

@@ -18,7 +18,7 @@
  */
 import type { WebSocket } from 'ws';
 import type { PendingConfirm } from './pending-confirms.js';
-import type { AllRoutes, WebuiCallbacks, WebuiDeps, WebuiMutableState } from './routes.js';
+import type { AllRoutes, WebuiDeps, WebuiMutableState } from './routes.js';
 import type { ConnectedClient, WSClientMessage } from './types.js';
 /**
  * Shared run-lock control. `user_message` acquires/releases it around
@@ -33,7 +33,6 @@ interface RunLockControl {
 interface MessageDispatcherOptions {
     state: WebuiMutableState;
     deps: WebuiDeps;
-    cb: WebuiCallbacks;
     routes: AllRoutes;
     /** Prompt-library context ({ promptLoader, promptUsage }). */
     promptsCtx: {
@@ -52,8 +51,8 @@ interface MessageDispatcherOptions {
 /**
  * Build the inbound message dispatcher. Mirrors the `handleMessage` closure
  * that lived inline in `startWebUI`. Reads live config/session/projectRoot
- * through `state`, services through `deps`, and the boot-local closures
- * through `cb` — same reference semantics, no behaviour change.
+ * through `state` and services through `deps` — same reference semantics,
+ * no behaviour change.
  */
 export declare function createMessageDispatcher(opts: MessageDispatcherOptions): (ws: WebSocket, _client: ConnectedClient, msg: WSClientMessage) => Promise<void>;
 export {};

package/dist/server/message-dispatcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"message-dispatcher.d.ts","sourceRoot":"","sources":["../../src/server/message-dispatcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAuBH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AA2CpC,OAAO,KAAK,EAAmB,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAc7E,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAgB3F,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAKnE;;;;;GAKG;AACH,UAAU,cAAc;IACtB,GAAG,IAAI,eAAe,GAAG,IAAI,CAAC;IAC9B,GAAG,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,GAAG,IAAI,CAAC;CACzC;AACD,UAAU,wBAAwB;IAChC,KAAK,EAAE,iBAAiB,CAAC;IACzB,IAAI,EAAE,SAAS,CAAC;IAChB,EAAE,EAAE,cAAc,CAAC;IACnB,MAAM,EAAE,SAAS,CAAC;IAClB,8DAA8D;IAC9D,UAAU,EAAE;QAAE,YAAY,EAAE,OAAO,CAAC;QAAC,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC;IAC5D,6EAA6E;IAC7E,gBAAgB,EAAE;QAAE,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,CAAC;IAChE,6DAA6D;IAC7D,OAAO,EAAE,cAAc,CAAC;IACxB,2EAA2E;IAC3E,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC9C;AAqBD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,wBAAwB,GAC7B,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CA4sBlF"}
+{"version":3,"file":"message-dispatcher.d.ts","sourceRoot":"","sources":["../../src/server/message-dispatcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAYpC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAK5D,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAInE;;;;;GAKG;AACH,UAAU,cAAc;IACtB,GAAG,IAAI,eAAe,GAAG,IAAI,CAAC;IAC9B,GAAG,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,GAAG,IAAI,CAAC;CACzC;AACD,UAAU,wBAAwB;IAChC,KAAK,EAAE,iBAAiB,CAAC;IACzB,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,SAAS,CAAC;IAClB,8DAA8D;IAC9D,UAAU,EAAE;QAAE,YAAY,EAAE,OAAO,CAAC;QAAC,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC;IAC5D,6EAA6E;IAC7E,gBAAgB,EAAE;QAAE,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,CAAC;IAChE,6DAA6D;IAC7D,OAAO,EAAE,cAAc,CAAC;IACxB,2EAA2E;IAC3E,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC9C;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,wBAAwB,GAC7B,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAwQlF"}

package/dist/server/mode-handlers.d.ts

@@ -1,16 +1,9 @@
-/**
- * Mode route handlers — extracted from the startWebUI closure in index.ts.
- * Mirrors createProviderHandlers: a factory that closes the handler bodies over
- * an explicit context object instead of the giant startWebUI scope. The one
- * piece of outer mutable state (the `modeId` let) is threaded in as a setter so
- * the factory stays a pure function of its context.
- */
+import { DefaultSystemPromptBuilder, type Context } from '@wrongstack/core/agent';
+import type { DefaultModeStore } from '@wrongstack/core/models';
+import type { ToolRegistry } from '@wrongstack/core/registry';
+import type { MemoryPort, SkillLoader } from '@wrongstack/core/types';
 import type { WebSocket } from 'ws';
-import { type Context, DefaultSystemPromptBuilder, type MemoryStore, type DefaultModeStore, type SkillLoader, type ToolRegistry } from '@wrongstack/core';
 import type { ConnectedClient } from './types.js';
-import type { ModeRouteHandlers } from './mode-routes.js';
-/** The rich payload startWebUI's sessionStartPayload() resolves to. Matches the
- *  WSSessionStart wire shape; broadcast() accepts it for a 'session.start' msg. */
 type SessionStartPayload = {
     sessionId: string;
     model: string;
@@ -28,7 +21,7 @@ type SessionStartPayload = {
 type ModelCapabilities = NonNullable<ConstructorParameters<typeof DefaultSystemPromptBuilder>[0]>['modelCapabilities'];
 export interface ModeHandlersContext {
     modeStore: DefaultModeStore;
-    memoryStore: MemoryStore;
+    memoryStore: MemoryPort;
     skillLoader: SkillLoader | undefined;
     modelCapabilities: ModelCapabilities;
     context: Context;
@@ -40,11 +33,9 @@ export interface ModeHandlersContext {
     projectRoot: string;
     globalRoot: string;
     clients: Map<WebSocket, ConnectedClient>;
-    /** Update the outer `modeId` binding on a successful switch. */
     setModeId: (id: string) => void;
-    /** Rebuilds the rich session.start payload broadcast after a mode switch. */
     sessionStartPayload: () => Promise<SessionStartPayload>;
 }
-export declare function createModeHandlers(ctx: ModeHandlersContext): ModeRouteHandlers;
+export declare function createModeHandlers(context: ModeHandlersContext): import("./mode-routes.js").ModeRouteHandlers;
 export {};
 //# sourceMappingURL=mode-handlers.d.ts.map

package/dist/server/mode-handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mode-handlers.d.ts","sourceRoot":"","sources":["../../src/server/mode-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EACL,KAAK,OAAO,EACZ,0BAA0B,EAE1B,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,YAAY,EAElB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAI1D;mFACmF;AACnF,KAAK,mBAAmB,GAAG;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AACF,KAAK,iBAAiB,GAAG,WAAW,CAClC,qBAAqB,CAAC,OAAO,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAC5D,CAAC,mBAAmB,CAAC,CAAC;AAEvB,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,WAAW,EAAE,WAAW,CAAC;IACzB,WAAW,EAAE,WAAW,GAAG,SAAS,CAAC;IACrC,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,YAAY,CAAC;IAC3B,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACzC,gEAAgE;IAChE,SAAS,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,6EAA6E;IAC7E,mBAAmB,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACzD;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,mBAAmB,GAAG,iBAAiB,CA0F9E"}
+{"version":3,"file":"mode-handlers.d.ts","sourceRoot":"","sources":["../../src/server/mode-handlers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,KAAK,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAClF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAEtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAEpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAGlD,KAAK,mBAAmB,GAAG;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AACF,KAAK,iBAAiB,GAAG,WAAW,CAClC,qBAAqB,CAAC,OAAO,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAC5D,CAAC,mBAAmB,CAAC,CAAC;AAEvB,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,WAAW,EAAE,UAAU,CAAC;IACxB,WAAW,EAAE,WAAW,GAAG,SAAS,CAAC;IACrC,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,YAAY,CAAC;IAC3B,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACzC,SAAS,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,mBAAmB,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACzD;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,gDAuC9D"}

package/dist/server/mode-operations.d.ts

@@ -0,0 +1,24 @@
+import type { ModeStore } from '@wrongstack/core/types';
+import type { WebSocket } from 'ws';
+import type { WSServerMessage } from './types.js';
+interface ModeSession {
+    append(event: {
+        type: 'mode_changed';
+        ts: string;
+        from: string;
+        to: string;
+    }): Promise<unknown>;
+}
+export interface ModeOperationsContext {
+    modeStore?: ModeStore | undefined;
+    getSession?: (() => ModeSession | null | undefined) | undefined;
+    applyModeId: (id: string) => void;
+    afterSwitch?: ((id: string) => void | Promise<void>) | undefined;
+    send: (ws: WebSocket, message: WSServerMessage) => void;
+}
+export declare function createModeOperations(context: ModeOperationsContext): {
+    listModes(ws: WebSocket): Promise<void>;
+    switchMode(ws: WebSocket, id: string): Promise<void>;
+};
+export {};
+//# sourceMappingURL=mode-operations.d.ts.map

package/dist/server/mode-operations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mode-operations.d.ts","sourceRoot":"","sources":["../../src/server/mode-operations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAGxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,UAAU,WAAW;IACnB,MAAM,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,cAAc,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACjG;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAClC,UAAU,CAAC,EAAE,CAAC,MAAM,WAAW,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;IAChE,WAAW,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;IACjE,IAAI,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,KAAK,IAAI,CAAC;CACzD;AAWD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB;IAEzD,SAAS,KAAK,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BvC,UAAU,KAAK,SAAS,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;EAkC7D"}

package/dist/server/mode-routes.d.ts

@@ -1,8 +1,10 @@
 import type { WebSocket } from 'ws';
+import { type ModeOperationsContext } from './mode-operations.js';
 import type { WSClientMessage } from './types.js';
 export interface ModeRouteHandlers {
     listModes: (ws: WebSocket) => Promise<void>;
     switchMode: (ws: WebSocket, msg: WSClientMessage) => Promise<void>;
 }
+export declare function createModeRouteHandlers(context: ModeOperationsContext): ModeRouteHandlers;
 export declare function handleModeRoute(ws: WebSocket, msg: WSClientMessage, handlers: ModeRouteHandlers): Promise<boolean>;
 //# sourceMappingURL=mode-routes.d.ts.map

package/dist/server/mode-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mode-routes.d.ts","sourceRoot":"","sources":["../../src/server/mode-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,CAAC,EAAE,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,UAAU,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACpE;AAED,wBAAsB,eAAe,CACnC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,eAAe,EACpB,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAAC,OAAO,CAAC,CAWlB"}
+{"version":3,"file":"mode-routes.d.ts","sourceRoot":"","sources":["../../src/server/mode-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAwB,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AACxF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAGlD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,CAAC,EAAE,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,UAAU,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACpE;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,qBAAqB,GAAG,iBAAiB,CAgBzF;AAED,wBAAsB,eAAe,CACnC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,eAAe,EACpB,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAAC,OAAO,CAAC,CAWlB"}

package/dist/server/model-auto-discovery.d.ts

@@ -1,4 +1,4 @@
-import type { Config, Logger } from '@wrongstack/core';
+import type { Config, Logger } from '@wrongstack/core/types';
 export declare function discoverAndMergeWebuiProviders(opts: {
     config: Config;
     registry: unknown;

package/dist/server/model-auto-discovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model-auto-discovery.d.ts","sourceRoot":"","sources":["../../src/server/model-auto-discovery.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,MAAM,EACN,MAAM,EAIP,MAAM,kBAAkB,CAAC;AAmD1B,wBAAsB,8BAA8B,CAAC,IAAI,EAAE;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC,GAAG,SAAS,CAAC;IAC7D,SAAS,CAAC,EAAE,OAAO,KAAK,GAAG,SAAS,CAAC;CACtC,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDhB"}
+{"version":3,"file":"model-auto-discovery.d.ts","sourceRoot":"","sources":["../../src/server/model-auto-discovery.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,MAAM,EACN,MAAM,EAIP,MAAM,wBAAwB,CAAC;AAmDhC,wBAAsB,8BAA8B,CAAC,IAAI,EAAE;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC,GAAG,SAAS,CAAC;IAC7D,SAAS,CAAC,EAAE,OAAO,KAAK,GAAG,SAAS,CAAC;CACtC,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDhB"}

package/dist/server/model-catalog.d.ts

@@ -1,4 +1,4 @@
-import type { ModelsRegistry, ProviderConfig, ResolvedModel, ResolvedProvider } from '@wrongstack/core';
+import type { ModelsRegistry, ProviderConfig, ResolvedModel, ResolvedProvider } from '@wrongstack/core/types';
 export declare const SIBLING_CATALOG: Record<string, string>;
 /**
  * Resolve the catalog entry to use for a saved provider's WebUI model list.

package/dist/server/model-catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model-catalog.d.ts","sourceRoot":"","sources":["../../src/server/model-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,cAAc,EACd,cAAc,EACd,aAAa,EACb,gBAAgB,EACjB,MAAM,kBAAkB,CAAC;AAG1B,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAIlD,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,+BAA+B,CACnD,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,aAAa,CAAC,EACnD,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG,SAAS,GAC5C,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAOvC;AAED;;;;GAIG;AACH,wBAAsB,4BAA4B,CAChD,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,aAAa,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC,EACjH,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,cAAc,GAAG,cAAc,CAAC,GAAG,SAAS,GACpG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAuCpC"}
+{"version":3,"file":"model-catalog.d.ts","sourceRoot":"","sources":["../../src/server/model-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,cAAc,EACd,cAAc,EACd,aAAa,EACb,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAGhC,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAIlD,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,+BAA+B,CACnD,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,aAAa,CAAC,EACnD,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG,SAAS,GAC5C,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAOvC;AAED;;;;GAIG;AACH,wBAAsB,4BAA4B,CAChD,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,aAAa,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC,EACjH,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,cAAc,GAAG,cAAc,CAAC,GAAG,SAAS,GACpG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAuCpC"}

package/dist/server/model-operations.d.ts

@@ -0,0 +1,29 @@
+import type { Context } from '@wrongstack/core/agent';
+import type { Config, MemoryPort, ModelsRegistry, Provider, ProviderConfig } from '@wrongstack/core/types';
+import type { WebSocket } from 'ws';
+import type { WSServerMessage } from './types.js';
+export interface ModelRefinePayload {
+    text: string;
+    timeoutMs?: number | undefined;
+    provider?: string | undefined;
+    model?: string | undefined;
+    previousRefined?: string | undefined;
+    previousEnglish?: string | undefined;
+    retryFeedback?: string | undefined;
+}
+export interface ModelOperationsContext {
+    context: Context;
+    memoryStore?: MemoryPort | undefined;
+    modelsRegistry?: ModelsRegistry | undefined;
+    getConfig: () => Config | undefined;
+    getLiveProviderId: () => string;
+    buildProvider: (providerId: string, config: ProviderConfig) => Provider | Promise<Provider>;
+    applyModelSwitch: (providerId: string, modelId: string) => Promise<void>;
+    send: (ws: WebSocket, message: WSServerMessage) => void;
+    log?: ((message: string) => void) | undefined;
+}
+export declare function createModelOperations(context: ModelOperationsContext): {
+    switchModel: (ws: WebSocket, input: unknown) => Promise<void>;
+    refineModel: (ws: WebSocket, payload: ModelRefinePayload) => Promise<void>;
+};
+//# sourceMappingURL=model-operations.d.ts.map

package/dist/server/model-operations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-operations.d.ts","sourceRoot":"","sources":["../../src/server/model-operations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEtD,OAAO,KAAK,EACV,MAAM,EACN,UAAU,EACV,cAAc,EACd,QAAQ,EACR,cAAc,EACf,MAAM,wBAAwB,CAAC;AAWhC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAEpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAGlD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IACrC,cAAc,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAC5C,SAAS,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACpC,iBAAiB,EAAE,MAAM,MAAM,CAAC;IAChC,aAAa,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5F,gBAAgB,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,IAAI,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,KAAK,IAAI,CAAC;IACxD,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAC/C;AAWD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB;sBACpC,SAAS,SAAS,OAAO,KAAG,OAAO,CAAC,IAAI,CAAC;sBAyBzC,SAAS,WAAW,kBAAkB,KAAG,OAAO,CAAC,IAAI,CAAC;EA4JtF"}

package/dist/server/network-info.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Network interface discovery for the startup banner.
+ *
+ * When the server binds to a wildcard address (`0.0.0.0` / `::`), the
+ * operator needs to know which external IPs are reachable so they can
+ * construct browser URLs for Tailscale/LAN peers without manually
+ * running `ip addr` or `ipconfig`.
+ *
+ * Extracted as a pure function (with an injectable `os.networkInterfaces`
+ * seam) so it can be unit-tested without mocking the OS.
+ */
+import * as os from 'node:os';
+export interface NetworkAddress {
+    /** IPv4 or IPv6 address (no brackets). */
+    address: string;
+    /** Interface name (e.g. `eth0`, `tailscale0`). */
+    interface: string;
+    /** Address family — `'IPv4'` or `'IPv6'`. */
+    family: 'IPv4' | 'IPv6';
+    /** True when this address belongs to the Tailscale CGNAT / ULA range. */
+    tailscale: boolean;
+}
+/**
+ * Enumerate all external (non-internal) network addresses on this machine.
+ *
+ * Returns addresses grouped and sorted:
+ *   1. Tailscale addresses first (IPv4 then IPv6)
+ *   2. Other external addresses (IPv4 then IPv6)
+ *
+ * Loopback, link-local, and internal addresses are filtered out.
+ *
+ * @param getInterfaces — Injectable seam for testing; defaults to
+ *   `os.networkInterfaces()`.
+ */
+export declare function getExternalAddresses(getInterfaces?: () => NodeJS.Dict<os.NetworkInterfaceInfo[]>): NetworkAddress[];
+/**
+ * Format the extra access-URL lines for a wildcard bind.
+ *
+ * Returns a list of indented, ready-to-print lines showing the external
+ * IPs and their full access URLs (including token). Returns an empty
+ * array for non-wildcard binds or when no external addresses are found.
+ */
+export declare function formatExternalAccessUrls(opts: {
+    bindHost: string;
+    port: number;
+    token?: string | undefined;
+    publicUrl?: string | undefined;
+    getInterfaces?: () => NodeJS.Dict<os.NetworkInterfaceInfo[]>;
+}): string[];
+//# sourceMappingURL=network-info.d.ts.map

package/dist/server/network-info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-info.d.ts","sourceRoot":"","sources":["../../src/server/network-info.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAG9B,MAAM,WAAW,cAAc;IAC7B,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,6CAA6C;IAC7C,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,yEAAyE;IACzE,SAAS,EAAE,OAAO,CAAC;CACpB;AAgBD;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAClC,aAAa,GAAE,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAwB,GACjF,cAAc,EAAE,CA0BlB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,CAAC;CAC9D,GAAG,MAAM,EAAE,CAoBX"}

package/dist/server/path-containment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"path-containment.d.ts","sourceRoot":"","sources":["../../src/server/path-containment.ts"],"names":[],"mappings":"AAIA,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAGlE;AAED,wBAAsB,8BAA8B,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAgC5G"}
+{"version":3,"file":"path-containment.d.ts","sourceRoot":"","sources":["../../src/server/path-containment.ts"],"names":[],"mappings":"AAIA,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAGlE;AAED,wBAAsB,8BAA8B,CAClD,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CAyCjB"}

package/dist/server/port-utils.d.ts

@@ -1,54 +1,47 @@
 /**
- * Free-port discovery for the WebUI / SimpleUI servers.
+ * Port constants for the WebUI / SimpleUI servers.
  *
  * Design:
- * - **Surface-aware port ranges.** WebUI defaults to 3456 (HTTP) / 3457 (WS);
- *   SimpleUI defaults to 3466 / 3467. These ranges are disjoint, so a WebUI
- *   instance never accidentally claims a SimpleUI slot and vice versa.
- * - **Auto-advance.** When a port is taken, the server probes upward and binds
- *   the first free one (see `findFreePort`). The actual port is stamped into
- *   the served HTML and the instance registry so the user sees the real URL.
+ * - **Single port — shared HTTP + WebSocket.** The WebSocket server attaches
+ *   to the HTTP server (`new WebSocketServer({ server: httpServer })`), so
+ *   both protocols share one port. No separate WS port is needed.
+ * - **Auto-advance.** When a port is taken the server probes upward — WebUI
+ *   starts at 3456, SimpleUI at 3466. Set `WEBUI_STRICT_PORT=1` to disable.
+ * - **TOCTOU window.** The probe in `findFreePort` binds a throwaway
+ *   `net.Server` then closes it, so there is a tiny race between "found free"
+ *   and "real server binds". For local multi-instance use that race is
+ *   negligible; if it ever loses, the real bind fails loudly with EADDRINUSE
+ *   exactly as before.
  * - **Instance registry.** Every live process records itself in
- *   `~/.wrongstack/webui-instances.json` with its PID, surface, ports, and
+ *   `~/.wrongstack/webui-instances.json` with its PID, surface, port, and
  *   project root. A crashed instance is pruned on the next registry read
  *   (`process.kill(pid, 0)` probe), so ghosts don't accumulate.
- * - **TOCTOU window.** The probe binds a throwaway `net.Server` then closes
- *   it, so there is a tiny race between "found free" and "real server binds".
- *   For local multi-instance use that race is negligible; if it ever loses,
- *   the real bind fails loudly with EADDRINUSE exactly as before.
  */
 /**
- * Surface-specific default port ranges.
+ * Surface-specific default single port.
  *
- * These bases are intentionally spaced so the auto-advance window of one
- * surface (typically a few ports up) never reaches the other surface's base:
+ * WebSocket shares the HTTP port (single-port design), so only one port
+ * number is specified per surface:
  *
- *   WebUI:   HTTP 3456-3465, WS 3457-3466  (10-port window)
- *   SimpleUI: HTTP 3466-3475, WS 3467-3476  (10-port window)
- *
- * This keeps the ranges visually distinct and prevents accidental overlap
- * when both surfaces run multiple instances in the same project.
+ *   WebUI:   3456
+ *   SimpleUI: 3466
  */
 export declare const SURFACE_DEFAULT_PORTS: {
     readonly webui: {
         readonly http: 3456;
-        readonly ws: 3457;
     };
     readonly simpleui: {
         readonly http: 3466;
-        readonly ws: 3467;
     };
 };
 export type SurfaceKind = keyof typeof SURFACE_DEFAULT_PORTS;
 /** Human-readable label for surfaces. */
 export declare function surfaceLabel(surface: SurfaceKind): string;
 /**
- * Return the surface-specific default port pair (HTTP + WS).
- * Freezes the returned object so callers can't mutate the constant table.
+ * Return the surface-specific default HTTP port.
  */
 export declare function getSurfaceDefaultPorts(surface: SurfaceKind): {
     http: number;
-    ws: number;
 };
 /** Resolve true when `port` can be bound on `host`, false on EADDRINUSE/EACCES. */
 export declare function isPortFree(host: string, port: number): Promise<boolean>;

package/dist/server/port-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"port-utils.d.ts","sourceRoot":"","sources":["../../src/server/port-utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,qBAAqB;;iBACrB,IAAI,EAAE,IAAI;iBAAE,EAAE,EAAE,IAAI;;;iBACnB,IAAI,EAAE,IAAI;iBAAE,EAAE,EAAE,IAAI;;CAC+B,CAAC;AAElE,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,qBAAqB,CAAC;AAE7D,yCAAyC;AACzC,wBAAgB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAEzD;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,WAAW,GAAG;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ,CAEA;AAED,mFAAmF;AACnF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAavE;AAED,MAAM,WAAW,mBAAmB;IAClC,mFAAmF;IACnF,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAClC,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,MAAM,CAAC,CAiBjB"}
+{"version":3,"file":"port-utils.d.ts","sourceRoot":"","sources":["../../src/server/port-utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB;;iBACrB,IAAI,EAAE,IAAI;;;iBACT,IAAI,EAAE,IAAI;;CAC6B,CAAC;AAEtD,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,qBAAqB,CAAC;AAE7D,yCAAyC;AACzC,wBAAgB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAEzD;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,WAAW,GAAG;IAC5D,IAAI,EAAE,MAAM,CAAC;CACd,CAEA;AAED,mFAAmF;AACnF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAavE;AAED,MAAM,WAAW,mBAAmB;IAClC,mFAAmF;IACnF,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAClC,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,MAAM,CAAC,CAiBjB"}

package/dist/server/pre-context-services.d.ts

@@ -1,10 +1,37 @@
-import type { Config, Logger, MemoryStore } from '@wrongstack/core';
+/**
+ * Pre-context backend service construction for the standalone WebUI server.
+ *
+ * Phase 1f of the god-module split. `startWebUI` previously inlined ~370
+ * lines of construction that runs BEFORE `context` exists: modelsRegistry,
+ * container, providerRegistry, toolRegistry (+ memory/mailbox tools),
+ * MCPRegistry, sessionStore, session, sessionReader, annotationsStore,
+ * cross-surface discovery (session registry + fleet notifier + HQ
+ * telemetry), tokenCounter, modeStore, customModeStore, skillInstaller,
+ * promptLoader, systemPromptBuilder, systemPrompt, provider resolution,
+ * and context creation + meta seeding.
+ *
+ * All of that moves into `createPreContextServices()`. The block is deeply
+ * interleaved with the `opts.services?` injection contract (5 injection
+ * points) and mutable `let` bindings the route layer swaps at runtime
+ * (session, sessionStore, sessionStartedAt, modeId). The factory returns
+ * all of these; `startWebUI` keeps the mutable bindings and wraps them
+ * into the `state` object exactly as before.
+ *
+ * No behaviour change.
+ */
+import { Context } from '@wrongstack/core/agent';
+import { DefaultPromptLoader, DefaultSkillLoader } from '@wrongstack/core/execution';
+import { type Container, EventBus } from '@wrongstack/core/kernel';
 import { DefaultTokenCounter } from '@wrongstack/core/infrastructure';
-import { type AgentStatusTracker, AnnotationsStore, DefaultModeStore, DefaultPromptLoader, DefaultSessionReader, DefaultSessionStore, DefaultSkillLoader, EventBus, PromptUsageStore, ProviderRegistry, SkillInstaller, ToolRegistry, Context, type Container, type ConfigStore, type ModelsRegistry, type Provider, type SecretVault, type SessionStore } from '@wrongstack/core';
-import type { WstackPaths } from '@wrongstack/core/utils';
-import type { WebUIOptions } from './types.js';
+import { DefaultModeStore } from '@wrongstack/core/models';
+import { ProviderRegistry, ToolRegistry } from '@wrongstack/core/registry';
+import { SkillInstaller } from '@wrongstack/core/skills';
+import { type AgentStatusTracker, AnnotationsStore, DefaultSessionReader, DefaultSessionStore, PromptUsageStore } from '@wrongstack/core/storage';
+import { type Config, type ConfigStore, type Logger, type MemoryPort, type ModelsRegistry, type Provider, type SecretVault, type SessionStore } from '@wrongstack/core/types';
+import { type WstackPaths } from '@wrongstack/core/utils';
 import type { CustomModeStore } from './custom-context-modes.js';
 import { type StandaloneSessionIdentityLifecycle } from './standalone-session-identity.js';
+import type { WebUIOptions } from './types.js';
 interface PreContextServicesInput {
     config: Config;
     wpaths: WstackPaths;
@@ -24,7 +51,7 @@ interface PreContextServices {
     configStore: ConfigStore;
     providerRegistry: ProviderRegistry;
     toolRegistry: ToolRegistry;
-    memoryStore: MemoryStore;
+    memoryStore: MemoryPort;
     events: EventBus;
     mcpRegistry: import('@wrongstack/mcp').MCPRegistry;
     sessionStore: SessionStore;

package/dist/server/pre-context-services.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pre-context-services.d.ts","sourceRoot":"","sources":["../../src/server/pre-context-services.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EACL,KAAK,kBAAkB,EACvB,gBAAgB,EAGhB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAElB,QAAQ,EAER,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EAEd,YAAY,EACZ,OAAO,EAUP,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,kBAAkB,CAAC;AA0B1B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAMjE,OAAO,EAEL,KAAK,kCAAkC,EACxC,MAAM,kCAAkC,CAAC;AAK1C,UAAU,uBAAuB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,WAAW,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,OAAO,CAAC;IACvB,gEAAgE;IAChE,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACjE;AAED,UAAU,kBAAkB;IAC1B,cAAc,EAAE,cAAc,CAAC;IAC/B,SAAS,EAAE,SAAS,CAAC;IACrB,WAAW,EAAE,WAAW,CAAC;IACzB,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,WAAW,CAAC;IACzB,MAAM,EAAE,QAAQ,CAAC;IACjB,WAAW,EAAE,OAAO,iBAAiB,EAAE,WAAW,CAAC;IACnD,YAAY,EAAE,YAAY,CAAC;IAC3B,aAAa,EAAE,oBAAoB,CAAC;IACpC,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5D,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC9C,eAAe,EAAE,kCAAkC,CAAC;IACpD,YAAY,EAAE,mBAAmB,CAAC;IAClC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,eAAe,CAAC;IACjC,WAAW,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC5C,cAAc,EAAE,cAAc,GAAG,SAAS,CAAC;IAC3C,UAAU,EAAE;QAAE,YAAY,EAAE,mBAAmB,GAAG,SAAS,CAAC;QAAC,WAAW,EAAE,gBAAgB,CAAA;KAAE,CAAC;IAC7F,oBAAoB,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAC3C,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,kBAAkB,CAAC,CAmS7B"}
+{"version":3,"file":"pre-context-services.d.ts","sourceRoot":"","sources":["../../src/server/pre-context-services.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,EAAE,OAAO,EAA8B,MAAM,wBAAwB,CAAC;AAQ7E,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,KAAK,SAAS,EACd,QAAQ,EAET,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAyB,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EACL,KAAK,kBAAkB,EACvB,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EAEnB,gBAAgB,EACjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAIL,KAAK,MAAM,EACX,KAAK,WAAW,EAChB,KAAK,MAAM,EACX,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,wBAAwB,CAAC;AAahC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAKjE,OAAO,EAEL,KAAK,kCAAkC,EACxC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAK/C,UAAU,uBAAuB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,WAAW,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,OAAO,CAAC;IACvB,gEAAgE;IAChE,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACjE;AAED,UAAU,kBAAkB;IAC1B,cAAc,EAAE,cAAc,CAAC;IAC/B,SAAS,EAAE,SAAS,CAAC;IACrB,WAAW,EAAE,WAAW,CAAC;IACzB,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,UAAU,CAAC;IACxB,MAAM,EAAE,QAAQ,CAAC;IACjB,WAAW,EAAE,OAAO,iBAAiB,EAAE,WAAW,CAAC;IACnD,YAAY,EAAE,YAAY,CAAC;IAC3B,aAAa,EAAE,oBAAoB,CAAC;IACpC,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5D,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC9C,eAAe,EAAE,kCAAkC,CAAC;IACpD,YAAY,EAAE,mBAAmB,CAAC;IAClC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,eAAe,CAAC;IACjC,WAAW,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC5C,cAAc,EAAE,cAAc,GAAG,SAAS,CAAC;IAC3C,UAAU,EAAE;QAAE,YAAY,EAAE,mBAAmB,GAAG,SAAS,CAAC;QAAC,WAAW,EAAE,gBAAgB,CAAA;KAAE,CAAC;IAC7F,oBAAoB,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAC3C,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,kBAAkB,CAAC,CAiW7B"}

package/dist/server/pref-helpers.d.ts

@@ -15,12 +15,10 @@
  * two take explicit args. No behaviour change — the mutation ladder,
  * the FEATURE_MAP, and the touch-flags are preserved verbatim.
  */
-import type { SecretVault } from '@wrongstack/core';
+import type { SecretVault } from '@wrongstack/core/types';
 /** Pref keys exposed to the settings panel via prefs.get / prefs.updated. */
 export declare const PREF_KEYS: readonly ['autonomy', 'autonomyDelayMs', 'autoProceedMaxIterations', 'yolo', 'maxIterations', 'chime', 'confirmExit', 'nextPrediction', 'enhanceEnabled', 'enhanceDelayMs', 'enhanceLanguage', 'featureMcp', 'featurePlugins', 'featureMemory', 'featureSkills', 'featureModelsRegistry', 'indexOnStart', 'contextAutoCompact', 'contextStrategy', 'contextMode', 'tokenSavingTier', 'maxConcurrent', 'titleAnimation', 'uiLocale', 'logLevel', 'auditLevel', 'hqEnabled', 'hqUrl', 'hqToken', 'hqRawContent', 'tgConfigured', 'tgSessionEnd', 'tgDelegate', 'tgLongToolMs', 'reasoningMode', 'reasoningEffort', 'reasoningPreserve', 'cacheTtl', 'fallbackModels', 'fallbackProfiles', 'favoriteModels', 'favoriteModelsOnly', 'modelAvailabilitySchedule', 'modelMatrix', 'fallbackAuto', 'refinerProvider', 'refinerModel', 'refinerFallbackProfile', 'thinkingWord', 'statuslineMode', 'animationStyle', 'showModelReasoning', 'breakerEnabled', 'breakerAutoKillResetMs', 'fsAccess', 'debugStream', 'chimeraEnabled', 'chimeraProvider', 'chimeraModel', 'chimeraMaxFiles', 'chimeraAutoFix', 'autoReviewEnabled', 'autoReviewProvider', 'autoReviewModel', 'autoReviewFallbackProfile', 'autoReviewFallbackModels', 'autoReviewDebounceMs', 'autoReviewMaxFilesPerBatch', 'autoReviewMaxConcurrentReviews', 'autoReviewCascadeOn', 'pluginsEnabled', 'fleetChatVerbosity'];
 export interface PrefHelperDeps {
-    /** Root bootstrap path. Never a settings mutation target. */
-    globalConfigPath: string;
     /** Path to the active profile config; the sole settings mutation target. */
     profileConfigPath: string;
     vault: SecretVault;

package/dist/server/pref-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pref-helpers.d.ts","sourceRoot":"","sources":["../../src/server/pref-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAIpD,6EAA6E;AAC7E,eAAO,MAAM,SAAS,YACpB,UAAU,EACV,iBAAiB,EACjB,0BAA0B,EAC1B,MAAM,EACN,eAAe,EACf,OAAO,EACP,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,cAAc,EACd,oBAAoB,EACpB,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,UAAU,EACV,UAAU,EACV,YAAY,EACZ,WAAW,EACX,OAAO,EACP,SAAS,EACT,cAAc,EACd,cAAc,EACd,cAAc,EACd,YAAY,EACZ,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,UAAU,EACV,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,2BAA2B,EAC3B,aAAa,EACb,cAAc,EAGd,iBAAiB,EACjB,cAAc,EACd,wBAAwB,EACxB,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EAEpB,gBAAgB,EAChB,wBAAwB,EACxB,UAAU,EACV,aAAa,EAIb,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,2BAA2B,EAC3B,0BAA0B,EAC1B,sBAAsB,EACtB,4BAA4B,EAC5B,gCAAgC,EAChC,qBAAqB,EAErB,gBAAgB,EAEhB,oBAAoB,CACZ,CAAC;AAEX,MAAM,WAAW,cAAc;IAC7B,6DAA6D;IAC7D,gBAAgB,EAAE,MAAM,CAAC;IACzB,4EAA4E;IAC5E,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE;QAAE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACrC;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAM1F;AAED;;;;;;;kBAOkB;AAClB,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACrB;AAyCD,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,qBAAqB,EAC7B,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,EACjD,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAiBf;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,qBAAqB,EAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC,CA8Wf"}
+{"version":3,"file":"pref-helpers.d.ts","sourceRoot":"","sources":["../../src/server/pref-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAI1D,6EAA6E;AAC7E,eAAO,MAAM,SAAS,YACpB,UAAU,EACV,iBAAiB,EACjB,0BAA0B,EAC1B,MAAM,EACN,eAAe,EACf,OAAO,EACP,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,cAAc,EACd,oBAAoB,EACpB,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,UAAU,EACV,UAAU,EACV,YAAY,EACZ,WAAW,EACX,OAAO,EACP,SAAS,EACT,cAAc,EACd,cAAc,EACd,cAAc,EACd,YAAY,EACZ,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,UAAU,EACV,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,2BAA2B,EAC3B,aAAa,EACb,cAAc,EAGd,iBAAiB,EACjB,cAAc,EACd,wBAAwB,EACxB,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EAEpB,gBAAgB,EAChB,wBAAwB,EACxB,UAAU,EACV,aAAa,EAIb,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,2BAA2B,EAC3B,0BAA0B,EAC1B,sBAAsB,EACtB,4BAA4B,EAC5B,gCAAgC,EAChC,qBAAqB,EAErB,gBAAgB,EAEhB,oBAAoB,CACZ,CAAC;AAEX,MAAM,WAAW,cAAc;IAC7B,4EAA4E;IAC5E,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE;QAAE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACrC;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAM1F;AAED;;;;;;;kBAOkB;AAClB,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACrB;AAyCD,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,qBAAqB,EAC7B,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,EACjD,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAiBf;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,qBAAqB,EAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC,CAkXf"}

package/dist/server/prefs-handlers.d.ts

@@ -0,0 +1,22 @@
+import type { ConfigStore } from '@wrongstack/core/types';
+import type { WebSocket } from 'ws';
+import { type PendingConfirm } from './pending-confirms.js';
+import type { WSServerMessage } from './types.js';
+export interface PrefsHandlerContext {
+    meta: Record<string, unknown>;
+    snapshot: () => Record<string, unknown>;
+    persist: (payload: Record<string, unknown>) => Promise<void>;
+    pendingConfirms: Map<string, PendingConfirm>;
+    configStore?: ConfigStore | undefined;
+    setYolo?: ((enabled: boolean) => void) | undefined;
+    setAutonomy?: ((mode: string) => void) | undefined;
+    applyConfigPrefs?: ((payload: Record<string, unknown>) => void) | undefined;
+    setAutoCompact?: ((enabled: boolean) => void) | undefined;
+    setLogLevel?: ((level: 'debug' | 'info' | 'warn' | 'error') => void) | undefined;
+    send: (ws: WebSocket, message: WSServerMessage) => void;
+    broadcast: (message: WSServerMessage) => void;
+}
+export declare function handlePrefsGet(ctx: PrefsHandlerContext, ws: WebSocket): void;
+export declare function handlePrefsUpdate(ctx: PrefsHandlerContext, ws: WebSocket, input: Record<string, unknown>): void;
+export declare function handleAutonomySwitch(ctx: PrefsHandlerContext, ws: WebSocket, mode: string): void;
+//# sourceMappingURL=prefs-handlers.d.ts.map

package/dist/server/prefs-handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prefs-handlers.d.ts","sourceRoot":"","sources":["../../src/server/prefs-handlers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,KAAK,cAAc,EAAsC,MAAM,uBAAuB,CAAC;AAChG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAGlD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,QAAQ,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC7C,WAAW,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IACtC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IACnD,WAAW,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IACnD,gBAAgB,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IAC5E,cAAc,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IAC1D,WAAW,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IACjF,IAAI,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,KAAK,IAAI,CAAC;IACxD,SAAS,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,IAAI,CAAC;CAC/C;AAuCD,wBAAgB,cAAc,CAAC,GAAG,EAAE,mBAAmB,EAAE,EAAE,EAAE,SAAS,GAAG,IAAI,CAE5E;AAED,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,mBAAmB,EACxB,EAAE,EAAE,SAAS,EACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,IAAI,CA+CN;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,mBAAmB,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAMhG"}

package/dist/server/prefs-routes.d.ts

@@ -1,4 +1,5 @@
 import type { WebSocket } from 'ws';
+import { type PrefsHandlerContext } from './prefs-handlers.js';
 import type { WSClientMessage } from './types.js';
 export interface PrefsRouteHandlers {
     /** Respond to the WS client with the current pref snapshot. */
@@ -10,7 +11,10 @@ export interface PrefsRouteHandlers {
      * logger.level), then broadcast the full current snapshot to all clients.
      */
     updatePrefs: (ws: WebSocket, payload: Record<string, unknown>) => Promise<void>;
+    /** Preview/apply canonical defaults in the active profile config. */
+    doctorConfig?: ((ws: WebSocket, apply: boolean) => Promise<void>) | undefined;
 }
+export declare function createPrefsRouteHandlers(ctx: PrefsHandlerContext, doctorConfig?: PrefsRouteHandlers['doctorConfig']): PrefsRouteHandlers;
 /**
  * Chain-of-responsibility dispatcher for the `prefs.*` WS message family.
  * Returns `true` if the message was handled by this layer (so the caller's
@@ -20,6 +24,7 @@ export interface PrefsRouteHandlers {
  * Owned prefixes:
  *   - `prefs.get`
  *   - `prefs.update`
+ *   - `config.doctor`
  *
  * Regression-tested by packages/webui/tests/server/dispatcher-routing.test.ts.
  */

package/dist/server/prefs-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prefs-routes.d.ts","sourceRoot":"","sources":["../../src/server/prefs-routes.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,kBAAkB;IACjC,+DAA+D;IAC/D,QAAQ,EAAE,CAAC,EAAE,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C;;;;;OAKG;IACH,WAAW,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACjF;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,eAAe,EACpB,QAAQ,EAAE,kBAAkB,GAC3B,OAAO,CAAC,OAAO,CAAC,CAalB"}
+{"version":3,"file":"prefs-routes.d.ts","sourceRoot":"","sources":["../../src/server/prefs-routes.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAqC,KAAK,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAClG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAGlD,MAAM,WAAW,kBAAkB;IACjC,+DAA+D;IAC/D,QAAQ,EAAE,CAAC,EAAE,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C;;;;;OAKG;IACH,WAAW,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChF,qEAAqE;IACrE,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;CAC/E;AAED,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,mBAAmB,EACxB,YAAY,CAAC,EAAE,kBAAkB,CAAC,cAAc,CAAC,GAChD,kBAAkB,CAMpB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,eAAe,EACpB,QAAQ,EAAE,kBAAkB,GAC3B,OAAO,CAAC,OAAO,CAAC,CAmClB"}

package/dist/server/privileged-actions.d.ts

@@ -0,0 +1,16 @@
+import type { Logger } from '@wrongstack/core/types';
+import { type TrustBoundary, type TrustBoundaryRequest, type TrustRisk, type TrustSubject } from '@wrongstack/core/security';
+export interface WebUIPrivilegedAction {
+    capability: string;
+    subject: TrustSubject;
+    risk: TrustRisk;
+    cwd?: string | undefined;
+    sessionId?: string | undefined;
+    metadata?: TrustBoundaryRequest['metadata'] | undefined;
+}
+export declare function authorizeWebUIAction(boundary: TrustBoundary, action: WebUIPrivilegedAction, logger?: Logger | undefined): Promise<{
+    allowed: boolean;
+    reason: string;
+    request: TrustBoundaryRequest;
+}>;
+//# sourceMappingURL=privileged-actions.d.ts.map

package/dist/server/privileged-actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privileged-actions.d.ts","sourceRoot":"","sources":["../../src/server/privileged-actions.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,SAAS,EACd,KAAK,YAAY,EAClB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,YAAY,CAAC;IACtB,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,QAAQ,CAAC,EAAE,oBAAoB,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC;CACzD;AAED,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,qBAAqB,EAC7B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,oBAAoB,CAAA;CAAE,CAAC,CAwB9E"}

package/dist/server/process-handlers.d.ts

@@ -6,15 +6,17 @@
  *   case 'process.kill':    return handleProcessKill(ws, msg.payload);
  *   case 'process.killAll': return handleProcessKillAll(ws);
  *
- * All three reach the registry via a dynamic `@wrongstack/tools` import so the
- * server starts even when that package is unavailable, and never throw — a
- * failure is reported back over the socket instead.
+ * Registry failures never escape the handler; they are reported over the
+ * socket using the existing protocol envelopes.
  */
+import type { Logger } from '@wrongstack/core/types';
+import { type TrustBoundary } from '@wrongstack/core/security';
 import type { WebSocket } from 'ws';
+import { type WebUIPrivilegedAction } from './privileged-actions.js';
 /** Broadcast the tracked-process list; an empty list on any registry failure. */
-export declare function handleProcessList(ws: WebSocket): Promise<void>;
+export declare function handleProcessList(ws: WebSocket): void;
 /** Kill one tracked PID. Rejects invalid payloads and protected processes. */
-export declare function handleProcessKill(ws: WebSocket, payload: unknown): Promise<void>;
+export declare function handleProcessKill(ws: WebSocket, payload: unknown, trustBoundary?: TrustBoundary, logger?: Logger | undefined, metadata?: WebUIPrivilegedAction['metadata'] | undefined): Promise<void>;
 /** Kill every tracked process. */
-export declare function handleProcessKillAll(ws: WebSocket): Promise<void>;
+export declare function handleProcessKillAll(ws: WebSocket, trustBoundary?: TrustBoundary, logger?: Logger | undefined, metadata?: WebUIPrivilegedAction['metadata'] | undefined): Promise<void>;
 //# sourceMappingURL=process-handlers.d.ts.map

package/dist/server/process-handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"process-handlers.d.ts","sourceRoot":"","sources":["../../src/server/process-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAIpC,iFAAiF;AACjF,wBAAsB,iBAAiB,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBpE;AAED,8EAA8E;AAC9E,wBAAsB,iBAAiB,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBtF;AAED,kCAAkC;AAClC,wBAAsB,oBAAoB,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAQvE"}
+{"version":3,"file":"process-handlers.d.ts","sourceRoot":"","sources":["../../src/server/process-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAoC,KAAK,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAEjG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAwB,KAAK,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAI3F,iFAAiF;AACjF,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,SAAS,GAAG,IAAI,CAoBrD;AAED,8EAA8E;AAC9E,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,SAAS,EACb,OAAO,EAAE,OAAO,EAChB,aAAa,GAAE,aAEb,EACF,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,EAC3B,QAAQ,CAAC,EAAE,qBAAqB,CAAC,UAAU,CAAC,GAAG,SAAS,GACvD,OAAO,CAAC,IAAI,CAAC,CAgCf;AAED,kCAAkC;AAClC,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,SAAS,EACb,aAAa,GAAE,aAEb,EACF,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,EAC3B,QAAQ,CAAC,EAAE,qBAAqB,CAAC,UAAU,CAAC,GAAG,SAAS,GACvD,OAAO,CAAC,IAAI,CAAC,CAqBf"}

package/dist/server/process-routes.d.ts

@@ -0,0 +1,9 @@
+import type { WebSocket } from 'ws';
+import type { WSClientMessage } from './types.js';
+export interface ProcessRouteHandlers {
+    list: (ws: WebSocket, msg: WSClientMessage) => Promise<void> | void;
+    kill: (ws: WebSocket, msg: WSClientMessage) => Promise<void> | void;
+    killAll: (ws: WebSocket, msg: WSClientMessage) => Promise<void> | void;
+}
+export declare function handleProcessRoute(ws: WebSocket, msg: WSClientMessage, handlers: ProcessRouteHandlers): Promise<boolean>;
+//# sourceMappingURL=process-routes.d.ts.map