@wrongstack/webui-server 0.309.1 → 0.310.1

package/dist/server/proxy-runtime.d.ts

@@ -0,0 +1,82 @@
+/**
+ * WrongProxy / WrongTrace runtime seeding for the standalone WebUI server.
+ *
+ * The CLI hosts WebUI in-process via `dispatch-webui.ts`, which injects
+ * `applyWrongProxyPrefs` (from `@wrongstack/cli/wiring/proxy-wiring`) into
+ * the WS prefs handler and shares the CLI's proxy singleton. But when the
+ * WebUI server runs as its OWN process (`startWebUI`), no CLI is present to
+ * seed the `ProxyConfig` singleton in `@wrongstack/core/wiring/proxy-rewrite`
+ * — so all of the server's provider-build paths would construct providers
+ * with the raw base URL and never traverse the proxy.
+ *
+ * webui ⇏ cli, so this module cannot import `@wrongstack/cli`'s probe. It
+ * owns the same two concerns the CLI's `proxy-wiring` does, but dependency-
+ * light and self-contained:
+ *
+ *   1. Seeding the shared `ProxyConfig` singleton (`enabled` / `url`) from
+ *      `config.tools.wrongProxy` at boot.
+ *   2. A one-shot `/api/health` reachability probe that flips `active` to
+ *      true so `shouldRewriteFor()` returns true for subsequent provider
+ *      builds. Unlike the CLI's periodic probe this runs once at seed time
+ *      (the standalone server re-probes when the operator toggles the field
+ *      via `applyWrongProxyPrefs`); a long-lived daemon is assumed stable.
+ *
+ * The rewrite itself (`shouldRewriteFor` / `rewriteBaseUrl`) is pure logic
+ * in `@wrongstack/core` and is applied at each provider-build site in this
+ * server (setup-screen, routes applyModelSwitchCore, embedded-message-router,
+ * embedded-host-adapters, start-webui-credential-watcher).
+ */
+import type { Config } from '@wrongstack/core/types';
+/**
+ * Seed the shared `ProxyConfig` singleton from the persisted
+ * `config.tools.wrongProxy.{enabled,url}` block. Idempotent — safe to call
+ * at every boot. A provider that is eligible and reachable with a
+ * configured URL will then have its base URL rewritten through the proxy.
+ */
+export declare function seedWrongProxyFromConfig(config: Config): void;
+/**
+ * Probe the configured proxy daemon once and flip `active` to true when it
+ * answers a 2xx on `/api/health`. Mirrors the CLI's probe contract but
+ * without owning a `setInterval` loop. Resolves with the new `active` value.
+ * A non-2xx / timeout / ECONNREFUSED leaves `active` false so the rewriter
+ * keeps base URLs unchanged.
+ */
+export declare function probeWrongProxyActive(): Promise<boolean>;
+/**
+ * Apply the `wrongProxyEnabled` + `wrongProxyUrl` portion of a WS prefs
+ * payload, then re-probe so the rewrite reflects the new state immediately
+ * (the next provider build reads the freshly-probed `active`). Skips when the
+ * payload carries neither key. Mirrors the CLI's `applyWrongProxyPrefs`.
+ */
+export declare function applyWrongProxyPrefs(payload: Record<string, unknown>): Promise<void>;
+/**
+ * Seed the singleton from the persisted config and await the first probe so
+ * `active` is correct BEFORE the server's provider is constructed. Without
+ * the await, `setup-screen`'s `resolveSetupProvider` reads the singleton
+ * (synchronously) while `active` is still false and bakes the raw base URL
+ * into the initial provider. Mirrors the CLI's
+ * `bootstrapWrongProxy` + `awaitFirstWrongProxyProbe` pair.
+ */
+export declare function bootstrapWrongProxyFromConfig(config: Config): Promise<void>;
+/**
+ * Apply the WrongProxy / WrongTrace base-URL rewrite to ONE provider config
+ * before it is handed to a provider factory. This is the single shared seam
+ * for every WebUI-server provider-build path so the eligibility + compose
+ * rules cannot drift between call sites:
+ *
+ *   - `routes.ts` `applyModelSwitchCore` (model.switch rebuild)
+ *   - `setup-screen.ts` `resolveSetupProvider` (boot branches 1 + 2)
+ *   - `embedded-message-router.ts` `buildProvider`
+ *   - `embedded-host-adapters.ts` `applyEmbeddedModelSwitch`
+ *   - `start-webui-credential-watcher.ts` (credential hot-reload)
+ *
+ * Returns a copy of `cfg` with `baseUrl` overridden to
+ * `${proxyUrl}/proxy/<host><path>` when the toggle is on, the daemon is
+ * reachable (`active`) and the provider is eligible (openai-codex excluded
+ * by the rewriter). `fallbackBaseUrl` is used when `cfg` carries no explicit
+ * baseUrl (the call site's top-level config baseUrl). When the proxy is off
+ * or unreachable, the cfg is returned unchanged so factory construction
+ * behaves exactly as before the proxy feature existed.
+ */
+export declare function routeProviderCfgThroughProxy<T extends object>(cfg: Readonly<T>, fallbackBaseUrl: string | undefined, providerId: string): T;
+//# sourceMappingURL=proxy-runtime.d.ts.map

package/dist/server/standalone-session-identity.d.ts

@@ -1,5 +1,6 @@
 import type { EventBus } from '@wrongstack/core/kernel';
-import { AgentStatusTracker, getSessionRegistry } from '@wrongstack/core/storage';
+import { AgentStatusTracker } from '@wrongstack/core/coordination';
+import { getSessionRegistry } from '@wrongstack/core/storage';
 import type { Config, Logger } from '@wrongstack/core/types';
 export interface StandaloneSessionIdentityPaths {
     globalRoot: string;

package/dist/server/token-estimator.d.ts

@@ -1,16 +1,27 @@
 /**
  * Per-section context-window token estimate for the `context.debug` command.
  *
- * Uses the simple 4-chars-per-token heuristic — not exact, but close enough to
- * spot which section (system prompt, tool schemas, or message history) is
- * eating the context window. Tool schemas in particular are easy to overlook:
- * each tool ships its full JSON schema to the model every turn, so 20+ builtins
- * can cost 10-20k tokens on their own.
+ * Since card #5 (slice 5g) this module delegates the actual token math to
+ * the canonical calibrated estimator in `@wrongstack/core/utils`
+ * (3.5 chars/token basis + per-model-family EWM calibration — see
+ * `core/src/utils/token-estimate.ts`). Before this, the WebUI computed a
+ * private 4-chars/token estimate, so the number in the browser's context
+ * debug view diverged from what compaction and the TUI context bar were
+ * actually deciding on (~14% for typical mixed content). Delegating means
+ * the user sees the same number the system acts on.
  *
- * Extracted from `index.ts` as a pure function so the breakdown maths can be
- * unit tested without standing up a Context/ToolRegistry.
+ * User-visible shift (intentional): all token figures shown by the WebUI
+ * context breakdown now match the CLI/TUI estimator — mixed-content
+ * conversations read ~14% HIGHER than the old 4-chars/token figures
+ * (3.5 chars/token is a more conservative, over-estimating basis by
+ * design, so compaction triggers are consistent rather than optimistic).
+ * Previews, block walking, and the `ContextBreakdown` shape are unchanged.
+ *
+ * `stringifyContent` stays local: its circular-reference fallback and the
+ * duck-typed block walk below are presentation-side concerns the canonical
+ * estimator does not share (it walks typed `Message` content).
  */
-/** 4-chars-per-token heuristic estimate for a string. */
+/** Calibrated token estimate for a string — delegates to the shared basis. */
 export declare function estimateTokens(s: string): number;
 /** Stringify arbitrary content for length estimation (JSON, with fallbacks). */
 export declare function stringifyContent(c: unknown): string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/webui-server",
-  "version": "0.309.1",
+  "version": "0.310.1",
   "license": "MIT",
   "description": "WrongStack WebUI HTTP/WebSocket server module — extracted from @wrongstack/webui in PR #243/244 to remove the CLI -> @wrongstack/webui/server cross-package edge (audit §3.1.1). Pure backend: HTTP routes, WebSocket handlers, MCP tool wrappers, HTML serving. The web frontend lives in @wrongstack/webui; this package is the standalone server it can run on.",
   "keywords": [
@@ -28,10 +28,6 @@
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
     },
-    "./protocol": {
-      "types": "./dist/protocol/index.d.ts",
-      "import": "./dist/protocol/index.js"
-    },
     "./package.json": "./package.json"
   },
   "files": [
@@ -40,17 +36,18 @@
   ],
   "dependencies": {
     "ws": "^8.21.3",
-    "@wrongstack/mcp": "0.309.1",
-    "@wrongstack/core": "0.309.1",
-    "@wrongstack/runtime": "0.309.1",
-    "@wrongstack/providers": "0.309.1",
-    "@wrongstack/requirement-intake": "0.309.1",
-    "@wrongstack/kanban": "0.309.1",
-    "@wrongstack/sage": "0.309.1",
-    "@wrongstack/sdd": "0.309.1",
-    "@wrongstack/vector-memory": "0.309.1",
-    "@wrongstack/tools": "0.309.1",
-    "@wrongstack/techstack": "0.309.1"
+    "@wrongstack/core": "0.310.1",
+    "@wrongstack/kanban": "0.310.1",
+    "@wrongstack/mcp": "0.310.1",
+    "@wrongstack/sage": "0.310.1",
+    "@wrongstack/runtime": "0.310.1",
+    "@wrongstack/providers": "0.310.1",
+    "@wrongstack/sdd": "0.310.1",
+    "@wrongstack/tools": "0.310.1",
+    "@wrongstack/requirement-intake": "0.310.1",
+    "@wrongstack/vector-memory": "0.310.1",
+    "@wrongstack/techstack": "0.310.1",
+    "@wrongstack/webui-protocol": "0.310.1"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",

package/dist/protocol/client-conversation.d.ts

@@ -1,3 +0,0 @@
-export declare const CLIENT_CONVERSATION_MESSAGE_TYPES: readonly ['abort', 'ping', 'user_message', 'tool.confirm_result', 'topic.advice', 'completion.request', 'model.switch', 'model.refine', 'model.fallback_choice', 'autonomy.switch', 'context.clear', 'context.compact', 'context.debug', 'context.editor.open', 'context.editor.validate', 'context.editor.apply', 'context.mode.create', 'context.mode.delete', 'context.mode.switch', 'context.mode.update', 'context.modes.list', 'context.repair', 'mode.switch', 'modes.list', 'session.checkpoints', 'session.delete', 'session.inspect', 'session.new', 'session.rename', 'session.resume', 'session.rewind', 'session.save', 'sessions.list', 'side_effects.list', 'stats.get', 'todo.update', 'todos.clear', 'todos.get', 'todos.remove'];
-export declare const CLIENT_COLLABORATION_MESSAGE_TYPES: readonly ['collab.join', 'collab.leave', 'collab.annotate', 'collab.resolve', 'collab.request_pause', 'collab.resume', 'collab.grant_control', 'collab.inject_tool', 'mailbox.action', 'mailbox.agents', 'mailbox.clear', 'mailbox.compact', 'mailbox.messages', 'mailbox.purge', 'mailbox.send'];
-//# sourceMappingURL=client-conversation.d.ts.map

package/dist/protocol/client-integrations.d.ts

@@ -1,3 +0,0 @@
-export declare const CLIENT_KNOWLEDGE_MESSAGE_TYPES: readonly ['brain.ask', 'brain.config.get', 'brain.config.set', 'brain.risk', 'brain.status', 'chronicle.facet', 'chronicle.facets', 'chronicle.graph', 'chronicle.metrics', 'chronicle.query', 'chronicle.status', 'config.doctor', 'design.list', 'design.materialize', 'design.set', 'design.state', 'design.swap', 'design.tune', 'design.use', 'design.verify', 'memory.list', 'memory.sage.backfillRecoverable', 'memory.sage.candidateResolve', 'memory.sage.delete', 'memory.sage.forFile', 'memory.sage.get', 'memory.sage.graph', 'memory.sage.list', 'memory.sage.listCandidates', 'memory.sage.listPage', 'memory.sage.recover', 'memory.sage.remember', 'memory.sage.searchBreakdown', 'memory.sage.update'];
-export declare const CLIENT_EXTENSION_MESSAGE_TYPES: readonly ['auth.oauth.cancel', 'auth.oauth.code', 'auth.oauth.start', 'mcp.add', 'mcp.disable', 'mcp.discover', 'mcp.enable', 'mcp.list', 'mcp.prompt.get', 'mcp.prompts', 'mcp.remove', 'mcp.resource.read', 'mcp.resources', 'mcp.restart', 'mcp.sleep', 'mcp.update', 'mcp.wake', 'prompts.content', 'prompts.create', 'prompts.favorite', 'prompts.journal', 'prompts.list', 'prompts.recent', 'prompts.search', 'prompts.used', 'skills.content', 'skills.create', 'skills.edit', 'skills.export', 'skills.install', 'skills.list', 'skills.uninstall', 'skills.update'];
-//# sourceMappingURL=client-integrations.d.ts.map

package/dist/protocol/client-operations.d.ts

@@ -1,3 +0,0 @@
-export declare const CLIENT_GOAL_MESSAGE_TYPES: readonly ['goal-state.get', 'goal.addTask', 'goal.assess', 'goal.assignTask', 'goal.clear', 'goal.get', 'goal.list', 'goal.load', 'goal.moveTask', 'goal.pause', 'goal.resume', 'goal.retryTask', 'goal.revert', 'goal.runTask', 'goal.save', 'goal.selectPhase', 'goal.start', 'goal.state', 'goal.status', 'goal.stop', 'goal.taskStatus', 'goal.toggleAutonomous', 'plan.get', 'plan.item.update', 'plan.template_use', 'task.update', 'tasks.get'];
-export declare const CLIENT_SDD_MESSAGE_TYPES: readonly ['sdd.board.cancel_task', 'sdd.board.cleanup_worktrees', 'sdd.board.delete_task', 'sdd.board.destroy', 'sdd.board.get', 'sdd.board.list', 'sdd.board.pause', 'sdd.board.reassign', 'sdd.board.resume', 'sdd.board.retry', 'sdd.board.retry_all_failed', 'sdd.board.rollback', 'sdd.board.set_task_fallbacks', 'sdd.board.set_task_model', 'sdd.board.set_task_verification', 'sdd.board.split_task', 'sdd.board.stop', 'sdd.run.from_graph', 'sdd.run.from_spec', 'sdd.run.start', 'sdd.spec.approve', 'sdd.spec.discard', 'sdd.spec.get', 'sdd.spec.message', 'sdd.spec.rewind', 'sdd.spec.start', 'specs.get', 'specs.list', 'specs.taskStatus'];
-//# sourceMappingURL=client-operations.d.ts.map

package/dist/protocol/client-workspace.d.ts

@@ -1,3 +0,0 @@
-export declare const CLIENT_WORKSPACE_MESSAGE_TYPES: readonly ['files.create', 'files.delete', 'files.list', 'files.move', 'files.read', 'files.rename', 'files.skeleton', 'files.tree', 'files.write', 'git.changes', 'git.diff', 'git.info', 'projects.add', 'projects.list', 'projects.select', 'working_dir.set', 'worktree.cleanup', 'worktree.diff', 'worktree.merge', 'worktree.remove', 'worktree.scan', 'shell.open', 'process.kill', 'process.killAll', 'process.list', 'terminal.close', 'terminal.create', 'terminal.input', 'terminal.resize'];
-export declare const CLIENT_CONFIGURATION_MESSAGE_TYPES: readonly ['codebase.index.server.shutdown', 'connections.health', 'connections.service_action', 'diag.get', 'key.add', 'key.delete', 'key.set_active', 'key.update', 'prefs.get', 'prefs.update', 'provider.add', 'provider.clear_models', 'provider.custom_models.remove', 'provider.custom_models.set', 'provider.models', 'provider.models.search', 'provider.probe', 'provider.remove', 'provider.status.clear', 'provider.status.get', 'provider.status.retry', 'provider.undo_clear', 'provider.update', 'providers.list', 'providers.saved', 'tool.disable', 'tool.enable', 'tools.list', 'webui.shutdown'];
-//# sourceMappingURL=client-workspace.d.ts.map

package/dist/protocol/connection-fsm.d.ts

@@ -1,39 +0,0 @@
-export type SurfaceConnectionPhase = 'idle' | 'connecting' | 'open' | 'reconnecting' | 'closed';
-export interface SurfaceConnectionConfig {
-    maxReconnectAttempts: number;
-    initialBackoffMs: number;
-    maxBackoffMs: number;
-    backoffMultiplier: number;
-    jitterRatio: number;
-    queueLimit: number;
-    heartbeatIntervalMs: number;
-    heartbeatTimeoutMs: number;
-}
-export interface SurfaceConnectionState {
-    phase: SurfaceConnectionPhase;
-    reconnectAttempt: number;
-    lastActivityAt: number | null;
-    stopped: boolean;
-}
-export interface ReconnectPlan {
-    attempt: number;
-    delayMs: number;
-    retryAt: number;
-}
-export declare const DEFAULT_SURFACE_CONNECTION_CONFIG: SurfaceConnectionConfig;
-export declare function createSurfaceConnectionState(): SurfaceConnectionState;
-export declare function markConnectionConnecting(state: SurfaceConnectionState): SurfaceConnectionState;
-export declare function markConnectionOpen(state: SurfaceConnectionState, now?: number): SurfaceConnectionState;
-export declare function markConnectionActivity(state: SurfaceConnectionState, now?: number): SurfaceConnectionState;
-export declare function stopConnection(state: SurfaceConnectionState): SurfaceConnectionState;
-export declare function resetConnection(state: SurfaceConnectionState): SurfaceConnectionState;
-export declare function planConnectionReconnect(state: SurfaceConnectionState, config: SurfaceConnectionConfig, now?: number, random?: () => number): {
-    state: SurfaceConnectionState;
-    plan: ReconnectPlan | null;
-};
-export declare function isConnectionHeartbeatTimedOut(state: SurfaceConnectionState, config: SurfaceConnectionConfig, now?: number): boolean;
-export declare function enqueueBounded<T>(queue: readonly T[], item: T, limit: number): {
-    queue: T[];
-    dropped: T | null;
-};
-//# sourceMappingURL=connection-fsm.d.ts.map

package/dist/protocol/decoder.d.ts

@@ -1,6 +0,0 @@
-import type { CanonicalClientMessage, CanonicalServerMessage, ProtocolDecodeResult } from './types.js';
-export declare function decodeProtocolMessage(input: unknown, direction: 'client'): ProtocolDecodeResult<CanonicalClientMessage>;
-export declare function decodeProtocolMessage(input: unknown, direction: 'server'): ProtocolDecodeResult<CanonicalServerMessage>;
-export declare function decodeProtocolFrame(frame: string, direction: 'client'): ProtocolDecodeResult<CanonicalClientMessage>;
-export declare function decodeProtocolFrame(frame: string, direction: 'server'): ProtocolDecodeResult<CanonicalServerMessage>;
-//# sourceMappingURL=decoder.d.ts.map

package/dist/protocol/index.d.ts

@@ -1,8 +0,0 @@
-export { createSurfaceConnectionState, DEFAULT_SURFACE_CONNECTION_CONFIG, enqueueBounded, isConnectionHeartbeatTimedOut, markConnectionActivity, markConnectionConnecting, markConnectionOpen, planConnectionReconnect, type ReconnectPlan, resetConnection, type SurfaceConnectionConfig, type SurfaceConnectionPhase, type SurfaceConnectionState, stopConnection, } from './connection-fsm.js';
-export { decodeProtocolFrame, decodeProtocolMessage } from './decoder.js';
-export { type ChatProjection, type FleetProjection, type HqAlertProjection, type HqCommandStatusProjection, type HqEventProjection, type HqFleetProjection, projectChatMessage, projectFleetMessage, projectHqAlertMessage, projectHqCommandStatusMessage, projectHqEventMessage, projectHqFleetMessage, projectSessionMessage, projectToolMessage, type SessionProjection, type ToolProjection, } from './projections.js';
-export { buildReplayPayload, REPLAY_MESSAGE_CAP, type ReplayPayloadFields, type ReplaySource, } from './replay-payload.js';
-export { CLIENT_MESSAGE_TYPES, type ExactClientMessageType, type ExactServerMessageType, isRegisteredMessageType, SERVER_MESSAGE_TYPES, } from './registry.js';
-export type { CanonicalClientMessage, CanonicalClientMessageType, CanonicalServerMessage, CanonicalServerMessageType, ProtocolDecodeIssue, ProtocolDecodeResult, ProtocolDirection, ProtocolEnvelope, } from './types.js';
-export { negotiateProtocol, type ProtocolAdvertisement, type ProtocolNegotiation, protocolAdvertisement, SURFACE_PROTOCOL_CAPABILITIES, SURFACE_PROTOCOL_MIN_VERSION, SURFACE_PROTOCOL_VERSION, type SurfaceProtocolCapability, } from './version.js';
-//# sourceMappingURL=index.d.ts.map