@hover-dev/core 0.15.0 → 0.17.0

package/dist/service/types.d.ts

@@ -10,36 +10,136 @@
  * one place.
  */
 import { WebSocket } from 'ws';
-import type { SkillStep } from '../skills/writeSkill.js';
+import type { SkillStep } from '../specs/specStep.js';
 import type { SpecAssertion } from '../specs/writeSpec.js';
 export interface ClientMessage {
     type: string;
     payload?: {
         text?: string;
         sessionId?: string;
+        /** The chat conversation a run belongs to — groups its run folders under
+         *  `.hover/runs/<conversationId>/`. */
+        conversationId?: string;
         name?: string;
         description?: string;
         steps?: SkillStep[];
         assertions?: SpecAssertion[];
         overwrite?: boolean;
-        /** save-case-csv only — passed through to writeCaseCsv as extra
-         *  fields on the test case's Labels column. */
-        jiraProjectKey?: string;
-        labels?: string;
+        /** save-spec only — credentials to parameterize into process.env.<envVar>
+         *  references so secrets never land in the spec / sidecar. */
+        redactions?: {
+            value: string;
+            envVar: string;
+        }[];
+        /** save-spec only — the active env's recon-discovered reset recipe (debt-2).
+         *  A tier-1 recipe makes the spec generate + call a resetState() beforeEach. */
+        resetRecipe?: {
+            tier: number;
+            storageKeys?: string[];
+            hook?: string;
+        };
+        /** save-spec only — auth-as-fixture (debt 3). The user approved Hover editing
+         *  their existing playwright.config; engage the fixture (lift login into
+         *  auth.setup.ts) and apply the setup-project edit. Absent on a normal save. */
+        authFixture?: boolean;
+        /** command only — test accounts the prompt referenced via @label. Injected
+         *  into the agent's system prompt (ephemeral, not the saved transcript) so
+         *  it can log in; the recorded fill values get redacted on save. */
+        accounts?: {
+            label: string;
+            username?: string;
+            password?: string;
+            role?: string;
+        }[];
+        /** command only — ask the agent to run state-reset recon this run (debt-2
+         *  reproducible-state-isolation). Off unless the extension sets it (e.g. the
+         *  active env has no reset recipe yet); recon clears client state, so it must
+         *  be opt-in, never on a plain Flow recording. */
+        reconReset?: boolean;
         /** check-cdp / launch-chrome / focus-debug — the widget's
          *  window.location.href so service can compare origins or navigate the
          *  newly-launched debug Chrome to the same URL. */
         pageUrl?: string;
         /** switch-agent only — id of the agent to switch the service to. */
         agentId?: string;
+        /** set-model only — the model id to use for subsequent runs (e.g. opus). */
+        model?: string;
+        /** optimize-spec only — override model for the F7 refinement pass (the
+         *  `hover.optimizeModel` setting). Empty → the agent's cheap default. */
+        optimizeModel?: string;
+        /** heal-spec only — the failing spec's source, so the engine can build the
+         *  heal prompt without guessing the spec's path. */
+        specSource?: string;
+        /** set-effort only — reasoning-effort level for subsequent runs (empty
+         *  string clears it → agent/model default). */
+        effort?: string;
+        /** set-local-endpoint only — base URL of the user's self-hosted
+         *  OpenAI-compatible endpoint for the Local LLM agent. */
+        baseUrl?: string;
+        /** set-byok only — bring-your-own-key model config (protocol + key + base
+         *  URL + model injected into the protocol's matching CLI), or null to clear
+         *  and fall back to the local-CLI agent's own auth. */
+        config?: {
+            protocol: string;
+            baseUrl: string;
+            model: string;
+            maxTokens: number;
+            apiKey: string;
+        } | null;
         /** set-mode only — id of the plugin-contributed mode to activate,
          *  or null to return to normal (unmoded) operation. */
         modeId?: string | null;
         /** optimize-spec / promote-optimized / discard-optimized — the spec slug. */
         slug?: string;
-        /** set-api-key only — the model API key to inject into the spawned CLI's
-         *  env (or empty/missing to clear it). Held in memory only, never logged. */
-        key?: string;
+        /** launch-chrome only — launch the debug Chrome headless (silent mode). */
+        headless?: boolean;
+        /** launch-chrome only — close any existing debug Chrome first, then
+         *  relaunch (so a headless↔visible switch / "reopen browser" takes effect). */
+        force?: boolean;
+        /** reveal-source only — a `data-hover-source` value (`<rel-path>:<line>:<col>`)
+         *  an in-page client (widget) captured from a clicked element. The service
+         *  relays it to every OTHER connected client; the VSCode extension listens
+         *  for it and jumps the editor to that location (F2 page→editor transport). */
+        source?: string;
+        /** command only — the editor's source-read grant for this run:
+         *  'always' (skip the gate), 'ask' (gate each read), 'deny' (no source MCP).
+         *  Default 'ask' when absent. */
+        sourceAccess?: 'always' | 'ask' | 'deny';
+        /** command only — run the agent in an isolated cwd so it loads none of the
+         *  user's CLAUDE.md / Claude Code auto-memory (Memory = "isolated"). */
+        isolateContext?: boolean;
+        /** command only — the active environment, recorded in the session ledger. */
+        env?: {
+            id?: string;
+            name?: string;
+        };
+        /** source-approval-request (from the source MCP) / -response (from the
+         *  editor): a correlation id, the requested repo-relative path + kind, and
+         *  the user's allow/deny decision. */
+        approvalId?: string;
+        sourcePath?: string;
+        sourceKind?: string;
+        allow?: boolean;
+        /** ask-user-request (from the control MCP) / -response (from the editor):
+         *  a correlation id, the question + offered choices, and the user's answer. */
+        askId?: string;
+        question?: string;
+        options?: {
+            label: string;
+            description?: string;
+        }[];
+        allowFreeText?: boolean;
+        value?: string;
+        cancelled?: boolean;
+        /** record-fact (from the control MCP, QA/API modes only): a business RULE
+         *  the agent learned/confirmed, to persist into `.hover/memory/` so it isn't
+         *  re-asked next run. RULES only — never secrets/PII (the tool + directive
+         *  enforce this; the engine also ignores it outside QA/API). */
+        fact?: {
+            title: string;
+            rule: string;
+            type?: string;
+        };
     };
 }
 export declare function send(ws: WebSocket, message: {

package/dist/service/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/service/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;QACpB,UAAU,CAAC,EAAE,aAAa,EAAE,CAAC;QAC7B,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB;uDAC+C;QAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB;;2DAEmD;QACnD,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,oEAAoE;QACpE,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;+DACuD;QACvD,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,6EAA6E;QAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;QACd;qFAC6E;QAC7E,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,wBAAgB,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAEtF;AAED;;;;sEAIsE;AACtE,wBAAgB,UAAU,CACxB,EAAE,EAAE,SAAS,EACb,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAC3C,OAAO,CAIT"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/service/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB;+CACuC;QACvC,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;QACpB,UAAU,CAAC,EAAE,aAAa,EAAE,CAAC;QAC7B,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB;sEAC8D;QAC9D,UAAU,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QACjD;wFACgF;QAChF,WAAW,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACtE;;wFAEgF;QAChF,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB;;4EAEoE;QACpE,QAAQ,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QACpF;;;0DAGkD;QAClD,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB;;2DAEmD;QACnD,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,oEAAoE;QACpE,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,4EAA4E;QAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;QACf;iFACyE;QACzE,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB;4DACoD;QACpD,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB;uDAC+C;QAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB;kEAC0D;QAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;;+DAEuD;QACvD,MAAM,CAAC,EAAE;YACP,QAAQ,EAAE,MAAM,CAAC;YACjB,OAAO,EAAE,MAAM,CAAC;YAChB,KAAK,EAAE,MAAM,CAAC;YACd,SAAS,EAAE,MAAM,CAAC;YAClB,MAAM,EAAE,MAAM,CAAC;SAChB,GAAG,IAAI,CAAC;QACT;+DACuD;QACvD,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,6EAA6E;QAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,2EAA2E;QAC3E,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB;uFAC+E;QAC/E,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB;;;uFAG+E;QAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB;;yCAEiC;QACjC,YAAY,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;QACzC;gFACwE;QACxE,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,6EAA6E;QAC7E,GAAG,CAAC,EAAE;YAAE,EAAE,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACrC;;8CAEsC;QACtC,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB;uFAC+E;QAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QACpD,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB;;;wEAGgE;QAChE,IAAI,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACvD,CAAC;CACH;AAED,wBAAgB,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAEtF;AAED;;;;sEAIsE;AACtE,wBAAgB,UAAU,CACxB,EAAE,EAAE,SAAS,EACb,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAC3C,OAAO,CAIT"}

package/dist/service.d.ts

@@ -3,13 +3,17 @@ export interface ServiceOptions {
     port: number;
     agentId?: string;
     model?: string;
+    /** Initial reasoning-effort level (set-effort overrides at runtime). */
+    effort?: string;
     maxBudgetUsd?: number;
-    /** How the optimization pass (F7) surfaces in the widget. Default 'suggest'.
-     *  'off' = no nudge, 'suggest' = ✦ hint, 'on' = auto-run after Save-as-spec. */
-    optimizeMode?: 'off' | 'suggest' | 'on';
     mcpConfig?: string;
     /** CDP URL to preflight before each command (default http://localhost:9222). */
     cdpUrl?: string;
+    /** Isolated Chrome user-data-dir for this service's debug Chrome (default
+     *  `<tmpdir>/hover-chrome`). Set per-service so several engine hosts (one per
+     *  chat session) each drive their OWN Chrome profile — distinct logins, no
+     *  profile-lock contention. Paired with a distinct `cdpUrl` port. */
+    userDataDir?: string;
     /** Working directory for the spawned agent. Also the root under which saved
      *  specs (`__vibe_tests__/`), sidecars + seeds (`.hover/`) live. Defaults to
      *  process.cwd(); in Vite plugin context, set to `server.config.root` so the
@@ -29,6 +33,12 @@ export interface ServiceOptions {
      *  see the proxy; moving it here is what enables the single-Chrome model.
      *  Default false (shims pass it through from their own option). */
     autoLaunchChrome?: boolean;
+    /** Opt-in: give the agent READ-ONLY, fenced access to the project's source
+     *  via a `read_source` / `list_source` MCP server (in addition to Playwright
+     *  MCP), in every mode. Lets it author against real selectors/routes and do
+     *  white-box security/pentest. Fenced to devRoot, secrets/keys/.git/build
+     *  excluded, no write/exec. Default false — the agent stays browser-only. */
+    codeContext?: boolean;
     /** The dev-server URL the auto-launched Chrome should open. Each shim knows
      *  its own framework's dev URL and passes it here. Defaults to the cdp host
      *  if unset, but shims should always provide it. */

package/dist/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AA6EA,OAAO,EAEL,KAAK,mBAAmB,EAEzB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;oFACgF;IAChF,YAAY,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,IAAI,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;gFAG4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;uBAImB;IACnB,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAChC;;;;;;uEAMmE;IACnE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;wDAEoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B;4EACwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAiED,wBAAsB,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CA64B/E"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAqFA,OAAO,EAEL,KAAK,mBAAmB,EAEzB,MAAM,iBAAiB,CAAC;AAqCzB,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;yEAGqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;gFAG4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;uBAImB;IACnB,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAChC;;;;;;uEAMmE;IACnE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;iFAI6E;IAC7E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;wDAEoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B;4EACwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAkFD,wBAAsB,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAglD/E"}