@aiworkbench/vibe-ide 0.0.3 → 0.0.4

package/dist/core/boot.d.ts

@@ -9,6 +9,9 @@ import type { VibeIdeBootOptions } from "../types";
 export declare class WebContainerTabBlockedError extends Error {
     constructor();
 }
+export declare class WebContainerBootTimeoutError extends Error {
+    constructor();
+}
 export declare function bootWebContainer(options?: VibeIdeBootOptions): Promise<WebContainer>;
 export declare function teardownWebContainer(): void;
 export declare function getWebContainer(): WebContainer | null;

package/dist/core/boot.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"boot.d.ts","sourceRoot":"","sources":["../../src/core/boot.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAUnD,qBAAa,2BAA4B,SAAQ,KAAK;;CAOrD;AAED,wBAAsB,gBAAgB,CACpC,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,YAAY,CAAC,CAiEvB;AAED,wBAAgB,oBAAoB,SAcnC;AAED,wBAAgB,eAAe,wBAE9B"}
+{"version":3,"file":"boot.d.ts","sourceRoot":"","sources":["../../src/core/boot.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAsCnD,qBAAa,2BAA4B,SAAQ,KAAK;;CAOrD;AAED,qBAAa,4BAA6B,SAAQ,KAAK;;CAOtD;AAqCD,wBAAsB,gBAAgB,CACpC,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,YAAY,CAAC,CAwGvB;AAED,wBAAgB,oBAAoB,SAcnC;AAED,wBAAgB,eAAe,wBAE9B"}

package/dist/core/bridge-shim.d.ts

@@ -5,5 +5,5 @@
  * implementing the full Bridge API client-side inside the preview iframe. It
  * communicates with the host via a MessagePort received through `vibe:init`.
  */
-export declare const BRIDGE_DEV_SHIM_SOURCE = "\n(async function() {\n  function waitForBridgeInit() {\n    return new Promise((resolve) => {\n      window.addEventListener('message', (e) => {\n        if (e.data?.type === 'vibe:init') {\n          resolve({ port: e.ports[0], previewSessionId: e.data.previewSessionId, bootstrap: e.data.bootstrap });\n        }\n      });\n    });\n  }\n\n  const { port, previewSessionId, bootstrap } = await waitForBridgeInit();\n  const effectivePermissions = new Set(Array.isArray(bootstrap?.effectivePermissions) ? bootstrap.effectivePermissions : []);\n  let currentBootstrap = bootstrap || {};\n\n  window.addEventListener('message', (e) => {\n    if (e.data?.type === 'vibe:permissions') {\n      effectivePermissions.clear();\n      const nextPermissions = Array.isArray(e.data.effectivePermissions) ? e.data.effectivePermissions : [];\n      nextPermissions.forEach((capability) => effectivePermissions.add(capability));\n      currentBootstrap = e.data.bootstrap || currentBootstrap;\n    }\n  });\n\n  function ensureCapability(capability) {\n    if (!effectivePermissions.has(capability)) {\n      throw new Error(capability + ' is not permitted in this preview');\n    }\n  }\n\n  function sendOneWay(capability, method, args) {\n    ensureCapability(capability);\n    port.postMessage({ id: crypto.randomUUID(), previewSessionId, capability, method, args });\n  }\n\n  function sendRequest(capability, method, args) {\n    ensureCapability(capability);\n    const id = crypto.randomUUID();\n    return new Promise((resolve, reject) => {\n      const handler = (e) => {\n        if (e.data.id === id) {\n          port.removeEventListener('message', handler);\n          if (e.data.error) reject(new Error(e.data.error));\n          else resolve(e.data.result);\n        }\n      };\n      port.addEventListener('message', handler);\n      port.start();\n      port.postMessage({ id, previewSessionId, capability, method, args });\n    });\n  }\n\n  function sendStream(capability, method, args, onChunk) {\n    ensureCapability(capability);\n    const id = crypto.randomUUID();\n    let isDone = false;\n    let stopEventRegistration = () => {};\n\n    const promise = new Promise((resolve, reject) => {\n      const handler = (e) => {\n        if (e.data.id === id) {\n          if (e.data.error) {\n            port.removeEventListener('message', handler);\n            reject(new Error(e.data.error));\n          } else if (e.data.chunk !== undefined) {\n             onChunk(e.data.chunk);\n          } else if (e.data.subscribed) {\n            resolve({ subscriptionId: id, unsubscribe: stopEventRegistration });\n          } else if (e.data.done || e.data.result !== undefined) {\n            port.removeEventListener('message', handler);\n            isDone = true;\n            resolve(e.data.result);\n          }\n        }\n      };\n      port.addEventListener('message', handler);\n      port.start();\n      port.postMessage({ id, previewSessionId, capability, method, args });\n       \n      stopEventRegistration = () => {\n         if (!isDone) {\n           port.removeEventListener('message', handler);\n           port.postMessage({\n             id: crypto.randomUUID(),\n             previewSessionId,\n             capability,\n             method: 'unsubscribe',\n             args: [id],\n           });\n         }\n       };\n    });\n    \n    return { promise, unsubscribe: stopEventRegistration };\n  }\n\n  window.__VIBE_BRIDGE_DEV__ = {\n    auth: {\n      getUser: () => {\n        ensureCapability('auth');\n        if (!currentBootstrap.user) {\n          throw new Error('auth.getUser() is unavailable in this preview');\n        }\n        return currentBootstrap.user;\n      },\n      getToken: async () => { throw new Error(\"auth.getToken() is unavailable in dev preview\"); }\n    },\n    theme: {\n      current: () => {\n        ensureCapability('theme');\n        return currentBootstrap.theme;\n      }\n    },\n    toast: {\n      show: (msg, opts) => sendOneWay('toast', 'show', [msg, opts])\n    },\n    api: {\n      fetch: async (ep, opts) => {\n        const res = await sendRequest('api', 'fetch', [ep, opts]);\n        return new Response(res.body, { status: res.status, statusText: res.statusText, headers: res.headers });\n      }\n    },\n    storage: {\n      get: (key) => sendRequest('storage', 'get', [key]),\n      set: (key, val) => sendRequest('storage', 'set', [key, val]),\n      remove: (key) => sendRequest('storage', 'remove', [key]),\n      keys: () => sendRequest('storage', 'keys', [])\n    },\n    navigation: {\n      navigate: (path) => sendOneWay('navigation', 'navigate', [path])\n    },\n    events: {\n      emit: (evt, data) => sendOneWay('events', 'emit', [evt, data]),\n      on: (evt, cb) => {\n         const stream = sendStream('events', 'on', [evt], (chunk) => {\n            cb(chunk);\n         });\n         return stream.unsubscribe;\n      },\n      once: (evt, cb) => {\n         let unsub = () => {};\n         const wrappedCb = (chunk) => { unsub(); cb(chunk); };\n         const stream = sendStream('events', 'once', [evt], wrappedCb);\n         unsub = stream.unsubscribe;\n         return unsub;\n      }\n    },\n    chat: {\n      send: function(serverUrl, parts, options) {\n          const payload = {\n            serverUrl,\n            parts,\n            options: options ? {\n              contextId: options.contextId,\n              messageId: options.messageId,\n              metadata: options.metadata,\n            } : undefined,\n          };\n         let buffer = [];\n          let error = null;\n          let done = false;\n          let resolvers = [];\n         const stream = sendStream('chat', 'send', [payload], (chunk) => {\n            buffer.push(chunk);\n            if (resolvers.length > 0) resolvers.shift()();\n         });\n\n         stream.promise.then((res) => {\n             done = true;\n             if (resolvers.length > 0) resolvers.shift()();\n          }).catch(err => {\n             error = err;\n             done = true;\n             if (resolvers.length > 0) resolvers.shift()();\n          });\n         const iterator = (async function*() {\n           while (true) {\n             if (buffer.length > 0) yield buffer.shift();\n             else if (error) throw error;\n             else if (done) break;\n             else await new Promise(r => resolvers.push(r));\n           }\n         })();\n\n         return {\n           [Symbol.asyncIterator]: () => iterator,\n           abort: () => stream.unsubscribe(),\n         };\n       }\n    }\n  };\n\n  window.dispatchEvent(new Event(\"vibe-bridge-ready\"));\n})();\n";
+export declare const BRIDGE_DEV_SHIM_SOURCE = "\n(async function() {\n  function waitForBridgeInit() {\n    return new Promise((resolve) => {\n      window.addEventListener('message', (e) => {\n        if (e.data?.type === 'vibe:init') {\n          resolve({ port: e.ports[0], previewSessionId: e.data.previewSessionId, bootstrap: e.data.bootstrap });\n        }\n      });\n    });\n  }\n\n  const { port, previewSessionId, bootstrap } = await waitForBridgeInit();\n  const effectivePermissions = new Set(Array.isArray(bootstrap?.effectivePermissions) ? bootstrap.effectivePermissions : []);\n  let currentBootstrap = bootstrap || {};\n\n  function sendOneWay(capability, method, args) {\n    port.postMessage({ id: crypto.randomUUID(), previewSessionId, capability, method, args });\n  }\n\n  function sendRequest(capability, method, args) {\n    const id = crypto.randomUUID();\n    return new Promise((resolve, reject) => {\n      const handler = (e) => {\n        if (e.data.id === id) {\n          port.removeEventListener('message', handler);\n          if (e.data.error) reject(new Error(e.data.error));\n          else resolve(e.data.result);\n        }\n      };\n      port.addEventListener('message', handler);\n      port.start();\n      port.postMessage({ id, previewSessionId, capability, method, args });\n    });\n  }\n\n  function sendStream(capability, method, args, onChunk) {\n    const id = crypto.randomUUID();\n    let isDone = false;\n    let stopEventRegistration = () => {};\n\n    const promise = new Promise((resolve, reject) => {\n      const handler = (e) => {\n        if (e.data.id === id) {\n          if (e.data.error) {\n            port.removeEventListener('message', handler);\n            reject(new Error(e.data.error));\n          } else if (e.data.chunk !== undefined) {\n             onChunk(e.data.chunk);\n          } else if (e.data.subscribed) {\n            resolve({ subscriptionId: id, unsubscribe: stopEventRegistration });\n          } else if (e.data.done || e.data.result !== undefined) {\n            port.removeEventListener('message', handler);\n            isDone = true;\n            resolve(e.data.result);\n          }\n        }\n      };\n      port.addEventListener('message', handler);\n      port.start();\n      port.postMessage({ id, previewSessionId, capability, method, args });\n       \n      stopEventRegistration = () => {\n         if (!isDone) {\n           port.removeEventListener('message', handler);\n           port.postMessage({\n             id: crypto.randomUUID(),\n             previewSessionId,\n             capability,\n             method: 'unsubscribe',\n             args: [id],\n           });\n         }\n       };\n    });\n    \n    return { promise, unsubscribe: stopEventRegistration };\n  }\n\n  /* \u2500\u2500 Capability factories \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n   * Each factory returns the namespace object for a single capability.\n   * Only capabilities present in effectivePermissions are assigned to the\n   * bridge object, so unpermitted ones remain undefined and optional\n   * chaining (e.g. bridge.auth?.getUser()) short-circuits safely.\n   * \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 */\n\n  const capabilityFactories = {\n    auth: () => ({\n      getUser: () => {\n        if (!currentBootstrap.user) {\n          throw new Error('auth.getUser() is unavailable in this preview');\n        }\n        return currentBootstrap.user;\n      },\n      getToken: async () => { throw new Error(\"auth.getToken() is unavailable in dev preview\"); }\n    }),\n    theme: () => ({\n      current: () => currentBootstrap.theme\n    }),\n    toast: () => ({\n      show: (msg, opts) => sendOneWay('toast', 'show', [msg, opts])\n    }),\n    api: () => ({\n      fetch: async (ep, opts) => {\n        const res = await sendRequest('api', 'fetch', [ep, opts]);\n        return new Response(res.body, { status: res.status, statusText: res.statusText, headers: res.headers });\n      }\n    }),\n    storage: () => ({\n      get: (key) => sendRequest('storage', 'get', [key]),\n      set: (key, val) => sendRequest('storage', 'set', [key, val]),\n      remove: (key) => sendRequest('storage', 'remove', [key]),\n      keys: () => sendRequest('storage', 'keys', [])\n    }),\n    navigation: () => ({\n      navigate: (path) => sendOneWay('navigation', 'navigate', [path])\n    }),\n    events: () => ({\n      emit: (evt, data) => sendOneWay('events', 'emit', [evt, data]),\n      on: (evt, cb) => {\n         const stream = sendStream('events', 'on', [evt], (chunk) => {\n            cb(chunk);\n         });\n         return stream.unsubscribe;\n      },\n      once: (evt, cb) => {\n         let unsub = () => {};\n         const wrappedCb = (chunk) => { unsub(); cb(chunk); };\n         const stream = sendStream('events', 'once', [evt], wrappedCb);\n         unsub = stream.unsubscribe;\n         return unsub;\n      }\n    }),\n    chat: () => ({\n      send: function(serverUrl, parts, options) {\n          const payload = {\n            serverUrl,\n            parts,\n            options: options ? {\n              contextId: options.contextId,\n              messageId: options.messageId,\n              metadata: options.metadata,\n            } : undefined,\n          };\n         let buffer = [];\n          let error = null;\n          let done = false;\n          let resolvers = [];\n         const stream = sendStream('chat', 'send', [payload], (chunk) => {\n            buffer.push(chunk);\n            if (resolvers.length > 0) resolvers.shift()();\n         });\n\n         stream.promise.then((res) => {\n             done = true;\n             if (resolvers.length > 0) resolvers.shift()();\n          }).catch(err => {\n             error = err;\n             done = true;\n             if (resolvers.length > 0) resolvers.shift()();\n          });\n         const iterator = (async function*() {\n           while (true) {\n             if (buffer.length > 0) yield buffer.shift();\n             else if (error) throw error;\n             else if (done) break;\n             else await new Promise(r => resolvers.push(r));\n           }\n         })();\n\n         return {\n           [Symbol.asyncIterator]: () => iterator,\n           abort: () => stream.unsubscribe(),\n         };\n       }\n    })\n  };\n\n  /* \u2500\u2500 Build bridge object from permitted capabilities only \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 */\n\n  function buildBridge() {\n    const bridge = {};\n    for (const cap of effectivePermissions) {\n      if (capabilityFactories[cap]) {\n        bridge[cap] = capabilityFactories[cap]();\n      }\n    }\n    return bridge;\n  }\n\n  window.__VIBE_BRIDGE_DEV__ = buildBridge();\n\n  /* \u2500\u2500 Handle runtime permission changes \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 */\n\n  window.addEventListener('message', (e) => {\n    if (e.data?.type === 'vibe:permissions') {\n      effectivePermissions.clear();\n      const nextPermissions = Array.isArray(e.data.effectivePermissions) ? e.data.effectivePermissions : [];\n      nextPermissions.forEach((capability) => effectivePermissions.add(capability));\n      currentBootstrap = e.data.bootstrap || currentBootstrap;\n      window.__VIBE_BRIDGE_DEV__ = buildBridge();\n    }\n  });\n\n  window.dispatchEvent(new Event(\"vibe-bridge-ready\"));\n})();\n";
 //# sourceMappingURL=bridge-shim.d.ts.map

package/dist/core/bridge-shim.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bridge-shim.d.ts","sourceRoot":"","sources":["../../src/core/bridge-shim.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,sBAAsB,6hNAmMlC,CAAC"}
+{"version":3,"file":"bridge-shim.d.ts","sourceRoot":"","sources":["../../src/core/bridge-shim.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,sBAAsB,66PA8MlC,CAAC"}

package/dist/core/filesystem.d.ts

@@ -1,12 +1,71 @@
 /**
  * WebContainer filesystem helpers: read, write, serialize, and batched writes.
  *
- * Refactored from usecase-editor to accept configurable exclusion lists.
+ * Phase 2 additions:
+ * - Canonical snapshot serializer with sorted entries and binary-safe encoding
+ * - Structure-only tree walker (no file content reads)
+ * - Size caps (file count, total bytes, per-file bytes)
+ * - All path/secret logic delegated to path-policy.ts
  */
 import type { WebContainer, FileSystemTree } from "@webcontainer/api";
+export { isSecretPath } from "./path-policy";
+/** A file entry in a canonical snapshot — path-sorted, binary-safe. */
+export interface CanonicalFileEntry {
+    /** Normalized absolute path (e.g. "/src/App.tsx") */
+    path: string;
+    /** File contents as a string (UTF-8 text files) */
+    content: string;
+    /** Byte size of content */
+    byteSize: number;
+}
+/** Result of creating a canonical snapshot. */
+export interface CanonicalSnapshot {
+    /** Sorted file entries. */
+    files: CanonicalFileEntry[];
+    /** Total file count. */
+    fileCount: number;
+    /** Total uncompressed byte size. */
+    totalBytes: number;
+    /** SHA-256 hash of the canonical representation. */
+    treeHash: string;
+}
+/** A lightweight directory entry for the file explorer (no content). */
+export interface TreeEntry {
+    name: string;
+    path: string;
+    type: "file" | "directory";
+    children?: TreeEntry[];
+}
+/**
+ * Walk the WebContainer filesystem and return a tree structure without
+ * reading file contents. Used for file explorer display and agent context
+ * summaries where only the directory layout matters.
+ *
+ * Entries within each directory are sorted alphabetically (dirs first, then files).
+ */
+export declare function readTreeStructure(instance: WebContainer, basePath?: string, options?: {
+    exclude?: string[];
+}): Promise<TreeEntry[]>;
 export declare function readFileTree(instance: WebContainer, basePath?: string, options?: {
     exclude?: string[];
 }): Promise<FileSystemTree>;
+/**
+ * Create a canonical, deterministic snapshot of the project files.
+ *
+ * - Paths are normalized and sorted lexicographically
+ * - Secret files and excluded dirs are filtered out
+ * - File count, total bytes, and per-file size are validated against caps
+ * - A SHA-256 tree hash is computed from the canonical representation
+ *
+ * @throws Error if snapshot exceeds caps
+ */
+export declare function createCanonicalSnapshot(instance: WebContainer, options?: {
+    exclude?: string[];
+}): Promise<CanonicalSnapshot>;
+/**
+ * Convert a canonical snapshot back to a FileSystemTree for mounting.
+ */
+export declare function snapshotToFileSystemTree(snapshot: CanonicalSnapshot): FileSystemTree;
 export declare function serializeProject(instance: WebContainer): Promise<{
     path: string;
     content: string;
@@ -23,9 +82,21 @@ export declare class WriteCoalescer {
     dirty: boolean;
     private maxBufferSize;
     private currentBufferSize;
+    private onFlush?;
+    /** Listeners notified when a file is written (path). */
+    private writeListeners;
+    /** Listeners notified when a file/dir is deleted (path). */
+    private deleteListeners;
     constructor(instance: WebContainer, options?: {
         maxBufferSize?: number;
+        onFlush?: () => void;
     });
+    /** Subscribe to file write events. Returns unsubscribe function. */
+    onWrite(listener: (path: string) => void): () => void;
+    /** Subscribe to file/directory delete events. Returns unsubscribe function. */
+    onDelete(listener: (path: string) => void): () => void;
+    /** Notify listeners that a file or directory was deleted. */
+    notifyDelete(path: string): void;
     enqueue(path: string, content: string): void;
     write(path: string, content: string): void;
     private scheduleFlush;

package/dist/core/filesystem.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"filesystem.d.ts","sourceRoot":"","sources":["../../src/core/filesystem.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAoBtE,wBAAsB,YAAY,CAChC,QAAQ,EAAE,YAAY,EACtB,QAAQ,GAAE,MAAY,EACtB,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CAAO,GACnC,OAAO,CAAC,cAAc,CAAC,CA6BzB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,YAAY,GACrB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,CAAC,CAkB9C;AAED,wBAAsB,aAAa,CACjC,QAAQ,EAAE,YAAY,EACtB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,cAAc,iBAGrB;AAED;;;GAGG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,OAAO,CAAkC;IACjD,OAAO,CAAC,KAAK,CAAuB;IAC7B,KAAK,UAAS;IACrB,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,iBAAiB,CAAK;gBAElB,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE;IAKxE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAyBrC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAInC,OAAO,CAAC,aAAa;IAWf,cAAc,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE;YAiBjD,WAAW;IAezB,OAAO;CAGR"}
+{"version":3,"file":"filesystem.d.ts","sourceRoot":"","sources":["../../src/core/filesystem.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAYtE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAM7C,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IACjC,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,2BAA2B;IAC3B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,+CAA+C;AAC/C,MAAM,WAAW,iBAAiB;IAChC,2BAA2B;IAC3B,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5B,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wEAAwE;AACxE,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC;CACxB;AAMD;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,YAAY,EACtB,QAAQ,GAAE,MAAY,EACtB,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAC/B,OAAO,CAAC,SAAS,EAAE,CAAC,CAwCtB;AAMD,wBAAsB,YAAY,CAChC,QAAQ,EAAE,YAAY,EACtB,QAAQ,GAAE,MAAY,EACtB,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CAAO,GACnC,OAAO,CAAC,cAAc,CAAC,CAiCzB;AAMD;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,YAAY,EACtB,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CAiE5B;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,iBAAiB,GAC1B,cAAc,CAuBhB;AAMD,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,YAAY,GACrB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,CAAC,CAkB9C;AAMD,wBAAsB,aAAa,CACjC,QAAQ,EAAE,YAAY,EACtB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,cAAc,iBAGrB;AAMD;;;GAGG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,OAAO,CAAkC;IACjD,OAAO,CAAC,KAAK,CAAuB;IAC7B,KAAK,UAAS;IACrB,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,OAAO,CAAC,CAAa;IAE7B,wDAAwD;IACxD,OAAO,CAAC,cAAc,CAAqC;IAC3D,4DAA4D;IAC5D,OAAO,CAAC,eAAe,CAAqC;gBAG1D,QAAQ,EAAE,YAAY,EACtB,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;KAAE;IAO5D,oEAAoE;IACpE,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI;IAOrD,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI;IAOtD,6DAA6D;IAC7D,YAAY,CAAC,IAAI,EAAE,MAAM;IAUzB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAyBrC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAInC,OAAO,CAAC,aAAa;IAWf,cAAc,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE;YA0BjD,WAAW;IAezB,OAAO;CAKR"}

package/dist/core/local-snapshot-cache.d.ts

@@ -0,0 +1,72 @@
+/**
+ * IndexedDB local snapshot cache for draft persistence.
+ *
+ * Stores canonical snapshots locally for fast recovery on page reload or
+ * crash. Completely separate from preview bridge storage/localStorage.
+ *
+ * Schema: one object store keyed by draftId, holding:
+ * - tree: FileSystemTree (serializable JSON)
+ * - treeHash: SHA-256 of canonical representation
+ * - installFingerprint: for install-skip checks
+ * - chatHistory: sanitized/capped conversation
+ * - savedAt: epoch ms timestamp
+ * - revisionId: last known server revision
+ *
+ * Eviction: snapshots older than 7 days are cleaned up on open.
+ */
+import type { FileSystemTree } from "@webcontainer/api";
+import type { DraftSnapshotMeta } from "../types";
+export interface LocalSnapshotRecord {
+    /** Primary key — the draftId */
+    draftId: string;
+    /** The file system tree (JSON-serializable) */
+    tree: FileSystemTree;
+    /** SHA-256 of the canonical snapshot */
+    treeHash?: string;
+    /** Install fingerprint for skip checks */
+    installFingerprint?: string;
+    /** Server revision (last known) */
+    revisionId?: string;
+    /** Sanitized chat history */
+    chatHistory?: unknown[];
+    /** When this snapshot was saved (epoch ms) */
+    savedAt: number;
+}
+/**
+ * Save a local snapshot for the given draft. Overwrites any existing entry.
+ */
+export declare function saveLocalSnapshot(draftId: string, tree: FileSystemTree, meta: DraftSnapshotMeta): Promise<void>;
+/**
+ * Load a local snapshot for the given draft, or null if none exists.
+ */
+export declare function loadLocalSnapshot(draftId: string): Promise<LocalSnapshotRecord | null>;
+/**
+ * Delete the local snapshot for a draft.
+ */
+export declare function deleteLocalSnapshot(draftId: string): Promise<void>;
+/**
+ * Check if a local snapshot exists that is newer than the given timestamp.
+ * `remoteSavedAt` can be an ISO 8601 string or epoch ms number.
+ */
+export declare function hasNewerLocalSnapshot(draftId: string, remoteSavedAt: string | number): Promise<boolean>;
+/**
+ * Get the savedAt timestamp for a local snapshot, or null.
+ */
+export declare function getLocalSnapshotTimestamp(draftId: string): Promise<number | null>;
+/**
+ * List all local draft IDs with their metadata (no tree data).
+ */
+export declare function listLocalSnapshots(): Promise<Array<{
+    draftId: string;
+    savedAt: number;
+    treeHash?: string;
+}>>;
+/**
+ * Manually trigger eviction (e.g. when storage quota is tight).
+ */
+export declare function evictStaleLocalSnapshots(): Promise<void>;
+/**
+ * Clear all local snapshots. Use with caution (e.g. user-initiated reset).
+ */
+export declare function clearAllLocalSnapshots(): Promise<void>;
+//# sourceMappingURL=local-snapshot-cache.d.ts.map

package/dist/core/local-snapshot-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-snapshot-cache.d.ts","sourceRoot":"","sources":["../../src/core/local-snapshot-cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAelD,MAAM,WAAW,mBAAmB;IAClC,gCAAgC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,IAAI,EAAE,cAAc,CAAC;IACrB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6BAA6B;IAC7B,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;IACxB,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAC;CACjB;AAmED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,IAAI,CAAC,CAYf;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAGrC;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAExE;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,GAAG,MAAM,GAC7B,OAAO,CAAC,OAAO,CAAC,CAUlB;AAED;;GAEG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAGxB;AAED;;GAEG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CACjD,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAC/D,CAkBA;AAgCD;;GAEG;AACH,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,IAAI,CAAC,CAG9D;AAED;;GAEG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAE5D"}

package/dist/core/path-policy.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Shared path normalization, secret classifier, and validation policy.
+ *
+ * This is the single source of truth for:
+ * - Path normalization (backslash → slash, null-byte rejection, traversal blocking)
+ * - Secret file detection (env files, keys, credentials, certificates)
+ * - Excluded directory lists (node_modules, .vite, dist, etc.)
+ * - File/snapshot size caps
+ * - Approval-required path checks for MCP tools
+ *
+ * Used by: filesystem.ts, mcp-adapter.ts, code-editor, file-explorer,
+ * draft API validation, and hydration.
+ */
+/** Directories excluded from tree reads, snapshots, and explorer display. */
+export declare const EXCLUDED_DIRS: Set<string>;
+/** Maximum number of files allowed in a snapshot. */
+export declare const MAX_SNAPSHOT_FILES = 2000;
+/** Maximum uncompressed snapshot size in bytes (50 MB). */
+export declare const MAX_SNAPSHOT_BYTES: number;
+/** Maximum single file size in bytes (5 MB). */
+export declare const MAX_FILE_BYTES: number;
+/** Large-file threshold for code editor (500 KB). Files above this open read-only. */
+export declare const LARGE_FILE_THRESHOLD: number;
+/**
+ * Normalize a path for security comparisons. Converts backslashes to forward
+ * slashes, trims whitespace, and ensures a leading `/`.
+ */
+export declare function normalizePath(path: string): string;
+/**
+ * Extract the basename (last segment) from a normalized path.
+ */
+export declare function getBasename(path: string): string;
+/**
+ * Validate and normalize a relative path from user/agent input.
+ *
+ * - Rejects empty paths, null bytes, absolute paths, and `..` traversal.
+ * - Returns a normalized absolute path (leading `/`).
+ *
+ * @throws Error on invalid paths
+ */
+export declare function validateAndNormalizePath(path: string): string;
+/**
+ * Check whether a file path matches any known secret/credential pattern.
+ *
+ * @param path - Normalized absolute path (e.g. `/src/.env.local`)
+ */
+export declare function isSecretPath(path: string): boolean;
+/**
+ * Validate a path for security: normalize + check secret rules.
+ * Used by MCP adapter, editor actions, and file explorer mutations.
+ *
+ * @param path - Relative path from user/agent input
+ * @returns Normalized absolute path
+ * @throws Error if path is invalid or targets a secret file
+ */
+export declare function sanitizePath(path: string): string;
+/**
+ * Check if a directory entry name should be excluded from tree walks.
+ */
+export declare function isExcludedDir(name: string): boolean;
+/**
+ * Check if a path segment belongs to an excluded directory.
+ */
+export declare function pathContainsExcludedDir(path: string): boolean;
+/**
+ * Determine if a normalized path requires user approval before modification.
+ */
+export declare function pathRequiresApproval(path: string): boolean;
+/**
+ * Check if npm args contain a blocked flag. Returns the flag if found, null otherwise.
+ */
+export declare function getBlockedNpmFlag(args: string[]): string | null;
+/**
+ * Check if npm args contain shell composition characters.
+ */
+export declare function hasShellCompositionChars(args: string[]): boolean;
+//# sourceMappingURL=path-policy.d.ts.map

package/dist/core/path-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-policy.d.ts","sourceRoot":"","sources":["../../src/core/path-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,6EAA6E;AAC7E,eAAO,MAAM,aAAa,aAMxB,CAAC;AAuBH,qDAAqD;AACrD,eAAO,MAAM,kBAAkB,OAAO,CAAC;AAEvC,2DAA2D;AAC3D,eAAO,MAAM,kBAAkB,QAAmB,CAAC;AAEnD,gDAAgD;AAChD,eAAO,MAAM,cAAc,QAAkB,CAAC;AAE9C,sFAAsF;AACtF,eAAO,MAAM,oBAAoB,QAAa,CAAC;AAM/C;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIlD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGhD;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA2B7D;AAMD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAOlD;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMjD;AAMD;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAG7D;AA6CD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAe1D;AAkBD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAgB/D;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAEhE"}

package/dist/core/preview-channel.d.ts

@@ -41,16 +41,16 @@ export declare const BridgeResponseSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     id: string;
     error?: string | undefined;
+    done?: boolean | undefined;
     result?: unknown;
     chunk?: unknown;
-    done?: boolean | undefined;
     subscribed?: boolean | undefined;
 }, {
     id: string;
     error?: string | undefined;
+    done?: boolean | undefined;
     result?: unknown;
     chunk?: unknown;
-    done?: boolean | undefined;
     subscribed?: boolean | undefined;
 }>;
 export type BridgeResponse = z.infer<typeof BridgeResponseSchema>;

package/dist/core/process-registry.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Keyed process registry for the WebContainer IDE.
+ *
+ * Manages named process slots (install, dev-server, user-command) so that:
+ * - Duplicate launches of the same key are blocked
+ * - All process stdout/stderr is multiplexed into registered listeners
+ * - Terminal views can subscribe/unsubscribe to the output stream
+ * - Processes can be killed by key
+ *
+ * This module does NOT depend on React — it is a plain TypeScript service
+ * consumed by both the provider and terminal view.
+ */
+import type { WebContainer } from "@webcontainer/api";
+/** Well-known process keys. Arbitrary string keys are also allowed. */
+export type ProcessKey = "install" | "dev-server" | "user-command" | (string & {});
+export interface ProcessEntry {
+    key: ProcessKey;
+    command: string;
+    args: string[];
+    /** Resolves with the exit code when the process ends. */
+    exitCode: Promise<number>;
+    /** Kill the process. */
+    kill: () => void;
+    /** Timestamp when the process was spawned. */
+    startedAt: number;
+}
+export type OutputListener = (key: ProcessKey, chunk: string) => void;
+export type ProcessEventListener = (key: ProcessKey, entry: ProcessEntry | null) => void;
+export declare class ProcessRegistry {
+    private processes;
+    private outputListeners;
+    private processEventListeners;
+    private instance;
+    constructor(instance: WebContainer);
+    /** Check if a process is currently running under the given key. */
+    isRunning(key: ProcessKey): boolean;
+    /** Get the entry for a running process, or null. */
+    get(key: ProcessKey): ProcessEntry | null;
+    /** Get all currently running process entries. */
+    getAll(): ProcessEntry[];
+    /**
+     * Spawn a process under a keyed slot. If the key is already occupied,
+     * throws an error instead of spawning a duplicate.
+     *
+     * @param key - Unique slot key (e.g. "dev-server")
+     * @param command - Command to run (e.g. "npm")
+     * @param args - Arguments (e.g. ["run", "dev"])
+     * @param options.timeout - Kill after this many ms (0 = no timeout)
+     * @param options.maxOutput - Kill if output exceeds this many bytes (default 2MB)
+     * @returns The process entry
+     */
+    spawn(key: ProcessKey, command: string, args: string[], options?: {
+        timeout?: number;
+        maxOutput?: number;
+    }): Promise<ProcessEntry>;
+    /** Kill a process by key. No-op if not running. */
+    kill(key: ProcessKey): void;
+    /** Kill all running processes. */
+    killAll(): void;
+    /** Subscribe to multiplexed output from all processes. */
+    onOutput(listener: OutputListener): () => void;
+    /** Subscribe to process start/stop events. */
+    onProcessEvent(listener: ProcessEventListener): () => void;
+    /** Write arbitrary text to the output stream (e.g. for system messages). */
+    writeSystemMessage(message: string): void;
+    private emitOutput;
+    private emitProcessEvent;
+    /** Tear down the registry. Kills all processes and clears listeners. */
+    destroy(): void;
+}
+//# sourceMappingURL=process-registry.d.ts.map

package/dist/core/process-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-registry.d.ts","sourceRoot":"","sources":["../../src/core/process-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAMtD,uEAAuE;AACvE,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,YAAY,GAAG,cAAc,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAEnF,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,UAAU,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,yDAAyD;IACzD,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,wBAAwB;IACxB,IAAI,EAAE,MAAM,IAAI,CAAC;IACjB,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;AACtE,MAAM,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI,KAAK,IAAI,CAAC;AAMzF,qBAAa,eAAe;IAC1B,OAAO,CAAC,SAAS,CAAuC;IACxD,OAAO,CAAC,eAAe,CAA6B;IACpD,OAAO,CAAC,qBAAqB,CAAmC;IAChE,OAAO,CAAC,QAAQ,CAAe;gBAEnB,QAAQ,EAAE,YAAY;IAQlC,mEAAmE;IACnE,SAAS,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO;IAInC,oDAAoD;IACpD,GAAG,CAAC,GAAG,EAAE,UAAU,GAAG,YAAY,GAAG,IAAI;IAIzC,iDAAiD;IACjD,MAAM,IAAI,YAAY,EAAE;IAQxB;;;;;;;;;;OAUG;IACG,KAAK,CACT,GAAG,EAAE,UAAU,EACf,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GACjD,OAAO,CAAC,YAAY,CAAC;IA2GxB,mDAAmD;IACnD,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,IAAI;IAO3B,kCAAkC;IAClC,OAAO,IAAI,IAAI;IAUf,0DAA0D;IAC1D,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,IAAI;IAO9C,8CAA8C;IAC9C,cAAc,CAAC,QAAQ,EAAE,oBAAoB,GAAG,MAAM,IAAI;IAO1D,4EAA4E;IAC5E,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAQzC,OAAO,CAAC,UAAU;IAUlB,OAAO,CAAC,gBAAgB;IAUxB,wEAAwE;IACxE,OAAO,IAAI,IAAI;CAKhB"}

package/dist/core/process.d.ts

@@ -2,6 +2,10 @@
  * WebContainer process spawning with output buffering and timeout control.
  */
 import type { WebContainer } from "@webcontainer/api";
+export declare class DevServerStartupError extends Error {
+    output: string;
+    constructor(message: string, output: string);
+}
 export interface ProcessResult {
     exitCode: Promise<number>;
     kill: () => void;
@@ -12,6 +16,7 @@ export declare function spawnWithOutput(instance: WebContainer, command: string,
 }): Promise<ProcessResult>;
 export declare function spawnDevServer(instance: WebContainer, options?: {
     onOutput?: (chunk: string) => void;
+    timeout?: number;
 }): Promise<{
     url: Promise<string>;
     kill: () => void;

package/dist/core/process.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"process.d.ts","sourceRoot":"","sources":["../../src/core/process.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAChE,OAAO,CAAC,aAAa,CAAC,CA2ExB;AAED,wBAAsB,cAAc,CAClC,QAAQ,EAAE,YAAY,EACtB,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE;;;;GAsBjD"}
+{"version":3,"file":"process.d.ts","sourceRoot":"","sources":["../../src/core/process.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,MAAM,EAAE,MAAM,CAAC;gBAEH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAK5C;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAChE,OAAO,CAAC,aAAa,CAAC,CA2ExB;AAED,wBAAsB,cAAc,CAClC,QAAQ,EAAE,YAAY,EACtB,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE;;;;GAoEnE"}

package/dist/core/write-skills.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Writes the pre-rendered skill files to .vibe/skills/ in the WebContainer.
+ *
+ * Called during the boot sequence, after the template is mounted. The skills
+ * are markdown reference guides that the Direct LLM agent can load on demand
+ * via the read_file tool.
+ *
+ * @module
+ */
+import type { WebContainer } from "@webcontainer/api";
+/**
+ * Write all skill files to `.vibe/skills/` in the given WebContainer.
+ *
+ * This is safe to call multiple times — files are overwritten if they exist.
+ * The `.vibe/` directory is excluded from project snapshots by path policy.
+ */
+export declare function writeSkillFiles(instance: WebContainer): Promise<void>;
+//# sourceMappingURL=write-skills.d.ts.map

package/dist/core/write-skills.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-skills.d.ts","sourceRoot":"","sources":["../../src/core/write-skills.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGtD;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAU3E"}

package/dist/ide-theme.css

@@ -23,7 +23,7 @@
 
   /* Accent — tertiary gold/amber from design tokens */
   --ide-accent: oklch(0.8544 0.1746 90.88);
-  --ide-accent-soft: rgba(234, 179, 8, 0.10);
+  --ide-accent-soft: rgba(234, 179, 8, 0.1);
   --ide-accent-hover: oklch(0.9 0.16 90.88);
   --ide-accent-muted: oklch(0.7 0.14 90.88);
 
@@ -229,6 +229,21 @@
   border-color: var(--ide-accent);
 }
 
+/* ── Starter Prompt Pill ────────────────────────────────── */
+.ide-starter-prompt {
+  background: var(--ide-surface);
+  color: var(--ide-text-secondary);
+  border: 1px solid var(--ide-border);
+  transition-property: color, border-color, transform;
+  transition-duration: 150ms;
+  transition-timing-function: cubic-bezier(0.4, 0, 0.2, 1);
+}
+
+.ide-starter-prompt:hover {
+  border-color: var(--ide-accent);
+  color: var(--ide-accent);
+}
+
 /* ── Reduce motion ─────────────────────────────────────── */
 @media (prefers-reduced-motion: reduce) {
   .ide-spinner {
@@ -246,3 +261,33 @@
     transition-duration: 0ms;
   }
 }
+
+/* Fix Tailwind conflicting with Monaco Editor */
+.monaco-editor textarea.inputarea {
+  resize: none !important;
+  border: none !important;
+  outline: none !important;
+  box-shadow: none !important;
+  background: transparent !important;
+}
+
+/* Fix Tailwind conflicting with xterm.js helper textarea */
+.xterm-helper-textarea {
+  position: absolute !important;
+  opacity: 0 !important;
+  left: -9999em !important;
+  top: 0 !important;
+  width: 0 !important;
+  height: 0 !important;
+  z-index: -5 !important;
+  overflow: hidden !important;
+  resize: none !important;
+  border: none !important;
+  outline: none !important;
+  box-shadow: none !important;
+  padding: 0 !important;
+}
+.monaco-editor .slider {
+  border: none !important;
+  outline: none !important;
+}

package/dist/index.d.ts

@@ -5,19 +5,25 @@
  * consumers need: types, core runtime, MCP layer, template generation,
  * and React components/hooks.
  */
-export type { TemplateId, TemplateVars, RightPaneTab, UnifiedMessageStatus, UnifiedConnectionStatus, UnifiedArtifact, UnifiedStatusUpdate, UnifiedToolInvocation, UnifiedMessage, VibeIdeChatAdapter, VibeIdePreviewPolicy, VibeIdePersistenceAdapter, VibeIdeApprovalAdapter, WebContainerMcpAdapterOptions, VibeIdeBootOptions, VibeIdeProviderProps, VibeIdeSplitLayoutProps, VibeIdeContextValue, } from "./types";
+export type { TemplateId, TemplateVars, RightPaneTab, UnifiedMessageStatus, UnifiedConnectionStatus, UnifiedArtifact, UnifiedStatusUpdate, UnifiedToolInvocation, UnifiedAttachment, UnifiedMessage, VibeIdeChatAdapter, VibeIdePreviewPolicy, VibeIdePersistenceAdapter, DraftSnapshotMeta, VibeIdeApprovalAdapter, WebContainerMcpAdapterOptions, VibeIdeBootOptions, VibeIdeProviderProps, VibeIdeSplitLayoutProps, VibeIdeContextValue, } from "./types";
 export { bootWebContainer, teardownWebContainer, getWebContainer, WebContainerTabBlockedError, } from "./core/boot";
-export { readFileTree, serializeProject, writeFileTree, WriteCoalescer, } from "./core/filesystem";
+export { readFileTree, readTreeStructure, serializeProject, createCanonicalSnapshot, snapshotToFileSystemTree, writeFileTree, WriteCoalescer, type CanonicalFileEntry, type CanonicalSnapshot, type TreeEntry, } from "./core/filesystem";
 export { spawnWithOutput, spawnDevServer, type ProcessResult, } from "./core/process";
+export { ProcessRegistry, type ProcessKey, type ProcessEntry, type OutputListener, type ProcessEventListener, } from "./core/process-registry";
+export { normalizePath, getBasename, validateAndNormalizePath, isSecretPath, sanitizePath, isExcludedDir, pathContainsExcludedDir, pathRequiresApproval, getBlockedNpmFlag, hasShellCompositionChars, EXCLUDED_DIRS, MAX_SNAPSHOT_FILES, MAX_SNAPSHOT_BYTES, MAX_FILE_BYTES, LARGE_FILE_THRESHOLD, } from "./core/path-policy";
 export { installDependencies, computeInstallFingerprint, } from "./core/install";
+export { saveLocalSnapshot, loadLocalSnapshot, deleteLocalSnapshot, hasNewerLocalSnapshot, getLocalSnapshotTimestamp, listLocalSnapshots, evictStaleLocalSnapshots, clearAllLocalSnapshots, type LocalSnapshotRecord, } from "./core/local-snapshot-cache";
 export { createPreviewChannel, createRequestHandler, BridgeCapabilitySchema, BridgeRequestSchema, BridgeResponseSchema, type IframeRef, type BridgeCapability, type BridgeRequest, type BridgeResponse, type StreamingContext, type CapabilityHandler, } from "./core/preview-channel";
 export { BRIDGE_DEV_SHIM_SOURCE } from "./core/bridge-shim";
 export { injectDevShim } from "./core/inject-shim";
 export { webContainerToolArgumentSchemas, WebContainerToolSchema, webContainerToolsDefinition, type WebContainerToolCall, } from "./mcp/mcp-tools";
 export { WebContainerMcpAdapter, createWebContainerMcpAdapter, } from "./mcp/mcp-adapter";
 export { getVibeIdeTemplateTree } from "./templates/generated";
+export { generateCoreRules } from "./prompts/core-rules";
+export { getSkillFiles, getSkillsMeta, getSkillContent, type SkillFileEntry, type SkillMeta, type SkillEntry, } from "./prompts/skills";
 export { VibeIdeProvider } from "./react/provider";
 export { useVibeIde } from "./react/use-vibe-ide";
+export { useAutosave, type AutosaveState, type UseAutosaveOptions, type RemoteSaveStatus } from "./react/use-autosave";
 export { VibeIdeSplitLayout } from "./react/vibe-ide-layout";
 export { VibeIdePreviewPane } from "./react/vibe-ide-preview-pane";
 export { VibeIdeToolbar } from "./react/vibe-ide-toolbar";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,YAAY,EACV,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,oBAAoB,EACpB,uBAAuB,EACvB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,cAAc,EACd,kBAAkB,EAClB,oBAAoB,EACpB,yBAAyB,EACzB,sBAAsB,EACtB,6BAA6B,EAC7B,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,SAAS,CAAC;AAMjB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,2BAA2B,GAC5B,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,cAAc,GACf,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,eAAe,EACf,cAAc,EACd,KAAK,aAAa,GACnB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,GACvB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAMnD,OAAO,EACL,+BAA+B,EAC/B,sBAAsB,EACtB,2BAA2B,EAC3B,KAAK,oBAAoB,GAC1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAM3B,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAM/D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,YAAY,EACV,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,oBAAoB,EACpB,uBAAuB,EACvB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,oBAAoB,EACpB,yBAAyB,EACzB,iBAAiB,EACjB,sBAAsB,EACtB,6BAA6B,EAC7B,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,SAAS,CAAC;AAMjB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,2BAA2B,GAC5B,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,EACvB,wBAAwB,EACxB,aAAa,EACb,cAAc,EACd,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,SAAS,GACf,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,eAAe,EACf,cAAc,EACd,KAAK,aAAa,GACnB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,eAAe,EACf,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,aAAa,EACb,WAAW,EACX,wBAAwB,EACxB,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,uBAAuB,EACvB,oBAAoB,EACpB,iBAAiB,EACjB,wBAAwB,EACxB,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,EACrB,yBAAyB,EACzB,kBAAkB,EAClB,wBAAwB,EACxB,sBAAsB,EACtB,KAAK,mBAAmB,GACzB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,GACvB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAMnD,OAAO,EACL,+BAA+B,EAC/B,sBAAsB,EACtB,2BAA2B,EAC3B,KAAK,oBAAoB,GAC1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAM3B,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAM/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,EACL,aAAa,EACb,aAAa,EACb,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,KAAK,UAAU,GAChB,MAAM,kBAAkB,CAAC;AAM1B,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,KAAK,aAAa,EAAE,KAAK,kBAAkB,EAAE,KAAK,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACvH,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC"}