@wrongstack/webui 0.264.0 → 0.267.0

package/dist/server/handlers.d.ts

@@ -0,0 +1,45 @@
+import { WebSocket } from 'ws';
+import { TodoItem } from '@wrongstack/core';
+
+interface WorklistContext {
+    context: {
+        todos: TodoItem[];
+        meta: Record<string, unknown>;
+        session: {
+            id: string;
+        } | null;
+        state?: unknown;
+    };
+    send: (ws: WebSocket, msg: object) => void;
+    broadcast: (msg: object) => void;
+    /**
+     * Optional mutator for in-memory todo state. Servers that manage live
+     * agent state (e.g. the CLI embedded server) provide this so handlers
+     * can update the agent's todo list directly. Standalone server may omit.
+     */
+    replaceTodos?: (todos: TodoItem[]) => void;
+}
+declare function handleTodosGet(ctx: WorklistContext, ws: WebSocket): void;
+declare function handleTodosClear(ctx: WorklistContext, ws: WebSocket): void;
+declare function handleTodosRemove(ctx: WorklistContext, ws: WebSocket, payload: {
+    id?: string;
+    index?: number;
+} | undefined): void;
+declare function handleTodoUpdate(ctx: WorklistContext, ws: WebSocket, payload: {
+    id: string;
+    status?: TodoItem['status'];
+    activeForm?: string;
+}): void;
+declare function handleTasksGet(ctx: WorklistContext, ws: WebSocket): Promise<void>;
+declare function handleTaskUpdate(ctx: WorklistContext, ws: WebSocket, payload: {
+    id: string;
+    status: 'pending' | 'in_progress' | 'blocked' | 'failed' | 'review' | 'completed';
+}): Promise<void>;
+declare function handlePlanGet(ctx: WorklistContext, ws: WebSocket): Promise<void>;
+declare function handlePlanTemplateUse(ctx: WorklistContext, ws: WebSocket, template: string): Promise<void>;
+declare function handlePlanItemUpdate(ctx: WorklistContext, ws: WebSocket, payload: {
+    target: string;
+    status: 'open' | 'in_progress' | 'done';
+}): Promise<void>;
+
+export { type WorklistContext, handlePlanGet, handlePlanItemUpdate, handlePlanTemplateUse, handleTaskUpdate, handleTasksGet, handleTodoUpdate, handleTodosClear, handleTodosGet, handleTodosRemove };

package/dist/server/handlers.js

@@ -0,0 +1,179 @@
+// src/server/handlers/worklist-handlers.ts
+function sendResult(ws, ctx, ok, message) {
+  ctx.send(ws, { type: ok ? "ok" : "error", message });
+}
+function handleTodosGet(ctx, ws) {
+  ctx.send(ws, { type: "todos.updated", payload: { todos: ctx.context.todos } });
+}
+function handleTodosClear(ctx, ws) {
+  ctx.replaceTodos?.([]);
+  ctx.broadcast({ type: "todos.cleared" });
+  sendResult(ws, ctx, true, "Todo board cleared.");
+}
+function handleTodosRemove(ctx, ws, payload) {
+  if (!payload || payload.id === void 0 && payload.index === void 0) {
+    sendResult(ws, ctx, false, "todos.remove requires id or index.");
+    return;
+  }
+  const next = payload.id !== void 0 ? ctx.context.todos.filter((t) => t.id !== payload.id) : ctx.context.todos.filter((_, i) => i !== payload.index);
+  ctx.replaceTodos?.(next);
+  ctx.broadcast({ type: "todos.updated", payload: { todos: next } });
+  sendResult(ws, ctx, true, "Todo item removed.");
+}
+function handleTodoUpdate(ctx, ws, payload) {
+  const todo = ctx.context.todos.find((t) => t.id === payload.id);
+  if (!todo) {
+    sendResult(ws, ctx, false, `No todo with id "${payload.id}".`);
+    return;
+  }
+  const next = ctx.context.todos.map(
+    (t) => t.id === payload.id ? { ...t, ...payload.status !== void 0 && { status: payload.status }, ...payload.activeForm !== void 0 && { activeForm: payload.activeForm } } : t
+  );
+  ctx.replaceTodos?.(next);
+  ctx.broadcast({ type: "todos.updated", payload: { todos: next } });
+  sendResult(ws, ctx, true, `Todo "${todo.content}" updated.`);
+}
+async function handleTasksGet(ctx, ws) {
+  const taskPath = ctx.context.meta["task.path"];
+  if (typeof taskPath === "string" && taskPath) {
+    try {
+      const { loadTasks } = await import("@wrongstack/core");
+      const file = await loadTasks(taskPath);
+      ctx.send(ws, { type: "tasks.updated", payload: { tasks: file?.tasks ?? [] } });
+    } catch {
+      ctx.send(ws, { type: "tasks.updated", payload: { tasks: [] } });
+    }
+  } else {
+    ctx.send(ws, {
+      type: "tasks.updated",
+      payload: { tasks: [], error: "Task storage not configured." }
+    });
+  }
+}
+async function handleTaskUpdate(ctx, ws, payload) {
+  const taskPath = ctx.context.meta["task.path"];
+  if (typeof taskPath !== "string" || !taskPath) {
+    sendResult(ws, ctx, false, "Task storage is not configured for this session.");
+    return;
+  }
+  try {
+    const { loadTasks, saveTasks } = await import("@wrongstack/core");
+    const file = await loadTasks(taskPath);
+    if (!file) {
+      sendResult(ws, ctx, false, "No task file found.");
+      return;
+    }
+    const idx = file.tasks.findIndex((t) => t.id === payload.id);
+    if (idx === -1) {
+      sendResult(ws, ctx, false, `Task "${payload.id}" not found.`);
+      return;
+    }
+    file.tasks[idx] = { ...file.tasks[idx], status: payload.status };
+    await saveTasks(taskPath, file);
+    ctx.broadcast({ type: "tasks.updated", payload: { tasks: file.tasks } });
+    sendResult(ws, ctx, true, `Task "${payload.id}" marked ${payload.status}.`);
+  } catch (err) {
+    sendResult(ws, ctx, false, String(err));
+  }
+}
+async function handlePlanGet(ctx, ws) {
+  const planPath = ctx.context.meta["plan.path"];
+  const sessionId = ctx.context.session?.id ?? "";
+  if (typeof planPath === "string" && planPath) {
+    try {
+      const { loadPlan } = await import("@wrongstack/core");
+      const plan = await loadPlan(planPath);
+      ctx.send(ws, {
+        type: "plan.updated",
+        payload: {
+          plan: plan ?? {
+            version: 1,
+            sessionId,
+            updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+            items: []
+          }
+        }
+      });
+    } catch {
+      ctx.send(ws, {
+        type: "plan.updated",
+        payload: {
+          plan: {
+            version: 1,
+            sessionId,
+            updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+            items: []
+          }
+        }
+      });
+    }
+  } else {
+    ctx.send(ws, {
+      type: "plan.updated",
+      payload: { plan: null, error: "Plan storage is not configured for this session." }
+    });
+  }
+}
+async function handlePlanTemplateUse(ctx, ws, template) {
+  const planPath = ctx.context.meta["plan.path"];
+  const sessionId = ctx.context.session?.id ?? "";
+  if (typeof planPath !== "string" || !planPath) {
+    sendResult(ws, ctx, false, "Plan storage is not configured for this session.");
+    return;
+  }
+  try {
+    const { getPlanTemplate, loadPlan, savePlan, emptyPlan, addPlanItem } = await import("@wrongstack/core");
+    const tpl = getPlanTemplate(template);
+    if (!tpl) {
+      sendResult(ws, ctx, false, `Unknown template "${template}".`);
+      return;
+    }
+    let plan = await loadPlan(planPath) ?? emptyPlan(sessionId);
+    for (const item of tpl.items) {
+      ({ plan } = addPlanItem(plan, item.title, item.details));
+    }
+    await savePlan(planPath, plan);
+    sendResult(ws, ctx, true, `Applied template "${tpl.name}" \u2014 ${tpl.items.length} items added.`);
+    ctx.broadcast({ type: "plan.updated", payload: { plan } });
+  } catch (err) {
+    sendResult(ws, ctx, false, String(err));
+  }
+}
+async function handlePlanItemUpdate(ctx, ws, payload) {
+  const planPath = ctx.context.meta["plan.path"];
+  const sessionId = ctx.context.session?.id ?? "";
+  if (typeof planPath !== "string" || !planPath) {
+    sendResult(ws, ctx, false, "Plan storage is not configured for this session.");
+    return;
+  }
+  try {
+    const { loadPlan, savePlan, mutatePlan, setPlanItemStatus } = await import("@wrongstack/core");
+    let changed = false;
+    const plan = await mutatePlan(planPath, sessionId, async (p) => {
+      const before = p.updatedAt;
+      const updated = setPlanItemStatus(p, payload.target, payload.status);
+      changed = updated.updatedAt !== before;
+      return updated;
+    });
+    if (!changed) {
+      sendResult(ws, ctx, false, `No plan item matched "${payload.target}".`);
+      return;
+    }
+    sendResult(ws, ctx, true, `Plan item status updated to "${payload.status}".`);
+    ctx.broadcast({ type: "plan.updated", payload: { plan } });
+  } catch (err) {
+    sendResult(ws, ctx, false, String(err));
+  }
+}
+export {
+  handlePlanGet,
+  handlePlanItemUpdate,
+  handlePlanTemplateUse,
+  handleTaskUpdate,
+  handleTasksGet,
+  handleTodoUpdate,
+  handleTodosClear,
+  handleTodosGet,
+  handleTodosRemove
+};
+//# sourceMappingURL=handlers.js.map

package/dist/server/handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/server/handlers/worklist-handlers.ts"],"sourcesContent":["// ── Shared Worklist Handlers ─────────────────────────────────────────────────\n// Extracted from standalone server (packages/webui/src/server/index.ts) and CLI\n// embedded server (packages/cli/src/webui-server/). Both servers use these\n// handlers for todos, tasks, and plan operations. Keep them in sync.\n//\n// Message types handled here:\n//   todos.get | todos.clear | todos.remove | todo.update\n//   tasks.get | task.update\n//   plan.get | plan.template_use | plan.item.update\n// ─────────────────────────────────────────────────────────────────────────────\n\nimport type { WebSocket } from 'ws';\nimport type { TodoItem } from '@wrongstack/core';\n\n// ── Shared result helper ───────────────────────────────────────────────────────\n\nfunction sendResult(\n  ws: WebSocket,\n  ctx: WorklistContext,\n  ok: boolean,\n  message: string,\n): void {\n  ctx.send(ws, { type: ok ? 'ok' : 'error', message });\n}\n\n// ── Context interface ─────────────────────────────────────────────────────────\n// Both servers satisfy this with their own local state.\n\nexport interface WorklistContext {\n  context: {\n    todos: TodoItem[];\n    meta: Record<string, unknown>;\n    session: { id: string } | null;\n    state?: unknown;\n  };\n  send: (ws: WebSocket, msg: object) => void;\n  broadcast: (msg: object) => void;\n  /**\n   * Optional mutator for in-memory todo state. Servers that manage live\n   * agent state (e.g. the CLI embedded server) provide this so handlers\n   * can update the agent's todo list directly. Standalone server may omit.\n   */\n  replaceTodos?: (todos: TodoItem[]) => void;\n}\n\n// ── Todos ─────────────────────────────────────────────────────────────────────\n\nexport function handleTodosGet(ctx: WorklistContext, ws: WebSocket): void {\n  ctx.send(ws, { type: 'todos.updated', payload: { todos: ctx.context.todos } });\n}\n\nexport function handleTodosClear(ctx: WorklistContext, ws: WebSocket): void {\n  ctx.replaceTodos?.([]);\n  ctx.broadcast({ type: 'todos.cleared' });\n  sendResult(ws, ctx, true, 'Todo board cleared.');\n}\n\nexport function handleTodosRemove(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { id?: string; index?: number } | undefined,\n): void {\n  if (!payload || (payload.id === undefined && payload.index === undefined)) {\n    sendResult(ws, ctx, false, 'todos.remove requires id or index.');\n    return;\n  }\n  const next =\n    payload.id !== undefined\n      ? ctx.context.todos.filter((t) => t.id !== payload.id)\n      : ctx.context.todos.filter((_, i) => i !== (payload.index as number));\n  ctx.replaceTodos?.(next);\n  ctx.broadcast({ type: 'todos.updated', payload: { todos: next } });\n  sendResult(ws, ctx, true, 'Todo item removed.');\n}\n\nexport function handleTodoUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { id: string; status?: TodoItem['status']; activeForm?: string },\n): void {\n  const todo = ctx.context.todos.find((t) => t.id === payload.id);\n  if (!todo) {\n    sendResult(ws, ctx, false, `No todo with id \"${payload.id}\".`);\n    return;\n  }\n  const next = ctx.context.todos.map((t) =>\n    t.id === payload.id\n      ? { ...t, ...(payload.status !== undefined && { status: payload.status }), ...(payload.activeForm !== undefined && { activeForm: payload.activeForm }) }\n      : t,\n  );\n  ctx.replaceTodos?.(next);\n  ctx.broadcast({ type: 'todos.updated', payload: { todos: next } });\n  sendResult(ws, ctx, true, `Todo \"${todo.content}\" updated.`);\n}\n\n// ── Tasks ─────────────────────────────────────────────────────────────────────\n\nexport async function handleTasksGet(ctx: WorklistContext, ws: WebSocket): Promise<void> {\n  const taskPath = ctx.context.meta['task.path'];\n  if (typeof taskPath === 'string' && taskPath) {\n    try {\n      const { loadTasks } = await import('@wrongstack/core');\n      const file = await loadTasks(taskPath);\n      ctx.send(ws, { type: 'tasks.updated', payload: { tasks: file?.tasks ?? [] } });\n    } catch {\n      ctx.send(ws, { type: 'tasks.updated', payload: { tasks: [] } });\n    }\n  } else {\n    ctx.send(ws, {\n      type: 'tasks.updated',\n      payload: { tasks: [], error: 'Task storage not configured.' },\n    });\n  }\n}\n\nexport async function handleTaskUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: {\n    id: string;\n    status: 'pending' | 'in_progress' | 'blocked' | 'failed' | 'review' | 'completed';\n  },\n): Promise<void> {\n  const taskPath = ctx.context.meta['task.path'];\n  if (typeof taskPath !== 'string' || !taskPath) {\n    sendResult(ws, ctx, false, 'Task storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { loadTasks, saveTasks } = await import('@wrongstack/core');\n    const file = await loadTasks(taskPath);\n    if (!file) {\n      sendResult(ws, ctx, false, 'No task file found.');\n      return;\n    }\n    const idx = file.tasks.findIndex((t) => t.id === payload.id);\n    if (idx === -1) {\n      sendResult(ws, ctx, false, `Task \"${payload.id}\" not found.`);\n      return;\n    }\n    file.tasks[idx] = { ...file.tasks[idx], status: payload.status };\n    await saveTasks(taskPath, file);\n    ctx.broadcast({ type: 'tasks.updated', payload: { tasks: file.tasks } });\n    sendResult(ws, ctx, true, `Task \"${payload.id}\" marked ${payload.status}.`);\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\n// ── Plan ───────────────────────────────────────────────────────────────────────\n\nexport async function handlePlanGet(ctx: WorklistContext, ws: WebSocket): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath === 'string' && planPath) {\n    try {\n      const { loadPlan } = await import('@wrongstack/core');\n      const plan = await loadPlan(planPath);\n      ctx.send(ws, {\n        type: 'plan.updated',\n        payload: {\n          plan: plan ?? {\n            version: 1,\n            sessionId,\n            updatedAt: new Date().toISOString(),\n            items: [],\n          },\n        },\n      });\n    } catch {\n      ctx.send(ws, {\n        type: 'plan.updated',\n        payload: {\n          plan: {\n            version: 1,\n            sessionId,\n            updatedAt: new Date().toISOString(),\n            items: [],\n          },\n        },\n      });\n    }\n  } else {\n    ctx.send(ws, {\n      type: 'plan.updated',\n      payload: { plan: null, error: 'Plan storage is not configured for this session.' },\n    });\n  }\n}\n\nexport async function handlePlanTemplateUse(ctx: WorklistContext, ws: WebSocket, template: string): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath !== 'string' || !planPath) {\n    sendResult(ws, ctx, false, 'Plan storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { getPlanTemplate, loadPlan, savePlan, emptyPlan, addPlanItem } = await import('@wrongstack/core');\n    const tpl = getPlanTemplate(template);\n    if (!tpl) {\n      sendResult(ws, ctx, false, `Unknown template \"${template}\".`);\n      return;\n    }\n    let plan = (await loadPlan(planPath)) ?? emptyPlan(sessionId);\n    for (const item of tpl.items) {\n      ({ plan } = addPlanItem(plan, item.title, item.details));\n    }\n    await savePlan(planPath, plan);\n    sendResult(ws, ctx, true, `Applied template \"${tpl.name}\" — ${tpl.items.length} items added.`);\n    ctx.broadcast({ type: 'plan.updated', payload: { plan } });\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\nexport async function handlePlanItemUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { target: string; status: 'open' | 'in_progress' | 'done' },\n): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath !== 'string' || !planPath) {\n    sendResult(ws, ctx, false, 'Plan storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { loadPlan, savePlan, mutatePlan, setPlanItemStatus } = await import('@wrongstack/core');\n    let changed = false;\n    const plan = await mutatePlan(planPath, sessionId, async (p) => {\n      const before = p.updatedAt;\n      const updated = setPlanItemStatus(p, payload.target, payload.status);\n      changed = updated.updatedAt !== before;\n      return updated;\n    });\n    if (!changed) {\n      sendResult(ws, ctx, false, `No plan item matched \"${payload.target}\".`);\n      return;\n    }\n    sendResult(ws, ctx, true, `Plan item status updated to \"${payload.status}\".`);\n    ctx.broadcast({ type: 'plan.updated', payload: { plan } });\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n"],"mappings":";AAgBA,SAAS,WACP,IACA,KACA,IACA,SACM;AACN,MAAI,KAAK,IAAI,EAAE,MAAM,KAAK,OAAO,SAAS,QAAQ,CAAC;AACrD;AAwBO,SAAS,eAAe,KAAsB,IAAqB;AACxE,MAAI,KAAK,IAAI,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,IAAI,QAAQ,MAAM,EAAE,CAAC;AAC/E;AAEO,SAAS,iBAAiB,KAAsB,IAAqB;AAC1E,MAAI,eAAe,CAAC,CAAC;AACrB,MAAI,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACvC,aAAW,IAAI,KAAK,MAAM,qBAAqB;AACjD;AAEO,SAAS,kBACd,KACA,IACA,SACM;AACN,MAAI,CAAC,WAAY,QAAQ,OAAO,UAAa,QAAQ,UAAU,QAAY;AACzE,eAAW,IAAI,KAAK,OAAO,oCAAoC;AAC/D;AAAA,EACF;AACA,QAAM,OACJ,QAAQ,OAAO,SACX,IAAI,QAAQ,MAAM,OAAO,CAAC,MAAM,EAAE,OAAO,QAAQ,EAAE,IACnD,IAAI,QAAQ,MAAM,OAAO,CAAC,GAAG,MAAM,MAAO,QAAQ,KAAgB;AACxE,MAAI,eAAe,IAAI;AACvB,MAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,KAAK,EAAE,CAAC;AACjE,aAAW,IAAI,KAAK,MAAM,oBAAoB;AAChD;AAEO,SAAS,iBACd,KACA,IACA,SACM;AACN,QAAM,OAAO,IAAI,QAAQ,MAAM,KAAK,CAAC,MAAM,EAAE,OAAO,QAAQ,EAAE;AAC9D,MAAI,CAAC,MAAM;AACT,eAAW,IAAI,KAAK,OAAO,oBAAoB,QAAQ,EAAE,IAAI;AAC7D;AAAA,EACF;AACA,QAAM,OAAO,IAAI,QAAQ,MAAM;AAAA,IAAI,CAAC,MAClC,EAAE,OAAO,QAAQ,KACb,EAAE,GAAG,GAAG,GAAI,QAAQ,WAAW,UAAa,EAAE,QAAQ,QAAQ,OAAO,GAAI,GAAI,QAAQ,eAAe,UAAa,EAAE,YAAY,QAAQ,WAAW,EAAG,IACrJ;AAAA,EACN;AACA,MAAI,eAAe,IAAI;AACvB,MAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,KAAK,EAAE,CAAC;AACjE,aAAW,IAAI,KAAK,MAAM,SAAS,KAAK,OAAO,YAAY;AAC7D;AAIA,eAAsB,eAAe,KAAsB,IAA8B;AACvF,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,MAAI,OAAO,aAAa,YAAY,UAAU;AAC5C,QAAI;AACF,YAAM,EAAE,UAAU,IAAI,MAAM,OAAO,kBAAkB;AACrD,YAAM,OAAO,MAAM,UAAU,QAAQ;AACrC,UAAI,KAAK,IAAI,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,MAAM,SAAS,CAAC,EAAE,EAAE,CAAC;AAAA,IAC/E,QAAQ;AACN,UAAI,KAAK,IAAI,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;AAAA,IAChE;AAAA,EACF,OAAO;AACL,QAAI,KAAK,IAAI;AAAA,MACX,MAAM;AAAA,MACN,SAAS,EAAE,OAAO,CAAC,GAAG,OAAO,+BAA+B;AAAA,IAC9D,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,iBACpB,KACA,IACA,SAIe;AACf,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,MAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,eAAW,IAAI,KAAK,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,UAAM,EAAE,WAAW,UAAU,IAAI,MAAM,OAAO,kBAAkB;AAChE,UAAM,OAAO,MAAM,UAAU,QAAQ;AACrC,QAAI,CAAC,MAAM;AACT,iBAAW,IAAI,KAAK,OAAO,qBAAqB;AAChD;AAAA,IACF;AACA,UAAM,MAAM,KAAK,MAAM,UAAU,CAAC,MAAM,EAAE,OAAO,QAAQ,EAAE;AAC3D,QAAI,QAAQ,IAAI;AACd,iBAAW,IAAI,KAAK,OAAO,SAAS,QAAQ,EAAE,cAAc;AAC5D;AAAA,IACF;AACA,SAAK,MAAM,GAAG,IAAI,EAAE,GAAG,KAAK,MAAM,GAAG,GAAG,QAAQ,QAAQ,OAAO;AAC/D,UAAM,UAAU,UAAU,IAAI;AAC9B,QAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,KAAK,MAAM,EAAE,CAAC;AACvE,eAAW,IAAI,KAAK,MAAM,SAAS,QAAQ,EAAE,YAAY,QAAQ,MAAM,GAAG;AAAA,EAC5E,SAAS,KAAK;AACZ,eAAW,IAAI,KAAK,OAAO,OAAO,GAAG,CAAC;AAAA,EACxC;AACF;AAIA,eAAsB,cAAc,KAAsB,IAA8B;AACtF,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,QAAM,YAAY,IAAI,QAAQ,SAAS,MAAM;AAC7C,MAAI,OAAO,aAAa,YAAY,UAAU;AAC5C,QAAI;AACF,YAAM,EAAE,SAAS,IAAI,MAAM,OAAO,kBAAkB;AACpD,YAAM,OAAO,MAAM,SAAS,QAAQ;AACpC,UAAI,KAAK,IAAI;AAAA,QACX,MAAM;AAAA,QACN,SAAS;AAAA,UACP,MAAM,QAAQ;AAAA,YACZ,SAAS;AAAA,YACT;AAAA,YACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YAClC,OAAO,CAAC;AAAA,UACV;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH,QAAQ;AACN,UAAI,KAAK,IAAI;AAAA,QACX,MAAM;AAAA,QACN,SAAS;AAAA,UACP,MAAM;AAAA,YACJ,SAAS;AAAA,YACT;AAAA,YACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YAClC,OAAO,CAAC;AAAA,UACV;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF,OAAO;AACL,QAAI,KAAK,IAAI;AAAA,MACX,MAAM;AAAA,MACN,SAAS,EAAE,MAAM,MAAM,OAAO,mDAAmD;AAAA,IACnF,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,sBAAsB,KAAsB,IAAe,UAAiC;AAChH,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,QAAM,YAAY,IAAI,QAAQ,SAAS,MAAM;AAC7C,MAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,eAAW,IAAI,KAAK,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,UAAM,EAAE,iBAAiB,UAAU,UAAU,WAAW,YAAY,IAAI,MAAM,OAAO,kBAAkB;AACvG,UAAM,MAAM,gBAAgB,QAAQ;AACpC,QAAI,CAAC,KAAK;AACR,iBAAW,IAAI,KAAK,OAAO,qBAAqB,QAAQ,IAAI;AAC5D;AAAA,IACF;AACA,QAAI,OAAQ,MAAM,SAAS,QAAQ,KAAM,UAAU,SAAS;AAC5D,eAAW,QAAQ,IAAI,OAAO;AAC5B,OAAC,EAAE,KAAK,IAAI,YAAY,MAAM,KAAK,OAAO,KAAK,OAAO;AAAA,IACxD;AACA,UAAM,SAAS,UAAU,IAAI;AAC7B,eAAW,IAAI,KAAK,MAAM,qBAAqB,IAAI,IAAI,YAAO,IAAI,MAAM,MAAM,eAAe;AAC7F,QAAI,UAAU,EAAE,MAAM,gBAAgB,SAAS,EAAE,KAAK,EAAE,CAAC;AAAA,EAC3D,SAAS,KAAK;AACZ,eAAW,IAAI,KAAK,OAAO,OAAO,GAAG,CAAC;AAAA,EACxC;AACF;AAEA,eAAsB,qBACpB,KACA,IACA,SACe;AACf,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,QAAM,YAAY,IAAI,QAAQ,SAAS,MAAM;AAC7C,MAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,eAAW,IAAI,KAAK,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,UAAM,EAAE,UAAU,UAAU,YAAY,kBAAkB,IAAI,MAAM,OAAO,kBAAkB;AAC7F,QAAI,UAAU;AACd,UAAM,OAAO,MAAM,WAAW,UAAU,WAAW,OAAO,MAAM;AAC9D,YAAM,SAAS,EAAE;AACjB,YAAM,UAAU,kBAAkB,GAAG,QAAQ,QAAQ,QAAQ,MAAM;AACnE,gBAAU,QAAQ,cAAc;AAChC,aAAO;AAAA,IACT,CAAC;AACD,QAAI,CAAC,SAAS;AACZ,iBAAW,IAAI,KAAK,OAAO,yBAAyB,QAAQ,MAAM,IAAI;AACtE;AAAA,IACF;AACA,eAAW,IAAI,KAAK,MAAM,gCAAgC,QAAQ,MAAM,IAAI;AAC5E,QAAI,UAAU,EAAE,MAAM,gBAAgB,SAAS,EAAE,KAAK,EAAE,CAAC;AAAA,EAC3D,SAAS,KAAK;AACZ,eAAW,IAAI,KAAK,OAAO,OAAO,GAAG,CAAC;AAAA,EACxC;AACF;","names":[]}

package/dist/server/index.d.ts

@@ -1,6 +1,8 @@
 import { WebSocket } from 'ws';
-import { Agent, EventBus, SessionStore, ToolRegistry, ModelsRegistry, ConfigStore, SecretVault, JournalEntry, Logger, MemoryStore, ProviderConfig, ProviderApiKey, Context } from '@wrongstack/core';
+import { Agent, EventBus, SessionStore, ToolRegistry, ModelsRegistry, ConfigStore, SecretVault, JournalEntry, Logger, MemoryStore, ProviderConfig, ProviderApiKey, Context, SkillLoader } from '@wrongstack/core';
 import * as http from 'node:http';
+import { MCPRegistry } from '@wrongstack/mcp';
+import { SkillInstaller } from '@wrongstack/core/skills';
 
 interface WSServerMessage {
     type: string;
@@ -68,6 +70,25 @@ interface ConnectedClient {
     ws: WebSocket;
     sessionId: string | null;
     connectedAt: number;
+    /** Unique per-connection id — used to key per-connection state (e.g. the
+     *  rate-limit bucket) so distinct browser tabs that share the same
+     *  `sessionId` do not collide, and so the entry is reliably removable on
+     *  close (`String(ws)` is `"[object Object]"` for every socket). */
+    connId: string;
+}
+
+/** Metrics for the file watcher that watches status.json files. */
+interface FileWatcherMetrics {
+    fileChangesDetected: number;
+    filesProcessed: number;
+    broadcastsSent: number;
+    debounceResets: number;
+    totalDebounceDelayMs: number;
+    activeProjects: number;
+    /** Average debounce delay in ms across all broadcasts. */
+    averageDebounceDelayMs: number;
+    /** Whether the file watcher is currently active. */
+    watcherActive: boolean;
 }
 
 interface CreateHttpServerOptions {
@@ -102,6 +123,17 @@ interface CreateHttpServerOptions {
      * URL-token-only flow (e.g. in tests that don't want cookie state).
      */
     enableWsCookie?: boolean | undefined;
+    /**
+     * Optional file watcher metrics object. When provided, the
+     * /debug/watcher-metrics endpoint will be enabled to expose these metrics.
+     */
+    watcherMetrics?: FileWatcherMetrics | undefined;
+    /**
+     * Push-on-write hook. `POST /api/fleet/ping` (loopback only) invokes this to
+     * trigger an immediate fleet re-broadcast, so a TUI/REPL's registry write
+     * reaches the map without waiting on the file-watch/poll. Best-effort.
+     */
+    onFleetPing?: (() => void) | undefined;
 }
 /**
  * Inject the live WS port into the served HTML so the frontend connects to
@@ -291,13 +323,13 @@ declare function handleShellOpen(req: ShellOpenRequest, logger: Logger): Promise
  * Send a JSON message to a single WebSocket client.
  * No-op when the socket is not in OPEN state (disconnected / closing).
  */
-declare function send(ws: WebSocket, msg: WSServerMessage): void;
+declare function send(ws: WebSocket, msg: object): void;
 /**
  * Broadcast a JSON message to every connected client.
  * Swallows per-socket send errors — a client that disconnected between the
  * readyState check and `ws.send()` is cleaned up by its own `close` handler.
  */
-declare function broadcast(clients: Map<WebSocket, ConnectedClient>, msg: WSServerMessage): void;
+declare function broadcast(clients: Map<WebSocket, ConnectedClient>, msg: object): void;
 /**
  * Send a success/failure result message (used by key.* and provider.* handlers).
  * The frontend expects `key.operation_result` with `{ success, message }`.
@@ -355,6 +387,42 @@ declare function handleFilesWrite(ws: WebSocket, msg: unknown, projectRoot: stri
  */
 declare function handleFilesList(ws: WebSocket, msg: unknown, projectRoot: string): Promise<void>;
 
+/**
+ * Shared `git.info` WebSocket handler for both the standalone WebUI server and
+ * the CLI's `--webui` embedded server. Extracted from the duplicated switch
+ * cases in `index.ts` and `cli/src/webui-server.ts`, which had drifted (the
+ * standalone copy transposed ahead/behind and never matched deletions). One
+ * implementation here keeps both surfaces in lockstep.
+ *
+ *   case 'git.info': return handleGitInfo(ws, projectRoot);
+ */
+
+/**
+ * Read git branch, change stats, and upstream sync status from `projectRoot`
+ * and broadcast a `git.info` message. Never throws — a non-repo / missing-git
+ * directory yields an empty-but-valid payload.
+ */
+declare function handleGitInfo(ws: WebSocket, projectRoot: string): Promise<void>;
+/**
+ * Read the working-tree change set (everything that differs from HEAD:
+ * staged, unstaged, and untracked) and broadcast a `git.changes` message.
+ *
+ * The file list comes from `git status --porcelain -z` (NUL-delimited so
+ * paths with spaces/unicode survive intact, and renames are unambiguous).
+ * Per-file line counts come from `--numstat` of both the unstaged and the
+ * staged diff, summed; untracked files count their own lines as additions.
+ * Never throws — a non-repo yields an empty list.
+ */
+declare function handleGitChanges(ws: WebSocket, projectRoot: string): Promise<void>;
+/**
+ * Resolve the before/after text for a single file and broadcast a `git.diff`
+ * message. `oldText` is the file at HEAD (`git show HEAD:<path>`), `newText`
+ * is the current working-tree content. New/untracked files have empty
+ * `oldText`; deleted files have empty `newText`. Binary or oversized files
+ * are reported with a flag instead of content so the client can show a notice.
+ */
+declare function handleGitDiff(ws: WebSocket, projectRoot: string, path: string): Promise<void>;
+
 /**
  * Shared memory-operation WebSocket handlers for both the standalone WebUI
  * server and the CLI's `--webui` embedded server. Extracted from the
@@ -382,6 +450,38 @@ declare function handleMemoryRemember(ws: WebSocket, msg: unknown, memoryStore:
  */
 declare function handleMemoryForget(ws: WebSocket, msg: unknown, memoryStore: MemoryStore): Promise<void>;
 
+/**
+ * MCP management handlers for the WebUI server (both the standalone
+ * `wrongstack webui` server and the CLI's embedded `--webui` server).
+ *
+ * These are thin WebSocket translators over the shared, surface-agnostic
+ * management core in `@wrongstack/mcp` (`manage.ts`) — the SAME core the REPL
+ * `/mcp` command writes against (same config.json, same MCPRegistry). All the
+ * config IO, url/header persistence, and live registry start/stop logic lives
+ * there; here we only map structured results to WS events the browser expects.
+ */
+
+/** mcp.list — configured servers merged with live registry status + tools. */
+declare function handleMcpList(ws: WebSocket, _msg: WSClientMessage, globalConfigPath: string, mcpRegistry?: MCPRegistry): Promise<void>;
+/** mcp.add — persist a new server (incl. url/headers) and start it if enabled. */
+declare function handleMcpAdd(ws: WebSocket, msg: WSClientMessage, globalConfigPath: string, mcpRegistry?: MCPRegistry): Promise<void>;
+/** mcp.update — re-persist config (incl. url/headers) and re-apply to registry. */
+declare function handleMcpUpdate(ws: WebSocket, msg: WSClientMessage, globalConfigPath: string, mcpRegistry?: MCPRegistry): Promise<void>;
+/** mcp.remove — stop the server and delete it from config. */
+declare function handleMcpRemove(ws: WebSocket, msg: WSClientMessage, globalConfigPath: string, mcpRegistry?: MCPRegistry): Promise<void>;
+/** mcp.enable — flip enabled:true in config and start the server. */
+declare function handleMcpEnable(ws: WebSocket, msg: WSClientMessage, globalConfigPath: string, mcpRegistry?: MCPRegistry): Promise<void>;
+/** mcp.disable — stop the server and flip enabled:false in config. */
+declare function handleMcpDisable(ws: WebSocket, msg: WSClientMessage, globalConfigPath: string, mcpRegistry?: MCPRegistry): Promise<void>;
+/** mcp.sleep — stop a running server (config stays enabled). */
+declare function handleMcpSleep(ws: WebSocket, msg: WSClientMessage, globalConfigPath: string, mcpRegistry?: MCPRegistry): Promise<void>;
+/** mcp.wake — restart a sleeping/stopped server from config. */
+declare function handleMcpWake(ws: WebSocket, msg: WSClientMessage, globalConfigPath: string, mcpRegistry?: MCPRegistry): Promise<void>;
+/** mcp.restart — stop + start a server. */
+declare function handleMcpRestart(ws: WebSocket, msg: WSClientMessage, globalConfigPath: string, mcpRegistry?: MCPRegistry): Promise<void>;
+/** mcp.discover — ensure the server is running and report its live tools. */
+declare function handleMcpDiscover(ws: WebSocket, msg: WSClientMessage, globalConfigPath: string, mcpRegistry?: MCPRegistry): Promise<void>;
+
 /**
  * Custom context modes — user-defined presets that are loaded from disk,
  * merged with the built-in modes, and managed via WebSocket CRUD handlers.
@@ -510,8 +610,10 @@ interface KeyOpResult {
 declare function normalizeKeys(cfg: ProviderConfig): ProviderApiKey[];
 /**
  * Write a normalized key list back onto a provider config: drop all key fields
- * when empty, otherwise sync `apiKeys`, the legacy `apiKey` mirror (the active
- * key), and re-point `activeKey` if it no longer names a present key.
+ * when empty, otherwise sync `apiKeys` and re-point `activeKey` if it no longer
+ * names a present key. Does NOT mirror the plaintext key to the legacy `apiKey`
+ * field — that would leak the secret on accidental serialization. Consumers
+ * that need the real key should read from `apiKeys[]` directly.
  */
 declare function writeKeysBack(cfg: ProviderConfig, keys: ProviderApiKey[]): void;
 /** Mask a secret for display: `••••` for short keys, `abcd…wxyz` otherwise. */
@@ -607,10 +709,75 @@ declare class AutoPhaseWebSocketHandler {
     private send;
 }
 
+/**
+ * Shared skills WebSocket handlers for both the standalone WebUI server
+ * (`packages/webui/src/server/index.ts`) and the CLI's `--webui` embedded
+ * server (`packages/cli/src/webui-server.ts`).
+ *
+ * These were previously inlined in BOTH servers, and the CLI copy had
+ * drifted — it only wired `skills.list`, so `skills.content` /
+ * `skills.export` / `skills.update` (and install/uninstall/create/edit)
+ * fell through to the "Unhandled message type" warning even though the
+ * SkillsPanel sends them. Extracting the full set here gives both servers
+ * one source of truth. Each function handles the full request→response
+ * cycle for one message type; callers drop them into their switch:
+ *
+ *   case 'skills.content': return handleSkillsContent(ws, skillsCtx, msg);
+ *
+ * The logic is a verbatim lift of the standalone's inline cases — only the
+ * dependency references changed (`skillLoader`/`skillInstaller`/
+ * `projectRoot` → `ctx.*`, local `send`/`errMessage` → imported helpers).
+ */
+
+interface SkillsContext {
+    /** Backs skills.list/content/edit/export. Absent ⇒ feature disabled. */
+    skillLoader: SkillLoader | undefined;
+    /** Backs skills.install/uninstall/update. Absent ⇒ those ops disabled. */
+    skillInstaller: SkillInstaller | undefined;
+    /** Project root — used by skills.create to write `.wrongstack/skills/…`. */
+    projectRoot: string;
+}
+/**
+ * Read a single skill's body + its directory's related files + which other
+ * skills reference it by name. Powers the skill detail/preview view.
+ */
+declare function handleSkillsContent(ws: WebSocket, ctx: SkillsContext, msg: unknown): Promise<void>;
+/**
+ * Install a skill from a git ref (`owner/repo` or URL). Optional `global`
+ * installs into the user-wide skills dir instead of the project's.
+ */
+declare function handleSkillsInstall(ws: WebSocket, ctx: SkillsContext, msg: unknown): Promise<void>;
+/**
+ * Uninstall a skill by name. Optional `global` restricts/Targets the
+ * user-wide install.
+ */
+declare function handleSkillsUninstall(ws: WebSocket, ctx: SkillsContext, msg: unknown): Promise<void>;
+/**
+ * Update one skill (`name`) or all installed skills (when `name` is
+ * omitted). Reports per-skill updated/unchanged/error tallies.
+ */
+declare function handleSkillsUpdate(ws: WebSocket, ctx: SkillsContext, msg: unknown): Promise<void>;
+/**
+ * Scaffold a new project- or global-scoped skill from a name + description.
+ * Writes a templated `SKILL.md` under `.wrongstack/skills/<name>/` (project)
+ * or the user-wide skills dir (global).
+ */
+declare function handleSkillsCreate(ws: WebSocket, ctx: SkillsContext, msg: unknown): Promise<void>;
+/**
+ * Overwrite a skill's body. Refuses bundled skills (read-only) and unknown
+ * names.
+ */
+declare function handleSkillsEdit(ws: WebSocket, ctx: SkillsContext, msg: unknown): Promise<void>;
+/**
+ * Export every readable skill as a base64-encoded zip (one folder per skill,
+ * each with its `SKILL.md`). Powers the panel's "Export all" button.
+ */
+declare function handleSkillsExport(ws: WebSocket, ctx: SkillsContext): Promise<void>;
+
 declare function startWebUI(opts?: WebUIOptions & {
     wsPort?: number | undefined;
     wsHost?: string | undefined;
     open?: boolean | undefined;
 }): Promise<void>;
 
-export { AutoPhaseWebSocketHandler, type BackendServices, type ConnectedClient, type ContextBreakdown, type CreateHttpServerOptions, type CustomContextMode, type CustomModeStore, type EternalBroadcast, type EternalSubscribe, type EternalSubscription, type KeyOpResult, type MessageTokenEntry, type ProvidersRecord, type ShellOpenRequest, type ShellOpenResult, type ShellOpenTarget, type ToolTokenEntry, type VerifyClientInput, type WSClientMessage, type WSServerMessage, type WebUIInstanceRecord, type WebUIOptions, addProvider, broadcast, browserOpenCommand, buildCspHeader, createCustomModeStore, createEternalSubscription, createHttpServer, createProviderConfigIO, defaultBaseDir, deleteKey, errMessage, estimateTokens, extractToken, findFreePort, formatInstances, generateAuthToken, handleFilesList, handleFilesRead, handleFilesTree, handleFilesWrite, handleMemoryForget, handleMemoryList, handleMemoryRemember, handleShellOpen, hostHeaderOk, injectWsPort, isLoopbackBind, isLoopbackHostname, isPortFree, listInstances, loadSavedProviders, maskedKey, messagePreview, messageTokens, normalizeKeys, openBrowser, registerInstance, registryPath, removeProvider, saveProviders, send, sendResult, setActiveKey, startWebUI, stringifyContent, tokenMatches, unregisterInstance, upsertKey, verifyClient, writeKeysBack };
+export { AutoPhaseWebSocketHandler, type BackendServices, type ConnectedClient, type ContextBreakdown, type CreateHttpServerOptions, type CustomContextMode, type CustomModeStore, type EternalBroadcast, type EternalSubscribe, type EternalSubscription, type KeyOpResult, type MessageTokenEntry, type ProvidersRecord, type ShellOpenRequest, type ShellOpenResult, type ShellOpenTarget, type SkillsContext, type ToolTokenEntry, type VerifyClientInput, type WSClientMessage, type WSServerMessage, type WebUIInstanceRecord, type WebUIOptions, addProvider, broadcast, browserOpenCommand, buildCspHeader, createCustomModeStore, createEternalSubscription, createHttpServer, createProviderConfigIO, defaultBaseDir, deleteKey, errMessage, estimateTokens, extractToken, findFreePort, formatInstances, generateAuthToken, handleFilesList, handleFilesRead, handleFilesTree, handleFilesWrite, handleGitChanges, handleGitDiff, handleGitInfo, handleMcpAdd, handleMcpDisable, handleMcpDiscover, handleMcpEnable, handleMcpList, handleMcpRemove, handleMcpRestart, handleMcpSleep, handleMcpUpdate, handleMcpWake, handleMemoryForget, handleMemoryList, handleMemoryRemember, handleShellOpen, handleSkillsContent, handleSkillsCreate, handleSkillsEdit, handleSkillsExport, handleSkillsInstall, handleSkillsUninstall, handleSkillsUpdate, hostHeaderOk, injectWsPort, isLoopbackBind, isLoopbackHostname, isPortFree, listInstances, loadSavedProviders, maskedKey, messagePreview, messageTokens, normalizeKeys, openBrowser, registerInstance, registryPath, removeProvider, saveProviders, send, sendResult, setActiveKey, startWebUI, stringifyContent, tokenMatches, unregisterInstance, upsertKey, verifyClient, writeKeysBack };