@wrongstack/webui 1.0.1 → 1.0.4

package/dist/lib/bug-hunt-message.d.ts

@@ -1,7 +1,10 @@
 export interface BugHuntSummary {
     scope: string;
     maxBugs: 1 | 2 | 3;
+    currentRound: number;
 }
+/** The compact user turn for rounds after the full builtin prompt. */
+export declare function buildBugHuntContinuation(summary: BugHuntSummary): string;
 /** Adds durable display metadata without changing the instruction sent to the agent. */
 export declare function buildBugHuntMessage(instruction: string, summary: BugHuntSummary): string;
 /** Recognizes a persisted Bug Hunter run and recovers its compact display data. */

package/dist/lib/view-navigation.d.ts

@@ -8,7 +8,7 @@ export type PanelMainView = 'chat' | 'files' | 'skill' | 'changes' | 'mailbox' |
  * A standalone main view with its own activity-bar icon (or a slot in the "…"
  * utilities menu). Selecting one collapses the side panel.
  */
-export type MainView = 'goal' | 'kanban' | 'sddhub' | 'settings' | 'memory' | 'roster' | 'codemap' | 'techstack' | 'chronicle' | 'intake' | 'prompts' | 'chimera';
+export type MainView = 'goal' | 'kanban' | 'sddhub' | 'settings' | 'memory' | 'roster' | 'codemap' | 'techstack' | 'chronicle' | 'intake' | 'prompts' | 'chimera' | 'history';
 /**
  * A view with no bar affordance at all — reached from the command palette, a
  * deep link, or another view's action. Diagnostics and drill-downs live here.

package/dist/lib/ws-client-domain-methods.d.ts

@@ -11,11 +11,28 @@ interface WsClientDomainHost {
 declare const domainMethods: {
     getGitInfo(this: WsClientDomainHost): void;
     getGitChanges(this: WsClientDomainHost): void;
+    getGitHistory(this: WsClientDomainHost, options?: {
+        ref?: string | undefined;
+        limit?: number | undefined;
+        skip?: number | undefined;
+    }): void;
+    getGitCommitDetail(this: WsClientDomainHost, hash: string): void;
+    getGitCommitFileDiff(this: WsClientDomainHost, hash: string, path: string, previousPath?: string): void;
     getGitDiff(this: WsClientDomainHost, path: string): void;
     stageGit(this: WsClientDomainHost, paths: string | string[]): void;
     unstageGit(this: WsClientDomainHost, paths: string | string[]): void;
     discardGit(this: WsClientDomainHost, paths: string | string[]): void;
     commitGit(this: WsClientDomainHost, message: string): void;
+    /**
+     * Ask for the current plan-quota readings.
+     *
+     * Sent once per connection. Quota is pushed as it changes, so a tab that was
+     * open all along needs nothing — but one that connects mid-session has missed
+     * every push, and the server will not re-fetch from the provider (that costs
+     * a request against the very budget being checked). This replays what the
+     * server already holds.
+     */
+    getProviderQuota(this: WsClientDomainHost): void;
     getProviderStatus(this: WsClientDomainHost): void;
     getProviderAuditHistory(this: WsClientDomainHost, count?: number | undefined): void;
     retryProviderModel(this: WsClientDomainHost, providerId: string, model: string): void;
@@ -58,9 +75,10 @@ declare const domainMethods: {
     setActiveKey(this: WsClientDomainHost, providerId: string, label: string): void;
     addProvider(this: WsClientDomainHost, id: string, family: string, baseUrl?: string | undefined, apiKey?: string, models?: string[] | undefined, customModels?: Record<string, ProviderCustomModelWire> | undefined): void;
     removeProvider(this: WsClientDomainHost, providerId: string): void;
-    startOAuth(this: WsClientDomainHost, kind: 'chatgpt' | 'claude' | 'copilot', providerId?: string): void;
-    submitOAuthCode(this: WsClientDomainHost, kind: 'chatgpt' | 'claude' | 'copilot', input: string): void;
-    cancelOAuth(this: WsClientDomainHost, kind: 'chatgpt' | 'claude' | 'copilot'): void;
+    listOAuthProviders(this: WsClientDomainHost): void;
+    startOAuth(this: WsClientDomainHost, kind: string, providerId?: string): void;
+    submitOAuthCode(this: WsClientDomainHost, kind: string, input: string): void;
+    cancelOAuth(this: WsClientDomainHost, kind: string): void;
     probeProvider(this: WsClientDomainHost, providerId: string, timeoutMs?: number): void;
     clearProviderModels(this: WsClientDomainHost, providerId: string): void;
     undoProviderClear(this: WsClientDomainHost, providerId: string, previousModels: string[]): void;

package/dist/stores/bug-hunt-run-store.d.ts

@@ -0,0 +1,44 @@
+export interface BugHuntRun {
+    scope: string;
+    totalRounds: 1 | 2 | 3;
+    /** The round currently running, or most recently completed when inactive. */
+    currentRound: number;
+    /** `null` after recovery; the next completion then claims the resumed run. */
+    requestId: string | null;
+}
+interface BugHuntRunState {
+    runs: Record<string, BugHuntRun>;
+    start(sessionId: string, run: BugHuntRun): void;
+    /** Whether a result with a request id belongs to the active round. */
+    ownsRequest(sessionId: string, requestId?: string): boolean;
+    /** Claim one completed round and reserve the next send against duplicate results. */
+    advance(sessionId: string, requestId?: string): BugHuntRun | null;
+    setRequestId(sessionId: string, requestId: string): void;
+    stop(sessionId: string, requestId?: string): void;
+    recover(sessionId: string, run: Omit<BugHuntRun, 'requestId'>): void;
+    clear(sessionId: string): void;
+}
+/**
+ * Session-keyed state for WebUI's one-bug-per-turn hunt loop. Persistence lets
+ * a refreshed page recover the active budget; every submitted round also
+ * carries durable chat-journal metadata for session replay.
+ */
+export declare const useBugHuntRunStore: import("zustand").UseBoundStore<Omit<import("zustand").StoreApi<BugHuntRunState>, "persist" | "setState"> & {
+    setState(partial: BugHuntRunState | Partial<BugHuntRunState> | ((state: BugHuntRunState) => BugHuntRunState | Partial<BugHuntRunState>), replace?: false | undefined): unknown;
+    setState(state: BugHuntRunState | ((state: BugHuntRunState) => BugHuntRunState), replace: true): unknown;
+    persist: {
+        setOptions: (options: Partial<import("zustand/middleware").PersistOptions<BugHuntRunState, {
+            runs: Record<string, BugHuntRun>;
+        }, unknown>>) => void;
+        clearStorage: () => void;
+        rehydrate: () => Promise<void> | void;
+        hasHydrated: () => boolean;
+        onHydrate: (fn: (state: BugHuntRunState) => void) => () => void;
+        onFinishHydration: (fn: (state: BugHuntRunState) => void) => () => void;
+        getOptions: () => Partial<import("zustand/middleware").PersistOptions<BugHuntRunState, {
+            runs: Record<string, BugHuntRun>;
+        }, unknown>>;
+    };
+}>;
+export {};
+//# sourceMappingURL=bug-hunt-run-store.d.ts.map

package/dist/stores/index.d.ts

@@ -1,3 +1,5 @@
+export type { BugHuntRun } from './bug-hunt-run-store.js';
+export { useBugHuntRunStore } from './bug-hunt-run-store.js';
 export { useChatStore } from './chat-store.js';
 export type { ChimeraReportNotice } from './chimera-reports-store.js';
 export { useChimeraReportsStore } from './chimera-reports-store.js';
@@ -36,6 +38,7 @@ export { useMonitorStore } from './monitor-store.js';
 export type { AppNotification, NotificationAction, NotificationStoreState, NotificationVariant, } from './notification-store.js';
 export { toast, useNotificationStore, useToastStore, } from './notification-store.js';
 export { type BackgroundStyle, DEFAULT_WAIT_THRESHOLD_MS, useOfficeMapStore, WAIT_THRESHOLD_PRESETS, } from './office-map-store.js';
+export { formatQuotaResetIn, type QuotaCredits, type QuotaSnapshot, type QuotaWindow, quotaWindowLabel, selectWorstQuotaWindow, useProviderQuotaStore, } from './provider-quota-store.js';
 export { type ProviderAuditEntry, type ProviderHealthEntry, type ProviderHealthState, useProviderStatusStore, } from './provider-status-store.js';
 export { type SddBoardFeedEntry, type SddBoardSnapshotUI, type SddBoardStatus, type SddBoardSummary, type SddLifecycleResultUI, useSddBoardStore, } from './sdd-board-store.js';
 export { type SddWizardPhase, type SddWizardSnapshot, useSddWizardStore, } from './sdd-wizard-store.js';

package/dist/stores/local-prefs.d.ts

@@ -18,6 +18,15 @@ export interface LocalPrefs {
     autoProceedMaxIterations: number;
     /** YOLO mode — bypass tool confirmations */
     yolo: boolean;
+    /**
+     * Which kinds of damage still prompt while YOLO is on, keyed by
+     * `DestructiveKind`. A missing key means "still asks" — the fail-closed
+     * reading — so an older client that omits a newer kind cannot un-gate it.
+     *
+     * Machine-level, NOT session-scoped: unlike `yolo` (a per-tab mode), this
+     * answers what the agent may destroy unattended anywhere.
+     */
+    yoloConfirm: Record<string, boolean>;
     /** Maximum agent iterations per run */
     maxIterations: number;
     /** Chime on run completion */

package/dist/stores/provider-quota-store.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Zustand store for subscription plan quota — the browser mirror of the
+ * server-side store in `@wrongstack/core/quota`.
+ *
+ * Metered providers (ChatGPT/Codex today, any plan-backed login next) report
+ * how much of their rolling budget is spent on the responses to requests the
+ * agent already makes. The server broadcasts every reading as `provider.quota`;
+ * a tab that connected mid-session asks once with `provider.quota.get`, because
+ * the reading is never re-fetched from the provider — asking a metered plan how
+ * much you have spent costs a request against the very budget you are checking.
+ *
+ * Deliberately global rather than per-session: a plan belongs to the account,
+ * not to a conversation. Every tab shows the same numbers, and a reading that
+ * arrived while another tab was in the foreground stays valid here.
+ *
+ * The shape mirrors `ProviderQuotaSnapshot` exactly. It is redeclared rather
+ * than imported: this bundle is browser-only and pulling a Node-side entry in
+ * for four field names is how `node:fs` ends up in the Vite graph.
+ */
+export interface QuotaWindow {
+    id: string;
+    label?: string | undefined;
+    usedPercent: number;
+    windowMinutes?: number | undefined;
+    /** Absolute reset time in epoch **seconds**. */
+    resetsAt?: number | undefined;
+}
+export interface QuotaCredits {
+    hasCredits: boolean;
+    unlimited: boolean;
+    balance?: string | undefined;
+}
+export interface QuotaSnapshot {
+    providerId: string;
+    meterId: string;
+    meterLabel?: string | undefined;
+    planLabel?: string | undefined;
+    windows: QuotaWindow[];
+    credits?: QuotaCredits | undefined;
+    reachedWindowId?: string | undefined;
+    note?: string | undefined;
+    capturedAt: number;
+}
+interface ProviderQuotaState {
+    /** Every known meter, keyed `providerId\0meterId`. */
+    meters: Record<string, QuotaSnapshot>;
+    /** Merge readings for one provider (a `provider.quota` push). */
+    apply: (snapshots: readonly QuotaSnapshot[]) => void;
+    clear: () => void;
+}
+export declare const useProviderQuotaStore: import("zustand").UseBoundStore<import("zustand").StoreApi<ProviderQuotaState>>;
+/**
+ * The window a one-line surface should show: the most-consumed one across every
+ * provider and meter, ties broken toward the sooner reset.
+ *
+ * Same rule as the TUI chip. A status bar has room for one number, and the one
+ * that matters is the one nearest to cutting the user off — not the first
+ * provider to report.
+ */
+export declare function selectWorstQuotaWindow(meters: Record<string, QuotaSnapshot>): {
+    snapshot: QuotaSnapshot;
+    window: QuotaWindow;
+} | undefined;
+/** `5h` / `7d` / the window's own label / its id. */
+export declare function quotaWindowLabel(window: QuotaWindow): string;
+/** Compact `4h 12m` / `38m` / `45s` countdown, or undefined when unknown/past. */
+export declare function formatQuotaResetIn(window: QuotaWindow | undefined, now?: number): string | undefined;
+export {};
+//# sourceMappingURL=provider-quota-store.d.ts.map

package/dist/stores/types.d.ts

@@ -56,6 +56,7 @@ export interface ChatMessage {
     bugHunt?: {
         scope: string;
         maxBugs: 1 | 2 | 3;
+        currentRound: number;
     } | undefined;
     /** The same treatment for a built-in performance ratchet round: the full
      * prompt goes to the agent, the transcript shows the mode, scope, and the

package/dist/stores/ui-store-types.d.ts

@@ -20,7 +20,7 @@ export declare function coerceActivity(value: unknown): Activity;
  * bucket, which makes that class of drift a compile error.
  * See docs/audit/webui-full-review-2026-09-03.md B-02.
  */
-export declare const VIEWS: readonly ['chat', 'settings', 'memory', 'roster', 'context', 'goal', 'kanban', 'sddhub', 'files', 'changes', 'sessions', 'session-inspect', 'setup', 'skill', 'mailbox', 'debug', 'design-gallery', 'refresh-debug', 'analytics', 'codemap', 'techstack', 'chronicle', 'intake', 'deadcode', 'prompts', 'chimera'];
+export declare const VIEWS: readonly ['chat', 'settings', 'memory', 'roster', 'context', 'goal', 'kanban', 'sddhub', 'files', 'changes', 'history', 'sessions', 'session-inspect', 'setup', 'skill', 'mailbox', 'debug', 'design-gallery', 'refresh-debug', 'analytics', 'codemap', 'techstack', 'chronicle', 'intake', 'deadcode', 'prompts', 'chimera'];
 export type View = (typeof VIEWS)[number];
 /** Coerce an arbitrary value onto the current view union. Used by migrate
  *  when reading from localStorage so a stale value (e.g. 'context', a view

package/dist/types/client-message.d.ts

@@ -620,6 +620,8 @@ export type WSClientMessageCore = WSUserMessage | {
         providerId: string;
         timeoutMs?: number | undefined;
     };
+} | {
+    type: 'auth.oauth.list';
 } | {
     type: 'auth.oauth.start';
     payload: {
@@ -637,6 +639,8 @@ export type WSClientMessageCore = WSUserMessage | {
     payload: {
         kind: OAuthKind;
     };
+} | {
+    type: 'provider.quota.get';
 } | {
     type: 'provider.status.get';
 } | {
@@ -1014,6 +1018,26 @@ export type WSClientMessageCore = WSUserMessage | {
     type: 'git.info';
 } | {
     type: 'git.changes';
+} | {
+    type: 'git.history';
+    payload?: {
+        ref?: string;
+        limit?: number;
+        skip?: number;
+        path?: string;
+    };
+} | {
+    type: 'git.commit_detail';
+    payload: {
+        hash: string;
+    };
+} | {
+    type: 'git.commit_file_diff';
+    payload: {
+        hash: string;
+        path: string;
+        previousPath?: string | undefined;
+    };
 } | {
     type: 'git.diff';
     payload: {

package/dist/types/connections.d.ts

@@ -1,6 +1,6 @@
 export type ConnectionHealthStatus = 'healthy' | 'degraded' | 'offline' | 'unavailable' | 'error';
 export interface ConnectionHealthService {
-    id: 'webui' | 'chronicle' | 'codebase-index' | 'sage' | 'kanban' | 'mailbox' | 'governance';
+    id: 'webui' | 'session-catalog' | 'chronicle' | 'codebase-index' | 'sage' | 'kanban' | 'mailbox' | 'governance';
     label: string;
     status: ConnectionHealthStatus;
     required: boolean;

package/dist/types/protocol-core.d.ts

@@ -285,6 +285,19 @@ export interface WSProviderStatusChanged {
         lastAgentId?: string | null | undefined;
     };
 }
+/**
+ * `provider.quota` — subscription plan readings, pushed on every metered
+ * response and replayed on `provider.quota.get`. `providerId` is present on a
+ * push (it names the provider that just reported) and absent on a replay,
+ * which carries every provider at once.
+ */
+export interface WSProviderQuota {
+    type: 'provider.quota';
+    payload: {
+        providerId?: string | undefined;
+        snapshots: unknown[];
+    };
+}
 export interface WSProviderStatusSnapshot {
     type: 'provider.status.snapshot';
     payload: Record<string, unknown>;

package/dist/types/server-message-files.d.ts

@@ -122,6 +122,63 @@ export type WSFilesGitServerMessage = {
         repoPrefix?: string | undefined;
         error?: string | undefined;
     };
+} | {
+    type: 'git.history';
+    payload: {
+        commits: Array<{
+            hash: string;
+            parents: string[];
+            author: string;
+            email: string;
+            authoredAt: string;
+            subject: string;
+            refs: string[];
+        }>;
+        refs: Array<{
+            name: string;
+            shortName: string;
+            kind: 'local' | 'remote' | 'tag';
+            hash: string;
+            current: boolean;
+        }>;
+        currentBranch: string;
+        repoRoot: string;
+        hasMore: boolean;
+        skip: number;
+        error?: string | undefined;
+    };
+} | {
+    type: 'git.commit_detail';
+    payload: {
+        hash: string;
+        fullHash?: string | undefined;
+        parents?: string[] | undefined;
+        author?: string | undefined;
+        email?: string | undefined;
+        authoredAt?: string | undefined;
+        body?: string | undefined;
+        files?: Array<{
+            path: string;
+            previousPath?: string | undefined;
+            added: number;
+            deleted: number;
+            binary?: boolean | undefined;
+        }> | undefined;
+        truncated?: boolean | undefined;
+        error?: string | undefined;
+    };
+} | {
+    type: 'git.commit_file_diff';
+    payload: {
+        hash: string;
+        path: string;
+        previousPath?: string | undefined;
+        oldText?: string | undefined;
+        newText?: string | undefined;
+        binary?: boolean | undefined;
+        tooLarge?: boolean | undefined;
+        error?: string | undefined;
+    };
 } | {
     type: 'git.diff';
     payload: {

package/dist/types/server-message.d.ts

@@ -2,7 +2,7 @@ import type { ChronicleFacet, ChronicleFacetValue, ChronicleGraphResult, Chronic
 import type { WSCollabAnnotationAdded, WSCollabAnnotationResolved, WSCollabEvent, WSCollabInjectionGranted, WSCollabParticipantJoined, WSCollabParticipantLeft, WSCollabPauseGranted, WSCollabPauseReleased, WSCollabState } from './collab.js';
 import type { AutoHealStatusEvent, ConnectionsHealthReport, ServiceActionResult } from './connections.js';
 import type { WSAgentStatusChanged, WSAgentTimelineMessage, WSEternalIteration, WSGoalAssessResult, WSGoalLifecycle, WSGoalList, WSGoalProgress, WSGoalState, WSKanbanResult, WSKanbanTaskActivity, WSModesList, WSWorktreeCleanupResult, WSWorktreeDiffResult, WSWorktreeEvent, WSWorktreeMergeResult, WSWorktreeOrphans, WSWorktreeState } from './goal-kanban-worktree.js';
-import type { WSCodeMapToolExecuted, WSCodeMapToolStarted, WSIterationCompleted, WSIterationLimitReached, WSIterationStarted, WSProviderActiveBlocked, WSProviderAuditHistory, WSProviderError, WSProviderFallback, WSProviderFallbackPending, WSProviderResponse, WSProviderRetry, WSProviderStatusChanged, WSProviderStatusSnapshot, WSProviderStreamError, WSRunResult, WSSessionEnd, WSSessionResumeProgress, WSSessionRunState, WSSessionStart, WSTextDelta, WSThinkingDelta, WSToolExecuted, WSToolProgress, WSToolUseStart } from './protocol-core.js';
+import type { WSCodeMapToolExecuted, WSCodeMapToolStarted, WSIterationCompleted, WSIterationLimitReached, WSIterationStarted, WSProviderActiveBlocked, WSProviderAuditHistory, WSProviderError, WSProviderFallback, WSProviderFallbackPending, WSProviderQuota, WSProviderResponse, WSProviderRetry, WSProviderStatusChanged, WSProviderStatusSnapshot, WSProviderStreamError, WSRunResult, WSSessionEnd, WSSessionResumeProgress, WSSessionRunState, WSSessionStart, WSTextDelta, WSThinkingDelta, WSToolExecuted, WSToolProgress, WSToolUseStart } from './protocol-core.js';
 import type { WSCompactionFailed, WSContextCompacted, WSContextDebug, WSContextEditorApplied, WSContextEditorSnapshot, WSContextEditorValidation, WSContextMaxContext, WSContextModeChanged, WSContextModesList, WSContextPct, WSContextRepaired, WSDelegateCompleted, WSDelegateStarted, WSError, WSMemoryList, WSSessionStats, WSTokenCostEstimateUnavailable, WSTokenThreshold, WSToolConfirmNeeded, WSToolLoopDetected, WSToolsList, WSTopicAdviceResult, WSTrustPersisted } from './runtime.js';
 import type { WSMemorySageBackfillRecoverable, WSMemorySageCandidateResolve, WSMemorySageDelete, WSMemorySageForFile, WSMemorySageGet, WSMemorySageGraph, WSMemorySageList, WSMemorySageListCandidates, WSMemorySageListPage, WSMemorySageRecover, WSMemorySageRemember, WSMemorySageSearchBreakdown, WSMemorySageUpdate } from './sage.js';
 import type { WSChimeraServerMessage } from './server-message-chimera.js';
@@ -11,8 +11,8 @@ import type { WSFleetServerMessage } from './server-message-fleet.js';
 import type { WSMcpServerMessage } from './server-message-mcp.js';
 import type { WSSystemMiscServerMessage } from './server-message-system.js';
 import type { WSDesignList, WSDesignMaterialize, WSDesignSet, WSDesignState, WSDesignSwap, WSDesignTune, WSDesignUse, WSDesignVerify, WSSkillContent, WSSkillsCreated, WSSkillsEdited, WSSkillsExported, WSSkillsInstalled, WSSkillsList, WSSkillsUninstalled, WSSkillsUpdated } from './skills-design.js';
-import type { WSAuthOAuthStatus, WSCatalogModelSearchResult, WSCompletionResult, WSDiagGet, WSFilesList, WSKeyOperationResult, WSModelSwitchResult, WSProviderCatalog, WSProviderModels, WSProviderProbe, WSSavedProviders, WSSessionInspect, WSSessionsList, WSSideEffects, WSStatsGet, WSTodosCleared, WSTodosUpdated } from './system.js';
-export type WSServerMessage = WSSessionStart | WSSessionEnd | WSTextDelta | WSThinkingDelta | WSToolUseStart | WSToolProgress | WSToolExecuted | WSCodeMapToolStarted | WSCodeMapToolExecuted | WSIterationStarted | WSIterationCompleted | WSIterationLimitReached | WSProviderResponse | WSProviderRetry | WSProviderAuditHistory | WSProviderError | WSProviderFallback | WSProviderFallbackPending | WSProviderStatusChanged | WSProviderStatusSnapshot | WSProviderActiveBlocked | WSProviderStreamError | WSRunResult | WSSessionRunState | WSSessionResumeProgress | WSSessionStats | WSError | WSToolConfirmNeeded | WSTrustPersisted | WSToolLoopDetected | WSDelegateStarted | WSDelegateCompleted | WSContextDebug | WSContextCompacted | WSCompactionFailed | WSContextRepaired | WSContextEditorSnapshot | WSContextEditorValidation | WSContextEditorApplied | WSContextPct | WSTopicAdviceResult | WSContextMaxContext | WSTokenThreshold | WSTokenCostEstimateUnavailable | WSContextModesList | WSContextModeChanged | WSToolsList | WSMemoryList | WSMemorySageList | WSMemorySageListPage | WSMemorySageListCandidates | WSMemorySageGet | WSMemorySageGraph | WSMemorySageSearchBreakdown | WSMemorySageUpdate | WSMemorySageRemember | WSMemorySageDelete | WSMemorySageRecover | WSMemorySageCandidateResolve | WSMemorySageBackfillRecoverable | WSMemorySageForFile | WSSkillsList | WSSkillContent | WSDesignList | WSDesignUse | WSDesignState | WSDesignSet | WSDesignTune | WSDesignSwap | WSDesignMaterialize | WSDesignVerify | WSSkillsInstalled | WSSkillsUninstalled | WSSkillsUpdated | WSSkillsCreated | WSSkillsEdited | WSSkillsExported | WSDiagGet | WSStatsGet | {
+import type { WSAuthOAuthProviders, WSAuthOAuthStatus, WSCatalogModelSearchResult, WSCompletionResult, WSDiagGet, WSFilesList, WSKeyOperationResult, WSModelSwitchResult, WSProviderCatalog, WSProviderModels, WSProviderProbe, WSSavedProviders, WSSessionInspect, WSSessionsList, WSSideEffects, WSStatsGet, WSTodosCleared, WSTodosUpdated } from './system.js';
+export type WSServerMessage = WSSessionStart | WSSessionEnd | WSTextDelta | WSThinkingDelta | WSToolUseStart | WSToolProgress | WSToolExecuted | WSCodeMapToolStarted | WSCodeMapToolExecuted | WSIterationStarted | WSIterationCompleted | WSIterationLimitReached | WSProviderResponse | WSProviderRetry | WSProviderAuditHistory | WSProviderError | WSProviderFallback | WSProviderFallbackPending | WSProviderStatusChanged | WSProviderQuota | WSProviderStatusSnapshot | WSProviderActiveBlocked | WSProviderStreamError | WSRunResult | WSSessionRunState | WSSessionResumeProgress | WSSessionStats | WSError | WSToolConfirmNeeded | WSTrustPersisted | WSToolLoopDetected | WSDelegateStarted | WSDelegateCompleted | WSContextDebug | WSContextCompacted | WSCompactionFailed | WSContextRepaired | WSContextEditorSnapshot | WSContextEditorValidation | WSContextEditorApplied | WSContextPct | WSTopicAdviceResult | WSContextMaxContext | WSTokenThreshold | WSTokenCostEstimateUnavailable | WSContextModesList | WSContextModeChanged | WSToolsList | WSMemoryList | WSMemorySageList | WSMemorySageListPage | WSMemorySageListCandidates | WSMemorySageGet | WSMemorySageGraph | WSMemorySageSearchBreakdown | WSMemorySageUpdate | WSMemorySageRemember | WSMemorySageDelete | WSMemorySageRecover | WSMemorySageCandidateResolve | WSMemorySageBackfillRecoverable | WSMemorySageForFile | WSSkillsList | WSSkillContent | WSDesignList | WSDesignUse | WSDesignState | WSDesignSet | WSDesignTune | WSDesignSwap | WSDesignMaterialize | WSDesignVerify | WSSkillsInstalled | WSSkillsUninstalled | WSSkillsUpdated | WSSkillsCreated | WSSkillsEdited | WSSkillsExported | WSDiagGet | WSStatsGet | {
     type: 'connections.health_result';
     payload: ConnectionsHealthReport;
 } | {
@@ -62,7 +62,7 @@ export type WSServerMessage = WSSessionStart | WSSessionEnd | WSTextDelta | WSTh
     payload: {
         message: string;
     };
-} | WSSessionsList | WSSessionInspect | WSProviderCatalog | WSCatalogModelSearchResult | WSProviderModels | WSSavedProviders | WSProviderProbe | WSKeyOperationResult | WSModelSwitchResult | WSAuthOAuthStatus | WSFilesList | WSFilesGitServerMessage | WSCompletionResult | WSTodosUpdated | WSTodosCleared | WSModesList | WSGoalState | WSGoalProgress | WSGoalLifecycle | WSGoalList | WSGoalAssessResult | WSEternalIteration | WSAgentTimelineMessage | WSAgentStatusChanged | WSKanbanResult | WSKanbanTaskActivity | WSWorktreeState | WSWorktreeEvent | WSWorktreeOrphans | WSWorktreeCleanupResult | WSWorktreeMergeResult | WSWorktreeDiffResult | WSCollabState | WSCollabParticipantJoined | WSCollabParticipantLeft | WSCollabEvent | WSCollabAnnotationAdded | WSCollabAnnotationResolved | WSCollabPauseGranted | WSCollabPauseReleased | WSCollabInjectionGranted | WSSideEffects | WSMcpServerMessage | WSChimeraServerMessage | WSFleetServerMessage | WSSystemMiscServerMessage;
+} | WSSessionsList | WSSessionInspect | WSProviderCatalog | WSCatalogModelSearchResult | WSProviderModels | WSSavedProviders | WSProviderProbe | WSKeyOperationResult | WSModelSwitchResult | WSAuthOAuthStatus | WSAuthOAuthProviders | WSFilesList | WSFilesGitServerMessage | WSCompletionResult | WSTodosUpdated | WSTodosCleared | WSModesList | WSGoalState | WSGoalProgress | WSGoalLifecycle | WSGoalList | WSGoalAssessResult | WSEternalIteration | WSAgentTimelineMessage | WSAgentStatusChanged | WSKanbanResult | WSKanbanTaskActivity | WSWorktreeState | WSWorktreeEvent | WSWorktreeOrphans | WSWorktreeCleanupResult | WSWorktreeMergeResult | WSWorktreeDiffResult | WSCollabState | WSCollabParticipantJoined | WSCollabParticipantLeft | WSCollabEvent | WSCollabAnnotationAdded | WSCollabAnnotationResolved | WSCollabPauseGranted | WSCollabPauseReleased | WSCollabInjectionGranted | WSSideEffects | WSMcpServerMessage | WSChimeraServerMessage | WSFleetServerMessage | WSSystemMiscServerMessage;
 export type { WSChimeraServerMessage } from './server-message-chimera.js';
 export type { WSFilesGitServerMessage } from './server-message-files.js';
 export type { WSFleetServerMessage } from './server-message-fleet.js';

package/dist/types/system.d.ts

@@ -1,3 +1,4 @@
+import type { ModelProvenance } from '@wrongstack/core/types';
 import type { SessionScopedPayload } from './protocol-core.js';
 export interface WSDiagGet {
     type: 'diag.get';
@@ -163,6 +164,7 @@ export interface ProviderCatalogModelMatch {
     maxOutput?: number | undefined;
     inputCost?: number | undefined;
     outputCost?: number | undefined;
+    provenance?: ModelProvenance | undefined;
     capabilities: string[];
 }
 export interface WSCatalogModelSearchResult {
@@ -184,6 +186,7 @@ export interface WSProviderModels {
             contextWindow?: number | undefined;
             inputCost?: number | undefined;
             outputCost?: number | undefined;
+            provenance?: ModelProvenance | undefined;
             capabilities: string[];
         }>;
     };
@@ -284,7 +287,21 @@ export interface WSModelSwitchResult {
     };
 }
 /** Which subscription OAuth login a flow is running. */
-export type OAuthKind = 'chatgpt' | 'claude' | 'copilot';
+export type OAuthKind = string;
+export interface OAuthProviderMetadata {
+    id: string;
+    providerId: string;
+    label: string;
+    description?: string | undefined;
+    aliases?: readonly string[] | undefined;
+    interactionTypes: readonly ('browser' | 'device_code')[];
+}
+export interface WSAuthOAuthProviders {
+    type: 'auth.oauth.providers';
+    payload: {
+        providers: OAuthProviderMetadata[];
+    };
+}
 /**
  * Progress for an in-flight subscription OAuth login, broadcast in reply to
  * `auth.oauth.start` / `auth.oauth.code`. `phase` drives the UI:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/webui",
-  "version": "1.0.1",
+  "version": "1.0.4",
   "license": "MIT",
   "description": "Browser-based WebUI for WrongStack — React + Vite frontend. The WebSocket backend lives in the separate @wrongstack/webui-server package (extracted in PR #018b to remove the CLI -> @wrongstack/webui/server cross-package edge).",
   "keywords": [
@@ -57,12 +57,12 @@
     "@radix-ui/react-tabs": "^1.1.21",
     "@tanstack/react-virtual": "^3.14.10",
     "@uiw/react-textarea-code-editor": "^3.1.1",
-    "@wrongstack/core": "1.0.1",
-    "@wrongstack/kanban": "1.0.1",
-    "@wrongstack/plugins": "1.0.1",
-    "@wrongstack/providers": "1.0.1",
-    "@wrongstack/tools": "1.0.1",
-    "@wrongstack/webui-protocol": "1.0.1",
+    "@wrongstack/core": "1.0.4",
+    "@wrongstack/kanban": "1.0.4",
+    "@wrongstack/plugins": "1.0.4",
+    "@wrongstack/providers": "1.0.4",
+    "@wrongstack/tools": "1.0.4",
+    "@wrongstack/webui-protocol": "1.0.4",
     "@xterm/addon-fit": "^0.11.0",
     "@xterm/xterm": "^6.0.0",
     "@xyflow/react": "^12.11.3",
@@ -98,8 +98,8 @@
     "@types/ws": "^8.18.1",
     "@vitejs/plugin-react": "^6.1.0",
     "@vitest/coverage-v8": "^4.1.11",
-    "@wrongstack/sdd": "1.0.1",
-    "@wrongstack/webui-server": "1.0.1",
+    "@wrongstack/sdd": "1.0.4",
+    "@wrongstack/webui-server": "1.0.4",
     "jsdom": "^30.0.1",
     "tailwindcss": "^4.3.3",
     "typescript": "^7.0.2",