@codeyam-editor/codeyam-editor 0.1.13-staging.g1b6c798 → 0.1.13

package/npm/app-port-drift.js

@@ -0,0 +1,169 @@
+'use strict';
+
+// Detect a fleet VM whose app port drifted away from the port its container
+// publishes on the host.
+//
+// A VM's compose render publishes the app port resolved ONCE at bootstrap
+// (`apps[0].port ?? port ?? 5173`). When the project later moves its app port
+// in-repo, the editor's preview proxy follows the new port while the host keeps
+// publishing the old one: docker-proxy accepts the load balancer's connection
+// and immediately resets it, and every in-container probe reads green because
+// the editor probes its own proxy on the new port. The only comparison that can
+// see it is DECLARED (editor.json + editor.local.json) against PUBLISHED (what
+// the running container actually maps on the host) — that is what this module
+// does. It never repairs: changing the publication means recreating the
+// container, which drops every live agent session.
+//
+// Pure helpers plus an injectable collector, so the reconcile and `vm-ingress.sh
+// status` share one rule and the unit tests never reach for SSH.
+
+/** The editor's control port. Pinned by contract, so on a VM's editor container
+ *  the app surface is the OTHER published mapping — the same disambiguation
+ *  `rcc_recover_ports` (scripts/lib/render-cloud-compose.sh) makes. */
+const EDITOR_CONTROL_PORT = 14199;
+
+const PORT_DRIFT_RUNBOOK = "docs/preview-port-drift.md";
+
+function isValidPort(n) {
+  return Number.isInteger(n) && n > 0 && n < 65536;
+}
+
+/** Remote command that prints the editor container's published port list
+ *  (`docker ps` `{{.Ports}}`), selecting the container by the control port it
+ *  publishes rather than by a name, so a client VM whose compose project is not
+ *  named `codeyam-editor` resolves the same way. Reads the LIVE bindings — no
+ *  compose-file path to guess. Pure string builder. */
+function buildPublishedAppPortReadCommand() {
+  return `docker ps --filter publish=${EDITOR_CONTROL_PORT} --format '{{.Ports}}' 2>/dev/null`;
+}
+
+/** Parse that command's output into the published app port, or null.
+ *
+ *  `{{.Ports}}` reads like `0.0.0.0:3000->3000/tcp, [::]:3000->3000/tcp,
+ *  10.0.0.5:14199->14199/tcp`. The app port is the single host port that is not
+ *  the control port. Anything else — no container, more than one container, no
+ *  control-port mapping, zero or several candidate app ports — returns null:
+ *  an unreadable publication must never be reported as a mismatch. */
+function parsePublishedAppPort(stdout) {
+  if (typeof stdout !== "string") return null;
+  const lines = stdout
+    .split("\n")
+    .map((l) => l.trim())
+    .filter(Boolean);
+  if (lines.length !== 1) return null;
+  const hostPorts = new Set();
+  for (const m of lines[0].matchAll(/:(\d+)->\d+\/tcp/g)) hostPorts.add(Number(m[1]));
+  if (!hostPorts.delete(EDITOR_CONTROL_PORT)) return null;
+  if (hostPorts.size !== 1) return null;
+  const [port] = hostPorts;
+  return isValidPort(port) ? port : null;
+}
+
+/** Parse `cloud-session-idle.sh` stdout into `idle` | `active` | null. Null
+ *  (unknown) is deliberately NOT idle — the same asymmetry that script and
+ *  `converge-vm.sh --converge-env` honour. */
+function parseIdleVerdict(stdout) {
+  if (typeof stdout !== "string") return null;
+  const v = stdout.trim().split("\n").pop();
+  return v === "idle" || v === "active" ? v : null;
+}
+
+/** The remediations that apply to one drifted VM, cheapest first.
+ *
+ *  The session-preserving pin always applies. The re-publish (recreate the
+ *  container so the host publishes the declared port) is named ONLY when the
+ *  VM is known idle, because it drops the PTY broker and every live session. */
+function appPortDriftRemediations({ vmNumber, declared, published, idle }) {
+  const out = [
+    {
+      kind: "pin-to-published",
+      preservesSessions: true,
+      text:
+        `on VM-${vmNumber}, run \`codeyam-editor editor config-override apps.0.port ${published}\` ` +
+        `in the project — pins the app back to the published port with an in-place proxy rebind, no restart`,
+    },
+  ];
+  if (idle === "idle") {
+    out.push({
+      kind: "republish-declared",
+      preservesSessions: false,
+      text:
+        `VM-${vmNumber} is idle, so the container can instead be recreated to publish ${declared}: ` +
+        `change the app-port mapping in its docker-compose.cloud.yml from ${published} to ${declared} ` +
+        `and recreate the editor container (see ${PORT_DRIFT_RUNBOOK})`,
+    });
+  }
+  return out;
+}
+
+/** Compare one VM's declared app port against its published host port.
+ *
+ *  `deps.readDeclaredPort` / `deps.readPublishedPort` return a port or null;
+ *  `deps.readIdleVerdict` (optional) returns `idle` | `active` | null and is
+ *  only consulted once a drift is found. Returns `[]` when the two agree or
+ *  when EITHER cannot be read — no 5173 fallback is ever used for the
+ *  comparison — else a one-element findings array. The published read is
+ *  skipped when the declared port is unreadable, so a VM with no scaffolded
+ *  project costs one probe, not two. */
+async function collectAppPortDrift(vm, deps) {
+  const { vmNumber, slug = null } = vm || {};
+  const declared = await deps.readDeclaredPort();
+  if (!isValidPort(declared)) return [];
+  const published = await deps.readPublishedPort();
+  if (!isValidPort(published) || published === declared) return [];
+  const idle = deps.readIdleVerdict ? await deps.readIdleVerdict() : null;
+  return [
+    {
+      vmNumber,
+      slug,
+      declared,
+      published,
+      idle,
+      remediations: appPortDriftRemediations({ vmNumber, declared, published, idle }),
+    },
+  ];
+}
+
+/** Render one finding as the operator-facing warning line(s). */
+function formatAppPortDriftWarning(finding) {
+  const label = finding.slug || `vm-${finding.vmNumber}`;
+  const lines = [
+    `  VM-${finding.vmNumber} ${label}: PORT DRIFT — the project declares app port ` +
+      `${finding.declared} but the container publishes ${finding.published}, so the ` +
+      `load balancer cannot reach the Live Preview (in-container probes still read healthy).`,
+  ];
+  for (const r of finding.remediations) lines.push(`    fix: ${r.text}`);
+  if (finding.idle !== "idle") {
+    lines.push(
+      `    (recreating the container to publish ${finding.declared} is not offered: ` +
+        `the VM is ${finding.idle || "not confirmed idle"} and a recreate drops live sessions)`,
+    );
+  }
+  return lines.join("\n");
+}
+
+/** Render the single machine-readable field `vm-ingress.sh status` prints.
+ *  Kept separate from the `verdict=` line on purpose: the verdict drives the
+ *  reconcile's re-`up` loop, and re-`up`ping cannot fix a port-publication
+ *  drift. */
+function formatPortDriftStatusLine(findings, { declared = null, published = null } = {}) {
+  if (findings.length) {
+    const f = findings[0];
+    return `port-drift=yes declared=${f.declared} published=${f.published}`;
+  }
+  if (isValidPort(declared) && isValidPort(published)) {
+    return `port-drift=no declared=${declared} published=${published}`;
+  }
+  return "port-drift=unknown";
+}
+
+module.exports = {
+  EDITOR_CONTROL_PORT,
+  buildPublishedAppPortReadCommand,
+  parsePublishedAppPort,
+  parseIdleVerdict,
+  appPortDriftRemediations,
+  collectAppPortDrift,
+  formatAppPortDriftWarning,
+  formatPortDriftStatusLine,
+};

package/npm/cloud.js

@@ -105,6 +105,17 @@ const {
   firewallNeedsConverge,
   firewallAdmitsPort,
 } = require("./ingress-invoke");
+// Declared-vs-published app-port comparison (pure; unit-tested in
+// app-port-drift.test.js). The SSH readers that feed it live below, beside
+// readVmAppPort.
+const {
+  buildPublishedAppPortReadCommand,
+  parsePublishedAppPort,
+  parseIdleVerdict,
+  collectAppPortDrift,
+  formatAppPortDriftWarning,
+  formatPortDriftStatusLine,
+} = require("./app-port-drift");
 // Shared fleet-roster writer/reader. `cloud:up` rosters the VM it just
 // provisioned so the dashboard, the cloudflared-monitor tunnel publisher, and
 // the watchdog see it within one poll cycle — without a manual fleet-vms.json
@@ -3031,32 +3042,66 @@ function buildVmAppPortReadCommand(repoName) {
  *  `VITE_PORT` is genuinely correct there (it is what `resolved_port()` lands
  *  on) and stays quiet. */
 async function readVmAppPort(cfg) {
-  const repoName = resolveProject(cfg).name;
-  const read = runGcloud(
-    buildGcloudArgs("ssh-probe", cfg, {
-      command: buildVmAppPortReadCommand(repoName),
-    }),
-    { stdio: ["ignore", "pipe", "ignore"] },
-  );
-  if (read.status !== 0 || typeof read.stdout !== "string") {
+  const { port, failure } = await probeVmAppPort(cfg);
+  if (failure && failure.kind === "ssh") {
     console.error(
-      `[cloud] WARNING: could not read the VM's app port over SSH — ` +
+      `[cloud] WARNING: ${failure.what} — ` +
         `falling back to ${VITE_PORT}. If the app does not serve on ` +
         `${VITE_PORT}, the laptop port-forward targets the wrong port and the ` +
         `Live Preview will show "localhost refused to connect".`,
     );
-    return VITE_PORT;
-  }
-  if (read.stdout.includes(VM_APP_PORT_NO_CONFIG)) {
+  } else if (failure) {
     console.error(
-      `[cloud] WARNING: no .codeyam/editor.json found under ~/projects on the ` +
-        `VM (looked for '${repoName}', then any project dir) — falling back to ` +
+      `[cloud] WARNING: ${failure.what} — falling back to ` +
         `${VITE_PORT}. If the project is scaffolded under a different name and ` +
         `serves on another port, the port-forward targets the wrong port and ` +
         `the Live Preview will show "localhost refused to connect".`,
     );
-    return VITE_PORT;
   }
+  return port == null ? VITE_PORT : port;
+}
+
+/** The probe behind `readVmAppPort`, without the fallback: resolves to
+ *  `{ port, failure: null }` when the VM's config was read, or
+ *  `{ port: null, failure: { kind: "ssh" | "no-config", what } }` when it was
+ *  not. Callers that must not act on a guess — the ingress reconcile, where a
+ *  5173 fallback would wire a preview NEG endpoint to a port nothing publishes —
+ *  use this to tell a resolved port from a fallback. Prints nothing; `what` is
+ *  the human description of the miss for the caller's own warning. */
+async function probeVmAppPort(cfg) {
+  const repoName = resolveProject(cfg).name;
+  const read = runGcloud(
+    buildGcloudArgs("ssh-probe", cfg, {
+      command: buildVmAppPortReadCommand(repoName),
+    }),
+    { stdio: ["ignore", "pipe", "ignore"] },
+  );
+  if (read.status !== 0 || typeof read.stdout !== "string") {
+    return {
+      port: null,
+      failure: { kind: "ssh", what: "could not read the VM's app port over SSH" },
+    };
+  }
+  const { port, miss } = parseVmDeclaredAppPort(read.stdout);
+  if (miss === "no-config") {
+    return {
+      port: null,
+      failure: {
+        kind: "no-config",
+        what:
+          `no .codeyam/editor.json found under ~/projects on the ` +
+          `VM (looked for '${repoName}', then any project dir)`,
+      },
+    };
+  }
+  return { port, failure: null };
+}
+
+/** Resolve `buildVmAppPortReadCommand`'s output into `{ port, miss }` — shared
+ *  by `probeVmAppPort` and the port-drift probe, so both resolve the declared
+ *  port identically. A no-config VM is a miss with a null port, never 5173. */
+function parseVmDeclaredAppPort(stdout) {
+  if (stdout.includes(VM_APP_PORT_NO_CONFIG)) return { port: null, miss: "no-config" };
   const parse = (s) => {
     try {
       const v = JSON.parse(s);
@@ -3065,8 +3110,116 @@ async function readVmAppPort(cfg) {
       return {};
     }
   };
-  const [baseJson = "", localJson = ""] = read.stdout.split("<<<LOCAL>>>");
-  return resolveConfiguredAppPort(parse(baseJson), parse(localJson));
+  const [baseJson = "", localJson = ""] = stdout.split("<<<LOCAL>>>");
+  return { port: resolveConfiguredAppPort(parse(baseJson), parse(localJson)), miss: null };
+}
+
+/** Separates the declared-port read from the `docker ps` read in the combined
+ *  probe below. */
+const VM_PUBLISHED_PORT_MARKER = "<<<PUBLISHED>>>";
+
+/** Read the declared app port AND the host port the VM's editor container
+ *  publishes (live `docker ps` bindings) in ONE SSH round-trip, so the roster
+ *  pass costs one extra probe per VM. Either side is null when unreadable. */
+function readVmAppPortsForDrift(cfg) {
+  const read = runGcloud(
+    buildGcloudArgs("ssh-probe", cfg, {
+      command:
+        `${buildVmAppPortReadCommand(resolveProject(cfg).name)}; ` +
+        `echo '${VM_PUBLISHED_PORT_MARKER}'; ${buildPublishedAppPortReadCommand()}`,
+    }),
+    { stdio: ["ignore", "pipe", "ignore"] },
+  );
+  if (read.status !== 0) return { declared: null, published: null };
+  return parseVmAppPortsForDrift(read.stdout);
+}
+
+/** Split the combined probe's output into `{ declared, published }`. Output
+ *  without the marker — an SSH session that exited 0 having printed nothing, a
+ *  truncated read — is unreadable on BOTH sides. Resolving its empty config
+ *  half would land on the 5173 default and could report a drift that does not
+ *  exist. */
+function parseVmAppPortsForDrift(stdout) {
+  if (typeof stdout !== "string" || !stdout.includes(VM_PUBLISHED_PORT_MARKER)) {
+    return { declared: null, published: null };
+  }
+  const [declaredOut, publishedOut] = stdout.split(VM_PUBLISHED_PORT_MARKER);
+  return {
+    declared: declaredOut.trim() ? parseVmDeclaredAppPort(declaredOut).port : null,
+    published: parsePublishedAppPort(publishedOut),
+  };
+}
+
+/** Read the VM's `cloud-session-idle.sh` verdict (`idle` | `active` | null).
+ *  Unknown — including a VM whose checkout predates the script — is null, and
+ *  null is never treated as idle. */
+function readVmIdleVerdict(cfg) {
+  const read = runGcloud(
+    buildGcloudArgs("ssh-probe", cfg, {
+      command:
+        `s="$HOME/codeyam-editor/scripts/cloud-session-idle.sh"; ` +
+        `if [ -r "$s" ]; then bash "$s" 2>/dev/null; fi; true`,
+    }),
+    { stdio: ["ignore", "pipe", "ignore"] },
+  );
+  return read.status === 0 ? parseIdleVerdict(read.stdout) : null;
+}
+
+/** Compare one VM's declared app port against its published host port over the
+ *  SSH probe. Returns the findings plus both raw reads (for the status line).
+ *  See npm/app-port-drift.js for the rule. */
+async function collectVmAppPortDrift(cfg, vmNumber, slug) {
+  const { declared, published } = readVmAppPortsForDrift(cfg);
+  const findings = await collectAppPortDrift(
+    { vmNumber, slug },
+    {
+      readDeclaredPort: async () => declared,
+      readPublishedPort: async () => published,
+      readIdleVerdict: async () => readVmIdleVerdict(cfg),
+    },
+  );
+  return { findings, declared, published };
+}
+
+/** Port-drift pass over the whole roster, on the periodic reconcile that already
+ *  walks it. Reports, never repairs (the fix recreates the container or changes
+ *  the project's port — both the operator's call). Per-VM failures are logged
+ *  and swallowed, like the preview-origin heal beside it. */
+async function reportAppPortDriftAcrossRoster(cfg, roster, deps = {}) {
+  const collect = deps.collectVmAppPortDrift || collectVmAppPortDrift;
+  const drifted = [];
+  for (const n of roster) {
+    const perVmCfg = { ...cfg, instanceName: `${fleetInstancePrefix()}${n}` };
+    try {
+      const { findings } = await collect(perVmCfg, n, slugFor(n));
+      for (const f of findings) {
+        console.error(formatAppPortDriftWarning(f));
+        drifted.push(f);
+      }
+    } catch (e) {
+      console.error(`  VM-${n} ${slugFor(n) || `vm-${n}`}: port-drift check skipped (${e && e.message})`);
+    }
+  }
+  return drifted;
+}
+
+/** `npm run cloud:app-port-drift -- --instance-name <name>` — one VM's
+ *  declared-vs-published comparison as the single `port-drift=` line
+ *  `vm-ingress.sh status` appends, plus the human warning on stderr. */
+async function cmdAppPortDrift(args, projectDir = rootDir) {
+  const flags = parseFlags(args);
+  const cfg = { ...(loadCloudConfig(projectDir) || {}), ...flags };
+  const vmNumber = resolveFleetVmNumber(cfg.instanceName || "");
+  if (vmNumber == null) {
+    throw new Error("cloud:app-port-drift requires --instance-name <numbered fleet VM>.");
+  }
+  const { findings, declared, published } = await collectVmAppPortDrift(
+    cfg,
+    vmNumber,
+    slugFor(vmNumber),
+  );
+  for (const f of findings) console.error(formatAppPortDriftWarning(f));
+  console.log(formatPortDriftStatusLine(findings, { declared, published }));
 }
 
 /** Build the shell command that seeds a JSON patch into a host-side
@@ -3987,7 +4140,7 @@ function fleetInstancePrefix() {
  *  (the VM is provisioned; ingress can be re-wired), Destroy likewise warns so a
  *  teardown still removes the instance. `vmAccess` (up only) is the Add's intended
  *  principal set, which the script's grant step uses in place of its sidecar read. */
-function runVmIngress(cfg, action, vmNumber, domain, appPort, slug, vmAccess) {
+function runVmIngress(cfg, action, vmNumber, domain, appPort, slug, vmAccess, { appPortUnresolved = false } = {}) {
   const scriptPath = path.join(rootDir, "scripts", "gcp", "vm-ingress.sh");
   const inv = vmIngressInvocation({
     scriptPath,
@@ -4000,6 +4153,7 @@ function runVmIngress(cfg, action, vmNumber, domain, appPort, slug, vmAccess) {
     instancePrefix: fleetInstancePrefix(),
     slug,
     vmAccess,
+    appPortUnresolved,
   });
   return spawnSync(inv.command, inv.args, {
     stdio: "inherit",
@@ -5117,6 +5271,25 @@ async function healPreviewOriginsAcrossRoster(cfg, roster) {
  *  resources already present and creates only the missing backend / host rule.
  *  A no-op in legacy quick-tunnel mode (no fleet domain). Invoked on demand and
  *  automatically at dashboard boot so a fleet that lost ingress self-heals. */
+/** Resolve one reconcile target's app port for `vm-ingress.sh up`, refusing to
+ *  guess. Resolves `{ appPort, appPortUnresolved: false }` on a real read, or
+ *  `{ appPort: null, appPortUnresolved: true }` — with a warning naming the VM —
+ *  when the probe failed, so the script leaves the preview NEG's endpoints alone
+ *  instead of wiring (and pruning to) a 5173 fallback over a working endpoint.
+ *  `deps.probeVmAppPort` is injectable so tests never reach for SSH. */
+async function resolveReconcileAppPort(perVmCfg, vmNumber, deps = {}) {
+  const probe = deps.probeVmAppPort || probeVmAppPort;
+  const { port, failure } = await probe(perVmCfg);
+  if (!failure) return { appPort: port, appPortUnresolved: false };
+  console.error(
+    `[cloud] WARNING: VM-${vmNumber}: ${failure.what} — skipping the preview ` +
+      `endpoint converge rather than wiring ${VITE_PORT} over a working endpoint. ` +
+      `If the preview NEG targets the wrong port, Live Preview requests fail ` +
+      `with "upstream connect error" until a later reconcile resolves it.`,
+  );
+  return { appPort: null, appPortUnresolved: true };
+}
+
 async function cmdReconcileIngress(args, projectDir = rootDir) {
   ensureGcloud();
   parseFlags(args);
@@ -5189,17 +5362,23 @@ async function cmdReconcileIngress(args, projectDir = rootDir) {
   for (const t of targets) {
     const label = t.slug || `vm-${t.vmNumber}`;
     // Resolve the VM's real dev-server port so a re-created preview NEG targets
-    // the right port (not the 5173 bootstrap fallback). Best-effort — readVmAppPort
-    // itself falls back to VITE_PORT on any SSH/parse failure.
+    // the right port. NOT readVmAppPort: its VITE_PORT fallback on an SSH/parse
+    // failure is indistinguishable from a VM genuinely serving 5173, and `up`
+    // prunes the preview NEG to the port it is given — a fallback would detach the
+    // working endpoint and wire one nothing publishes. Unresolved → the script
+    // leaves the preview endpoints alone; every other resource still converges.
     const perVmCfg = { ...cfg, instanceName: `${fleetInstancePrefix()}${t.vmNumber}` };
-    const appPort = await readVmAppPort(perVmCfg);
-    const res = runVmIngress(perVmCfg, "up", t.vmNumber, domain, appPort, t.slug);
+    const { appPort, appPortUnresolved } = await resolveReconcileAppPort(perVmCfg, t.vmNumber);
+    const res = runVmIngress(perVmCfg, "up", t.vmNumber, domain, appPort, t.slug, undefined, {
+      appPortUnresolved,
+    });
     console.error(
       `  VM-${t.vmNumber} ${label}: ${t.verdict} → ${res.status === 0 ? "re-wired" : "re-wire FAILED"}`,
     );
   }
 
   await healPreviewOriginsAcrossRoster(cfg, roster);
+  await reportAppPortDriftAcrossRoster(cfg, roster);
 
   // Converge each rostered backend-service's timeout to 86400 (24h). A fully-wired
   // BES still at GCP's 30s default reports `wired` above and is skipped by the
@@ -5768,6 +5947,7 @@ const HANDLERS = {
   status: cmdStatus,
   "ingress-up": cmdIngressUp,
   "reconcile-ingress": cmdReconcileIngress,
+  "app-port-drift": cmdAppPortDrift,
   "wire-add-tail": cmdWireAddTail,
   "reconcile-credentials": cmdReconcileCredentials,
   "reconcile-admin": cmdReconcileAdmin,
@@ -5862,6 +6042,8 @@ module.exports = {
   seedPreviewOrigin,
   healPreviewOriginAtReady,
   healPreviewOriginsAcrossRoster,
+  reportAppPortDriftAcrossRoster,
+  cmdAppPortDrift,
   buildGcloudArgs,
   sshScriptCommand,
   bootstrapRunnerScript,
@@ -5951,6 +6133,10 @@ module.exports = {
   classifyGitRemoteError,
   decideCredentialHeal,
   readVmAppPort,
+  probeVmAppPort,
+  resolveReconcileAppPort,
+  parseVmDeclaredAppPort,
+  parseVmAppPortsForDrift,
   buildVmAppPortReadCommand,
   resolveLaptopGitIdentity,
   gitBranchRefExists,

package/npm/ingress-invoke.js

@@ -86,7 +86,11 @@ function regionFromZone(zone) {
  *  ingress path granting a reused slot's prior tenant that the very next step then
  *  revokes as stale (VMs 4/5/6, 2026-08-09). Omit it (or pass an empty list) to
  *  leave the script's sidecar-read fallback in place — the standalone/reconcile
- *  path, where no Add is deciding the intent. */
+ *  path, where no Add is deciding the intent.
+ *
+ *  `appPortUnresolved` (`up` only) becomes APP_PORT_UNRESOLVED=1: the caller tried
+ *  to resolve the app port and could not, so the script leaves the preview NEG's
+ *  endpoints untouched instead of wiring (and pruning to) a guessed port. */
 function vmIngressInvocation({
   scriptPath,
   vmNumber,
@@ -98,6 +102,7 @@ function vmIngressInvocation({
   instancePrefix,
   slug,
   vmAccess,
+  appPortUnresolved = false,
 } = {}) {
   if (!scriptPath) throw new Error('vmIngressInvocation requires scriptPath');
   if (action !== 'up' && action !== 'down') {
@@ -116,6 +121,7 @@ function vmIngressInvocation({
   if (slug != null && String(slug).trim() !== '') env.VM_SLUG = String(slug).trim();
   const access = (Array.isArray(vmAccess) ? vmAccess.join(',') : String(vmAccess == null ? '' : vmAccess)).trim();
   if (action === 'up' && access !== '') env.VM_ACCESS = access;
+  if (action === 'up' && appPortUnresolved) env.APP_PORT_UNRESOLVED = '1';
   return { command: 'bash', args: [scriptPath, String(n), action], env };
 }
 
@@ -141,7 +147,10 @@ function vmIngressStatusInvocation({
     throw new Error(`vm-ingress status requires a positive VM number, got: ${vmNumber}`);
   }
   if (!domain) throw new Error('vmIngressStatusInvocation requires a fleet domain');
-  const env = { FLEET_DOMAIN: domain };
+  // Machine callers poll `status` for the LB verdict only; the port-drift field
+  // costs an SSH round-trip per call, and the roster reconcile runs that
+  // comparison itself. An operator running the script by hand still gets it.
+  const env = { FLEET_DOMAIN: domain, VM_INGRESS_SKIP_PORT_DRIFT: '1' };
   if (project) env.GCP_PROJECT = project;
   if (zone) env.ZONE = zone;
   if (slug != null && String(slug).trim() !== '') env.VM_SLUG = String(slug).trim();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codeyam-editor/codeyam-editor",
-  "version": "0.1.13-staging.g1b6c798",
+  "version": "0.1.13",
   "description": "Language-agnostic managed execution sandbox for scenario-driven development",
   "bin": {
     "codeyam-editor": "./npm/cli.js"
@@ -9,10 +9,10 @@
     "playwright": "^1.58.2"
   },
   "optionalDependencies": {
-    "@codeyam-editor/codeyam-editor-darwin-arm64": "0.1.13-staging.g1b6c798",
-    "@codeyam-editor/codeyam-editor-darwin-x64": "0.1.13-staging.g1b6c798",
-    "@codeyam-editor/codeyam-editor-linux-x64": "0.1.13-staging.g1b6c798",
-    "@codeyam-editor/codeyam-editor-win32-x64": "0.1.13-staging.g1b6c798"
+    "@codeyam-editor/codeyam-editor-darwin-arm64": "0.1.13",
+    "@codeyam-editor/codeyam-editor-darwin-x64": "0.1.13",
+    "@codeyam-editor/codeyam-editor-linux-x64": "0.1.13",
+    "@codeyam-editor/codeyam-editor-win32-x64": "0.1.13"
   },
   "keywords": [
     "codeyam",

package/ui/dist/assets/{ContainerInspector-nU0qr8np.js → ContainerInspector-DKH4LjcY.js}

@@ -1,2 +1,2 @@
-import{j as e}from"./markdown-C9tbsVHX.js";import{b as a}from"./react-nrLBr15I.js";import{u as k}from"./useEvents-DNb1olaj.js";import{k as E}from"./index-C9TVsqen.js";function P({connected:t}){return e.jsx("span",{className:`inline-block rounded-full px-2 py-0.5 text-xs font-medium text-[var(--text-primary)] ${t?"bg-[var(--accent-green)]":"bg-[var(--accent-red)]"}`,children:t?"connected":"reconnecting…"})}const re=Object.freeze(Object.defineProperty({__proto__:null,ConnectionBadge:P},Symbol.toStringTag,{value:"Module"}));function N(){const[t,r]=a.useState(null),[o,s]=a.useState(!0),{events:l}=k(),n=a.useCallback(async()=>{try{const c=await(await fetch("/api/inspector/status")).json();r(c)}catch{}finally{s(!1)}},[]);return a.useEffect(()=>{n()},[n]),a.useEffect(()=>{const i=l[l.length-1];i&&i.type==="scenario_switch"&&n()},[l,n]),{scenario:(t==null?void 0:t.scenario)??null,previewScenario:(t==null?void 0:t.previewScenario)??null,routes:(t==null?void 0:t.routes)??[],routeCount:(t==null?void 0:t.routeCount)??0,loading:o,refetch:n}}function v({title:t}){return e.jsx("h2",{style:{fontSize:14,fontWeight:600,color:"#f0f6fc",margin:"0 0 8px 0",borderBottom:"1px solid #30363d",paddingBottom:8},children:t})}function f({color:t,children:r}){return e.jsx("span",{style:{background:`${t}22`,color:t,border:`1px solid ${t}55`,borderRadius:4,padding:"2px 8px",fontSize:11,fontWeight:600,letterSpacing:"0.5px",whiteSpace:"nowrap"},children:r})}const $={GET:"#D7FF63",POST:"#238636",PUT:"#d29922",DELETE:"#da3633",PATCH:"#bc8cff"};function O({method:t}){const r=$[t.toUpperCase()]??"#8b949e";return e.jsx("span",{style:{color:r,fontWeight:600,fontSize:11,minWidth:48,display:"inline-block"},children:t.toUpperCase()})}function C({color:t,children:r}){return e.jsx("div",{style:{padding:"12px 16px",borderRadius:6,border:`1px solid ${t}44`,background:`${t}11`,color:t},children:r})}const u={padding:"8px 12px",textAlign:"center",color:"#8b949e",fontWeight:500,fontSize:11,textTransform:"uppercase",letterSpacing:"0.5px"},h={padding:"6px 12px"},S={background:"#161b22",border:"1px solid #30363d",borderRadius:6,color:"#c9d1d9",padding:"6px 12px",fontSize:13,fontFamily:"inherit"},R={...S,appearance:"none",paddingRight:24,backgroundImage:`url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='12' height='12' viewBox='0 0 12 12'%3E%3Cpath fill='%238b949e' d='M6 8L1 3h10z'/%3E%3C/svg%3E")`,backgroundRepeat:"no-repeat",backgroundPosition:"right 8px center"},oe=Object.freeze(Object.defineProperty({__proto__:null,Badge:f,MethodBadge:O,SectionHeader:v,StatusBox:C,inputStyle:S,selectStyle:R,tdStyle:h,thStyle:u},Symbol.toStringTag,{value:"Module"}));function z({routes:t}){return e.jsxs("table",{style:{width:"100%",borderCollapse:"collapse",fontSize:12},children:[e.jsx("thead",{children:e.jsxs("tr",{style:{borderBottom:"1px solid #30363d"},children:[e.jsx("th",{style:u,children:"Method"}),e.jsx("th",{style:{...u,textAlign:"left"},children:"Pattern"}),e.jsx("th",{style:u,children:"Status"})]})}),e.jsx("tbody",{children:t.map((r,o)=>e.jsxs("tr",{style:{borderBottom:"1px solid #21262d"},children:[e.jsx("td",{style:{...h,textAlign:"center"},children:e.jsx(O,{method:r.method})}),e.jsx("td",{style:h,children:r.pattern}),e.jsx("td",{style:{...h,textAlign:"center",color:"#8b949e"},children:r.status})]},o))})]})}const se=Object.freeze(Object.defineProperty({__proto__:null,InspectorRouteTable:z},Symbol.toStringTag,{value:"Module"}));function A(){const{scenario:t,previewScenario:r,routes:o,routeCount:s,loading:l}=N();return e.jsxs("section",{children:[e.jsx(v,{title:"Active Scenario"}),l?e.jsx(C,{color:"#8b949e",children:"Loading..."}):t?e.jsxs("div",{style:{display:"flex",flexDirection:"column",gap:12},children:[e.jsxs("div",{style:{display:"flex",alignItems:"center",gap:8},children:[e.jsx(f,{color:"#238636",children:"ACTIVE"}),e.jsx("span",{style:{color:"#f0f6fc",fontWeight:500},children:t.name}),e.jsxs("span",{style:{color:"#8b949e"},children:["(",t.slug,")"]})]}),e.jsxs("div",{style:{color:"#8b949e",fontSize:12},children:[s," mock route",s!==1?"s":""," loaded"]}),o.length>0&&e.jsx(z,{routes:o})]}):r?e.jsxs("div",{style:{display:"flex",flexDirection:"column",gap:12},children:[e.jsxs("div",{style:{display:"flex",alignItems:"center",gap:8},children:[e.jsx(f,{color:"#D7FF63",children:"PREVIEW"}),e.jsx("span",{style:{color:"#f0f6fc",fontWeight:500},children:r.name}),e.jsxs("span",{style:{color:"#8b949e"},children:["(",r.slug,")"]})]}),e.jsx("div",{style:{color:"#8b949e",fontSize:12},children:"Component preview — no HTTP mocks active"})]}):e.jsx(C,{color:"#d29922",children:"No scenario active — all requests pass through to upstream"})]})}const ne=Object.freeze(Object.defineProperty({__proto__:null,InspectorScenarioSection:A},Symbol.toStringTag,{value:"Module"}));function F({textUrlFilter:t,onTextUrlFilterChange:r,methodFilter:o,onMethodFilterChange:s,sourceFilter:l,onSourceFilterChange:n}){return e.jsxs("div",{style:{display:"flex",gap:8,marginBottom:12,alignItems:"center"},children:[e.jsx("input",{type:"text",placeholder:"Filter by URL...",value:t,onChange:i=>r(i.target.value),style:{...S,flex:1,minWidth:0}}),e.jsxs("select",{value:o,onChange:i=>s(i.target.value),style:R,children:[e.jsx("option",{value:"ALL",children:"All Methods"}),e.jsx("option",{value:"GET",children:"GET"}),e.jsx("option",{value:"POST",children:"POST"}),e.jsx("option",{value:"PUT",children:"PUT"}),e.jsx("option",{value:"DELETE",children:"DELETE"}),e.jsx("option",{value:"PATCH",children:"PATCH"})]}),e.jsxs("select",{value:l,onChange:i=>n(i.target.value),style:R,children:[e.jsx("option",{value:"ALL",children:"All Sources"}),e.jsx("option",{value:"MOCKED",children:"Mocked"}),e.jsx("option",{value:"PASSTHROUGH",children:"Passthrough"})]})]})}const ie=Object.freeze(Object.defineProperty({__proto__:null,InspectorTrafficFilterBar:F},Symbol.toStringTag,{value:"Module"})),G={color:"#8b949e",fontSize:11,fontWeight:600,textTransform:"uppercase",letterSpacing:"0.5px",marginBottom:4},M={background:"#161b22",border:"1px solid #30363d",borderRadius:4,padding:"8px 12px",margin:0,fontSize:11,color:"#c9d1d9",fontFamily:"monospace",maxHeight:200,overflow:"auto",whiteSpace:"pre-wrap",wordBreak:"break-all"};function _({label:t,children:r}){return e.jsxs("div",{style:{marginBottom:12},children:[e.jsx("div",{style:G,children:t}),r]})}function B({event:t}){let r=[];try{const n=new URL(t.url,"http://localhost");r=Array.from(n.searchParams.entries())}catch{}const o=t.requestHeaders&&Object.keys(t.requestHeaders).length>0,s=t.requestBody!=null,l=t.responseBody!=null;return e.jsxs("div",{style:{background:"#0d1117",padding:"12px 16px",borderTop:"1px solid #30363d"},children:[r.length>0&&e.jsx(_,{label:"Query Parameters",children:e.jsx("div",{style:{display:"grid",gridTemplateColumns:"auto 1fr",gap:"2px 12px",fontSize:12},children:r.map(([n,i],c)=>e.jsxs("div",{style:{display:"contents"},children:[e.jsx("span",{style:{color:"#D7FF63",fontFamily:"monospace"},children:n}),e.jsx("span",{style:{color:"#c9d1d9",fontFamily:"monospace"},children:i})]},c))})}),o&&e.jsx(_,{label:"Request Headers",children:e.jsx("pre",{style:M,children:Object.entries(t.requestHeaders).map(([n,i])=>`${n}: ${i}`).join(`
+import{j as e}from"./markdown-C9tbsVHX.js";import{b as a}from"./react-nrLBr15I.js";import{u as k}from"./useEvents-DNb1olaj.js";import{k as E}from"./index-mgNPDFlH.js";function P({connected:t}){return e.jsx("span",{className:`inline-block rounded-full px-2 py-0.5 text-xs font-medium text-[var(--text-primary)] ${t?"bg-[var(--accent-green)]":"bg-[var(--accent-red)]"}`,children:t?"connected":"reconnecting…"})}const re=Object.freeze(Object.defineProperty({__proto__:null,ConnectionBadge:P},Symbol.toStringTag,{value:"Module"}));function N(){const[t,r]=a.useState(null),[o,s]=a.useState(!0),{events:l}=k(),n=a.useCallback(async()=>{try{const c=await(await fetch("/api/inspector/status")).json();r(c)}catch{}finally{s(!1)}},[]);return a.useEffect(()=>{n()},[n]),a.useEffect(()=>{const i=l[l.length-1];i&&i.type==="scenario_switch"&&n()},[l,n]),{scenario:(t==null?void 0:t.scenario)??null,previewScenario:(t==null?void 0:t.previewScenario)??null,routes:(t==null?void 0:t.routes)??[],routeCount:(t==null?void 0:t.routeCount)??0,loading:o,refetch:n}}function v({title:t}){return e.jsx("h2",{style:{fontSize:14,fontWeight:600,color:"#f0f6fc",margin:"0 0 8px 0",borderBottom:"1px solid #30363d",paddingBottom:8},children:t})}function f({color:t,children:r}){return e.jsx("span",{style:{background:`${t}22`,color:t,border:`1px solid ${t}55`,borderRadius:4,padding:"2px 8px",fontSize:11,fontWeight:600,letterSpacing:"0.5px",whiteSpace:"nowrap"},children:r})}const $={GET:"#D7FF63",POST:"#238636",PUT:"#d29922",DELETE:"#da3633",PATCH:"#bc8cff"};function O({method:t}){const r=$[t.toUpperCase()]??"#8b949e";return e.jsx("span",{style:{color:r,fontWeight:600,fontSize:11,minWidth:48,display:"inline-block"},children:t.toUpperCase()})}function C({color:t,children:r}){return e.jsx("div",{style:{padding:"12px 16px",borderRadius:6,border:`1px solid ${t}44`,background:`${t}11`,color:t},children:r})}const u={padding:"8px 12px",textAlign:"center",color:"#8b949e",fontWeight:500,fontSize:11,textTransform:"uppercase",letterSpacing:"0.5px"},h={padding:"6px 12px"},S={background:"#161b22",border:"1px solid #30363d",borderRadius:6,color:"#c9d1d9",padding:"6px 12px",fontSize:13,fontFamily:"inherit"},R={...S,appearance:"none",paddingRight:24,backgroundImage:`url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='12' height='12' viewBox='0 0 12 12'%3E%3Cpath fill='%238b949e' d='M6 8L1 3h10z'/%3E%3C/svg%3E")`,backgroundRepeat:"no-repeat",backgroundPosition:"right 8px center"},oe=Object.freeze(Object.defineProperty({__proto__:null,Badge:f,MethodBadge:O,SectionHeader:v,StatusBox:C,inputStyle:S,selectStyle:R,tdStyle:h,thStyle:u},Symbol.toStringTag,{value:"Module"}));function z({routes:t}){return e.jsxs("table",{style:{width:"100%",borderCollapse:"collapse",fontSize:12},children:[e.jsx("thead",{children:e.jsxs("tr",{style:{borderBottom:"1px solid #30363d"},children:[e.jsx("th",{style:u,children:"Method"}),e.jsx("th",{style:{...u,textAlign:"left"},children:"Pattern"}),e.jsx("th",{style:u,children:"Status"})]})}),e.jsx("tbody",{children:t.map((r,o)=>e.jsxs("tr",{style:{borderBottom:"1px solid #21262d"},children:[e.jsx("td",{style:{...h,textAlign:"center"},children:e.jsx(O,{method:r.method})}),e.jsx("td",{style:h,children:r.pattern}),e.jsx("td",{style:{...h,textAlign:"center",color:"#8b949e"},children:r.status})]},o))})]})}const se=Object.freeze(Object.defineProperty({__proto__:null,InspectorRouteTable:z},Symbol.toStringTag,{value:"Module"}));function A(){const{scenario:t,previewScenario:r,routes:o,routeCount:s,loading:l}=N();return e.jsxs("section",{children:[e.jsx(v,{title:"Active Scenario"}),l?e.jsx(C,{color:"#8b949e",children:"Loading..."}):t?e.jsxs("div",{style:{display:"flex",flexDirection:"column",gap:12},children:[e.jsxs("div",{style:{display:"flex",alignItems:"center",gap:8},children:[e.jsx(f,{color:"#238636",children:"ACTIVE"}),e.jsx("span",{style:{color:"#f0f6fc",fontWeight:500},children:t.name}),e.jsxs("span",{style:{color:"#8b949e"},children:["(",t.slug,")"]})]}),e.jsxs("div",{style:{color:"#8b949e",fontSize:12},children:[s," mock route",s!==1?"s":""," loaded"]}),o.length>0&&e.jsx(z,{routes:o})]}):r?e.jsxs("div",{style:{display:"flex",flexDirection:"column",gap:12},children:[e.jsxs("div",{style:{display:"flex",alignItems:"center",gap:8},children:[e.jsx(f,{color:"#D7FF63",children:"PREVIEW"}),e.jsx("span",{style:{color:"#f0f6fc",fontWeight:500},children:r.name}),e.jsxs("span",{style:{color:"#8b949e"},children:["(",r.slug,")"]})]}),e.jsx("div",{style:{color:"#8b949e",fontSize:12},children:"Component preview — no HTTP mocks active"})]}):e.jsx(C,{color:"#d29922",children:"No scenario active — all requests pass through to upstream"})]})}const ne=Object.freeze(Object.defineProperty({__proto__:null,InspectorScenarioSection:A},Symbol.toStringTag,{value:"Module"}));function F({textUrlFilter:t,onTextUrlFilterChange:r,methodFilter:o,onMethodFilterChange:s,sourceFilter:l,onSourceFilterChange:n}){return e.jsxs("div",{style:{display:"flex",gap:8,marginBottom:12,alignItems:"center"},children:[e.jsx("input",{type:"text",placeholder:"Filter by URL...",value:t,onChange:i=>r(i.target.value),style:{...S,flex:1,minWidth:0}}),e.jsxs("select",{value:o,onChange:i=>s(i.target.value),style:R,children:[e.jsx("option",{value:"ALL",children:"All Methods"}),e.jsx("option",{value:"GET",children:"GET"}),e.jsx("option",{value:"POST",children:"POST"}),e.jsx("option",{value:"PUT",children:"PUT"}),e.jsx("option",{value:"DELETE",children:"DELETE"}),e.jsx("option",{value:"PATCH",children:"PATCH"})]}),e.jsxs("select",{value:l,onChange:i=>n(i.target.value),style:R,children:[e.jsx("option",{value:"ALL",children:"All Sources"}),e.jsx("option",{value:"MOCKED",children:"Mocked"}),e.jsx("option",{value:"PASSTHROUGH",children:"Passthrough"})]})]})}const ie=Object.freeze(Object.defineProperty({__proto__:null,InspectorTrafficFilterBar:F},Symbol.toStringTag,{value:"Module"})),G={color:"#8b949e",fontSize:11,fontWeight:600,textTransform:"uppercase",letterSpacing:"0.5px",marginBottom:4},M={background:"#161b22",border:"1px solid #30363d",borderRadius:4,padding:"8px 12px",margin:0,fontSize:11,color:"#c9d1d9",fontFamily:"monospace",maxHeight:200,overflow:"auto",whiteSpace:"pre-wrap",wordBreak:"break-all"};function _({label:t,children:r}){return e.jsxs("div",{style:{marginBottom:12},children:[e.jsx("div",{style:G,children:t}),r]})}function B({event:t}){let r=[];try{const n=new URL(t.url,"http://localhost");r=Array.from(n.searchParams.entries())}catch{}const o=t.requestHeaders&&Object.keys(t.requestHeaders).length>0,s=t.requestBody!=null,l=t.responseBody!=null;return e.jsxs("div",{style:{background:"#0d1117",padding:"12px 16px",borderTop:"1px solid #30363d"},children:[r.length>0&&e.jsx(_,{label:"Query Parameters",children:e.jsx("div",{style:{display:"grid",gridTemplateColumns:"auto 1fr",gap:"2px 12px",fontSize:12},children:r.map(([n,i],c)=>e.jsxs("div",{style:{display:"contents"},children:[e.jsx("span",{style:{color:"#D7FF63",fontFamily:"monospace"},children:n}),e.jsx("span",{style:{color:"#c9d1d9",fontFamily:"monospace"},children:i})]},c))})}),o&&e.jsx(_,{label:"Request Headers",children:e.jsx("pre",{style:M,children:Object.entries(t.requestHeaders).map(([n,i])=>`${n}: ${i}`).join(`
 `)})}),s&&e.jsx(_,{label:"Request Body",children:e.jsx("pre",{style:M,children:typeof t.requestBody=="string"?t.requestBody:JSON.stringify(t.requestBody,null,2)})}),l&&e.jsx(_,{label:"Response Body",children:e.jsx("pre",{style:M,children:typeof t.responseBody=="string"?t.responseBody:JSON.stringify(t.responseBody,null,2)})}),r.length===0&&!o&&!s&&!l&&e.jsx("div",{style:{color:"#8b949e",fontSize:12},children:"No additional details available for this request"})]})}const le=Object.freeze(Object.defineProperty({__proto__:null,DetailSection:_,InspectorTrafficDetail:B},Symbol.toStringTag,{value:"Module"}));function L({event:t}){const[r,o]=a.useState(!1),s=new Date(t.timestampMs).toLocaleTimeString(),l=t.mocked;return e.jsxs(e.Fragment,{children:[e.jsxs("tr",{onClick:()=>o(!r),style:{borderBottom:"1px solid #21262d",background:l?"transparent":"rgba(210, 153, 34, 0.05)",cursor:"pointer"},children:[e.jsxs("td",{style:{...h,color:"#8b949e",textAlign:"center"},children:[e.jsx("span",{style:{display:"inline-block",width:12,marginRight:4,fontSize:10,color:"#8b949e",transition:"transform 0.15s",transform:r?"rotate(90deg)":"rotate(0deg)"},children:"▶"}),s]}),e.jsx("td",{style:{...h,textAlign:"center"},children:e.jsx(O,{method:t.method})}),e.jsx("td",{style:{...h,maxWidth:400,overflow:"hidden",textOverflow:"ellipsis",whiteSpace:"nowrap"},children:t.url}),e.jsx("td",{style:{...h,textAlign:"center",color:"#8b949e"},children:t.status??"---"}),e.jsxs("td",{style:{...h,textAlign:"center",color:"#8b949e"},children:[t.durationMs,"ms"]}),e.jsx("td",{style:{...h,textAlign:"center"},children:l?t.mockSource==="default"?e.jsx(f,{color:"#1f6feb",children:"MOCKED (default)"}):e.jsx(f,{color:"#238636",children:"MOCKED (scenario)"}):e.jsx(f,{color:"#d29922",children:"PASSTHROUGH"})})]}),r&&e.jsx("tr",{children:e.jsx("td",{colSpan:6,style:{padding:0},children:e.jsx(B,{event:t})})})]})}const ae=Object.freeze(Object.defineProperty({__proto__:null,InspectorTrafficRow:L},Symbol.toStringTag,{value:"Module"}));function D({events:t}){return e.jsx("div",{style:{maxHeight:300,overflowY:"auto",border:"1px solid #30363d",borderRadius:6},children:e.jsxs("table",{style:{width:"100%",borderCollapse:"collapse",fontSize:12},children:[e.jsx("thead",{children:e.jsxs("tr",{style:{borderBottom:"1px solid #30363d",position:"sticky",top:0,background:"#0d1117"},children:[e.jsx("th",{style:u,children:"Time"}),e.jsx("th",{style:u,children:"Method"}),e.jsx("th",{style:{...u,textAlign:"left"},children:"URL"}),e.jsx("th",{style:u,children:"Status"}),e.jsx("th",{style:u,children:"Duration"}),e.jsx("th",{style:u,children:"Source"})]})}),e.jsx("tbody",{children:t.map(r=>e.jsx(L,{event:r},r.id))})]})})}const ce=Object.freeze(Object.defineProperty({__proto__:null,InspectorTrafficTable:D},Symbol.toStringTag,{value:"Module"}));function K(t){if(t===void 0)return"checked";if(t==="checked")return"excluded"}function I({chips:t,chipStates:r,onChipStatesChange:o}){if(t.length===0)return null;const s=n=>{const i=new Map(r),c=K(i.get(n));c===void 0?i.delete(n):i.set(n,c),o(i)},l=()=>{o(new Map)};return e.jsxs("div",{style:{display:"flex",flexWrap:"wrap",gap:6,marginBottom:12},children:[r.size>0&&e.jsx("button",{onClick:l,style:{background:"#da363322",color:"#da3633",border:"1px solid #da363355",borderRadius:4,padding:"2px 8px",fontSize:11,fontWeight:600,cursor:"pointer",fontFamily:"inherit"},children:"Clear all"}),t.map(({path:n,count:i})=>{const c=r.get(n),d=c==="checked",g=c==="excluded";let m="#30363d",b="#8b949e",T="#30363d",y="";return d?(m="#D7FF6322",b="#D7FF63",T="#D7FF6355",y="✓ "):g&&(m="#da363322",b="#da3633",T="#da363355",y="✗ "),e.jsxs("button",{onClick:()=>s(n),style:{background:m,color:b,border:`1px solid ${T}`,borderRadius:4,padding:"2px 8px",fontSize:11,fontFamily:"monospace",cursor:"pointer",whiteSpace:"nowrap"},children:[y,n,e.jsxs("span",{style:{marginLeft:4,opacity:.6,fontFamily:"inherit"},children:["(",i,")"]})]},n)})]})}const de=Object.freeze(Object.defineProperty({__proto__:null,InspectorTrafficUrlChips:I},Symbol.toStringTag,{value:"Module"}));function H(){const{events:t}=k(),[r,o]=a.useState(""),[s,l]=a.useState(()=>new Map),[n,i]=a.useState("ALL"),[c,d]=a.useState("ALL"),g=t.filter(p=>p.type==="http_request"),m=a.useMemo(()=>{const p=new Map;for(const x of g){const j=E(x.url);p.set(j,(p.get(j)||0)+1)}return Array.from(p.entries()).sort((x,j)=>j[1]-x[1]).slice(0,10).map(([x,j])=>({path:x,count:j}))},[g]),b=a.useMemo(()=>Array.from(s.values()).some(p=>p==="checked"),[s]),y=g.filter(p=>{if(r&&!p.url.toLowerCase().includes(r.toLowerCase()))return!1;const x=E(p.url);return!(s.get(x)==="excluded"||b&&s.get(x)!=="checked"||n!=="ALL"&&p.method.toUpperCase()!==n||c==="MOCKED"&&!p.mocked||c==="PASSTHROUGH"&&p.mocked)}).slice(-50).reverse();return e.jsxs("section",{children:[e.jsx(v,{title:"Live Traffic"}),e.jsx(F,{textUrlFilter:r,onTextUrlFilterChange:o,methodFilter:n,onMethodFilterChange:i,sourceFilter:c,onSourceFilterChange:p=>d(p)}),e.jsx(I,{chips:m,chipStates:s,onChipStatesChange:l}),y.length===0?e.jsx(C,{color:"#8b949e",children:g.length>0?"No matching traffic — try adjusting the filters":"No HTTP traffic yet — requests will appear here in real-time"}):e.jsx(D,{events:y})]})}const pe=Object.freeze(Object.defineProperty({__proto__:null,InspectorTrafficSection:H},Symbol.toStringTag,{value:"Module"}));function J(){const[t,r]=a.useState(null),[o,s]=a.useState(!1);return{explain:a.useCallback(async(n,i)=>{s(!0);try{const d=await(await fetch("/api/inspector/explain",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({method:n,url:i})})).json();r(d)}catch{}finally{s(!1)}},[]),result:t,loading:o}}function U({result:t}){return e.jsxs("div",{style:{border:"1px solid #30363d",borderRadius:6,padding:12},children:[e.jsxs("div",{style:{display:"flex",alignItems:"center",gap:8,marginBottom:12},children:[e.jsxs("span",{style:{color:"#f0f6fc",fontWeight:500},children:[t.method," ",t.url]}),t.wouldMatch?e.jsx(f,{color:"#238636",children:"WOULD MATCH"}):e.jsx(f,{color:"#da3633",children:"NO MATCH"})]}),t.attempts.length===0?e.jsx("div",{style:{color:"#8b949e"},children:"No routes loaded to match against"}):e.jsx("div",{style:{display:"flex",flexDirection:"column",gap:6},children:t.attempts.map((r,o)=>e.jsxs("div",{style:{display:"flex",alignItems:"center",gap:8,padding:"4px 8px",borderRadius:4,background:r.failure?"transparent":"rgba(35, 134, 54, 0.1)"},children:[e.jsx("span",{style:{color:r.failure?"#da3633":"#238636",fontWeight:600,width:16},children:r.failure?"x":"v"}),e.jsx(O,{method:r.method}),e.jsx("span",{children:r.pattern}),r.failure&&e.jsx("span",{style:{color:"#8b949e",fontSize:11},children:r.failure.reason==="methodMismatch"?`method: expected ${r.failure.expected}, got ${r.failure.actual}`:`path "${r.failure.path}" does not match "${r.failure.pattern}"`})]},o))})]})}const ue=Object.freeze(Object.defineProperty({__proto__:null,InspectorExplainerResult:U},Symbol.toStringTag,{value:"Module"}));function W(){const{explain:t,result:r,loading:o}=J(),[s,l]=a.useState("GET"),[n,i]=a.useState(""),c=d=>{d.preventDefault(),n.trim()&&t(s,n.trim())};return e.jsxs("section",{children:[e.jsx(v,{title:"Match Explainer"}),e.jsxs("form",{onSubmit:c,style:{display:"flex",gap:8,marginBottom:12},children:[e.jsx("select",{value:s,onChange:d=>l(d.target.value),style:{...S,width:100},children:["GET","POST","PUT","DELETE","PATCH"].map(d=>e.jsx("option",{value:d,children:d},d))}),e.jsx("input",{type:"text",value:n,onChange:d=>i(d.target.value),placeholder:"/api/users",style:{...S,flex:1}}),e.jsx("button",{type:"submit",disabled:o||!n.trim(),style:{background:"#238636",color:"#fff",border:"none",borderRadius:6,padding:"6px 16px",cursor:"pointer",fontSize:12,fontWeight:500,opacity:o||!n.trim()?.5:1},children:o?"Checking...":"Explain"})]}),r&&e.jsx(U,{result:r})]})}const he=Object.freeze(Object.defineProperty({__proto__:null,InspectorExplainerSection:W},Symbol.toStringTag,{value:"Module"})),w={"/api/health":"Health check — confirms the proxy and mock engine are running","/api/events":"SSE stream of real-time events (traffic, errors) powering this Inspector","/api/config":"Returns current CodeYam configuration for the project","/api/editor-dev-server":"Polls/controls the dev server status (start, stop, restart)","/api/inspector/status":"Returns active scenario and loaded mock routes","/api/inspector/explain":"Tests which mock route would match a given method + URL","/api/scenarios":"Lists all defined scenarios with metadata","/api/tests":"Returns the AI-maintained test registry joined with per-test-evidence, grouped by file","/api/test-results":"Returns latest test execution results","/api/screenshots/*":"Serves captured scenario screenshots","/api/session-info":"Returns current editor session metadata","/api/data-structure":"Returns the app's data structure definition","/api/dependency-graph":"Returns the project's component dependency graph","/api/app-route-entities":"Lists app routes and their associated entities","/api/glossary":"Returns the project's component glossary","/api/step":"Returns current editor workflow step","/api/editor-commands":"Lists available editor commands"};function V(t){if(w[t])return w[t];for(const[r,o]of Object.entries(w))if(r.endsWith("/*")){const s=r.slice(0,-1);if(t.startsWith(s))return o}}function Y(t){const r=new Set([...t,...Object.keys(w)]),o=[];for(const s of Array.from(r).sort()){if(s.endsWith("/*"))continue;const l=V(s);o.push({path:s,description:l??"Application endpoint"})}return o}function q(){const{events:t}=k(),r=a.useMemo(()=>{const o=[];for(const s of t)s.type==="http_request"&&o.push(E(s.url));return Y(o)},[t]);return r.length===0?null:e.jsxs("section",{children:[e.jsx(v,{title:"URL Glossary"}),e.jsx("div",{style:{border:"1px solid #30363d",borderRadius:6,overflow:"hidden"},children:e.jsxs("table",{style:{width:"100%",borderCollapse:"collapse",fontSize:12},children:[e.jsx("thead",{children:e.jsxs("tr",{style:{borderBottom:"1px solid #30363d",background:"#161b22"},children:[e.jsx("th",{style:{padding:"6px 12px",textAlign:"left",color:"#8b949e",fontWeight:500,fontSize:11,textTransform:"uppercase",letterSpacing:"0.5px",width:"30%"},children:"Path"}),e.jsx("th",{style:{padding:"6px 12px",textAlign:"left",color:"#8b949e",fontWeight:500,fontSize:11,textTransform:"uppercase",letterSpacing:"0.5px"},children:"Description"})]})}),e.jsx("tbody",{children:r.map(({path:o,description:s})=>e.jsxs("tr",{style:{borderBottom:"1px solid #21262d"},children:[e.jsx("td",{style:{padding:"4px 12px",fontFamily:"monospace",color:"#D7FF63",fontSize:11},children:o}),e.jsx("td",{style:{padding:"4px 12px",color:"#8b949e"},children:s})]},o))})]})})]})}const xe=Object.freeze(Object.defineProperty({__proto__:null,InspectorUrlGlossary:q},Symbol.toStringTag,{value:"Module"}));function Q(){const{connected:t}=k();return e.jsxs("div",{style:{background:"#0d1117",color:"#c9d1d9",minHeight:"100vh",fontFamily:"'SF Mono', 'Fira Code', 'Cascadia Code', Menlo, monospace",fontSize:13,padding:24,display:"flex",flexDirection:"column",gap:24},children:[e.jsxs("header",{style:{display:"flex",alignItems:"center",gap:12},children:[e.jsx("h1",{style:{fontSize:18,fontWeight:600,color:"#f0f6fc",margin:0},children:"Container Inspector"}),e.jsx("span",{style:{color:"#8b949e",fontSize:12},children:"Read-only view of proxy and mock engine state"}),e.jsx(P,{connected:t})]}),e.jsx(A,{}),e.jsx(H,{}),e.jsx(W,{}),e.jsx(q,{})]})}const fe=Object.freeze(Object.defineProperty({__proto__:null,ContainerInspector:Q},Symbol.toStringTag,{value:"Module"}));export{f as B,Q as C,_ as D,L as I,O as M,v as S,xe as _,C as a,q as b,I as c,D as d,F as e,B as f,U as g,W as h,H as i,z as j,A as k,P as l,de as m,ce as n,pe as o,ae as p,ie as q,le as r,ne as s,u as t,se as u,oe as v,he as w,ue as x,fe as y,re as z};