@wrongstack/webui-server 0.298.3 → 0.299.0

package/dist/server/frontend-static-serve.d.ts

@@ -75,6 +75,15 @@ export interface StaticServeOptions {
     deferListen?: boolean | undefined;
     /** Package-resolution/build seams supplied by the owning host. */
     ensureDistDeps?: EnsureDistDeps | undefined;
+    /**
+     * Requirements Intake service backing `/api/requirement-intakes*`. Omitted by
+     * every real host — a per-project service is constructed from `projectRoot` +
+     * `globalRoot` below, so the CLI-hosted WebUI serves the same intake records
+     * as the standalone server. Pass one only to override (tests/embeds); when
+     * `projectRoot` is absent there is no project to scope a store to and the
+     * routes correctly answer 503.
+     */
+    intakeService?: CreateHttpServerOptions['intakeService'];
 }
 /**
  * Resolve the webui package's built `dist` directory.

package/dist/server/http-server.d.ts

@@ -74,6 +74,13 @@ export interface CreateHttpServerOptions {
     } | undefined) | undefined;
     /** Permission-governed language_package bridge for approved remediation. */
     executePackageOperation?: import('./techstack-handlers.js').TechStackHandlerDeps['executePackageOperation'];
+    /**
+     * Optional Requirements Intake service. When provided, the
+     * /api/projects/:projectId/requirement-intakes and
+     * /api/requirement-intakes/:intakeId endpoints are enabled; otherwise they
+     * respond 503.
+     */
+    intakeService?: import('@wrongstack/requirement-intake').RequirementIntakeService | undefined;
 }
 export declare function injectWsConfig(html: string, opts: {
     publicWsUrl?: string | undefined;

package/dist/server/intake-service.d.ts

@@ -0,0 +1,13 @@
+import { RequirementIntakeService } from '@wrongstack/requirement-intake';
+/**
+ * Build the intake service backed by this project's
+ * `~/.wrongstack/projects/<slug>/requirement-intakes` directory.
+ *
+ * The HTTP token gate is the authorization boundary, so the service itself
+ * runs with a permissive authorizer inside it (see requirement-intake-handlers).
+ */
+export declare function createProjectIntakeService(opts: {
+    projectRoot: string;
+    globalRoot: string;
+}): RequirementIntakeService;
+//# sourceMappingURL=intake-service.d.ts.map

package/dist/server/requirement-intake-handlers.d.ts

@@ -0,0 +1,41 @@
+/**
+ * HTTP handlers for the Requirements Intake REST API.
+ *
+ * Routes (registered in http-server.ts):
+ *   POST   /api/projects/:projectId/requirement-intakes
+ *   GET    /api/projects/:projectId/requirement-intakes
+ *   GET    /api/requirement-intakes/:intakeId
+ *   PATCH  /api/requirement-intakes/:intakeId
+ *   POST   /api/requirement-intakes/:intakeId/answers
+ *   POST   /api/requirement-intakes/:intakeId/suggestions
+ *   POST   /api/requirement-intakes/:intakeId/submit
+ *   POST   /api/requirement-intakes/:intakeId/cancel
+ *   POST   /api/requirement-intakes/:intakeId/archive
+ *
+ * The HTTP token gate (see http-server.ts) is the authorization boundary;
+ * the service runs with a permissive authorizer inside that boundary. Every
+ * handler maps `IntakeError` codes to conventional HTTP statuses and never
+ * echoes request content into logs.
+ */
+import type * as http from 'node:http';
+import { type RequirementIntakeService } from '@wrongstack/requirement-intake';
+/** Map a domain error to an HTTP status + JSON error body. */
+export declare function sendIntakeError(res: http.ServerResponse, error: unknown): void;
+/**
+ * List intake records for the server's own project. The webui-server serves
+ * one project; the canonical `proj_<ulid>` id lives in `.wrongstack/project.json`,
+ * which the frontend cannot read — so this route resolves it server-side and
+ * returns it alongside the records (the frontend uses it for the project-scoped
+ * create endpoint).
+ */
+export declare function handleRequirementIntakeListForServer(res: http.ServerResponse, service: RequirementIntakeService | undefined, projectRoot: string | undefined): Promise<void>;
+export declare function handleRequirementIntakeCreate(res: http.ServerResponse, req: http.IncomingMessage, service: RequirementIntakeService | undefined, projectId: string): Promise<void>;
+export declare function handleRequirementIntakeList(res: http.ServerResponse, service: RequirementIntakeService | undefined, projectId: string): Promise<void>;
+export declare function handleRequirementIntakeGet(res: http.ServerResponse, service: RequirementIntakeService | undefined, intakeId: string): Promise<void>;
+export declare function handleRequirementIntakeUpdate(res: http.ServerResponse, req: http.IncomingMessage, service: RequirementIntakeService | undefined, intakeId: string): Promise<void>;
+export declare function handleRequirementIntakeAnswers(res: http.ServerResponse, req: http.IncomingMessage, service: RequirementIntakeService | undefined, intakeId: string): Promise<void>;
+export declare function handleRequirementIntakeSuggestions(res: http.ServerResponse, req: http.IncomingMessage, service: RequirementIntakeService | undefined, intakeId: string): Promise<void>;
+export declare function handleRequirementIntakeSubmit(res: http.ServerResponse, service: RequirementIntakeService | undefined, intakeId: string): Promise<void>;
+export declare function handleRequirementIntakeCancel(res: http.ServerResponse, req: http.IncomingMessage, service: RequirementIntakeService | undefined, intakeId: string): Promise<void>;
+export declare function handleRequirementIntakeArchive(res: http.ServerResponse, service: RequirementIntakeService | undefined, intakeId: string): Promise<void>;
+//# sourceMappingURL=requirement-intake-handlers.d.ts.map

package/dist/server/server-runtime.d.ts

@@ -102,6 +102,9 @@ export declare function startHttpServer(opts: {
     } | undefined) | undefined;
     executePackageOperation?: import('./techstack-handlers.js').TechStackHandlerDeps['executePackageOperation'];
     distDir?: string | undefined;
+    /** Optional pre-built intake service (tests/embeds). Defaults to a fresh
+     *  per-project service backed by `projectRequirementIntakes`. */
+    intakeService?: import('@wrongstack/requirement-intake').RequirementIntakeService | undefined;
 }): import('node:http').Server;
 interface ShutdownDeps {
     flushSession: () => Promise<void>;

package/dist/server/session-history.d.ts

@@ -1,4 +1,4 @@
-import type { SessionSummary } from '@wrongstack/core/types';
+import type { SessionEvent, SessionSummary } from '@wrongstack/core/types';
 /**
  * Stable WebSocket projection for the WebUI history surfaces.
  *
@@ -27,6 +27,47 @@ export interface SessionHistoryWireEntry {
     outcome?: SessionSummary['outcome'];
     isCurrent: boolean;
 }
+export interface SessionInspectEvent {
+    ts: string;
+    type: SessionEvent['type'];
+    label: string;
+    detail: string;
+}
+export interface SessionInspectFileEntry {
+    operation: string;
+    filePath: string;
+    toolName: string;
+    ts: string;
+}
+export interface SessionInspectPayload {
+    id: string;
+    title: string;
+    name?: string | undefined;
+    model: string;
+    provider: string;
+    startedAt: string;
+    endedAt?: string | undefined;
+    tokenTotal: number;
+    outcome?: SessionSummary['outcome'];
+    messageCount: number;
+    iterationCount: number;
+    toolCallCount: number;
+    toolErrorCount: number;
+    fileChangeCount: number;
+    compactionCount: number;
+    toolBreakdown: Record<string, number>;
+    events: SessionInspectEvent[];
+    fileEvents: SessionInspectFileEntry[];
+    lastUserMessage?: string | undefined;
+}
+export declare function buildInspectPayload(summary: SessionSummary | undefined, events: SessionEvent[], fallback: {
+    id: string;
+    title: string;
+    model: string;
+    provider: string;
+    startedAt: string;
+    endedAt?: string | undefined;
+}): SessionInspectPayload;
 export declare function toSessionHistoryEntry(summary: SessionSummary, currentSessionId: string): SessionHistoryWireEntry;
 export declare function toSessionHistoryEntries(summaries: SessionSummary[], currentSessionId: string): SessionHistoryWireEntry[];
 //# sourceMappingURL=session-history.d.ts.map

package/dist/server/session-routes.d.ts

@@ -19,6 +19,7 @@ export interface SessionRouteHandlers {
     deleteSession: (ws: WebSocket, msg: WSClientMessage) => Promise<void>;
     resumeSession: (ws: WebSocket, msg: WSClientMessage) => Promise<void>;
     saveSession: (ws: WebSocket, msg: WSClientMessage) => Promise<void>;
+    inspectSession: (ws: WebSocket, msg: WSClientMessage) => Promise<void>;
     listCheckpoints: (ws: WebSocket, msg: WSClientMessage) => Promise<void>;
     rewindSession: (ws: WebSocket, msg: WSClientMessage) => Promise<void>;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/webui-server",
-  "version": "0.298.3",
+  "version": "0.299.0",
   "license": "MIT",
   "description": "WrongStack WebUI HTTP/WebSocket server module — extracted from @wrongstack/webui in PR #243/244 to remove the CLI -> @wrongstack/webui/server cross-package edge (audit §3.1.1). Pure backend: HTTP routes, WebSocket handlers, MCP tool wrappers, HTML serving. The web frontend lives in @wrongstack/webui; this package is the standalone server it can run on.",
   "keywords": [
@@ -40,15 +40,16 @@
   ],
   "dependencies": {
     "ws": "^8.21.1",
-    "@wrongstack/core": "0.298.3",
-    "@wrongstack/providers": "0.298.3",
-    "@wrongstack/runtime": "0.298.3",
-    "@wrongstack/kanban": "0.298.3",
-    "@wrongstack/sdd": "0.298.3",
-    "@wrongstack/sage": "0.298.3",
-    "@wrongstack/techstack": "0.298.3",
-    "@wrongstack/tools": "0.298.3",
-    "@wrongstack/mcp": "0.298.3"
+    "@wrongstack/providers": "0.299.0",
+    "@wrongstack/core": "0.299.0",
+    "@wrongstack/techstack": "0.299.0",
+    "@wrongstack/mcp": "0.299.0",
+    "@wrongstack/requirement-intake": "0.299.0",
+    "@wrongstack/sdd": "0.299.0",
+    "@wrongstack/kanban": "0.299.0",
+    "@wrongstack/tools": "0.299.0",
+    "@wrongstack/sage": "0.299.0",
+    "@wrongstack/runtime": "0.299.0"
   },
   "devDependencies": {
     "@types/node": "^26.1.2",