@wrongstack/webui-server 0.307.1 → 0.308.0

package/dist/index.js

@@ -8983,7 +8983,7 @@ function verifyClient(input) {
 
 // src/server/http-server/api-router.ts
 import * as v8 from "node:v8";
-import { sanitizeApiError as sanitizeApiError2 } from "@wrongstack/core/security";
+import { sanitizeApiError as sanitizeApiError3 } from "@wrongstack/core/security";
 import { getIndexState as getIndexState2 } from "@wrongstack/tools";
 
 // src/server/codemap-handlers.ts
@@ -10410,6 +10410,183 @@ function strictDecodeParam(segment, res) {
   }
 }
 
+// src/server/http-server/vector-memory-handlers.ts
+import { sanitizeApiError as sanitizeApiError2 } from "@wrongstack/core/security";
+function snapshotVectorMemory(store, opts = {}) {
+  const stats = store.stats();
+  return {
+    storePath: opts.projectRoot,
+    modelCacheDir: opts.modelCacheDir,
+    stats
+  };
+}
+async function handleVectorMemoryStatus(res, getStore, opts = {}) {
+  const store = getStore();
+  if (!store) {
+    const body = { enabled: false };
+    res.writeHead(200, { "Content-Type": "application/json", "Cache-Control": "no-store" });
+    res.end(JSON.stringify(body));
+    return;
+  }
+  try {
+    const snap = snapshotVectorMemory(store, opts);
+    const body = {
+      enabled: true,
+      storePath: snap.storePath,
+      modelCacheDir: snap.modelCacheDir,
+      providerId: snap.stats.modelId,
+      modelId: snap.stats.modelId,
+      dimensions: snap.stats.dimensions,
+      entries: snap.stats.entries,
+      vectors: snap.stats.vectors,
+      providers: snap.stats.providers
+    };
+    res.writeHead(200, { "Content-Type": "application/json", "Cache-Control": "no-store" });
+    res.end(JSON.stringify(body));
+  } catch (error2) {
+    res.writeHead(500, { "Content-Type": "application/json" });
+    res.end(
+      JSON.stringify({
+        error: "Vector memory status failed",
+        detail: sanitizeApiError2(error2)
+      })
+    );
+  }
+}
+function parseSearchParams(url) {
+  const query = url.searchParams.get("q") ?? "";
+  const rawLimit = Number.parseInt(url.searchParams.get("limit") ?? "10", 10);
+  const limit = Math.min(50, Math.max(1, Number.isFinite(rawLimit) ? rawLimit : 10));
+  const rawThreshold = url.searchParams.get("threshold");
+  const threshold = rawThreshold !== null && rawThreshold !== "" ? Math.max(0, Math.min(1, Number.parseFloat(rawThreshold))) : void 0;
+  return { query, limit, threshold: Number.isFinite(threshold) ? threshold : void 0 };
+}
+async function handleVectorMemorySearch(res, url, getStore) {
+  const store = getStore();
+  if (!store) {
+    res.writeHead(503, { "Content-Type": "application/json" });
+    res.end(JSON.stringify({ error: "Vector memory not enabled in this host" }));
+    return;
+  }
+  const { query, limit, threshold } = parseSearchParams(url);
+  if (query.trim().length === 0) {
+    res.writeHead(400, { "Content-Type": "application/json" });
+    res.end(JSON.stringify({ error: "Missing required query parameter `q`" }));
+    return;
+  }
+  try {
+    const hits = await store.search(query, {
+      limit,
+      ...threshold !== void 0 ? { threshold } : {}
+    });
+    const body = {
+      hits: hits.map((h) => ({
+        id: h.entry.id,
+        score: h.score,
+        text: h.entry.text,
+        ...h.entry.summary ? { summary: h.entry.summary } : {},
+        tags: h.entry.tags
+      })),
+      count: hits.length
+    };
+    res.writeHead(200, { "Content-Type": "application/json", "Cache-Control": "no-store" });
+    res.end(JSON.stringify(body));
+  } catch (error2) {
+    res.writeHead(500, { "Content-Type": "application/json" });
+    res.end(
+      JSON.stringify({
+        error: "Vector memory search failed",
+        detail: sanitizeApiError2(error2)
+      })
+    );
+  }
+}
+function parseStoreBody(req) {
+  return new Promise((resolve20) => {
+    let raw = "";
+    req.setEncoding("utf8");
+    req.on("data", (chunk) => {
+      raw += chunk;
+      if (raw.length > 64 * 1024) {
+        req.destroy();
+        resolve20(null);
+      }
+    });
+    req.on("end", () => {
+      try {
+        resolve20(raw ? JSON.parse(raw) : {});
+      } catch {
+        resolve20(null);
+      }
+    });
+    req.on("error", () => resolve20(null));
+  });
+}
+async function handleVectorMemoryStore(res, req, getStore) {
+  const store = getStore();
+  if (!store) {
+    res.writeHead(503, { "Content-Type": "application/json" });
+    res.end(JSON.stringify({ error: "Vector memory not enabled in this host" }));
+    return;
+  }
+  const body = await parseStoreBody(req);
+  if (!body) {
+    res.writeHead(400, { "Content-Type": "application/json" });
+    res.end(JSON.stringify({ error: "Malformed JSON body" }));
+    return;
+  }
+  const text2 = typeof body.text === "string" ? body.text.trim() : "";
+  if (text2.length === 0) {
+    res.writeHead(400, { "Content-Type": "application/json" });
+    res.end(JSON.stringify({ error: "Missing required field `text`" }));
+    return;
+  }
+  const tags = Array.isArray(body.tags) ? body.tags.filter((t) => typeof t === "string") : [];
+  try {
+    const entry = await store.remember({ text: text2, tags });
+    res.writeHead(200, { "Content-Type": "application/json" });
+    res.end(
+      JSON.stringify({
+        id: entry.id,
+        hasVector: entry.vector !== void 0,
+        dimensions: entry.dimensions
+      })
+    );
+  } catch (error2) {
+    res.writeHead(500, { "Content-Type": "application/json" });
+    res.end(
+      JSON.stringify({
+        error: "Vector memory store failed",
+        detail: sanitizeApiError2(error2)
+      })
+    );
+  }
+}
+async function handleVectorMemoryForget(res, url, getStore) {
+  const store = getStore();
+  if (!store) {
+    res.writeHead(503, { "Content-Type": "application/json" });
+    res.end(JSON.stringify({ error: "Vector memory not enabled in this host" }));
+    return;
+  }
+  const match = /^\/api\/vector-memory\/store\/([^/]+)$/.exec(url.pathname);
+  const id = match ? strictDecodeParam(decodeSessionId(match[1]), res) : null;
+  if (id === null) return;
+  try {
+    const removed = store.forget(id);
+    res.writeHead(200, { "Content-Type": "application/json" });
+    res.end(JSON.stringify({ removed }));
+  } catch (error2) {
+    res.writeHead(500, { "Content-Type": "application/json" });
+    res.end(
+      JSON.stringify({
+        error: "Vector memory forget failed",
+        detail: sanitizeApiError2(error2)
+      })
+    );
+  }
+}
+
 // src/server/http-server/api-router.ts
 async function handleApiRoutes(req, res, url, deps2, requireAccessToken, accessTokenOk, getTechStackRuntime) {
   if (url.pathname === "/api/fleet/ping" && req.method === "POST") {
@@ -10748,7 +10925,7 @@ async function handleApiRoutes(req, res, url, deps2, requireAccessToken, accessT
       res.end(
         JSON.stringify({
           error: "TechStack store unavailable",
-          detail: sanitizeApiError2(error2)
+          detail: sanitizeApiError3(error2)
         })
       );
       return true;
@@ -10811,6 +10988,54 @@ async function handleApiRoutes(req, res, url, deps2, requireAccessToken, accessT
     );
     return true;
   }
+  const vectorForgetMatch = /^\/api\/vector-memory\/store\/([^/]+)$/.exec(url.pathname);
+  if (vectorForgetMatch && req.method === "DELETE") {
+    if (requireAccessToken && !accessTokenOk) {
+      res.writeHead(401, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "Unauthorized" }));
+      return true;
+    }
+    await handleVectorMemoryForget(
+      res,
+      url,
+      () => deps2.getVectorMemoryStore?.()
+    );
+    return true;
+  }
+  if (url.pathname === "/api/vector-memory/status" && req.method === "GET") {
+    if (requireAccessToken && !accessTokenOk) {
+      res.writeHead(401, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "Unauthorized" }));
+      return true;
+    }
+    await handleVectorMemoryStatus(
+      res,
+      () => deps2.getVectorMemoryStore?.(),
+      {
+        ...deps2.projectRoot ? { projectRoot: deps2.projectRoot } : {},
+        ...deps2.vectorMemoryModelCacheDir ? { modelCacheDir: deps2.vectorMemoryModelCacheDir } : {}
+      }
+    );
+    return true;
+  }
+  if (url.pathname === "/api/vector-memory/search" && req.method === "GET") {
+    if (requireAccessToken && !accessTokenOk) {
+      res.writeHead(401, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "Unauthorized" }));
+      return true;
+    }
+    await handleVectorMemorySearch(res, url, () => deps2.getVectorMemoryStore?.());
+    return true;
+  }
+  if (url.pathname === "/api/vector-memory/store" && req.method === "POST") {
+    if (requireAccessToken && !accessTokenOk) {
+      res.writeHead(401, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "Unauthorized" }));
+      return true;
+    }
+    await handleVectorMemoryStore(res, req, () => deps2.getVectorMemoryStore?.());
+    return true;
+  }
   if (url.pathname === "/api/deadcode/action-plan" && req.method === "POST") {
     await handleDeadCodeActionPlan(
       res,
@@ -14988,7 +15213,9 @@ async function startStaticServe(opts, deps2 = {}) {
     apiToken: opts.apiToken,
     requireToken: opts.requireToken,
     allowedHostnames: opts.allowedHostnames,
-    intakeService
+    intakeService,
+    ...opts.getVectorMemoryStore ? { getVectorMemoryStore: opts.getVectorMemoryStore } : {},
+    ...opts.vectorMemoryModelCacheDir ? { vectorMemoryModelCacheDir: opts.vectorMemoryModelCacheDir } : {}
   });
   if (!opts.deferListen) {
     server.listen(opts.httpPort, opts.host);
@@ -19429,6 +19656,10 @@ function createSessionHandlers(ctx) {
           return;
         }
       } else {
+        try {
+          ctx.abortActiveRun?.(clearedSessionId);
+        } catch {
+        }
         ctx.context.state.replaceMessages([]);
         ctx.context.state.replaceTodos([]);
         resetContextAccounting();
@@ -21424,7 +21655,7 @@ function createEmbeddedMessageRouter(deps2) {
     // background after session.new/resume. The run's own end() cleanup
     // removes controllers from the map when it unwinds.
     abortActiveRun: (sessionId) => {
-      if (sessionId) {
+      if (sessionId && deps2.conversationCtx.abortControllers.has(sessionId)) {
         deps2.conversationCtx.abortControllers.get(sessionId)?.abort();
       } else {
         for (const controller of [...deps2.conversationCtx.abortControllers.values()]) {
@@ -27356,7 +27587,9 @@ function startHttpServer(opts) {
     getLlm: opts.getLlm,
     executePackageOperation: opts.executePackageOperation,
     projectRoot: opts.projectRoot,
-    intakeService
+    intakeService,
+    ...opts.getVectorMemoryStore ? { getVectorMemoryStore: opts.getVectorMemoryStore } : {},
+    ...opts.vectorMemoryModelCacheDir ? { vectorMemoryModelCacheDir: opts.vectorMemoryModelCacheDir } : {}
   });
   return httpServer;
 }

package/dist/server/entry.js

@@ -8889,7 +8889,7 @@ function verifyClient(input) {
 
 // src/server/http-server/api-router.ts
 import * as v8 from "node:v8";
-import { sanitizeApiError as sanitizeApiError2 } from "@wrongstack/core/security";
+import { sanitizeApiError as sanitizeApiError3 } from "@wrongstack/core/security";
 import { getIndexState as getIndexState2 } from "@wrongstack/tools";
 
 // src/server/codemap-handlers.ts
@@ -10316,6 +10316,183 @@ function strictDecodeParam(segment, res) {
   }
 }
 
+// src/server/http-server/vector-memory-handlers.ts
+import { sanitizeApiError as sanitizeApiError2 } from "@wrongstack/core/security";
+function snapshotVectorMemory(store, opts = {}) {
+  const stats = store.stats();
+  return {
+    storePath: opts.projectRoot,
+    modelCacheDir: opts.modelCacheDir,
+    stats
+  };
+}
+async function handleVectorMemoryStatus(res, getStore, opts = {}) {
+  const store = getStore();
+  if (!store) {
+    const body = { enabled: false };
+    res.writeHead(200, { "Content-Type": "application/json", "Cache-Control": "no-store" });
+    res.end(JSON.stringify(body));
+    return;
+  }
+  try {
+    const snap = snapshotVectorMemory(store, opts);
+    const body = {
+      enabled: true,
+      storePath: snap.storePath,
+      modelCacheDir: snap.modelCacheDir,
+      providerId: snap.stats.modelId,
+      modelId: snap.stats.modelId,
+      dimensions: snap.stats.dimensions,
+      entries: snap.stats.entries,
+      vectors: snap.stats.vectors,
+      providers: snap.stats.providers
+    };
+    res.writeHead(200, { "Content-Type": "application/json", "Cache-Control": "no-store" });
+    res.end(JSON.stringify(body));
+  } catch (error2) {
+    res.writeHead(500, { "Content-Type": "application/json" });
+    res.end(
+      JSON.stringify({
+        error: "Vector memory status failed",
+        detail: sanitizeApiError2(error2)
+      })
+    );
+  }
+}
+function parseSearchParams(url) {
+  const query = url.searchParams.get("q") ?? "";
+  const rawLimit = Number.parseInt(url.searchParams.get("limit") ?? "10", 10);
+  const limit = Math.min(50, Math.max(1, Number.isFinite(rawLimit) ? rawLimit : 10));
+  const rawThreshold = url.searchParams.get("threshold");
+  const threshold = rawThreshold !== null && rawThreshold !== "" ? Math.max(0, Math.min(1, Number.parseFloat(rawThreshold))) : void 0;
+  return { query, limit, threshold: Number.isFinite(threshold) ? threshold : void 0 };
+}
+async function handleVectorMemorySearch(res, url, getStore) {
+  const store = getStore();
+  if (!store) {
+    res.writeHead(503, { "Content-Type": "application/json" });
+    res.end(JSON.stringify({ error: "Vector memory not enabled in this host" }));
+    return;
+  }
+  const { query, limit, threshold } = parseSearchParams(url);
+  if (query.trim().length === 0) {
+    res.writeHead(400, { "Content-Type": "application/json" });
+    res.end(JSON.stringify({ error: "Missing required query parameter `q`" }));
+    return;
+  }
+  try {
+    const hits = await store.search(query, {
+      limit,
+      ...threshold !== void 0 ? { threshold } : {}
+    });
+    const body = {
+      hits: hits.map((h) => ({
+        id: h.entry.id,
+        score: h.score,
+        text: h.entry.text,
+        ...h.entry.summary ? { summary: h.entry.summary } : {},
+        tags: h.entry.tags
+      })),
+      count: hits.length
+    };
+    res.writeHead(200, { "Content-Type": "application/json", "Cache-Control": "no-store" });
+    res.end(JSON.stringify(body));
+  } catch (error2) {
+    res.writeHead(500, { "Content-Type": "application/json" });
+    res.end(
+      JSON.stringify({
+        error: "Vector memory search failed",
+        detail: sanitizeApiError2(error2)
+      })
+    );
+  }
+}
+function parseStoreBody(req) {
+  return new Promise((resolve19) => {
+    let raw = "";
+    req.setEncoding("utf8");
+    req.on("data", (chunk) => {
+      raw += chunk;
+      if (raw.length > 64 * 1024) {
+        req.destroy();
+        resolve19(null);
+      }
+    });
+    req.on("end", () => {
+      try {
+        resolve19(raw ? JSON.parse(raw) : {});
+      } catch {
+        resolve19(null);
+      }
+    });
+    req.on("error", () => resolve19(null));
+  });
+}
+async function handleVectorMemoryStore(res, req, getStore) {
+  const store = getStore();
+  if (!store) {
+    res.writeHead(503, { "Content-Type": "application/json" });
+    res.end(JSON.stringify({ error: "Vector memory not enabled in this host" }));
+    return;
+  }
+  const body = await parseStoreBody(req);
+  if (!body) {
+    res.writeHead(400, { "Content-Type": "application/json" });
+    res.end(JSON.stringify({ error: "Malformed JSON body" }));
+    return;
+  }
+  const text = typeof body.text === "string" ? body.text.trim() : "";
+  if (text.length === 0) {
+    res.writeHead(400, { "Content-Type": "application/json" });
+    res.end(JSON.stringify({ error: "Missing required field `text`" }));
+    return;
+  }
+  const tags = Array.isArray(body.tags) ? body.tags.filter((t) => typeof t === "string") : [];
+  try {
+    const entry = await store.remember({ text, tags });
+    res.writeHead(200, { "Content-Type": "application/json" });
+    res.end(
+      JSON.stringify({
+        id: entry.id,
+        hasVector: entry.vector !== void 0,
+        dimensions: entry.dimensions
+      })
+    );
+  } catch (error2) {
+    res.writeHead(500, { "Content-Type": "application/json" });
+    res.end(
+      JSON.stringify({
+        error: "Vector memory store failed",
+        detail: sanitizeApiError2(error2)
+      })
+    );
+  }
+}
+async function handleVectorMemoryForget(res, url, getStore) {
+  const store = getStore();
+  if (!store) {
+    res.writeHead(503, { "Content-Type": "application/json" });
+    res.end(JSON.stringify({ error: "Vector memory not enabled in this host" }));
+    return;
+  }
+  const match = /^\/api\/vector-memory\/store\/([^/]+)$/.exec(url.pathname);
+  const id = match ? strictDecodeParam(decodeSessionId(match[1]), res) : null;
+  if (id === null) return;
+  try {
+    const removed = store.forget(id);
+    res.writeHead(200, { "Content-Type": "application/json" });
+    res.end(JSON.stringify({ removed }));
+  } catch (error2) {
+    res.writeHead(500, { "Content-Type": "application/json" });
+    res.end(
+      JSON.stringify({
+        error: "Vector memory forget failed",
+        detail: sanitizeApiError2(error2)
+      })
+    );
+  }
+}
+
 // src/server/http-server/api-router.ts
 async function handleApiRoutes(req, res, url, deps2, requireAccessToken, accessTokenOk, getTechStackRuntime) {
   if (url.pathname === "/api/fleet/ping" && req.method === "POST") {
@@ -10654,7 +10831,7 @@ async function handleApiRoutes(req, res, url, deps2, requireAccessToken, accessT
       res.end(
         JSON.stringify({
           error: "TechStack store unavailable",
-          detail: sanitizeApiError2(error2)
+          detail: sanitizeApiError3(error2)
         })
       );
       return true;
@@ -10717,6 +10894,54 @@ async function handleApiRoutes(req, res, url, deps2, requireAccessToken, accessT
     );
     return true;
   }
+  const vectorForgetMatch = /^\/api\/vector-memory\/store\/([^/]+)$/.exec(url.pathname);
+  if (vectorForgetMatch && req.method === "DELETE") {
+    if (requireAccessToken && !accessTokenOk) {
+      res.writeHead(401, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "Unauthorized" }));
+      return true;
+    }
+    await handleVectorMemoryForget(
+      res,
+      url,
+      () => deps2.getVectorMemoryStore?.()
+    );
+    return true;
+  }
+  if (url.pathname === "/api/vector-memory/status" && req.method === "GET") {
+    if (requireAccessToken && !accessTokenOk) {
+      res.writeHead(401, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "Unauthorized" }));
+      return true;
+    }
+    await handleVectorMemoryStatus(
+      res,
+      () => deps2.getVectorMemoryStore?.(),
+      {
+        ...deps2.projectRoot ? { projectRoot: deps2.projectRoot } : {},
+        ...deps2.vectorMemoryModelCacheDir ? { modelCacheDir: deps2.vectorMemoryModelCacheDir } : {}
+      }
+    );
+    return true;
+  }
+  if (url.pathname === "/api/vector-memory/search" && req.method === "GET") {
+    if (requireAccessToken && !accessTokenOk) {
+      res.writeHead(401, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "Unauthorized" }));
+      return true;
+    }
+    await handleVectorMemorySearch(res, url, () => deps2.getVectorMemoryStore?.());
+    return true;
+  }
+  if (url.pathname === "/api/vector-memory/store" && req.method === "POST") {
+    if (requireAccessToken && !accessTokenOk) {
+      res.writeHead(401, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "Unauthorized" }));
+      return true;
+    }
+    await handleVectorMemoryStore(res, req, () => deps2.getVectorMemoryStore?.());
+    return true;
+  }
   if (url.pathname === "/api/deadcode/action-plan" && req.method === "POST") {
     await handleDeadCodeActionPlan(
       res,
@@ -17958,6 +18183,10 @@ function createSessionHandlers(ctx) {
           return;
         }
       } else {
+        try {
+          ctx.abortActiveRun?.(clearedSessionId);
+        } catch {
+        }
         ctx.context.state.replaceMessages([]);
         ctx.context.state.replaceTodos([]);
         resetContextAccounting();
@@ -25234,7 +25463,9 @@ function startHttpServer(opts) {
     getLlm: opts.getLlm,
     executePackageOperation: opts.executePackageOperation,
     projectRoot: opts.projectRoot,
-    intakeService
+    intakeService,
+    ...opts.getVectorMemoryStore ? { getVectorMemoryStore: opts.getVectorMemoryStore } : {},
+    ...opts.vectorMemoryModelCacheDir ? { vectorMemoryModelCacheDir: opts.vectorMemoryModelCacheDir } : {}
   });
   return httpServer;
 }

package/dist/server/frontend-static-serve.d.ts

@@ -84,6 +84,16 @@ export interface StaticServeOptions {
      * routes correctly answer 503.
      */
     intakeService?: CreateHttpServerOptions['intakeService'];
+    /**
+     * Optional vector-memory store. When provided, the four
+     * `/api/vector-memory/{status,search,store,store/:id}` endpoints become
+     * active. When omitted, the routes respond with `{ enabled: false }` or
+     * 503 — a non-CLI webui-server host stays on its existing surface with
+     * zero behavior change.
+     */
+    getVectorMemoryStore?: CreateHttpServerOptions['getVectorMemoryStore'];
+    /** Model cache directory for the vector-memory provider. */
+    vectorMemoryModelCacheDir?: string | undefined;
 }
 /**
  * Resolve the webui package's built `dist` directory.

package/dist/server/http-server/api-router.d.ts

@@ -1,5 +1,6 @@
 import type * as http from 'node:http';
 import { type TechStackEvent } from '../techstack-handlers.js';
+import type { VectorMemoryStore } from '@wrongstack/vector-memory';
 export interface ApiRouterDeps {
     globalRoot?: string | undefined;
     projectRoot?: string | undefined;
@@ -13,6 +14,16 @@ export interface ApiRouterDeps {
         model: string;
     } | undefined) | undefined;
     executePackageOperation?: import('../techstack-handlers.js').TechStackHandlerDeps['executePackageOperation'];
+    /**
+     * Optional vector memory store. When provided, the four
+     * `GET /api/vector-memory/status|search` and `POST /api/vector-memory/store`
+     * / `DELETE /api/vector-memory/store/:id` routes become active.
+     * Defaults to undefined so non-CLI webui-server hosts (e.g. a headless
+     * fleet dashboard) are unaffected.
+     */
+    getVectorMemoryStore?: (() => VectorMemoryStore | undefined) | undefined;
+    /** Model cache directory for the vector memory provider. */
+    vectorMemoryModelCacheDir?: string | undefined;
 }
 export declare function handleApiRoutes(req: http.IncomingMessage, res: http.ServerResponse, url: URL, deps: ApiRouterDeps, requireAccessToken: boolean, accessTokenOk: boolean, getTechStackRuntime: () => Promise<{
     store: import('@wrongstack/techstack').TechStackStore;

package/dist/server/http-server/vector-memory-handlers.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Vector memory HTTP handlers — minimal visibility surface for the
+ * WebUI/SimpleUI. Exposes the active store/provider, the model cache
+ * location, entry counts, and a search endpoint. Strictly opt-in:
+ * `getVectorMemoryStore` defaults to undefined so non-CLI webui-server
+ * hosts (e.g. a headless fleet dashboard) are unaffected.
+ */
+import type * as http from 'node:http';
+import type { VectorMemoryStore } from '@wrongstack/vector-memory';
+export interface VectorMemoryStatusResponse {
+    enabled: boolean;
+    storePath?: string | undefined;
+    modelCacheDir?: string | undefined;
+    providerId?: string | undefined;
+    modelId?: string | undefined;
+    dimensions?: number | undefined;
+    entries?: number | undefined;
+    vectors?: number | undefined;
+    providers?: string[] | undefined;
+}
+export interface VectorMemorySearchHit {
+    id: string;
+    score: number;
+    text: string;
+    summary?: string | undefined;
+    tags: string[];
+}
+export interface VectorMemorySearchResponse {
+    hits: VectorMemorySearchHit[];
+    count: number;
+}
+/** Shape the store exposes. Kept narrow so we don't leak the full class. */
+export interface VectorMemorySnapshot {
+    storePath?: string | undefined;
+    modelCacheDir?: string | undefined;
+    stats: {
+        entries: number;
+        vectors: number;
+        providers: string[];
+        modelId: string;
+        dimensions: number;
+    };
+}
+/** Handle `GET /api/vector-memory/status`. */
+export declare function handleVectorMemoryStatus(res: http.ServerResponse, getStore: () => VectorMemoryStore | undefined, opts?: {
+    projectRoot?: string;
+    modelCacheDir?: string;
+}): Promise<void>;
+/** Handle `GET /api/vector-memory/search?q=…&limit=…&threshold=…`. */
+export declare function handleVectorMemorySearch(res: http.ServerResponse, url: URL, getStore: () => VectorMemoryStore | undefined): Promise<void>;
+/** Handle `POST /api/vector-memory/store`. */
+export declare function handleVectorMemoryStore(res: http.ServerResponse, req: http.IncomingMessage, getStore: () => VectorMemoryStore | undefined): Promise<void>;
+/** Handle `DELETE /api/vector-memory/store/:id`. */
+export declare function handleVectorMemoryForget(res: http.ServerResponse, url: URL, getStore: () => VectorMemoryStore | undefined): Promise<void>;
+//# sourceMappingURL=vector-memory-handlers.d.ts.map

package/dist/server/http-server.d.ts

@@ -121,6 +121,17 @@ export interface CreateHttpServerOptions {
      * respond 503.
      */
     intakeService?: import('@wrongstack/requirement-intake').RequirementIntakeService | undefined;
+    /**
+     * Optional vector-memory store. When provided, the four
+     * `/api/vector-memory/{status,search,store,store/:id}` endpoints become
+     * active and return live data. When omitted, the route responds with
+     * `{ enabled: false }` (status) or 503 (search/store/forget), so a
+     * non-CLI webui-server host stays on its existing surface with zero
+     * behavior change.
+     */
+    getVectorMemoryStore?: (() => import('@wrongstack/vector-memory').VectorMemoryStore | undefined) | undefined;
+    /** Model cache directory for the vector-memory provider. */
+    vectorMemoryModelCacheDir?: string | undefined;
 }
 /**
  * Create the static-file HTTP server. Returns the `http.Server` (not

package/dist/server/server-runtime.d.ts

@@ -117,6 +117,16 @@ export declare function startHttpServer(opts: {
     /** Optional pre-built intake service (tests/embeds). Defaults to a fresh
      *  per-project service backed by `projectRequirementIntakes`. */
     intakeService?: import('@wrongstack/requirement-intake').RequirementIntakeService | undefined;
+    /**
+     * Optional vector-memory store. When provided, the four
+     * `/api/vector-memory/{status,search,store,store/:id}` endpoints become
+     * active. When omitted, the routes respond with `{ enabled: false }` or
+     * 503 — a non-CLI webui-server host stays on its existing surface with
+     * zero behavior change.
+     */
+    getVectorMemoryStore?: (() => import('@wrongstack/vector-memory').VectorMemoryStore | undefined) | undefined;
+    /** Model cache directory for the vector-memory provider. */
+    vectorMemoryModelCacheDir?: string | undefined;
 }): import('node:http').Server;
 interface ShutdownDeps {
     flushSession: () => Promise<void>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/webui-server",
-  "version": "0.307.1",
+  "version": "0.308.0",
   "license": "MIT",
   "description": "WrongStack WebUI HTTP/WebSocket server module — extracted from @wrongstack/webui in PR #243/244 to remove the CLI -> @wrongstack/webui/server cross-package edge (audit §3.1.1). Pure backend: HTTP routes, WebSocket handlers, MCP tool wrappers, HTML serving. The web frontend lives in @wrongstack/webui; this package is the standalone server it can run on.",
   "keywords": [
@@ -40,16 +40,17 @@
   ],
   "dependencies": {
     "ws": "^8.21.3",
-    "@wrongstack/core": "0.307.1",
-    "@wrongstack/providers": "0.307.1",
-    "@wrongstack/kanban": "0.307.1",
-    "@wrongstack/requirement-intake": "0.307.1",
-    "@wrongstack/runtime": "0.307.1",
-    "@wrongstack/mcp": "0.307.1",
-    "@wrongstack/sage": "0.307.1",
-    "@wrongstack/sdd": "0.307.1",
-    "@wrongstack/tools": "0.307.1",
-    "@wrongstack/techstack": "0.307.1"
+    "@wrongstack/runtime": "0.308.0",
+    "@wrongstack/kanban": "0.308.0",
+    "@wrongstack/core": "0.308.0",
+    "@wrongstack/sdd": "0.308.0",
+    "@wrongstack/providers": "0.308.0",
+    "@wrongstack/sage": "0.308.0",
+    "@wrongstack/mcp": "0.308.0",
+    "@wrongstack/techstack": "0.308.0",
+    "@wrongstack/tools": "0.308.0",
+    "@wrongstack/vector-memory": "0.308.0",
+    "@wrongstack/requirement-intake": "0.308.0"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",