@wrongstack/webui 0.274.0 → 0.275.1

package/dist/server/handlers.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/server/ws-payload-validation.ts","../../src/server/handlers/worklist-handlers.ts"],"sourcesContent":["export type PayloadValidationResult<T> = { ok: true; value: T } | { ok: false; message: string };\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nexport interface ModelSwitchPayload {\n  provider: string;\n  model: string;\n}\n\nexport function validateModelSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ModelSwitchPayload> {\n  if (!isRecord(payload)) {\n    return {\n      ok: false,\n      message: 'model.switch payload must be an object with string provider and model',\n    };\n  }\n  const provider = payload['provider'];\n  const model = payload['model'];\n  if (typeof provider !== 'string' || provider.trim().length === 0) {\n    return { ok: false, message: 'model.switch payload.provider must be a non-empty string' };\n  }\n  if (typeof model !== 'string' || model.trim().length === 0) {\n    return { ok: false, message: 'model.switch payload.model must be a non-empty string' };\n  }\n  return { ok: true, value: { provider, model } };\n}\n\nexport interface PrefsUpdatePayload {\n  prefs: Record<string, unknown>;\n}\n\nconst AUTONOMY_VALUES = new Set(['off', 'suggest', 'auto', 'eternal', 'eternal-parallel']);\n\nexport interface MailboxMessagesPayload {\n  limit?: number;\n  agentId?: string;\n  unreadOnly?: boolean;\n}\n\nexport function validateMailboxMessagesPayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxMessagesPayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.messages payload must be an object when provided' };\n  }\n  const limit = payload['limit'];\n  const agentId = payload['agentId'];\n  const unreadOnly = payload['unreadOnly'];\n  if (limit !== undefined && (typeof limit !== 'number' || !Number.isFinite(limit) || limit < 1)) {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.limit must be a positive number when provided',\n    };\n  }\n  if (agentId !== undefined && typeof agentId !== 'string') {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.agentId must be a string when provided',\n    };\n  }\n  if (unreadOnly !== undefined && typeof unreadOnly !== 'boolean') {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.unreadOnly must be a boolean when provided',\n    };\n  }\n  return { ok: true, value: { limit, agentId, unreadOnly } };\n}\n\nexport interface MailboxAgentsPayload {\n  onlineOnly?: boolean;\n}\n\nexport function validateMailboxAgentsPayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxAgentsPayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.agents payload must be an object when provided' };\n  }\n  const onlineOnly = payload['onlineOnly'];\n  if (onlineOnly !== undefined && typeof onlineOnly !== 'boolean') {\n    return {\n      ok: false,\n      message: 'mailbox.agents payload.onlineOnly must be a boolean when provided',\n    };\n  }\n  return { ok: true, value: { onlineOnly } };\n}\n\nexport interface MailboxPurgePayload {\n  completedMaxAgeMs?: number;\n  incompleteMaxAgeMs?: number;\n}\n\nexport function validateMailboxPurgePayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxPurgePayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.purge payload must be an object when provided' };\n  }\n  const completedMaxAgeMs = payload['completedMaxAgeMs'];\n  const incompleteMaxAgeMs = payload['incompleteMaxAgeMs'];\n  if (\n    completedMaxAgeMs !== undefined &&\n    (typeof completedMaxAgeMs !== 'number' ||\n      !Number.isFinite(completedMaxAgeMs) ||\n      completedMaxAgeMs < 0)\n  ) {\n    return {\n      ok: false,\n      message:\n        'mailbox.purge payload.completedMaxAgeMs must be a non-negative number when provided',\n    };\n  }\n  if (\n    incompleteMaxAgeMs !== undefined &&\n    (typeof incompleteMaxAgeMs !== 'number' ||\n      !Number.isFinite(incompleteMaxAgeMs) ||\n      incompleteMaxAgeMs < 0)\n  ) {\n    return {\n      ok: false,\n      message:\n        'mailbox.purge payload.incompleteMaxAgeMs must be a non-negative number when provided',\n    };\n  }\n  return { ok: true, value: { completedMaxAgeMs, incompleteMaxAgeMs } };\n}\n\nexport interface BrainRiskPayload {\n  level: string;\n}\n\nconst BRAIN_RISK_VALUES = new Set(['off', 'low', 'medium', 'high', 'all']);\n\nexport function validateBrainRiskPayload(\n  payload: unknown,\n): PayloadValidationResult<BrainRiskPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'brain.risk payload must be an object with string level' };\n  }\n  const level = payload['level'];\n  if (typeof level !== 'string' || !BRAIN_RISK_VALUES.has(level)) {\n    return {\n      ok: false,\n      message: 'brain.risk payload.level must be one of off, low, medium, high, all',\n    };\n  }\n  return { ok: true, value: { level } };\n}\n\nexport interface BrainAskPayload {\n  question: string;\n}\n\nexport function validateBrainAskPayload(\n  payload: unknown,\n): PayloadValidationResult<BrainAskPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'brain.ask payload must be an object with string question' };\n  }\n  const question = payload['question'];\n  if (typeof question !== 'string' || question.trim().length === 0) {\n    return { ok: false, message: 'brain.ask payload.question must be a non-empty string' };\n  }\n  return { ok: true, value: { question: question.trim() } };\n}\n\nexport interface AutonomySwitchPayload {\n  mode: string;\n}\n\nexport function validateAutonomySwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<AutonomySwitchPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'autonomy.switch payload must be an object with string mode' };\n  }\n  const mode = payload['mode'];\n  if (typeof mode !== 'string' || !AUTONOMY_VALUES.has(mode)) {\n    return { ok: false, message: 'autonomy.switch payload.mode must be a valid autonomy mode' };\n  }\n  return { ok: true, value: { mode } };\n}\n\nexport interface PlanTemplateUsePayload {\n  template: string;\n}\n\nexport function validatePlanTemplateUsePayload(\n  payload: unknown,\n): PayloadValidationResult<PlanTemplateUsePayload> {\n  if (!isRecord(payload)) {\n    return {\n      ok: false,\n      message: 'plan.template_use payload must be an object with string template',\n    };\n  }\n  const template = payload['template'];\n  if (typeof template !== 'string' || template.trim().length === 0) {\n    return { ok: false, message: 'plan.template_use payload.template must be a non-empty string' };\n  }\n  return { ok: true, value: { template } };\n}\nconst CONTEXT_STRATEGY_VALUES = new Set(['hybrid', 'intelligent', 'selective']);\nconst CONTEXT_MODE_VALUES = new Set(['balanced', 'frugal', 'deep', 'archival']);\nconst TOKEN_SAVING_TIER_VALUES = new Set(['off', 'minimal', 'light', 'medium', 'aggressive']);\nconst ENHANCE_LANGUAGE_VALUES = new Set(['original', 'english']);\nconst LOG_LEVEL_VALUES = new Set(['debug', 'info', 'warn', 'error']);\nconst AUDIT_LEVEL_VALUES = new Set(['minimal', 'standard', 'full']);\nconst REASONING_MODE_VALUES = new Set(['auto', 'on', 'off']);\nconst REASONING_EFFORT_VALUES = new Set([\n  'none',\n  'minimal',\n  'low',\n  'medium',\n  'high',\n  'xhigh',\n  'max',\n]);\nconst CACHE_TTL_VALUES = new Set(['default', '5m', '1h']);\n\nconst BOOLEAN_PREF_KEYS = new Set([\n  'yolo',\n  'chime',\n  'confirmExit',\n  'streamFleet',\n  'nextPrediction',\n  'titleAnimation',\n  'enhanceEnabled',\n  'featureMcp',\n  'featurePlugins',\n  'featureMemory',\n  'featureSkills',\n  'featureModelsRegistry',\n  'indexOnStart',\n  'contextAutoCompact',\n  'tgSessionEnd',\n  'tgDelegate',\n  'reasoningPreserve',\n  'hqEnabled',\n  'hqRawContent',\n  'fallbackAuto',\n]);\n\n/** Keys whose value must be an array of strings (e.g. an ordered model list). */\nconst STRING_ARRAY_PREF_KEYS = new Set(['fallbackModels']);\n\nconst NUMBER_PREF_KEYS = new Set([\n  'autonomyDelayMs',\n  'autoProceedMaxIterations',\n  'maxIterations',\n  'maxConcurrent',\n  'enhanceDelayMs',\n  'tgLongToolMs',\n]);\n\nconst STRING_PREF_KEYS = new Set(['hqUrl', 'hqToken']);\n\nconst ENUM_PREF_KEYS: Record<string, Set<string>> = {\n  autonomy: AUTONOMY_VALUES,\n  contextStrategy: CONTEXT_STRATEGY_VALUES,\n  contextMode: CONTEXT_MODE_VALUES,\n  tokenSavingTier: TOKEN_SAVING_TIER_VALUES,\n  enhanceLanguage: ENHANCE_LANGUAGE_VALUES,\n  logLevel: LOG_LEVEL_VALUES,\n  auditLevel: AUDIT_LEVEL_VALUES,\n  reasoningMode: REASONING_MODE_VALUES,\n  reasoningEffort: REASONING_EFFORT_VALUES,\n  cacheTtl: CACHE_TTL_VALUES,\n};\n\nfunction validatePreferenceValue(key: string, value: unknown): string | null {\n  if (BOOLEAN_PREF_KEYS.has(key)) {\n    return typeof value === 'boolean' ? null : `prefs.update payload.${key} must be a boolean`;\n  }\n  if (NUMBER_PREF_KEYS.has(key)) {\n    return typeof value === 'number' && Number.isFinite(value)\n      ? null\n      : `prefs.update payload.${key} must be a finite number`;\n  }\n  if (STRING_PREF_KEYS.has(key)) {\n    return typeof value === 'string' ? null : `prefs.update payload.${key} must be a string`;\n  }\n  if (STRING_ARRAY_PREF_KEYS.has(key)) {\n    return Array.isArray(value) && value.every((v) => typeof v === 'string')\n      ? null\n      : `prefs.update payload.${key} must be an array of strings`;\n  }\n  const allowed = ENUM_PREF_KEYS[key];\n  if (allowed) {\n    return typeof value === 'string' && allowed.has(value)\n      ? null\n      : `prefs.update payload.${key} must be one of: ${Array.from(allowed).join(', ')}`;\n  }\n  return `prefs.update payload contains unknown preference key: ${key}`;\n}\n\nexport function validatePrefsUpdatePayload(\n  payload: unknown,\n): PayloadValidationResult<PrefsUpdatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'prefs.update payload must be an object' };\n  }\n  for (const [key, value] of Object.entries(payload)) {\n    const error = validatePreferenceValue(key, value);\n    if (error) return { ok: false, message: error };\n  }\n  return { ok: true, value: { prefs: payload } };\n}\n\nexport interface SkillsCreatePayload {\n  name: string;\n  description: string;\n  scope: 'project' | 'global';\n}\n\nexport function validateSkillsCreatePayload(\n  payload: unknown,\n): PayloadValidationResult<SkillsCreatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'skills.create payload must be an object' };\n  }\n  const name = payload['name'];\n  const description = payload['description'];\n  const scope = payload['scope'];\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'Skill name is required' };\n  }\n  if (!/^[a-z0-9]+(-[a-z0-9]+)*$/.test(name.trim())) {\n    return { ok: false, message: 'Skill name must be kebab-case (e.g. my-new-skill)' };\n  }\n  if (typeof description !== 'string' || description.trim().length === 0) {\n    return { ok: false, message: 'Description/trigger is required' };\n  }\n  if (scope !== 'project' && scope !== 'global') {\n    return { ok: false, message: 'skills.create payload.scope must be project or global' };\n  }\n  return { ok: true, value: { name, description, scope } };\n}\n\nexport interface SkillsEditPayload {\n  name: string;\n  body: string;\n}\n\nexport function validateSkillsEditPayload(\n  payload: unknown,\n): PayloadValidationResult<SkillsEditPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'skills.edit payload must be an object' };\n  }\n  const name = payload['name'];\n  const body = payload['body'];\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'Skill name is required' };\n  }\n  if (typeof body !== 'string' || body.length === 0) {\n    return { ok: false, message: 'Skill body is required' };\n  }\n  return { ok: true, value: { name, body } };\n}\n\nexport interface ProcessKillPayload {\n  pid: number;\n}\n\nexport function validateProcessKillPayload(\n  payload: unknown,\n): PayloadValidationResult<ProcessKillPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'process.kill payload must be an object with numeric pid' };\n  }\n  const pid = payload['pid'];\n  if (typeof pid !== 'number' || !Number.isInteger(pid) || pid <= 0) {\n    return { ok: false, message: 'process.kill payload.pid must be a positive integer' };\n  }\n  return { ok: true, value: { pid } };\n}\n\nexport interface WorkingDirSetPayload {\n  path: string;\n}\n\nexport function validateWorkingDirSetPayload(\n  payload: unknown,\n): PayloadValidationResult<WorkingDirSetPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'working_dir.set payload must be an object with string path' };\n  }\n  const newPath = payload['path'];\n  if (typeof newPath !== 'string' || newPath.trim().length === 0) {\n    return { ok: false, message: 'working_dir.set payload.path must be a non-empty string' };\n  }\n  return { ok: true, value: { path: newPath } };\n}\n\nexport interface ModeSwitchPayload {\n  id: string;\n}\n\nexport function validateModeSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ModeSwitchPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mode.switch payload must be an object with string id' };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'mode.switch payload.id must be a non-empty string' };\n  }\n  return { ok: true, value: { id } };\n}\n\nexport interface ContextModeIdPayload {\n  id: string;\n}\n\nfunction validateContextModeIdPayload(\n  payload: unknown,\n  type: 'context.mode.switch' | 'context.mode.delete',\n): PayloadValidationResult<ContextModeIdPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: `${type} payload must be an object with string id` };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: `${type} payload.id must be a non-empty string` };\n  }\n  return { ok: true, value: { id } };\n}\n\nexport function validateContextModeSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeIdPayload> {\n  return validateContextModeIdPayload(payload, 'context.mode.switch');\n}\n\nexport function validateContextModeDeletePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeIdPayload> {\n  return validateContextModeIdPayload(payload, 'context.mode.delete');\n}\n\nexport interface ContextModeCreatePayload {\n  id: string;\n  name: string;\n  description: string;\n  thresholds: { warn: number; soft: number; hard: number };\n  preserveK: number;\n  eliseThreshold: number;\n}\n\nfunction isFiniteNumber(value: unknown): value is number {\n  return typeof value === 'number' && Number.isFinite(value);\n}\n\nexport function validateContextModeCreatePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeCreatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'context.mode.create payload must be an object' };\n  }\n  const id = payload['id'];\n  const name = payload['name'];\n  const description = payload['description'];\n  const thresholds = payload['thresholds'];\n  const preserveK = payload['preserveK'];\n  const eliseThreshold = payload['eliseThreshold'];\n\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'context.mode.create payload.id must be a non-empty string' };\n  }\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'context.mode.create payload.name must be a non-empty string' };\n  }\n  if (typeof description !== 'string') {\n    return { ok: false, message: 'context.mode.create payload.description must be a string' };\n  }\n  if (!isRecord(thresholds)) {\n    return {\n      ok: false,\n      message:\n        'context.mode.create payload.thresholds must be an object with warn/soft/hard numbers',\n    };\n  }\n  if (\n    !isFiniteNumber(thresholds['warn']) ||\n    !isFiniteNumber(thresholds['soft']) ||\n    !isFiniteNumber(thresholds['hard'])\n  ) {\n    return {\n      ok: false,\n      message: 'context.mode.create payload.thresholds.warn/soft/hard must be finite numbers',\n    };\n  }\n  if (!isFiniteNumber(preserveK)) {\n    return { ok: false, message: 'context.mode.create payload.preserveK must be a finite number' };\n  }\n  if (!isFiniteNumber(eliseThreshold)) {\n    return {\n      ok: false,\n      message: 'context.mode.create payload.eliseThreshold must be a finite number',\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      id,\n      name,\n      description,\n      thresholds: { warn: thresholds['warn'], soft: thresholds['soft'], hard: thresholds['hard'] },\n      preserveK,\n      eliseThreshold,\n    },\n  };\n}\n\nexport interface ContextModeUpdatePayload {\n  id: string;\n  name?: string;\n  description?: string;\n  thresholds?: { warn?: number; soft?: number; hard?: number };\n  preserveK?: number;\n  eliseThreshold?: number;\n}\n\nexport function validateContextModeUpdatePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeUpdatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'context.mode.update payload must be an object' };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'context.mode.update payload.id must be a non-empty string' };\n  }\n\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.name must be a string when provided',\n    };\n  }\n\n  const description = payload['description'];\n  if (description !== undefined && typeof description !== 'string') {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.description must be a string when provided',\n    };\n  }\n\n  const thresholds = payload['thresholds'];\n  let validatedThresholds: ContextModeUpdatePayload['thresholds'];\n  if (thresholds !== undefined) {\n    if (!isRecord(thresholds)) {\n      return {\n        ok: false,\n        message: 'context.mode.update payload.thresholds must be an object when provided',\n      };\n    }\n    for (const key of ['warn', 'soft', 'hard'] as const) {\n      const val = thresholds[key];\n      if (val !== undefined && !isFiniteNumber(val)) {\n        return {\n          ok: false,\n          message: `context.mode.update payload.thresholds.${key} must be a finite number when provided`,\n        };\n      }\n    }\n    validatedThresholds = {\n      warn: typeof thresholds['warn'] === 'number' ? thresholds['warn'] : undefined,\n      soft: typeof thresholds['soft'] === 'number' ? thresholds['soft'] : undefined,\n      hard: typeof thresholds['hard'] === 'number' ? thresholds['hard'] : undefined,\n    };\n  }\n\n  const preserveK = payload['preserveK'];\n  if (preserveK !== undefined && !isFiniteNumber(preserveK)) {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.preserveK must be a finite number when provided',\n    };\n  }\n\n  const eliseThreshold = payload['eliseThreshold'];\n  if (eliseThreshold !== undefined && !isFiniteNumber(eliseThreshold)) {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.eliseThreshold must be a finite number when provided',\n    };\n  }\n\n  return {\n    ok: true,\n    value: {\n      id,\n      name: typeof name === 'string' ? name : undefined,\n      description: typeof description === 'string' ? description : undefined,\n      thresholds: validatedThresholds,\n      preserveK: typeof preserveK === 'number' ? preserveK : undefined,\n      eliseThreshold: typeof eliseThreshold === 'number' ? eliseThreshold : undefined,\n    },\n  };\n}\n\nexport interface ShellOpenPayload {\n  path: string;\n  target?: 'file' | 'terminal';\n}\n\nexport function validateShellOpenPayload(\n  payload: unknown,\n): PayloadValidationResult<ShellOpenPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'shell.open payload must be an object with string path' };\n  }\n  const path = payload['path'];\n  if (typeof path !== 'string' || path.trim().length === 0) {\n    return { ok: false, message: 'shell.open payload.path must be a non-empty string' };\n  }\n  const target = payload['target'];\n  if (target !== undefined && target !== 'file' && target !== 'terminal') {\n    return {\n      ok: false,\n      message: 'shell.open payload.target must be \"file\" or \"terminal\" when provided',\n    };\n  }\n  return { ok: true, value: { path, target: target as ShellOpenPayload['target'] } };\n}\n\nexport interface GitDiffPayload {\n  path: string;\n}\n\nexport function validateGitDiffPayload(payload: unknown): PayloadValidationResult<GitDiffPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'git.diff payload must be an object' };\n  }\n  const path = payload['path'];\n  if (path === undefined || path === null) {\n    return { ok: true, value: { path: '' } };\n  }\n  if (typeof path !== 'string') {\n    return { ok: false, message: 'git.diff payload.path must be a string when provided' };\n  }\n  return { ok: true, value: { path } };\n}\n\nexport interface ProjectsAddPayload {\n  root: string;\n  name?: string;\n}\n\nexport function validateProjectsAddPayload(\n  payload: unknown,\n): PayloadValidationResult<ProjectsAddPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'projects.add payload must be an object with string root' };\n  }\n  const root = payload['root'];\n  if (typeof root !== 'string' || root.trim().length === 0) {\n    return { ok: false, message: 'projects.add payload.root must be a non-empty string' };\n  }\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return { ok: false, message: 'projects.add payload.name must be a string when provided' };\n  }\n  return { ok: true, value: { root, name: typeof name === 'string' ? name : undefined } };\n}\n\nexport interface ProjectsSelectPayload {\n  root: string;\n  name?: string;\n}\n\nexport function validateProjectsSelectPayload(\n  payload: unknown,\n): PayloadValidationResult<ProjectsSelectPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'projects.select payload must be an object with string root' };\n  }\n  const root = payload['root'];\n  if (typeof root !== 'string' || root.trim().length === 0) {\n    return { ok: false, message: 'projects.select payload.root must be a non-empty string' };\n  }\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return { ok: false, message: 'projects.select payload.name must be a string when provided' };\n  }\n  return { ok: true, value: { root, name: typeof name === 'string' ? name : undefined } };\n}\n","// ── Shared Worklist Handlers ─────────────────────────────────────────────────\n// Extracted from standalone server (packages/webui/src/server/index.ts) and CLI\n// embedded server (packages/cli/src/webui-server/). Both servers use these\n// handlers for todos, tasks, and plan operations. Keep them in sync.\n//\n// Message types handled here:\n//   todos.get | todos.clear | todos.remove | todo.update\n//   tasks.get | task.update\n//   plan.get | plan.template_use | plan.item.update\n// ─────────────────────────────────────────────────────────────────────────────\n\nimport type { WebSocket } from 'ws';\nimport type { TodoItem } from '@wrongstack/core';\nimport { validatePlanTemplateUsePayload } from '../ws-payload-validation.js';\n\n// ── Shared result helper ───────────────────────────────────────────────────────\n\nfunction sendResult(\n  ws: WebSocket,\n  ctx: WorklistContext,\n  ok: boolean,\n  message: string,\n): void {\n  ctx.send(ws, { type: ok ? 'ok' : 'error', message });\n}\n\n// ── Context interface ─────────────────────────────────────────────────────────\n// Both servers satisfy this with their own local state.\n\nexport interface WorklistContext {\n  context: {\n    todos: TodoItem[];\n    meta: Record<string, unknown>;\n    session: { id: string } | null;\n    state?: unknown;\n  };\n  send: (ws: WebSocket, msg: object) => void;\n  broadcast: (msg: object) => void;\n  /**\n   * Optional mutator for in-memory todo state. Servers that manage live\n   * agent state (e.g. the CLI embedded server) provide this so handlers\n   * can update the agent's todo list directly. Standalone server may omit.\n   */\n  replaceTodos?: (todos: TodoItem[]) => void;\n}\n\n// ── Todos ─────────────────────────────────────────────────────────────────────\n\nexport function handleTodosGet(ctx: WorklistContext, ws: WebSocket): void {\n  ctx.send(ws, { type: 'todos.updated', payload: { todos: ctx.context.todos } });\n}\n\nexport function handleTodosClear(ctx: WorklistContext, ws: WebSocket): void {\n  ctx.replaceTodos?.([]);\n  ctx.broadcast({ type: 'todos.cleared' });\n  sendResult(ws, ctx, true, 'Todo board cleared.');\n}\n\nexport function handleTodosRemove(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { id?: string; index?: number } | undefined,\n): void {\n  if (!payload || (payload.id === undefined && payload.index === undefined)) {\n    sendResult(ws, ctx, false, 'todos.remove requires id or index.');\n    return;\n  }\n  const next =\n    payload.id !== undefined\n      ? ctx.context.todos.filter((t) => t.id !== payload.id)\n      : ctx.context.todos.filter((_, i) => i !== (payload.index as number));\n  ctx.replaceTodos?.(next);\n  ctx.broadcast({ type: 'todos.updated', payload: { todos: next } });\n  sendResult(ws, ctx, true, 'Todo item removed.');\n}\n\nexport function handleTodoUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { id: string; status?: TodoItem['status']; activeForm?: string },\n): void {\n  const todo = ctx.context.todos.find((t) => t.id === payload.id);\n  if (!todo) {\n    sendResult(ws, ctx, false, `No todo with id \"${payload.id}\".`);\n    return;\n  }\n  const next = ctx.context.todos.map((t) =>\n    t.id === payload.id\n      ? { ...t, ...(payload.status !== undefined && { status: payload.status }), ...(payload.activeForm !== undefined && { activeForm: payload.activeForm }) }\n      : t,\n  );\n  ctx.replaceTodos?.(next);\n  ctx.broadcast({ type: 'todos.updated', payload: { todos: next } });\n  sendResult(ws, ctx, true, `Todo \"${todo.content}\" updated.`);\n}\n\n// ── Tasks ─────────────────────────────────────────────────────────────────────\n\nexport async function handleTasksGet(ctx: WorklistContext, ws: WebSocket): Promise<void> {\n  const taskPath = ctx.context.meta['task.path'];\n  if (typeof taskPath === 'string' && taskPath) {\n    try {\n      const { loadTasks } = await import('@wrongstack/core');\n      const file = await loadTasks(taskPath);\n      ctx.send(ws, { type: 'tasks.updated', payload: { tasks: file?.tasks ?? [] } });\n    } catch {\n      ctx.send(ws, { type: 'tasks.updated', payload: { tasks: [] } });\n    }\n  } else {\n    ctx.send(ws, {\n      type: 'tasks.updated',\n      payload: { tasks: [], error: 'Task storage not configured.' },\n    });\n  }\n}\n\nexport async function handleTaskUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: {\n    id: string;\n    status: 'pending' | 'in_progress' | 'blocked' | 'failed' | 'review' | 'completed';\n  },\n): Promise<void> {\n  const taskPath = ctx.context.meta['task.path'];\n  if (typeof taskPath !== 'string' || !taskPath) {\n    sendResult(ws, ctx, false, 'Task storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { loadTasks, saveTasks } = await import('@wrongstack/core');\n    const file = await loadTasks(taskPath);\n    if (!file) {\n      sendResult(ws, ctx, false, 'No task file found.');\n      return;\n    }\n    const idx = file.tasks.findIndex((t) => t.id === payload.id);\n    if (idx === -1) {\n      sendResult(ws, ctx, false, `Task \"${payload.id}\" not found.`);\n      return;\n    }\n    file.tasks[idx] = { ...file.tasks[idx], status: payload.status };\n    await saveTasks(taskPath, file);\n    ctx.broadcast({ type: 'tasks.updated', payload: { tasks: file.tasks } });\n    sendResult(ws, ctx, true, `Task \"${payload.id}\" marked ${payload.status}.`);\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\n// ── Plan ───────────────────────────────────────────────────────────────────────\n\nexport async function handlePlanGet(ctx: WorklistContext, ws: WebSocket): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath === 'string' && planPath) {\n    try {\n      const { loadPlan } = await import('@wrongstack/core');\n      const plan = await loadPlan(planPath);\n      ctx.send(ws, {\n        type: 'plan.updated',\n        payload: {\n          plan: plan ?? {\n            version: 1,\n            sessionId,\n            updatedAt: new Date().toISOString(),\n            items: [],\n          },\n        },\n      });\n    } catch {\n      ctx.send(ws, {\n        type: 'plan.updated',\n        payload: {\n          plan: {\n            version: 1,\n            sessionId,\n            updatedAt: new Date().toISOString(),\n            items: [],\n          },\n        },\n      });\n    }\n  } else {\n    ctx.send(ws, {\n      type: 'plan.updated',\n      payload: { plan: null, error: 'Plan storage is not configured for this session.' },\n    });\n  }\n}\n\nexport async function handlePlanTemplateUse(ctx: WorklistContext, ws: WebSocket, template: string): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath !== 'string' || !planPath) {\n    sendResult(ws, ctx, false, 'Plan storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { getPlanTemplate, loadPlan, savePlan, emptyPlan, addPlanItem } = await import('@wrongstack/core');\n    const tpl = getPlanTemplate(template);\n    if (!tpl) {\n      sendResult(ws, ctx, false, `Unknown template \"${template}\".`);\n      return;\n    }\n    let plan = (await loadPlan(planPath)) ?? emptyPlan(sessionId);\n    for (const item of tpl.items) {\n      ({ plan } = addPlanItem(plan, item.title, item.details));\n    }\n    await savePlan(planPath, plan);\n    sendResult(ws, ctx, true, `Applied template \"${tpl.name}\" — ${tpl.items.length} items added.`);\n    ctx.broadcast({ type: 'plan.updated', payload: { plan } });\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\nexport async function handlePlanItemUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { target: string; status: 'open' | 'in_progress' | 'done' },\n): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath !== 'string' || !planPath) {\n    sendResult(ws, ctx, false, 'Plan storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { mutatePlan, setPlanItemStatus } = await import('@wrongstack/core');\n    let changed = false;\n    const plan = await mutatePlan(planPath, sessionId, async (p) => {\n      const before = p.updatedAt;\n      const updated = setPlanItemStatus(p, payload.target, payload.status);\n      changed = updated.updatedAt !== before;\n      return updated;\n    });\n    if (!changed) {\n      sendResult(ws, ctx, false, `No plan item matched \"${payload.target}\".`);\n      return;\n    }\n    sendResult(ws, ctx, true, `Plan item status updated to \"${payload.status}\".`);\n    ctx.broadcast({ type: 'plan.updated', payload: { plan } });\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\n// ── Dispatcher ──────────────────────────────────────────────────────────────────\n// Single entry point for the nine worklist message types, so the host server's\n// switch delegates one grouped case here instead of repeating the per-type\n// `makeWorklistContext()` boilerplate. Unknown types are a no-op (the caller\n// only routes worklist types to this function).\n\n/** Loosely-typed worklist WS message — payload shapes are narrowed per case. */\nexport interface WorklistMessage {\n  type: string;\n  payload?: unknown;\n}\n\nexport async function handleWorklistMessage(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  msg: WorklistMessage,\n): Promise<void> {\n  switch (msg.type) {\n    case 'todos.get':\n      handleTodosGet(ctx, ws);\n      return;\n    case 'todos.clear':\n      handleTodosClear(ctx, ws);\n      return;\n    case 'todos.remove':\n      handleTodosRemove(ctx, ws, msg.payload as { id?: string; index?: number } | undefined);\n      return;\n    case 'todo.update':\n      handleTodoUpdate(\n        ctx,\n        ws,\n        msg.payload as { id: string; status?: TodoItem['status']; activeForm?: string },\n      );\n      return;\n    case 'tasks.get':\n      await handleTasksGet(ctx, ws);\n      return;\n    case 'task.update':\n      await handleTaskUpdate(\n        ctx,\n        ws,\n        msg.payload as {\n          id: string;\n          status: 'pending' | 'in_progress' | 'blocked' | 'failed' | 'review' | 'completed';\n        },\n      );\n      return;\n    case 'plan.get':\n      await handlePlanGet(ctx, ws);\n      return;\n    case 'plan.template_use': {\n      const parsed = validatePlanTemplateUsePayload(msg.payload);\n      if (!parsed.ok) {\n        sendResult(ws, ctx, false, parsed.message);\n        return;\n      }\n      await handlePlanTemplateUse(ctx, ws, parsed.value.template);\n      return;\n    }\n    case 'plan.item.update':\n      await handlePlanItemUpdate(\n        ctx,\n        ws,\n        msg.payload as { target: string; status: 'open' | 'in_progress' | 'done' },\n      );\n      return;\n  }\n}\n"],"mappings":";AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAgMO,SAAS,+BACd,SACiD;AACjD,MAAI,CAAC,SAAS,OAAO,GAAG;AACtB,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,SAAS;AAAA,IACX;AAAA,EACF;AACA,QAAM,WAAW,QAAQ,UAAU;AACnC,MAAI,OAAO,aAAa,YAAY,SAAS,KAAK,EAAE,WAAW,GAAG;AAChE,WAAO,EAAE,IAAI,OAAO,SAAS,gEAAgE;AAAA,EAC/F;AACA,SAAO,EAAE,IAAI,MAAM,OAAO,EAAE,SAAS,EAAE;AACzC;;;ACjMA,SAAS,WACP,IACA,KACA,IACA,SACM;AACN,MAAI,KAAK,IAAI,EAAE,MAAM,KAAK,OAAO,SAAS,QAAQ,CAAC;AACrD;AAwBO,SAAS,eAAe,KAAsB,IAAqB;AACxE,MAAI,KAAK,IAAI,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,IAAI,QAAQ,MAAM,EAAE,CAAC;AAC/E;AAEO,SAAS,iBAAiB,KAAsB,IAAqB;AAC1E,MAAI,eAAe,CAAC,CAAC;AACrB,MAAI,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACvC,aAAW,IAAI,KAAK,MAAM,qBAAqB;AACjD;AAEO,SAAS,kBACd,KACA,IACA,SACM;AACN,MAAI,CAAC,WAAY,QAAQ,OAAO,UAAa,QAAQ,UAAU,QAAY;AACzE,eAAW,IAAI,KAAK,OAAO,oCAAoC;AAC/D;AAAA,EACF;AACA,QAAM,OACJ,QAAQ,OAAO,SACX,IAAI,QAAQ,MAAM,OAAO,CAAC,MAAM,EAAE,OAAO,QAAQ,EAAE,IACnD,IAAI,QAAQ,MAAM,OAAO,CAAC,GAAG,MAAM,MAAO,QAAQ,KAAgB;AACxE,MAAI,eAAe,IAAI;AACvB,MAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,KAAK,EAAE,CAAC;AACjE,aAAW,IAAI,KAAK,MAAM,oBAAoB;AAChD;AAEO,SAAS,iBACd,KACA,IACA,SACM;AACN,QAAM,OAAO,IAAI,QAAQ,MAAM,KAAK,CAAC,MAAM,EAAE,OAAO,QAAQ,EAAE;AAC9D,MAAI,CAAC,MAAM;AACT,eAAW,IAAI,KAAK,OAAO,oBAAoB,QAAQ,EAAE,IAAI;AAC7D;AAAA,EACF;AACA,QAAM,OAAO,IAAI,QAAQ,MAAM;AAAA,IAAI,CAAC,MAClC,EAAE,OAAO,QAAQ,KACb,EAAE,GAAG,GAAG,GAAI,QAAQ,WAAW,UAAa,EAAE,QAAQ,QAAQ,OAAO,GAAI,GAAI,QAAQ,eAAe,UAAa,EAAE,YAAY,QAAQ,WAAW,EAAG,IACrJ;AAAA,EACN;AACA,MAAI,eAAe,IAAI;AACvB,MAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,KAAK,EAAE,CAAC;AACjE,aAAW,IAAI,KAAK,MAAM,SAAS,KAAK,OAAO,YAAY;AAC7D;AAIA,eAAsB,eAAe,KAAsB,IAA8B;AACvF,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,MAAI,OAAO,aAAa,YAAY,UAAU;AAC5C,QAAI;AACF,YAAM,EAAE,UAAU,IAAI,MAAM,OAAO,kBAAkB;AACrD,YAAM,OAAO,MAAM,UAAU,QAAQ;AACrC,UAAI,KAAK,IAAI,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,MAAM,SAAS,CAAC,EAAE,EAAE,CAAC;AAAA,IAC/E,QAAQ;AACN,UAAI,KAAK,IAAI,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;AAAA,IAChE;AAAA,EACF,OAAO;AACL,QAAI,KAAK,IAAI;AAAA,MACX,MAAM;AAAA,MACN,SAAS,EAAE,OAAO,CAAC,GAAG,OAAO,+BAA+B;AAAA,IAC9D,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,iBACpB,KACA,IACA,SAIe;AACf,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,MAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,eAAW,IAAI,KAAK,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,UAAM,EAAE,WAAW,UAAU,IAAI,MAAM,OAAO,kBAAkB;AAChE,UAAM,OAAO,MAAM,UAAU,QAAQ;AACrC,QAAI,CAAC,MAAM;AACT,iBAAW,IAAI,KAAK,OAAO,qBAAqB;AAChD;AAAA,IACF;AACA,UAAM,MAAM,KAAK,MAAM,UAAU,CAAC,MAAM,EAAE,OAAO,QAAQ,EAAE;AAC3D,QAAI,QAAQ,IAAI;AACd,iBAAW,IAAI,KAAK,OAAO,SAAS,QAAQ,EAAE,cAAc;AAC5D;AAAA,IACF;AACA,SAAK,MAAM,GAAG,IAAI,EAAE,GAAG,KAAK,MAAM,GAAG,GAAG,QAAQ,QAAQ,OAAO;AAC/D,UAAM,UAAU,UAAU,IAAI;AAC9B,QAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,KAAK,MAAM,EAAE,CAAC;AACvE,eAAW,IAAI,KAAK,MAAM,SAAS,QAAQ,EAAE,YAAY,QAAQ,MAAM,GAAG;AAAA,EAC5E,SAAS,KAAK;AACZ,eAAW,IAAI,KAAK,OAAO,OAAO,GAAG,CAAC;AAAA,EACxC;AACF;AAIA,eAAsB,cAAc,KAAsB,IAA8B;AACtF,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,QAAM,YAAY,IAAI,QAAQ,SAAS,MAAM;AAC7C,MAAI,OAAO,aAAa,YAAY,UAAU;AAC5C,QAAI;AACF,YAAM,EAAE,SAAS,IAAI,MAAM,OAAO,kBAAkB;AACpD,YAAM,OAAO,MAAM,SAAS,QAAQ;AACpC,UAAI,KAAK,IAAI;AAAA,QACX,MAAM;AAAA,QACN,SAAS;AAAA,UACP,MAAM,QAAQ;AAAA,YACZ,SAAS;AAAA,YACT;AAAA,YACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YAClC,OAAO,CAAC;AAAA,UACV;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH,QAAQ;AACN,UAAI,KAAK,IAAI;AAAA,QACX,MAAM;AAAA,QACN,SAAS;AAAA,UACP,MAAM;AAAA,YACJ,SAAS;AAAA,YACT;AAAA,YACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YAClC,OAAO,CAAC;AAAA,UACV;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF,OAAO;AACL,QAAI,KAAK,IAAI;AAAA,MACX,MAAM;AAAA,MACN,SAAS,EAAE,MAAM,MAAM,OAAO,mDAAmD;AAAA,IACnF,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,sBAAsB,KAAsB,IAAe,UAAiC;AAChH,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,QAAM,YAAY,IAAI,QAAQ,SAAS,MAAM;AAC7C,MAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,eAAW,IAAI,KAAK,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,UAAM,EAAE,iBAAiB,UAAU,UAAU,WAAW,YAAY,IAAI,MAAM,OAAO,kBAAkB;AACvG,UAAM,MAAM,gBAAgB,QAAQ;AACpC,QAAI,CAAC,KAAK;AACR,iBAAW,IAAI,KAAK,OAAO,qBAAqB,QAAQ,IAAI;AAC5D;AAAA,IACF;AACA,QAAI,OAAQ,MAAM,SAAS,QAAQ,KAAM,UAAU,SAAS;AAC5D,eAAW,QAAQ,IAAI,OAAO;AAC5B,OAAC,EAAE,KAAK,IAAI,YAAY,MAAM,KAAK,OAAO,KAAK,OAAO;AAAA,IACxD;AACA,UAAM,SAAS,UAAU,IAAI;AAC7B,eAAW,IAAI,KAAK,MAAM,qBAAqB,IAAI,IAAI,YAAO,IAAI,MAAM,MAAM,eAAe;AAC7F,QAAI,UAAU,EAAE,MAAM,gBAAgB,SAAS,EAAE,KAAK,EAAE,CAAC;AAAA,EAC3D,SAAS,KAAK;AACZ,eAAW,IAAI,KAAK,OAAO,OAAO,GAAG,CAAC;AAAA,EACxC;AACF;AAEA,eAAsB,qBACpB,KACA,IACA,SACe;AACf,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,QAAM,YAAY,IAAI,QAAQ,SAAS,MAAM;AAC7C,MAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,eAAW,IAAI,KAAK,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,UAAM,EAAE,YAAY,kBAAkB,IAAI,MAAM,OAAO,kBAAkB;AACzE,QAAI,UAAU;AACd,UAAM,OAAO,MAAM,WAAW,UAAU,WAAW,OAAO,MAAM;AAC9D,YAAM,SAAS,EAAE;AACjB,YAAM,UAAU,kBAAkB,GAAG,QAAQ,QAAQ,QAAQ,MAAM;AACnE,gBAAU,QAAQ,cAAc;AAChC,aAAO;AAAA,IACT,CAAC;AACD,QAAI,CAAC,SAAS;AACZ,iBAAW,IAAI,KAAK,OAAO,yBAAyB,QAAQ,MAAM,IAAI;AACtE;AAAA,IACF;AACA,eAAW,IAAI,KAAK,MAAM,gCAAgC,QAAQ,MAAM,IAAI;AAC5E,QAAI,UAAU,EAAE,MAAM,gBAAgB,SAAS,EAAE,KAAK,EAAE,CAAC;AAAA,EAC3D,SAAS,KAAK;AACZ,eAAW,IAAI,KAAK,OAAO,OAAO,GAAG,CAAC;AAAA,EACxC;AACF;AAcA,eAAsB,sBACpB,KACA,IACA,KACe;AACf,UAAQ,IAAI,MAAM;AAAA,IAChB,KAAK;AACH,qBAAe,KAAK,EAAE;AACtB;AAAA,IACF,KAAK;AACH,uBAAiB,KAAK,EAAE;AACxB;AAAA,IACF,KAAK;AACH,wBAAkB,KAAK,IAAI,IAAI,OAAsD;AACrF;AAAA,IACF,KAAK;AACH;AAAA,QACE;AAAA,QACA;AAAA,QACA,IAAI;AAAA,MACN;AACA;AAAA,IACF,KAAK;AACH,YAAM,eAAe,KAAK,EAAE;AAC5B;AAAA,IACF,KAAK;AACH,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA,IAAI;AAAA,MAIN;AACA;AAAA,IACF,KAAK;AACH,YAAM,cAAc,KAAK,EAAE;AAC3B;AAAA,IACF,KAAK,qBAAqB;AACxB,YAAM,SAAS,+BAA+B,IAAI,OAAO;AACzD,UAAI,CAAC,OAAO,IAAI;AACd,mBAAW,IAAI,KAAK,OAAO,OAAO,OAAO;AACzC;AAAA,MACF;AACA,YAAM,sBAAsB,KAAK,IAAI,OAAO,MAAM,QAAQ;AAC1D;AAAA,IACF;AAAA,IACA,KAAK;AACH,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA,IAAI;AAAA,MACN;AACA;AAAA,EACJ;AACF;","names":[]}
+{"version":3,"sources":["../../src/server/ws-payload-validation.ts","../../src/server/handlers/worklist-handlers.ts"],"sourcesContent":["export type PayloadValidationResult<T> = { ok: true; value: T } | { ok: false; message: string };\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nexport interface ModelSwitchPayload {\n  provider: string;\n  model: string;\n}\n\nexport function validateModelSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ModelSwitchPayload> {\n  if (!isRecord(payload)) {\n    return {\n      ok: false,\n      message: 'model.switch payload must be an object with string provider and model',\n    };\n  }\n  const provider = payload['provider'];\n  const model = payload['model'];\n  if (typeof provider !== 'string' || provider.trim().length === 0) {\n    return { ok: false, message: 'model.switch payload.provider must be a non-empty string' };\n  }\n  if (typeof model !== 'string' || model.trim().length === 0) {\n    return { ok: false, message: 'model.switch payload.model must be a non-empty string' };\n  }\n  return { ok: true, value: { provider, model } };\n}\n\nexport interface PrefsUpdatePayload {\n  prefs: Record<string, unknown>;\n}\n\nconst AUTONOMY_VALUES = new Set(['off', 'suggest', 'auto', 'eternal', 'eternal-parallel']);\n\nexport interface MailboxMessagesPayload {\n  limit?: number;\n  agentId?: string;\n  unreadOnly?: boolean;\n}\n\nexport function validateMailboxMessagesPayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxMessagesPayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.messages payload must be an object when provided' };\n  }\n  const limit = payload['limit'];\n  const agentId = payload['agentId'];\n  const unreadOnly = payload['unreadOnly'];\n  if (limit !== undefined && (typeof limit !== 'number' || !Number.isFinite(limit) || limit < 1)) {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.limit must be a positive number when provided',\n    };\n  }\n  if (agentId !== undefined && typeof agentId !== 'string') {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.agentId must be a string when provided',\n    };\n  }\n  if (unreadOnly !== undefined && typeof unreadOnly !== 'boolean') {\n    return {\n      ok: false,\n      message: 'mailbox.messages payload.unreadOnly must be a boolean when provided',\n    };\n  }\n  return { ok: true, value: { limit, agentId, unreadOnly } };\n}\n\nexport interface MailboxAgentsPayload {\n  onlineOnly?: boolean;\n}\n\nexport function validateMailboxAgentsPayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxAgentsPayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.agents payload must be an object when provided' };\n  }\n  const onlineOnly = payload['onlineOnly'];\n  if (onlineOnly !== undefined && typeof onlineOnly !== 'boolean') {\n    return {\n      ok: false,\n      message: 'mailbox.agents payload.onlineOnly must be a boolean when provided',\n    };\n  }\n  return { ok: true, value: { onlineOnly } };\n}\n\nexport interface MailboxPurgePayload {\n  completedMaxAgeMs?: number;\n  incompleteMaxAgeMs?: number;\n}\n\nexport function validateMailboxPurgePayload(\n  payload: unknown,\n): PayloadValidationResult<MailboxPurgePayload | undefined> {\n  if (payload === undefined) return { ok: true, value: undefined };\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mailbox.purge payload must be an object when provided' };\n  }\n  const completedMaxAgeMs = payload['completedMaxAgeMs'];\n  const incompleteMaxAgeMs = payload['incompleteMaxAgeMs'];\n  if (\n    completedMaxAgeMs !== undefined &&\n    (typeof completedMaxAgeMs !== 'number' ||\n      !Number.isFinite(completedMaxAgeMs) ||\n      completedMaxAgeMs < 0)\n  ) {\n    return {\n      ok: false,\n      message:\n        'mailbox.purge payload.completedMaxAgeMs must be a non-negative number when provided',\n    };\n  }\n  if (\n    incompleteMaxAgeMs !== undefined &&\n    (typeof incompleteMaxAgeMs !== 'number' ||\n      !Number.isFinite(incompleteMaxAgeMs) ||\n      incompleteMaxAgeMs < 0)\n  ) {\n    return {\n      ok: false,\n      message:\n        'mailbox.purge payload.incompleteMaxAgeMs must be a non-negative number when provided',\n    };\n  }\n  return { ok: true, value: { completedMaxAgeMs, incompleteMaxAgeMs } };\n}\n\nexport interface BrainRiskPayload {\n  level: string;\n}\n\nconst BRAIN_RISK_VALUES = new Set(['off', 'low', 'medium', 'high', 'all']);\n\nexport function validateBrainRiskPayload(\n  payload: unknown,\n): PayloadValidationResult<BrainRiskPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'brain.risk payload must be an object with string level' };\n  }\n  const level = payload['level'];\n  if (typeof level !== 'string' || !BRAIN_RISK_VALUES.has(level)) {\n    return {\n      ok: false,\n      message: 'brain.risk payload.level must be one of off, low, medium, high, all',\n    };\n  }\n  return { ok: true, value: { level } };\n}\n\nexport interface BrainAskPayload {\n  question: string;\n}\n\nexport function validateBrainAskPayload(\n  payload: unknown,\n): PayloadValidationResult<BrainAskPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'brain.ask payload must be an object with string question' };\n  }\n  const question = payload['question'];\n  if (typeof question !== 'string' || question.trim().length === 0) {\n    return { ok: false, message: 'brain.ask payload.question must be a non-empty string' };\n  }\n  return { ok: true, value: { question: question.trim() } };\n}\n\nexport interface AutonomySwitchPayload {\n  mode: string;\n}\n\nexport function validateAutonomySwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<AutonomySwitchPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'autonomy.switch payload must be an object with string mode' };\n  }\n  const mode = payload['mode'];\n  if (typeof mode !== 'string' || !AUTONOMY_VALUES.has(mode)) {\n    return { ok: false, message: 'autonomy.switch payload.mode must be a valid autonomy mode' };\n  }\n  return { ok: true, value: { mode } };\n}\n\nexport interface PlanTemplateUsePayload {\n  template: string;\n}\n\nexport function validatePlanTemplateUsePayload(\n  payload: unknown,\n): PayloadValidationResult<PlanTemplateUsePayload> {\n  if (!isRecord(payload)) {\n    return {\n      ok: false,\n      message: 'plan.template_use payload must be an object with string template',\n    };\n  }\n  const template = payload['template'];\n  if (typeof template !== 'string' || template.trim().length === 0) {\n    return { ok: false, message: 'plan.template_use payload.template must be a non-empty string' };\n  }\n  return { ok: true, value: { template } };\n}\nconst CONTEXT_STRATEGY_VALUES = new Set(['hybrid', 'intelligent', 'selective']);\nconst CONTEXT_MODE_VALUES = new Set(['balanced', 'frugal', 'deep', 'archival']);\nconst TOKEN_SAVING_TIER_VALUES = new Set(['off', 'minimal', 'light', 'medium', 'aggressive']);\nconst ENHANCE_LANGUAGE_VALUES = new Set(['original', 'english']);\nconst LOG_LEVEL_VALUES = new Set(['debug', 'info', 'warn', 'error']);\nconst AUDIT_LEVEL_VALUES = new Set(['minimal', 'standard', 'full']);\nconst REASONING_MODE_VALUES = new Set(['auto', 'on', 'off']);\nconst REASONING_EFFORT_VALUES = new Set([\n  'none',\n  'minimal',\n  'low',\n  'medium',\n  'high',\n  'xhigh',\n  'max',\n]);\nconst CACHE_TTL_VALUES = new Set(['default', '5m', '1h']);\n\nconst BOOLEAN_PREF_KEYS = new Set([\n  'yolo',\n  'chime',\n  'confirmExit',\n  'streamFleet',\n  'nextPrediction',\n  'titleAnimation',\n  'enhanceEnabled',\n  'featureMcp',\n  'featurePlugins',\n  'featureMemory',\n  'featureSkills',\n  'featureModelsRegistry',\n  'indexOnStart',\n  'contextAutoCompact',\n  'tgSessionEnd',\n  'tgDelegate',\n  'reasoningPreserve',\n  'hqEnabled',\n  'hqRawContent',\n  'fallbackAuto',\n  'favoriteModelsOnly',\n]);\n\n/** Keys whose value must be an array of strings (e.g. an ordered model list). */\nconst STRING_ARRAY_PREF_KEYS = new Set(['fallbackModels', 'favoriteModels']);\nconst STRING_ARRAY_RECORD_PREF_KEYS = new Set(['fallbackProfiles']);\nconst MODEL_MATRIX_PREF_KEYS = new Set(['modelMatrix']);\n\nconst NUMBER_PREF_KEYS = new Set([\n  'autonomyDelayMs',\n  'autoProceedMaxIterations',\n  'maxIterations',\n  'maxConcurrent',\n  'enhanceDelayMs',\n  'tgLongToolMs',\n]);\n\nconst STRING_PREF_KEYS = new Set(['hqUrl', 'hqToken']);\n\nconst ENUM_PREF_KEYS: Record<string, Set<string>> = {\n  autonomy: AUTONOMY_VALUES,\n  contextStrategy: CONTEXT_STRATEGY_VALUES,\n  contextMode: CONTEXT_MODE_VALUES,\n  tokenSavingTier: TOKEN_SAVING_TIER_VALUES,\n  enhanceLanguage: ENHANCE_LANGUAGE_VALUES,\n  logLevel: LOG_LEVEL_VALUES,\n  auditLevel: AUDIT_LEVEL_VALUES,\n  reasoningMode: REASONING_MODE_VALUES,\n  reasoningEffort: REASONING_EFFORT_VALUES,\n  cacheTtl: CACHE_TTL_VALUES,\n};\n\nfunction validatePreferenceValue(key: string, value: unknown): string | null {\n  if (BOOLEAN_PREF_KEYS.has(key)) {\n    return typeof value === 'boolean' ? null : `prefs.update payload.${key} must be a boolean`;\n  }\n  if (NUMBER_PREF_KEYS.has(key)) {\n    return typeof value === 'number' && Number.isFinite(value)\n      ? null\n      : `prefs.update payload.${key} must be a finite number`;\n  }\n  if (STRING_PREF_KEYS.has(key)) {\n    return typeof value === 'string' ? null : `prefs.update payload.${key} must be a string`;\n  }\n  if (STRING_ARRAY_PREF_KEYS.has(key)) {\n    return Array.isArray(value) && value.every((v) => typeof v === 'string')\n      ? null\n      : `prefs.update payload.${key} must be an array of strings`;\n  }\n  if (STRING_ARRAY_RECORD_PREF_KEYS.has(key)) {\n    return isRecord(value) &&\n      Object.values(value).every(\n        (v) => Array.isArray(v) && v.every((item) => typeof item === 'string'),\n      )\n      ? null\n      : `prefs.update payload.${key} must be an object of string arrays`;\n  }\n  if (MODEL_MATRIX_PREF_KEYS.has(key)) {\n    if (!isRecord(value)) return `prefs.update payload.${key} must be an object`;\n    for (const entry of Object.values(value)) {\n      if (!isRecord(entry)) return `prefs.update payload.${key} entries must be objects`;\n      const provider = entry['provider'];\n      const model = entry['model'];\n      const fallbackProfile = entry['fallbackProfile'];\n      if (provider !== undefined && typeof provider !== 'string') {\n        return `prefs.update payload.${key}.provider must be a string when provided`;\n      }\n      if (model !== undefined && typeof model !== 'string') {\n        return `prefs.update payload.${key}.model must be a string when provided`;\n      }\n      if (fallbackProfile !== undefined && typeof fallbackProfile !== 'string') {\n        return `prefs.update payload.${key}.fallbackProfile must be a string when provided`;\n      }\n      if (model === undefined && fallbackProfile === undefined) {\n        return `prefs.update payload.${key} entries require model or fallbackProfile`;\n      }\n    }\n    return null;\n  }\n  const allowed = ENUM_PREF_KEYS[key];\n  if (allowed) {\n    return typeof value === 'string' && allowed.has(value)\n      ? null\n      : `prefs.update payload.${key} must be one of: ${Array.from(allowed).join(', ')}`;\n  }\n  return `prefs.update payload contains unknown preference key: ${key}`;\n}\n\nexport function validatePrefsUpdatePayload(\n  payload: unknown,\n): PayloadValidationResult<PrefsUpdatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'prefs.update payload must be an object' };\n  }\n  for (const [key, value] of Object.entries(payload)) {\n    const error = validatePreferenceValue(key, value);\n    if (error) return { ok: false, message: error };\n  }\n  return { ok: true, value: { prefs: payload } };\n}\n\nexport interface SkillsCreatePayload {\n  name: string;\n  description: string;\n  scope: 'project' | 'global';\n}\n\nexport function validateSkillsCreatePayload(\n  payload: unknown,\n): PayloadValidationResult<SkillsCreatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'skills.create payload must be an object' };\n  }\n  const name = payload['name'];\n  const description = payload['description'];\n  const scope = payload['scope'];\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'Skill name is required' };\n  }\n  if (!/^[a-z0-9]+(-[a-z0-9]+)*$/.test(name.trim())) {\n    return { ok: false, message: 'Skill name must be kebab-case (e.g. my-new-skill)' };\n  }\n  if (typeof description !== 'string' || description.trim().length === 0) {\n    return { ok: false, message: 'Description/trigger is required' };\n  }\n  if (scope !== 'project' && scope !== 'global') {\n    return { ok: false, message: 'skills.create payload.scope must be project or global' };\n  }\n  return { ok: true, value: { name, description, scope } };\n}\n\nexport interface SkillsEditPayload {\n  name: string;\n  body: string;\n}\n\nexport function validateSkillsEditPayload(\n  payload: unknown,\n): PayloadValidationResult<SkillsEditPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'skills.edit payload must be an object' };\n  }\n  const name = payload['name'];\n  const body = payload['body'];\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'Skill name is required' };\n  }\n  if (typeof body !== 'string' || body.length === 0) {\n    return { ok: false, message: 'Skill body is required' };\n  }\n  return { ok: true, value: { name, body } };\n}\n\nexport interface ProcessKillPayload {\n  pid: number;\n}\n\nexport function validateProcessKillPayload(\n  payload: unknown,\n): PayloadValidationResult<ProcessKillPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'process.kill payload must be an object with numeric pid' };\n  }\n  const pid = payload['pid'];\n  if (typeof pid !== 'number' || !Number.isInteger(pid) || pid <= 0) {\n    return { ok: false, message: 'process.kill payload.pid must be a positive integer' };\n  }\n  return { ok: true, value: { pid } };\n}\n\nexport interface WorkingDirSetPayload {\n  path: string;\n}\n\nexport function validateWorkingDirSetPayload(\n  payload: unknown,\n): PayloadValidationResult<WorkingDirSetPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'working_dir.set payload must be an object with string path' };\n  }\n  const newPath = payload['path'];\n  if (typeof newPath !== 'string' || newPath.trim().length === 0) {\n    return { ok: false, message: 'working_dir.set payload.path must be a non-empty string' };\n  }\n  return { ok: true, value: { path: newPath } };\n}\n\nexport interface ModeSwitchPayload {\n  id: string;\n}\n\nexport function validateModeSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ModeSwitchPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'mode.switch payload must be an object with string id' };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'mode.switch payload.id must be a non-empty string' };\n  }\n  return { ok: true, value: { id } };\n}\n\nexport interface ContextModeIdPayload {\n  id: string;\n}\n\nfunction validateContextModeIdPayload(\n  payload: unknown,\n  type: 'context.mode.switch' | 'context.mode.delete',\n): PayloadValidationResult<ContextModeIdPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: `${type} payload must be an object with string id` };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: `${type} payload.id must be a non-empty string` };\n  }\n  return { ok: true, value: { id } };\n}\n\nexport function validateContextModeSwitchPayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeIdPayload> {\n  return validateContextModeIdPayload(payload, 'context.mode.switch');\n}\n\nexport function validateContextModeDeletePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeIdPayload> {\n  return validateContextModeIdPayload(payload, 'context.mode.delete');\n}\n\nexport interface ContextModeCreatePayload {\n  id: string;\n  name: string;\n  description: string;\n  thresholds: { warn: number; soft: number; hard: number };\n  preserveK: number;\n  eliseThreshold: number;\n}\n\nfunction isFiniteNumber(value: unknown): value is number {\n  return typeof value === 'number' && Number.isFinite(value);\n}\n\nexport function validateContextModeCreatePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeCreatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'context.mode.create payload must be an object' };\n  }\n  const id = payload['id'];\n  const name = payload['name'];\n  const description = payload['description'];\n  const thresholds = payload['thresholds'];\n  const preserveK = payload['preserveK'];\n  const eliseThreshold = payload['eliseThreshold'];\n\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'context.mode.create payload.id must be a non-empty string' };\n  }\n  if (typeof name !== 'string' || name.trim().length === 0) {\n    return { ok: false, message: 'context.mode.create payload.name must be a non-empty string' };\n  }\n  if (typeof description !== 'string') {\n    return { ok: false, message: 'context.mode.create payload.description must be a string' };\n  }\n  if (!isRecord(thresholds)) {\n    return {\n      ok: false,\n      message:\n        'context.mode.create payload.thresholds must be an object with warn/soft/hard numbers',\n    };\n  }\n  if (\n    !isFiniteNumber(thresholds['warn']) ||\n    !isFiniteNumber(thresholds['soft']) ||\n    !isFiniteNumber(thresholds['hard'])\n  ) {\n    return {\n      ok: false,\n      message: 'context.mode.create payload.thresholds.warn/soft/hard must be finite numbers',\n    };\n  }\n  if (!isFiniteNumber(preserveK)) {\n    return { ok: false, message: 'context.mode.create payload.preserveK must be a finite number' };\n  }\n  if (!isFiniteNumber(eliseThreshold)) {\n    return {\n      ok: false,\n      message: 'context.mode.create payload.eliseThreshold must be a finite number',\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      id,\n      name,\n      description,\n      thresholds: { warn: thresholds['warn'], soft: thresholds['soft'], hard: thresholds['hard'] },\n      preserveK,\n      eliseThreshold,\n    },\n  };\n}\n\nexport interface ContextModeUpdatePayload {\n  id: string;\n  name?: string;\n  description?: string;\n  thresholds?: { warn?: number; soft?: number; hard?: number };\n  preserveK?: number;\n  eliseThreshold?: number;\n}\n\nexport function validateContextModeUpdatePayload(\n  payload: unknown,\n): PayloadValidationResult<ContextModeUpdatePayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'context.mode.update payload must be an object' };\n  }\n  const id = payload['id'];\n  if (typeof id !== 'string' || id.trim().length === 0) {\n    return { ok: false, message: 'context.mode.update payload.id must be a non-empty string' };\n  }\n\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.name must be a string when provided',\n    };\n  }\n\n  const description = payload['description'];\n  if (description !== undefined && typeof description !== 'string') {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.description must be a string when provided',\n    };\n  }\n\n  const thresholds = payload['thresholds'];\n  let validatedThresholds: ContextModeUpdatePayload['thresholds'];\n  if (thresholds !== undefined) {\n    if (!isRecord(thresholds)) {\n      return {\n        ok: false,\n        message: 'context.mode.update payload.thresholds must be an object when provided',\n      };\n    }\n    for (const key of ['warn', 'soft', 'hard'] as const) {\n      const val = thresholds[key];\n      if (val !== undefined && !isFiniteNumber(val)) {\n        return {\n          ok: false,\n          message: `context.mode.update payload.thresholds.${key} must be a finite number when provided`,\n        };\n      }\n    }\n    validatedThresholds = {\n      warn: typeof thresholds['warn'] === 'number' ? thresholds['warn'] : undefined,\n      soft: typeof thresholds['soft'] === 'number' ? thresholds['soft'] : undefined,\n      hard: typeof thresholds['hard'] === 'number' ? thresholds['hard'] : undefined,\n    };\n  }\n\n  const preserveK = payload['preserveK'];\n  if (preserveK !== undefined && !isFiniteNumber(preserveK)) {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.preserveK must be a finite number when provided',\n    };\n  }\n\n  const eliseThreshold = payload['eliseThreshold'];\n  if (eliseThreshold !== undefined && !isFiniteNumber(eliseThreshold)) {\n    return {\n      ok: false,\n      message: 'context.mode.update payload.eliseThreshold must be a finite number when provided',\n    };\n  }\n\n  return {\n    ok: true,\n    value: {\n      id,\n      name: typeof name === 'string' ? name : undefined,\n      description: typeof description === 'string' ? description : undefined,\n      thresholds: validatedThresholds,\n      preserveK: typeof preserveK === 'number' ? preserveK : undefined,\n      eliseThreshold: typeof eliseThreshold === 'number' ? eliseThreshold : undefined,\n    },\n  };\n}\n\nexport interface ShellOpenPayload {\n  path: string;\n  target?: 'file' | 'terminal';\n}\n\nexport function validateShellOpenPayload(\n  payload: unknown,\n): PayloadValidationResult<ShellOpenPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'shell.open payload must be an object with string path' };\n  }\n  const path = payload['path'];\n  if (typeof path !== 'string' || path.trim().length === 0) {\n    return { ok: false, message: 'shell.open payload.path must be a non-empty string' };\n  }\n  const target = payload['target'];\n  if (target !== undefined && target !== 'file' && target !== 'terminal') {\n    return {\n      ok: false,\n      message: 'shell.open payload.target must be \"file\" or \"terminal\" when provided',\n    };\n  }\n  return { ok: true, value: { path, target: target as ShellOpenPayload['target'] } };\n}\n\nexport interface GitDiffPayload {\n  path: string;\n}\n\nexport function validateGitDiffPayload(payload: unknown): PayloadValidationResult<GitDiffPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'git.diff payload must be an object' };\n  }\n  const path = payload['path'];\n  if (path === undefined || path === null) {\n    return { ok: true, value: { path: '' } };\n  }\n  if (typeof path !== 'string') {\n    return { ok: false, message: 'git.diff payload.path must be a string when provided' };\n  }\n  return { ok: true, value: { path } };\n}\n\nexport interface ProjectsAddPayload {\n  root: string;\n  name?: string;\n}\n\nexport function validateProjectsAddPayload(\n  payload: unknown,\n): PayloadValidationResult<ProjectsAddPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'projects.add payload must be an object with string root' };\n  }\n  const root = payload['root'];\n  if (typeof root !== 'string' || root.trim().length === 0) {\n    return { ok: false, message: 'projects.add payload.root must be a non-empty string' };\n  }\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return { ok: false, message: 'projects.add payload.name must be a string when provided' };\n  }\n  return { ok: true, value: { root, name: typeof name === 'string' ? name : undefined } };\n}\n\nexport interface ProjectsSelectPayload {\n  root: string;\n  name?: string;\n}\n\nexport function validateProjectsSelectPayload(\n  payload: unknown,\n): PayloadValidationResult<ProjectsSelectPayload> {\n  if (!isRecord(payload)) {\n    return { ok: false, message: 'projects.select payload must be an object with string root' };\n  }\n  const root = payload['root'];\n  if (typeof root !== 'string' || root.trim().length === 0) {\n    return { ok: false, message: 'projects.select payload.root must be a non-empty string' };\n  }\n  const name = payload['name'];\n  if (name !== undefined && typeof name !== 'string') {\n    return { ok: false, message: 'projects.select payload.name must be a string when provided' };\n  }\n  return { ok: true, value: { root, name: typeof name === 'string' ? name : undefined } };\n}\n","// ── Shared Worklist Handlers ─────────────────────────────────────────────────\n// Extracted from standalone server (packages/webui/src/server/index.ts) and CLI\n// embedded server (packages/cli/src/webui-server/). Both servers use these\n// handlers for todos, tasks, and plan operations. Keep them in sync.\n//\n// Message types handled here:\n//   todos.get | todos.clear | todos.remove | todo.update\n//   tasks.get | task.update\n//   plan.get | plan.template_use | plan.item.update\n// ─────────────────────────────────────────────────────────────────────────────\n\nimport type { WebSocket } from 'ws';\nimport type { TodoItem } from '@wrongstack/core';\nimport { validatePlanTemplateUsePayload } from '../ws-payload-validation.js';\n\n// ── Shared result helper ───────────────────────────────────────────────────────\n\nfunction sendResult(\n  ws: WebSocket,\n  ctx: WorklistContext,\n  ok: boolean,\n  message: string,\n): void {\n  ctx.send(ws, { type: ok ? 'ok' : 'error', message });\n}\n\n// ── Context interface ─────────────────────────────────────────────────────────\n// Both servers satisfy this with their own local state.\n\nexport interface WorklistContext {\n  context: {\n    todos: TodoItem[];\n    meta: Record<string, unknown>;\n    session: { id: string } | null;\n    state?: unknown;\n  };\n  send: (ws: WebSocket, msg: object) => void;\n  broadcast: (msg: object) => void;\n  /**\n   * Optional mutator for in-memory todo state. Servers that manage live\n   * agent state (e.g. the CLI embedded server) provide this so handlers\n   * can update the agent's todo list directly. Standalone server may omit.\n   */\n  replaceTodos?: (todos: TodoItem[]) => void;\n}\n\n// ── Todos ─────────────────────────────────────────────────────────────────────\n\nexport function handleTodosGet(ctx: WorklistContext, ws: WebSocket): void {\n  ctx.send(ws, { type: 'todos.updated', payload: { todos: ctx.context.todos } });\n}\n\nexport function handleTodosClear(ctx: WorklistContext, ws: WebSocket): void {\n  ctx.replaceTodos?.([]);\n  ctx.broadcast({ type: 'todos.cleared' });\n  sendResult(ws, ctx, true, 'Todo board cleared.');\n}\n\nexport function handleTodosRemove(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { id?: string; index?: number } | undefined,\n): void {\n  if (!payload || (payload.id === undefined && payload.index === undefined)) {\n    sendResult(ws, ctx, false, 'todos.remove requires id or index.');\n    return;\n  }\n  const next =\n    payload.id !== undefined\n      ? ctx.context.todos.filter((t) => t.id !== payload.id)\n      : ctx.context.todos.filter((_, i) => i !== (payload.index as number));\n  ctx.replaceTodos?.(next);\n  ctx.broadcast({ type: 'todos.updated', payload: { todos: next } });\n  sendResult(ws, ctx, true, 'Todo item removed.');\n}\n\nexport function handleTodoUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { id: string; status?: TodoItem['status']; activeForm?: string },\n): void {\n  const todo = ctx.context.todos.find((t) => t.id === payload.id);\n  if (!todo) {\n    sendResult(ws, ctx, false, `No todo with id \"${payload.id}\".`);\n    return;\n  }\n  const next = ctx.context.todos.map((t) =>\n    t.id === payload.id\n      ? { ...t, ...(payload.status !== undefined && { status: payload.status }), ...(payload.activeForm !== undefined && { activeForm: payload.activeForm }) }\n      : t,\n  );\n  ctx.replaceTodos?.(next);\n  ctx.broadcast({ type: 'todos.updated', payload: { todos: next } });\n  sendResult(ws, ctx, true, `Todo \"${todo.content}\" updated.`);\n}\n\n// ── Tasks ─────────────────────────────────────────────────────────────────────\n\nexport async function handleTasksGet(ctx: WorklistContext, ws: WebSocket): Promise<void> {\n  const taskPath = ctx.context.meta['task.path'];\n  if (typeof taskPath === 'string' && taskPath) {\n    try {\n      const { loadTasks } = await import('@wrongstack/core');\n      const file = await loadTasks(taskPath);\n      ctx.send(ws, { type: 'tasks.updated', payload: { tasks: file?.tasks ?? [] } });\n    } catch {\n      ctx.send(ws, { type: 'tasks.updated', payload: { tasks: [] } });\n    }\n  } else {\n    ctx.send(ws, {\n      type: 'tasks.updated',\n      payload: { tasks: [], error: 'Task storage not configured.' },\n    });\n  }\n}\n\nexport async function handleTaskUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: {\n    id: string;\n    status: 'pending' | 'in_progress' | 'blocked' | 'failed' | 'review' | 'completed';\n  },\n): Promise<void> {\n  const taskPath = ctx.context.meta['task.path'];\n  if (typeof taskPath !== 'string' || !taskPath) {\n    sendResult(ws, ctx, false, 'Task storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { loadTasks, saveTasks } = await import('@wrongstack/core');\n    const file = await loadTasks(taskPath);\n    if (!file) {\n      sendResult(ws, ctx, false, 'No task file found.');\n      return;\n    }\n    const idx = file.tasks.findIndex((t) => t.id === payload.id);\n    if (idx === -1) {\n      sendResult(ws, ctx, false, `Task \"${payload.id}\" not found.`);\n      return;\n    }\n    file.tasks[idx] = { ...file.tasks[idx], status: payload.status };\n    await saveTasks(taskPath, file);\n    ctx.broadcast({ type: 'tasks.updated', payload: { tasks: file.tasks } });\n    sendResult(ws, ctx, true, `Task \"${payload.id}\" marked ${payload.status}.`);\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\n// ── Plan ───────────────────────────────────────────────────────────────────────\n\nexport async function handlePlanGet(ctx: WorklistContext, ws: WebSocket): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath === 'string' && planPath) {\n    try {\n      const { loadPlan } = await import('@wrongstack/core');\n      const plan = await loadPlan(planPath);\n      ctx.send(ws, {\n        type: 'plan.updated',\n        payload: {\n          plan: plan ?? {\n            version: 1,\n            sessionId,\n            updatedAt: new Date().toISOString(),\n            items: [],\n          },\n        },\n      });\n    } catch {\n      ctx.send(ws, {\n        type: 'plan.updated',\n        payload: {\n          plan: {\n            version: 1,\n            sessionId,\n            updatedAt: new Date().toISOString(),\n            items: [],\n          },\n        },\n      });\n    }\n  } else {\n    ctx.send(ws, {\n      type: 'plan.updated',\n      payload: { plan: null, error: 'Plan storage is not configured for this session.' },\n    });\n  }\n}\n\nexport async function handlePlanTemplateUse(ctx: WorklistContext, ws: WebSocket, template: string): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath !== 'string' || !planPath) {\n    sendResult(ws, ctx, false, 'Plan storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { getPlanTemplate, loadPlan, savePlan, emptyPlan, addPlanItem } = await import('@wrongstack/core');\n    const tpl = getPlanTemplate(template);\n    if (!tpl) {\n      sendResult(ws, ctx, false, `Unknown template \"${template}\".`);\n      return;\n    }\n    let plan = (await loadPlan(planPath)) ?? emptyPlan(sessionId);\n    for (const item of tpl.items) {\n      ({ plan } = addPlanItem(plan, item.title, item.details));\n    }\n    await savePlan(planPath, plan);\n    sendResult(ws, ctx, true, `Applied template \"${tpl.name}\" — ${tpl.items.length} items added.`);\n    ctx.broadcast({ type: 'plan.updated', payload: { plan } });\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\nexport async function handlePlanItemUpdate(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  payload: { target: string; status: 'open' | 'in_progress' | 'done' },\n): Promise<void> {\n  const planPath = ctx.context.meta['plan.path'];\n  const sessionId = ctx.context.session?.id ?? '';\n  if (typeof planPath !== 'string' || !planPath) {\n    sendResult(ws, ctx, false, 'Plan storage is not configured for this session.');\n    return;\n  }\n  try {\n    const { mutatePlan, setPlanItemStatus } = await import('@wrongstack/core');\n    let changed = false;\n    const plan = await mutatePlan(planPath, sessionId, async (p) => {\n      const before = p.updatedAt;\n      const updated = setPlanItemStatus(p, payload.target, payload.status);\n      changed = updated.updatedAt !== before;\n      return updated;\n    });\n    if (!changed) {\n      sendResult(ws, ctx, false, `No plan item matched \"${payload.target}\".`);\n      return;\n    }\n    sendResult(ws, ctx, true, `Plan item status updated to \"${payload.status}\".`);\n    ctx.broadcast({ type: 'plan.updated', payload: { plan } });\n  } catch (err) {\n    sendResult(ws, ctx, false, String(err));\n  }\n}\n\n// ── Dispatcher ──────────────────────────────────────────────────────────────────\n// Single entry point for the nine worklist message types, so the host server's\n// switch delegates one grouped case here instead of repeating the per-type\n// `makeWorklistContext()` boilerplate. Unknown types are a no-op (the caller\n// only routes worklist types to this function).\n\n/** Loosely-typed worklist WS message — payload shapes are narrowed per case. */\nexport interface WorklistMessage {\n  type: string;\n  payload?: unknown;\n}\n\nexport async function handleWorklistMessage(\n  ctx: WorklistContext,\n  ws: WebSocket,\n  msg: WorklistMessage,\n): Promise<void> {\n  switch (msg.type) {\n    case 'todos.get':\n      handleTodosGet(ctx, ws);\n      return;\n    case 'todos.clear':\n      handleTodosClear(ctx, ws);\n      return;\n    case 'todos.remove':\n      handleTodosRemove(ctx, ws, msg.payload as { id?: string; index?: number } | undefined);\n      return;\n    case 'todo.update':\n      handleTodoUpdate(\n        ctx,\n        ws,\n        msg.payload as { id: string; status?: TodoItem['status']; activeForm?: string },\n      );\n      return;\n    case 'tasks.get':\n      await handleTasksGet(ctx, ws);\n      return;\n    case 'task.update':\n      await handleTaskUpdate(\n        ctx,\n        ws,\n        msg.payload as {\n          id: string;\n          status: 'pending' | 'in_progress' | 'blocked' | 'failed' | 'review' | 'completed';\n        },\n      );\n      return;\n    case 'plan.get':\n      await handlePlanGet(ctx, ws);\n      return;\n    case 'plan.template_use': {\n      const parsed = validatePlanTemplateUsePayload(msg.payload);\n      if (!parsed.ok) {\n        sendResult(ws, ctx, false, parsed.message);\n        return;\n      }\n      await handlePlanTemplateUse(ctx, ws, parsed.value.template);\n      return;\n    }\n    case 'plan.item.update':\n      await handlePlanItemUpdate(\n        ctx,\n        ws,\n        msg.payload as { target: string; status: 'open' | 'in_progress' | 'done' },\n      );\n      return;\n  }\n}\n"],"mappings":";AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAgMO,SAAS,+BACd,SACiD;AACjD,MAAI,CAAC,SAAS,OAAO,GAAG;AACtB,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,SAAS;AAAA,IACX;AAAA,EACF;AACA,QAAM,WAAW,QAAQ,UAAU;AACnC,MAAI,OAAO,aAAa,YAAY,SAAS,KAAK,EAAE,WAAW,GAAG;AAChE,WAAO,EAAE,IAAI,OAAO,SAAS,gEAAgE;AAAA,EAC/F;AACA,SAAO,EAAE,IAAI,MAAM,OAAO,EAAE,SAAS,EAAE;AACzC;;;ACjMA,SAAS,WACP,IACA,KACA,IACA,SACM;AACN,MAAI,KAAK,IAAI,EAAE,MAAM,KAAK,OAAO,SAAS,QAAQ,CAAC;AACrD;AAwBO,SAAS,eAAe,KAAsB,IAAqB;AACxE,MAAI,KAAK,IAAI,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,IAAI,QAAQ,MAAM,EAAE,CAAC;AAC/E;AAEO,SAAS,iBAAiB,KAAsB,IAAqB;AAC1E,MAAI,eAAe,CAAC,CAAC;AACrB,MAAI,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACvC,aAAW,IAAI,KAAK,MAAM,qBAAqB;AACjD;AAEO,SAAS,kBACd,KACA,IACA,SACM;AACN,MAAI,CAAC,WAAY,QAAQ,OAAO,UAAa,QAAQ,UAAU,QAAY;AACzE,eAAW,IAAI,KAAK,OAAO,oCAAoC;AAC/D;AAAA,EACF;AACA,QAAM,OACJ,QAAQ,OAAO,SACX,IAAI,QAAQ,MAAM,OAAO,CAAC,MAAM,EAAE,OAAO,QAAQ,EAAE,IACnD,IAAI,QAAQ,MAAM,OAAO,CAAC,GAAG,MAAM,MAAO,QAAQ,KAAgB;AACxE,MAAI,eAAe,IAAI;AACvB,MAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,KAAK,EAAE,CAAC;AACjE,aAAW,IAAI,KAAK,MAAM,oBAAoB;AAChD;AAEO,SAAS,iBACd,KACA,IACA,SACM;AACN,QAAM,OAAO,IAAI,QAAQ,MAAM,KAAK,CAAC,MAAM,EAAE,OAAO,QAAQ,EAAE;AAC9D,MAAI,CAAC,MAAM;AACT,eAAW,IAAI,KAAK,OAAO,oBAAoB,QAAQ,EAAE,IAAI;AAC7D;AAAA,EACF;AACA,QAAM,OAAO,IAAI,QAAQ,MAAM;AAAA,IAAI,CAAC,MAClC,EAAE,OAAO,QAAQ,KACb,EAAE,GAAG,GAAG,GAAI,QAAQ,WAAW,UAAa,EAAE,QAAQ,QAAQ,OAAO,GAAI,GAAI,QAAQ,eAAe,UAAa,EAAE,YAAY,QAAQ,WAAW,EAAG,IACrJ;AAAA,EACN;AACA,MAAI,eAAe,IAAI;AACvB,MAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,KAAK,EAAE,CAAC;AACjE,aAAW,IAAI,KAAK,MAAM,SAAS,KAAK,OAAO,YAAY;AAC7D;AAIA,eAAsB,eAAe,KAAsB,IAA8B;AACvF,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,MAAI,OAAO,aAAa,YAAY,UAAU;AAC5C,QAAI;AACF,YAAM,EAAE,UAAU,IAAI,MAAM,OAAO,kBAAkB;AACrD,YAAM,OAAO,MAAM,UAAU,QAAQ;AACrC,UAAI,KAAK,IAAI,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,MAAM,SAAS,CAAC,EAAE,EAAE,CAAC;AAAA,IAC/E,QAAQ;AACN,UAAI,KAAK,IAAI,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;AAAA,IAChE;AAAA,EACF,OAAO;AACL,QAAI,KAAK,IAAI;AAAA,MACX,MAAM;AAAA,MACN,SAAS,EAAE,OAAO,CAAC,GAAG,OAAO,+BAA+B;AAAA,IAC9D,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,iBACpB,KACA,IACA,SAIe;AACf,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,MAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,eAAW,IAAI,KAAK,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,UAAM,EAAE,WAAW,UAAU,IAAI,MAAM,OAAO,kBAAkB;AAChE,UAAM,OAAO,MAAM,UAAU,QAAQ;AACrC,QAAI,CAAC,MAAM;AACT,iBAAW,IAAI,KAAK,OAAO,qBAAqB;AAChD;AAAA,IACF;AACA,UAAM,MAAM,KAAK,MAAM,UAAU,CAAC,MAAM,EAAE,OAAO,QAAQ,EAAE;AAC3D,QAAI,QAAQ,IAAI;AACd,iBAAW,IAAI,KAAK,OAAO,SAAS,QAAQ,EAAE,cAAc;AAC5D;AAAA,IACF;AACA,SAAK,MAAM,GAAG,IAAI,EAAE,GAAG,KAAK,MAAM,GAAG,GAAG,QAAQ,QAAQ,OAAO;AAC/D,UAAM,UAAU,UAAU,IAAI;AAC9B,QAAI,UAAU,EAAE,MAAM,iBAAiB,SAAS,EAAE,OAAO,KAAK,MAAM,EAAE,CAAC;AACvE,eAAW,IAAI,KAAK,MAAM,SAAS,QAAQ,EAAE,YAAY,QAAQ,MAAM,GAAG;AAAA,EAC5E,SAAS,KAAK;AACZ,eAAW,IAAI,KAAK,OAAO,OAAO,GAAG,CAAC;AAAA,EACxC;AACF;AAIA,eAAsB,cAAc,KAAsB,IAA8B;AACtF,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,QAAM,YAAY,IAAI,QAAQ,SAAS,MAAM;AAC7C,MAAI,OAAO,aAAa,YAAY,UAAU;AAC5C,QAAI;AACF,YAAM,EAAE,SAAS,IAAI,MAAM,OAAO,kBAAkB;AACpD,YAAM,OAAO,MAAM,SAAS,QAAQ;AACpC,UAAI,KAAK,IAAI;AAAA,QACX,MAAM;AAAA,QACN,SAAS;AAAA,UACP,MAAM,QAAQ;AAAA,YACZ,SAAS;AAAA,YACT;AAAA,YACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YAClC,OAAO,CAAC;AAAA,UACV;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH,QAAQ;AACN,UAAI,KAAK,IAAI;AAAA,QACX,MAAM;AAAA,QACN,SAAS;AAAA,UACP,MAAM;AAAA,YACJ,SAAS;AAAA,YACT;AAAA,YACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YAClC,OAAO,CAAC;AAAA,UACV;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF,OAAO;AACL,QAAI,KAAK,IAAI;AAAA,MACX,MAAM;AAAA,MACN,SAAS,EAAE,MAAM,MAAM,OAAO,mDAAmD;AAAA,IACnF,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,sBAAsB,KAAsB,IAAe,UAAiC;AAChH,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,QAAM,YAAY,IAAI,QAAQ,SAAS,MAAM;AAC7C,MAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,eAAW,IAAI,KAAK,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,UAAM,EAAE,iBAAiB,UAAU,UAAU,WAAW,YAAY,IAAI,MAAM,OAAO,kBAAkB;AACvG,UAAM,MAAM,gBAAgB,QAAQ;AACpC,QAAI,CAAC,KAAK;AACR,iBAAW,IAAI,KAAK,OAAO,qBAAqB,QAAQ,IAAI;AAC5D;AAAA,IACF;AACA,QAAI,OAAQ,MAAM,SAAS,QAAQ,KAAM,UAAU,SAAS;AAC5D,eAAW,QAAQ,IAAI,OAAO;AAC5B,OAAC,EAAE,KAAK,IAAI,YAAY,MAAM,KAAK,OAAO,KAAK,OAAO;AAAA,IACxD;AACA,UAAM,SAAS,UAAU,IAAI;AAC7B,eAAW,IAAI,KAAK,MAAM,qBAAqB,IAAI,IAAI,YAAO,IAAI,MAAM,MAAM,eAAe;AAC7F,QAAI,UAAU,EAAE,MAAM,gBAAgB,SAAS,EAAE,KAAK,EAAE,CAAC;AAAA,EAC3D,SAAS,KAAK;AACZ,eAAW,IAAI,KAAK,OAAO,OAAO,GAAG,CAAC;AAAA,EACxC;AACF;AAEA,eAAsB,qBACpB,KACA,IACA,SACe;AACf,QAAM,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7C,QAAM,YAAY,IAAI,QAAQ,SAAS,MAAM;AAC7C,MAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,eAAW,IAAI,KAAK,OAAO,kDAAkD;AAC7E;AAAA,EACF;AACA,MAAI;AACF,UAAM,EAAE,YAAY,kBAAkB,IAAI,MAAM,OAAO,kBAAkB;AACzE,QAAI,UAAU;AACd,UAAM,OAAO,MAAM,WAAW,UAAU,WAAW,OAAO,MAAM;AAC9D,YAAM,SAAS,EAAE;AACjB,YAAM,UAAU,kBAAkB,GAAG,QAAQ,QAAQ,QAAQ,MAAM;AACnE,gBAAU,QAAQ,cAAc;AAChC,aAAO;AAAA,IACT,CAAC;AACD,QAAI,CAAC,SAAS;AACZ,iBAAW,IAAI,KAAK,OAAO,yBAAyB,QAAQ,MAAM,IAAI;AACtE;AAAA,IACF;AACA,eAAW,IAAI,KAAK,MAAM,gCAAgC,QAAQ,MAAM,IAAI;AAC5E,QAAI,UAAU,EAAE,MAAM,gBAAgB,SAAS,EAAE,KAAK,EAAE,CAAC;AAAA,EAC3D,SAAS,KAAK;AACZ,eAAW,IAAI,KAAK,OAAO,OAAO,GAAG,CAAC;AAAA,EACxC;AACF;AAcA,eAAsB,sBACpB,KACA,IACA,KACe;AACf,UAAQ,IAAI,MAAM;AAAA,IAChB,KAAK;AACH,qBAAe,KAAK,EAAE;AACtB;AAAA,IACF,KAAK;AACH,uBAAiB,KAAK,EAAE;AACxB;AAAA,IACF,KAAK;AACH,wBAAkB,KAAK,IAAI,IAAI,OAAsD;AACrF;AAAA,IACF,KAAK;AACH;AAAA,QACE;AAAA,QACA;AAAA,QACA,IAAI;AAAA,MACN;AACA;AAAA,IACF,KAAK;AACH,YAAM,eAAe,KAAK,EAAE;AAC5B;AAAA,IACF,KAAK;AACH,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA,IAAI;AAAA,MAIN;AACA;AAAA,IACF,KAAK;AACH,YAAM,cAAc,KAAK,EAAE;AAC3B;AAAA,IACF,KAAK,qBAAqB;AACxB,YAAM,SAAS,+BAA+B,IAAI,OAAO;AACzD,UAAI,CAAC,OAAO,IAAI;AACd,mBAAW,IAAI,KAAK,OAAO,OAAO,OAAO;AACzC;AAAA,MACF;AACA,YAAM,sBAAsB,KAAK,IAAI,OAAO,MAAM,QAAQ;AAC1D;AAAA,IACF;AAAA,IACA,KAAK;AACH,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA,IAAI;AAAA,MACN;AACA;AAAA,EACJ;AACF;","names":[]}

package/dist/server/index.d.ts

@@ -1,5 +1,5 @@
 import { WebSocket } from 'ws';
-import { Agent, EventBus, SessionStore, ToolRegistry, ModelsRegistry, ConfigStore, SecretVault, JournalEntry, Logger, Provider, Tool, Context, MemoryStore, ProviderConfig, ProviderApiKey, SddInterviewDriver, AgentFactory, BrainArbiter, SkillLoader } from '@wrongstack/core';
+import { Agent, EventBus, SessionStore, ToolRegistry, ModelsRegistry, ConfigStore, SecretVault, JournalEntry, Logger, Provider, Tool, Context, MemoryStore, ProviderConfig, ProviderApiKey, SddInterviewDriver, AgentFactory, BrainArbiter, SkillLoader, PromptLoader, PromptUsageStore } from '@wrongstack/core';
 import * as http from 'node:http';
 import { MCPRegistry } from '@wrongstack/mcp';
 import { SkillInstaller } from '@wrongstack/core/skills';
@@ -223,6 +223,11 @@ declare function browserOpenCommand(url: string, platform?: NodeJS.Platform): {
  *  process so it survives kill/killAll. Never throws. */
 declare function openBrowser(url: string, platform?: NodeJS.Platform): void;
 
+interface WorktreeManagementDeps {
+    projectRoot: string;
+    /** Board snapshot dir — powers the cross-process liveness guard on cleanup. */
+    boardsDir: string;
+}
 /**
  * WorktreeWebSocketHandler — mirrors AutoPhaseWebSocketHandler. Subscribes to
  * the shared EventBus `worktree.*` lifecycle events, keeps a live snapshot of
@@ -233,14 +238,44 @@ declare function openBrowser(url: string, platform?: NodeJS.Platform): void;
 declare class WorktreeWebSocketHandler {
     private readonly events;
     private readonly logger;
+    private readonly management?;
     private readonly clients;
     private readonly handles;
     private baseBranch;
     private broadcastInterval;
     private readonly offs;
-    constructor(events: EventBus, logger: Logger);
+    constructor(events: EventBus, logger: Logger, management?: WorktreeManagementDeps | undefined);
     addClient(ws: WebSocket): void;
+    /** Handle worktree-panel control messages (scan / clean / per-row ops). */
+    handleMessage(msg: {
+        type: string;
+        payload?: Record<string, unknown>;
+    }): Promise<boolean>;
     dispose(): void;
+    /** Absolute managed-worktrees root for this project. */
+    private worktreesRoot;
+    /** True iff `dir` resolves strictly inside the managed worktrees root. */
+    private underRoot;
+    /** Branches of worktrees a live in-session run currently owns. */
+    private liveActiveBranches;
+    /**
+     * Scan the disk for managed worktrees/branches NOT owned by a live in-session
+     * run and broadcast them as orphans, with whether it is safe to clean now.
+     * No-op (empty inventory) when management deps were not wired.
+     */
+    private scanAndBroadcast;
+    /**
+     * Force-remove every orphaned worktree + branch. Refused while a run is live —
+     * in this session (active handles) OR another process (the SDD board liveness
+     * guard inside cleanupStaleSddWorktrees). Best-effort; reports the outcome.
+     */
+    private cleanupOrphans;
+    /** Remove/discard ONE worktree + branch. Refused while a live run owns it. */
+    private removeOne;
+    /** Squash-merge ONE branch into base. Refused while a live run owns it. */
+    private mergeBranch;
+    /** Compact change summary for one worktree checkout. */
+    private diffOne;
     private subscribe;
     private upsert;
     private patch;
@@ -891,6 +926,16 @@ interface SddBoardWSMessage {
     type: string;
     payload?: Record<string, unknown>;
 }
+/** Project paths the handler needs to apply lifecycle ops directly. */
+interface SddBoardLifecycleDeps {
+    projectRoot: string;
+    paths: {
+        projectSpecs: string;
+        projectTaskGraphs: string;
+        projectSddSession: string;
+        projectSddBoards: string;
+    };
+}
 /**
  * SddBoardWebSocketHandler — streams the live SDD multi-agent board to clients
  * and relays control commands back to the CLI-owned run.
@@ -908,12 +953,20 @@ interface SddBoardWSMessage {
 declare class SddBoardWebSocketHandler {
     private readonly store;
     private readonly clients;
+    private readonly lifecycle?;
     private latest;
     private poll;
     private unsub;
-    constructor(boardsDir: string, events?: EventBus);
+    constructor(boardsDir: string, events?: EventBus, lifecycle?: SddBoardLifecycleDeps);
     addClient(ws: WebSocket): void;
     handleMessage(msg: SddBoardWSMessage): Promise<void>;
+    /**
+     * Apply a cleanup/rollback/destroy from disk and broadcast a structured
+     * `sdd.board.lifecycle_result`. Refuses (no-op) while a run is still active —
+     * the user must stop it first; the UI gates the buttons on `!active` and the
+     * Destroy flow auto-stops then waits before sending `destroy`.
+     */
+    private applyLifecycle;
     dispose(): void;
     private pollLatest;
     private sendCurrent;
@@ -1075,6 +1128,82 @@ declare function handleSkillsEdit(ws: WebSocket, ctx: SkillsContext, msg: unknow
  */
 declare function handleSkillsExport(ws: WebSocket, ctx: SkillsContext): Promise<void>;
 
+/**
+ * Shared prompt-library WebSocket handlers for BOTH the standalone WebUI server
+ * (`packages/webui/src/server/index.ts`) and the CLI's `--webui` embedded server
+ * (`packages/cli/src/webui-server.ts`). One source of truth so the two servers
+ * never drift (the lesson from skills-handlers).
+ *
+ * Each function handles one request→response cycle; callers drop them into their
+ * switch:
+ *
+ *   case 'prompts.search': return handlePromptsSearch(ws, promptsCtx, msg);
+ *
+ * The prompt library is read across three layers (builtin + user + project) by
+ * the injected `PromptLoader`; writes (create/favorite) go to the user layer
+ * with copy-on-write for builtins. Treat synced/builtin content as DATA — these
+ * handlers never execute it; the client inserts a chosen prompt into the chat
+ * input as an ordinary user turn.
+ */
+
+interface PromptsContext {
+    /** Backs all prompt ops. Absent ⇒ feature unavailable. */
+    promptLoader: PromptLoader | undefined;
+    /** Records per-slug insert counts (shared with CLI `/prompt recent`). */
+    promptUsage?: PromptUsageStore | undefined;
+}
+declare function handlePromptsList(ws: WSLike, ctx: PromptsContext): Promise<void>;
+declare function handlePromptsSearch(ws: WSLike, ctx: PromptsContext, msg: unknown): Promise<void>;
+declare function handlePromptsContent(ws: WSLike, ctx: PromptsContext, msg: unknown): Promise<void>;
+declare function handlePromptsFavorite(ws: WSLike, ctx: PromptsContext, msg: unknown): Promise<void>;
+declare function handlePromptsCreate(ws: WSLike, ctx: PromptsContext, msg: unknown): Promise<void>;
+/** Record that a prompt was inserted (best-effort; feeds CLI `/prompt recent`). */
+declare function handlePromptsUsed(ws: WSLike, ctx: PromptsContext, msg: unknown): Promise<void>;
+/** Return recently-inserted prompt slugs (most-recent first) for the modal's Recent view. */
+declare function handlePromptsRecent(ws: WSLike, ctx: PromptsContext): Promise<void>;
+/** Minimal structural type for the ws.send sink (matches `ws` WebSocket). */
+type WSLike = Parameters<typeof send>[0];
+
+/**
+ * Shared Design Studio WebSocket handlers for both the standalone WebUI server
+ * (`packages/webui/src/server/index.ts`) and the CLI's `--webui` embedded
+ * server (`packages/cli/src/webui-server.ts`). One source of truth keeps the two
+ * servers at parity (enforced by ws-handler-parity.test.ts).
+ *
+ *   case 'design.list':        return handleDesignList(ws, designCtx);
+ *   case 'design.use':         return handleDesignUse(ws, designCtx, msg);
+ *   case 'design.state':       return handleDesignState(ws, designCtx);
+ *   case 'design.set':         return handleDesignSet(ws, designCtx, msg);
+ *   case 'design.materialize': return handleDesignMaterialize(ws, designCtx, msg);
+ *
+ * Browsing + customization of curated UI design kits; `design.use` pins the
+ * active kit, `design.set` records color/token overrides, `design.materialize`
+ * writes the (override-applied) tokens to a real theme file on disk.
+ */
+
+interface DesignContext {
+    projectRoot: string;
+    /** Live agent context whose `meta.designStudio` we read/pin. Optional. */
+    agentMeta?: {
+        meta: Record<string, unknown>;
+    } | undefined;
+}
+declare function handleDesignList(ws: WebSocket, ctx: DesignContext): Promise<void>;
+declare function handleDesignState(ws: WebSocket, ctx: DesignContext): Promise<void>;
+declare function handleDesignUse(ws: WebSocket, ctx: DesignContext, msg: {
+    payload?: unknown;
+}): Promise<void>;
+/** Record structured color/token overrides without changing the pinned kit. */
+declare function handleDesignSet(ws: WebSocket, ctx: DesignContext, msg: {
+    payload?: unknown;
+}): Promise<void>;
+/** Write the active kit's (override-applied) tokens to a real theme file. */
+declare function handleDesignMaterialize(ws: WebSocket, ctx: DesignContext, msg: {
+    payload?: unknown;
+}): Promise<void>;
+/** Scan project UI files for off-palette colors against the active kit. */
+declare function handleDesignVerify(ws: WebSocket, ctx: DesignContext): Promise<void>;
+
 declare function startWebUI(opts?: WebUIOptions & {
     wsPort?: number | undefined;
     wsHost?: string | undefined;
@@ -1086,4 +1215,4 @@ declare function startWebUI(opts?: WebUIOptions & {
     open?: boolean | undefined;
 }): Promise<void>;
 
-export { AutoPhaseWebSocketHandler, type BackendServices, type CompletionHandlerOptions, type CompletionItemKind, type CompletionSuggestion, type ConnectedClient, type ContextBreakdown, type CreateHttpServerOptions, type CustomContextMode, type CustomModeStore, type EternalBroadcast, type EternalSubscribe, type EternalSubscription, type KeyOpResult, type LspCompletionSource, type LspCompletionSourceRequest, type MessageTokenEntry, type ProvidersRecord, SddBoardWebSocketHandler, type SddWizardDeps, SddWizardWebSocketHandler, type SddWizardWiringOptions, type ShellOpenRequest, type ShellOpenResult, type ShellOpenTarget, type SkillsContext, SpecsWebSocketHandler, type ToolTokenEntry, type VerifyClientInput, type WSClientMessage, type WSServerMessage, type WebUIInstanceRecord, type WebUIOptions, WorktreeWebSocketHandler, addProvider, broadcast, browserOpenCommand, buildCspHeader, buildSddWizardDeps, buildWebUIAccessUrl, createCustomModeStore, createEternalSubscription, createHttpServer, createProviderConfigIO, createToolLspCompletionSource, defaultBaseDir, deleteKey, envFlag, errMessage, estimateTokens, extractToken, findFreePort, formatInstances, generateAuthToken, handleCompletionRequest, handleFilesList, handleFilesRead, handleFilesTree, handleFilesWrite, handleGitChanges, handleGitDiff, handleGitInfo, handleMcpAdd, handleMcpDisable, handleMcpDiscover, handleMcpEnable, handleMcpList, handleMcpRemove, handleMcpRestart, handleMcpSleep, handleMcpUpdate, handleMcpWake, handleMemoryForget, handleMemoryList, handleMemoryRemember, handleShellOpen, handleSkillsContent, handleSkillsCreate, handleSkillsEdit, handleSkillsExport, handleSkillsInstall, handleSkillsUninstall, handleSkillsUpdate, hostForBrowserUrl, hostHeaderOk, injectWsPort, isLoopbackBind, isLoopbackHostname, isPortFree, listInstances, loadSavedProviders, maskedKey, messagePreview, messageTokens, normalizeKeys, openBrowser, registerInstance, registryPath, removeProvider, resolveAuthToken, saveProviders, send, sendResult, setActiveKey, startWebUI, stringifyContent, tokenMatches, unregisterInstance, upsertKey, verifyClient, writeKeysBack };
+export { AutoPhaseWebSocketHandler, type BackendServices, type CompletionHandlerOptions, type CompletionItemKind, type CompletionSuggestion, type ConnectedClient, type ContextBreakdown, type CreateHttpServerOptions, type CustomContextMode, type CustomModeStore, type DesignContext, type EternalBroadcast, type EternalSubscribe, type EternalSubscription, type KeyOpResult, type LspCompletionSource, type LspCompletionSourceRequest, type MessageTokenEntry, type PromptsContext, type ProvidersRecord, SddBoardWebSocketHandler, type SddWizardDeps, SddWizardWebSocketHandler, type SddWizardWiringOptions, type ShellOpenRequest, type ShellOpenResult, type ShellOpenTarget, type SkillsContext, SpecsWebSocketHandler, type ToolTokenEntry, type VerifyClientInput, type WSClientMessage, type WSServerMessage, type WebUIInstanceRecord, type WebUIOptions, WorktreeWebSocketHandler, addProvider, broadcast, browserOpenCommand, buildCspHeader, buildSddWizardDeps, buildWebUIAccessUrl, createCustomModeStore, createEternalSubscription, createHttpServer, createProviderConfigIO, createToolLspCompletionSource, defaultBaseDir, deleteKey, envFlag, errMessage, estimateTokens, extractToken, findFreePort, formatInstances, generateAuthToken, handleCompletionRequest, handleDesignList, handleDesignMaterialize, handleDesignSet, handleDesignState, handleDesignUse, handleDesignVerify, handleFilesList, handleFilesRead, handleFilesTree, handleFilesWrite, handleGitChanges, handleGitDiff, handleGitInfo, handleMcpAdd, handleMcpDisable, handleMcpDiscover, handleMcpEnable, handleMcpList, handleMcpRemove, handleMcpRestart, handleMcpSleep, handleMcpUpdate, handleMcpWake, handleMemoryForget, handleMemoryList, handleMemoryRemember, handlePromptsContent, handlePromptsCreate, handlePromptsFavorite, handlePromptsList, handlePromptsRecent, handlePromptsSearch, handlePromptsUsed, handleShellOpen, handleSkillsContent, handleSkillsCreate, handleSkillsEdit, handleSkillsExport, handleSkillsInstall, handleSkillsUninstall, handleSkillsUpdate, hostForBrowserUrl, hostHeaderOk, injectWsPort, isLoopbackBind, isLoopbackHostname, isPortFree, listInstances, loadSavedProviders, maskedKey, messagePreview, messageTokens, normalizeKeys, openBrowser, registerInstance, registryPath, removeProvider, resolveAuthToken, saveProviders, send, sendResult, setActiveKey, startWebUI, stringifyContent, tokenMatches, unregisterInstance, upsertKey, verifyClient, writeKeysBack };