@wrongstack/webui-server 0.310.0 → 0.313.0

package/dist/index.js

@@ -97,7 +97,12 @@ var BOOLEAN_PREF_KEYS = /* @__PURE__ */ new Set([
   // `prefs.update` exactly so the panel does not error with
   // "unknown preference key".
   "readSymbols",
-  "showSageMemoryInject"
+  "showSageMemoryInject",
+  // WrongProxy / WrongTrace master switch. When on, the CLI rewrites every
+  // provider's base URL through the configured proxy URL (default
+  // http://localhost:3444 → http://localhost:3444/proxy/<host><path>).
+  // Excluded providers (openai-codex) flow through unchanged.
+  "wrongProxyEnabled"
 ]);
 var STRING_ARRAY_PREF_KEYS = /* @__PURE__ */ new Set([
   "fallbackModels",
@@ -164,7 +169,11 @@ var STRING_PREF_KEYS = /* @__PURE__ */ new Set([
   "chimeraModel",
   "autoReviewProvider",
   "autoReviewModel",
-  "autoReviewFallbackProfile"
+  "autoReviewFallbackProfile",
+  // WrongProxy / WrongTrace URL. Empty = unset. Default lives in
+  // `LocalPrefs.DEFAULTS.wrongProxyUrl` ('http://localhost:3444'); users
+  // can override here for non-default daemon ports / paths.
+  "wrongProxyUrl"
 ]);
 var ENUM_PREF_KEYS = {
   autonomy: AUTONOMY_VALUES,
@@ -178,7 +187,7 @@ var ENUM_PREF_KEYS = {
   reasoningEffort: REASONING_EFFORT_VALUES,
   cacheTtl: CACHE_TTL_VALUES,
   statuslineMode: /* @__PURE__ */ new Set(["minimum", "detailed", "no-color"]),
-  animationStyle: /* @__PURE__ */ new Set(["rainbow", "wave", "pulse", "dots", "breathe", "cycle"]),
+  animationStyle: /* @__PURE__ */ new Set(["rainbow", "wave", "pulse", "dots", "breathe", "static", "cycle"]),
   fsAccess: /* @__PURE__ */ new Set(["unrestricted", "project"]),
   // Chimera autoFix + auto-review cascade threshold
   chimeraAutoFix: /* @__PURE__ */ new Set(["off", "ask", "auto"]),
@@ -1054,7 +1063,7 @@ function routingPatch(payload) {
 function handlePrefsGet(ctx, ws) {
   ctx.send(ws, { type: "prefs.updated", payload: ctx.snapshot() });
 }
-function handlePrefsUpdate(ctx, ws, input) {
+async function handlePrefsUpdate(ctx, ws, input) {
   const parsed = validatePrefsUpdatePayload(input);
   if (!parsed.ok) {
     sendResult(ctx, ws, false, parsed.message);
@@ -1087,6 +1096,9 @@ function handlePrefsUpdate(ctx, ws, input) {
       ({ setDebugStreamEnabled }) => setDebugStreamEnabled(payload["debugStream"])
     );
   }
+  if (typeof payload["wrongProxyEnabled"] === "boolean" || typeof payload["wrongProxyUrl"] === "string") {
+    await ctx.applyWrongProxyPrefs?.(payload);
+  }
   if (typeof payload["logLevel"] === "string" && ["debug", "info", "warn", "error"].includes(payload["logLevel"])) {
     ctx.setLogLevel?.(payload["logLevel"]);
   }
@@ -6364,7 +6376,8 @@ function estimateTokens(s) {
 function stringifyContent(c) {
   if (typeof c === "string") return c;
   try {
-    return JSON.stringify(c);
+    const serialized = JSON.stringify(c);
+    return serialized === void 0 ? String(c) : serialized;
   } catch {
     return String(c);
   }
@@ -7290,6 +7303,8 @@ function seedContextMeta(config, context) {
   meta["tgDelegate"] = tgExt?.["notifyOnDelegate"] !== false;
   const tgMs = tgExt?.["longToolThresholdMs"];
   meta["tgLongToolMs"] = typeof tgMs === "number" ? tgMs : 3e4;
+  meta["wrongProxyEnabled"] = config.tools?.wrongProxy?.enabled === true;
+  meta["wrongProxyUrl"] = config.tools?.wrongProxy?.url ?? "";
   {
     const pluginsEnabled = {};
     const record = (name2) => {
@@ -7662,6 +7677,87 @@ import * as path13 from "node:path";
 import { TOKENS } from "@wrongstack/core/kernel";
 import { DefaultSessionStore as DefaultSessionStore2 } from "@wrongstack/core/storage";
 import { toErrorMessage as toErrorMessage7, wstackGlobalRoot as wstackGlobalRoot2 } from "@wrongstack/core/utils";
+
+// src/server/proxy-runtime.ts
+import {
+  applyProxyConfig,
+  getProxyConfig,
+  rewriteBaseUrl,
+  shouldRewriteFor
+} from "@wrongstack/core/wiring/proxy-rewrite";
+var HEALTH_PATH = "/api/health";
+var PROBE_TIMEOUT_MS = 2e3;
+function seedWrongProxyFromConfig(config) {
+  const wp = config.tools?.wrongProxy;
+  if (!wp) {
+    return;
+  }
+  applyProxyConfig({
+    enabled: wp.enabled === true,
+    url: typeof wp.url === "string" ? wp.url : ""
+  });
+}
+async function probeWrongProxyActive() {
+  const cfg = getProxyConfig();
+  if (!cfg.enabled || !cfg.url) {
+    applyProxyConfig({ active: false });
+    return false;
+  }
+  const abort = new AbortController();
+  const timeout = setTimeout(() => abort.abort(), PROBE_TIMEOUT_MS);
+  if (typeof timeout.unref === "function") {
+    timeout.unref();
+  }
+  try {
+    const healthUrl = `${cfg.url.replace(/\/+$/, "")}${HEALTH_PATH}`;
+    const res = await fetch(healthUrl, {
+      method: "GET",
+      signal: abort.signal,
+      headers: { accept: "application/json" }
+    });
+    const ok2 = res.ok && res.status >= 200 && res.status < 300;
+    applyProxyConfig({ active: ok2 });
+    return ok2;
+  } catch {
+    applyProxyConfig({ active: false });
+    return false;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+async function applyWrongProxyPrefs(payload) {
+  const patch = {};
+  if (typeof payload["wrongProxyEnabled"] === "boolean") {
+    patch.enabled = payload["wrongProxyEnabled"];
+  }
+  if (typeof payload["wrongProxyUrl"] === "string") {
+    patch.url = payload["wrongProxyUrl"];
+  }
+  if (Object.keys(patch).length === 0) return;
+  applyProxyConfig(patch);
+  await probeWrongProxyActive();
+}
+async function bootstrapWrongProxyFromConfig(config) {
+  seedWrongProxyFromConfig(config);
+  await probeWrongProxyActive();
+}
+function routeProviderCfgThroughProxy(cfg, fallbackBaseUrl, providerId) {
+  const raw = cfg;
+  const cfgType = typeof raw.type === "string" ? raw.type : void 0;
+  const cfgBaseUrl = typeof raw.baseUrl === "string" ? raw.baseUrl : void 0;
+  const factoryType = cfgType ?? providerId;
+  const rawBaseUrl = cfgBaseUrl ?? fallbackBaseUrl;
+  if (!rawBaseUrl || !shouldRewriteFor(factoryType)) {
+    return { ...cfg };
+  }
+  const baseUrl = rewriteBaseUrl(rawBaseUrl, getProxyConfig().url);
+  return {
+    ...cfg,
+    ...baseUrl !== cfgBaseUrl ? { baseUrl } : {}
+  };
+}
+
+// src/server/embedded-host-adapters.ts
 import { makeProviderFromConfig } from "@wrongstack/providers";
 
 // src/server/project-handlers.ts
@@ -9884,7 +9980,12 @@ async function applyEmbeddedModelSwitch(ctx, providerId, modelId) {
   await agentContext.runModelTransition(async () => {
     const saved = await ctx.loadSavedProviders();
     const providerConfig = saved[providerId] ?? { type: providerId };
-    const nextProvider = makeProviderFromConfig(providerId, providerConfig);
+    const routedConfig = routeProviderCfgThroughProxy(
+      providerConfig,
+      ctx.getConfig?.()?.baseUrl,
+      providerId
+    );
+    const nextProvider = makeProviderFromConfig(providerId, routedConfig);
     await ctx.modelsRegistry?.refresh().catch((error2) => {
       ctx.log(
         JSON.stringify({
@@ -16267,7 +16368,15 @@ function createEmbeddedMessageRouter(deps2) {
     getLiveProviderId: () => deps2.agentConfigCtx.agent.ctx.provider.id,
     buildProvider: async (providerId) => {
       const saved = await deps2.agentConfigCtx.loadSavedProviders();
-      return makeProviderFromConfig2(providerId, saved[providerId] ?? { type: providerId });
+      const providerCfg = saved[providerId] ?? { type: providerId };
+      return makeProviderFromConfig2(
+        providerId,
+        routeProviderCfgThroughProxy(
+          providerCfg,
+          deps2.agentConfigCtx.getConfig?.()?.baseUrl,
+          providerId
+        )
+      );
     },
     applyModelSwitch: (providerId, modelId) => applyEmbeddedModelSwitch(deps2.agentConfigCtx, providerId, modelId),
     isRunActive: () => deps2.conversationCtx.abortControllers.size > 0,
@@ -21101,7 +21210,13 @@ var PREF_KEYS = [
   // Per-plugin enable/disable map (parity with the embedded server).
   "pluginsEnabled",
   // Fleet chat verbosity: off | full (migrated from streamFleet boolean).
-  "fleetChatVerbosity"
+  "fleetChatVerbosity",
+  // WrongProxy / WrongTrace: master switch + configurable URL (default
+  // http://localhost:3444). When `wrongProxyEnabled` is true and the daemon
+  // is reachable, every provider's base URL flows through
+  // `${wrongProxyUrl}/proxy/<host><path>`. openai-codex is excluded by spec.
+  "wrongProxyEnabled",
+  "wrongProxyUrl"
 ];
 function prefSnapshot(contextMeta) {
   const snapshot = {};
@@ -21367,6 +21482,15 @@ async function persistPrefsToConfig(deps2, holder, payload) {
       }
       if (typeof payload["debugStream"] === "boolean")
         decrypted.debugStream = payload["debugStream"];
+      if (typeof payload["wrongProxyEnabled"] === "boolean" || typeof payload["wrongProxyUrl"] === "string") {
+        const toolsCfg = decrypted.tools ?? {};
+        const wp = toolsCfg["wrongProxy"] ?? {};
+        if (typeof payload["wrongProxyEnabled"] === "boolean")
+          wp["enabled"] = payload["wrongProxyEnabled"];
+        if (typeof payload["wrongProxyUrl"] === "string") wp["url"] = payload["wrongProxyUrl"];
+        toolsCfg["wrongProxy"] = wp;
+        decrypted.tools = toolsCfg;
+      }
       if (typeof payload["pluginsEnabled"] === "object" && payload["pluginsEnabled"] !== null) {
         const ext = decrypted.extensions ?? {};
         const toggled = [];
@@ -24134,6 +24258,8 @@ import {
 // src/server/backend-services.ts
 import { join as join15 } from "node:path";
 import { Agent } from "@wrongstack/core/agent";
+import { HookRegistry, HookRunner } from "@wrongstack/core/hooks";
+import { createWrongTraceHookPair, recordGateDecision, snapshotGateDecisions, persistWrongTraceGateCounters } from "@wrongstack/wrongtrace";
 import {
   BrainDecisionLedger,
   BrainMonitor,
@@ -25175,6 +25301,33 @@ async function createAgentServices(input) {
   const secretScrubber = container.resolve(TOKENS2.SecretScrubber);
   const renderer = container.has(TOKENS2.Renderer) ? container.resolve(TOKENS2.Renderer) : void 0;
   const permissionPolicy = container.resolve(TOKENS2.PermissionPolicy);
+  const wrongTraceHookRegistry = new HookRegistry();
+  const wrongTraceHooks = createWrongTraceHookPair(() => context.session.id, {
+    emit: (event) => {
+      events.emit("wrongtrace.gate.decision", event);
+      recordGateDecision(event);
+      void persistWrongTraceGateCounters(projectRoot, snapshotGateDecisions());
+    }
+  });
+  wrongTraceHookRegistry.registerInProcess(
+    "PreToolUse",
+    "edit|write|replace|patch|codebase-ast-replace",
+    wrongTraceHooks.preToolUse,
+    "wrongtrace-gate"
+  );
+  wrongTraceHookRegistry.registerInProcess(
+    "PostToolUse",
+    "edit|write|replace|patch|codebase-ast-replace",
+    wrongTraceHooks.postToolUse,
+    "wrongtrace-gate"
+  );
+  const wrongTraceHookRunner = new HookRunner({
+    registry: wrongTraceHookRegistry,
+    sessionId: () => context.session.id,
+    // Coordination, not enforcement: these hooks are fail-open by
+    // construction and must run regardless of shell-hook gating.
+    allowNonPolicy: true
+  });
   const toolExecutor = new ToolExecutor(toolRegistry, {
     permissionPolicy,
     secretScrubber,
@@ -25184,6 +25337,7 @@ async function createAgentServices(input) {
     iterationTimeoutMs: config.tools?.iterationTimeoutMs ?? DEFAULT_TOOLS_CONFIG.iterationTimeoutMs,
     perIterationOutputCapBytes: config.tools?.perIterationOutputCapBytes ?? DEFAULT_TOOLS_CONFIG.perIterationOutputCapBytes,
     tracer: void 0,
+    hookRunner: wrongTraceHookRunner,
     // Off unless the operator opts in. The WebUI drives the same agent as the
     // CLI, so it must resolve this identically — a surface-dependent gate
     // would mean the same repo governs under `wstack` and not in the browser.
@@ -25405,6 +25559,12 @@ async function createAgentServices(input) {
         // round-robin keeps reassigning the doomed model. Mirrors the CLI
         // factory wiring at host-subagent-factory.ts:337.
         statusTracker: container.safeResolve(TOKENS2.ProviderModelStatusTracker),
+        // WrongTrace lock gate for SDD-wizard workers: the standalone server
+        // already built a dedicated WrongTrace-only HookRunner for its own
+        // executor above; handing the same runner to the runtime factory
+        // makes every worker edit honor peer locks with one process-wide
+        // owner identity (context.session.id).
+        hookRunner: wrongTraceHookRunner,
         ...input.installToolBoundary ? { installToolBoundary: input.installToolBoundary } : {}
       }),
       paths: {
@@ -26133,7 +26293,12 @@ function resolveSetupProvider(opts) {
       baseUrl: config.baseUrl
     };
     try {
-      const cfgWithType = { ...providerConfig, type: config.provider };
+      const routedConfig = routeProviderCfgThroughProxy(
+        providerConfig,
+        config.baseUrl,
+        config.provider
+      );
+      const cfgWithType = { ...routedConfig, type: config.provider };
       const provider2 = config.features.modelsRegistry && providerRegistry.has(config.provider) ? providerRegistry.create(cfgWithType) : makeProviderFromConfig3(config.provider, cfgWithType);
       return { provider: provider2, needsSetup: false };
     } catch (err) {
@@ -26146,8 +26311,13 @@ function resolveSetupProvider(opts) {
   if (firstKey) {
     const firstProvider = expectDefined3(savedProviders[firstKey]);
     try {
+      const routedConfig = routeProviderCfgThroughProxy(
+        firstProvider,
+        config.baseUrl,
+        firstKey
+      );
       const provider2 = makeProviderFromConfig3(firstKey, {
-        ...firstProvider,
+        ...routedConfig,
         type: firstKey,
         family: firstProvider.family,
         apiKey: firstProvider.apiKey
@@ -26793,9 +26963,14 @@ function buildRoutes(state, deps2, cb) {
       const cur = state.getConfig();
       const newCfg = patchConfig(cur, { provider: newProvider, model: newModel });
       const providerCfg = newCfg.providers?.[newProvider] ?? { type: newProvider };
-      const built = deps2.providerRegistry.has(newProvider) ? deps2.providerRegistry.create({ ...providerCfg, type: newProvider }) : makeProviderFromConfig4(newProvider, providerCfg);
+      const routedCfg = routeProviderCfgThroughProxy(
+        providerCfg,
+        newCfg.baseUrl,
+        newProvider
+      );
+      const built = deps2.providerRegistry.has(newProvider) ? deps2.providerRegistry.create({ ...routedCfg, type: newProvider }) : makeProviderFromConfig4(newProvider, routedCfg);
       const newProv = deps2.modelsRegistry ? await withCatalogCapabilities(deps2.modelsRegistry, newProvider, built, {
-        ...providerCfg,
+        ...routedCfg,
         type: newProvider,
         model: newModel
       }) : built;
@@ -26807,7 +26982,7 @@ function buildRoutes(state, deps2, cb) {
       deps2.configStore.update({ provider: newProvider, model: newModel });
       deps2.context.model = newModel;
       deps2.context.provider = newProv;
-      await cb.updateAutoCompactionMaxContext(newProv, newProvider, providerCfg).catch((error2) => {
+      await cb.updateAutoCompactionMaxContext(newProv, newProvider, routedCfg).catch((error2) => {
         deps2.logger.warn(`model.switch capability refresh failed: ${String(error2)}`);
       });
       broadcast(state.getClients(), {
@@ -26948,6 +27123,13 @@ function buildRoutes(state, deps2, cb) {
       if (typeof payload["fallbackAuto"] === "boolean")
         config.fallbackAuto = payload["fallbackAuto"];
     },
+    // WrongProxy / WrongTrace: reflect the standalone toggle/URL into the
+    // shared `ProxyConfig` singleton immediately and await the re-probe so
+    // `active` is fresh before a subsequent model.switch reads it. In the
+    // CLI-hosted path this same key is the CLI's `applyWrongProxyPrefs`; when
+    // running as its own process there is no CLI to inject it, so route it to
+    // the server-local runtime module.
+    applyWrongProxyPrefs: (payload) => applyWrongProxyPrefs(payload),
     setAutoCompact: (enabled) => {
       deps2.pipelines.contextWindow.remove("AutoCompaction", { optional: true });
       if (enabled && deps2.autoCompactor) {
@@ -27432,7 +27614,12 @@ function setupWebuiCredentialWatcher(options) {
           ...snapshot.apiKey !== void 0 ? { apiKey: snapshot.apiKey } : {},
           ...snapshot.baseUrl !== void 0 ? { baseUrl: snapshot.baseUrl } : {}
         };
-        const newProv = deps2.providerRegistry.has(activeId) ? deps2.providerRegistry.create({ ...providerCfg, type: activeId }) : makeProviderFromConfig5(activeId, { ...providerCfg, type: activeId });
+        const routedCfg = routeProviderCfgThroughProxy(
+          providerCfg,
+          state.getConfig().baseUrl,
+          activeId
+        );
+        const newProv = deps2.providerRegistry.has(activeId) ? deps2.providerRegistry.create({ ...routedCfg, type: activeId }) : makeProviderFromConfig5(activeId, { ...routedCfg, type: activeId });
         deps2.context.provider = newProv;
         void updateAutoCompactionMaxContext(newProv).catch(() => void 0);
         console.log(`[WebUI] Provider credentials reloaded from config.json (${activeId})`);
@@ -27447,6 +27634,40 @@ function setupWebuiCredentialWatcher(options) {
   return credentialWatcher.close;
 }
 
+// src/server/start-webui-proxy-apply.ts
+import { createProxyInstantApply } from "@wrongstack/core/wiring/proxy-rewrite";
+import { makeProviderFromConfig as makeProviderFromConfig6, withCatalogCapabilities as withCatalogCapabilities2 } from "@wrongstack/providers";
+function setupWebuiProxyInstantApply(options) {
+  const { state, deps: deps2, updateAutoCompactionMaxContext } = options;
+  const instantApply = createProxyInstantApply({
+    // Prefer the LIVE provider id over the config's — mirrors the CLI
+    // wiring; the context is the source of truth once the session boots.
+    getActiveProviderId: () => deps2.context.provider?.id ?? state.getConfig().provider ?? "",
+    // Same raw-read rule as every other WebUI provider-build site:
+    // savedCfg.baseUrl ?? top-level config.baseUrl.
+    getRawBaseUrl: (providerId) => state.getConfig().providers?.[providerId]?.baseUrl ?? state.getConfig().baseUrl,
+    rebuildProvider: async (providerId) => {
+      await deps2.context.runModelTransition(async () => {
+        if (deps2.context.provider?.id !== providerId) return;
+        const cur = state.getConfig();
+        const providerCfg = cur.providers?.[providerId] ?? { type: providerId };
+        const routedCfg = routeProviderCfgThroughProxy(providerCfg, cur.baseUrl, providerId);
+        const built = deps2.providerRegistry.has(providerId) ? deps2.providerRegistry.create({ ...routedCfg, type: providerId }) : makeProviderFromConfig6(providerId, routedCfg);
+        const model = deps2.context.model ?? cur.model ?? "";
+        const newProv = deps2.modelsRegistry ? await withCatalogCapabilities2(deps2.modelsRegistry, providerId, built, {
+          ...routedCfg,
+          type: providerId,
+          model
+        }) : built;
+        deps2.context.provider = newProv;
+        void updateAutoCompactionMaxContext(newProv, providerId).catch(() => void 0);
+      });
+    },
+    logger: deps2.logger
+  });
+  return () => instantApply.dispose();
+}
+
 // src/server/start-webui-remediation.ts
 import { randomUUID as randomUUID5 } from "node:crypto";
 import { toLanguagePackageInput } from "@wrongstack/techstack";
@@ -27536,6 +27757,7 @@ function setupWebuiShutdown(options) {
       await options.todosCheckpoint.detach();
       await options.stopHeapWatchdog();
       options.getCredentialWatcherClose()?.();
+      options.getProxyInstantApplyDispose()();
       options.disposeRealtimeHandlers();
       const governanceCleanup = await options.governanceHandle?.close();
       if (governanceCleanup && !governanceCleanup.ok) {
@@ -27634,6 +27856,7 @@ async function startWebUI(opts = {}) {
   console.log("[WebUI] Starting backend services...");
   const boot = await bootConfig();
   const { config: baseConfig, globalConfigPath, wpaths, logger } = boot;
+  await bootstrapWrongProxyFromConfig(baseConfig);
   const vault = opts.services?.vault ?? boot.vault;
   let config = baseConfig;
   let projectRoot = boot.projectRoot;
@@ -28081,6 +28304,11 @@ async function startWebUI(opts = {}) {
     clients,
     updateAutoCompactionMaxContext
   });
+  const proxyInstantApplyDispose = setupWebuiProxyInstantApply({
+    state,
+    deps: deps2,
+    updateAutoCompactionMaxContext
+  });
   const stopHeapWatchdog = startSharedHeapWatchdog({
     collectStats: () => ({
       surface: opts.surface ?? "webui",
@@ -28188,6 +28416,7 @@ projectRoot: ${ev.projectRoot ?? "?"}`,
     todosCheckpoint,
     stopHeapWatchdog,
     getCredentialWatcherClose: () => credentialWatcherClose,
+    getProxyInstantApplyDispose: () => proxyInstantApplyDispose,
     disposeRealtimeHandlers,
     governanceHandle,
     logger,

package/dist/server/entry.js

@@ -98,7 +98,12 @@ var BOOLEAN_PREF_KEYS = /* @__PURE__ */ new Set([
   // `prefs.update` exactly so the panel does not error with
   // "unknown preference key".
   "readSymbols",
-  "showSageMemoryInject"
+  "showSageMemoryInject",
+  // WrongProxy / WrongTrace master switch. When on, the CLI rewrites every
+  // provider's base URL through the configured proxy URL (default
+  // http://localhost:3444 → http://localhost:3444/proxy/<host><path>).
+  // Excluded providers (openai-codex) flow through unchanged.
+  "wrongProxyEnabled"
 ]);
 var STRING_ARRAY_PREF_KEYS = /* @__PURE__ */ new Set([
   "fallbackModels",
@@ -165,7 +170,11 @@ var STRING_PREF_KEYS = /* @__PURE__ */ new Set([
   "chimeraModel",
   "autoReviewProvider",
   "autoReviewModel",
-  "autoReviewFallbackProfile"
+  "autoReviewFallbackProfile",
+  // WrongProxy / WrongTrace URL. Empty = unset. Default lives in
+  // `LocalPrefs.DEFAULTS.wrongProxyUrl` ('http://localhost:3444'); users
+  // can override here for non-default daemon ports / paths.
+  "wrongProxyUrl"
 ]);
 var ENUM_PREF_KEYS = {
   autonomy: AUTONOMY_VALUES,
@@ -179,7 +188,7 @@ var ENUM_PREF_KEYS = {
   reasoningEffort: REASONING_EFFORT_VALUES,
   cacheTtl: CACHE_TTL_VALUES,
   statuslineMode: /* @__PURE__ */ new Set(["minimum", "detailed", "no-color"]),
-  animationStyle: /* @__PURE__ */ new Set(["rainbow", "wave", "pulse", "dots", "breathe", "cycle"]),
+  animationStyle: /* @__PURE__ */ new Set(["rainbow", "wave", "pulse", "dots", "breathe", "static", "cycle"]),
   fsAccess: /* @__PURE__ */ new Set(["unrestricted", "project"]),
   // Chimera autoFix + auto-review cascade threshold
   chimeraAutoFix: /* @__PURE__ */ new Set(["off", "ask", "auto"]),
@@ -1031,7 +1040,7 @@ function routingPatch(payload) {
 function handlePrefsGet(ctx, ws) {
   ctx.send(ws, { type: "prefs.updated", payload: ctx.snapshot() });
 }
-function handlePrefsUpdate(ctx, ws, input) {
+async function handlePrefsUpdate(ctx, ws, input) {
   const parsed = validatePrefsUpdatePayload(input);
   if (!parsed.ok) {
     sendResult(ctx, ws, false, parsed.message);
@@ -1064,6 +1073,9 @@ function handlePrefsUpdate(ctx, ws, input) {
       ({ setDebugStreamEnabled }) => setDebugStreamEnabled(payload["debugStream"])
     );
   }
+  if (typeof payload["wrongProxyEnabled"] === "boolean" || typeof payload["wrongProxyUrl"] === "string") {
+    await ctx.applyWrongProxyPrefs?.(payload);
+  }
   if (typeof payload["logLevel"] === "string" && ["debug", "info", "warn", "error"].includes(payload["logLevel"])) {
     ctx.setLogLevel?.(payload["logLevel"]);
   }
@@ -6179,7 +6191,8 @@ function estimateTokens(s) {
 function stringifyContent(c) {
   if (typeof c === "string") return c;
   try {
-    return JSON.stringify(c);
+    const serialized = JSON.stringify(c);
+    return serialized === void 0 ? String(c) : serialized;
   } catch {
     return String(c);
   }
@@ -7105,6 +7118,8 @@ function seedContextMeta(config, context) {
   meta["tgDelegate"] = tgExt?.["notifyOnDelegate"] !== false;
   const tgMs = tgExt?.["longToolThresholdMs"];
   meta["tgLongToolMs"] = typeof tgMs === "number" ? tgMs : 3e4;
+  meta["wrongProxyEnabled"] = config.tools?.wrongProxy?.enabled === true;
+  meta["wrongProxyUrl"] = config.tools?.wrongProxy?.url ?? "";
   {
     const pluginsEnabled = {};
     const record = (name2) => {
@@ -7471,6 +7486,85 @@ function createCustomModeStore(wrongstackDir) {
   return { modes, load: load2, save: save2, create, update, remove, list };
 }
 
+// src/server/proxy-runtime.ts
+import {
+  applyProxyConfig,
+  getProxyConfig,
+  rewriteBaseUrl,
+  shouldRewriteFor
+} from "@wrongstack/core/wiring/proxy-rewrite";
+var HEALTH_PATH = "/api/health";
+var PROBE_TIMEOUT_MS = 2e3;
+function seedWrongProxyFromConfig(config) {
+  const wp = config.tools?.wrongProxy;
+  if (!wp) {
+    return;
+  }
+  applyProxyConfig({
+    enabled: wp.enabled === true,
+    url: typeof wp.url === "string" ? wp.url : ""
+  });
+}
+async function probeWrongProxyActive() {
+  const cfg = getProxyConfig();
+  if (!cfg.enabled || !cfg.url) {
+    applyProxyConfig({ active: false });
+    return false;
+  }
+  const abort = new AbortController();
+  const timeout = setTimeout(() => abort.abort(), PROBE_TIMEOUT_MS);
+  if (typeof timeout.unref === "function") {
+    timeout.unref();
+  }
+  try {
+    const healthUrl = `${cfg.url.replace(/\/+$/, "")}${HEALTH_PATH}`;
+    const res = await fetch(healthUrl, {
+      method: "GET",
+      signal: abort.signal,
+      headers: { accept: "application/json" }
+    });
+    const ok2 = res.ok && res.status >= 200 && res.status < 300;
+    applyProxyConfig({ active: ok2 });
+    return ok2;
+  } catch {
+    applyProxyConfig({ active: false });
+    return false;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+async function applyWrongProxyPrefs(payload) {
+  const patch = {};
+  if (typeof payload["wrongProxyEnabled"] === "boolean") {
+    patch.enabled = payload["wrongProxyEnabled"];
+  }
+  if (typeof payload["wrongProxyUrl"] === "string") {
+    patch.url = payload["wrongProxyUrl"];
+  }
+  if (Object.keys(patch).length === 0) return;
+  applyProxyConfig(patch);
+  await probeWrongProxyActive();
+}
+async function bootstrapWrongProxyFromConfig(config) {
+  seedWrongProxyFromConfig(config);
+  await probeWrongProxyActive();
+}
+function routeProviderCfgThroughProxy(cfg, fallbackBaseUrl, providerId) {
+  const raw = cfg;
+  const cfgType = typeof raw.type === "string" ? raw.type : void 0;
+  const cfgBaseUrl = typeof raw.baseUrl === "string" ? raw.baseUrl : void 0;
+  const factoryType = cfgType ?? providerId;
+  const rawBaseUrl = cfgBaseUrl ?? fallbackBaseUrl;
+  if (!rawBaseUrl || !shouldRewriteFor(factoryType)) {
+    return { ...cfg };
+  }
+  const baseUrl = rewriteBaseUrl(rawBaseUrl, getProxyConfig().url);
+  return {
+    ...cfg,
+    ...baseUrl !== cfgBaseUrl ? { baseUrl } : {}
+  };
+}
+
 // src/server/project-handlers.ts
 import * as fs10 from "node:fs/promises";
 import * as path11 from "node:path";
@@ -19402,7 +19496,13 @@ var PREF_KEYS = [
   // Per-plugin enable/disable map (parity with the embedded server).
   "pluginsEnabled",
   // Fleet chat verbosity: off | full (migrated from streamFleet boolean).
-  "fleetChatVerbosity"
+  "fleetChatVerbosity",
+  // WrongProxy / WrongTrace: master switch + configurable URL (default
+  // http://localhost:3444). When `wrongProxyEnabled` is true and the daemon
+  // is reachable, every provider's base URL flows through
+  // `${wrongProxyUrl}/proxy/<host><path>`. openai-codex is excluded by spec.
+  "wrongProxyEnabled",
+  "wrongProxyUrl"
 ];
 function prefSnapshot(contextMeta) {
   const snapshot = {};
@@ -19668,6 +19768,15 @@ async function persistPrefsToConfig(deps2, holder, payload) {
       }
       if (typeof payload["debugStream"] === "boolean")
         decrypted.debugStream = payload["debugStream"];
+      if (typeof payload["wrongProxyEnabled"] === "boolean" || typeof payload["wrongProxyUrl"] === "string") {
+        const toolsCfg = decrypted.tools ?? {};
+        const wp = toolsCfg["wrongProxy"] ?? {};
+        if (typeof payload["wrongProxyEnabled"] === "boolean")
+          wp["enabled"] = payload["wrongProxyEnabled"];
+        if (typeof payload["wrongProxyUrl"] === "string") wp["url"] = payload["wrongProxyUrl"];
+        toolsCfg["wrongProxy"] = wp;
+        decrypted.tools = toolsCfg;
+      }
       if (typeof payload["pluginsEnabled"] === "object" && payload["pluginsEnabled"] !== null) {
         const ext = decrypted.extensions ?? {};
         const toggled = [];
@@ -22333,6 +22442,8 @@ import {
 // src/server/backend-services.ts
 import { join as join12 } from "node:path";
 import { Agent } from "@wrongstack/core/agent";
+import { HookRegistry, HookRunner } from "@wrongstack/core/hooks";
+import { createWrongTraceHookPair, recordGateDecision, snapshotGateDecisions, persistWrongTraceGateCounters } from "@wrongstack/wrongtrace";
 import {
   BrainDecisionLedger,
   BrainMonitor,
@@ -23374,6 +23485,33 @@ async function createAgentServices(input) {
   const secretScrubber = container.resolve(TOKENS.SecretScrubber);
   const renderer = container.has(TOKENS.Renderer) ? container.resolve(TOKENS.Renderer) : void 0;
   const permissionPolicy = container.resolve(TOKENS.PermissionPolicy);
+  const wrongTraceHookRegistry = new HookRegistry();
+  const wrongTraceHooks = createWrongTraceHookPair(() => context.session.id, {
+    emit: (event) => {
+      events.emit("wrongtrace.gate.decision", event);
+      recordGateDecision(event);
+      void persistWrongTraceGateCounters(projectRoot, snapshotGateDecisions());
+    }
+  });
+  wrongTraceHookRegistry.registerInProcess(
+    "PreToolUse",
+    "edit|write|replace|patch|codebase-ast-replace",
+    wrongTraceHooks.preToolUse,
+    "wrongtrace-gate"
+  );
+  wrongTraceHookRegistry.registerInProcess(
+    "PostToolUse",
+    "edit|write|replace|patch|codebase-ast-replace",
+    wrongTraceHooks.postToolUse,
+    "wrongtrace-gate"
+  );
+  const wrongTraceHookRunner = new HookRunner({
+    registry: wrongTraceHookRegistry,
+    sessionId: () => context.session.id,
+    // Coordination, not enforcement: these hooks are fail-open by
+    // construction and must run regardless of shell-hook gating.
+    allowNonPolicy: true
+  });
   const toolExecutor = new ToolExecutor(toolRegistry, {
     permissionPolicy,
     secretScrubber,
@@ -23383,6 +23521,7 @@ async function createAgentServices(input) {
     iterationTimeoutMs: config.tools?.iterationTimeoutMs ?? DEFAULT_TOOLS_CONFIG.iterationTimeoutMs,
     perIterationOutputCapBytes: config.tools?.perIterationOutputCapBytes ?? DEFAULT_TOOLS_CONFIG.perIterationOutputCapBytes,
     tracer: void 0,
+    hookRunner: wrongTraceHookRunner,
     // Off unless the operator opts in. The WebUI drives the same agent as the
     // CLI, so it must resolve this identically — a surface-dependent gate
     // would mean the same repo governs under `wstack` and not in the browser.
@@ -23604,6 +23743,12 @@ async function createAgentServices(input) {
         // round-robin keeps reassigning the doomed model. Mirrors the CLI
         // factory wiring at host-subagent-factory.ts:337.
         statusTracker: container.safeResolve(TOKENS.ProviderModelStatusTracker),
+        // WrongTrace lock gate for SDD-wizard workers: the standalone server
+        // already built a dedicated WrongTrace-only HookRunner for its own
+        // executor above; handing the same runner to the runtime factory
+        // makes every worker edit honor peer locks with one process-wide
+        // owner identity (context.session.id).
+        hookRunner: wrongTraceHookRunner,
         ...input.installToolBoundary ? { installToolBoundary: input.installToolBoundary } : {}
       }),
       paths: {
@@ -24332,7 +24477,12 @@ function resolveSetupProvider(opts) {
       baseUrl: config.baseUrl
     };
     try {
-      const cfgWithType = { ...providerConfig, type: config.provider };
+      const routedConfig = routeProviderCfgThroughProxy(
+        providerConfig,
+        config.baseUrl,
+        config.provider
+      );
+      const cfgWithType = { ...routedConfig, type: config.provider };
       const provider2 = config.features.modelsRegistry && providerRegistry.has(config.provider) ? providerRegistry.create(cfgWithType) : makeProviderFromConfig(config.provider, cfgWithType);
       return { provider: provider2, needsSetup: false };
     } catch (err) {
@@ -24345,8 +24495,13 @@ function resolveSetupProvider(opts) {
   if (firstKey) {
     const firstProvider = expectDefined2(savedProviders[firstKey]);
     try {
+      const routedConfig = routeProviderCfgThroughProxy(
+        firstProvider,
+        config.baseUrl,
+        firstKey
+      );
       const provider2 = makeProviderFromConfig(firstKey, {
-        ...firstProvider,
+        ...routedConfig,
         type: firstKey,
         family: firstProvider.family,
         apiKey: firstProvider.apiKey
@@ -24992,9 +25147,14 @@ function buildRoutes(state, deps2, cb) {
       const cur = state.getConfig();
       const newCfg = patchConfig(cur, { provider: newProvider, model: newModel });
       const providerCfg = newCfg.providers?.[newProvider] ?? { type: newProvider };
-      const built = deps2.providerRegistry.has(newProvider) ? deps2.providerRegistry.create({ ...providerCfg, type: newProvider }) : makeProviderFromConfig2(newProvider, providerCfg);
+      const routedCfg = routeProviderCfgThroughProxy(
+        providerCfg,
+        newCfg.baseUrl,
+        newProvider
+      );
+      const built = deps2.providerRegistry.has(newProvider) ? deps2.providerRegistry.create({ ...routedCfg, type: newProvider }) : makeProviderFromConfig2(newProvider, routedCfg);
       const newProv = deps2.modelsRegistry ? await withCatalogCapabilities(deps2.modelsRegistry, newProvider, built, {
-        ...providerCfg,
+        ...routedCfg,
         type: newProvider,
         model: newModel
       }) : built;
@@ -25006,7 +25166,7 @@ function buildRoutes(state, deps2, cb) {
       deps2.configStore.update({ provider: newProvider, model: newModel });
       deps2.context.model = newModel;
       deps2.context.provider = newProv;
-      await cb.updateAutoCompactionMaxContext(newProv, newProvider, providerCfg).catch((error2) => {
+      await cb.updateAutoCompactionMaxContext(newProv, newProvider, routedCfg).catch((error2) => {
         deps2.logger.warn(`model.switch capability refresh failed: ${String(error2)}`);
       });
       broadcast(state.getClients(), {
@@ -25147,6 +25307,13 @@ function buildRoutes(state, deps2, cb) {
       if (typeof payload["fallbackAuto"] === "boolean")
         config.fallbackAuto = payload["fallbackAuto"];
     },
+    // WrongProxy / WrongTrace: reflect the standalone toggle/URL into the
+    // shared `ProxyConfig` singleton immediately and await the re-probe so
+    // `active` is fresh before a subsequent model.switch reads it. In the
+    // CLI-hosted path this same key is the CLI's `applyWrongProxyPrefs`; when
+    // running as its own process there is no CLI to inject it, so route it to
+    // the server-local runtime module.
+    applyWrongProxyPrefs: (payload) => applyWrongProxyPrefs(payload),
     setAutoCompact: (enabled) => {
       deps2.pipelines.contextWindow.remove("AutoCompaction", { optional: true });
       if (enabled && deps2.autoCompactor) {
@@ -25631,7 +25798,12 @@ function setupWebuiCredentialWatcher(options) {
           ...snapshot.apiKey !== void 0 ? { apiKey: snapshot.apiKey } : {},
           ...snapshot.baseUrl !== void 0 ? { baseUrl: snapshot.baseUrl } : {}
         };
-        const newProv = deps2.providerRegistry.has(activeId) ? deps2.providerRegistry.create({ ...providerCfg, type: activeId }) : makeProviderFromConfig3(activeId, { ...providerCfg, type: activeId });
+        const routedCfg = routeProviderCfgThroughProxy(
+          providerCfg,
+          state.getConfig().baseUrl,
+          activeId
+        );
+        const newProv = deps2.providerRegistry.has(activeId) ? deps2.providerRegistry.create({ ...routedCfg, type: activeId }) : makeProviderFromConfig3(activeId, { ...routedCfg, type: activeId });
         deps2.context.provider = newProv;
         void updateAutoCompactionMaxContext(newProv).catch(() => void 0);
         console.log(`[WebUI] Provider credentials reloaded from config.json (${activeId})`);
@@ -25646,6 +25818,40 @@ function setupWebuiCredentialWatcher(options) {
   return credentialWatcher.close;
 }
 
+// src/server/start-webui-proxy-apply.ts
+import { createProxyInstantApply } from "@wrongstack/core/wiring/proxy-rewrite";
+import { makeProviderFromConfig as makeProviderFromConfig4, withCatalogCapabilities as withCatalogCapabilities2 } from "@wrongstack/providers";
+function setupWebuiProxyInstantApply(options) {
+  const { state, deps: deps2, updateAutoCompactionMaxContext } = options;
+  const instantApply = createProxyInstantApply({
+    // Prefer the LIVE provider id over the config's — mirrors the CLI
+    // wiring; the context is the source of truth once the session boots.
+    getActiveProviderId: () => deps2.context.provider?.id ?? state.getConfig().provider ?? "",
+    // Same raw-read rule as every other WebUI provider-build site:
+    // savedCfg.baseUrl ?? top-level config.baseUrl.
+    getRawBaseUrl: (providerId) => state.getConfig().providers?.[providerId]?.baseUrl ?? state.getConfig().baseUrl,
+    rebuildProvider: async (providerId) => {
+      await deps2.context.runModelTransition(async () => {
+        if (deps2.context.provider?.id !== providerId) return;
+        const cur = state.getConfig();
+        const providerCfg = cur.providers?.[providerId] ?? { type: providerId };
+        const routedCfg = routeProviderCfgThroughProxy(providerCfg, cur.baseUrl, providerId);
+        const built = deps2.providerRegistry.has(providerId) ? deps2.providerRegistry.create({ ...routedCfg, type: providerId }) : makeProviderFromConfig4(providerId, routedCfg);
+        const model = deps2.context.model ?? cur.model ?? "";
+        const newProv = deps2.modelsRegistry ? await withCatalogCapabilities2(deps2.modelsRegistry, providerId, built, {
+          ...routedCfg,
+          type: providerId,
+          model
+        }) : built;
+        deps2.context.provider = newProv;
+        void updateAutoCompactionMaxContext(newProv, providerId).catch(() => void 0);
+      });
+    },
+    logger: deps2.logger
+  });
+  return () => instantApply.dispose();
+}
+
 // src/server/start-webui-remediation.ts
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { toLanguagePackageInput } from "@wrongstack/techstack";
@@ -25735,6 +25941,7 @@ function setupWebuiShutdown(options) {
       await options.todosCheckpoint.detach();
       await options.stopHeapWatchdog();
       options.getCredentialWatcherClose()?.();
+      options.getProxyInstantApplyDispose()();
       options.disposeRealtimeHandlers();
       const governanceCleanup = await options.governanceHandle?.close();
       if (governanceCleanup && !governanceCleanup.ok) {
@@ -25833,6 +26040,7 @@ async function startWebUI(opts = {}) {
   console.log("[WebUI] Starting backend services...");
   const boot = await bootConfig();
   const { config: baseConfig, globalConfigPath, wpaths, logger } = boot;
+  await bootstrapWrongProxyFromConfig(baseConfig);
   const vault = opts.services?.vault ?? boot.vault;
   let config = baseConfig;
   let projectRoot = boot.projectRoot;
@@ -26280,6 +26488,11 @@ async function startWebUI(opts = {}) {
     clients,
     updateAutoCompactionMaxContext
   });
+  const proxyInstantApplyDispose = setupWebuiProxyInstantApply({
+    state,
+    deps: deps2,
+    updateAutoCompactionMaxContext
+  });
   const stopHeapWatchdog = startSharedHeapWatchdog({
     collectStats: () => ({
       surface: opts.surface ?? "webui",
@@ -26387,6 +26600,7 @@ projectRoot: ${ev.projectRoot ?? "?"}`,
     todosCheckpoint,
     stopHeapWatchdog,
     getCredentialWatcherClose: () => credentialWatcherClose,
+    getProxyInstantApplyDispose: () => proxyInstantApplyDispose,
     disposeRealtimeHandlers,
     governanceHandle,
     logger,

package/dist/server/pref-helpers.d.ts

@@ -17,7 +17,7 @@
  */
 import type { SecretVault } from '@wrongstack/core/types';
 /** Pref keys exposed to the settings panel via prefs.get / prefs.updated. */
-export declare const PREF_KEYS: readonly ['autonomy', 'autonomyDelayMs', 'autoProceedMaxIterations', 'yolo', 'maxIterations', 'chime', 'confirmExit', 'nextPrediction', 'nextStepsTool', 'enhanceEnabled', 'enhanceDelayMs', 'enhanceLanguage', 'featureMcp', 'featurePlugins', 'featureMemory', 'featureSkills', 'featureModelsRegistry', 'indexOnStart', 'contextAutoCompact', 'contextStrategy', 'contextMode', 'tokenSavingTier', 'maxConcurrent', 'titleAnimation', 'uiLocale', 'logLevel', 'auditLevel', 'hqEnabled', 'hqUrl', 'hqRawContent', 'tgConfigured', 'tgSessionEnd', 'tgDelegate', 'tgLongToolMs', 'reasoningMode', 'reasoningEffort', 'reasoningPreserve', 'cacheTtl', 'fallbackModels', 'fallbackProfiles', 'favoriteModels', 'favoriteModelsOnly', 'modelAvailabilitySchedule', 'modelMatrix', 'fallbackAuto', 'refinerProvider', 'refinerModel', 'refinerFallbackProfile', 'thinkingWord', 'statuslineMode', 'animationStyle', 'showModelReasoning', 'breakerEnabled', 'breakerAutoKillResetMs', 'fsAccess', 'debugStream', 'chimeraEnabled', 'chimeraProvider', 'chimeraModel', 'chimeraMaxFiles', 'chimeraAutoFix', 'autoReviewEnabled', 'autoReviewProvider', 'autoReviewModel', 'autoReviewFallbackProfile', 'autoReviewModelSelection', 'autoReviewFallbackModels', 'autoReviewDebounceMs', 'autoReviewMaxFilesPerBatch', 'autoReviewMaxConcurrentReviews', 'autoReviewCascadeOn', 'groupToolCalls', 'showThinkingLogs', 'autoCollapseInput', 'pluginsEnabled', 'fleetChatVerbosity'];
+export declare const PREF_KEYS: readonly ['autonomy', 'autonomyDelayMs', 'autoProceedMaxIterations', 'yolo', 'maxIterations', 'chime', 'confirmExit', 'nextPrediction', 'nextStepsTool', 'enhanceEnabled', 'enhanceDelayMs', 'enhanceLanguage', 'featureMcp', 'featurePlugins', 'featureMemory', 'featureSkills', 'featureModelsRegistry', 'indexOnStart', 'contextAutoCompact', 'contextStrategy', 'contextMode', 'tokenSavingTier', 'maxConcurrent', 'titleAnimation', 'uiLocale', 'logLevel', 'auditLevel', 'hqEnabled', 'hqUrl', 'hqRawContent', 'tgConfigured', 'tgSessionEnd', 'tgDelegate', 'tgLongToolMs', 'reasoningMode', 'reasoningEffort', 'reasoningPreserve', 'cacheTtl', 'fallbackModels', 'fallbackProfiles', 'favoriteModels', 'favoriteModelsOnly', 'modelAvailabilitySchedule', 'modelMatrix', 'fallbackAuto', 'refinerProvider', 'refinerModel', 'refinerFallbackProfile', 'thinkingWord', 'statuslineMode', 'animationStyle', 'showModelReasoning', 'breakerEnabled', 'breakerAutoKillResetMs', 'fsAccess', 'debugStream', 'chimeraEnabled', 'chimeraProvider', 'chimeraModel', 'chimeraMaxFiles', 'chimeraAutoFix', 'autoReviewEnabled', 'autoReviewProvider', 'autoReviewModel', 'autoReviewFallbackProfile', 'autoReviewModelSelection', 'autoReviewFallbackModels', 'autoReviewDebounceMs', 'autoReviewMaxFilesPerBatch', 'autoReviewMaxConcurrentReviews', 'autoReviewCascadeOn', 'groupToolCalls', 'showThinkingLogs', 'autoCollapseInput', 'pluginsEnabled', 'fleetChatVerbosity', 'wrongProxyEnabled', 'wrongProxyUrl'];
 export interface PrefHelperDeps {
     /** Path to the active profile config; the sole settings mutation target. */
     profileConfigPath: string;

package/dist/server/prefs-handlers.d.ts

@@ -13,10 +13,20 @@ export interface PrefsHandlerContext {
     applyConfigPrefs?: ((payload: Record<string, unknown>) => void) | undefined;
     setAutoCompact?: ((enabled: boolean) => void) | undefined;
     setLogLevel?: ((level: 'debug' | 'info' | 'warn' | 'error') => void) | undefined;
+    /**
+     * WrongProxy / WrongTrace: applies the toggle + URL to the runtime
+     * config and kicks the periodic probe. Injected by the CLI's
+     * `createPrefsSeeding` so the WS server stays package-agnostic — the
+     * server doesn't pull `@wrongstack/cli`'s import graph or its
+     * `setInterval`-owning probe module. May return a promise so the
+     * standalone server's re-probe can be awaited before the next
+     * prefs-dependent request (e.g. an immediate model.switch).
+     */
+    applyWrongProxyPrefs?: ((payload: Record<string, unknown>) => void | Promise<void>) | undefined;
     send: (ws: WebSocket, message: WSServerMessage) => void;
     broadcast: (message: WSServerMessage) => void;
 }
 export declare function handlePrefsGet(ctx: PrefsHandlerContext, ws: WebSocket): void;
-export declare function handlePrefsUpdate(ctx: PrefsHandlerContext, ws: WebSocket, input: Record<string, unknown>): void;
+export declare function handlePrefsUpdate(ctx: PrefsHandlerContext, ws: WebSocket, input: Record<string, unknown>): Promise<void>;
 export declare function handleAutonomySwitch(ctx: PrefsHandlerContext, ws: WebSocket, mode: string): void;
 //# sourceMappingURL=prefs-handlers.d.ts.map

package/dist/server/proxy-runtime.d.ts

@@ -0,0 +1,82 @@
+/**
+ * WrongProxy / WrongTrace runtime seeding for the standalone WebUI server.
+ *
+ * The CLI hosts WebUI in-process via `dispatch-webui.ts`, which injects
+ * `applyWrongProxyPrefs` (from `@wrongstack/cli/wiring/proxy-wiring`) into
+ * the WS prefs handler and shares the CLI's proxy singleton. But when the
+ * WebUI server runs as its OWN process (`startWebUI`), no CLI is present to
+ * seed the `ProxyConfig` singleton in `@wrongstack/core/wiring/proxy-rewrite`
+ * — so all of the server's provider-build paths would construct providers
+ * with the raw base URL and never traverse the proxy.
+ *
+ * webui ⇏ cli, so this module cannot import `@wrongstack/cli`'s probe. It
+ * owns the same two concerns the CLI's `proxy-wiring` does, but dependency-
+ * light and self-contained:
+ *
+ *   1. Seeding the shared `ProxyConfig` singleton (`enabled` / `url`) from
+ *      `config.tools.wrongProxy` at boot.
+ *   2. A one-shot `/api/health` reachability probe that flips `active` to
+ *      true so `shouldRewriteFor()` returns true for subsequent provider
+ *      builds. Unlike the CLI's periodic probe this runs once at seed time
+ *      (the standalone server re-probes when the operator toggles the field
+ *      via `applyWrongProxyPrefs`); a long-lived daemon is assumed stable.
+ *
+ * The rewrite itself (`shouldRewriteFor` / `rewriteBaseUrl`) is pure logic
+ * in `@wrongstack/core` and is applied at each provider-build site in this
+ * server (setup-screen, routes applyModelSwitchCore, embedded-message-router,
+ * embedded-host-adapters, start-webui-credential-watcher).
+ */
+import type { Config } from '@wrongstack/core/types';
+/**
+ * Seed the shared `ProxyConfig` singleton from the persisted
+ * `config.tools.wrongProxy.{enabled,url}` block. Idempotent — safe to call
+ * at every boot. A provider that is eligible and reachable with a
+ * configured URL will then have its base URL rewritten through the proxy.
+ */
+export declare function seedWrongProxyFromConfig(config: Config): void;
+/**
+ * Probe the configured proxy daemon once and flip `active` to true when it
+ * answers a 2xx on `/api/health`. Mirrors the CLI's probe contract but
+ * without owning a `setInterval` loop. Resolves with the new `active` value.
+ * A non-2xx / timeout / ECONNREFUSED leaves `active` false so the rewriter
+ * keeps base URLs unchanged.
+ */
+export declare function probeWrongProxyActive(): Promise<boolean>;
+/**
+ * Apply the `wrongProxyEnabled` + `wrongProxyUrl` portion of a WS prefs
+ * payload, then re-probe so the rewrite reflects the new state immediately
+ * (the next provider build reads the freshly-probed `active`). Skips when the
+ * payload carries neither key. Mirrors the CLI's `applyWrongProxyPrefs`.
+ */
+export declare function applyWrongProxyPrefs(payload: Record<string, unknown>): Promise<void>;
+/**
+ * Seed the singleton from the persisted config and await the first probe so
+ * `active` is correct BEFORE the server's provider is constructed. Without
+ * the await, `setup-screen`'s `resolveSetupProvider` reads the singleton
+ * (synchronously) while `active` is still false and bakes the raw base URL
+ * into the initial provider. Mirrors the CLI's
+ * `bootstrapWrongProxy` + `awaitFirstWrongProxyProbe` pair.
+ */
+export declare function bootstrapWrongProxyFromConfig(config: Config): Promise<void>;
+/**
+ * Apply the WrongProxy / WrongTrace base-URL rewrite to ONE provider config
+ * before it is handed to a provider factory. This is the single shared seam
+ * for every WebUI-server provider-build path so the eligibility + compose
+ * rules cannot drift between call sites:
+ *
+ *   - `routes.ts` `applyModelSwitchCore` (model.switch rebuild)
+ *   - `setup-screen.ts` `resolveSetupProvider` (boot branches 1 + 2)
+ *   - `embedded-message-router.ts` `buildProvider`
+ *   - `embedded-host-adapters.ts` `applyEmbeddedModelSwitch`
+ *   - `start-webui-credential-watcher.ts` (credential hot-reload)
+ *
+ * Returns a copy of `cfg` with `baseUrl` overridden to
+ * `${proxyUrl}/proxy/<host><path>` when the toggle is on, the daemon is
+ * reachable (`active`) and the provider is eligible (openai-codex excluded
+ * by the rewriter). `fallbackBaseUrl` is used when `cfg` carries no explicit
+ * baseUrl (the call site's top-level config baseUrl). When the proxy is off
+ * or unreachable, the cfg is returned unchanged so factory construction
+ * behaves exactly as before the proxy feature existed.
+ */
+export declare function routeProviderCfgThroughProxy<T extends object>(cfg: Readonly<T>, fallbackBaseUrl: string | undefined, providerId: string): T;
+//# sourceMappingURL=proxy-runtime.d.ts.map

package/dist/server/start-webui-proxy-apply.d.ts

@@ -0,0 +1,38 @@
+/**
+ * WrongProxy instant-apply for the standalone WebUI server.
+ *
+ * Mirrors the CLI-side wiring in `setupProviderRuntime` (packages/cli/src/
+ * wiring/provider-runtime-setup.ts): subscribe to material proxy-config
+ * changes via `createProxyInstantApply` and rebuild the LIVE provider when
+ * the routing verdict for the active provider flips, so a Settings toggle
+ * or probe deactivation takes effect immediately instead of on the next
+ * incidental provider build.
+ *
+ * The rebuild sequence mirrors `applyModelSwitchCore` (routes.ts) — route
+ * the cfg through `routeProviderCfgThroughProxy`, build via registry or
+ * `makeProviderFromConfig`, overlay the live model's catalog capabilities
+ * — minus the parts that don't apply when provider+model are unchanged
+ * (no config persist, no session.start spam). The swap itself runs inside
+ * `runModelTransition` with a superseded-check so a queued rebuild can
+ * never overwrite a newer /model switch.
+ *
+ * In the CLI-hosted path this server module is NOT wired (the CLI's own
+ * `setupProviderRuntime` instant-apply covers the shared agent context),
+ * so there is exactly one rebuilder per process.
+ */
+import type { Provider, ProviderConfig } from '@wrongstack/core/types';
+import type { WebuiDeps, WebuiMutableState } from './routes.js';
+export interface WebuiProxyApplyOptions {
+    state: WebuiMutableState;
+    deps: WebuiDeps;
+    /** Mirrors `cb.updateAutoCompactionMaxContext` in start-webui.ts. */
+    updateAutoCompactionMaxContext: (provider: Provider, providerId?: string, providerCfg?: ProviderConfig | undefined) => Promise<void>;
+}
+/**
+ * Wire the standalone server's WrongProxy instant-apply. Returns the
+ * dispose function for shutdown wiring. The helper itself lives in
+ * `@wrongstack/core` so both hosts share the identical change-detection
+ * semantics (effective-URL comparison, serialized rebuilds).
+ */
+export declare function setupWebuiProxyInstantApply(options: WebuiProxyApplyOptions): () => void;
+//# sourceMappingURL=start-webui-proxy-apply.d.ts.map

package/dist/server/start-webui-shutdown.d.ts

@@ -18,6 +18,7 @@ export declare function setupWebuiShutdown(options: {
     };
     stopHeapWatchdog: () => Promise<void>;
     getCredentialWatcherClose: () => (() => void) | undefined;
+    getProxyInstantApplyDispose: () => () => void;
     disposeRealtimeHandlers: () => void;
     governanceHandle?: {
         close: () => Promise<{

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/webui-server",
-  "version": "0.310.0",
+  "version": "0.313.0",
   "license": "MIT",
   "description": "WrongStack WebUI HTTP/WebSocket server module — extracted from @wrongstack/webui in PR #243/244 to remove the CLI -> @wrongstack/webui/server cross-package edge (audit §3.1.1). Pure backend: HTTP routes, WebSocket handlers, MCP tool wrappers, HTML serving. The web frontend lives in @wrongstack/webui; this package is the standalone server it can run on.",
   "keywords": [
@@ -36,18 +36,19 @@
   ],
   "dependencies": {
     "ws": "^8.21.3",
-    "@wrongstack/kanban": "0.310.0",
-    "@wrongstack/requirement-intake": "0.310.0",
-    "@wrongstack/providers": "0.310.0",
-    "@wrongstack/runtime": "0.310.0",
-    "@wrongstack/sdd": "0.310.0",
-    "@wrongstack/core": "0.310.0",
-    "@wrongstack/sage": "0.310.0",
-    "@wrongstack/techstack": "0.310.0",
-    "@wrongstack/mcp": "0.310.0",
-    "@wrongstack/vector-memory": "0.310.0",
-    "@wrongstack/tools": "0.310.0",
-    "@wrongstack/webui-protocol": "0.310.0"
+    "@wrongstack/core": "0.313.0",
+    "@wrongstack/mcp": "0.313.0",
+    "@wrongstack/kanban": "0.313.0",
+    "@wrongstack/sage": "0.313.0",
+    "@wrongstack/runtime": "0.313.0",
+    "@wrongstack/providers": "0.313.0",
+    "@wrongstack/sdd": "0.313.0",
+    "@wrongstack/requirement-intake": "0.313.0",
+    "@wrongstack/techstack": "0.313.0",
+    "@wrongstack/tools": "0.313.0",
+    "@wrongstack/vector-memory": "0.313.0",
+    "@wrongstack/wrongtrace": "0.313.0",
+    "@wrongstack/webui-protocol": "0.313.0"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",