@wrongstack/webui 0.273.1 → 0.275.0

package/dist/server/handlers.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/server/ws-payload-validation.ts","../../src/server/handlers/worklist-handlers.ts"],"sourcesContent":["export type PayloadValidationResult<T> = { ok: true; value: T } | { ok: false; message: string };\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nexport interface ModelSwitchPayload {\n  provider: string;\n  model: string;\n}\n\nexport function validateModelSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ModelSwitchPayload> {\n  if (!isRecord(payload)) {\n    return {\n      ok: false,\n      message: 'model.switch payload must be an object with string provider and model',\n    };\n  }\n  const provider = payload['provider'];\n  const model = payload['model'];\n  if (typeof provider !== 'string' || provider.trim().length === 0) {\n    return { ok: false, message: 'model.switch payload.provider must be a non-empty string' };\n  }\n  if (typeof model !== 'string' || model.trim().length === 0) {\n    return { ok: false, message: 'model.switch payload.model must be a non-empty string' };\n  }\n  return { ok: true, value: { provider, model } };\n}\n\nexport interface PrefsUpdatePayload {\n  prefs: Record<string, unknown>;\n}\n\nconst AUTONOMY_VALUES = new Set(['off', 'suggest', 'auto', 'eternal', 'eternal-parallel']);\n\nexport interface MailboxMessagesPayload {\n  limit?: number;\n  agentId?: string;\n  unreadOnly?: boolean;\n}\n\nexport function validateMailboxMessagesPayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxMessagesPayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.messages payload must be an object when provided' };\n  }\n  const limit = payload['limit'];\n  const agentId = payload['agentId'];\n  const unreadOnly = payload['unreadOnly'];\n  if (limit !== undefined && (typeof limit !== 'number' || !Number.isFinite(limit) || limit < 1)) {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.limit must be a positive number when provided',\n    };\n  }\n  if (agentId !== undefined && typeof agentId !== 'string') {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.agentId must be a string when provided',\n    };\n  }\n  if (unreadOnly !== undefined && typeof unreadOnly !== 'boolean') {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.unreadOnly must be a boolean when provided',\n    };\n  }\n  return { ok: true, value: { limit, agentId, unreadOnly } };\n}\n\nexport interface MailboxAgentsPayload {\n  onlineOnly?: boolean;\n}\n\nexport function validateMailboxAgentsPayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxAgentsPayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.agents payload must be an object when provided' };\n  }\n  const onlineOnly = payload['onlineOnly'];\n  if (onlineOnly !== undefined && typeof onlineOnly !== 'boolean') {\n    return {\n      ok: false,\n      message: 'mailbox.agents payload.onlineOnly must be a boolean when provided',\n    };\n  }\n  return { ok: true, value: { onlineOnly } };\n}\n\nexport interface MailboxPurgePayload {\n  completedMaxAgeMs?: number;\n  incompleteMaxAgeMs?: number;\n}\n\nexport function validateMailboxPurgePayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxPurgePayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.purge payload must be an object when provided' };\n  }\n  const completedMaxAgeMs = payload['completedMaxAgeMs'];\n  const incompleteMaxAgeMs = payload['incompleteMaxAgeMs'];\n  if (\n    completedMaxAgeMs !== undefined &&\n    (typeof completedMaxAgeMs !== 'number' ||\n      !Number.isFinite(completedMaxAgeMs) ||\n      completedMaxAgeMs < 0)\n  ) {\n    return {\n      ok: false,\n      message:\n        'mailbox.purge payload.completedMaxAgeMs must be a non-negative number when provided',\n    };\n  }\n  if (\n    incompleteMaxAgeMs !== undefined &&\n    (typeof incompleteMaxAgeMs !== 'number' ||\n      !Number.isFinite(incompleteMaxAgeMs) ||\n      incompleteMaxAgeMs < 0)\n  ) {\n    return {\n      ok: false,\n      message:\n        'mailbox.purge payload.incompleteMaxAgeMs must be a non-negative number when provided',\n    };\n  }\n  return { ok: true, value: { completedMaxAgeMs, incompleteMaxAgeMs } };\n}\n\nexport interface BrainRiskPayload {\n  level: string;\n}\n\nconst BRAIN_RISK_VALUES = new Set(['off', 'low', 'medium', 'high', 'all']);\n\nexport function validateBrainRiskPayload(\n  payload: unknown,\n): PayloadValidationResult<BrainRiskPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'brain.risk payload must be an object with string level' };\n  }\n  const level = payload['level'];\n  if (typeof level !== 'string' || !BRAIN_RISK_VALUES.has(level)) {\n    return {\n      ok: false,\n      message: 'brain.risk payload.level must be one of off, low, medium, high, all',\n    };\n  }\n  return { ok: true, value: { level } };\n}\n\nexport interface BrainAskPayload {\n  question: string;\n}\n\nexport function validateBrainAskPayload(\n  payload: unknown,\n): PayloadValidationResult<BrainAskPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'brain.ask payload must be an object with string question' };\n  }\n  const question = payload['question'];\n  if (typeof question !== 'string' || question.trim().length === 0) {\n    return { ok: false, message: 'brain.ask payload.question must be a non-empty string' };\n  }\n  return { ok: true, value: { question: question.trim() } };\n}\n\nexport interface AutonomySwitchPayload {\n  mode: string;\n}\n\nexport function validateAutonomySwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<AutonomySwitchPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'autonomy.switch payload must be an object with string mode' };\n  }\n  const mode = payload['mode'];\n  if (typeof mode !== 'string' || !AUTONOMY_VALUES.has(mode)) {\n    return { ok: false, message: 'autonomy.switch payload.mode must be a valid autonomy mode' };\n  }\n  return { ok: true, value: { mode } };\n}\n\nexport interface PlanTemplateUsePayload {\n  template: string;\n}\n\nexport function validatePlanTemplateUsePayload(\n  payload: unknown,\n): PayloadValidationResult<PlanTemplateUsePayload> {\n  if (!isRecord(payload)) {\n    return {\n      ok: false,\n      message: 'plan.template_use payload must be an object with string template',\n    };\n  }\n  const template = payload['template'];\n  if (typeof template !== 'string' || template.trim().length === 0) {\n    return { ok: false, message: 'plan.template_use payload.template must be a non-empty string' };\n  }\n  return { ok: true, value: { template } };\n}\nconst CONTEXT_STRATEGY_VALUES = new Set(['hybrid', 'intelligent', 'selective']);\nconst CONTEXT_MODE_VALUES = new Set(['balanced', 'frugal', 'deep', 'archival']);\nconst TOKEN_SAVING_TIER_VALUES = new Set(['off', 'minimal', 'light', 'medium', 'aggressive']);\nconst ENHANCE_LANGUAGE_VALUES = new Set(['original', 'english']);\nconst LOG_LEVEL_VALUES = new Set(['debug', 'info', 'warn', 'error']);\nconst AUDIT_LEVEL_VALUES = new Set(['minimal', 'standard', 'full']);\nconst REASONING_MODE_VALUES = new Set(['auto', 'on', 'off']);\nconst REASONING_EFFORT_VALUES = new Set([\n  'none',\n  'minimal',\n  'low',\n  'medium',\n  'high',\n  'xhigh',\n  'max',\n]);\nconst CACHE_TTL_VALUES = new Set(['default', '5m', '1h']);\n\nconst BOOLEAN_PREF_KEYS = new Set([\n  'yolo',\n  'chime',\n  'confirmExit',\n  'streamFleet',\n  'nextPrediction',\n  'titleAnimation',\n  'enhanceEnabled',\n  'featureMcp',\n  'featurePlugins',\n  'featureMemory',\n  'featureSkills',\n  'featureModelsRegistry',\n  'indexOnStart',\n  'contextAutoCompact',\n  'tgSessionEnd',\n  'tgDelegate',\n  'reasoningPreserve',\n  'hqEnabled',\n  'hqRawContent',\n  'fallbackAuto',\n]);\n\n/** Keys whose value must be an array of strings (e.g. an ordered model list). */\nconst STRING_ARRAY_PREF_KEYS = new Set(['fallbackModels']);\n\nconst NUMBER_PREF_KEYS = new Set([\n  'autonomyDelayMs',\n  'autoProceedMaxIterations',\n  'maxIterations',\n  'maxConcurrent',\n  'enhanceDelayMs',\n  'tgLongToolMs',\n]);\n\nconst STRING_PREF_KEYS = new Set(['hqUrl', 'hqToken']);\n\nconst ENUM_PREF_KEYS: Record<string, Set<string>> = {\n  autonomy: AUTONOMY_VALUES,\n  contextStrategy: CONTEXT_STRATEGY_VALUES,\n  contextMode: CONTEXT_MODE_VALUES,\n  tokenSavingTier: TOKEN_SAVING_TIER_VALUES,\n  enhanceLanguage: ENHANCE_LANGUAGE_VALUES,\n  logLevel: LOG_LEVEL_VALUES,\n  auditLevel: AUDIT_LEVEL_VALUES,\n  reasoningMode: REASONING_MODE_VALUES,\n  reasoningEffort: REASONING_EFFORT_VALUES,\n  cacheTtl: CACHE_TTL_VALUES,\n};\n\nfunction validatePreferenceValue(key: string, value: unknown): string | null {\n  if (BOOLEAN_PREF_KEYS.has(key)) {\n    return typeof value === 'boolean' ? null : `prefs.update payload.${key} must be a boolean`;\n  }\n  if (NUMBER_PREF_KEYS.has(key)) {\n    return typeof value === 'number' && Number.isFinite(value)\n      ? null\n      : `prefs.update payload.${key} must be a finite number`;\n  }\n  if (STRING_PREF_KEYS.has(key)) {\n    return typeof value === 'string' ? null : `prefs.update payload.${key} must be a string`;\n  }\n  if (STRING_ARRAY_PREF_KEYS.has(key)) {\n    return Array.isArray(value) && value.every((v) => typeof v === 'string')\n      ? null\n      : `prefs.update payload.${key} must be an array of strings`;\n  }\n  const allowed = ENUM_PREF_KEYS[key];\n  if (allowed) {\n    return typeof value === 'string' && allowed.has(value)\n      ? null\n      : `prefs.update payload.${key} must be one of: ${Array.from(allowed).join(', ')}`;\n  }\n  return `prefs.update payload contains unknown preference key: ${key}`;\n}\n\nexport function validatePrefsUpdatePayload(\n  payload: unknown,\n): PayloadValidationResult<PrefsUpdatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'prefs.update payload must be an object' };\n  }\n  for (const [key, value] of Object.entries(payload)) {\n    const error = validatePreferenceValue(key, value);\n    if (error) return { ok: false, message: error };\n  }\n  return { ok: true, value: { prefs: payload } };\n}\n\nexport interface SkillsCreatePayload {\n  name: string;\n  description: string;\n  scope: 'project' | 'global';\n}\n\nexport function validateSkillsCreatePayload(\n  payload: unknown,\n): PayloadValidationResult<SkillsCreatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'skills.create payload must be an object' };\n  }\n  const name = payload['name'];\n  const description = payload['description'];\n  const scope = payload['scope'];\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'Skill name is required' };\n  }\n  if (!/^[a-z0-9]+(-[a-z0-9]+)*$/.test(name.trim())) {\n    return { ok: false, message: 'Skill name must be kebab-case (e.g. my-new-skill)' };\n  }\n  if (typeof description !== 'string' || description.trim().length === 0) {\n    return { ok: false, message: 'Description/trigger is required' };\n  }\n  if (scope !== 'project' && scope !== 'global') {\n    return { ok: false, message: 'skills.create payload.scope must be project or global' };\n  }\n  return { ok: true, value: { name, description, scope } };\n}\n\nexport interface SkillsEditPayload {\n  name: string;\n  body: string;\n}\n\nexport function validateSkillsEditPayload(\n  payload: unknown,\n): PayloadValidationResult<SkillsEditPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'skills.edit payload must be an object' };\n  }\n  const name = payload['name'];\n  const body = payload['body'];\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'Skill name is required' };\n  }\n  if (typeof body !== 'string' || body.length === 0) {\n    return { ok: false, message: 'Skill body is required' };\n  }\n  return { ok: true, value: { name, body } };\n}\n\nexport interface ProcessKillPayload {\n  pid: number;\n}\n\nexport function validateProcessKillPayload(\n  payload: unknown,\n): PayloadValidationResult<ProcessKillPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'process.kill payload must be an object with numeric pid' };\n  }\n  const pid = payload['pid'];\n  if (typeof pid !== 'number' || !Number.isInteger(pid) || pid <= 0) {\n    return { ok: false, message: 'process.kill payload.pid must be a positive integer' };\n  }\n  return { ok: true, value: { pid } };\n}\n\nexport interface WorkingDirSetPayload {\n  path: string;\n}\n\nexport function validateWorkingDirSetPayload(\n  payload: unknown,\n): PayloadValidationResult<WorkingDirSetPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'working_dir.set payload must be an object with string path' };\n  }\n  const newPath = payload['path'];\n  if (typeof newPath !== 'string' || newPath.trim().length === 0) {\n    return { ok: false, message: 'working_dir.set payload.path must be a non-empty string' };\n  }\n  return { ok: true, value: { path: newPath } };\n}\n\nexport interface ModeSwitchPayload {\n  id: string;\n}\n\nexport function validateModeSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ModeSwitchPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mode.switch payload must be an object with string id' };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'mode.switch payload.id must be a non-empty string' };\n  }\n  return { ok: true, value: { id } };\n}\n\nexport interface ContextModeIdPayload {\n  id: string;\n}\n\nfunction validateContextModeIdPayload(\n  payload: unknown,\n  type: 'context.mode.switch' | 'context.mode.delete',\n): PayloadValidationResult<ContextModeIdPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: `${type} payload must be an object with string id` };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: `${type} payload.id must be a non-empty string` };\n  }\n  return { ok: true, value: { id } };\n}\n\nexport function validateContextModeSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeIdPayload> {\n  return validateContextModeIdPayload(payload, 'context.mode.switch');\n}\n\nexport function validateContextModeDeletePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeIdPayload> {\n  return validateContextModeIdPayload(payload, 'context.mode.delete');\n}\n\nexport interface ContextModeCreatePayload {\n  id: string;\n  name: string;\n  description: string;\n  thresholds: { warn: number; soft: number; hard: number };\n  preserveK: number;\n  eliseThreshold: number;\n}\n\nfunction isFiniteNumber(value: unknown): value is number {\n  return typeof value === 'number' && Number.isFinite(value);\n}\n\nexport function validateContextModeCreatePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeCreatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'context.mode.create payload must be an object' };\n  }\n  const id = payload['id'];\n  const name = payload['name'];\n  const description = payload['description'];\n  const thresholds = payload['thresholds'];\n  const preserveK = payload['preserveK'];\n  const eliseThreshold = payload['eliseThreshold'];\n\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'context.mode.create payload.id must be a non-empty string' };\n  }\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'context.mode.create payload.name must be a non-empty string' };\n  }\n  if (typeof description !== 'string') {\n    return { ok: false, message: 'context.mode.create payload.description must be a string' };\n  }\n  if (!isRecord(thresholds)) {\n    return {\n      ok: false,\n      message:\n        'context.mode.create payload.thresholds must be an object with warn/soft/hard numbers',\n    };\n  }\n  if (\n    !isFiniteNumber(thresholds['warn']) ||\n    !isFiniteNumber(thresholds['soft']) ||\n    !isFiniteNumber(thresholds['hard'])\n  ) {\n    return {\n      ok: false,\n      message: 'context.mode.create payload.thresholds.warn/soft/hard must be finite numbers',\n    };\n  }\n  if (!isFiniteNumber(preserveK)) {\n    return { ok: false, message: 'context.mode.create payload.preserveK must be a finite number' };\n  }\n  if (!isFiniteNumber(eliseThreshold)) {\n    return {\n      ok: false,\n      message: 'context.mode.create payload.eliseThreshold must be a finite number',\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      id,\n      name,\n      description,\n      thresholds: { warn: thresholds['warn'], soft: thresholds['soft'], hard: thresholds['hard'] },\n      preserveK,\n      eliseThreshold,\n    },\n  };\n}\n\nexport interface ContextModeUpdatePayload {\n  id: string;\n  name?: string;\n  description?: string;\n  thresholds?: { warn?: number; soft?: number; hard?: number };\n  preserveK?: number;\n  eliseThreshold?: number;\n}\n\nexport function validateContextModeUpdatePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeUpdatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'context.mode.update payload must be an object' };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'context.mode.update payload.id must be a non-empty string' };\n  }\n\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.name must be a string when provided',\n    };\n  }\n\n  const description = payload['description'];\n  if (description !== undefined && typeof description !== 'string') {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.description must be a string when provided',\n    };\n  }\n\n  const thresholds = payload['thresholds'];\n  let validatedThresholds: ContextModeUpdatePayload['thresholds'];\n  if (thresholds !== undefined) {\n    if (!isRecord(thresholds)) {\n      return {\n        ok: false,\n        message: 'context.mode.update payload.thresholds must be an object when provided',\n      };\n    }\n    for (const key of ['warn', 'soft', 'hard'] as const) {\n      const val = thresholds[key];\n      if (val !== undefined && !isFiniteNumber(val)) {\n        return {\n          ok: false,\n          message: `context.mode.update payload.thresholds.${key} must be a finite number when provided`,\n        };\n      }\n    }\n    validatedThresholds = {\n      warn: typeof thresholds['warn'] === 'number' ? thresholds['warn'] : undefined,\n      soft: typeof thresholds['soft'] === 'number' ? thresholds['soft'] : undefined,\n      hard: typeof thresholds['hard'] === 'number' ? thresholds['hard'] : undefined,\n    };\n  }\n\n  const preserveK = payload['preserveK'];\n  if (preserveK !== undefined && !isFiniteNumber(preserveK)) {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.preserveK must be a finite number when provided',\n    };\n  }\n\n  const eliseThreshold = payload['eliseThreshold'];\n  if (eliseThreshold !== undefined && !isFiniteNumber(eliseThreshold)) {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.eliseThreshold must be a finite number when provided',\n    };\n  }\n\n  return {\n    ok: true,\n    value: {\n      id,\n      name: typeof name === 'string' ? name : undefined,\n      description: typeof description === 'string' ? description : undefined,\n      thresholds: validatedThresholds,\n      preserveK: typeof preserveK === 'number' ? preserveK : undefined,\n      eliseThreshold: typeof eliseThreshold === 'number' ? eliseThreshold : undefined,\n    },\n  };\n}\n\nexport interface ShellOpenPayload {\n  path: string;\n  target?: 'file' | 'terminal';\n}\n\nexport function validateShellOpenPayload(\n  payload: unknown,\n): PayloadValidationResult<ShellOpenPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'shell.open payload must be an object with string path' };\n  }\n  const path = payload['path'];\n  if (typeof path !== 'string' || path.trim().length === 0) {\n    return { ok: false, message: 'shell.open payload.path must be a non-empty string' };\n  }\n  const target = payload['target'];\n  if (target !== undefined && target !== 'file' && target !== 'terminal') {\n    return {\n      ok: false,\n      message: 'shell.open payload.target must be \"file\" or \"terminal\" when provided',\n    };\n  }\n  return { ok: true, value: { path, target: target as ShellOpenPayload['target'] } };\n}\n\nexport interface GitDiffPayload {\n  path: string;\n}\n\nexport function validateGitDiffPayload(payload: unknown): PayloadValidationResult<GitDiffPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'git.diff payload must be an object' };\n  }\n  const path = payload['path'];\n  if (path === undefined || path === null) {\n    return { ok: true, value: { path: '' } };\n  }\n  if (typeof path !== 'string') {\n    return { ok: false, message: 'git.diff payload.path must be a string when provided' };\n  }\n  return { ok: true, value: { path } };\n}\n\nexport interface ProjectsAddPayload {\n  root: string;\n  name?: string;\n}\n\nexport function validateProjectsAddPayload(\n  payload: unknown,\n): PayloadValidationResult<ProjectsAddPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'projects.add payload must be an object with string root' };\n  }\n  const root = payload['root'];\n  if (typeof root !== 'string' || root.trim().length === 0) {\n    return { ok: false, message: 'projects.add payload.root must be a non-empty string' };\n  }\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return { ok: false, message: 'projects.add payload.name must be a string when provided' };\n  }\n  return { ok: true, value: { root, name: typeof name === 'string' ? name : undefined } };\n}\n\nexport interface ProjectsSelectPayload {\n  root: string;\n  name?: string;\n}\n\nexport function validateProjectsSelectPayload(\n  payload: unknown,\n): PayloadValidationResult<ProjectsSelectPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'projects.select payload must be an object with string root' };\n  }\n  const root = payload['root'];\n  if (typeof root !== 'string' || root.trim().length === 0) {\n    return { ok: false, message: 'projects.select payload.root must be a non-empty string' };\n  }\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return { ok: false, message: 'projects.select payload.name must be a string when provided' };\n  }\n  return { ok: true, value: { root, name: typeof name === 'string' ? name : undefined } };\n}\n","// ── Shared Worklist Handlers ─────────────────────────────────────────────────\n// Extracted from standalone server (packages/webui/src/server/index.ts) and CLI\n// embedded server (packages/cli/src/webui-server/). Both servers use these\n// handlers for todos, tasks, and plan operations. Keep them in sync.\n//\n// Message types handled here:\n//   todos.get | todos.clear | todos.remove | todo.update\n//   tasks.get | task.update\n//   plan.get | plan.template_use | plan.item.update\n// ─────────────────────────────────────────────────────────────────────────────\n\nimport type { WebSocket } from 'ws';\nimport type { TodoItem } from '@wrongstack/core';\nimport { validatePlanTemplateUsePayload } from '../ws-payload-validation.js';\n\n// ── Shared result helper ───────────────────────────────────────────────────────\n\nfunction sendResult(\n  ws: WebSocket,\n  ctx: WorklistContext,\n  ok: boolean,\n  message: string,\n): void {\n  ctx.send(ws, { type: ok ? 'ok' : 'error', message });\n}\n\n// ── Context interface ─────────────────────────────────────────────────────────\n// Both servers satisfy this with their own local state.\n\nexport interface WorklistContext {\n  context: {\n    todos: TodoItem[];\n    meta: Record<string, unknown>;\n    session: { id: string } | null;\n    state?: unknown;\n  };\n  send: (ws: WebSocket, msg: object) => void;\n  broadcast: (msg: object) => void;\n  /**\n   * Optional mutator for in-memory todo state. Servers that manage live\n   * agent state (e.g. the CLI embedded server) provide this so handlers\n   * can update the agent's todo list directly. Standalone server may omit.\n   */\n  replaceTodos?: (todos: TodoItem[]) => void;\n}\n\n// ── Todos ─────────────────────────────────────────────────────────────────────\n\nexport function handleTodosGet(ctx: WorklistContext, ws: WebSocket): void {\n  ctx.send(ws, { type: 'todos.updated', payload: { todos: ctx.context.todos } });\n}\n\nexport function handleTodosClear(ctx: WorklistContext, ws: WebSocket): void {\n  ctx.replaceTodos?.([]);\n  ctx.broadcast({ type: 'todos.cleared' });\n  sendResult(ws, ctx, true, 'Todo board cleared.');\n}\n\nexport function handleTodosRemove(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { id?: string; index?: number } | undefined,\n): void {\n  if (!payload || (payload.id === undefined && payload.index === undefined)) {\n    sendResult(ws, ctx, false, 'todos.remove requires id or index.');\n    return;\n  }\n  const next =\n    payload.id !== undefined\n      ? ctx.context.todos.filter((t) => t.id !== payload.id)\n      : ctx.context.todos.filter((_, i) => i !== (payload.index as number));\n  ctx.replaceTodos?.(next);\n  ctx.broadcast({ type: 'todos.updated', payload: { todos: next } });\n  sendResult(ws, ctx, true, 'Todo item removed.');\n}\n\nexport function handleTodoUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { id: string; status?: TodoItem['status']; activeForm?: string },\n): void {\n  const todo = ctx.context.todos.find((t) => t.id === payload.id);\n  if (!todo) {\n    sendResult(ws, ctx, false, `No todo with id \"${payload.id}\".`);\n    return;\n  }\n  const next = ctx.context.todos.map((t) =>\n    t.id === payload.id\n      ? { ...t, ...(payload.status !== undefined && { status: payload.status }), ...(payload.activeForm !== undefined && { activeForm: payload.activeForm }) }\n      : t,\n  );\n  ctx.replaceTodos?.(next);\n  ctx.broadcast({ type: 'todos.updated', payload: { todos: next } });\n  sendResult(ws, ctx, true, `Todo \"${todo.content}\" updated.`);\n}\n\n// ── Tasks ─────────────────────────────────────────────────────────────────────\n\nexport async function handleTasksGet(ctx: WorklistContext, ws: WebSocket): Promise<void> {\n  const taskPath = ctx.context.meta['task.path'];\n  if (typeof taskPath === 'string' && taskPath) {\n    try {\n      const { loadTasks } = await import('@wrongstack/core');\n      const file = await loadTasks(taskPath);\n      ctx.send(ws, { type: 'tasks.updated', payload: { tasks: file?.tasks ?? [] } });\n    } catch {\n      ctx.send(ws, { type: 'tasks.updated', payload: { tasks: [] } });\n    }\n  } else {\n    ctx.send(ws, {\n      type: 'tasks.updated',\n      payload: { tasks: [], error: 'Task storage not configured.' },\n    });\n  }\n}\n\nexport async function handleTaskUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: {\n    id: string;\n    status: 'pending' | 'in_progress' | 'blocked' | 'failed' | 'review' | 'completed';\n  },\n): Promise<void> {\n  const taskPath = ctx.context.meta['task.path'];\n  if (typeof taskPath !== 'string' || !taskPath) {\n    sendResult(ws, ctx, false, 'Task storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { loadTasks, saveTasks } = await import('@wrongstack/core');\n    const file = await loadTasks(taskPath);\n    if (!file) {\n      sendResult(ws, ctx, false, 'No task file found.');\n      return;\n    }\n    const idx = file.tasks.findIndex((t) => t.id === payload.id);\n    if (idx === -1) {\n      sendResult(ws, ctx, false, `Task \"${payload.id}\" not found.`);\n      return;\n    }\n    file.tasks[idx] = { ...file.tasks[idx], status: payload.status };\n    await saveTasks(taskPath, file);\n    ctx.broadcast({ type: 'tasks.updated', payload: { tasks: file.tasks } });\n    sendResult(ws, ctx, true, `Task \"${payload.id}\" marked ${payload.status}.`);\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\n// ── Plan ───────────────────────────────────────────────────────────────────────\n\nexport async function handlePlanGet(ctx: WorklistContext, ws: WebSocket): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath === 'string' && planPath) {\n    try {\n      const { loadPlan } = await import('@wrongstack/core');\n      const plan = await loadPlan(planPath);\n      ctx.send(ws, {\n        type: 'plan.updated',\n        payload: {\n          plan: plan ?? {\n            version: 1,\n            sessionId,\n            updatedAt: new Date().toISOString(),\n            items: [],\n          },\n        },\n      });\n    } catch {\n      ctx.send(ws, {\n        type: 'plan.updated',\n        payload: {\n          plan: {\n            version: 1,\n            sessionId,\n            updatedAt: new Date().toISOString(),\n            items: [],\n          },\n        },\n      });\n    }\n  } else {\n    ctx.send(ws, {\n      type: 'plan.updated',\n      payload: { plan: null, error: 'Plan storage is not configured for this session.' },\n    });\n  }\n}\n\nexport async function handlePlanTemplateUse(ctx: WorklistContext, ws: WebSocket, template: string): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath !== 'string' || !planPath) {\n    sendResult(ws, ctx, false, 'Plan storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { getPlanTemplate, loadPlan, savePlan, emptyPlan, addPlanItem } = await import('@wrongstack/core');\n    const tpl = getPlanTemplate(template);\n    if (!tpl) {\n      sendResult(ws, ctx, false, `Unknown template \"${template}\".`);\n      return;\n    }\n    let plan = (await loadPlan(planPath)) ?? emptyPlan(sessionId);\n    for (const item of tpl.items) {\n      ({ plan } = addPlanItem(plan, item.title, item.details));\n    }\n    await savePlan(planPath, plan);\n    sendResult(ws, ctx, true, `Applied template \"${tpl.name}\" — ${tpl.items.length} items added.`);\n    ctx.broadcast({ type: 'plan.updated', payload: { plan } });\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\nexport async function handlePlanItemUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { target: string; status: 'open' | 'in_progress' | 'done' },\n): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath !== 'string' || !planPath) {\n    sendResult(ws, ctx, false, 'Plan storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { mutatePlan, setPlanItemStatus } = await import('@wrongstack/core');\n    let changed = false;\n    const plan = await mutatePlan(planPath, sessionId, async (p) => {\n      const before = p.updatedAt;\n      const updated = setPlanItemStatus(p, payload.target, payload.status);\n      changed = updated.updatedAt !== before;\n      return updated;\n    });\n    if (!changed) {\n      sendResult(ws, ctx, false, `No plan item matched \"${payload.target}\".`);\n      return;\n    }\n    sendResult(ws, ctx, true, `Plan item status updated to \"${payload.status}\".`);\n    ctx.broadcast({ type: 'plan.updated', payload: { plan } });\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\n// ── Dispatcher ──────────────────────────────────────────────────────────────────\n// Single entry point for the nine worklist message types, so the host server's\n// switch delegates one grouped case here instead of repeating the per-type\n// `makeWorklistContext()` boilerplate. Unknown types are a no-op (the caller\n// only routes worklist types to this function).\n\n/** Loosely-typed worklist WS message — payload shapes are narrowed per case. */\nexport interface WorklistMessage {\n  type: string;\n  payload?: unknown;\n}\n\nexport async function handleWorklistMessage(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  msg: WorklistMessage,\n): Promise<void> {\n  switch (msg.type) {\n    case 'todos.get':\n      handleTodosGet(ctx, ws);\n      return;\n    case 'todos.clear':\n      handleTodosClear(ctx, ws);\n      return;\n    case 'todos.remove':\n      handleTodosRemove(ctx, ws, msg.payload as { id?: string; index?: number } | undefined);\n      return;\n    case 'todo.update':\n      handleTodoUpdate(\n        ctx,\n        ws,\n        msg.payload as { id: string; status?: TodoItem['status']; activeForm?: string },\n      );\n      return;\n    case 'tasks.get':\n      await handleTasksGet(ctx, ws);\n      return;\n    case 'task.update':\n      await handleTaskUpdate(\n        ctx,\n        ws,\n        msg.payload as {\n          id: string;\n          status: 'pending' | 'in_progress' | 'blocked' | 'failed' | 'review' | 'completed';\n        },\n      );\n      return;\n    case 'plan.get':\n      await handlePlanGet(ctx, ws);\n      return;\n    case 'plan.template_use': {\n      const parsed = validatePlanTemplateUsePayload(msg.payload);\n      if (!parsed.ok) {\n        sendResult(ws, ctx, false, parsed.message);\n        return;\n      }\n      await handlePlanTemplateUse(ctx, ws, parsed.value.template);\n      return;\n    }\n    case 'plan.item.update':\n      await handlePlanItemUpdate(\n        ctx,\n        ws,\n        msg.payload as { target: string; status: 'open' | 'in_progress' | 'done' },\n      );\n      return;\n  }\n}\n"],"mappings":";AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAgMO,SAAS,+BACd,SACiD;AACjD,MAAI,CAAC,SAAS,OAAO,GAAG;AACtB,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,SAAS;AAAA,IACX;AAAA,EACF;AACA,QAAM,WAAW,QAAQ,UAAU;AACnC,MAAI,OAAO,aAAa,YAAY,SAAS,KAAK,EAAE,WAAW,GAAG;AAChE,WAAO,EAAE,IAAI,OAAO,SAAS,gEAAgE;AAAA,EAC/F;AACA,SAAO,EAAE,IAAI,MAAM,OAAO,EAAE,SAAS,EAAE;AACzC;;;ACjMA,SAAS,WACP,IACA,KACA,IACA,SACM;AACN,MAAI,KAAK,IAAI,EAAE,MAAM,KAAK,OAAO,SAAS,QAAQ,CAAC;AACrD;AAwBO,SAAS,eAAe,KAAsB,IAAqB;AACxE,MAAI,KAAK,IAAI,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,IAAI,QAAQ,MAAM,EAAE,CAAC;AAC/E;AAEO,SAAS,iBAAiB,KAAsB,IAAqB;AAC1E,MAAI,eAAe,CAAC,CAAC;AACrB,MAAI,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACvC,aAAW,IAAI,KAAK,MAAM,qBAAqB;AACjD;AAEO,SAAS,kBACd,KACA,IACA,SACM;AACN,MAAI,CAAC,WAAY,QAAQ,OAAO,UAAa,QAAQ,UAAU,QAAY;AACzE,eAAW,IAAI,KAAK,OAAO,oCAAoC;AAC/D;AAAA,EACF;AACA,QAAM,OACJ,QAAQ,OAAO,SACX,IAAI,QAAQ,MAAM,OAAO,CAAC,MAAM,EAAE,OAAO,QAAQ,EAAE,IACnD,IAAI,QAAQ,MAAM,OAAO,CAAC,GAAG,MAAM,MAAO,QAAQ,KAAgB;AACxE,MAAI,eAAe,IAAI;AACvB,MAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,KAAK,EAAE,CAAC;AACjE,aAAW,IAAI,KAAK,MAAM,oBAAoB;AAChD;AAEO,SAAS,iBACd,KACA,IACA,SACM;AACN,QAAM,OAAO,IAAI,QAAQ,MAAM,KAAK,CAAC,MAAM,EAAE,OAAO,QAAQ,EAAE;AAC9D,MAAI,CAAC,MAAM;AACT,eAAW,IAAI,KAAK,OAAO,oBAAoB,QAAQ,EAAE,IAAI;AAC7D;AAAA,EACF;AACA,QAAM,OAAO,IAAI,QAAQ,MAAM;AAAA,IAAI,CAAC,MAClC,EAAE,OAAO,QAAQ,KACb,EAAE,GAAG,GAAG,GAAI,QAAQ,WAAW,UAAa,EAAE,QAAQ,QAAQ,OAAO,GAAI,GAAI,QAAQ,eAAe,UAAa,EAAE,YAAY,QAAQ,WAAW,EAAG,IACrJ;AAAA,EACN;AACA,MAAI,eAAe,IAAI;AACvB,MAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,KAAK,EAAE,CAAC;AACjE,aAAW,IAAI,KAAK,MAAM,SAAS,KAAK,OAAO,YAAY;AAC7D;AAIA,eAAsB,eAAe,KAAsB,IAA8B;AACvF,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,MAAI,OAAO,aAAa,YAAY,UAAU;AAC5C,QAAI;AACF,YAAM,EAAE,UAAU,IAAI,MAAM,OAAO,kBAAkB;AACrD,YAAM,OAAO,MAAM,UAAU,QAAQ;AACrC,UAAI,KAAK,IAAI,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,MAAM,SAAS,CAAC,EAAE,EAAE,CAAC;AAAA,IAC/E,QAAQ;AACN,UAAI,KAAK,IAAI,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;AAAA,IAChE;AAAA,EACF,OAAO;AACL,QAAI,KAAK,IAAI;AAAA,MACX,MAAM;AAAA,MACN,SAAS,EAAE,OAAO,CAAC,GAAG,OAAO,+BAA+B;AAAA,IAC9D,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,iBACpB,KACA,IACA,SAIe;AACf,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,MAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,eAAW,IAAI,KAAK,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,UAAM,EAAE,WAAW,UAAU,IAAI,MAAM,OAAO,kBAAkB;AAChE,UAAM,OAAO,MAAM,UAAU,QAAQ;AACrC,QAAI,CAAC,MAAM;AACT,iBAAW,IAAI,KAAK,OAAO,qBAAqB;AAChD;AAAA,IACF;AACA,UAAM,MAAM,KAAK,MAAM,UAAU,CAAC,MAAM,EAAE,OAAO,QAAQ,EAAE;AAC3D,QAAI,QAAQ,IAAI;AACd,iBAAW,IAAI,KAAK,OAAO,SAAS,QAAQ,EAAE,cAAc;AAC5D;AAAA,IACF;AACA,SAAK,MAAM,GAAG,IAAI,EAAE,GAAG,KAAK,MAAM,GAAG,GAAG,QAAQ,QAAQ,OAAO;AAC/D,UAAM,UAAU,UAAU,IAAI;AAC9B,QAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,KAAK,MAAM,EAAE,CAAC;AACvE,eAAW,IAAI,KAAK,MAAM,SAAS,QAAQ,EAAE,YAAY,QAAQ,MAAM,GAAG;AAAA,EAC5E,SAAS,KAAK;AACZ,eAAW,IAAI,KAAK,OAAO,OAAO,GAAG,CAAC;AAAA,EACxC;AACF;AAIA,eAAsB,cAAc,KAAsB,IAA8B;AACtF,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,QAAM,YAAY,IAAI,QAAQ,SAAS,MAAM;AAC7C,MAAI,OAAO,aAAa,YAAY,UAAU;AAC5C,QAAI;AACF,YAAM,EAAE,SAAS,IAAI,MAAM,OAAO,kBAAkB;AACpD,YAAM,OAAO,MAAM,SAAS,QAAQ;AACpC,UAAI,KAAK,IAAI;AAAA,QACX,MAAM;AAAA,QACN,SAAS;AAAA,UACP,MAAM,QAAQ;AAAA,YACZ,SAAS;AAAA,YACT;AAAA,YACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YAClC,OAAO,CAAC;AAAA,UACV;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH,QAAQ;AACN,UAAI,KAAK,IAAI;AAAA,QACX,MAAM;AAAA,QACN,SAAS;AAAA,UACP,MAAM;AAAA,YACJ,SAAS;AAAA,YACT;AAAA,YACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YAClC,OAAO,CAAC;AAAA,UACV;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF,OAAO;AACL,QAAI,KAAK,IAAI;AAAA,MACX,MAAM;AAAA,MACN,SAAS,EAAE,MAAM,MAAM,OAAO,mDAAmD;AAAA,IACnF,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,sBAAsB,KAAsB,IAAe,UAAiC;AAChH,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,QAAM,YAAY,IAAI,QAAQ,SAAS,MAAM;AAC7C,MAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,eAAW,IAAI,KAAK,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,UAAM,EAAE,iBAAiB,UAAU,UAAU,WAAW,YAAY,IAAI,MAAM,OAAO,kBAAkB;AACvG,UAAM,MAAM,gBAAgB,QAAQ;AACpC,QAAI,CAAC,KAAK;AACR,iBAAW,IAAI,KAAK,OAAO,qBAAqB,QAAQ,IAAI;AAC5D;AAAA,IACF;AACA,QAAI,OAAQ,MAAM,SAAS,QAAQ,KAAM,UAAU,SAAS;AAC5D,eAAW,QAAQ,IAAI,OAAO;AAC5B,OAAC,EAAE,KAAK,IAAI,YAAY,MAAM,KAAK,OAAO,KAAK,OAAO;AAAA,IACxD;AACA,UAAM,SAAS,UAAU,IAAI;AAC7B,eAAW,IAAI,KAAK,MAAM,qBAAqB,IAAI,IAAI,YAAO,IAAI,MAAM,MAAM,eAAe;AAC7F,QAAI,UAAU,EAAE,MAAM,gBAAgB,SAAS,EAAE,KAAK,EAAE,CAAC;AAAA,EAC3D,SAAS,KAAK;AACZ,eAAW,IAAI,KAAK,OAAO,OAAO,GAAG,CAAC;AAAA,EACxC;AACF;AAEA,eAAsB,qBACpB,KACA,IACA,SACe;AACf,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,QAAM,YAAY,IAAI,QAAQ,SAAS,MAAM;AAC7C,MAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,eAAW,IAAI,KAAK,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,UAAM,EAAE,YAAY,kBAAkB,IAAI,MAAM,OAAO,kBAAkB;AACzE,QAAI,UAAU;AACd,UAAM,OAAO,MAAM,WAAW,UAAU,WAAW,OAAO,MAAM;AAC9D,YAAM,SAAS,EAAE;AACjB,YAAM,UAAU,kBAAkB,GAAG,QAAQ,QAAQ,QAAQ,MAAM;AACnE,gBAAU,QAAQ,cAAc;AAChC,aAAO;AAAA,IACT,CAAC;AACD,QAAI,CAAC,SAAS;AACZ,iBAAW,IAAI,KAAK,OAAO,yBAAyB,QAAQ,MAAM,IAAI;AACtE;AAAA,IACF;AACA,eAAW,IAAI,KAAK,MAAM,gCAAgC,QAAQ,MAAM,IAAI;AAC5E,QAAI,UAAU,EAAE,MAAM,gBAAgB,SAAS,EAAE,KAAK,EAAE,CAAC;AAAA,EAC3D,SAAS,KAAK;AACZ,eAAW,IAAI,KAAK,OAAO,OAAO,GAAG,CAAC;AAAA,EACxC;AACF;AAcA,eAAsB,sBACpB,KACA,IACA,KACe;AACf,UAAQ,IAAI,MAAM;AAAA,IAChB,KAAK;AACH,qBAAe,KAAK,EAAE;AACtB;AAAA,IACF,KAAK;AACH,uBAAiB,KAAK,EAAE;AACxB;AAAA,IACF,KAAK;AACH,wBAAkB,KAAK,IAAI,IAAI,OAAsD;AACrF;AAAA,IACF,KAAK;AACH;AAAA,QACE;AAAA,QACA;AAAA,QACA,IAAI;AAAA,MACN;AACA;AAAA,IACF,KAAK;AACH,YAAM,eAAe,KAAK,EAAE;AAC5B;AAAA,IACF,KAAK;AACH,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA,IAAI;AAAA,MAIN;AACA;AAAA,IACF,KAAK;AACH,YAAM,cAAc,KAAK,EAAE;AAC3B;AAAA,IACF,KAAK,qBAAqB;AACxB,YAAM,SAAS,+BAA+B,IAAI,OAAO;AACzD,UAAI,CAAC,OAAO,IAAI;AACd,mBAAW,IAAI,KAAK,OAAO,OAAO,OAAO;AACzC;AAAA,MACF;AACA,YAAM,sBAAsB,KAAK,IAAI,OAAO,MAAM,QAAQ;AAC1D;AAAA,IACF;AAAA,IACA,KAAK;AACH,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA,IAAI;AAAA,MACN;AACA;AAAA,EACJ;AACF;","names":[]}
+{"version":3,"sources":["../../src/server/ws-payload-validation.ts","../../src/server/handlers/worklist-handlers.ts"],"sourcesContent":["export type PayloadValidationResult<T> = { ok: true; value: T } | { ok: false; message: string };\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nexport interface ModelSwitchPayload {\n  provider: string;\n  model: string;\n}\n\nexport function validateModelSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ModelSwitchPayload> {\n  if (!isRecord(payload)) {\n    return {\n      ok: false,\n      message: 'model.switch payload must be an object with string provider and model',\n    };\n  }\n  const provider = payload['provider'];\n  const model = payload['model'];\n  if (typeof provider !== 'string' || provider.trim().length === 0) {\n    return { ok: false, message: 'model.switch payload.provider must be a non-empty string' };\n  }\n  if (typeof model !== 'string' || model.trim().length === 0) {\n    return { ok: false, message: 'model.switch payload.model must be a non-empty string' };\n  }\n  return { ok: true, value: { provider, model } };\n}\n\nexport interface PrefsUpdatePayload {\n  prefs: Record<string, unknown>;\n}\n\nconst AUTONOMY_VALUES = new Set(['off', 'suggest', 'auto', 'eternal', 'eternal-parallel']);\n\nexport interface MailboxMessagesPayload {\n  limit?: number;\n  agentId?: string;\n  unreadOnly?: boolean;\n}\n\nexport function validateMailboxMessagesPayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxMessagesPayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.messages payload must be an object when provided' };\n  }\n  const limit = payload['limit'];\n  const agentId = payload['agentId'];\n  const unreadOnly = payload['unreadOnly'];\n  if (limit !== undefined && (typeof limit !== 'number' || !Number.isFinite(limit) || limit < 1)) {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.limit must be a positive number when provided',\n    };\n  }\n  if (agentId !== undefined && typeof agentId !== 'string') {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.agentId must be a string when provided',\n    };\n  }\n  if (unreadOnly !== undefined && typeof unreadOnly !== 'boolean') {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.unreadOnly must be a boolean when provided',\n    };\n  }\n  return { ok: true, value: { limit, agentId, unreadOnly } };\n}\n\nexport interface MailboxAgentsPayload {\n  onlineOnly?: boolean;\n}\n\nexport function validateMailboxAgentsPayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxAgentsPayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.agents payload must be an object when provided' };\n  }\n  const onlineOnly = payload['onlineOnly'];\n  if (onlineOnly !== undefined && typeof onlineOnly !== 'boolean') {\n    return {\n      ok: false,\n      message: 'mailbox.agents payload.onlineOnly must be a boolean when provided',\n    };\n  }\n  return { ok: true, value: { onlineOnly } };\n}\n\nexport interface MailboxPurgePayload {\n  completedMaxAgeMs?: number;\n  incompleteMaxAgeMs?: number;\n}\n\nexport function validateMailboxPurgePayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxPurgePayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.purge payload must be an object when provided' };\n  }\n  const completedMaxAgeMs = payload['completedMaxAgeMs'];\n  const incompleteMaxAgeMs = payload['incompleteMaxAgeMs'];\n  if (\n    completedMaxAgeMs !== undefined &&\n    (typeof completedMaxAgeMs !== 'number' ||\n      !Number.isFinite(completedMaxAgeMs) ||\n      completedMaxAgeMs < 0)\n  ) {\n    return {\n      ok: false,\n      message:\n        'mailbox.purge payload.completedMaxAgeMs must be a non-negative number when provided',\n    };\n  }\n  if (\n    incompleteMaxAgeMs !== undefined &&\n    (typeof incompleteMaxAgeMs !== 'number' ||\n      !Number.isFinite(incompleteMaxAgeMs) ||\n      incompleteMaxAgeMs < 0)\n  ) {\n    return {\n      ok: false,\n      message:\n        'mailbox.purge payload.incompleteMaxAgeMs must be a non-negative number when provided',\n    };\n  }\n  return { ok: true, value: { completedMaxAgeMs, incompleteMaxAgeMs } };\n}\n\nexport interface BrainRiskPayload {\n  level: string;\n}\n\nconst BRAIN_RISK_VALUES = new Set(['off', 'low', 'medium', 'high', 'all']);\n\nexport function validateBrainRiskPayload(\n  payload: unknown,\n): PayloadValidationResult<BrainRiskPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'brain.risk payload must be an object with string level' };\n  }\n  const level = payload['level'];\n  if (typeof level !== 'string' || !BRAIN_RISK_VALUES.has(level)) {\n    return {\n      ok: false,\n      message: 'brain.risk payload.level must be one of off, low, medium, high, all',\n    };\n  }\n  return { ok: true, value: { level } };\n}\n\nexport interface BrainAskPayload {\n  question: string;\n}\n\nexport function validateBrainAskPayload(\n  payload: unknown,\n): PayloadValidationResult<BrainAskPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'brain.ask payload must be an object with string question' };\n  }\n  const question = payload['question'];\n  if (typeof question !== 'string' || question.trim().length === 0) {\n    return { ok: false, message: 'brain.ask payload.question must be a non-empty string' };\n  }\n  return { ok: true, value: { question: question.trim() } };\n}\n\nexport interface AutonomySwitchPayload {\n  mode: string;\n}\n\nexport function validateAutonomySwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<AutonomySwitchPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'autonomy.switch payload must be an object with string mode' };\n  }\n  const mode = payload['mode'];\n  if (typeof mode !== 'string' || !AUTONOMY_VALUES.has(mode)) {\n    return { ok: false, message: 'autonomy.switch payload.mode must be a valid autonomy mode' };\n  }\n  return { ok: true, value: { mode } };\n}\n\nexport interface PlanTemplateUsePayload {\n  template: string;\n}\n\nexport function validatePlanTemplateUsePayload(\n  payload: unknown,\n): PayloadValidationResult<PlanTemplateUsePayload> {\n  if (!isRecord(payload)) {\n    return {\n      ok: false,\n      message: 'plan.template_use payload must be an object with string template',\n    };\n  }\n  const template = payload['template'];\n  if (typeof template !== 'string' || template.trim().length === 0) {\n    return { ok: false, message: 'plan.template_use payload.template must be a non-empty string' };\n  }\n  return { ok: true, value: { template } };\n}\nconst CONTEXT_STRATEGY_VALUES = new Set(['hybrid', 'intelligent', 'selective']);\nconst CONTEXT_MODE_VALUES = new Set(['balanced', 'frugal', 'deep', 'archival']);\nconst TOKEN_SAVING_TIER_VALUES = new Set(['off', 'minimal', 'light', 'medium', 'aggressive']);\nconst ENHANCE_LANGUAGE_VALUES = new Set(['original', 'english']);\nconst LOG_LEVEL_VALUES = new Set(['debug', 'info', 'warn', 'error']);\nconst AUDIT_LEVEL_VALUES = new Set(['minimal', 'standard', 'full']);\nconst REASONING_MODE_VALUES = new Set(['auto', 'on', 'off']);\nconst REASONING_EFFORT_VALUES = new Set([\n  'none',\n  'minimal',\n  'low',\n  'medium',\n  'high',\n  'xhigh',\n  'max',\n]);\nconst CACHE_TTL_VALUES = new Set(['default', '5m', '1h']);\n\nconst BOOLEAN_PREF_KEYS = new Set([\n  'yolo',\n  'chime',\n  'confirmExit',\n  'streamFleet',\n  'nextPrediction',\n  'titleAnimation',\n  'enhanceEnabled',\n  'featureMcp',\n  'featurePlugins',\n  'featureMemory',\n  'featureSkills',\n  'featureModelsRegistry',\n  'indexOnStart',\n  'contextAutoCompact',\n  'tgSessionEnd',\n  'tgDelegate',\n  'reasoningPreserve',\n  'hqEnabled',\n  'hqRawContent',\n  'fallbackAuto',\n  'favoriteModelsOnly',\n]);\n\n/** Keys whose value must be an array of strings (e.g. an ordered model list). */\nconst STRING_ARRAY_PREF_KEYS = new Set(['fallbackModels', 'favoriteModels']);\nconst STRING_ARRAY_RECORD_PREF_KEYS = new Set(['fallbackProfiles']);\nconst MODEL_MATRIX_PREF_KEYS = new Set(['modelMatrix']);\n\nconst NUMBER_PREF_KEYS = new Set([\n  'autonomyDelayMs',\n  'autoProceedMaxIterations',\n  'maxIterations',\n  'maxConcurrent',\n  'enhanceDelayMs',\n  'tgLongToolMs',\n]);\n\nconst STRING_PREF_KEYS = new Set(['hqUrl', 'hqToken']);\n\nconst ENUM_PREF_KEYS: Record<string, Set<string>> = {\n  autonomy: AUTONOMY_VALUES,\n  contextStrategy: CONTEXT_STRATEGY_VALUES,\n  contextMode: CONTEXT_MODE_VALUES,\n  tokenSavingTier: TOKEN_SAVING_TIER_VALUES,\n  enhanceLanguage: ENHANCE_LANGUAGE_VALUES,\n  logLevel: LOG_LEVEL_VALUES,\n  auditLevel: AUDIT_LEVEL_VALUES,\n  reasoningMode: REASONING_MODE_VALUES,\n  reasoningEffort: REASONING_EFFORT_VALUES,\n  cacheTtl: CACHE_TTL_VALUES,\n};\n\nfunction validatePreferenceValue(key: string, value: unknown): string | null {\n  if (BOOLEAN_PREF_KEYS.has(key)) {\n    return typeof value === 'boolean' ? null : `prefs.update payload.${key} must be a boolean`;\n  }\n  if (NUMBER_PREF_KEYS.has(key)) {\n    return typeof value === 'number' && Number.isFinite(value)\n      ? null\n      : `prefs.update payload.${key} must be a finite number`;\n  }\n  if (STRING_PREF_KEYS.has(key)) {\n    return typeof value === 'string' ? null : `prefs.update payload.${key} must be a string`;\n  }\n  if (STRING_ARRAY_PREF_KEYS.has(key)) {\n    return Array.isArray(value) && value.every((v) => typeof v === 'string')\n      ? null\n      : `prefs.update payload.${key} must be an array of strings`;\n  }\n  if (STRING_ARRAY_RECORD_PREF_KEYS.has(key)) {\n    return isRecord(value) &&\n      Object.values(value).every(\n        (v) => Array.isArray(v) && v.every((item) => typeof item === 'string'),\n      )\n      ? null\n      : `prefs.update payload.${key} must be an object of string arrays`;\n  }\n  if (MODEL_MATRIX_PREF_KEYS.has(key)) {\n    if (!isRecord(value)) return `prefs.update payload.${key} must be an object`;\n    for (const entry of Object.values(value)) {\n      if (!isRecord(entry)) return `prefs.update payload.${key} entries must be objects`;\n      const provider = entry['provider'];\n      const model = entry['model'];\n      const fallbackProfile = entry['fallbackProfile'];\n      if (provider !== undefined && typeof provider !== 'string') {\n        return `prefs.update payload.${key}.provider must be a string when provided`;\n      }\n      if (model !== undefined && typeof model !== 'string') {\n        return `prefs.update payload.${key}.model must be a string when provided`;\n      }\n      if (fallbackProfile !== undefined && typeof fallbackProfile !== 'string') {\n        return `prefs.update payload.${key}.fallbackProfile must be a string when provided`;\n      }\n      if (model === undefined && fallbackProfile === undefined) {\n        return `prefs.update payload.${key} entries require model or fallbackProfile`;\n      }\n    }\n    return null;\n  }\n  const allowed = ENUM_PREF_KEYS[key];\n  if (allowed) {\n    return typeof value === 'string' && allowed.has(value)\n      ? null\n      : `prefs.update payload.${key} must be one of: ${Array.from(allowed).join(', ')}`;\n  }\n  return `prefs.update payload contains unknown preference key: ${key}`;\n}\n\nexport function validatePrefsUpdatePayload(\n  payload: unknown,\n): PayloadValidationResult<PrefsUpdatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'prefs.update payload must be an object' };\n  }\n  for (const [key, value] of Object.entries(payload)) {\n    const error = validatePreferenceValue(key, value);\n    if (error) return { ok: false, message: error };\n  }\n  return { ok: true, value: { prefs: payload } };\n}\n\nexport interface SkillsCreatePayload {\n  name: string;\n  description: string;\n  scope: 'project' | 'global';\n}\n\nexport function validateSkillsCreatePayload(\n  payload: unknown,\n): PayloadValidationResult<SkillsCreatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'skills.create payload must be an object' };\n  }\n  const name = payload['name'];\n  const description = payload['description'];\n  const scope = payload['scope'];\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'Skill name is required' };\n  }\n  if (!/^[a-z0-9]+(-[a-z0-9]+)*$/.test(name.trim())) {\n    return { ok: false, message: 'Skill name must be kebab-case (e.g. my-new-skill)' };\n  }\n  if (typeof description !== 'string' || description.trim().length === 0) {\n    return { ok: false, message: 'Description/trigger is required' };\n  }\n  if (scope !== 'project' && scope !== 'global') {\n    return { ok: false, message: 'skills.create payload.scope must be project or global' };\n  }\n  return { ok: true, value: { name, description, scope } };\n}\n\nexport interface SkillsEditPayload {\n  name: string;\n  body: string;\n}\n\nexport function validateSkillsEditPayload(\n  payload: unknown,\n): PayloadValidationResult<SkillsEditPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'skills.edit payload must be an object' };\n  }\n  const name = payload['name'];\n  const body = payload['body'];\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'Skill name is required' };\n  }\n  if (typeof body !== 'string' || body.length === 0) {\n    return { ok: false, message: 'Skill body is required' };\n  }\n  return { ok: true, value: { name, body } };\n}\n\nexport interface ProcessKillPayload {\n  pid: number;\n}\n\nexport function validateProcessKillPayload(\n  payload: unknown,\n): PayloadValidationResult<ProcessKillPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'process.kill payload must be an object with numeric pid' };\n  }\n  const pid = payload['pid'];\n  if (typeof pid !== 'number' || !Number.isInteger(pid) || pid <= 0) {\n    return { ok: false, message: 'process.kill payload.pid must be a positive integer' };\n  }\n  return { ok: true, value: { pid } };\n}\n\nexport interface WorkingDirSetPayload {\n  path: string;\n}\n\nexport function validateWorkingDirSetPayload(\n  payload: unknown,\n): PayloadValidationResult<WorkingDirSetPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'working_dir.set payload must be an object with string path' };\n  }\n  const newPath = payload['path'];\n  if (typeof newPath !== 'string' || newPath.trim().length === 0) {\n    return { ok: false, message: 'working_dir.set payload.path must be a non-empty string' };\n  }\n  return { ok: true, value: { path: newPath } };\n}\n\nexport interface ModeSwitchPayload {\n  id: string;\n}\n\nexport function validateModeSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ModeSwitchPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mode.switch payload must be an object with string id' };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'mode.switch payload.id must be a non-empty string' };\n  }\n  return { ok: true, value: { id } };\n}\n\nexport interface ContextModeIdPayload {\n  id: string;\n}\n\nfunction validateContextModeIdPayload(\n  payload: unknown,\n  type: 'context.mode.switch' | 'context.mode.delete',\n): PayloadValidationResult<ContextModeIdPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: `${type} payload must be an object with string id` };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: `${type} payload.id must be a non-empty string` };\n  }\n  return { ok: true, value: { id } };\n}\n\nexport function validateContextModeSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeIdPayload> {\n  return validateContextModeIdPayload(payload, 'context.mode.switch');\n}\n\nexport function validateContextModeDeletePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeIdPayload> {\n  return validateContextModeIdPayload(payload, 'context.mode.delete');\n}\n\nexport interface ContextModeCreatePayload {\n  id: string;\n  name: string;\n  description: string;\n  thresholds: { warn: number; soft: number; hard: number };\n  preserveK: number;\n  eliseThreshold: number;\n}\n\nfunction isFiniteNumber(value: unknown): value is number {\n  return typeof value === 'number' && Number.isFinite(value);\n}\n\nexport function validateContextModeCreatePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeCreatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'context.mode.create payload must be an object' };\n  }\n  const id = payload['id'];\n  const name = payload['name'];\n  const description = payload['description'];\n  const thresholds = payload['thresholds'];\n  const preserveK = payload['preserveK'];\n  const eliseThreshold = payload['eliseThreshold'];\n\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'context.mode.create payload.id must be a non-empty string' };\n  }\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'context.mode.create payload.name must be a non-empty string' };\n  }\n  if (typeof description !== 'string') {\n    return { ok: false, message: 'context.mode.create payload.description must be a string' };\n  }\n  if (!isRecord(thresholds)) {\n    return {\n      ok: false,\n      message:\n        'context.mode.create payload.thresholds must be an object with warn/soft/hard numbers',\n    };\n  }\n  if (\n    !isFiniteNumber(thresholds['warn']) ||\n    !isFiniteNumber(thresholds['soft']) ||\n    !isFiniteNumber(thresholds['hard'])\n  ) {\n    return {\n      ok: false,\n      message: 'context.mode.create payload.thresholds.warn/soft/hard must be finite numbers',\n    };\n  }\n  if (!isFiniteNumber(preserveK)) {\n    return { ok: false, message: 'context.mode.create payload.preserveK must be a finite number' };\n  }\n  if (!isFiniteNumber(eliseThreshold)) {\n    return {\n      ok: false,\n      message: 'context.mode.create payload.eliseThreshold must be a finite number',\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      id,\n      name,\n      description,\n      thresholds: { warn: thresholds['warn'], soft: thresholds['soft'], hard: thresholds['hard'] },\n      preserveK,\n      eliseThreshold,\n    },\n  };\n}\n\nexport interface ContextModeUpdatePayload {\n  id: string;\n  name?: string;\n  description?: string;\n  thresholds?: { warn?: number; soft?: number; hard?: number };\n  preserveK?: number;\n  eliseThreshold?: number;\n}\n\nexport function validateContextModeUpdatePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeUpdatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'context.mode.update payload must be an object' };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'context.mode.update payload.id must be a non-empty string' };\n  }\n\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.name must be a string when provided',\n    };\n  }\n\n  const description = payload['description'];\n  if (description !== undefined && typeof description !== 'string') {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.description must be a string when provided',\n    };\n  }\n\n  const thresholds = payload['thresholds'];\n  let validatedThresholds: ContextModeUpdatePayload['thresholds'];\n  if (thresholds !== undefined) {\n    if (!isRecord(thresholds)) {\n      return {\n        ok: false,\n        message: 'context.mode.update payload.thresholds must be an object when provided',\n      };\n    }\n    for (const key of ['warn', 'soft', 'hard'] as const) {\n      const val = thresholds[key];\n      if (val !== undefined && !isFiniteNumber(val)) {\n        return {\n          ok: false,\n          message: `context.mode.update payload.thresholds.${key} must be a finite number when provided`,\n        };\n      }\n    }\n    validatedThresholds = {\n      warn: typeof thresholds['warn'] === 'number' ? thresholds['warn'] : undefined,\n      soft: typeof thresholds['soft'] === 'number' ? thresholds['soft'] : undefined,\n      hard: typeof thresholds['hard'] === 'number' ? thresholds['hard'] : undefined,\n    };\n  }\n\n  const preserveK = payload['preserveK'];\n  if (preserveK !== undefined && !isFiniteNumber(preserveK)) {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.preserveK must be a finite number when provided',\n    };\n  }\n\n  const eliseThreshold = payload['eliseThreshold'];\n  if (eliseThreshold !== undefined && !isFiniteNumber(eliseThreshold)) {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.eliseThreshold must be a finite number when provided',\n    };\n  }\n\n  return {\n    ok: true,\n    value: {\n      id,\n      name: typeof name === 'string' ? name : undefined,\n      description: typeof description === 'string' ? description : undefined,\n      thresholds: validatedThresholds,\n      preserveK: typeof preserveK === 'number' ? preserveK : undefined,\n      eliseThreshold: typeof eliseThreshold === 'number' ? eliseThreshold : undefined,\n    },\n  };\n}\n\nexport interface ShellOpenPayload {\n  path: string;\n  target?: 'file' | 'terminal';\n}\n\nexport function validateShellOpenPayload(\n  payload: unknown,\n): PayloadValidationResult<ShellOpenPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'shell.open payload must be an object with string path' };\n  }\n  const path = payload['path'];\n  if (typeof path !== 'string' || path.trim().length === 0) {\n    return { ok: false, message: 'shell.open payload.path must be a non-empty string' };\n  }\n  const target = payload['target'];\n  if (target !== undefined && target !== 'file' && target !== 'terminal') {\n    return {\n      ok: false,\n      message: 'shell.open payload.target must be \"file\" or \"terminal\" when provided',\n    };\n  }\n  return { ok: true, value: { path, target: target as ShellOpenPayload['target'] } };\n}\n\nexport interface GitDiffPayload {\n  path: string;\n}\n\nexport function validateGitDiffPayload(payload: unknown): PayloadValidationResult<GitDiffPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'git.diff payload must be an object' };\n  }\n  const path = payload['path'];\n  if (path === undefined || path === null) {\n    return { ok: true, value: { path: '' } };\n  }\n  if (typeof path !== 'string') {\n    return { ok: false, message: 'git.diff payload.path must be a string when provided' };\n  }\n  return { ok: true, value: { path } };\n}\n\nexport interface ProjectsAddPayload {\n  root: string;\n  name?: string;\n}\n\nexport function validateProjectsAddPayload(\n  payload: unknown,\n): PayloadValidationResult<ProjectsAddPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'projects.add payload must be an object with string root' };\n  }\n  const root = payload['root'];\n  if (typeof root !== 'string' || root.trim().length === 0) {\n    return { ok: false, message: 'projects.add payload.root must be a non-empty string' };\n  }\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return { ok: false, message: 'projects.add payload.name must be a string when provided' };\n  }\n  return { ok: true, value: { root, name: typeof name === 'string' ? name : undefined } };\n}\n\nexport interface ProjectsSelectPayload {\n  root: string;\n  name?: string;\n}\n\nexport function validateProjectsSelectPayload(\n  payload: unknown,\n): PayloadValidationResult<ProjectsSelectPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'projects.select payload must be an object with string root' };\n  }\n  const root = payload['root'];\n  if (typeof root !== 'string' || root.trim().length === 0) {\n    return { ok: false, message: 'projects.select payload.root must be a non-empty string' };\n  }\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return { ok: false, message: 'projects.select payload.name must be a string when provided' };\n  }\n  return { ok: true, value: { root, name: typeof name === 'string' ? name : undefined } };\n}\n","// ── Shared Worklist Handlers ─────────────────────────────────────────────────\n// Extracted from standalone server (packages/webui/src/server/index.ts) and CLI\n// embedded server (packages/cli/src/webui-server/). Both servers use these\n// handlers for todos, tasks, and plan operations. Keep them in sync.\n//\n// Message types handled here:\n//   todos.get | todos.clear | todos.remove | todo.update\n//   tasks.get | task.update\n//   plan.get | plan.template_use | plan.item.update\n// ─────────────────────────────────────────────────────────────────────────────\n\nimport type { WebSocket } from 'ws';\nimport type { TodoItem } from '@wrongstack/core';\nimport { validatePlanTemplateUsePayload } from '../ws-payload-validation.js';\n\n// ── Shared result helper ───────────────────────────────────────────────────────\n\nfunction sendResult(\n  ws: WebSocket,\n  ctx: WorklistContext,\n  ok: boolean,\n  message: string,\n): void {\n  ctx.send(ws, { type: ok ? 'ok' : 'error', message });\n}\n\n// ── Context interface ─────────────────────────────────────────────────────────\n// Both servers satisfy this with their own local state.\n\nexport interface WorklistContext {\n  context: {\n    todos: TodoItem[];\n    meta: Record<string, unknown>;\n    session: { id: string } | null;\n    state?: unknown;\n  };\n  send: (ws: WebSocket, msg: object) => void;\n  broadcast: (msg: object) => void;\n  /**\n   * Optional mutator for in-memory todo state. Servers that manage live\n   * agent state (e.g. the CLI embedded server) provide this so handlers\n   * can update the agent's todo list directly. Standalone server may omit.\n   */\n  replaceTodos?: (todos: TodoItem[]) => void;\n}\n\n// ── Todos ─────────────────────────────────────────────────────────────────────\n\nexport function handleTodosGet(ctx: WorklistContext, ws: WebSocket): void {\n  ctx.send(ws, { type: 'todos.updated', payload: { todos: ctx.context.todos } });\n}\n\nexport function handleTodosClear(ctx: WorklistContext, ws: WebSocket): void {\n  ctx.replaceTodos?.([]);\n  ctx.broadcast({ type: 'todos.cleared' });\n  sendResult(ws, ctx, true, 'Todo board cleared.');\n}\n\nexport function handleTodosRemove(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { id?: string; index?: number } | undefined,\n): void {\n  if (!payload || (payload.id === undefined && payload.index === undefined)) {\n    sendResult(ws, ctx, false, 'todos.remove requires id or index.');\n    return;\n  }\n  const next =\n    payload.id !== undefined\n      ? ctx.context.todos.filter((t) => t.id !== payload.id)\n      : ctx.context.todos.filter((_, i) => i !== (payload.index as number));\n  ctx.replaceTodos?.(next);\n  ctx.broadcast({ type: 'todos.updated', payload: { todos: next } });\n  sendResult(ws, ctx, true, 'Todo item removed.');\n}\n\nexport function handleTodoUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { id: string; status?: TodoItem['status']; activeForm?: string },\n): void {\n  const todo = ctx.context.todos.find((t) => t.id === payload.id);\n  if (!todo) {\n    sendResult(ws, ctx, false, `No todo with id \"${payload.id}\".`);\n    return;\n  }\n  const next = ctx.context.todos.map((t) =>\n    t.id === payload.id\n      ? { ...t, ...(payload.status !== undefined && { status: payload.status }), ...(payload.activeForm !== undefined && { activeForm: payload.activeForm }) }\n      : t,\n  );\n  ctx.replaceTodos?.(next);\n  ctx.broadcast({ type: 'todos.updated', payload: { todos: next } });\n  sendResult(ws, ctx, true, `Todo \"${todo.content}\" updated.`);\n}\n\n// ── Tasks ─────────────────────────────────────────────────────────────────────\n\nexport async function handleTasksGet(ctx: WorklistContext, ws: WebSocket): Promise<void> {\n  const taskPath = ctx.context.meta['task.path'];\n  if (typeof taskPath === 'string' && taskPath) {\n    try {\n      const { loadTasks } = await import('@wrongstack/core');\n      const file = await loadTasks(taskPath);\n      ctx.send(ws, { type: 'tasks.updated', payload: { tasks: file?.tasks ?? [] } });\n    } catch {\n      ctx.send(ws, { type: 'tasks.updated', payload: { tasks: [] } });\n    }\n  } else {\n    ctx.send(ws, {\n      type: 'tasks.updated',\n      payload: { tasks: [], error: 'Task storage not configured.' },\n    });\n  }\n}\n\nexport async function handleTaskUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: {\n    id: string;\n    status: 'pending' | 'in_progress' | 'blocked' | 'failed' | 'review' | 'completed';\n  },\n): Promise<void> {\n  const taskPath = ctx.context.meta['task.path'];\n  if (typeof taskPath !== 'string' || !taskPath) {\n    sendResult(ws, ctx, false, 'Task storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { loadTasks, saveTasks } = await import('@wrongstack/core');\n    const file = await loadTasks(taskPath);\n    if (!file) {\n      sendResult(ws, ctx, false, 'No task file found.');\n      return;\n    }\n    const idx = file.tasks.findIndex((t) => t.id === payload.id);\n    if (idx === -1) {\n      sendResult(ws, ctx, false, `Task \"${payload.id}\" not found.`);\n      return;\n    }\n    file.tasks[idx] = { ...file.tasks[idx], status: payload.status };\n    await saveTasks(taskPath, file);\n    ctx.broadcast({ type: 'tasks.updated', payload: { tasks: file.tasks } });\n    sendResult(ws, ctx, true, `Task \"${payload.id}\" marked ${payload.status}.`);\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\n// ── Plan ───────────────────────────────────────────────────────────────────────\n\nexport async function handlePlanGet(ctx: WorklistContext, ws: WebSocket): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath === 'string' && planPath) {\n    try {\n      const { loadPlan } = await import('@wrongstack/core');\n      const plan = await loadPlan(planPath);\n      ctx.send(ws, {\n        type: 'plan.updated',\n        payload: {\n          plan: plan ?? {\n            version: 1,\n            sessionId,\n            updatedAt: new Date().toISOString(),\n            items: [],\n          },\n        },\n      });\n    } catch {\n      ctx.send(ws, {\n        type: 'plan.updated',\n        payload: {\n          plan: {\n            version: 1,\n            sessionId,\n            updatedAt: new Date().toISOString(),\n            items: [],\n          },\n        },\n      });\n    }\n  } else {\n    ctx.send(ws, {\n      type: 'plan.updated',\n      payload: { plan: null, error: 'Plan storage is not configured for this session.' },\n    });\n  }\n}\n\nexport async function handlePlanTemplateUse(ctx: WorklistContext, ws: WebSocket, template: string): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath !== 'string' || !planPath) {\n    sendResult(ws, ctx, false, 'Plan storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { getPlanTemplate, loadPlan, savePlan, emptyPlan, addPlanItem } = await import('@wrongstack/core');\n    const tpl = getPlanTemplate(template);\n    if (!tpl) {\n      sendResult(ws, ctx, false, `Unknown template \"${template}\".`);\n      return;\n    }\n    let plan = (await loadPlan(planPath)) ?? emptyPlan(sessionId);\n    for (const item of tpl.items) {\n      ({ plan } = addPlanItem(plan, item.title, item.details));\n    }\n    await savePlan(planPath, plan);\n    sendResult(ws, ctx, true, `Applied template \"${tpl.name}\" — ${tpl.items.length} items added.`);\n    ctx.broadcast({ type: 'plan.updated', payload: { plan } });\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\nexport async function handlePlanItemUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { target: string; status: 'open' | 'in_progress' | 'done' },\n): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath !== 'string' || !planPath) {\n    sendResult(ws, ctx, false, 'Plan storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { mutatePlan, setPlanItemStatus } = await import('@wrongstack/core');\n    let changed = false;\n    const plan = await mutatePlan(planPath, sessionId, async (p) => {\n      const before = p.updatedAt;\n      const updated = setPlanItemStatus(p, payload.target, payload.status);\n      changed = updated.updatedAt !== before;\n      return updated;\n    });\n    if (!changed) {\n      sendResult(ws, ctx, false, `No plan item matched \"${payload.target}\".`);\n      return;\n    }\n    sendResult(ws, ctx, true, `Plan item status updated to \"${payload.status}\".`);\n    ctx.broadcast({ type: 'plan.updated', payload: { plan } });\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\n// ── Dispatcher ──────────────────────────────────────────────────────────────────\n// Single entry point for the nine worklist message types, so the host server's\n// switch delegates one grouped case here instead of repeating the per-type\n// `makeWorklistContext()` boilerplate. Unknown types are a no-op (the caller\n// only routes worklist types to this function).\n\n/** Loosely-typed worklist WS message — payload shapes are narrowed per case. */\nexport interface WorklistMessage {\n  type: string;\n  payload?: unknown;\n}\n\nexport async function handleWorklistMessage(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  msg: WorklistMessage,\n): Promise<void> {\n  switch (msg.type) {\n    case 'todos.get':\n      handleTodosGet(ctx, ws);\n      return;\n    case 'todos.clear':\n      handleTodosClear(ctx, ws);\n      return;\n    case 'todos.remove':\n      handleTodosRemove(ctx, ws, msg.payload as { id?: string; index?: number } | undefined);\n      return;\n    case 'todo.update':\n      handleTodoUpdate(\n        ctx,\n        ws,\n        msg.payload as { id: string; status?: TodoItem['status']; activeForm?: string },\n      );\n      return;\n    case 'tasks.get':\n      await handleTasksGet(ctx, ws);\n      return;\n    case 'task.update':\n      await handleTaskUpdate(\n        ctx,\n        ws,\n        msg.payload as {\n          id: string;\n          status: 'pending' | 'in_progress' | 'blocked' | 'failed' | 'review' | 'completed';\n        },\n      );\n      return;\n    case 'plan.get':\n      await handlePlanGet(ctx, ws);\n      return;\n    case 'plan.template_use': {\n      const parsed = validatePlanTemplateUsePayload(msg.payload);\n      if (!parsed.ok) {\n        sendResult(ws, ctx, false, parsed.message);\n        return;\n      }\n      await handlePlanTemplateUse(ctx, ws, parsed.value.template);\n      return;\n    }\n    case 'plan.item.update':\n      await handlePlanItemUpdate(\n        ctx,\n        ws,\n        msg.payload as { target: string; status: 'open' | 'in_progress' | 'done' },\n      );\n      return;\n  }\n}\n"],"mappings":";AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAgMO,SAAS,+BACd,SACiD;AACjD,MAAI,CAAC,SAAS,OAAO,GAAG;AACtB,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,SAAS;AAAA,IACX;AAAA,EACF;AACA,QAAM,WAAW,QAAQ,UAAU;AACnC,MAAI,OAAO,aAAa,YAAY,SAAS,KAAK,EAAE,WAAW,GAAG;AAChE,WAAO,EAAE,IAAI,OAAO,SAAS,gEAAgE;AAAA,EAC/F;AACA,SAAO,EAAE,IAAI,MAAM,OAAO,EAAE,SAAS,EAAE;AACzC;;;ACjMA,SAAS,WACP,IACA,KACA,IACA,SACM;AACN,MAAI,KAAK,IAAI,EAAE,MAAM,KAAK,OAAO,SAAS,QAAQ,CAAC;AACrD;AAwBO,SAAS,eAAe,KAAsB,IAAqB;AACxE,MAAI,KAAK,IAAI,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,IAAI,QAAQ,MAAM,EAAE,CAAC;AAC/E;AAEO,SAAS,iBAAiB,KAAsB,IAAqB;AAC1E,MAAI,eAAe,CAAC,CAAC;AACrB,MAAI,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACvC,aAAW,IAAI,KAAK,MAAM,qBAAqB;AACjD;AAEO,SAAS,kBACd,KACA,IACA,SACM;AACN,MAAI,CAAC,WAAY,QAAQ,OAAO,UAAa,QAAQ,UAAU,QAAY;AACzE,eAAW,IAAI,KAAK,OAAO,oCAAoC;AAC/D;AAAA,EACF;AACA,QAAM,OACJ,QAAQ,OAAO,SACX,IAAI,QAAQ,MAAM,OAAO,CAAC,MAAM,EAAE,OAAO,QAAQ,EAAE,IACnD,IAAI,QAAQ,MAAM,OAAO,CAAC,GAAG,MAAM,MAAO,QAAQ,KAAgB;AACxE,MAAI,eAAe,IAAI;AACvB,MAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,KAAK,EAAE,CAAC;AACjE,aAAW,IAAI,KAAK,MAAM,oBAAoB;AAChD;AAEO,SAAS,iBACd,KACA,IACA,SACM;AACN,QAAM,OAAO,IAAI,QAAQ,MAAM,KAAK,CAAC,MAAM,EAAE,OAAO,QAAQ,EAAE;AAC9D,MAAI,CAAC,MAAM;AACT,eAAW,IAAI,KAAK,OAAO,oBAAoB,QAAQ,EAAE,IAAI;AAC7D;AAAA,EACF;AACA,QAAM,OAAO,IAAI,QAAQ,MAAM;AAAA,IAAI,CAAC,MAClC,EAAE,OAAO,QAAQ,KACb,EAAE,GAAG,GAAG,GAAI,QAAQ,WAAW,UAAa,EAAE,QAAQ,QAAQ,OAAO,GAAI,GAAI,QAAQ,eAAe,UAAa,EAAE,YAAY,QAAQ,WAAW,EAAG,IACrJ;AAAA,EACN;AACA,MAAI,eAAe,IAAI;AACvB,MAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,KAAK,EAAE,CAAC;AACjE,aAAW,IAAI,KAAK,MAAM,SAAS,KAAK,OAAO,YAAY;AAC7D;AAIA,eAAsB,eAAe,KAAsB,IAA8B;AACvF,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,MAAI,OAAO,aAAa,YAAY,UAAU;AAC5C,QAAI;AACF,YAAM,EAAE,UAAU,IAAI,MAAM,OAAO,kBAAkB;AACrD,YAAM,OAAO,MAAM,UAAU,QAAQ;AACrC,UAAI,KAAK,IAAI,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,MAAM,SAAS,CAAC,EAAE,EAAE,CAAC;AAAA,IAC/E,QAAQ;AACN,UAAI,KAAK,IAAI,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;AAAA,IAChE;AAAA,EACF,OAAO;AACL,QAAI,KAAK,IAAI;AAAA,MACX,MAAM;AAAA,MACN,SAAS,EAAE,OAAO,CAAC,GAAG,OAAO,+BAA+B;AAAA,IAC9D,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,iBACpB,KACA,IACA,SAIe;AACf,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,MAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,eAAW,IAAI,KAAK,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,UAAM,EAAE,WAAW,UAAU,IAAI,MAAM,OAAO,kBAAkB;AAChE,UAAM,OAAO,MAAM,UAAU,QAAQ;AACrC,QAAI,CAAC,MAAM;AACT,iBAAW,IAAI,KAAK,OAAO,qBAAqB;AAChD;AAAA,IACF;AACA,UAAM,MAAM,KAAK,MAAM,UAAU,CAAC,MAAM,EAAE,OAAO,QAAQ,EAAE;AAC3D,QAAI,QAAQ,IAAI;AACd,iBAAW,IAAI,KAAK,OAAO,SAAS,QAAQ,EAAE,cAAc;AAC5D;AAAA,IACF;AACA,SAAK,MAAM,GAAG,IAAI,EAAE,GAAG,KAAK,MAAM,GAAG,GAAG,QAAQ,QAAQ,OAAO;AAC/D,UAAM,UAAU,UAAU,IAAI;AAC9B,QAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,KAAK,MAAM,EAAE,CAAC;AACvE,eAAW,IAAI,KAAK,MAAM,SAAS,QAAQ,EAAE,YAAY,QAAQ,MAAM,GAAG;AAAA,EAC5E,SAAS,KAAK;AACZ,eAAW,IAAI,KAAK,OAAO,OAAO,GAAG,CAAC;AAAA,EACxC;AACF;AAIA,eAAsB,cAAc,KAAsB,IAA8B;AACtF,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,QAAM,YAAY,IAAI,QAAQ,SAAS,MAAM;AAC7C,MAAI,OAAO,aAAa,YAAY,UAAU;AAC5C,QAAI;AACF,YAAM,EAAE,SAAS,IAAI,MAAM,OAAO,kBAAkB;AACpD,YAAM,OAAO,MAAM,SAAS,QAAQ;AACpC,UAAI,KAAK,IAAI;AAAA,QACX,MAAM;AAAA,QACN,SAAS;AAAA,UACP,MAAM,QAAQ;AAAA,YACZ,SAAS;AAAA,YACT;AAAA,YACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YAClC,OAAO,CAAC;AAAA,UACV;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH,QAAQ;AACN,UAAI,KAAK,IAAI;AAAA,QACX,MAAM;AAAA,QACN,SAAS;AAAA,UACP,MAAM;AAAA,YACJ,SAAS;AAAA,YACT;AAAA,YACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YAClC,OAAO,CAAC;AAAA,UACV;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF,OAAO;AACL,QAAI,KAAK,IAAI;AAAA,MACX,MAAM;AAAA,MACN,SAAS,EAAE,MAAM,MAAM,OAAO,mDAAmD;AAAA,IACnF,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,sBAAsB,KAAsB,IAAe,UAAiC;AAChH,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,QAAM,YAAY,IAAI,QAAQ,SAAS,MAAM;AAC7C,MAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,eAAW,IAAI,KAAK,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,UAAM,EAAE,iBAAiB,UAAU,UAAU,WAAW,YAAY,IAAI,MAAM,OAAO,kBAAkB;AACvG,UAAM,MAAM,gBAAgB,QAAQ;AACpC,QAAI,CAAC,KAAK;AACR,iBAAW,IAAI,KAAK,OAAO,qBAAqB,QAAQ,IAAI;AAC5D;AAAA,IACF;AACA,QAAI,OAAQ,MAAM,SAAS,QAAQ,KAAM,UAAU,SAAS;AAC5D,eAAW,QAAQ,IAAI,OAAO;AAC5B,OAAC,EAAE,KAAK,IAAI,YAAY,MAAM,KAAK,OAAO,KAAK,OAAO;AAAA,IACxD;AACA,UAAM,SAAS,UAAU,IAAI;AAC7B,eAAW,IAAI,KAAK,MAAM,qBAAqB,IAAI,IAAI,YAAO,IAAI,MAAM,MAAM,eAAe;AAC7F,QAAI,UAAU,EAAE,MAAM,gBAAgB,SAAS,EAAE,KAAK,EAAE,CAAC;AAAA,EAC3D,SAAS,KAAK;AACZ,eAAW,IAAI,KAAK,OAAO,OAAO,GAAG,CAAC;AAAA,EACxC;AACF;AAEA,eAAsB,qBACpB,KACA,IACA,SACe;AACf,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,QAAM,YAAY,IAAI,QAAQ,SAAS,MAAM;AAC7C,MAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,eAAW,IAAI,KAAK,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,UAAM,EAAE,YAAY,kBAAkB,IAAI,MAAM,OAAO,kBAAkB;AACzE,QAAI,UAAU;AACd,UAAM,OAAO,MAAM,WAAW,UAAU,WAAW,OAAO,MAAM;AAC9D,YAAM,SAAS,EAAE;AACjB,YAAM,UAAU,kBAAkB,GAAG,QAAQ,QAAQ,QAAQ,MAAM;AACnE,gBAAU,QAAQ,cAAc;AAChC,aAAO;AAAA,IACT,CAAC;AACD,QAAI,CAAC,SAAS;AACZ,iBAAW,IAAI,KAAK,OAAO,yBAAyB,QAAQ,MAAM,IAAI;AACtE;AAAA,IACF;AACA,eAAW,IAAI,KAAK,MAAM,gCAAgC,QAAQ,MAAM,IAAI;AAC5E,QAAI,UAAU,EAAE,MAAM,gBAAgB,SAAS,EAAE,KAAK,EAAE,CAAC;AAAA,EAC3D,SAAS,KAAK;AACZ,eAAW,IAAI,KAAK,OAAO,OAAO,GAAG,CAAC;AAAA,EACxC;AACF;AAcA,eAAsB,sBACpB,KACA,IACA,KACe;AACf,UAAQ,IAAI,MAAM;AAAA,IAChB,KAAK;AACH,qBAAe,KAAK,EAAE;AACtB;AAAA,IACF,KAAK;AACH,uBAAiB,KAAK,EAAE;AACxB;AAAA,IACF,KAAK;AACH,wBAAkB,KAAK,IAAI,IAAI,OAAsD;AACrF;AAAA,IACF,KAAK;AACH;AAAA,QACE;AAAA,QACA;AAAA,QACA,IAAI;AAAA,MACN;AACA;AAAA,IACF,KAAK;AACH,YAAM,eAAe,KAAK,EAAE;AAC5B;AAAA,IACF,KAAK;AACH,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA,IAAI;AAAA,MAIN;AACA;AAAA,IACF,KAAK;AACH,YAAM,cAAc,KAAK,EAAE;AAC3B;AAAA,IACF,KAAK,qBAAqB;AACxB,YAAM,SAAS,+BAA+B,IAAI,OAAO;AACzD,UAAI,CAAC,OAAO,IAAI;AACd,mBAAW,IAAI,KAAK,OAAO,OAAO,OAAO;AACzC;AAAA,MACF;AACA,YAAM,sBAAsB,KAAK,IAAI,OAAO,MAAM,QAAQ;AAC1D;AAAA,IACF;AAAA,IACA,KAAK;AACH,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA,IAAI;AAAA,MACN;AACA;AAAA,EACJ;AACF;","names":[]}

package/dist/server/index.d.ts

@@ -1,5 +1,5 @@
 import { WebSocket } from 'ws';
-import { Agent, EventBus, SessionStore, ToolRegistry, ModelsRegistry, ConfigStore, SecretVault, JournalEntry, Logger, Provider, Tool, Context, MemoryStore, ProviderConfig, ProviderApiKey, SddInterviewDriver, AgentFactory, BrainArbiter, SkillLoader } from '@wrongstack/core';
+import { Agent, EventBus, SessionStore, ToolRegistry, ModelsRegistry, ConfigStore, SecretVault, JournalEntry, Logger, Provider, Tool, Context, MemoryStore, ProviderConfig, ProviderApiKey, SddInterviewDriver, AgentFactory, BrainArbiter, SkillLoader, PromptLoader, PromptUsageStore } from '@wrongstack/core';
 import * as http from 'node:http';
 import { MCPRegistry } from '@wrongstack/mcp';
 import { SkillInstaller } from '@wrongstack/core/skills';
@@ -13,8 +13,23 @@ interface WSClientMessage {
     payload?: unknown | undefined;
 }
 interface WebUIOptions {
+    /** HTTP frontend port. Prefer `httpPort`; `port` is kept for compatibility. */
     port?: number | undefined;
+    /** HTTP frontend port. */
+    httpPort?: number | undefined;
     webuiPort?: number | undefined;
+    /** WebSocket backend port. */
+    wsPort?: number | undefined;
+    /** Host/interface to bind. */
+    wsHost?: string | undefined;
+    /** Fixed access token/password. Defaults to WEBUI_TOKEN or random per process. */
+    accessToken?: string | undefined;
+    /** Browser-facing HTTP URL, used in startup output and instance registry. */
+    publicUrl?: string | undefined;
+    /** Browser-facing WebSocket URL, injected into the frontend for tunnels/proxies. */
+    publicWsUrl?: string | undefined;
+    /** Force token/password protection even on loopback binds. */
+    requireToken?: boolean | undefined;
     /**
      * Pre-built backend services. When provided, `startWebUI` skips its
      * default agent/event-bus/session/store construction and wires the
@@ -103,6 +118,11 @@ interface CreateHttpServerOptions {
      * is allowed to open a WebSocket back to the local server.
      */
     wsPort: number;
+    /**
+     * Public WebSocket URL injected into the frontend. Use this behind tunnels or
+     * reverse proxies where the browser-facing WS URL differs from host:wsPort.
+     */
+    publicWsUrl?: string | undefined;
     /**
      * Path to the global WrongStack root (~/.wrongstack). Used by the
      * /api/sessions and /api/sessions/:id/agents endpoints to read the
@@ -110,11 +130,13 @@ interface CreateHttpServerOptions {
      */
     globalRoot?: string | undefined;
     /**
-     * Shared auth token for `/api/*` endpoints. Required for non-loopback
-     * binds (LAN exposure). Loopback binds accept any local origin without
+     * Shared auth token for HTTP and WS access. Required for non-loopback
+     * binds (LAN exposure). Loopback binds accept local browser access without
      * a token (the WS path's loopback-bootstrap policy — see ws-auth.ts).
      */
     apiToken?: string | undefined;
+    /** Force HTTP token auth even on loopback binds, useful behind public tunnels. */
+    requireToken?: boolean | undefined;
     /**
      * If true, the `/ws-auth` endpoint exchanges a `?token=` query param (or
      * `X-WS-Token` header) for an `HttpOnly` auth cookie. The cookie is then
@@ -149,7 +171,7 @@ interface CreateHttpServerOptions {
  */
 declare function injectWsPort(html: string, wsPort: number): string;
 /** Build the Content-Security-Policy value for the given WS port. */
-declare function buildCspHeader(wsPort: number): string;
+declare function buildCspHeader(wsPort: number, requestHost?: string | undefined, publicWsUrl?: string | undefined): string;
 /**
  * Create the static-file HTTP server. Returns the `http.Server` (not
  * listening yet) so the caller can attach to a `shutdown()` hook and
@@ -201,6 +223,11 @@ declare function browserOpenCommand(url: string, platform?: NodeJS.Platform): {
  *  process so it survives kill/killAll. Never throws. */
 declare function openBrowser(url: string, platform?: NodeJS.Platform): void;
 
+interface WorktreeManagementDeps {
+    projectRoot: string;
+    /** Board snapshot dir — powers the cross-process liveness guard on cleanup. */
+    boardsDir: string;
+}
 /**
  * WorktreeWebSocketHandler — mirrors AutoPhaseWebSocketHandler. Subscribes to
  * the shared EventBus `worktree.*` lifecycle events, keeps a live snapshot of
@@ -211,14 +238,44 @@ declare function openBrowser(url: string, platform?: NodeJS.Platform): void;
 declare class WorktreeWebSocketHandler {
     private readonly events;
     private readonly logger;
+    private readonly management?;
     private readonly clients;
     private readonly handles;
     private baseBranch;
     private broadcastInterval;
     private readonly offs;
-    constructor(events: EventBus, logger: Logger);
+    constructor(events: EventBus, logger: Logger, management?: WorktreeManagementDeps | undefined);
     addClient(ws: WebSocket): void;
+    /** Handle worktree-panel control messages (scan / clean / per-row ops). */
+    handleMessage(msg: {
+        type: string;
+        payload?: Record<string, unknown>;
+    }): Promise<boolean>;
     dispose(): void;
+    /** Absolute managed-worktrees root for this project. */
+    private worktreesRoot;
+    /** True iff `dir` resolves strictly inside the managed worktrees root. */
+    private underRoot;
+    /** Branches of worktrees a live in-session run currently owns. */
+    private liveActiveBranches;
+    /**
+     * Scan the disk for managed worktrees/branches NOT owned by a live in-session
+     * run and broadcast them as orphans, with whether it is safe to clean now.
+     * No-op (empty inventory) when management deps were not wired.
+     */
+    private scanAndBroadcast;
+    /**
+     * Force-remove every orphaned worktree + branch. Refused while a run is live —
+     * in this session (active handles) OR another process (the SDD board liveness
+     * guard inside cleanupStaleSddWorktrees). Best-effort; reports the outcome.
+     */
+    private cleanupOrphans;
+    /** Remove/discard ONE worktree + branch. Refused while a live run owns it. */
+    private removeOne;
+    /** Squash-merge ONE branch into base. Refused while a live run owns it. */
+    private mergeBranch;
+    /** Compact change summary for one worktree checkout. */
+    private diffOne;
     private subscribe;
     private upsert;
     private patch;
@@ -277,7 +334,7 @@ declare function messagePreview(content: unknown): string;
 /**
  * Running-instance registry for the standalone WebUI server.
  *
- * Every live `webui` process records itself in a single JSON file under the
+ * Every live `wstackui` process records itself in a single JSON file under the
  * wstack home dir (`~/.wrongstack/webui-instances.json`) so a user running
  * several instances (one per project, or several per project on different
  * ports) can see at a glance which ports are open for which path.
@@ -327,7 +384,7 @@ declare function registerInstance(record: WebUIInstanceRecord, baseDir?: string)
 declare function unregisterInstance(pid: number, baseDir?: string): Promise<void>;
 /** List live instances, pruning any dead entries encountered. */
 declare function listInstances(baseDir?: string): Promise<WebUIInstanceRecord[]>;
-/** Human-readable table of running instances for `webui --list`. */
+/** Human-readable table of running instances for `wstackui --list`. */
 declare function formatInstances(instances: WebUIInstanceRecord[]): string;
 
 type EternalSubscribe = (fn: (entry: JournalEntry) => void) => () => void;
@@ -374,6 +431,16 @@ declare function errMessage(err: unknown): string;
  * Shared between standalone and CLI-embedded WebUI servers.
  */
 declare function generateAuthToken(): string;
+declare function resolveAuthToken(explicit?: string | undefined): string;
+declare function hostForBrowserUrl(bindHost: string): string;
+declare function buildWebUIAccessUrl(opts: {
+    host: string;
+    port: number;
+    token?: string | undefined;
+    protocol?: 'http' | 'https' | undefined;
+    publicUrl?: string | undefined;
+}): string;
+declare function envFlag(name: string): boolean;
 
 /**
  * Shared file-operation WebSocket handlers for both the standalone WebUI
@@ -525,7 +592,7 @@ declare function handleMemoryForget(ws: WebSocket, msg: unknown, memoryStore: Me
 
 /**
  * MCP management handlers for the WebUI server (both the standalone
- * `wrongstack webui` server and the CLI's embedded `--webui` server).
+ * `wstackui` server and the CLI's embedded `--webui` server).
  *
  * These are thin WebSocket translators over the shared, surface-agnostic
  * management core in `@wrongstack/mcp` (`manage.ts`) — the SAME core the REPL
@@ -620,6 +687,7 @@ declare function extractToken(url: string): string | undefined;
 declare function hostHeaderOk(input: {
     hostHeader: string | undefined;
     wsHost: string;
+    allowedHostnames?: readonly string[] | undefined;
 }): boolean;
 interface VerifyClientInput {
     /** Browser `Origin` header, or undefined for non-browser clients. */
@@ -637,6 +705,12 @@ interface VerifyClientInput {
     wsHost: string;
     /** The server's generated auth token. */
     expectedToken: string;
+    /** Force token auth even for loopback binds, useful behind public tunnels. */
+    requireToken?: boolean | undefined;
+    /** Extra Host header names allowed on loopback binds, e.g. a tunnel hostname. */
+    allowedHostnames?: readonly string[] | undefined;
+    /** Allow browser WS URL tokens for explicit public WS URLs where cookies cannot cross hostnames. */
+    allowBrowserUrlToken?: boolean | undefined;
 }
 /**
  * Decide whether to accept an incoming WebSocket handshake. Pure mirror of the
@@ -759,19 +833,49 @@ declare class AutoPhaseWebSocketHandler {
     private store;
     private clients;
     private broadcastInterval;
-    /** Aborts in-flight task agents when the run is stopped. */
+    /** Aborts in-flight task agents AND the planning turn when the run is stopped. */
     private abort;
+    /** Set the instant a stop/clear/revert is requested, so a planning turn that
+     *  resolves afterwards never launches the orchestrator (the abort alone can't
+     *  cover the window between the LLM call resolving and the orchestrator start). */
+    private stopping;
     /** Optional per-phase git-worktree isolation (lazily created at start). */
     private worktrees;
+    /** Base branch + tip SHA captured at run start so a revert can git-revert the
+     *  run's squash commits (history-preserving) instead of a destructive reset. */
+    private runBase;
     /** Per-run worker identities so the board can show "who is on what". */
     private usedNicknames;
     constructor(agent: Agent, context: Context, logger: Logger, storeDir: string, events?: EventBus | undefined, projectRoot?: string | undefined);
     addClient(ws: WebSocket): void;
     handleMessage(msg: AutoPhaseWSMessage): Promise<void>;
     private handleStart;
+    /**
+     * Halt the run NOW — at any phase. Sets `stopping` (so a planning turn that
+     * resolves afterwards bails), aborts in-flight agents, stops the orchestrator
+     * tick, and ends the live broadcast. The board is kept for review; use
+     * `autophase.clear` to reset or `autophase.revert` to undo the changes.
+     */
+    private handleStop;
+    /**
+     * Stop + wipe: tear down phase worktrees and reset to an empty board so the UI
+     * returns to the start screen ("new one"). Does NOT touch already-merged commits
+     * on the base branch — that is `autophase.revert`.
+     */
+    private handleClear;
+    /**
+     * Stop + undo: remove phase worktrees, then history-preservingly `git revert`
+     * every commit this run landed on the base branch (captured `runBase`..HEAD),
+     * then reset to an empty board. Refuses (reports a reason) on a dirty tree or a
+     * conflicting revert rather than leaving the tree half-reverted.
+     */
+    private handleRevert;
     /** Generic fallback phases when the LLM planner produces nothing usable. */
     private defaultPhases;
-    /** Plan phases+todos for the goal via the LLM; fall back to defaults on failure. */
+    /** Plan phases+todos for the goal via the LLM; fall back to defaults on failure.
+     *  The caller passes the run's abort signal so a stop during planning cancels
+     *  the LLM turn (the previous fresh, never-aborted controller made planning
+     *  uninterruptible). */
     private planPhases;
     private executeTaskWithAgent;
     /** Persist + broadcast after an interactive board mutation. */
@@ -822,6 +926,16 @@ interface SddBoardWSMessage {
     type: string;
     payload?: Record<string, unknown>;
 }
+/** Project paths the handler needs to apply lifecycle ops directly. */
+interface SddBoardLifecycleDeps {
+    projectRoot: string;
+    paths: {
+        projectSpecs: string;
+        projectTaskGraphs: string;
+        projectSddSession: string;
+        projectSddBoards: string;
+    };
+}
 /**
  * SddBoardWebSocketHandler — streams the live SDD multi-agent board to clients
  * and relays control commands back to the CLI-owned run.
@@ -839,12 +953,20 @@ interface SddBoardWSMessage {
 declare class SddBoardWebSocketHandler {
     private readonly store;
     private readonly clients;
+    private readonly lifecycle?;
     private latest;
     private poll;
     private unsub;
-    constructor(boardsDir: string, events?: EventBus);
+    constructor(boardsDir: string, events?: EventBus, lifecycle?: SddBoardLifecycleDeps);
     addClient(ws: WebSocket): void;
     handleMessage(msg: SddBoardWSMessage): Promise<void>;
+    /**
+     * Apply a cleanup/rollback/destroy from disk and broadcast a structured
+     * `sdd.board.lifecycle_result`. Refuses (no-op) while a run is still active —
+     * the user must stop it first; the UI gates the buttons on `!active` and the
+     * Destroy flow auto-stops then waits before sending `destroy`.
+     */
+    private applyLifecycle;
     dispose(): void;
     private pollLatest;
     private sendCurrent;
@@ -883,6 +1005,8 @@ interface SddWizardDeps {
         defaultModel?: string | undefined;
         defaultProvider?: string | undefined;
         fallbackModels?: string[] | undefined;
+        /** Per-run worktree-isolation override; undefined → env default. */
+        worktrees?: boolean | undefined;
     }) => Promise<{
         runId: string;
     }>;
@@ -937,12 +1061,6 @@ interface SddWizardWiringOptions {
         projectDir: string;
     };
 }
-/**
- * Build the {@link SddWizardDeps} shared by both webui servers from a single
- * per-task `subagentFactory`. The factory drives BOTH the interview agent (an
- * isolated turn off the main chat bus) and the real multi-agent run, so each
- * server only has to supply the right factory for its process.
- */
 declare function buildSddWizardDeps(opts: SddWizardWiringOptions): SddWizardDeps;
 
 /**
@@ -1010,10 +1128,91 @@ declare function handleSkillsEdit(ws: WebSocket, ctx: SkillsContext, msg: unknow
  */
 declare function handleSkillsExport(ws: WebSocket, ctx: SkillsContext): Promise<void>;
 
+/**
+ * Shared prompt-library WebSocket handlers for BOTH the standalone WebUI server
+ * (`packages/webui/src/server/index.ts`) and the CLI's `--webui` embedded server
+ * (`packages/cli/src/webui-server.ts`). One source of truth so the two servers
+ * never drift (the lesson from skills-handlers).
+ *
+ * Each function handles one request→response cycle; callers drop them into their
+ * switch:
+ *
+ *   case 'prompts.search': return handlePromptsSearch(ws, promptsCtx, msg);
+ *
+ * The prompt library is read across three layers (builtin + user + project) by
+ * the injected `PromptLoader`; writes (create/favorite) go to the user layer
+ * with copy-on-write for builtins. Treat synced/builtin content as DATA — these
+ * handlers never execute it; the client inserts a chosen prompt into the chat
+ * input as an ordinary user turn.
+ */
+
+interface PromptsContext {
+    /** Backs all prompt ops. Absent ⇒ feature unavailable. */
+    promptLoader: PromptLoader | undefined;
+    /** Records per-slug insert counts (shared with CLI `/prompt recent`). */
+    promptUsage?: PromptUsageStore | undefined;
+}
+declare function handlePromptsList(ws: WSLike, ctx: PromptsContext): Promise<void>;
+declare function handlePromptsSearch(ws: WSLike, ctx: PromptsContext, msg: unknown): Promise<void>;
+declare function handlePromptsContent(ws: WSLike, ctx: PromptsContext, msg: unknown): Promise<void>;
+declare function handlePromptsFavorite(ws: WSLike, ctx: PromptsContext, msg: unknown): Promise<void>;
+declare function handlePromptsCreate(ws: WSLike, ctx: PromptsContext, msg: unknown): Promise<void>;
+/** Record that a prompt was inserted (best-effort; feeds CLI `/prompt recent`). */
+declare function handlePromptsUsed(ws: WSLike, ctx: PromptsContext, msg: unknown): Promise<void>;
+/** Return recently-inserted prompt slugs (most-recent first) for the modal's Recent view. */
+declare function handlePromptsRecent(ws: WSLike, ctx: PromptsContext): Promise<void>;
+/** Minimal structural type for the ws.send sink (matches `ws` WebSocket). */
+type WSLike = Parameters<typeof send>[0];
+
+/**
+ * Shared Design Studio WebSocket handlers for both the standalone WebUI server
+ * (`packages/webui/src/server/index.ts`) and the CLI's `--webui` embedded
+ * server (`packages/cli/src/webui-server.ts`). One source of truth keeps the two
+ * servers at parity (enforced by ws-handler-parity.test.ts).
+ *
+ *   case 'design.list':        return handleDesignList(ws, designCtx);
+ *   case 'design.use':         return handleDesignUse(ws, designCtx, msg);
+ *   case 'design.state':       return handleDesignState(ws, designCtx);
+ *   case 'design.set':         return handleDesignSet(ws, designCtx, msg);
+ *   case 'design.materialize': return handleDesignMaterialize(ws, designCtx, msg);
+ *
+ * Browsing + customization of curated UI design kits; `design.use` pins the
+ * active kit, `design.set` records color/token overrides, `design.materialize`
+ * writes the (override-applied) tokens to a real theme file on disk.
+ */
+
+interface DesignContext {
+    projectRoot: string;
+    /** Live agent context whose `meta.designStudio` we read/pin. Optional. */
+    agentMeta?: {
+        meta: Record<string, unknown>;
+    } | undefined;
+}
+declare function handleDesignList(ws: WebSocket, ctx: DesignContext): Promise<void>;
+declare function handleDesignState(ws: WebSocket, ctx: DesignContext): Promise<void>;
+declare function handleDesignUse(ws: WebSocket, ctx: DesignContext, msg: {
+    payload?: unknown;
+}): Promise<void>;
+/** Record structured color/token overrides without changing the pinned kit. */
+declare function handleDesignSet(ws: WebSocket, ctx: DesignContext, msg: {
+    payload?: unknown;
+}): Promise<void>;
+/** Write the active kit's (override-applied) tokens to a real theme file. */
+declare function handleDesignMaterialize(ws: WebSocket, ctx: DesignContext, msg: {
+    payload?: unknown;
+}): Promise<void>;
+/** Scan project UI files for off-palette colors against the active kit. */
+declare function handleDesignVerify(ws: WebSocket, ctx: DesignContext): Promise<void>;
+
 declare function startWebUI(opts?: WebUIOptions & {
     wsPort?: number | undefined;
     wsHost?: string | undefined;
+    httpPort?: number | undefined;
+    accessToken?: string | undefined;
+    publicUrl?: string | undefined;
+    publicWsUrl?: string | undefined;
+    requireToken?: boolean | undefined;
     open?: boolean | undefined;
 }): Promise<void>;
 
-export { AutoPhaseWebSocketHandler, type BackendServices, type CompletionHandlerOptions, type CompletionItemKind, type CompletionSuggestion, type ConnectedClient, type ContextBreakdown, type CreateHttpServerOptions, type CustomContextMode, type CustomModeStore, type EternalBroadcast, type EternalSubscribe, type EternalSubscription, type KeyOpResult, type LspCompletionSource, type LspCompletionSourceRequest, type MessageTokenEntry, type ProvidersRecord, SddBoardWebSocketHandler, type SddWizardDeps, SddWizardWebSocketHandler, type SddWizardWiringOptions, type ShellOpenRequest, type ShellOpenResult, type ShellOpenTarget, type SkillsContext, SpecsWebSocketHandler, type ToolTokenEntry, type VerifyClientInput, type WSClientMessage, type WSServerMessage, type WebUIInstanceRecord, type WebUIOptions, WorktreeWebSocketHandler, addProvider, broadcast, browserOpenCommand, buildCspHeader, buildSddWizardDeps, createCustomModeStore, createEternalSubscription, createHttpServer, createProviderConfigIO, createToolLspCompletionSource, defaultBaseDir, deleteKey, errMessage, estimateTokens, extractToken, findFreePort, formatInstances, generateAuthToken, handleCompletionRequest, handleFilesList, handleFilesRead, handleFilesTree, handleFilesWrite, handleGitChanges, handleGitDiff, handleGitInfo, handleMcpAdd, handleMcpDisable, handleMcpDiscover, handleMcpEnable, handleMcpList, handleMcpRemove, handleMcpRestart, handleMcpSleep, handleMcpUpdate, handleMcpWake, handleMemoryForget, handleMemoryList, handleMemoryRemember, handleShellOpen, handleSkillsContent, handleSkillsCreate, handleSkillsEdit, handleSkillsExport, handleSkillsInstall, handleSkillsUninstall, handleSkillsUpdate, hostHeaderOk, injectWsPort, isLoopbackBind, isLoopbackHostname, isPortFree, listInstances, loadSavedProviders, maskedKey, messagePreview, messageTokens, normalizeKeys, openBrowser, registerInstance, registryPath, removeProvider, saveProviders, send, sendResult, setActiveKey, startWebUI, stringifyContent, tokenMatches, unregisterInstance, upsertKey, verifyClient, writeKeysBack };
+export { AutoPhaseWebSocketHandler, type BackendServices, type CompletionHandlerOptions, type CompletionItemKind, type CompletionSuggestion, type ConnectedClient, type ContextBreakdown, type CreateHttpServerOptions, type CustomContextMode, type CustomModeStore, type DesignContext, type EternalBroadcast, type EternalSubscribe, type EternalSubscription, type KeyOpResult, type LspCompletionSource, type LspCompletionSourceRequest, type MessageTokenEntry, type PromptsContext, type ProvidersRecord, SddBoardWebSocketHandler, type SddWizardDeps, SddWizardWebSocketHandler, type SddWizardWiringOptions, type ShellOpenRequest, type ShellOpenResult, type ShellOpenTarget, type SkillsContext, SpecsWebSocketHandler, type ToolTokenEntry, type VerifyClientInput, type WSClientMessage, type WSServerMessage, type WebUIInstanceRecord, type WebUIOptions, WorktreeWebSocketHandler, addProvider, broadcast, browserOpenCommand, buildCspHeader, buildSddWizardDeps, buildWebUIAccessUrl, createCustomModeStore, createEternalSubscription, createHttpServer, createProviderConfigIO, createToolLspCompletionSource, defaultBaseDir, deleteKey, envFlag, errMessage, estimateTokens, extractToken, findFreePort, formatInstances, generateAuthToken, handleCompletionRequest, handleDesignList, handleDesignMaterialize, handleDesignSet, handleDesignState, handleDesignUse, handleDesignVerify, handleFilesList, handleFilesRead, handleFilesTree, handleFilesWrite, handleGitChanges, handleGitDiff, handleGitInfo, handleMcpAdd, handleMcpDisable, handleMcpDiscover, handleMcpEnable, handleMcpList, handleMcpRemove, handleMcpRestart, handleMcpSleep, handleMcpUpdate, handleMcpWake, handleMemoryForget, handleMemoryList, handleMemoryRemember, handlePromptsContent, handlePromptsCreate, handlePromptsFavorite, handlePromptsList, handlePromptsRecent, handlePromptsSearch, handlePromptsUsed, handleShellOpen, handleSkillsContent, handleSkillsCreate, handleSkillsEdit, handleSkillsExport, handleSkillsInstall, handleSkillsUninstall, handleSkillsUpdate, hostForBrowserUrl, hostHeaderOk, injectWsPort, isLoopbackBind, isLoopbackHostname, isPortFree, listInstances, loadSavedProviders, maskedKey, messagePreview, messageTokens, normalizeKeys, openBrowser, registerInstance, registryPath, removeProvider, resolveAuthToken, saveProviders, send, sendResult, setActiveKey, startWebUI, stringifyContent, tokenMatches, unregisterInstance, upsertKey, verifyClient, writeKeysBack };