@wrongstack/webui-server 0.310.1 → 0.313.0

package/dist/index.js

@@ -100,7 +100,7 @@ var BOOLEAN_PREF_KEYS = /* @__PURE__ */ new Set([
   "showSageMemoryInject",
   // WrongProxy / WrongTrace master switch. When on, the CLI rewrites every
   // provider's base URL through the configured proxy URL (default
-  // http://localhost:8000 → http://localhost:8000/proxy/<host><path>).
+  // http://localhost:3444 → http://localhost:3444/proxy/<host><path>).
   // Excluded providers (openai-codex) flow through unchanged.
   "wrongProxyEnabled"
 ]);
@@ -171,7 +171,7 @@ var STRING_PREF_KEYS = /* @__PURE__ */ new Set([
   "autoReviewModel",
   "autoReviewFallbackProfile",
   // WrongProxy / WrongTrace URL. Empty = unset. Default lives in
-  // `LocalPrefs.DEFAULTS.wrongProxyUrl` ('http://localhost:8000'); users
+  // `LocalPrefs.DEFAULTS.wrongProxyUrl` ('http://localhost:3444'); users
   // can override here for non-default daemon ports / paths.
   "wrongProxyUrl"
 ]);
@@ -187,7 +187,7 @@ var ENUM_PREF_KEYS = {
   reasoningEffort: REASONING_EFFORT_VALUES,
   cacheTtl: CACHE_TTL_VALUES,
   statuslineMode: /* @__PURE__ */ new Set(["minimum", "detailed", "no-color"]),
-  animationStyle: /* @__PURE__ */ new Set(["rainbow", "wave", "pulse", "dots", "breathe", "cycle"]),
+  animationStyle: /* @__PURE__ */ new Set(["rainbow", "wave", "pulse", "dots", "breathe", "static", "cycle"]),
   fsAccess: /* @__PURE__ */ new Set(["unrestricted", "project"]),
   // Chimera autoFix + auto-review cascade threshold
   chimeraAutoFix: /* @__PURE__ */ new Set(["off", "ask", "auto"]),
@@ -6376,7 +6376,8 @@ function estimateTokens(s) {
 function stringifyContent(c) {
   if (typeof c === "string") return c;
   try {
-    return JSON.stringify(c);
+    const serialized = JSON.stringify(c);
+    return serialized === void 0 ? String(c) : serialized;
   } catch {
     return String(c);
   }
@@ -21211,7 +21212,7 @@ var PREF_KEYS = [
   // Fleet chat verbosity: off | full (migrated from streamFleet boolean).
   "fleetChatVerbosity",
   // WrongProxy / WrongTrace: master switch + configurable URL (default
-  // http://localhost:8000). When `wrongProxyEnabled` is true and the daemon
+  // http://localhost:3444). When `wrongProxyEnabled` is true and the daemon
   // is reachable, every provider's base URL flows through
   // `${wrongProxyUrl}/proxy/<host><path>`. openai-codex is excluded by spec.
   "wrongProxyEnabled",
@@ -24257,6 +24258,8 @@ import {
 // src/server/backend-services.ts
 import { join as join15 } from "node:path";
 import { Agent } from "@wrongstack/core/agent";
+import { HookRegistry, HookRunner } from "@wrongstack/core/hooks";
+import { createWrongTraceHookPair, recordGateDecision, snapshotGateDecisions, persistWrongTraceGateCounters } from "@wrongstack/wrongtrace";
 import {
   BrainDecisionLedger,
   BrainMonitor,
@@ -25298,6 +25301,33 @@ async function createAgentServices(input) {
   const secretScrubber = container.resolve(TOKENS2.SecretScrubber);
   const renderer = container.has(TOKENS2.Renderer) ? container.resolve(TOKENS2.Renderer) : void 0;
   const permissionPolicy = container.resolve(TOKENS2.PermissionPolicy);
+  const wrongTraceHookRegistry = new HookRegistry();
+  const wrongTraceHooks = createWrongTraceHookPair(() => context.session.id, {
+    emit: (event) => {
+      events.emit("wrongtrace.gate.decision", event);
+      recordGateDecision(event);
+      void persistWrongTraceGateCounters(projectRoot, snapshotGateDecisions());
+    }
+  });
+  wrongTraceHookRegistry.registerInProcess(
+    "PreToolUse",
+    "edit|write|replace|patch|codebase-ast-replace",
+    wrongTraceHooks.preToolUse,
+    "wrongtrace-gate"
+  );
+  wrongTraceHookRegistry.registerInProcess(
+    "PostToolUse",
+    "edit|write|replace|patch|codebase-ast-replace",
+    wrongTraceHooks.postToolUse,
+    "wrongtrace-gate"
+  );
+  const wrongTraceHookRunner = new HookRunner({
+    registry: wrongTraceHookRegistry,
+    sessionId: () => context.session.id,
+    // Coordination, not enforcement: these hooks are fail-open by
+    // construction and must run regardless of shell-hook gating.
+    allowNonPolicy: true
+  });
   const toolExecutor = new ToolExecutor(toolRegistry, {
     permissionPolicy,
     secretScrubber,
@@ -25307,6 +25337,7 @@ async function createAgentServices(input) {
     iterationTimeoutMs: config.tools?.iterationTimeoutMs ?? DEFAULT_TOOLS_CONFIG.iterationTimeoutMs,
     perIterationOutputCapBytes: config.tools?.perIterationOutputCapBytes ?? DEFAULT_TOOLS_CONFIG.perIterationOutputCapBytes,
     tracer: void 0,
+    hookRunner: wrongTraceHookRunner,
     // Off unless the operator opts in. The WebUI drives the same agent as the
     // CLI, so it must resolve this identically — a surface-dependent gate
     // would mean the same repo governs under `wstack` and not in the browser.
@@ -25528,6 +25559,12 @@ async function createAgentServices(input) {
         // round-robin keeps reassigning the doomed model. Mirrors the CLI
         // factory wiring at host-subagent-factory.ts:337.
         statusTracker: container.safeResolve(TOKENS2.ProviderModelStatusTracker),
+        // WrongTrace lock gate for SDD-wizard workers: the standalone server
+        // already built a dedicated WrongTrace-only HookRunner for its own
+        // executor above; handing the same runner to the runtime factory
+        // makes every worker edit honor peer locks with one process-wide
+        // owner identity (context.session.id).
+        hookRunner: wrongTraceHookRunner,
         ...input.installToolBoundary ? { installToolBoundary: input.installToolBoundary } : {}
       }),
       paths: {
@@ -27597,6 +27634,40 @@ function setupWebuiCredentialWatcher(options) {
   return credentialWatcher.close;
 }
 
+// src/server/start-webui-proxy-apply.ts
+import { createProxyInstantApply } from "@wrongstack/core/wiring/proxy-rewrite";
+import { makeProviderFromConfig as makeProviderFromConfig6, withCatalogCapabilities as withCatalogCapabilities2 } from "@wrongstack/providers";
+function setupWebuiProxyInstantApply(options) {
+  const { state, deps: deps2, updateAutoCompactionMaxContext } = options;
+  const instantApply = createProxyInstantApply({
+    // Prefer the LIVE provider id over the config's — mirrors the CLI
+    // wiring; the context is the source of truth once the session boots.
+    getActiveProviderId: () => deps2.context.provider?.id ?? state.getConfig().provider ?? "",
+    // Same raw-read rule as every other WebUI provider-build site:
+    // savedCfg.baseUrl ?? top-level config.baseUrl.
+    getRawBaseUrl: (providerId) => state.getConfig().providers?.[providerId]?.baseUrl ?? state.getConfig().baseUrl,
+    rebuildProvider: async (providerId) => {
+      await deps2.context.runModelTransition(async () => {
+        if (deps2.context.provider?.id !== providerId) return;
+        const cur = state.getConfig();
+        const providerCfg = cur.providers?.[providerId] ?? { type: providerId };
+        const routedCfg = routeProviderCfgThroughProxy(providerCfg, cur.baseUrl, providerId);
+        const built = deps2.providerRegistry.has(providerId) ? deps2.providerRegistry.create({ ...routedCfg, type: providerId }) : makeProviderFromConfig6(providerId, routedCfg);
+        const model = deps2.context.model ?? cur.model ?? "";
+        const newProv = deps2.modelsRegistry ? await withCatalogCapabilities2(deps2.modelsRegistry, providerId, built, {
+          ...routedCfg,
+          type: providerId,
+          model
+        }) : built;
+        deps2.context.provider = newProv;
+        void updateAutoCompactionMaxContext(newProv, providerId).catch(() => void 0);
+      });
+    },
+    logger: deps2.logger
+  });
+  return () => instantApply.dispose();
+}
+
 // src/server/start-webui-remediation.ts
 import { randomUUID as randomUUID5 } from "node:crypto";
 import { toLanguagePackageInput } from "@wrongstack/techstack";
@@ -27686,6 +27757,7 @@ function setupWebuiShutdown(options) {
       await options.todosCheckpoint.detach();
       await options.stopHeapWatchdog();
       options.getCredentialWatcherClose()?.();
+      options.getProxyInstantApplyDispose()();
       options.disposeRealtimeHandlers();
       const governanceCleanup = await options.governanceHandle?.close();
       if (governanceCleanup && !governanceCleanup.ok) {
@@ -28232,6 +28304,11 @@ async function startWebUI(opts = {}) {
     clients,
     updateAutoCompactionMaxContext
   });
+  const proxyInstantApplyDispose = setupWebuiProxyInstantApply({
+    state,
+    deps: deps2,
+    updateAutoCompactionMaxContext
+  });
   const stopHeapWatchdog = startSharedHeapWatchdog({
     collectStats: () => ({
       surface: opts.surface ?? "webui",
@@ -28339,6 +28416,7 @@ projectRoot: ${ev.projectRoot ?? "?"}`,
     todosCheckpoint,
     stopHeapWatchdog,
     getCredentialWatcherClose: () => credentialWatcherClose,
+    getProxyInstantApplyDispose: () => proxyInstantApplyDispose,
     disposeRealtimeHandlers,
     governanceHandle,
     logger,

package/dist/server/entry.js

@@ -101,7 +101,7 @@ var BOOLEAN_PREF_KEYS = /* @__PURE__ */ new Set([
   "showSageMemoryInject",
   // WrongProxy / WrongTrace master switch. When on, the CLI rewrites every
   // provider's base URL through the configured proxy URL (default
-  // http://localhost:8000 → http://localhost:8000/proxy/<host><path>).
+  // http://localhost:3444 → http://localhost:3444/proxy/<host><path>).
   // Excluded providers (openai-codex) flow through unchanged.
   "wrongProxyEnabled"
 ]);
@@ -172,7 +172,7 @@ var STRING_PREF_KEYS = /* @__PURE__ */ new Set([
   "autoReviewModel",
   "autoReviewFallbackProfile",
   // WrongProxy / WrongTrace URL. Empty = unset. Default lives in
-  // `LocalPrefs.DEFAULTS.wrongProxyUrl` ('http://localhost:8000'); users
+  // `LocalPrefs.DEFAULTS.wrongProxyUrl` ('http://localhost:3444'); users
   // can override here for non-default daemon ports / paths.
   "wrongProxyUrl"
 ]);
@@ -188,7 +188,7 @@ var ENUM_PREF_KEYS = {
   reasoningEffort: REASONING_EFFORT_VALUES,
   cacheTtl: CACHE_TTL_VALUES,
   statuslineMode: /* @__PURE__ */ new Set(["minimum", "detailed", "no-color"]),
-  animationStyle: /* @__PURE__ */ new Set(["rainbow", "wave", "pulse", "dots", "breathe", "cycle"]),
+  animationStyle: /* @__PURE__ */ new Set(["rainbow", "wave", "pulse", "dots", "breathe", "static", "cycle"]),
   fsAccess: /* @__PURE__ */ new Set(["unrestricted", "project"]),
   // Chimera autoFix + auto-review cascade threshold
   chimeraAutoFix: /* @__PURE__ */ new Set(["off", "ask", "auto"]),
@@ -6191,7 +6191,8 @@ function estimateTokens(s) {
 function stringifyContent(c) {
   if (typeof c === "string") return c;
   try {
-    return JSON.stringify(c);
+    const serialized = JSON.stringify(c);
+    return serialized === void 0 ? String(c) : serialized;
   } catch {
     return String(c);
   }
@@ -19497,7 +19498,7 @@ var PREF_KEYS = [
   // Fleet chat verbosity: off | full (migrated from streamFleet boolean).
   "fleetChatVerbosity",
   // WrongProxy / WrongTrace: master switch + configurable URL (default
-  // http://localhost:8000). When `wrongProxyEnabled` is true and the daemon
+  // http://localhost:3444). When `wrongProxyEnabled` is true and the daemon
   // is reachable, every provider's base URL flows through
   // `${wrongProxyUrl}/proxy/<host><path>`. openai-codex is excluded by spec.
   "wrongProxyEnabled",
@@ -22441,6 +22442,8 @@ import {
 // src/server/backend-services.ts
 import { join as join12 } from "node:path";
 import { Agent } from "@wrongstack/core/agent";
+import { HookRegistry, HookRunner } from "@wrongstack/core/hooks";
+import { createWrongTraceHookPair, recordGateDecision, snapshotGateDecisions, persistWrongTraceGateCounters } from "@wrongstack/wrongtrace";
 import {
   BrainDecisionLedger,
   BrainMonitor,
@@ -23482,6 +23485,33 @@ async function createAgentServices(input) {
   const secretScrubber = container.resolve(TOKENS.SecretScrubber);
   const renderer = container.has(TOKENS.Renderer) ? container.resolve(TOKENS.Renderer) : void 0;
   const permissionPolicy = container.resolve(TOKENS.PermissionPolicy);
+  const wrongTraceHookRegistry = new HookRegistry();
+  const wrongTraceHooks = createWrongTraceHookPair(() => context.session.id, {
+    emit: (event) => {
+      events.emit("wrongtrace.gate.decision", event);
+      recordGateDecision(event);
+      void persistWrongTraceGateCounters(projectRoot, snapshotGateDecisions());
+    }
+  });
+  wrongTraceHookRegistry.registerInProcess(
+    "PreToolUse",
+    "edit|write|replace|patch|codebase-ast-replace",
+    wrongTraceHooks.preToolUse,
+    "wrongtrace-gate"
+  );
+  wrongTraceHookRegistry.registerInProcess(
+    "PostToolUse",
+    "edit|write|replace|patch|codebase-ast-replace",
+    wrongTraceHooks.postToolUse,
+    "wrongtrace-gate"
+  );
+  const wrongTraceHookRunner = new HookRunner({
+    registry: wrongTraceHookRegistry,
+    sessionId: () => context.session.id,
+    // Coordination, not enforcement: these hooks are fail-open by
+    // construction and must run regardless of shell-hook gating.
+    allowNonPolicy: true
+  });
   const toolExecutor = new ToolExecutor(toolRegistry, {
     permissionPolicy,
     secretScrubber,
@@ -23491,6 +23521,7 @@ async function createAgentServices(input) {
     iterationTimeoutMs: config.tools?.iterationTimeoutMs ?? DEFAULT_TOOLS_CONFIG.iterationTimeoutMs,
     perIterationOutputCapBytes: config.tools?.perIterationOutputCapBytes ?? DEFAULT_TOOLS_CONFIG.perIterationOutputCapBytes,
     tracer: void 0,
+    hookRunner: wrongTraceHookRunner,
     // Off unless the operator opts in. The WebUI drives the same agent as the
     // CLI, so it must resolve this identically — a surface-dependent gate
     // would mean the same repo governs under `wstack` and not in the browser.
@@ -23712,6 +23743,12 @@ async function createAgentServices(input) {
         // round-robin keeps reassigning the doomed model. Mirrors the CLI
         // factory wiring at host-subagent-factory.ts:337.
         statusTracker: container.safeResolve(TOKENS.ProviderModelStatusTracker),
+        // WrongTrace lock gate for SDD-wizard workers: the standalone server
+        // already built a dedicated WrongTrace-only HookRunner for its own
+        // executor above; handing the same runner to the runtime factory
+        // makes every worker edit honor peer locks with one process-wide
+        // owner identity (context.session.id).
+        hookRunner: wrongTraceHookRunner,
         ...input.installToolBoundary ? { installToolBoundary: input.installToolBoundary } : {}
       }),
       paths: {
@@ -25781,6 +25818,40 @@ function setupWebuiCredentialWatcher(options) {
   return credentialWatcher.close;
 }
 
+// src/server/start-webui-proxy-apply.ts
+import { createProxyInstantApply } from "@wrongstack/core/wiring/proxy-rewrite";
+import { makeProviderFromConfig as makeProviderFromConfig4, withCatalogCapabilities as withCatalogCapabilities2 } from "@wrongstack/providers";
+function setupWebuiProxyInstantApply(options) {
+  const { state, deps: deps2, updateAutoCompactionMaxContext } = options;
+  const instantApply = createProxyInstantApply({
+    // Prefer the LIVE provider id over the config's — mirrors the CLI
+    // wiring; the context is the source of truth once the session boots.
+    getActiveProviderId: () => deps2.context.provider?.id ?? state.getConfig().provider ?? "",
+    // Same raw-read rule as every other WebUI provider-build site:
+    // savedCfg.baseUrl ?? top-level config.baseUrl.
+    getRawBaseUrl: (providerId) => state.getConfig().providers?.[providerId]?.baseUrl ?? state.getConfig().baseUrl,
+    rebuildProvider: async (providerId) => {
+      await deps2.context.runModelTransition(async () => {
+        if (deps2.context.provider?.id !== providerId) return;
+        const cur = state.getConfig();
+        const providerCfg = cur.providers?.[providerId] ?? { type: providerId };
+        const routedCfg = routeProviderCfgThroughProxy(providerCfg, cur.baseUrl, providerId);
+        const built = deps2.providerRegistry.has(providerId) ? deps2.providerRegistry.create({ ...routedCfg, type: providerId }) : makeProviderFromConfig4(providerId, routedCfg);
+        const model = deps2.context.model ?? cur.model ?? "";
+        const newProv = deps2.modelsRegistry ? await withCatalogCapabilities2(deps2.modelsRegistry, providerId, built, {
+          ...routedCfg,
+          type: providerId,
+          model
+        }) : built;
+        deps2.context.provider = newProv;
+        void updateAutoCompactionMaxContext(newProv, providerId).catch(() => void 0);
+      });
+    },
+    logger: deps2.logger
+  });
+  return () => instantApply.dispose();
+}
+
 // src/server/start-webui-remediation.ts
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { toLanguagePackageInput } from "@wrongstack/techstack";
@@ -25870,6 +25941,7 @@ function setupWebuiShutdown(options) {
       await options.todosCheckpoint.detach();
       await options.stopHeapWatchdog();
       options.getCredentialWatcherClose()?.();
+      options.getProxyInstantApplyDispose()();
       options.disposeRealtimeHandlers();
       const governanceCleanup = await options.governanceHandle?.close();
       if (governanceCleanup && !governanceCleanup.ok) {
@@ -26416,6 +26488,11 @@ async function startWebUI(opts = {}) {
     clients,
     updateAutoCompactionMaxContext
   });
+  const proxyInstantApplyDispose = setupWebuiProxyInstantApply({
+    state,
+    deps: deps2,
+    updateAutoCompactionMaxContext
+  });
   const stopHeapWatchdog = startSharedHeapWatchdog({
     collectStats: () => ({
       surface: opts.surface ?? "webui",
@@ -26523,6 +26600,7 @@ projectRoot: ${ev.projectRoot ?? "?"}`,
     todosCheckpoint,
     stopHeapWatchdog,
     getCredentialWatcherClose: () => credentialWatcherClose,
+    getProxyInstantApplyDispose: () => proxyInstantApplyDispose,
     disposeRealtimeHandlers,
     governanceHandle,
     logger,

package/dist/server/start-webui-proxy-apply.d.ts

@@ -0,0 +1,38 @@
+/**
+ * WrongProxy instant-apply for the standalone WebUI server.
+ *
+ * Mirrors the CLI-side wiring in `setupProviderRuntime` (packages/cli/src/
+ * wiring/provider-runtime-setup.ts): subscribe to material proxy-config
+ * changes via `createProxyInstantApply` and rebuild the LIVE provider when
+ * the routing verdict for the active provider flips, so a Settings toggle
+ * or probe deactivation takes effect immediately instead of on the next
+ * incidental provider build.
+ *
+ * The rebuild sequence mirrors `applyModelSwitchCore` (routes.ts) — route
+ * the cfg through `routeProviderCfgThroughProxy`, build via registry or
+ * `makeProviderFromConfig`, overlay the live model's catalog capabilities
+ * — minus the parts that don't apply when provider+model are unchanged
+ * (no config persist, no session.start spam). The swap itself runs inside
+ * `runModelTransition` with a superseded-check so a queued rebuild can
+ * never overwrite a newer /model switch.
+ *
+ * In the CLI-hosted path this server module is NOT wired (the CLI's own
+ * `setupProviderRuntime` instant-apply covers the shared agent context),
+ * so there is exactly one rebuilder per process.
+ */
+import type { Provider, ProviderConfig } from '@wrongstack/core/types';
+import type { WebuiDeps, WebuiMutableState } from './routes.js';
+export interface WebuiProxyApplyOptions {
+    state: WebuiMutableState;
+    deps: WebuiDeps;
+    /** Mirrors `cb.updateAutoCompactionMaxContext` in start-webui.ts. */
+    updateAutoCompactionMaxContext: (provider: Provider, providerId?: string, providerCfg?: ProviderConfig | undefined) => Promise<void>;
+}
+/**
+ * Wire the standalone server's WrongProxy instant-apply. Returns the
+ * dispose function for shutdown wiring. The helper itself lives in
+ * `@wrongstack/core` so both hosts share the identical change-detection
+ * semantics (effective-URL comparison, serialized rebuilds).
+ */
+export declare function setupWebuiProxyInstantApply(options: WebuiProxyApplyOptions): () => void;
+//# sourceMappingURL=start-webui-proxy-apply.d.ts.map

package/dist/server/start-webui-shutdown.d.ts

@@ -18,6 +18,7 @@ export declare function setupWebuiShutdown(options: {
     };
     stopHeapWatchdog: () => Promise<void>;
     getCredentialWatcherClose: () => (() => void) | undefined;
+    getProxyInstantApplyDispose: () => () => void;
     disposeRealtimeHandlers: () => void;
     governanceHandle?: {
         close: () => Promise<{

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/webui-server",
-  "version": "0.310.1",
+  "version": "0.313.0",
   "license": "MIT",
   "description": "WrongStack WebUI HTTP/WebSocket server module — extracted from @wrongstack/webui in PR #243/244 to remove the CLI -> @wrongstack/webui/server cross-package edge (audit §3.1.1). Pure backend: HTTP routes, WebSocket handlers, MCP tool wrappers, HTML serving. The web frontend lives in @wrongstack/webui; this package is the standalone server it can run on.",
   "keywords": [
@@ -36,18 +36,19 @@
   ],
   "dependencies": {
     "ws": "^8.21.3",
-    "@wrongstack/core": "0.310.1",
-    "@wrongstack/kanban": "0.310.1",
-    "@wrongstack/mcp": "0.310.1",
-    "@wrongstack/sage": "0.310.1",
-    "@wrongstack/runtime": "0.310.1",
-    "@wrongstack/providers": "0.310.1",
-    "@wrongstack/sdd": "0.310.1",
-    "@wrongstack/tools": "0.310.1",
-    "@wrongstack/requirement-intake": "0.310.1",
-    "@wrongstack/vector-memory": "0.310.1",
-    "@wrongstack/techstack": "0.310.1",
-    "@wrongstack/webui-protocol": "0.310.1"
+    "@wrongstack/core": "0.313.0",
+    "@wrongstack/mcp": "0.313.0",
+    "@wrongstack/kanban": "0.313.0",
+    "@wrongstack/sage": "0.313.0",
+    "@wrongstack/runtime": "0.313.0",
+    "@wrongstack/providers": "0.313.0",
+    "@wrongstack/sdd": "0.313.0",
+    "@wrongstack/requirement-intake": "0.313.0",
+    "@wrongstack/techstack": "0.313.0",
+    "@wrongstack/tools": "0.313.0",
+    "@wrongstack/vector-memory": "0.313.0",
+    "@wrongstack/wrongtrace": "0.313.0",
+    "@wrongstack/webui-protocol": "0.313.0"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",