@codeyam-editor/codeyam-editor 0.1.12-staging.g83e4a0c → 0.1.12-staging.gf52ff7a

package/npm/fleet-build-data.js

@@ -84,6 +84,13 @@ function buildVmEnvelope(v, ctx) {
     step: v.step != null ? v.step : null,
     mode: v.mode || null,
     label: v.label || null,
+    // What the last closed cycle was, { feature, closedAt }, from the editor's
+    // `resumeMode: "completed"` shape. Null when the cycle is open, when it
+    // closed through `assist-complete` (which writes no marker), or on an editor
+    // that predates the field. The card names the finished feature from it.
+    cycleClosed: v.cycleClosed
+      ? { feature: v.cycleClosed.feature || null, closedAt: v.cycleClosed.closedAt || null }
+      : null,
     status: ctx.status,
     orphan: ctx.orphan || null,
     degradedReasons: ctx.degradedReasons || [],
@@ -184,7 +191,7 @@ function buildVmEnvelope(v, ctx) {
 // if you do one without the other.
 const REQUIRED_CARD_FIELDS = [
   'n', 'url', 'previewUrl', 'appPort', 'previewServing', 'previewIngress', 'reachable', 'reachableSource', 'hasSession', 'brokerLive', 'brokerStatus',
-  'awaitingInput', 'needsCleanup', 'feature', 'selectedPlan', 'step', 'mode', 'label', 'status', 'orphan',
+  'awaitingInput', 'needsCleanup', 'feature', 'selectedPlan', 'step', 'mode', 'label', 'cycleClosed', 'status', 'orphan',
   'degradedReasons', 'setupSteps', 'attentionReasons',
   'isHead', 'headHolderUnreachable', 'queuePos', 'queueLen',
   'job', 'config', 'project', 'variant', 'cardIdentity', 'brokerHistory',

package/npm/fleet-job-badge.js

@@ -1,5 +1,7 @@
 'use strict';
 
+const faf = require('./fleet-add-failure');
+
 // npm/fleet-job-badge.js — pure verdict for the fleet dashboard's failed-job
 // badge reconciliation (improve39). A VM's last terminal-error heavy job
 // (add/error, reset-all error, reset-client error, …) used to stick on the
@@ -96,4 +98,33 @@ function canClearBadge({ rostered, job } = {}) {
   return { ok: true, reason: null, cleanup: 'badge-only' };
 }
 
-module.exports = { shouldReconcileFailedBadge, shouldClearReconciledBadge, canClearBadge };
+// The short label the card prints ahead of a terminal job's headline — the
+// "<action> <state>" prefix, derived from the classifier's verdict rather than
+// from the coarse `job.state` alone.
+//
+//   job                  the carried job record ({ action, state, category, ... })
+//   wiringDeadlineBlown  the add's wiring tail gave up (the calm-hold release)
+//
+// A terminal add error is NOT one fact. The classifier (npm/fleet-add-failure.js)
+// splits it into outcomes PROVEN bad — which keep "add failed" — and the calm
+// CALM_ADD_CATEGORIES side, where nothing proves the VM dead. Printing "add error"
+// on the calm side produced a card contradicting itself: "add error · Add outcome
+// unconfirmed", on a branch that is deliberately not retryable, so it named a
+// fault and offered no fix (three healthy VMs, 2026-09-28). The calm label is
+// gated on holdConvergingBadge — the SAME predicate deriveStatus uses to pick
+// add-verifying/add-converging over add-failed — so the label and the status dot
+// can never disagree about whether this is a failure.
+//
+// Only the LABEL changes. `job.state` stays 'error', so canRetryAdd,
+// canClearBadge and shouldReconcileFailedBadge keep gating on it unchanged.
+function jobBadgeLabel({ job, wiringDeadlineBlown } = {}) {
+  if (!job) return '';
+  if (job.action === 'add' && job.state === 'error') {
+    return faf.holdConvergingBadge({ category: job.category, wiringDeadlineBlown })
+      ? 'add unconfirmed'
+      : 'add failed';
+  }
+  return `${job.action} ${job.state}`;
+}
+
+module.exports = { shouldReconcileFailedBadge, shouldClearReconciledBadge, canClearBadge, jobBadgeLabel };

package/npm/fleet-live-status.js

@@ -31,6 +31,17 @@
 // mid-feature post-restart agent is not terminal (`needsCleanup` falsy) and stays
 // 'building', preserving the 2026-06-20 decoupled-agent fix above.
 //
+// The closed-cycle refinement (fleet--fix-a-finished-vm-is-never-flagged): both
+// `feature-complete` and `assist-complete` delete `editor-step.json` but keep the
+// saved build-agent session, so /api/session-info answers with the
+// `resumeMode: "completed"` shape — `hasSession: true`, no awaiting flag, no
+// `needsCleanup`. That shape used to fall straight into the `hasSession ⇒
+// 'building'` line, so a finished VM read "building" forever and was never
+// flagged. We key on `resumeMode`, not on the `cycleClosed` marker, because
+// only `feature-complete` writes the marker. No broker check is needed to tell
+// a parked agent from a working one: the moment the agent takes a new request
+// it enters triage, which writes step state and retires the completed shape.
+//
 // Returns 'waiting' | 'building' | 'session-done' | 'idle' for a reachable VM, or
 // `null` when the VM is unreachable — the caller maps null to its own
 // asleep/unreachable verdict (it owns the running-fleet snapshot this module
@@ -43,6 +54,8 @@ function liveSessionStatus(v, brokerStatus) {
   // asleep/unreachable mapping — a stale broker signal must not mask it.
   if (!v.reachable) return null;
   if (v.hasSession && v.awaitingUserInput) return awaitingVerdict(v);
+  // The cycle closed and nothing has started since — finished, review it.
+  if (v.resumeMode === 'completed') return 'session-done';
   if (v.hasSession) return 'building';
   // No editor-owned session, but a live agent may still be working in the PTY
   // broker (decoupled lifetime — see docs/process-model.md). The broker

package/npm/fleet-notify.js

@@ -0,0 +1,130 @@
+'use strict';
+// Push alerts for the Fleet Dashboard: one phone notification each time a VM
+// becomes "needs you" — its cycle finished, or it has sat on a gate past the
+// needs-you threshold (npm/fleet-stuck-status.js decides both). server.js does
+// the I/O; the decision here is pure so the dedupe rules are unit-testable.
+//
+// Why the dashboard and not each VM: the operator host already sees the whole
+// fleet, so one topic in the operator's own `$HOME/.codeyam/notify.env` covers
+// every VM. Provisioning the topic onto each VM was rejected — a client VM's
+// container must never hold the operator's topic.
+//
+// Dedupe: each VM's last alert is remembered as a KEY naming the episode — the
+// cycle's close time for a finished VM, the step's start time for a waiting
+// one. A 3s poll, a dashboard restart (the sent-set is persisted by the
+// caller), or a status flap back to the same episode never re-sends; a new
+// cycle or a new gate carries a new key and does.
+
+// The episode a needs-you card belongs to. An assist cycle writes no close
+// marker, so its key is just 'done:' — see the building rule in
+// decideNotifications for how that episode ends.
+function episodeKey(env) {
+  if (env.status === 'session-done') {
+    return 'done:' + ((env.cycleClosed && env.cycleClosed.closedAt) || '');
+  }
+  return 'waiting:' + (env.startedAt || '');
+}
+
+function alertFor(env, key) {
+  const vm = 'VM-' + env.n;
+  if (env.status === 'session-done') {
+    const feature = (env.cycleClosed && env.cycleClosed.feature) || env.feature;
+    return {
+      n: env.n,
+      key,
+      title: vm + ' finished',
+      message: feature ? vm + ' finished: ' + feature : vm + ' finished its work and is ready for review',
+      clickUrl: env.url || null,
+    };
+  }
+  const what = env.label || env.feature;
+  return {
+    n: env.n,
+    key,
+    title: vm + ' is waiting on you',
+    message: what ? vm + ' is waiting on you: ' + what : vm + ' is waiting on you',
+    clickUrl: env.url || null,
+  };
+}
+
+// decideNotifications(prevSent, envelopes) -> { toSend, nextSent, changed }
+//
+//   prevSent  — { [n]: { key } } persisted from the previous call.
+//   envelopes — the per-VM card envelopes buildData produced this poll.
+//
+// Rules:
+//   - A needs-you card whose episode key differs from the remembered one is
+//     sent, and its key remembered.
+//   - A needs-you card whose key matches is skipped.
+//   - A card that is NOT needs-you keeps its remembered key, so a flap through
+//     unreachable/reconnecting back into the same episode stays quiet.
+//   - Except: a card back to 'building' after an assist cycle (key 'done:')
+//     forgets it. That key cannot tell one assist cycle from the next, so the
+//     return to work is the only thing that ends the episode.
+//   - A VM absent from `envelopes` (destroyed) is forgotten.
+//   - `changed` says whether nextSent differs from prevSent, so the caller
+//     writes the persisted copy only when there is something new to write.
+function decideNotifications(prevSent, envelopes) {
+  const prev = prevSent || {};
+  const toSend = [];
+  const nextSent = {};
+  for (const env of envelopes || []) {
+    if (!env || env.n == null) continue;
+    const remembered = prev[env.n] || null;
+    const needsYou = !!(env.attention && env.attention.needsYou);
+    if (needsYou) {
+      const key = episodeKey(env);
+      if (!remembered || remembered.key !== key) toSend.push(alertFor(env, key));
+      nextSent[env.n] = { key };
+      continue;
+    }
+    if (remembered && !(env.status === 'building' && remembered.key === 'done:')) {
+      nextSent[env.n] = remembered;
+    }
+  }
+  const changed = JSON.stringify(nextSent) !== JSON.stringify(prev);
+  return { toSend, nextSent, changed };
+}
+
+// The dashboard log line for one send attempt, so the operator can see in the
+// dashboard log which alerts went out and why one did not.
+function formatSendResult(item, result) {
+  if (result.ok) return `[notify] VM-${item.n}: ${item.title}`;
+  return `[notify] VM-${item.n} push failed: HTTP ${result.status}${result.error ? ' ' + result.error : ''}`;
+}
+
+// Parse the operator's notify config the same way .claude/hooks/claude-notify.sh
+// resolves it: an exported NTFY_TOPIC wins, else `$HOME/.codeyam/notify.env`
+// (KEY=value lines, as `editor notify-setup` writes them). Returns null when no
+// topic is configured — the caller then sends nothing, silently, like the hook.
+function resolveNotifyConfig(env, notifyEnvText) {
+  const e = env || {};
+  const fileVals = {};
+  for (const raw of String(notifyEnvText || '').split('\n')) {
+    const line = raw.trim().replace(/^export\s+/, '');
+    const m = /^([A-Z_][A-Z0-9_]*)=(.*)$/.exec(line);
+    if (!m) continue;
+    fileVals[m[1]] = m[2].trim().replace(/^(['"])(.*)\1$/, '$2');
+  }
+  const topic = e.NTFY_TOPIC || fileVals.NTFY_TOPIC || '';
+  if (!topic) return null;
+  const server = e.NTFY_SERVER || fileVals.NTFY_SERVER || 'https://ntfy.sh';
+  return { topic, server: server.replace(/\/+$/, '') };
+}
+
+// Send one alert to ntfy with the same headers claude-notify.sh uses. Resolves
+// to { ok, status } and never rejects: a failed push is logged by the caller,
+// never allowed to break a poll.
+async function sendNtfy(cfg, item, fetchImpl) {
+  const doFetch = fetchImpl || fetch;
+  const headers = { Title: item.title };
+  if (item.clickUrl) headers.Click = item.clickUrl;
+  try {
+    const res = await doFetch(cfg.server + '/' + cfg.topic, { method: 'POST', headers, body: item.message });
+    return { ok: res.status === 200, status: res.status };
+  } catch (e) {
+    return { ok: false, status: null, error: e && e.message };
+  }
+}
+
+module.exports = { decideNotifications, formatSendResult, resolveNotifyConfig, sendNtfy };

package/npm/fleet-queue.js

@@ -262,7 +262,64 @@ function queueWriteBlockReason(memo = {}) {
     : `commit queue read is failing${why} — the displayed order cannot be trusted; fix the read before changing the queue`;
 }
 
+/** Should this scheduled queue tick do any work at all?
+ *
+ *  The scheduled poll used to fetch and exec `branch-queue status` every
+ *  QUEUE_POLL_MS whether or not anyone had the dashboard open. On 2026-09-27
+ *  that was 13,120 binary starts (~4.7h of process time) across one 13h audit
+ *  window, competing with the audit for CPU. When no
+ *  browser has requested `/data` for `idleAfterMs`, the tick runs at most once
+ *  per `idleIntervalMs` — slow enough to cost nothing, fast enough that the
+ *  gone-head auto-release (which rides this poll) still fires within a minute.
+ *
+ *  `lastViewerAt` / `lastTickAt` are epoch ms or null. A null `lastViewerAt`
+ *  (nobody has looked since boot) counts as idle; a null `lastTickAt` always
+ *  ticks, so the boot read is never skipped. Pure; no I/O. */
+function shouldRunQueueTick({ now, lastViewerAt, lastTickAt, idleAfterMs, idleIntervalMs } = {}) {
+  const num = (v) => (typeof v === 'number' && Number.isFinite(v) ? v : null);
+  const t = num(now);
+  const tick = num(lastTickAt);
+  if (t === null || tick === null) return true;
+  const viewer = num(lastViewerAt);
+  const watched = viewer !== null && t - viewer < (num(idleAfterMs) || 0);
+  if (watched) return true;
+  return t - tick >= (num(idleIntervalMs) || 0);
+}
+
+/** Does a freshly fetched queue-ref snapshot need a `branch-queue status` exec?
+ *
+ *  `branch-queue status` is a pure projection of `refs/codeyam/queue/*`, so
+ *  when those refs are byte-identical to the ones behind the last SUCCESSFUL
+ *  read, the exec can only return the answer already in the memo — and each
+ *  exec is a full binary start plus a second network fetch of the same refs.
+ *  Skipping it is what turns a per-tick process start into a per-change one.
+ *
+ *  Always exec when:
+ *    - the fingerprint could not be computed (`null` — never trust a failed
+ *      local read as "unchanged");
+ *    - no successful read has happened (`memo.readAt` null) or the last read
+ *      FAILED (`memo.error`) — a cached answer must never paper over an error,
+ *      the 2026-08-14 frozen-panel lesson mergeQueuePoll records;
+ *    - the refs moved since the fingerprint the memo was read against;
+ *    - the last exec is older than `maxAgeMs` — a safety net so a projection
+ *      that ever grows a non-ref input cannot freeze the panel indefinitely.
+ *
+ *  Returns { exec: boolean, reason: string }. Pure; no I/O. */
+function decideQueueStatusExec({ fingerprint, memo = {}, lastExecAt, now, maxAgeMs } = {}) {
+  if (typeof fingerprint !== 'string') return { exec: true, reason: 'fingerprint-unavailable' };
+  if (!(typeof memo.readAt === 'string' && memo.readAt)) return { exec: true, reason: 'never-read' };
+  if (typeof memo.error === 'string' && memo.error) return { exec: true, reason: 'last-read-failed' };
+  if (memo.fingerprint !== fingerprint) return { exec: true, reason: 'refs-changed' };
+  const at = (typeof lastExecAt === 'number' && Number.isFinite(lastExecAt)) ? lastExecAt : null;
+  const clock = (typeof now === 'number' && Number.isFinite(now)) ? now : null;
+  if (at === null || clock === null) return { exec: true, reason: 'max-age' };
+  if (clock - at >= (typeof maxAgeMs === 'number' ? maxAgeMs : 0)) return { exec: true, reason: 'max-age' };
+  return { exec: false, reason: 'refs-unchanged' };
+}
+
 module.exports = {
+  shouldRunQueueTick,
+  decideQueueStatusExec,
   decideAutoReleaseGoneHead,
   computeReorderTargets,
   nudgeQueueOrder,

package/npm/fleet-reset.js

@@ -50,6 +50,14 @@
 // repopulates over whatever remains). Emptying contents (not removing the dir)
 // also sidesteps the `rmdir` race entirely.
 //
+// The wipe NEVER descends into `.codeyam/agent-home`. Beside the two gitignored
+// infra files preserved above, it is the third thing that must survive: when
+// the editor relocates Claude's sign-in store into the project it lives at
+// `.codeyam/agent-home/claude`, and it holds a live sign-in no restore step
+// could recreate — wiping it strands the VM at `claude /login`. It is excluded
+// rather than round-tripped through a world-readable `/tmp` like the two files;
+// an untouched directory needs no restore, so the trap recovery is unchanged.
+//
 // The destructive region (park → broker-stop → wipe → restore) is made
 // FAILURE-SAFE with an EXIT trap installed before the park and disarmed after
 // a successful restore. If ANY step in that region aborts the chain, the trap
@@ -83,7 +91,11 @@ function codeyamDeepCleanSteps(E) {
     `{ __cy_recover() { ${recover}; }; trap '__cy_recover; exit 1' EXIT; }`,
     `(${E} editor stop-server --hold-for-restart --force-in-container || true)`,
     `(${E} editor pty-broker stop || true)`,
-    '( for i in 1 2 3 4 5; do find .codeyam -mindepth 1 -delete 2>/dev/null; [ -z "$(ls -A .codeyam 2>/dev/null)" ] && break; sleep 0.2; done; true )',
+    // Spares `.codeyam/agent-home` (see the header): `! -path` rather than
+    // `-prune`, because `-delete` implies `-depth`, under which `-prune` is a
+    // no-op. The done-check ignores it too, or a relocated VM would always
+    // spin the full retry budget.
+    '( for i in 1 2 3 4 5; do find .codeyam -mindepth 1 ! -path .codeyam/agent-home ! -path ".codeyam/agent-home/*" -delete 2>/dev/null; [ -z "$(ls -A .codeyam 2>/dev/null | grep -vx agent-home)" ] && break; sleep 0.2; done; true )',
     `( ${restoreCodeyam} )`,
     `( ${restoreElj} && rm -f /tmp/cy-elj.bak; true )`,
     `( ${restoreSs} && rm -f /tmp/cy-ss.bak; true )`,

package/npm/fleet-stuck-status.js

@@ -78,6 +78,11 @@ function elapsedMs(iso, nowMs) {
 //     longer drives this: liveSessionStatus already collapses an idle awaiting
 //     agent to 'idle' and a blocked one to 'waiting', so the status IS the
 //     discriminator.
+//   - A 'session-done' VM (its cycle closed) is "needs you" IMMEDIATELY, with
+//     no threshold: the work is finished and the operator reviewing it is the
+//     next move. Its `level` stays 'ok' — a finished VM is never slow or stuck.
+//     `needsYouElapsedMs` counts from `doneAt` (the cycle's close time) when the
+//     editor reports one, else null.
 //   - Missing/unparseable stepStartedAt degrades to stepElapsedMs:null,
 //     level:'ok', needsYou:false (older editor, no crash).
 function deriveAttention(opts) {
@@ -95,6 +100,9 @@ function deriveAttention(opts) {
     // its threshold. An 'idle' VM never reaches this branch.
     needsYouElapsedMs = stepElapsed;
     needsYou = stepElapsed != null && stepElapsed >= thresholds.needsYouMs;
+  } else if (o.status === 'session-done') {
+    needsYou = true;
+    needsYouElapsedMs = elapsedMs(o.doneAt, nowMs);
   } else if (o.status === 'building' && stepElapsed != null) {
     if (stepElapsed >= thresholds.stuckMs) level = 'stuck';
     else if (stepElapsed >= thresholds.slowMs) level = 'slow';

package/npm/launch-config.js

@@ -12,6 +12,7 @@ const { CANONICAL_EDITOR_REPO, EDITOR_VARIANTS, repoBasename, AGENT_ENV_VARS } =
 const { normalizeVmSlug } = require("./vm-urls");
 const { normalizeAccessList } = require("./fleet-vm-access");
 const { normalizeRepoUrl } = require("./fleet-env");
+const { posix: posixPath } = require("node:path");
 
 /** The build agents a VM's editor terminal can run, as the keys of cloud.js's
  *  AGENT_ENV_VARS. Deriving the selectable set from that map keeps it a single
@@ -1029,11 +1030,58 @@ function credentialShapeCheck(file) {
   return CREDENTIAL_SHAPE_PATTERNS.map((p) => `grep -Eq '${p}' ${file}`).join(" && ");
 }
 
+/** Where Claude's sign-in store lives in the container: the editor may relocate
+ *  it from the home store into the project. `RELOCATED_STORE_REL` MUST track
+ *  Rust's `RELOCATED_STORE_DIR` (crates/control-api/src/claude_store_relocation.rs);
+ *  it is resolved against the container's fixed app root `/workspace`. */
+const RELOCATED_STORE_REL = ".codeyam/agent-home/claude";
+const RELOCATED_STORE_DIR = `/workspace/${RELOCATED_STORE_REL}`;
+const HOME_STORE_DIR = "/root/.claude";
+
+/** Shell step that `cd`s into the directory holding Claude's `name` file —
+ *  `.credentials.json` or the onboarding `.claude.json` — so the caller then
+ *  names the file by basename. The relocated store wins when it exists; else the
+ *  home store. `.claude.json` mirrors the Rust `claude_json_path_at` asymmetry:
+ *  relocated → INSIDE the store, home → `/root/.claude.json` (beside the store,
+ *  never `/root/.claude/.claude.json`).
+ *
+ *  A `cd`, not a `$(…)` path, on purpose: the copy steps run through the VM-host
+ *  shell inside a double-quoted `bash -c "…"`, which would expand a command
+ *  substitution on the HOST (see `verifyBeforeMoveSink`). This contains no `$`
+ *  and no `"`, so it survives every quoting layer and resolves in the container.
+ *  The single definition of the store location, shared by the integrity probe,
+ *  the donor read and the copy sinks so they can never disagree. `dirs`
+ *  overrides the container locations (tests point it at temp dirs). Pure. */
+function claudeStoreCdStep(name, dirs = {}) {
+  const { relocated = RELOCATED_STORE_DIR, home = HOME_STORE_DIR } = dirs;
+  const homeDir = name === ".claude.json" ? posixPath.dirname(home) : home;
+  return `if [ -d ${relocated} ]; then cd ${relocated}; else cd ${homeDir}; fi`;
+}
+
+/** Shell assignment `STORE=project|home` naming which Claude store is live in
+ *  the container, for the dashboard gather. No token is read. `relocated`
+ *  overrides the container location for tests. Pure. */
+function claudeStoreProbe(relocated = RELOCATED_STORE_DIR) {
+  return `STORE=$(test -d ${relocated} && echo project || echo home)`;
+}
+
+/** Parse the gather's `STORE` marker: `"project"` / `"home"`, else `null` — an
+ *  absent marker (older gather, probe never ran) is unknown, never a fabricated
+ *  `home`. Pure. */
+function parseClaudeStore(marker) {
+  return marker === "project" || marker === "home" ? marker : null;
+}
+
 /** Shell assignment `CRED=1|0` for the donor-integrity probe: `1` when the
- *  credential at `file` passes `credentialShapeCheck`, `0` when it fails or is
- *  missing (either way the copy sink would refuse it). Pure. */
-function credentialIntegrityProbe(file) {
-  return `CRED=$( (${credentialShapeCheck(file)}) 2>/dev/null && echo 1 || echo 0)`;
+ *  credential passes `credentialShapeCheck`, `0` when it fails or is missing
+ *  (either way the copy sink would refuse it). With no `file`, the credential is
+ *  resolved via `claudeStoreCdStep` — relocated store first, then home — inside a
+ *  subshell, so the caller's cwd is untouched; `dirs` passes through to it. Pure. */
+function credentialIntegrityProbe(file, dirs) {
+  const check = file
+    ? credentialShapeCheck(file)
+    : `${claudeStoreCdStep(".credentials.json", dirs)} && ${credentialShapeCheck(".credentials.json")}`;
+  return `CRED=$( (${check}) 2>/dev/null && echo 1 || echo 0)`;
 }
 
 /** Parse the probe's `CRED` marker into the tri-state integrity verdict:
@@ -1087,13 +1135,17 @@ function donorSkippedLine(donor) {
 function verifyBeforeMoveSink(
   container,
   target,
-  { decode = true, requireCredentialShape = false } = {},
+  { decode = true, requireCredentialShape = false, cdStep = "" } = {},
 ) {
   const tmp = `${target}.cytmp`;
   const read = decode ? "base64 -d" : "cat";
   const shape = requireCredentialShape ? ` && ${credentialShapeCheck(tmp)}` : "";
+  // `cdStep` (e.g. `claudeStoreCdStep`) resolves the target's directory in the
+  // container first, so a relative `target` lands in the live store; a failed
+  // `cd` aborts before anything is written.
+  const cd = cdStep ? `${cdStep} || exit 1; ` : "";
   const script =
-    `umask 077; ${read} > ${tmp}; ` +
+    `${cd}umask 077; ${read} > ${tmp}; ` +
     `if [ -s ${tmp} ]${shape}; then mv ${tmp} ${target} && chmod 600 ${target}; ` +
     `else rm -f ${tmp}; exit 1; fi`;
   return `docker exec -i ${container} bash -c "${script}"`;
@@ -1108,8 +1160,8 @@ function verifyBeforeMoveSink(
  *
  *  Donor mode (the default) copies, container→container from the donor VM:
  *    1. host-file git credentials   → `$HOME/.codeyam-cloud-git-credentials`
- *    2. claude `.credentials.json`  → `/root/.claude/.credentials.json`
- *    3. claude `.claude.json`       → `/root/.claude.json`
+ *    2. claude `.credentials.json`  → the target's live store (`claudeStoreCdStep`)
+ *    3. claude `.claude.json`       → the target's live onboarding dotfile
  *  Step 3 (onboarding state — `hasCompletedOnboarding` + sibling keys) is what
  *  keeps the first interactive `claude` TUI from popping the welcome "Select
  *  login method" menu; without it the non-interactive `claude --print` probe
@@ -1134,19 +1186,27 @@ function buildCredsSteps({ mode, refInst = "", inst, container, gcloud, zone, n,
   // non-empty-but-corrupt donor must not clobber a working target. The
   // `.claude.json` (onboarding-state) copy has a different shape, so it keeps
   // the plain non-empty guard.
-  const claudeSink = verifyBeforeMoveSink(container, "/root/.claude/.credentials.json", {
+  // Both ends follow Claude's store wherever the editor put it (relocated into
+  // the project, or the home store): the donor is read from its live store and
+  // the target written into ITS live store, via the one `claudeStoreCdStep`.
+  const claudeSink = verifyBeforeMoveSink(container, ".credentials.json", {
     requireCredentialShape: true,
+    cdStep: claudeStoreCdStep(".credentials.json"),
+  });
+  const claudeJsonSink = verifyBeforeMoveSink(container, ".claude.json", {
+    cdStep: claudeStoreCdStep(".claude.json"),
   });
-  const claudeJsonSink = verifyBeforeMoveSink(container, "/root/.claude.json");
+  const donorRead = (name) =>
+    `docker exec ${container} bash -c "${claudeStoreCdStep(name)} && base64 ${name}"`;
   const loginHint = `run: docker exec -it ${container} claude /login on ${inst}`;
   if (mode === "donor") {
     return [
       `echo "copying git creds from ${refInst}..."`,
       `${gcloud} compute ssh ${refInst} --tunnel-through-iap --zone=${zone} --command='cat $HOME/.codeyam-cloud-git-credentials' 2>/dev/null | ${gcloud} compute ssh ${inst} --tunnel-through-iap --zone=${zone} --command='umask 077; cat > $HOME/.codeyam-cloud-git-credentials' 2>/dev/null || echo "CY_DEGRADED git creds copy failed on VM-${n} — re-copy creds from a live donor (the agent can't git pull/push until then)"`,
       `echo "copying claude auth from ${refInst}${acctNote} (container->container)..."`,
-      `${gcloud} compute ssh ${refInst} --tunnel-through-iap --zone=${zone} --command='docker exec ${container} base64 /root/.claude/.credentials.json' 2>/dev/null | ${gcloud} compute ssh ${inst} --tunnel-through-iap --zone=${zone} --command=${_shq(claudeSink)} 2>/dev/null && echo "claude auth copied" || echo "CY_DEGRADED claude-auth-not-seeded: claude auth copy failed on VM-${n} (empty/unreadable/malformed donor — existing creds left untouched, not overwritten with a corrupt credential) — ${loginHint}"`,
+      `${gcloud} compute ssh ${refInst} --tunnel-through-iap --zone=${zone} --command=${_shq(donorRead(".credentials.json"))} 2>/dev/null | ${gcloud} compute ssh ${inst} --tunnel-through-iap --zone=${zone} --command=${_shq(claudeSink)} 2>/dev/null && echo "claude auth copied" || echo "CY_DEGRADED claude-auth-not-seeded: claude auth copy failed on VM-${n} (empty/unreadable/malformed donor — existing creds left untouched, not overwritten with a corrupt credential) — ${loginHint}"`,
       `echo "copying claude.json (onboarding state) from ${refInst} (container->container)..."`,
-      `${gcloud} compute ssh ${refInst} --tunnel-through-iap --zone=${zone} --command='docker exec ${container} base64 /root/.claude.json' 2>/dev/null | ${gcloud} compute ssh ${inst} --tunnel-through-iap --zone=${zone} --command=${_shq(claudeJsonSink)} 2>/dev/null && echo "claude.json copied" || echo "CY_DEGRADED claude-auth-not-seeded: claude.json copy failed on VM-${n} — first interactive claude launch may show 'Select login method' menu; ${loginHint} once to complete onboarding"`,
+      `${gcloud} compute ssh ${refInst} --tunnel-through-iap --zone=${zone} --command=${_shq(donorRead(".claude.json"))} 2>/dev/null | ${gcloud} compute ssh ${inst} --tunnel-through-iap --zone=${zone} --command=${_shq(claudeJsonSink)} 2>/dev/null && echo "claude.json copied" || echo "CY_DEGRADED claude-auth-not-seeded: claude.json copy failed on VM-${n} — first interactive claude launch may show 'Select login method' menu; ${loginHint} once to complete onboarding"`,
     ];
   }
   if (mode === "host-stash") {
@@ -1532,6 +1592,11 @@ module.exports = {
   CREDENTIAL_SHAPE_PATTERNS,
   credentialShapeCheck,
   credentialIntegrityProbe,
+  RELOCATED_STORE_REL,
+  HOME_STORE_DIR,
+  claudeStoreCdStep,
+  claudeStoreProbe,
+  parseClaudeStore,
   parseCredentialIntact,
   donorSkippedLine,
   buildClaudeJsonPreserveSteps,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codeyam-editor/codeyam-editor",
-  "version": "0.1.12-staging.g83e4a0c",
+  "version": "0.1.12-staging.gf52ff7a",
   "description": "Language-agnostic managed execution sandbox for scenario-driven development",
   "bin": {
     "codeyam-editor": "./npm/cli.js"
@@ -9,10 +9,10 @@
     "playwright": "^1.58.2"
   },
   "optionalDependencies": {
-    "@codeyam-editor/codeyam-editor-darwin-arm64": "0.1.12-staging.g83e4a0c",
-    "@codeyam-editor/codeyam-editor-darwin-x64": "0.1.12-staging.g83e4a0c",
-    "@codeyam-editor/codeyam-editor-linux-x64": "0.1.12-staging.g83e4a0c",
-    "@codeyam-editor/codeyam-editor-win32-x64": "0.1.12-staging.g83e4a0c"
+    "@codeyam-editor/codeyam-editor-darwin-arm64": "0.1.12-staging.gf52ff7a",
+    "@codeyam-editor/codeyam-editor-darwin-x64": "0.1.12-staging.gf52ff7a",
+    "@codeyam-editor/codeyam-editor-linux-x64": "0.1.12-staging.gf52ff7a",
+    "@codeyam-editor/codeyam-editor-win32-x64": "0.1.12-staging.gf52ff7a"
   },
   "keywords": [
     "codeyam",

package/ui/dist/assets/{ContainerInspector-DSrne6Fx.js → ContainerInspector-B86bl6-K.js}

@@ -1,2 +1,2 @@
-import{j as e}from"./markdown-C9tbsVHX.js";import{b as a}from"./react-nrLBr15I.js";import{u as k}from"./useEvents-S3Qk1Y_d.js";import{k as E}from"./index-ngNVAM6P.js";function P({connected:t}){return e.jsx("span",{className:`inline-block rounded-full px-2 py-0.5 text-xs font-medium text-[var(--text-primary)] ${t?"bg-[var(--accent-green)]":"bg-[var(--accent-red)]"}`,children:t?"connected":"reconnecting…"})}const re=Object.freeze(Object.defineProperty({__proto__:null,ConnectionBadge:P},Symbol.toStringTag,{value:"Module"}));function N(){const[t,r]=a.useState(null),[o,s]=a.useState(!0),{events:l}=k(),n=a.useCallback(async()=>{try{const c=await(await fetch("/api/inspector/status")).json();r(c)}catch{}finally{s(!1)}},[]);return a.useEffect(()=>{n()},[n]),a.useEffect(()=>{const i=l[l.length-1];i&&i.type==="scenario_switch"&&n()},[l,n]),{scenario:(t==null?void 0:t.scenario)??null,previewScenario:(t==null?void 0:t.previewScenario)??null,routes:(t==null?void 0:t.routes)??[],routeCount:(t==null?void 0:t.routeCount)??0,loading:o,refetch:n}}function v({title:t}){return e.jsx("h2",{style:{fontSize:14,fontWeight:600,color:"#f0f6fc",margin:"0 0 8px 0",borderBottom:"1px solid #30363d",paddingBottom:8},children:t})}function f({color:t,children:r}){return e.jsx("span",{style:{background:`${t}22`,color:t,border:`1px solid ${t}55`,borderRadius:4,padding:"2px 8px",fontSize:11,fontWeight:600,letterSpacing:"0.5px",whiteSpace:"nowrap"},children:r})}const $={GET:"#D7FF63",POST:"#238636",PUT:"#d29922",DELETE:"#da3633",PATCH:"#bc8cff"};function O({method:t}){const r=$[t.toUpperCase()]??"#8b949e";return e.jsx("span",{style:{color:r,fontWeight:600,fontSize:11,minWidth:48,display:"inline-block"},children:t.toUpperCase()})}function C({color:t,children:r}){return e.jsx("div",{style:{padding:"12px 16px",borderRadius:6,border:`1px solid ${t}44`,background:`${t}11`,color:t},children:r})}const u={padding:"8px 12px",textAlign:"center",color:"#8b949e",fontWeight:500,fontSize:11,textTransform:"uppercase",letterSpacing:"0.5px"},h={padding:"6px 12px"},S={background:"#161b22",border:"1px solid #30363d",borderRadius:6,color:"#c9d1d9",padding:"6px 12px",fontSize:13,fontFamily:"inherit"},R={...S,appearance:"none",paddingRight:24,backgroundImage:`url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='12' height='12' viewBox='0 0 12 12'%3E%3Cpath fill='%238b949e' d='M6 8L1 3h10z'/%3E%3C/svg%3E")`,backgroundRepeat:"no-repeat",backgroundPosition:"right 8px center"},oe=Object.freeze(Object.defineProperty({__proto__:null,Badge:f,MethodBadge:O,SectionHeader:v,StatusBox:C,inputStyle:S,selectStyle:R,tdStyle:h,thStyle:u},Symbol.toStringTag,{value:"Module"}));function z({routes:t}){return e.jsxs("table",{style:{width:"100%",borderCollapse:"collapse",fontSize:12},children:[e.jsx("thead",{children:e.jsxs("tr",{style:{borderBottom:"1px solid #30363d"},children:[e.jsx("th",{style:u,children:"Method"}),e.jsx("th",{style:{...u,textAlign:"left"},children:"Pattern"}),e.jsx("th",{style:u,children:"Status"})]})}),e.jsx("tbody",{children:t.map((r,o)=>e.jsxs("tr",{style:{borderBottom:"1px solid #21262d"},children:[e.jsx("td",{style:{...h,textAlign:"center"},children:e.jsx(O,{method:r.method})}),e.jsx("td",{style:h,children:r.pattern}),e.jsx("td",{style:{...h,textAlign:"center",color:"#8b949e"},children:r.status})]},o))})]})}const se=Object.freeze(Object.defineProperty({__proto__:null,InspectorRouteTable:z},Symbol.toStringTag,{value:"Module"}));function A(){const{scenario:t,previewScenario:r,routes:o,routeCount:s,loading:l}=N();return e.jsxs("section",{children:[e.jsx(v,{title:"Active Scenario"}),l?e.jsx(C,{color:"#8b949e",children:"Loading..."}):t?e.jsxs("div",{style:{display:"flex",flexDirection:"column",gap:12},children:[e.jsxs("div",{style:{display:"flex",alignItems:"center",gap:8},children:[e.jsx(f,{color:"#238636",children:"ACTIVE"}),e.jsx("span",{style:{color:"#f0f6fc",fontWeight:500},children:t.name}),e.jsxs("span",{style:{color:"#8b949e"},children:["(",t.slug,")"]})]}),e.jsxs("div",{style:{color:"#8b949e",fontSize:12},children:[s," mock route",s!==1?"s":""," loaded"]}),o.length>0&&e.jsx(z,{routes:o})]}):r?e.jsxs("div",{style:{display:"flex",flexDirection:"column",gap:12},children:[e.jsxs("div",{style:{display:"flex",alignItems:"center",gap:8},children:[e.jsx(f,{color:"#D7FF63",children:"PREVIEW"}),e.jsx("span",{style:{color:"#f0f6fc",fontWeight:500},children:r.name}),e.jsxs("span",{style:{color:"#8b949e"},children:["(",r.slug,")"]})]}),e.jsx("div",{style:{color:"#8b949e",fontSize:12},children:"Component preview — no HTTP mocks active"})]}):e.jsx(C,{color:"#d29922",children:"No scenario active — all requests pass through to upstream"})]})}const ne=Object.freeze(Object.defineProperty({__proto__:null,InspectorScenarioSection:A},Symbol.toStringTag,{value:"Module"}));function F({textUrlFilter:t,onTextUrlFilterChange:r,methodFilter:o,onMethodFilterChange:s,sourceFilter:l,onSourceFilterChange:n}){return e.jsxs("div",{style:{display:"flex",gap:8,marginBottom:12,alignItems:"center"},children:[e.jsx("input",{type:"text",placeholder:"Filter by URL...",value:t,onChange:i=>r(i.target.value),style:{...S,flex:1,minWidth:0}}),e.jsxs("select",{value:o,onChange:i=>s(i.target.value),style:R,children:[e.jsx("option",{value:"ALL",children:"All Methods"}),e.jsx("option",{value:"GET",children:"GET"}),e.jsx("option",{value:"POST",children:"POST"}),e.jsx("option",{value:"PUT",children:"PUT"}),e.jsx("option",{value:"DELETE",children:"DELETE"}),e.jsx("option",{value:"PATCH",children:"PATCH"})]}),e.jsxs("select",{value:l,onChange:i=>n(i.target.value),style:R,children:[e.jsx("option",{value:"ALL",children:"All Sources"}),e.jsx("option",{value:"MOCKED",children:"Mocked"}),e.jsx("option",{value:"PASSTHROUGH",children:"Passthrough"})]})]})}const ie=Object.freeze(Object.defineProperty({__proto__:null,InspectorTrafficFilterBar:F},Symbol.toStringTag,{value:"Module"})),G={color:"#8b949e",fontSize:11,fontWeight:600,textTransform:"uppercase",letterSpacing:"0.5px",marginBottom:4},M={background:"#161b22",border:"1px solid #30363d",borderRadius:4,padding:"8px 12px",margin:0,fontSize:11,color:"#c9d1d9",fontFamily:"monospace",maxHeight:200,overflow:"auto",whiteSpace:"pre-wrap",wordBreak:"break-all"};function _({label:t,children:r}){return e.jsxs("div",{style:{marginBottom:12},children:[e.jsx("div",{style:G,children:t}),r]})}function B({event:t}){let r=[];try{const n=new URL(t.url,"http://localhost");r=Array.from(n.searchParams.entries())}catch{}const o=t.requestHeaders&&Object.keys(t.requestHeaders).length>0,s=t.requestBody!=null,l=t.responseBody!=null;return e.jsxs("div",{style:{background:"#0d1117",padding:"12px 16px",borderTop:"1px solid #30363d"},children:[r.length>0&&e.jsx(_,{label:"Query Parameters",children:e.jsx("div",{style:{display:"grid",gridTemplateColumns:"auto 1fr",gap:"2px 12px",fontSize:12},children:r.map(([n,i],c)=>e.jsxs("div",{style:{display:"contents"},children:[e.jsx("span",{style:{color:"#D7FF63",fontFamily:"monospace"},children:n}),e.jsx("span",{style:{color:"#c9d1d9",fontFamily:"monospace"},children:i})]},c))})}),o&&e.jsx(_,{label:"Request Headers",children:e.jsx("pre",{style:M,children:Object.entries(t.requestHeaders).map(([n,i])=>`${n}: ${i}`).join(`
+import{j as e}from"./markdown-C9tbsVHX.js";import{b as a}from"./react-nrLBr15I.js";import{u as k}from"./useEvents-S3Qk1Y_d.js";import{k as E}from"./index-maa9OUlU.js";function P({connected:t}){return e.jsx("span",{className:`inline-block rounded-full px-2 py-0.5 text-xs font-medium text-[var(--text-primary)] ${t?"bg-[var(--accent-green)]":"bg-[var(--accent-red)]"}`,children:t?"connected":"reconnecting…"})}const re=Object.freeze(Object.defineProperty({__proto__:null,ConnectionBadge:P},Symbol.toStringTag,{value:"Module"}));function N(){const[t,r]=a.useState(null),[o,s]=a.useState(!0),{events:l}=k(),n=a.useCallback(async()=>{try{const c=await(await fetch("/api/inspector/status")).json();r(c)}catch{}finally{s(!1)}},[]);return a.useEffect(()=>{n()},[n]),a.useEffect(()=>{const i=l[l.length-1];i&&i.type==="scenario_switch"&&n()},[l,n]),{scenario:(t==null?void 0:t.scenario)??null,previewScenario:(t==null?void 0:t.previewScenario)??null,routes:(t==null?void 0:t.routes)??[],routeCount:(t==null?void 0:t.routeCount)??0,loading:o,refetch:n}}function v({title:t}){return e.jsx("h2",{style:{fontSize:14,fontWeight:600,color:"#f0f6fc",margin:"0 0 8px 0",borderBottom:"1px solid #30363d",paddingBottom:8},children:t})}function f({color:t,children:r}){return e.jsx("span",{style:{background:`${t}22`,color:t,border:`1px solid ${t}55`,borderRadius:4,padding:"2px 8px",fontSize:11,fontWeight:600,letterSpacing:"0.5px",whiteSpace:"nowrap"},children:r})}const $={GET:"#D7FF63",POST:"#238636",PUT:"#d29922",DELETE:"#da3633",PATCH:"#bc8cff"};function O({method:t}){const r=$[t.toUpperCase()]??"#8b949e";return e.jsx("span",{style:{color:r,fontWeight:600,fontSize:11,minWidth:48,display:"inline-block"},children:t.toUpperCase()})}function C({color:t,children:r}){return e.jsx("div",{style:{padding:"12px 16px",borderRadius:6,border:`1px solid ${t}44`,background:`${t}11`,color:t},children:r})}const u={padding:"8px 12px",textAlign:"center",color:"#8b949e",fontWeight:500,fontSize:11,textTransform:"uppercase",letterSpacing:"0.5px"},h={padding:"6px 12px"},S={background:"#161b22",border:"1px solid #30363d",borderRadius:6,color:"#c9d1d9",padding:"6px 12px",fontSize:13,fontFamily:"inherit"},R={...S,appearance:"none",paddingRight:24,backgroundImage:`url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='12' height='12' viewBox='0 0 12 12'%3E%3Cpath fill='%238b949e' d='M6 8L1 3h10z'/%3E%3C/svg%3E")`,backgroundRepeat:"no-repeat",backgroundPosition:"right 8px center"},oe=Object.freeze(Object.defineProperty({__proto__:null,Badge:f,MethodBadge:O,SectionHeader:v,StatusBox:C,inputStyle:S,selectStyle:R,tdStyle:h,thStyle:u},Symbol.toStringTag,{value:"Module"}));function z({routes:t}){return e.jsxs("table",{style:{width:"100%",borderCollapse:"collapse",fontSize:12},children:[e.jsx("thead",{children:e.jsxs("tr",{style:{borderBottom:"1px solid #30363d"},children:[e.jsx("th",{style:u,children:"Method"}),e.jsx("th",{style:{...u,textAlign:"left"},children:"Pattern"}),e.jsx("th",{style:u,children:"Status"})]})}),e.jsx("tbody",{children:t.map((r,o)=>e.jsxs("tr",{style:{borderBottom:"1px solid #21262d"},children:[e.jsx("td",{style:{...h,textAlign:"center"},children:e.jsx(O,{method:r.method})}),e.jsx("td",{style:h,children:r.pattern}),e.jsx("td",{style:{...h,textAlign:"center",color:"#8b949e"},children:r.status})]},o))})]})}const se=Object.freeze(Object.defineProperty({__proto__:null,InspectorRouteTable:z},Symbol.toStringTag,{value:"Module"}));function A(){const{scenario:t,previewScenario:r,routes:o,routeCount:s,loading:l}=N();return e.jsxs("section",{children:[e.jsx(v,{title:"Active Scenario"}),l?e.jsx(C,{color:"#8b949e",children:"Loading..."}):t?e.jsxs("div",{style:{display:"flex",flexDirection:"column",gap:12},children:[e.jsxs("div",{style:{display:"flex",alignItems:"center",gap:8},children:[e.jsx(f,{color:"#238636",children:"ACTIVE"}),e.jsx("span",{style:{color:"#f0f6fc",fontWeight:500},children:t.name}),e.jsxs("span",{style:{color:"#8b949e"},children:["(",t.slug,")"]})]}),e.jsxs("div",{style:{color:"#8b949e",fontSize:12},children:[s," mock route",s!==1?"s":""," loaded"]}),o.length>0&&e.jsx(z,{routes:o})]}):r?e.jsxs("div",{style:{display:"flex",flexDirection:"column",gap:12},children:[e.jsxs("div",{style:{display:"flex",alignItems:"center",gap:8},children:[e.jsx(f,{color:"#D7FF63",children:"PREVIEW"}),e.jsx("span",{style:{color:"#f0f6fc",fontWeight:500},children:r.name}),e.jsxs("span",{style:{color:"#8b949e"},children:["(",r.slug,")"]})]}),e.jsx("div",{style:{color:"#8b949e",fontSize:12},children:"Component preview — no HTTP mocks active"})]}):e.jsx(C,{color:"#d29922",children:"No scenario active — all requests pass through to upstream"})]})}const ne=Object.freeze(Object.defineProperty({__proto__:null,InspectorScenarioSection:A},Symbol.toStringTag,{value:"Module"}));function F({textUrlFilter:t,onTextUrlFilterChange:r,methodFilter:o,onMethodFilterChange:s,sourceFilter:l,onSourceFilterChange:n}){return e.jsxs("div",{style:{display:"flex",gap:8,marginBottom:12,alignItems:"center"},children:[e.jsx("input",{type:"text",placeholder:"Filter by URL...",value:t,onChange:i=>r(i.target.value),style:{...S,flex:1,minWidth:0}}),e.jsxs("select",{value:o,onChange:i=>s(i.target.value),style:R,children:[e.jsx("option",{value:"ALL",children:"All Methods"}),e.jsx("option",{value:"GET",children:"GET"}),e.jsx("option",{value:"POST",children:"POST"}),e.jsx("option",{value:"PUT",children:"PUT"}),e.jsx("option",{value:"DELETE",children:"DELETE"}),e.jsx("option",{value:"PATCH",children:"PATCH"})]}),e.jsxs("select",{value:l,onChange:i=>n(i.target.value),style:R,children:[e.jsx("option",{value:"ALL",children:"All Sources"}),e.jsx("option",{value:"MOCKED",children:"Mocked"}),e.jsx("option",{value:"PASSTHROUGH",children:"Passthrough"})]})]})}const ie=Object.freeze(Object.defineProperty({__proto__:null,InspectorTrafficFilterBar:F},Symbol.toStringTag,{value:"Module"})),G={color:"#8b949e",fontSize:11,fontWeight:600,textTransform:"uppercase",letterSpacing:"0.5px",marginBottom:4},M={background:"#161b22",border:"1px solid #30363d",borderRadius:4,padding:"8px 12px",margin:0,fontSize:11,color:"#c9d1d9",fontFamily:"monospace",maxHeight:200,overflow:"auto",whiteSpace:"pre-wrap",wordBreak:"break-all"};function _({label:t,children:r}){return e.jsxs("div",{style:{marginBottom:12},children:[e.jsx("div",{style:G,children:t}),r]})}function B({event:t}){let r=[];try{const n=new URL(t.url,"http://localhost");r=Array.from(n.searchParams.entries())}catch{}const o=t.requestHeaders&&Object.keys(t.requestHeaders).length>0,s=t.requestBody!=null,l=t.responseBody!=null;return e.jsxs("div",{style:{background:"#0d1117",padding:"12px 16px",borderTop:"1px solid #30363d"},children:[r.length>0&&e.jsx(_,{label:"Query Parameters",children:e.jsx("div",{style:{display:"grid",gridTemplateColumns:"auto 1fr",gap:"2px 12px",fontSize:12},children:r.map(([n,i],c)=>e.jsxs("div",{style:{display:"contents"},children:[e.jsx("span",{style:{color:"#D7FF63",fontFamily:"monospace"},children:n}),e.jsx("span",{style:{color:"#c9d1d9",fontFamily:"monospace"},children:i})]},c))})}),o&&e.jsx(_,{label:"Request Headers",children:e.jsx("pre",{style:M,children:Object.entries(t.requestHeaders).map(([n,i])=>`${n}: ${i}`).join(`
 `)})}),s&&e.jsx(_,{label:"Request Body",children:e.jsx("pre",{style:M,children:typeof t.requestBody=="string"?t.requestBody:JSON.stringify(t.requestBody,null,2)})}),l&&e.jsx(_,{label:"Response Body",children:e.jsx("pre",{style:M,children:typeof t.responseBody=="string"?t.responseBody:JSON.stringify(t.responseBody,null,2)})}),r.length===0&&!o&&!s&&!l&&e.jsx("div",{style:{color:"#8b949e",fontSize:12},children:"No additional details available for this request"})]})}const le=Object.freeze(Object.defineProperty({__proto__:null,DetailSection:_,InspectorTrafficDetail:B},Symbol.toStringTag,{value:"Module"}));function L({event:t}){const[r,o]=a.useState(!1),s=new Date(t.timestampMs).toLocaleTimeString(),l=t.mocked;return e.jsxs(e.Fragment,{children:[e.jsxs("tr",{onClick:()=>o(!r),style:{borderBottom:"1px solid #21262d",background:l?"transparent":"rgba(210, 153, 34, 0.05)",cursor:"pointer"},children:[e.jsxs("td",{style:{...h,color:"#8b949e",textAlign:"center"},children:[e.jsx("span",{style:{display:"inline-block",width:12,marginRight:4,fontSize:10,color:"#8b949e",transition:"transform 0.15s",transform:r?"rotate(90deg)":"rotate(0deg)"},children:"▶"}),s]}),e.jsx("td",{style:{...h,textAlign:"center"},children:e.jsx(O,{method:t.method})}),e.jsx("td",{style:{...h,maxWidth:400,overflow:"hidden",textOverflow:"ellipsis",whiteSpace:"nowrap"},children:t.url}),e.jsx("td",{style:{...h,textAlign:"center",color:"#8b949e"},children:t.status??"---"}),e.jsxs("td",{style:{...h,textAlign:"center",color:"#8b949e"},children:[t.durationMs,"ms"]}),e.jsx("td",{style:{...h,textAlign:"center"},children:l?t.mockSource==="default"?e.jsx(f,{color:"#1f6feb",children:"MOCKED (default)"}):e.jsx(f,{color:"#238636",children:"MOCKED (scenario)"}):e.jsx(f,{color:"#d29922",children:"PASSTHROUGH"})})]}),r&&e.jsx("tr",{children:e.jsx("td",{colSpan:6,style:{padding:0},children:e.jsx(B,{event:t})})})]})}const ae=Object.freeze(Object.defineProperty({__proto__:null,InspectorTrafficRow:L},Symbol.toStringTag,{value:"Module"}));function D({events:t}){return e.jsx("div",{style:{maxHeight:300,overflowY:"auto",border:"1px solid #30363d",borderRadius:6},children:e.jsxs("table",{style:{width:"100%",borderCollapse:"collapse",fontSize:12},children:[e.jsx("thead",{children:e.jsxs("tr",{style:{borderBottom:"1px solid #30363d",position:"sticky",top:0,background:"#0d1117"},children:[e.jsx("th",{style:u,children:"Time"}),e.jsx("th",{style:u,children:"Method"}),e.jsx("th",{style:{...u,textAlign:"left"},children:"URL"}),e.jsx("th",{style:u,children:"Status"}),e.jsx("th",{style:u,children:"Duration"}),e.jsx("th",{style:u,children:"Source"})]})}),e.jsx("tbody",{children:t.map(r=>e.jsx(L,{event:r},r.id))})]})})}const ce=Object.freeze(Object.defineProperty({__proto__:null,InspectorTrafficTable:D},Symbol.toStringTag,{value:"Module"}));function K(t){if(t===void 0)return"checked";if(t==="checked")return"excluded"}function I({chips:t,chipStates:r,onChipStatesChange:o}){if(t.length===0)return null;const s=n=>{const i=new Map(r),c=K(i.get(n));c===void 0?i.delete(n):i.set(n,c),o(i)},l=()=>{o(new Map)};return e.jsxs("div",{style:{display:"flex",flexWrap:"wrap",gap:6,marginBottom:12},children:[r.size>0&&e.jsx("button",{onClick:l,style:{background:"#da363322",color:"#da3633",border:"1px solid #da363355",borderRadius:4,padding:"2px 8px",fontSize:11,fontWeight:600,cursor:"pointer",fontFamily:"inherit"},children:"Clear all"}),t.map(({path:n,count:i})=>{const c=r.get(n),d=c==="checked",g=c==="excluded";let m="#30363d",b="#8b949e",T="#30363d",y="";return d?(m="#D7FF6322",b="#D7FF63",T="#D7FF6355",y="✓ "):g&&(m="#da363322",b="#da3633",T="#da363355",y="✗ "),e.jsxs("button",{onClick:()=>s(n),style:{background:m,color:b,border:`1px solid ${T}`,borderRadius:4,padding:"2px 8px",fontSize:11,fontFamily:"monospace",cursor:"pointer",whiteSpace:"nowrap"},children:[y,n,e.jsxs("span",{style:{marginLeft:4,opacity:.6,fontFamily:"inherit"},children:["(",i,")"]})]},n)})]})}const de=Object.freeze(Object.defineProperty({__proto__:null,InspectorTrafficUrlChips:I},Symbol.toStringTag,{value:"Module"}));function H(){const{events:t}=k(),[r,o]=a.useState(""),[s,l]=a.useState(()=>new Map),[n,i]=a.useState("ALL"),[c,d]=a.useState("ALL"),g=t.filter(p=>p.type==="http_request"),m=a.useMemo(()=>{const p=new Map;for(const x of g){const j=E(x.url);p.set(j,(p.get(j)||0)+1)}return Array.from(p.entries()).sort((x,j)=>j[1]-x[1]).slice(0,10).map(([x,j])=>({path:x,count:j}))},[g]),b=a.useMemo(()=>Array.from(s.values()).some(p=>p==="checked"),[s]),y=g.filter(p=>{if(r&&!p.url.toLowerCase().includes(r.toLowerCase()))return!1;const x=E(p.url);return!(s.get(x)==="excluded"||b&&s.get(x)!=="checked"||n!=="ALL"&&p.method.toUpperCase()!==n||c==="MOCKED"&&!p.mocked||c==="PASSTHROUGH"&&p.mocked)}).slice(-50).reverse();return e.jsxs("section",{children:[e.jsx(v,{title:"Live Traffic"}),e.jsx(F,{textUrlFilter:r,onTextUrlFilterChange:o,methodFilter:n,onMethodFilterChange:i,sourceFilter:c,onSourceFilterChange:p=>d(p)}),e.jsx(I,{chips:m,chipStates:s,onChipStatesChange:l}),y.length===0?e.jsx(C,{color:"#8b949e",children:g.length>0?"No matching traffic — try adjusting the filters":"No HTTP traffic yet — requests will appear here in real-time"}):e.jsx(D,{events:y})]})}const pe=Object.freeze(Object.defineProperty({__proto__:null,InspectorTrafficSection:H},Symbol.toStringTag,{value:"Module"}));function J(){const[t,r]=a.useState(null),[o,s]=a.useState(!1);return{explain:a.useCallback(async(n,i)=>{s(!0);try{const d=await(await fetch("/api/inspector/explain",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({method:n,url:i})})).json();r(d)}catch{}finally{s(!1)}},[]),result:t,loading:o}}function U({result:t}){return e.jsxs("div",{style:{border:"1px solid #30363d",borderRadius:6,padding:12},children:[e.jsxs("div",{style:{display:"flex",alignItems:"center",gap:8,marginBottom:12},children:[e.jsxs("span",{style:{color:"#f0f6fc",fontWeight:500},children:[t.method," ",t.url]}),t.wouldMatch?e.jsx(f,{color:"#238636",children:"WOULD MATCH"}):e.jsx(f,{color:"#da3633",children:"NO MATCH"})]}),t.attempts.length===0?e.jsx("div",{style:{color:"#8b949e"},children:"No routes loaded to match against"}):e.jsx("div",{style:{display:"flex",flexDirection:"column",gap:6},children:t.attempts.map((r,o)=>e.jsxs("div",{style:{display:"flex",alignItems:"center",gap:8,padding:"4px 8px",borderRadius:4,background:r.failure?"transparent":"rgba(35, 134, 54, 0.1)"},children:[e.jsx("span",{style:{color:r.failure?"#da3633":"#238636",fontWeight:600,width:16},children:r.failure?"x":"v"}),e.jsx(O,{method:r.method}),e.jsx("span",{children:r.pattern}),r.failure&&e.jsx("span",{style:{color:"#8b949e",fontSize:11},children:r.failure.reason==="methodMismatch"?`method: expected ${r.failure.expected}, got ${r.failure.actual}`:`path "${r.failure.path}" does not match "${r.failure.pattern}"`})]},o))})]})}const ue=Object.freeze(Object.defineProperty({__proto__:null,InspectorExplainerResult:U},Symbol.toStringTag,{value:"Module"}));function W(){const{explain:t,result:r,loading:o}=J(),[s,l]=a.useState("GET"),[n,i]=a.useState(""),c=d=>{d.preventDefault(),n.trim()&&t(s,n.trim())};return e.jsxs("section",{children:[e.jsx(v,{title:"Match Explainer"}),e.jsxs("form",{onSubmit:c,style:{display:"flex",gap:8,marginBottom:12},children:[e.jsx("select",{value:s,onChange:d=>l(d.target.value),style:{...S,width:100},children:["GET","POST","PUT","DELETE","PATCH"].map(d=>e.jsx("option",{value:d,children:d},d))}),e.jsx("input",{type:"text",value:n,onChange:d=>i(d.target.value),placeholder:"/api/users",style:{...S,flex:1}}),e.jsx("button",{type:"submit",disabled:o||!n.trim(),style:{background:"#238636",color:"#fff",border:"none",borderRadius:6,padding:"6px 16px",cursor:"pointer",fontSize:12,fontWeight:500,opacity:o||!n.trim()?.5:1},children:o?"Checking...":"Explain"})]}),r&&e.jsx(U,{result:r})]})}const he=Object.freeze(Object.defineProperty({__proto__:null,InspectorExplainerSection:W},Symbol.toStringTag,{value:"Module"})),w={"/api/health":"Health check — confirms the proxy and mock engine are running","/api/events":"SSE stream of real-time events (traffic, errors) powering this Inspector","/api/config":"Returns current CodeYam configuration for the project","/api/editor-dev-server":"Polls/controls the dev server status (start, stop, restart)","/api/inspector/status":"Returns active scenario and loaded mock routes","/api/inspector/explain":"Tests which mock route would match a given method + URL","/api/scenarios":"Lists all defined scenarios with metadata","/api/tests":"Returns the AI-maintained test registry joined with per-test-evidence, grouped by file","/api/test-results":"Returns latest test execution results","/api/screenshots/*":"Serves captured scenario screenshots","/api/session-info":"Returns current editor session metadata","/api/data-structure":"Returns the app's data structure definition","/api/dependency-graph":"Returns the project's component dependency graph","/api/app-route-entities":"Lists app routes and their associated entities","/api/glossary":"Returns the project's component glossary","/api/step":"Returns current editor workflow step","/api/editor-commands":"Lists available editor commands"};function V(t){if(w[t])return w[t];for(const[r,o]of Object.entries(w))if(r.endsWith("/*")){const s=r.slice(0,-1);if(t.startsWith(s))return o}}function Y(t){const r=new Set([...t,...Object.keys(w)]),o=[];for(const s of Array.from(r).sort()){if(s.endsWith("/*"))continue;const l=V(s);o.push({path:s,description:l??"Application endpoint"})}return o}function q(){const{events:t}=k(),r=a.useMemo(()=>{const o=[];for(const s of t)s.type==="http_request"&&o.push(E(s.url));return Y(o)},[t]);return r.length===0?null:e.jsxs("section",{children:[e.jsx(v,{title:"URL Glossary"}),e.jsx("div",{style:{border:"1px solid #30363d",borderRadius:6,overflow:"hidden"},children:e.jsxs("table",{style:{width:"100%",borderCollapse:"collapse",fontSize:12},children:[e.jsx("thead",{children:e.jsxs("tr",{style:{borderBottom:"1px solid #30363d",background:"#161b22"},children:[e.jsx("th",{style:{padding:"6px 12px",textAlign:"left",color:"#8b949e",fontWeight:500,fontSize:11,textTransform:"uppercase",letterSpacing:"0.5px",width:"30%"},children:"Path"}),e.jsx("th",{style:{padding:"6px 12px",textAlign:"left",color:"#8b949e",fontWeight:500,fontSize:11,textTransform:"uppercase",letterSpacing:"0.5px"},children:"Description"})]})}),e.jsx("tbody",{children:r.map(({path:o,description:s})=>e.jsxs("tr",{style:{borderBottom:"1px solid #21262d"},children:[e.jsx("td",{style:{padding:"4px 12px",fontFamily:"monospace",color:"#D7FF63",fontSize:11},children:o}),e.jsx("td",{style:{padding:"4px 12px",color:"#8b949e"},children:s})]},o))})]})})]})}const xe=Object.freeze(Object.defineProperty({__proto__:null,InspectorUrlGlossary:q},Symbol.toStringTag,{value:"Module"}));function Q(){const{connected:t}=k();return e.jsxs("div",{style:{background:"#0d1117",color:"#c9d1d9",minHeight:"100vh",fontFamily:"'SF Mono', 'Fira Code', 'Cascadia Code', Menlo, monospace",fontSize:13,padding:24,display:"flex",flexDirection:"column",gap:24},children:[e.jsxs("header",{style:{display:"flex",alignItems:"center",gap:12},children:[e.jsx("h1",{style:{fontSize:18,fontWeight:600,color:"#f0f6fc",margin:0},children:"Container Inspector"}),e.jsx("span",{style:{color:"#8b949e",fontSize:12},children:"Read-only view of proxy and mock engine state"}),e.jsx(P,{connected:t})]}),e.jsx(A,{}),e.jsx(H,{}),e.jsx(W,{}),e.jsx(q,{})]})}const fe=Object.freeze(Object.defineProperty({__proto__:null,ContainerInspector:Q},Symbol.toStringTag,{value:"Module"}));export{f as B,Q as C,_ as D,L as I,O as M,v as S,xe as _,C as a,q as b,I as c,D as d,F as e,B as f,U as g,W as h,H as i,z as j,A as k,P as l,de as m,ce as n,pe as o,ae as p,ie as q,le as r,ne as s,u as t,se as u,oe as v,he as w,ue as x,fe as y,re as z};