@imgly/codesign-mcp 0.1.5 → 0.1.6

package/dist/assets/load-browser.d.ts

@@ -1,5 +1,5 @@
 /**
- * Returns the codesign-mcp asset bundle (SYSTEM.md, prompts/, skills/) keyed
+ * Returns the codesign-mcp asset bundle (SYSTEM.md, skills/) keyed
  * by forward-slash-relative paths under `agent/`. Both surfaces (node and
  * browser) share the same inlined bundle generated at codesign-mcp build time
  * by scripts/generate-inline-assets.mjs.

package/dist/assets/load-browser.js

@@ -1,6 +1,6 @@
 import { INLINE_ASSETS } from './inline.generated.js';
 /**
- * Returns the codesign-mcp asset bundle (SYSTEM.md, prompts/, skills/) keyed
+ * Returns the codesign-mcp asset bundle (SYSTEM.md, skills/) keyed
  * by forward-slash-relative paths under `agent/`. Both surfaces (node and
  * browser) share the same inlined bundle generated at codesign-mcp build time
  * by scripts/generate-inline-assets.mjs.

package/dist/assets/load-browser.js.map

@@ -1 +1 @@
-{"version":3,"file":"load-browser.js","sourceRoot":"","sources":["../../src/assets/load-browser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,EAAE,GAAG,aAAa,EAAE,CAAC;AAC9B,CAAC","sourcesContent":["import { INLINE_ASSETS } from './inline.generated.js';\n\n/**\n * Returns the codesign-mcp asset bundle (SYSTEM.md, prompts/, skills/) keyed\n * by forward-slash-relative paths under `agent/`. Both surfaces (node and\n * browser) share the same inlined bundle generated at codesign-mcp build time\n * by scripts/generate-inline-assets.mjs.\n */\nexport function loadBrowserAssets(): Record<string, string> {\n  return { ...INLINE_ASSETS };\n}\n"]}
+{"version":3,"file":"load-browser.js","sourceRoot":"","sources":["../../src/assets/load-browser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,EAAE,GAAG,aAAa,EAAE,CAAC;AAC9B,CAAC","sourcesContent":["import { INLINE_ASSETS } from './inline.generated.js';\n\n/**\n * Returns the codesign-mcp asset bundle (SYSTEM.md, skills/) keyed\n * by forward-slash-relative paths under `agent/`. Both surfaces (node and\n * browser) share the same inlined bundle generated at codesign-mcp build time\n * by scripts/generate-inline-assets.mjs.\n */\nexport function loadBrowserAssets(): Record<string, string> {\n  return { ...INLINE_ASSETS };\n}\n"]}

package/dist/assets/load-node.d.ts

@@ -1,5 +1,5 @@
 /**
- * Returns the codesign-mcp asset bundle (SYSTEM.md, prompts/, skills/) keyed
+ * Returns the codesign-mcp asset bundle (SYSTEM.md, skills/) keyed
  * by forward-slash-relative paths under `agent/`. Both surfaces (node and
  * browser) share the same inlined bundle generated at codesign-mcp build time
  * by scripts/generate-inline-assets.mjs.

package/dist/assets/load-node.js

@@ -1,6 +1,6 @@
 import { INLINE_ASSETS } from './inline.generated.js';
 /**
- * Returns the codesign-mcp asset bundle (SYSTEM.md, prompts/, skills/) keyed
+ * Returns the codesign-mcp asset bundle (SYSTEM.md, skills/) keyed
  * by forward-slash-relative paths under `agent/`. Both surfaces (node and
  * browser) share the same inlined bundle generated at codesign-mcp build time
  * by scripts/generate-inline-assets.mjs.

package/dist/assets/load-node.js.map

@@ -1 +1 @@
-{"version":3,"file":"load-node.js","sourceRoot":"","sources":["../../src/assets/load-node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,EAAE,GAAG,aAAa,EAAE,CAAC;AAC9B,CAAC","sourcesContent":["import { INLINE_ASSETS } from './inline.generated.js';\n\n/**\n * Returns the codesign-mcp asset bundle (SYSTEM.md, prompts/, skills/) keyed\n * by forward-slash-relative paths under `agent/`. Both surfaces (node and\n * browser) share the same inlined bundle generated at codesign-mcp build time\n * by scripts/generate-inline-assets.mjs.\n */\nexport function loadNodeAssets(): Record<string, string> {\n  return { ...INLINE_ASSETS };\n}\n"]}
+{"version":3,"file":"load-node.js","sourceRoot":"","sources":["../../src/assets/load-node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,EAAE,GAAG,aAAa,EAAE,CAAC;AAC9B,CAAC","sourcesContent":["import { INLINE_ASSETS } from './inline.generated.js';\n\n/**\n * Returns the codesign-mcp asset bundle (SYSTEM.md, skills/) keyed\n * by forward-slash-relative paths under `agent/`. Both surfaces (node and\n * browser) share the same inlined bundle generated at codesign-mcp build time\n * by scripts/generate-inline-assets.mjs.\n */\nexport function loadNodeAssets(): Record<string, string> {\n  return { ...INLINE_ASSETS };\n}\n"]}

package/dist/cli/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/cli/http.ts"],"names":[],"mappings":"AA6EA,wBAAsB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAkN5D"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/cli/http.ts"],"names":[],"mappings":"AA0EA,wBAAsB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA4L5D"}

package/dist/cli/http.js

@@ -24,9 +24,6 @@ import { NodeWorkspaceFS } from '../workspace/node-fs.js';
 import { S3WorkspaceFS } from '../workspace/s3.js';
 import { ScopedWorkspaceFS } from '../workspace/scoped.js';
 import { loadNodeAssets } from '../assets/load-node.js';
-import { mountMetricsEndpoints } from '../metrics/mount.js';
-import { MetricsRecorder } from '../metrics/recorder.js';
-import { createMetricsTool } from '../tools/metrics.js';
 const HOST = '0.0.0.0'; // bind all interfaces; TLS/routing is the front's job
 async function buildBackend(cfg) {
     if (cfg.workspace.backend === 's3') {
@@ -62,6 +59,8 @@ export async function runHttp(_argv) {
         process.stderr.write(`codesign-mcp http: ${err instanceof Error ? err.message : String(err)}\n`);
         process.exit(1);
     }
+    const { buildDiagnostics } = await import('./stdio.js');
+    const { telemetry } = buildDiagnostics();
     const license = cfg.cesdkLicense;
     const { rawFs, s3: s3Backend } = await buildBackend(cfg);
     const broadcaster = new SseBroadcaster();
@@ -77,11 +76,6 @@ export async function runHttp(_argv) {
     // engine (per pool slot) so distinct engines run in parallel.
     const engineLock = new Mutex();
     const resolveWorkspaceId = makeWorkspaceResolver(cfg);
-    // Process-global perf recorder — constructed once, owns its own memory
-    // timer, DI'd into every session's MCP server. Undefined (and thus a no-op
-    // everywhere) unless IMGLY_METRICS_ENABLED is on.
-    const recorder = cfg.metricsEnabled ? new MetricsRecorder() : undefined;
-    recorder?.start();
     const app = await createCodesignHttpServer({
         assets: loadNodeAssets(),
         buildId: cfg.buildId,
@@ -89,7 +83,6 @@ export async function runHttp(_argv) {
         idleTimeoutMs: cfg.idleTimeoutMs,
         resolveWorkspaceId,
         trustedSessionIdHeader: 'x-mcp-session-id',
-        ...(recorder ? { metrics: recorder } : {}),
         ...(cfg.viewerCorsOrigins
             ? { cors: { origin: cfg.viewerCorsOrigins } }
             : {}),
@@ -155,28 +148,12 @@ export async function runHttp(_argv) {
                 // `as never`: buildDesignToolRegistrations is generic over the engine type
                 // (unknown at this composition root); the concrete @cesdk/engine type isn't
                 // threaded up here, so this is the sanctioned boundary cast (see no-as-any).
-                renderThumbnail: renderThumbnail
+                renderThumbnail: renderThumbnail,
+                telemetry
             });
-            if (recorder) {
-                // Same merged shape as GET /metrics; `app` is assigned by the time any
-                // session is created (first initialize), so the closure is safe.
-                tools.push(createMetricsTool({
-                    recorder,
-                    activeSessions: () => app.sessions.size,
-                    maxSessions: cfg.maxEngines
-                }));
-            }
             return { engine, tools };
         },
         mountExtras: (expressApp) => {
-            if (recorder) {
-                // Metrics work in every workspace mode; the viewer (below) is single-only.
-                mountMetricsEndpoints(expressApp, {
-                    recorder,
-                    maxSessions: cfg.maxEngines,
-                    activeSessions: () => app.sessions.size
-                });
-            }
             if (cfg.auth.mode === 'session') {
                 // Multi-tenant viewer: /v/<sid> scopes reads to s/<sid> per request.
                 mountSessionViewer(expressApp, {
@@ -222,7 +199,6 @@ export async function runHttp(_argv) {
         }, 5000);
         hardExit.unref();
         clearInterval(evictTimer);
-        recorder?.stop();
         server.close();
         server.closeAllConnections();
         broadcaster.closeAll();

package/dist/cli/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/cli/http.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,EAAE;AACF,yEAAyE;AACzE,mEAAmE;AACnE,+EAA+E;AAC/E,wEAAwE;AACxE,wEAAwE;AACxE,OAAO,EAAE,UAAU,EAAqB,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,EACd,aAAa,EACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,sDAAsD;AAc9E,KAAK,UAAU,YAAY,CAAC,GAAiB;IAC3C,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC,EAAE;YACL,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC;YAC1B,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC,eAAe;gBACtC,CAAC,CAAC;oBACE,WAAW,EAAE;wBACX,WAAW,EAAE,EAAE,CAAC,WAAW;wBAC3B,eAAe,EAAE,EAAE,CAAC,eAAe;qBACpC;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,OAAO;YACL,KAAK,EAAE,IAAI,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC;YACvD,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE;SAClC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,IAAI,OAAO,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,KAAe;IAC3C,IAAI,GAAiB,CAAC;IACtB,IAAI,CAAC;QACH,GAAG,GAAG,UAAU,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC3E,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC;IACjC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,IAAI,cAAc,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC;QACrC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;QAC1B,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC,CAAC;IACH,wEAAwE;IACxE,4EAA4E;IAC5E,4EAA4E;IAC5E,yEAAyE;IACzE,0EAA0E;IAC1E,8DAA8D;IAC9D,MAAM,UAAU,GAAG,IAAI,KAAK,EAAE,CAAC;IAC/B,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACtD,uEAAuE;IACvE,2EAA2E;IAC3E,kDAAkD;IAClD,MAAM,QAAQ,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAElB,MAAM,GAAG,GAAG,MAAM,wBAAwB,CAAC;QACzC,MAAM,EAAE,cAAc,EAAE;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,WAAW,EAAE,GAAG,CAAC,UAAU;QAC3B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,kBAAkB;QAClB,sBAAsB,EAAE,kBAAkB;QAC1C,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,GAAG,CAAC,iBAAiB;YACvB,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,iBAAiB,EAAE,EAAE;YAC7C,CAAC,CAAC,EAAE,CAAC;QACP,aAAa,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE;YAClD,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;YACnD,0GAA0G;YAC1G,MAAM,wBAAwB,CAAC,MAAM,CAAC,CAAC;YACvC,0EAA0E;YAC1E,wEAAwE;YACxE,sBAAsB,CAAC,MAAM,CAAC,CAAC;YAC/B,wEAAwE;YACxE,wEAAwE;YACxE,iCAAiC;YACjC,MAAM,UAAU,GAAG,aAAa,CAAC;gBAC/B,aAAa,EAAE,GAAG,CAAC,aAAa;gBAChC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACnB,SAAS;aACV,CAAC,CAAC;YACH,mEAAmE;YACnE,mEAAmE;YACnE,wEAAwE;YACxE,8DAA8D;YAC9D,iEAAiE;YACjE,MAAM,UAAU,GAAG,SAAS;gBAC1B,CAAC,CAAC,IAAI,qBAAqB,CAAC;oBACxB,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,WAAW;iBACZ,CAAC;gBACJ,CAAC,CAAC,IAAI,qBAAqB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YACpD,2EAA2E;YAC3E,2EAA2E;YAC3E,mEAAmE;YACnE,yDAAyD;YACzD,wEAAwE;YACxE,4BAA4B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;gBAChC,IAAI,EAAE,CAAC;gBACP,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;aAC9B,CAAC,CAAC;YACH,MAAM,eAAe,GAAG,KAAK,EAAE,EAC7B,MAAM,EAAE,GAAG,EAIZ,EAAE,EAAE;gBACH,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;gBAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;gBACpD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE;oBAC1D,WAAW,EAAE,GAAG;iBACjB,CAAC,CAAC;gBACH,OAAO,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YAClD,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,4BAA4B,CAAC;gBACzC,EAAE,EAAE,QAAQ;gBACZ,KAAK;gBACL,OAAO;gBACP,UAAU;gBACV,OAAO;gBACP,UAAU;gBACV,YAAY,EAAE,KAAK;gBACnB,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC9C,2EAA2E;gBAC3E,4EAA4E;gBAC5E,6EAA6E;gBAC7E,eAAe,EAAE,eAAwB;aAC1C,CAAC,CAAC;YACH,IAAI,QAAQ,EAAE,CAAC;gBACb,uEAAuE;gBACvE,iEAAiE;gBACjE,KAAK,CAAC,IAAI,CACR,iBAAiB,CAAC;oBAChB,QAAQ;oBACR,cAAc,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI;oBACvC,WAAW,EAAE,GAAG,CAAC,UAAU;iBAC5B,CAAC,CACH,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC3B,CAAC;QACD,WAAW,EAAE,CAAC,UAAU,EAAE,EAAE;YAC1B,IAAI,QAAQ,EAAE,CAAC;gBACb,2EAA2E;gBAC3E,qBAAqB,CAAC,UAAU,EAAE;oBAChC,QAAQ;oBACR,WAAW,EAAE,GAAG,CAAC,UAAU;oBAC3B,cAAc,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI;iBACxC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAChC,qEAAqE;gBACrE,kBAAkB,CAAC,UAAU,EAAE;oBAC7B,KAAK;oBACL,WAAW;oBACX,YAAY,EAAE,OAAO;iBACtB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0CAA0C,GAAG,CAAC,IAAI,CAAC,IAAI,gDAAgD,CACxG,CAAC;gBACF,OAAO;YACT,CAAC;YACD,MAAM,cAAc,GAAG,IAAI,iBAAiB,CAC1C,KAAK,EACL,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,SAAS,CACvC,CAAC;YACF,MAAM,WAAW,GAAG,IAAI,aAAa,CAAC,cAAc,CAAC,CAAC;YACtD,UAAU,CAAC,GAAG,CACZ,SAAS,EACT,kBAAkB,CAAC;gBACjB,KAAK,EAAE,WAAW;gBAClB,EAAE,EAAE,cAAc;gBAClB,WAAW;gBACX,YAAY,EAAE,OAAO;aACtB,CAAC,CACH,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,WAAW,CAC5B,GAAG,EAAE,CACH,KAAK,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8BAA8B,OAAO,CAAC,MAAM,oBAAoB,CACjE,CAAC;IACN,CAAC,CAAC,EACJ,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,CACxC,CAAC;IAEF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;QAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0CAA0C,IAAI,IAAI,GAAG,CAAC,IAAI,MAAM;YAC9D,UAAU,GAAG,CAAC,IAAI,CAAC,IAAI,YAAY,GAAG,CAAC,SAAS,CAAC,OAAO,KAAK,CAChE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sBAAsB,MAAM,0BAA0B,CACvD,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,YAAY,GAAG,IAAI,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,MAAM,qBAAqB,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yDAAyD,CAC1D,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,EAAE,IAAI,CAAC,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,aAAa,CAAC,UAAU,CAAC,CAAC;QAC1B,QAAQ,EAAE,IAAI,EAAE,CAAC;QACjB,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC7B,WAAW,CAAC,QAAQ,EAAE,CAAC;QACvB,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AACxD,CAAC","sourcesContent":["// packages/codesign-mcp/src/cli/http.ts\n//\n// codesign-mcp http — Streamable HTTP transport. Composition root: loads\n// IMGLY_* config, selects the storage backend (local|s3), builds a\n// PER-SESSION ScopedWorkspaceFS + RevisionStore, wires the workspace resolver,\n// and mounts the viewer: fixed `/viewer` in `single` mode, multi-tenant\n// `/v/<sid>` in `session` mode (disabled in `header` mode — follow-up).\nimport { loadConfig, type ServerConfig } from '../config.js';\nimport { ensureEngineAssetSources } from '../engine/asset-sources.js';\nimport { cesdkAdapter } from '../engine/cesdk-adapter.js';\nimport { Mutex } from '../engine/mutex.js';\nimport { EngineSession } from '../engine/session.js';\nimport { registerUnsplashSource } from '../engine/unsplash-source.js';\nimport { registerWorkspaceUriResolver } from '../engine/uri-resolver.js';\nimport { LocalGatewayClient } from '../gateway/local.js';\nimport { createCodesignHttpServer } from '../http/server.js';\nimport { makeWorkspaceResolver } from '../http/workspace-auth.js';\nimport { RevisionStore } from '../revisions/store.js';\nimport { ensureHeadlessEngine } from '../tools/engine.js';\nimport { buildDesignToolRegistrations } from '../tools/index.js';\nimport {\n  createViewerRouter,\n  LocalViewerUrlBuilder,\n  mountSessionViewer,\n  SseBroadcaster,\n  viewerBaseFor\n} from '../viewer/index.js';\nimport { PresignedR2UrlBuilder } from '../viewer/presigned-r2-url-builder.js';\nimport { NodeWorkspaceFS } from '../workspace/node-fs.js';\nimport { S3WorkspaceFS } from '../workspace/s3.js';\nimport { ScopedWorkspaceFS } from '../workspace/scoped.js';\nimport { loadNodeAssets } from '../assets/load-node.js';\nimport type { WorkspaceFS } from '../workspace/types.js';\nimport { mountMetricsEndpoints } from '../metrics/mount.js';\nimport { MetricsRecorder } from '../metrics/recorder.js';\nimport { createMetricsTool } from '../tools/metrics.js';\n\nconst HOST = '0.0.0.0'; // bind all interfaces; TLS/routing is the front's job\n\ninterface S3BackendInfo {\n  /** The real S3Client — used to build per-session presigned download URLs. */\n  client: import('@aws-sdk/client-s3').S3Client;\n  bucket: string;\n}\n\ninterface BackendResult {\n  rawFs: WorkspaceFS;\n  /** Present only when the s3 backend is active. */\n  s3?: S3BackendInfo;\n}\n\nasync function buildBackend(cfg: ServerConfig): Promise<BackendResult> {\n  if (cfg.workspace.backend === 's3') {\n    const { S3Client } = await import('@aws-sdk/client-s3');\n    const s3 = cfg.workspace.s3;\n    if (!s3)\n      throw new Error('config: s3 backend selected but s3 config missing');\n    const client = new S3Client({\n      region: s3.region,\n      ...(s3.endpoint ? { endpoint: s3.endpoint, forcePathStyle: true } : {}),\n      ...(s3.accessKeyId && s3.secretAccessKey\n        ? {\n            credentials: {\n              accessKeyId: s3.accessKeyId,\n              secretAccessKey: s3.secretAccessKey\n            }\n          }\n        : {})\n    });\n    return {\n      rawFs: new S3WorkspaceFS({ client, bucket: s3.bucket }),\n      s3: { client, bucket: s3.bucket }\n    };\n  }\n  return { rawFs: new NodeWorkspaceFS(cfg.workspace.dir ?? '/data') };\n}\n\nexport async function runHttp(_argv: string[]): Promise<void> {\n  let cfg: ServerConfig;\n  try {\n    cfg = loadConfig();\n  } catch (err) {\n    process.stderr.write(\n      `codesign-mcp http: ${err instanceof Error ? err.message : String(err)}\\n`\n    );\n    process.exit(1);\n  }\n\n  const license = cfg.cesdkLicense;\n  const { rawFs, s3: s3Backend } = await buildBackend(cfg);\n  const broadcaster = new SseBroadcaster();\n  const gateway = new LocalGatewayClient({\n    apiKey: cfg.gateway.apiKey,\n    ...(cfg.gateway.baseUrl ? { endpoint: cfg.gateway.baseUrl } : {})\n  });\n  // ensureHeadlessEngine is a process singleton, so EVERY session's tools\n  // operate on the same CE.SDK engine. This one lock — created once here, NOT\n  // per session — serializes all engine access across sessions so two clients\n  // editing concurrently can't corrupt each other's scene. When the engine\n  // becomes a per-session/per-workspace pool, this moves to be one lock per\n  // engine (per pool slot) so distinct engines run in parallel.\n  const engineLock = new Mutex();\n  const resolveWorkspaceId = makeWorkspaceResolver(cfg);\n  // Process-global perf recorder — constructed once, owns its own memory\n  // timer, DI'd into every session's MCP server. Undefined (and thus a no-op\n  // everywhere) unless IMGLY_METRICS_ENABLED is on.\n  const recorder = cfg.metricsEnabled ? new MetricsRecorder() : undefined;\n  recorder?.start();\n\n  const app = await createCodesignHttpServer({\n    assets: loadNodeAssets(),\n    buildId: cfg.buildId,\n    maxSessions: cfg.maxEngines,\n    idleTimeoutMs: cfg.idleTimeoutMs,\n    resolveWorkspaceId,\n    trustedSessionIdHeader: 'x-mcp-session-id',\n    ...(recorder ? { metrics: recorder } : {}),\n    ...(cfg.viewerCorsOrigins\n      ? { cors: { origin: cfg.viewerCorsOrigins } }\n      : {}),\n    createSession: async ({ sessionId, workspaceId }) => {\n      const scopedFs = new ScopedWorkspaceFS(rawFs, workspaceId);\n      const store = new RevisionStore(scopedFs);\n      const engine = await ensureHeadlessEngine(license);\n      // Idempotent (engine is a process singleton) — only the first successful registration pays the CDN fetch.\n      await ensureEngineAssetSources(engine);\n      // Demo `unsplash` custom source (synchronous, idempotent) so asset_search\n      // has a real remote source alongside the CDN ones. Public IMG.LY proxy.\n      registerUnsplashSource(engine);\n      // Per-session viewer base: session mode lives under /v/<sid> (reachable\n      // through the CF Worker when IMGLY_PUBLIC_BASE_URL is set); single mode\n      // keeps the fixed /viewer mount.\n      const viewerBase = viewerBaseFor({\n        publicBaseUrl: cfg.publicBaseUrl,\n        port: cfg.port,\n        mode: cfg.auth.mode,\n        sessionId\n      });\n      // Build a per-session URL builder. On the S3/R2 backend we use the\n      // PresignedR2UrlBuilder so forDownload returns a presigned GET URL\n      // directly from R2 — the /r/ Express route is not mounted on the hosted\n      // Cloudflare deployment. On the local backend we fall back to\n      // LocalViewerUrlBuilder (forDownload == forResource == /r/ URL).\n      const urlBuilder = s3Backend\n        ? new PresignedR2UrlBuilder({\n            base: viewerBase,\n            client: s3Backend.client,\n            bucket: s3Backend.bucket,\n            workspaceId\n          })\n        : new LocalViewerUrlBuilder({ base: viewerBase });\n      // The engine and its URI resolver are process-global (ensureHeadlessEngine\n      // is a cached singleton). Re-registering here is redundant after the first\n      // session but harmless — the resolver is always the same function.\n      // PresignedR2UrlBuilder inherits forResource (sync) from\n      // LocalViewerUrlBuilder, so the sync URI-resolver callback stays valid.\n      registerWorkspaceUriResolver(engine, urlBuilder);\n      const session = new EngineSession({\n        size: 1,\n        adapter: cesdkAdapter(engine)\n      });\n      const renderThumbnail = async ({\n        engine: eng\n      }: {\n        revision: string;\n        engine: import('@cesdk/engine').default;\n      }) => {\n        const pages = eng.scene.getPages?.() ?? [];\n        if (pages.length === 0) throw new Error('no pages');\n        const blob = await eng.block.export(pages[0], 'image/webp', {\n          targetWidth: 256\n        });\n        return new Uint8Array(await blob.arrayBuffer());\n      };\n      const tools = buildDesignToolRegistrations({\n        fs: scopedFs,\n        store,\n        session,\n        engineLock,\n        gateway,\n        urlBuilder,\n        allowOutPath: false,\n        onLeafWritten: (e) => broadcaster.broadcast(e),\n        // `as never`: buildDesignToolRegistrations is generic over the engine type\n        // (unknown at this composition root); the concrete @cesdk/engine type isn't\n        // threaded up here, so this is the sanctioned boundary cast (see no-as-any).\n        renderThumbnail: renderThumbnail as never\n      });\n      if (recorder) {\n        // Same merged shape as GET /metrics; `app` is assigned by the time any\n        // session is created (first initialize), so the closure is safe.\n        tools.push(\n          createMetricsTool({\n            recorder,\n            activeSessions: () => app.sessions.size,\n            maxSessions: cfg.maxEngines\n          })\n        );\n      }\n      return { engine, tools };\n    },\n    mountExtras: (expressApp) => {\n      if (recorder) {\n        // Metrics work in every workspace mode; the viewer (below) is single-only.\n        mountMetricsEndpoints(expressApp, {\n          recorder,\n          maxSessions: cfg.maxEngines,\n          activeSessions: () => app.sessions.size\n        });\n      }\n      if (cfg.auth.mode === 'session') {\n        // Multi-tenant viewer: /v/<sid> scopes reads to s/<sid> per request.\n        mountSessionViewer(expressApp, {\n          rawFs,\n          broadcaster,\n          cesdkLicense: license\n        });\n        return;\n      }\n      if (cfg.auth.mode !== 'single') {\n        process.stderr.write(\n          `codesign-mcp http: viewer disabled in \"${cfg.auth.mode}\" mode (multi-tenant viewer is a follow-up).\\n`\n        );\n        return;\n      }\n      const viewerScopedFs = new ScopedWorkspaceFS(\n        rawFs,\n        cfg.auth.fixedWorkspaceId ?? 'default'\n      );\n      const viewerStore = new RevisionStore(viewerScopedFs);\n      expressApp.use(\n        '/viewer',\n        createViewerRouter({\n          store: viewerStore,\n          fs: viewerScopedFs,\n          broadcaster,\n          cesdkLicense: license\n        })\n      );\n    }\n  });\n\n  const evictTimer = setInterval(\n    () =>\n      void app.sessions.evictIdle().then((evicted) => {\n        if (evicted.length > 0)\n          process.stderr.write(\n            `codesign-mcp http: evicted ${evicted.length} idle session(s)\\n`\n          );\n      }),\n    Math.max(10_000, cfg.idleTimeoutMs / 2)\n  );\n\n  const server = app.listen(cfg.port, HOST, () => {\n    process.stderr.write(\n      `codesign-mcp http: listening on http://${HOST}:${cfg.port}/mcp` +\n        ` (mode=${cfg.auth.mode} backend=${cfg.workspace.backend})\\n`\n    );\n  });\n\n  let shuttingDown = false;\n  const shutdown = async (signal: string) => {\n    if (shuttingDown) {\n      process.stderr.write(\n        `codesign-mcp http: ${signal} again — forcing exit.\\n`\n      );\n      process.exit(1);\n    }\n    shuttingDown = true;\n    process.stderr.write(`codesign-mcp http: ${signal} — shutting down.\\n`);\n    const hardExit = setTimeout(() => {\n      process.stderr.write(\n        'codesign-mcp http: shutdown timed out — forcing exit.\\n'\n      );\n      process.exit(1);\n    }, 5000);\n    hardExit.unref();\n    clearInterval(evictTimer);\n    recorder?.stop();\n    server.close();\n    server.closeAllConnections();\n    broadcaster.closeAll();\n    await app.shutdown();\n    process.exit(0);\n  };\n  process.on('SIGINT', () => void shutdown('SIGINT'));\n  process.on('SIGTERM', () => void shutdown('SIGTERM'));\n}\n"]}
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/cli/http.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,EAAE;AACF,yEAAyE;AACzE,mEAAmE;AACnE,+EAA+E;AAC/E,wEAAwE;AACxE,wEAAwE;AACxE,OAAO,EAAE,UAAU,EAAqB,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,EACd,aAAa,EACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAGxD,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,sDAAsD;AAc9E,KAAK,UAAU,YAAY,CAAC,GAAiB;IAC3C,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC,EAAE;YACL,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC;YAC1B,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC,eAAe;gBACtC,CAAC,CAAC;oBACE,WAAW,EAAE;wBACX,WAAW,EAAE,EAAE,CAAC,WAAW;wBAC3B,eAAe,EAAE,EAAE,CAAC,eAAe;qBACpC;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,OAAO;YACL,KAAK,EAAE,IAAI,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC;YACvD,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE;SAClC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,IAAI,OAAO,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,KAAe;IAC3C,IAAI,GAAiB,CAAC;IACtB,IAAI,CAAC;QACH,GAAG,GAAG,UAAU,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC3E,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,EAAE,SAAS,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAEzC,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC;IACjC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,IAAI,cAAc,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC;QACrC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;QAC1B,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC,CAAC;IACH,wEAAwE;IACxE,4EAA4E;IAC5E,4EAA4E;IAC5E,yEAAyE;IACzE,0EAA0E;IAC1E,8DAA8D;IAC9D,MAAM,UAAU,GAAG,IAAI,KAAK,EAAE,CAAC;IAC/B,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAEtD,MAAM,GAAG,GAAG,MAAM,wBAAwB,CAAC;QACzC,MAAM,EAAE,cAAc,EAAE;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,WAAW,EAAE,GAAG,CAAC,UAAU;QAC3B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,kBAAkB;QAClB,sBAAsB,EAAE,kBAAkB;QAC1C,GAAG,CAAC,GAAG,CAAC,iBAAiB;YACvB,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,iBAAiB,EAAE,EAAE;YAC7C,CAAC,CAAC,EAAE,CAAC;QACP,aAAa,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE;YAClD,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;YACnD,0GAA0G;YAC1G,MAAM,wBAAwB,CAAC,MAAM,CAAC,CAAC;YACvC,0EAA0E;YAC1E,wEAAwE;YACxE,sBAAsB,CAAC,MAAM,CAAC,CAAC;YAC/B,wEAAwE;YACxE,wEAAwE;YACxE,iCAAiC;YACjC,MAAM,UAAU,GAAG,aAAa,CAAC;gBAC/B,aAAa,EAAE,GAAG,CAAC,aAAa;gBAChC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACnB,SAAS;aACV,CAAC,CAAC;YACH,mEAAmE;YACnE,mEAAmE;YACnE,wEAAwE;YACxE,8DAA8D;YAC9D,iEAAiE;YACjE,MAAM,UAAU,GAAG,SAAS;gBAC1B,CAAC,CAAC,IAAI,qBAAqB,CAAC;oBACxB,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,WAAW;iBACZ,CAAC;gBACJ,CAAC,CAAC,IAAI,qBAAqB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YACpD,2EAA2E;YAC3E,2EAA2E;YAC3E,mEAAmE;YACnE,yDAAyD;YACzD,wEAAwE;YACxE,4BAA4B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;gBAChC,IAAI,EAAE,CAAC;gBACP,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;aAC9B,CAAC,CAAC;YACH,MAAM,eAAe,GAAG,KAAK,EAAE,EAC7B,MAAM,EAAE,GAAG,EAIZ,EAAE,EAAE;gBACH,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;gBAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;gBACpD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE;oBAC1D,WAAW,EAAE,GAAG;iBACjB,CAAC,CAAC;gBACH,OAAO,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YAClD,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,4BAA4B,CAAC;gBACzC,EAAE,EAAE,QAAQ;gBACZ,KAAK;gBACL,OAAO;gBACP,UAAU;gBACV,OAAO;gBACP,UAAU;gBACV,YAAY,EAAE,KAAK;gBACnB,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC9C,2EAA2E;gBAC3E,4EAA4E;gBAC5E,6EAA6E;gBAC7E,eAAe,EAAE,eAAwB;gBACzC,SAAS;aACV,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC3B,CAAC;QACD,WAAW,EAAE,CAAC,UAAU,EAAE,EAAE;YAC1B,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAChC,qEAAqE;gBACrE,kBAAkB,CAAC,UAAU,EAAE;oBAC7B,KAAK;oBACL,WAAW;oBACX,YAAY,EAAE,OAAO;iBACtB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0CAA0C,GAAG,CAAC,IAAI,CAAC,IAAI,gDAAgD,CACxG,CAAC;gBACF,OAAO;YACT,CAAC;YACD,MAAM,cAAc,GAAG,IAAI,iBAAiB,CAC1C,KAAK,EACL,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,SAAS,CACvC,CAAC;YACF,MAAM,WAAW,GAAG,IAAI,aAAa,CAAC,cAAc,CAAC,CAAC;YACtD,UAAU,CAAC,GAAG,CACZ,SAAS,EACT,kBAAkB,CAAC;gBACjB,KAAK,EAAE,WAAW;gBAClB,EAAE,EAAE,cAAc;gBAClB,WAAW;gBACX,YAAY,EAAE,OAAO;aACtB,CAAC,CACH,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,WAAW,CAC5B,GAAG,EAAE,CACH,KAAK,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8BAA8B,OAAO,CAAC,MAAM,oBAAoB,CACjE,CAAC;IACN,CAAC,CAAC,EACJ,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,CACxC,CAAC;IAEF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;QAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0CAA0C,IAAI,IAAI,GAAG,CAAC,IAAI,MAAM;YAC9D,UAAU,GAAG,CAAC,IAAI,CAAC,IAAI,YAAY,GAAG,CAAC,SAAS,CAAC,OAAO,KAAK,CAChE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sBAAsB,MAAM,0BAA0B,CACvD,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,YAAY,GAAG,IAAI,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,MAAM,qBAAqB,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yDAAyD,CAC1D,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,EAAE,IAAI,CAAC,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,aAAa,CAAC,UAAU,CAAC,CAAC;QAC1B,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC7B,WAAW,CAAC,QAAQ,EAAE,CAAC;QACvB,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AACxD,CAAC","sourcesContent":["// packages/codesign-mcp/src/cli/http.ts\n//\n// codesign-mcp http — Streamable HTTP transport. Composition root: loads\n// IMGLY_* config, selects the storage backend (local|s3), builds a\n// PER-SESSION ScopedWorkspaceFS + RevisionStore, wires the workspace resolver,\n// and mounts the viewer: fixed `/viewer` in `single` mode, multi-tenant\n// `/v/<sid>` in `session` mode (disabled in `header` mode — follow-up).\nimport { loadConfig, type ServerConfig } from '../config.js';\nimport { ensureEngineAssetSources } from '../engine/asset-sources.js';\nimport { cesdkAdapter } from '../engine/cesdk-adapter.js';\nimport { Mutex } from '../engine/mutex.js';\nimport { EngineSession } from '../engine/session.js';\nimport { registerUnsplashSource } from '../engine/unsplash-source.js';\nimport { registerWorkspaceUriResolver } from '../engine/uri-resolver.js';\nimport { LocalGatewayClient } from '../gateway/local.js';\nimport { createCodesignHttpServer } from '../http/server.js';\nimport { makeWorkspaceResolver } from '../http/workspace-auth.js';\nimport { RevisionStore } from '../revisions/store.js';\nimport { ensureHeadlessEngine } from '../tools/engine.js';\nimport { buildDesignToolRegistrations } from '../tools/index.js';\nimport {\n  createViewerRouter,\n  LocalViewerUrlBuilder,\n  mountSessionViewer,\n  SseBroadcaster,\n  viewerBaseFor\n} from '../viewer/index.js';\nimport { PresignedR2UrlBuilder } from '../viewer/presigned-r2-url-builder.js';\nimport { NodeWorkspaceFS } from '../workspace/node-fs.js';\nimport { S3WorkspaceFS } from '../workspace/s3.js';\nimport { ScopedWorkspaceFS } from '../workspace/scoped.js';\nimport { loadNodeAssets } from '../assets/load-node.js';\nimport type { WorkspaceFS } from '../workspace/types.js';\n\nconst HOST = '0.0.0.0'; // bind all interfaces; TLS/routing is the front's job\n\ninterface S3BackendInfo {\n  /** The real S3Client — used to build per-session presigned download URLs. */\n  client: import('@aws-sdk/client-s3').S3Client;\n  bucket: string;\n}\n\ninterface BackendResult {\n  rawFs: WorkspaceFS;\n  /** Present only when the s3 backend is active. */\n  s3?: S3BackendInfo;\n}\n\nasync function buildBackend(cfg: ServerConfig): Promise<BackendResult> {\n  if (cfg.workspace.backend === 's3') {\n    const { S3Client } = await import('@aws-sdk/client-s3');\n    const s3 = cfg.workspace.s3;\n    if (!s3)\n      throw new Error('config: s3 backend selected but s3 config missing');\n    const client = new S3Client({\n      region: s3.region,\n      ...(s3.endpoint ? { endpoint: s3.endpoint, forcePathStyle: true } : {}),\n      ...(s3.accessKeyId && s3.secretAccessKey\n        ? {\n            credentials: {\n              accessKeyId: s3.accessKeyId,\n              secretAccessKey: s3.secretAccessKey\n            }\n          }\n        : {})\n    });\n    return {\n      rawFs: new S3WorkspaceFS({ client, bucket: s3.bucket }),\n      s3: { client, bucket: s3.bucket }\n    };\n  }\n  return { rawFs: new NodeWorkspaceFS(cfg.workspace.dir ?? '/data') };\n}\n\nexport async function runHttp(_argv: string[]): Promise<void> {\n  let cfg: ServerConfig;\n  try {\n    cfg = loadConfig();\n  } catch (err) {\n    process.stderr.write(\n      `codesign-mcp http: ${err instanceof Error ? err.message : String(err)}\\n`\n    );\n    process.exit(1);\n  }\n\n  const { buildDiagnostics } = await import('./stdio.js');\n  const { telemetry } = buildDiagnostics();\n\n  const license = cfg.cesdkLicense;\n  const { rawFs, s3: s3Backend } = await buildBackend(cfg);\n  const broadcaster = new SseBroadcaster();\n  const gateway = new LocalGatewayClient({\n    apiKey: cfg.gateway.apiKey,\n    ...(cfg.gateway.baseUrl ? { endpoint: cfg.gateway.baseUrl } : {})\n  });\n  // ensureHeadlessEngine is a process singleton, so EVERY session's tools\n  // operate on the same CE.SDK engine. This one lock — created once here, NOT\n  // per session — serializes all engine access across sessions so two clients\n  // editing concurrently can't corrupt each other's scene. When the engine\n  // becomes a per-session/per-workspace pool, this moves to be one lock per\n  // engine (per pool slot) so distinct engines run in parallel.\n  const engineLock = new Mutex();\n  const resolveWorkspaceId = makeWorkspaceResolver(cfg);\n\n  const app = await createCodesignHttpServer({\n    assets: loadNodeAssets(),\n    buildId: cfg.buildId,\n    maxSessions: cfg.maxEngines,\n    idleTimeoutMs: cfg.idleTimeoutMs,\n    resolveWorkspaceId,\n    trustedSessionIdHeader: 'x-mcp-session-id',\n    ...(cfg.viewerCorsOrigins\n      ? { cors: { origin: cfg.viewerCorsOrigins } }\n      : {}),\n    createSession: async ({ sessionId, workspaceId }) => {\n      const scopedFs = new ScopedWorkspaceFS(rawFs, workspaceId);\n      const store = new RevisionStore(scopedFs);\n      const engine = await ensureHeadlessEngine(license);\n      // Idempotent (engine is a process singleton) — only the first successful registration pays the CDN fetch.\n      await ensureEngineAssetSources(engine);\n      // Demo `unsplash` custom source (synchronous, idempotent) so asset_search\n      // has a real remote source alongside the CDN ones. Public IMG.LY proxy.\n      registerUnsplashSource(engine);\n      // Per-session viewer base: session mode lives under /v/<sid> (reachable\n      // through the CF Worker when IMGLY_PUBLIC_BASE_URL is set); single mode\n      // keeps the fixed /viewer mount.\n      const viewerBase = viewerBaseFor({\n        publicBaseUrl: cfg.publicBaseUrl,\n        port: cfg.port,\n        mode: cfg.auth.mode,\n        sessionId\n      });\n      // Build a per-session URL builder. On the S3/R2 backend we use the\n      // PresignedR2UrlBuilder so forDownload returns a presigned GET URL\n      // directly from R2 — the /r/ Express route is not mounted on the hosted\n      // Cloudflare deployment. On the local backend we fall back to\n      // LocalViewerUrlBuilder (forDownload == forResource == /r/ URL).\n      const urlBuilder = s3Backend\n        ? new PresignedR2UrlBuilder({\n            base: viewerBase,\n            client: s3Backend.client,\n            bucket: s3Backend.bucket,\n            workspaceId\n          })\n        : new LocalViewerUrlBuilder({ base: viewerBase });\n      // The engine and its URI resolver are process-global (ensureHeadlessEngine\n      // is a cached singleton). Re-registering here is redundant after the first\n      // session but harmless — the resolver is always the same function.\n      // PresignedR2UrlBuilder inherits forResource (sync) from\n      // LocalViewerUrlBuilder, so the sync URI-resolver callback stays valid.\n      registerWorkspaceUriResolver(engine, urlBuilder);\n      const session = new EngineSession({\n        size: 1,\n        adapter: cesdkAdapter(engine)\n      });\n      const renderThumbnail = async ({\n        engine: eng\n      }: {\n        revision: string;\n        engine: import('@cesdk/engine').default;\n      }) => {\n        const pages = eng.scene.getPages?.() ?? [];\n        if (pages.length === 0) throw new Error('no pages');\n        const blob = await eng.block.export(pages[0], 'image/webp', {\n          targetWidth: 256\n        });\n        return new Uint8Array(await blob.arrayBuffer());\n      };\n      const tools = buildDesignToolRegistrations({\n        fs: scopedFs,\n        store,\n        session,\n        engineLock,\n        gateway,\n        urlBuilder,\n        allowOutPath: false,\n        onLeafWritten: (e) => broadcaster.broadcast(e),\n        // `as never`: buildDesignToolRegistrations is generic over the engine type\n        // (unknown at this composition root); the concrete @cesdk/engine type isn't\n        // threaded up here, so this is the sanctioned boundary cast (see no-as-any).\n        renderThumbnail: renderThumbnail as never,\n        telemetry\n      });\n      return { engine, tools };\n    },\n    mountExtras: (expressApp) => {\n      if (cfg.auth.mode === 'session') {\n        // Multi-tenant viewer: /v/<sid> scopes reads to s/<sid> per request.\n        mountSessionViewer(expressApp, {\n          rawFs,\n          broadcaster,\n          cesdkLicense: license\n        });\n        return;\n      }\n      if (cfg.auth.mode !== 'single') {\n        process.stderr.write(\n          `codesign-mcp http: viewer disabled in \"${cfg.auth.mode}\" mode (multi-tenant viewer is a follow-up).\\n`\n        );\n        return;\n      }\n      const viewerScopedFs = new ScopedWorkspaceFS(\n        rawFs,\n        cfg.auth.fixedWorkspaceId ?? 'default'\n      );\n      const viewerStore = new RevisionStore(viewerScopedFs);\n      expressApp.use(\n        '/viewer',\n        createViewerRouter({\n          store: viewerStore,\n          fs: viewerScopedFs,\n          broadcaster,\n          cesdkLicense: license\n        })\n      );\n    }\n  });\n\n  const evictTimer = setInterval(\n    () =>\n      void app.sessions.evictIdle().then((evicted) => {\n        if (evicted.length > 0)\n          process.stderr.write(\n            `codesign-mcp http: evicted ${evicted.length} idle session(s)\\n`\n          );\n      }),\n    Math.max(10_000, cfg.idleTimeoutMs / 2)\n  );\n\n  const server = app.listen(cfg.port, HOST, () => {\n    process.stderr.write(\n      `codesign-mcp http: listening on http://${HOST}:${cfg.port}/mcp` +\n        ` (mode=${cfg.auth.mode} backend=${cfg.workspace.backend})\\n`\n    );\n  });\n\n  let shuttingDown = false;\n  const shutdown = async (signal: string) => {\n    if (shuttingDown) {\n      process.stderr.write(\n        `codesign-mcp http: ${signal} again — forcing exit.\\n`\n      );\n      process.exit(1);\n    }\n    shuttingDown = true;\n    process.stderr.write(`codesign-mcp http: ${signal} — shutting down.\\n`);\n    const hardExit = setTimeout(() => {\n      process.stderr.write(\n        'codesign-mcp http: shutdown timed out — forcing exit.\\n'\n      );\n      process.exit(1);\n    }, 5000);\n    hardExit.unref();\n    clearInterval(evictTimer);\n    server.close();\n    server.closeAllConnections();\n    broadcaster.closeAll();\n    await app.shutdown();\n    process.exit(0);\n  };\n  process.on('SIGINT', () => void shutdown('SIGINT'));\n  process.on('SIGTERM', () => void shutdown('SIGTERM'));\n}\n"]}

package/dist/cli/redirect-console.d.ts

@@ -6,5 +6,5 @@
  * (e.g. Claude Desktop) fail to parse the next message. console.error already
  * writes to stderr and is intentionally left untouched.
  */
-export declare function redirectConsoleToStderr(): void;
+export declare function redirectConsoleToStderr(onLine?: (level: 'log' | 'info' | 'warn' | 'debug' | 'trace', text: string) => void): void;
 //# sourceMappingURL=redirect-console.d.ts.map

package/dist/cli/redirect-console.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redirect-console.d.ts","sourceRoot":"","sources":["../../src/cli/redirect-console.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAU9C"}
+{"version":3,"file":"redirect-console.d.ts","sourceRoot":"","sources":["../../src/cli/redirect-console.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,CAAC,EAAE,CACP,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,EAClD,IAAI,EAAE,MAAM,KACT,IAAI,GACR,IAAI,CAgBN"}

package/dist/cli/redirect-console.js

@@ -6,12 +6,21 @@
  * (e.g. Claude Desktop) fail to parse the next message. console.error already
  * writes to stderr and is intentionally left untouched.
  */
-export function redirectConsoleToStderr() {
+export function redirectConsoleToStderr(onLine) {
     for (const m of ['log', 'info', 'warn', 'debug', 'trace']) {
         console[m] = (...args) => {
-            process.stderr.write(args
+            const text = args
                 .map((a) => (typeof a === 'string' ? a : JSON.stringify(a)))
-                .join(' ') + '\n');
+                .join(' ');
+            process.stderr.write(text + '\n');
+            if (onLine) {
+                try {
+                    onLine(m, text);
+                }
+                catch {
+                    // A diagnostics emit must never break console output.
+                }
+            }
         };
     }
 }

package/dist/cli/redirect-console.js.map

@@ -1 +1 @@
-{"version":3,"file":"redirect-console.js","sourceRoot":"","sources":["../../src/cli/redirect-console.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB;IACrC,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAU,EAAE,CAAC;QACnE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,IAAe,EAAQ,EAAE;YACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI;iBACD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;iBAC3D,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CACpB,CAAC;QACJ,CAAC,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["/**\n * Redirect the console.* methods that default to stdout (log/info/warn/debug/\n * trace) to stderr. In stdio mode stdout is the JSON-RPC channel and must carry\n * ONLY protocol traffic; the CE.SDK engine logs `[CreativeEngine]`/`[UBQ]` lines\n * via console.log at init, which would corrupt the stream and make strict hosts\n * (e.g. Claude Desktop) fail to parse the next message. console.error already\n * writes to stderr and is intentionally left untouched.\n */\nexport function redirectConsoleToStderr(): void {\n  for (const m of ['log', 'info', 'warn', 'debug', 'trace'] as const) {\n    console[m] = (...args: unknown[]): void => {\n      process.stderr.write(\n        args\n          .map((a) => (typeof a === 'string' ? a : JSON.stringify(a)))\n          .join(' ') + '\\n'\n      );\n    };\n  }\n}\n"]}
+{"version":3,"file":"redirect-console.js","sourceRoot":"","sources":["../../src/cli/redirect-console.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAGS;IAET,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAU,EAAE,CAAC;QACnE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,IAAe,EAAQ,EAAE;YACxC,MAAM,IAAI,GAAG,IAAI;iBACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;iBAC3D,IAAI,CAAC,GAAG,CAAC,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;YAClC,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC;oBACH,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;gBAClB,CAAC;gBAAC,MAAM,CAAC;oBACP,sDAAsD;gBACxD,CAAC;YACH,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["/**\n * Redirect the console.* methods that default to stdout (log/info/warn/debug/\n * trace) to stderr. In stdio mode stdout is the JSON-RPC channel and must carry\n * ONLY protocol traffic; the CE.SDK engine logs `[CreativeEngine]`/`[UBQ]` lines\n * via console.log at init, which would corrupt the stream and make strict hosts\n * (e.g. Claude Desktop) fail to parse the next message. console.error already\n * writes to stderr and is intentionally left untouched.\n */\nexport function redirectConsoleToStderr(\n  onLine?: (\n    level: 'log' | 'info' | 'warn' | 'debug' | 'trace',\n    text: string\n  ) => void\n): void {\n  for (const m of ['log', 'info', 'warn', 'debug', 'trace'] as const) {\n    console[m] = (...args: unknown[]): void => {\n      const text = args\n        .map((a) => (typeof a === 'string' ? a : JSON.stringify(a)))\n        .join(' ');\n      process.stderr.write(text + '\\n');\n      if (onLine) {\n        try {\n          onLine(m, text);\n        } catch {\n          // A diagnostics emit must never break console output.\n        }\n      }\n    };\n  }\n}\n"]}

package/dist/cli/resolve-license.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-license.d.ts","sourceRoot":"","sources":["../../src/cli/resolve-license.ts"],"names":[],"mappings":"AAKA,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,YAAY,EAAE,MAAM,GACnB,MAAM,GAAG,SAAS,CAKpB"}
+{"version":3,"file":"resolve-license.d.ts","sourceRoot":"","sources":["../../src/cli/resolve-license.ts"],"names":[],"mappings":"AAOA,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,YAAY,EAAE,MAAM,GACnB,MAAM,GAAG,SAAS,CAKpB"}

package/dist/cli/resolve-license.js

@@ -1,10 +1,12 @@
-// Resolve the CE.SDK license for stdio mode. An explicit CESDK_LICENSE always
-// wins; otherwise fall back to the build-time-bundled trial (empty in dev and at
-// GA). Blank/whitespace is treated as absent so an empty env var can't shadow the
-// trial. The env-first order is what makes the bundled trial a beta-only, no-op
-// addition: at GA we stop injecting it and CESDK_LICENSE is the only source.
+// Resolve the CE.SDK license for stdio mode. Precedence: an explicit
+// CESDK_LICENSE wins, then IMGLY_CESDK_LICENSE (the repo's .env convention, so a
+// local `--env-file=.env` run works without remapping), then the
+// build-time-bundled trial (empty in dev and at GA). Blank/whitespace is treated
+// as absent so an empty env var can't shadow the next source. The env-first
+// order is what makes the bundled trial a beta-only, no-op addition: at GA we
+// stop injecting it and the env license is the only source.
 export function resolveLicense(env, trialLicense) {
-    const fromEnv = env.CESDK_LICENSE?.trim();
+    const fromEnv = env.CESDK_LICENSE?.trim() || env.IMGLY_CESDK_LICENSE?.trim();
     if (fromEnv)
         return fromEnv;
     const trial = trialLicense.trim();

package/dist/cli/resolve-license.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-license.js","sourceRoot":"","sources":["../../src/cli/resolve-license.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,iFAAiF;AACjF,kFAAkF;AAClF,gFAAgF;AAChF,6EAA6E;AAC7E,MAAM,UAAU,cAAc,CAC5B,GAAsB,EACtB,YAAoB;IAEpB,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;IAC1C,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;IAClC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC","sourcesContent":["// Resolve the CE.SDK license for stdio mode. An explicit CESDK_LICENSE always\n// wins; otherwise fall back to the build-time-bundled trial (empty in dev and at\n// GA). Blank/whitespace is treated as absent so an empty env var can't shadow the\n// trial. The env-first order is what makes the bundled trial a beta-only, no-op\n// addition: at GA we stop injecting it and CESDK_LICENSE is the only source.\nexport function resolveLicense(\n  env: NodeJS.ProcessEnv,\n  trialLicense: string\n): string | undefined {\n  const fromEnv = env.CESDK_LICENSE?.trim();\n  if (fromEnv) return fromEnv;\n  const trial = trialLicense.trim();\n  return trial.length > 0 ? trial : undefined;\n}\n"]}
+{"version":3,"file":"resolve-license.js","sourceRoot":"","sources":["../../src/cli/resolve-license.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,iFAAiF;AACjF,iEAAiE;AACjE,iFAAiF;AACjF,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAC5D,MAAM,UAAU,cAAc,CAC5B,GAAsB,EACtB,YAAoB;IAEpB,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC;IAC7E,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;IAClC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC","sourcesContent":["// Resolve the CE.SDK license for stdio mode. Precedence: an explicit\n// CESDK_LICENSE wins, then IMGLY_CESDK_LICENSE (the repo's .env convention, so a\n// local `--env-file=.env` run works without remapping), then the\n// build-time-bundled trial (empty in dev and at GA). Blank/whitespace is treated\n// as absent so an empty env var can't shadow the next source. The env-first\n// order is what makes the bundled trial a beta-only, no-op addition: at GA we\n// stop injecting it and the env license is the only source.\nexport function resolveLicense(\n  env: NodeJS.ProcessEnv,\n  trialLicense: string\n): string | undefined {\n  const fromEnv = env.CESDK_LICENSE?.trim() || env.IMGLY_CESDK_LICENSE?.trim();\n  if (fromEnv) return fromEnv;\n  const trial = trialLicense.trim();\n  return trial.length > 0 ? trial : undefined;\n}\n"]}

package/dist/cli/stdio.d.ts

@@ -1,2 +1,11 @@
+import type { Env } from '../config.js';
+import { type DiagnosticsSink } from '../diagnostics/events.js';
+import { type TelemetrySink } from '../tools/spans.js';
+export declare function buildDiagnostics(env?: Env): {
+    diag: DiagnosticsSink;
+    telemetry: TelemetrySink;
+    dir: string | undefined;
+    enabled: boolean;
+};
 export declare function runStdio(): Promise<void>;
 //# sourceMappingURL=stdio.d.ts.map

package/dist/cli/stdio.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../../src/cli/stdio.ts"],"names":[],"mappings":"AAqDA,wBAAsB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CA0G9C"}
+{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../../src/cli/stdio.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAExC,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,0BAA0B,CAAC;AAclC,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAc5E,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,GAAiB,GAAG;IACxD,IAAI,EAAE,eAAe,CAAC;IACtB,SAAS,EAAE,aAAa,CAAC;IACzB,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;CAClB,CAYA;AAED,wBAAsB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CA8I9C"}

package/dist/cli/stdio.js

@@ -27,6 +27,10 @@ import { homedir } from 'node:os';
 import { join as joinPath } from 'node:path';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { loadNodeAssets } from '../assets/load-node.js';
+import { diagnosticsFileEnabled, resolveDiagnosticsDir } from '../config.js';
+import { NOOP_DIAGNOSTICS_SINK } from '../diagnostics/events.js';
+import { FileDiagnosticsSink } from '../diagnostics/file-sink.js';
+import { toolCallSink } from '../diagnostics/tool-call-adapter.js';
 import { ensureEngineAssetSources } from '../engine/asset-sources.js';
 import { cesdkAdapter } from '../engine/cesdk-adapter.js';
 import { Mutex } from '../engine/mutex.js';
@@ -38,23 +42,43 @@ import { RevisionStore } from '../revisions/store.js';
 import { createCodesignMcpServer } from '../server.js';
 import { ensureHeadlessEngine } from '../tools/engine.js';
 import { buildDesignToolRegistrations } from '../tools/index.js';
+import { NOOP_TELEMETRY_SINK } from '../tools/spans.js';
 import { createViewerRouter, LocalViewerUrlBuilder, SseBroadcaster, startViewerListener } from '../viewer/index.js';
 import { NodeWorkspaceFS } from '../workspace/node-fs.js';
 import { redirectConsoleToStderr } from './redirect-console.js';
 import { resolveLicense } from './resolve-license.js';
 import { TRIAL_CESDK_LICENSE } from './trial-license.generated.js';
 const DEFAULT_WORKSPACE = joinPath(homedir(), '.codesign', 'workspace');
+export function buildDiagnostics(env = process.env) {
+    if (!diagnosticsFileEnabled(env)) {
+        return {
+            diag: NOOP_DIAGNOSTICS_SINK,
+            telemetry: NOOP_TELEMETRY_SINK,
+            dir: undefined,
+            enabled: false
+        };
+    }
+    const dir = resolveDiagnosticsDir(env);
+    const sink = new FileDiagnosticsSink({ dir });
+    return { diag: sink, telemetry: toolCallSink(sink), dir, enabled: true };
+}
 export async function runStdio() {
+    const { diag, telemetry, dir: diagnosticsDir, enabled: diagnosticsEnabled } = buildDiagnostics();
+    if (diagnosticsEnabled && diagnosticsDir) {
+        await FileDiagnosticsSink.pruneOnStartup({ dir: diagnosticsDir });
+        process.stderr.write(`codesign-mcp stdio: diagnostics logging to ${diagnosticsDir} — redacted, local-only; disable with IMGLY_DIAGNOSTICS_FILE=false\n`);
+    }
     // stdout is the JSON-RPC channel in stdio mode; keep engine console.* noise off it.
-    redirectConsoleToStderr();
+    redirectConsoleToStderr((level, text) => diag.emit({ kind: 'engine_log', timestamp: Date.now(), level, text }));
     const license = resolveLicense(process.env, TRIAL_CESDK_LICENSE);
     if (!license) {
-        process.stderr.write('codesign-mcp stdio: no CESDK_LICENSE set and no bundled trial license — set CESDK_LICENSE to a CE.SDK node license string.\n');
+        process.stderr.write('codesign-mcp stdio: no CESDK_LICENSE set and no bundled trial license — set CESDK_LICENSE (or IMGLY_CESDK_LICENSE) to a CE.SDK node license string.\n');
         process.exit(1);
     }
     // True when the license came from the bundled trial (no explicit env override).
     // Used only to turn an engine-init rejection into a trial-aware hint below.
-    const usedTrial = !process.env.CESDK_LICENSE?.trim();
+    const usedTrial = !process.env.CESDK_LICENSE?.trim() &&
+        !process.env.IMGLY_CESDK_LICENSE?.trim();
     const workspaceRoot = process.env.CODESIGN_WORKSPACE ?? DEFAULT_WORKSPACE;
     const fs = new NodeWorkspaceFS(workspaceRoot);
     const store = new RevisionStore(fs);
@@ -76,15 +100,34 @@ export async function runStdio() {
     });
     const listener = await startViewerListener({ router: viewerRouter });
     process.stderr.write(`codesign-mcp stdio: viewer at ${listener.base}\n`);
+    diag.emit({
+        kind: 'lifecycle',
+        timestamp: Date.now(),
+        text: 'viewer_listening'
+    });
     const urlBuilder = new LocalViewerUrlBuilder({ base: listener.base });
     // Kick off the heavy engine bootstrap WITHOUT awaiting it — see the file
     // header. server.connect() below answers the handshake while this runs.
+    diag.emit({
+        kind: 'lifecycle',
+        timestamp: Date.now(),
+        text: 'engine_init_start'
+    });
     const enginePromise = bootstrapEngine({ license, urlBuilder, usedTrial });
     // Nothing awaits enginePromise until the first tool call. Attach a logger so a
     // background init failure surfaces on stderr instead of crashing the process
     // on an unhandled rejection; the awaiting tool call still sees the real error.
     void enginePromise.catch((err) => {
         process.stderr.write(`codesign-mcp stdio: engine initialization failed — ${err instanceof Error ? (err.stack ?? err.message) : String(err)}\n`);
+        diag.emit({
+            kind: 'lifecycle',
+            timestamp: Date.now(),
+            text: 'engine_init_failed',
+            error: {
+                message: err instanceof Error ? err.message : String(err),
+                ...(err instanceof Error && err.stack ? { stack: err.stack } : {})
+            }
+        });
     });
     // size=1, single shared engine resolved lazily from enginePromise.
     // EngineSession only calls adapter.create() (awaiting the engine) on the first
@@ -113,7 +156,8 @@ export async function runStdio() {
         urlBuilder,
         allowOutPath: true,
         onLeafWritten: (e) => broadcaster.broadcast(e),
-        renderThumbnail: renderThumbnail // adapter's E generic is `unknown`; cesdk engine type fits
+        renderThumbnail: renderThumbnail, // adapter's E generic is `unknown`; cesdk engine type fits
+        telemetry
     });
     const assets = loadNodeAssets();
     const server = createCodesignMcpServer({

package/dist/cli/stdio.js.map

@@ -1 +1 @@
-{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../../src/cli/stdio.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,yFAAyF;AACzF,uCAAuC;AACvC,6DAA6D;AAC7D,oCAAoC;AACpC,mDAAmD;AACnD,4CAA4C;AAC5C,0CAA0C;AAC1C,EAAE;AACF,yEAAyE;AACzE,sEAAsE;AACtE,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,8EAA8E;AAC9E,yEAAyE;AACzE,iFAAiF;AACjF,EAAE;AACF,gBAAgB;AAChB,8EAA8E;AAC9E,gEAAgE;AAChE,EAAE;AACF,wEAAwE;AACxE,kDAAkD;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,IAAI,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,EACd,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAEnE,MAAM,iBAAiB,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;AAExE,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,oFAAoF;IACpF,uBAAuB,EAAE,CAAC;IAE1B,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACjE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8HAA8H,CAC/H,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,gFAAgF;IAChF,4EAA4E;IAC5E,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;IAErD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,iBAAiB,CAAC;IAC1E,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,aAAa,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC;IAEpC,0EAA0E;IAC1E,2EAA2E;IAC3E,2BAA2B;IAC3B,MAAM,UAAU,GAAG,IAAI,KAAK,EAAE,CAAC;IAC/B,MAAM,WAAW,GAAG,IAAI,cAAc,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAExE,8EAA8E;IAC9E,gFAAgF;IAChF,8DAA8D;IAC9D,MAAM,YAAY,GAAG,kBAAkB,CAAC;QACtC,KAAK;QACL,EAAE;QACF,WAAW;QACX,YAAY,EAAE,OAAO;QACrB,aAAa;KACd,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,IAAI,qBAAqB,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAEtE,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,aAAa,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1E,+EAA+E;IAC/E,6EAA6E;IAC7E,+EAA+E;IAC/E,KAAK,aAAa,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sDACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAChE,IAAI,CACL,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,mEAAmE;IACnE,+EAA+E;IAC/E,iEAAiE;IACjE,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;QAChC,IAAI,EAAE,CAAC;QACP,OAAO,EAAE,YAAY,CAAC,aAAa,CAAC;KACrC,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,KAAK,EAAE,EAC7B,MAAM,EAAE,GAAG,EAIZ,EAAuB,EAAE;QACxB,6EAA6E;QAC7E,4EAA4E;QAC5E,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE;YAC1D,WAAW,EAAE,GAAG;SACjB,CAAC,CAAC;QACH,OAAO,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,4BAA4B,CAAC;QACzC,EAAE;QACF,KAAK;QACL,OAAO;QACP,UAAU;QACV,OAAO;QACP,UAAU;QACV,YAAY,EAAE,IAAI;QAClB,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9C,eAAe,EAAE,eAAwB,CAAC,2DAA2D;KACtG,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,uBAAuB,CAAC;QACrC,MAAM;QACN,KAAK;KACN,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QACvB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,yEAAyE;AACzE,6EAA6E;AAC7E,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,4DAA4D;AAC5D,KAAK,UAAU,eAAe,CAAC,EAC7B,OAAO,EACP,UAAU,EACV,SAAS,EAMV;IACC,IAAI,MAAwD,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8IAA8I,CAC/I,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,8EAA8E;IAC9E,wDAAwD;IACxD,4BAA4B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACjD,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACvC,8EAA8E;IAC9E,yEAAyE;IACzE,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["// MCP server over stdin/stdout. Bootstraps:\n//   - Workspace (NodeWorkspaceFS rooted at $CODESIGN_WORKSPACE or ~/.codesign/workspace)\n//   - RevisionStore over the workspace\n//   - EngineSession (size=1) over the headless CE.SDK engine\n//   - SseBroadcaster for the viewer\n//   - Viewer router + ephemeral localhost listener\n//   - design + workspace tool registrations\n//   - LocalGatewayClient (reads $API_KEY)\n//\n// stdio's single-engine, single-workspace model is the simplest possible\n// wiring; HTTP transport (F2) reuses the same primitives per-session.\n//\n// Startup order matters: everything cheap (workspace, store, viewer listener,\n// tool wiring) runs before `server.connect()` so the MCP handshake replies\n// immediately. The expensive CE.SDK engine init + CDN asset-source fetch are\n// deferred to a background promise (bootstrapEngine) that the first tool call\n// awaits. Doing this work before connect can blow the host's MCP startup\n// timeout on a cold boot — seen as \"fails on add/update, works after Reconnect\".\n//\n// Optional env:\n//   CESDK_LICENSE — overrides the build-time-bundled trial license. Mandatory\n//   at GA / when no trial is baked in (see resolve-license.ts).\n//\n// Logging note: stdout is reserved for MCP protocol traffic. Everything\n// human-facing (errors, progress) goes to stderr.\nimport { homedir } from 'node:os';\nimport { join as joinPath } from 'node:path';\nimport { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';\nimport { loadNodeAssets } from '../assets/load-node.js';\nimport { ensureEngineAssetSources } from '../engine/asset-sources.js';\nimport { cesdkAdapter } from '../engine/cesdk-adapter.js';\nimport { Mutex } from '../engine/mutex.js';\nimport { EngineSession } from '../engine/session.js';\nimport { registerUnsplashSource } from '../engine/unsplash-source.js';\nimport { registerWorkspaceUriResolver } from '../engine/uri-resolver.js';\nimport { LocalGatewayClient } from '../gateway/local.js';\nimport { RevisionStore } from '../revisions/store.js';\nimport { createCodesignMcpServer } from '../server.js';\nimport { ensureHeadlessEngine } from '../tools/engine.js';\nimport { buildDesignToolRegistrations } from '../tools/index.js';\nimport {\n  createViewerRouter,\n  LocalViewerUrlBuilder,\n  SseBroadcaster,\n  startViewerListener\n} from '../viewer/index.js';\nimport { NodeWorkspaceFS } from '../workspace/node-fs.js';\nimport { redirectConsoleToStderr } from './redirect-console.js';\nimport { resolveLicense } from './resolve-license.js';\nimport { TRIAL_CESDK_LICENSE } from './trial-license.generated.js';\n\nconst DEFAULT_WORKSPACE = joinPath(homedir(), '.codesign', 'workspace');\n\nexport async function runStdio(): Promise<void> {\n  // stdout is the JSON-RPC channel in stdio mode; keep engine console.* noise off it.\n  redirectConsoleToStderr();\n\n  const license = resolveLicense(process.env, TRIAL_CESDK_LICENSE);\n  if (!license) {\n    process.stderr.write(\n      'codesign-mcp stdio: no CESDK_LICENSE set and no bundled trial license — set CESDK_LICENSE to a CE.SDK node license string.\\n'\n    );\n    process.exit(1);\n  }\n  // True when the license came from the bundled trial (no explicit env override).\n  // Used only to turn an engine-init rejection into a trial-aware hint below.\n  const usedTrial = !process.env.CESDK_LICENSE?.trim();\n\n  const workspaceRoot = process.env.CODESIGN_WORKSPACE ?? DEFAULT_WORKSPACE;\n  const fs = new NodeWorkspaceFS(workspaceRoot);\n  const store = new RevisionStore(fs);\n\n  // One engine, one lock. stdio is single-session so there is no contention\n  // today, but the engine tools require the lock and it keeps wiring uniform\n  // with the HTTP transport.\n  const engineLock = new Mutex();\n  const broadcaster = new SseBroadcaster();\n  const gateway = new LocalGatewayClient({ apiKey: process.env.API_KEY });\n\n  // The viewer listener binds an ephemeral localhost port — cheap and local, so\n  // it stays on the startup path. urlBuilder must exist before we build the tools\n  // and before the engine's workspace:// URI resolver is wired.\n  const viewerRouter = createViewerRouter({\n    store,\n    fs,\n    broadcaster,\n    cesdkLicense: license,\n    workspaceRoot\n  });\n  const listener = await startViewerListener({ router: viewerRouter });\n  process.stderr.write(`codesign-mcp stdio: viewer at ${listener.base}\\n`);\n  const urlBuilder = new LocalViewerUrlBuilder({ base: listener.base });\n\n  // Kick off the heavy engine bootstrap WITHOUT awaiting it — see the file\n  // header. server.connect() below answers the handshake while this runs.\n  const enginePromise = bootstrapEngine({ license, urlBuilder, usedTrial });\n  // Nothing awaits enginePromise until the first tool call. Attach a logger so a\n  // background init failure surfaces on stderr instead of crashing the process\n  // on an unhandled rejection; the awaiting tool call still sees the real error.\n  void enginePromise.catch((err) => {\n    process.stderr.write(\n      `codesign-mcp stdio: engine initialization failed — ${\n        err instanceof Error ? (err.stack ?? err.message) : String(err)\n      }\\n`\n    );\n  });\n\n  // size=1, single shared engine resolved lazily from enginePromise.\n  // EngineSession only calls adapter.create() (awaiting the engine) on the first\n  // edit, by which point the bootstrap is usually already settled.\n  const session = new EngineSession({\n    size: 1,\n    adapter: cesdkAdapter(enginePromise)\n  });\n\n  const renderThumbnail = async ({\n    engine: eng\n  }: {\n    revision: string;\n    engine: import('@cesdk/engine').default;\n  }): Promise<Uint8Array> => {\n    // Thumbnail = the scene's first page rendered to a 256-px webp. Best-effort.\n    // We use page 0 of the scene; if the scene has no pages, throw → swallowed.\n    const pages = eng.scene.getPages();\n    if (!pages || pages.length === 0) throw new Error('no pages');\n    const blob = await eng.block.export(pages[0], 'image/webp', {\n      targetWidth: 256\n    });\n    return new Uint8Array(await blob.arrayBuffer());\n  };\n\n  const tools = buildDesignToolRegistrations({\n    fs,\n    store,\n    session,\n    engineLock,\n    gateway,\n    urlBuilder,\n    allowOutPath: true,\n    onLeafWritten: (e) => broadcaster.broadcast(e),\n    renderThumbnail: renderThumbnail as never // adapter's E generic is `unknown`; cesdk engine type fits\n  });\n\n  const assets = loadNodeAssets();\n  const server = createCodesignMcpServer({\n    assets,\n    tools\n  });\n\n  const transport = new StdioServerTransport();\n  await server.connect(transport);\n\n  const shutdown = async () => {\n    await listener.close();\n    await server.close();\n    process.exit(0);\n  };\n  process.on('SIGINT', () => void shutdown());\n  process.on('SIGTERM', () => void shutdown());\n}\n\n// Heavy engine bootstrap, run in the background by runStdio (off the MCP\n// handshake path). Resolves to a fully-wired engine: design-unit-patched (by\n// ensureHeadlessEngine), workspace:// URI resolver installed, and — best-effort\n// — the default + demo + unsplash asset sources registered so asset_search has\n// content. The asset-source step hits the CDN; failures log to stderr and leave\n// the engine usable (asset_search just sees fewer sources).\nasync function bootstrapEngine({\n  license,\n  urlBuilder,\n  usedTrial\n}: {\n  license: string;\n  urlBuilder: LocalViewerUrlBuilder;\n  /** License came from the bundled trial — turns an init rejection into a hint. */\n  usedTrial: boolean;\n}): Promise<Awaited<ReturnType<typeof ensureHeadlessEngine>>> {\n  let engine: Awaited<ReturnType<typeof ensureHeadlessEngine>>;\n  try {\n    engine = await ensureHeadlessEngine(license);\n  } catch (err) {\n    if (usedTrial) {\n      process.stderr.write(\n        'codesign-mcp stdio: the bundled trial license was rejected (it may have expired). Set CESDK_LICENSE to a valid CE.SDK node license string.\\n'\n      );\n    }\n    throw err;\n  }\n  // Resolve workspace:// asset URIs to the listener's /r/ route so the headless\n  // engine can fetch generated assets embedded in scenes.\n  registerWorkspaceUriResolver(engine, urlBuilder);\n  // Default + demo asset sources so `asset_search` has content (CDN fetch,\n  // best-effort — a failure logs to stderr and the engine stays usable).\n  await ensureEngineAssetSources(engine);\n  // Demo `unsplash` custom source (synchronous, idempotent) so asset_search has\n  // a real remote source alongside the CDN ones. Public IMG.LY demo proxy.\n  registerUnsplashSource(engine);\n  return engine;\n}\n"]}
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../../src/cli/stdio.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,yFAAyF;AACzF,uCAAuC;AACvC,6DAA6D;AAC7D,oCAAoC;AACpC,mDAAmD;AACnD,4CAA4C;AAC5C,0CAA0C;AAC1C,EAAE;AACF,yEAAyE;AACzE,sEAAsE;AACtE,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,8EAA8E;AAC9E,yEAAyE;AACzE,iFAAiF;AACjF,EAAE;AACF,gBAAgB;AAChB,8EAA8E;AAC9E,gEAAgE;AAChE,EAAE;AACF,wEAAwE;AACxE,kDAAkD;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,IAAI,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EACL,qBAAqB,EAEtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAsB,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,EACd,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAEnE,MAAM,iBAAiB,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;AAExE,MAAM,UAAU,gBAAgB,CAAC,MAAW,OAAO,CAAC,GAAG;IAMrD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,SAAS,EAAE,mBAAmB;YAC9B,GAAG,EAAE,SAAS;YACd,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,EACJ,IAAI,EACJ,SAAS,EACT,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,kBAAkB,EAC5B,GAAG,gBAAgB,EAAE,CAAC;IACvB,IAAI,kBAAkB,IAAI,cAAc,EAAE,CAAC;QACzC,MAAM,mBAAmB,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8CAA8C,cAAc,sEAAsE,CACnI,CAAC;IACJ,CAAC;IACD,oFAAoF;IACpF,uBAAuB,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACtC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CACtE,CAAC;IAEF,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACjE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uJAAuJ,CACxJ,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,gFAAgF;IAChF,4EAA4E;IAC5E,MAAM,SAAS,GACb,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE;QAClC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC;IAE3C,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,iBAAiB,CAAC;IAC1E,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,aAAa,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC;IAEpC,0EAA0E;IAC1E,2EAA2E;IAC3E,2BAA2B;IAC3B,MAAM,UAAU,GAAG,IAAI,KAAK,EAAE,CAAC;IAC/B,MAAM,WAAW,GAAG,IAAI,cAAc,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAExE,8EAA8E;IAC9E,gFAAgF;IAChF,8DAA8D;IAC9D,MAAM,YAAY,GAAG,kBAAkB,CAAC;QACtC,KAAK;QACL,EAAE;QACF,WAAW;QACX,YAAY,EAAE,OAAO;QACrB,aAAa;KACd,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC;IACzE,IAAI,CAAC,IAAI,CAAC;QACR,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,IAAI,EAAE,kBAAkB;KACzB,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,qBAAqB,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAEtE,yEAAyE;IACzE,wEAAwE;IACxE,IAAI,CAAC,IAAI,CAAC;QACR,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,IAAI,EAAE,mBAAmB;KAC1B,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1E,+EAA+E;IAC/E,6EAA6E;IAC7E,+EAA+E;IAC/E,KAAK,aAAa,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sDACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAChE,IAAI,CACL,CAAC;QACF,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,IAAI,EAAE,oBAAoB;YAC1B,KAAK,EAAE;gBACL,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBACzD,GAAG,CAAC,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnE;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,mEAAmE;IACnE,+EAA+E;IAC/E,iEAAiE;IACjE,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;QAChC,IAAI,EAAE,CAAC;QACP,OAAO,EAAE,YAAY,CAAC,aAAa,CAAC;KACrC,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,KAAK,EAAE,EAC7B,MAAM,EAAE,GAAG,EAIZ,EAAuB,EAAE;QACxB,6EAA6E;QAC7E,4EAA4E;QAC5E,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE;YAC1D,WAAW,EAAE,GAAG;SACjB,CAAC,CAAC;QACH,OAAO,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,4BAA4B,CAAC;QACzC,EAAE;QACF,KAAK;QACL,OAAO;QACP,UAAU;QACV,OAAO;QACP,UAAU;QACV,YAAY,EAAE,IAAI;QAClB,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9C,eAAe,EAAE,eAAwB,EAAE,2DAA2D;QACtG,SAAS;KACV,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,uBAAuB,CAAC;QACrC,MAAM;QACN,KAAK;KACN,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QACvB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,yEAAyE;AACzE,6EAA6E;AAC7E,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,4DAA4D;AAC5D,KAAK,UAAU,eAAe,CAAC,EAC7B,OAAO,EACP,UAAU,EACV,SAAS,EAMV;IACC,IAAI,MAAwD,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8IAA8I,CAC/I,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,8EAA8E;IAC9E,wDAAwD;IACxD,4BAA4B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACjD,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACvC,8EAA8E;IAC9E,yEAAyE;IACzE,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["// MCP server over stdin/stdout. Bootstraps:\n//   - Workspace (NodeWorkspaceFS rooted at $CODESIGN_WORKSPACE or ~/.codesign/workspace)\n//   - RevisionStore over the workspace\n//   - EngineSession (size=1) over the headless CE.SDK engine\n//   - SseBroadcaster for the viewer\n//   - Viewer router + ephemeral localhost listener\n//   - design + workspace tool registrations\n//   - LocalGatewayClient (reads $API_KEY)\n//\n// stdio's single-engine, single-workspace model is the simplest possible\n// wiring; HTTP transport (F2) reuses the same primitives per-session.\n//\n// Startup order matters: everything cheap (workspace, store, viewer listener,\n// tool wiring) runs before `server.connect()` so the MCP handshake replies\n// immediately. The expensive CE.SDK engine init + CDN asset-source fetch are\n// deferred to a background promise (bootstrapEngine) that the first tool call\n// awaits. Doing this work before connect can blow the host's MCP startup\n// timeout on a cold boot — seen as \"fails on add/update, works after Reconnect\".\n//\n// Optional env:\n//   CESDK_LICENSE — overrides the build-time-bundled trial license. Mandatory\n//   at GA / when no trial is baked in (see resolve-license.ts).\n//\n// Logging note: stdout is reserved for MCP protocol traffic. Everything\n// human-facing (errors, progress) goes to stderr.\nimport { homedir } from 'node:os';\nimport { join as joinPath } from 'node:path';\nimport { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';\nimport { loadNodeAssets } from '../assets/load-node.js';\nimport type { Env } from '../config.js';\nimport { diagnosticsFileEnabled, resolveDiagnosticsDir } from '../config.js';\nimport {\n  NOOP_DIAGNOSTICS_SINK,\n  type DiagnosticsSink\n} from '../diagnostics/events.js';\nimport { FileDiagnosticsSink } from '../diagnostics/file-sink.js';\nimport { toolCallSink } from '../diagnostics/tool-call-adapter.js';\nimport { ensureEngineAssetSources } from '../engine/asset-sources.js';\nimport { cesdkAdapter } from '../engine/cesdk-adapter.js';\nimport { Mutex } from '../engine/mutex.js';\nimport { EngineSession } from '../engine/session.js';\nimport { registerUnsplashSource } from '../engine/unsplash-source.js';\nimport { registerWorkspaceUriResolver } from '../engine/uri-resolver.js';\nimport { LocalGatewayClient } from '../gateway/local.js';\nimport { RevisionStore } from '../revisions/store.js';\nimport { createCodesignMcpServer } from '../server.js';\nimport { ensureHeadlessEngine } from '../tools/engine.js';\nimport { buildDesignToolRegistrations } from '../tools/index.js';\nimport { NOOP_TELEMETRY_SINK, type TelemetrySink } from '../tools/spans.js';\nimport {\n  createViewerRouter,\n  LocalViewerUrlBuilder,\n  SseBroadcaster,\n  startViewerListener\n} from '../viewer/index.js';\nimport { NodeWorkspaceFS } from '../workspace/node-fs.js';\nimport { redirectConsoleToStderr } from './redirect-console.js';\nimport { resolveLicense } from './resolve-license.js';\nimport { TRIAL_CESDK_LICENSE } from './trial-license.generated.js';\n\nconst DEFAULT_WORKSPACE = joinPath(homedir(), '.codesign', 'workspace');\n\nexport function buildDiagnostics(env: Env = process.env): {\n  diag: DiagnosticsSink;\n  telemetry: TelemetrySink;\n  dir: string | undefined;\n  enabled: boolean;\n} {\n  if (!diagnosticsFileEnabled(env)) {\n    return {\n      diag: NOOP_DIAGNOSTICS_SINK,\n      telemetry: NOOP_TELEMETRY_SINK,\n      dir: undefined,\n      enabled: false\n    };\n  }\n  const dir = resolveDiagnosticsDir(env);\n  const sink = new FileDiagnosticsSink({ dir });\n  return { diag: sink, telemetry: toolCallSink(sink), dir, enabled: true };\n}\n\nexport async function runStdio(): Promise<void> {\n  const {\n    diag,\n    telemetry,\n    dir: diagnosticsDir,\n    enabled: diagnosticsEnabled\n  } = buildDiagnostics();\n  if (diagnosticsEnabled && diagnosticsDir) {\n    await FileDiagnosticsSink.pruneOnStartup({ dir: diagnosticsDir });\n    process.stderr.write(\n      `codesign-mcp stdio: diagnostics logging to ${diagnosticsDir} — redacted, local-only; disable with IMGLY_DIAGNOSTICS_FILE=false\\n`\n    );\n  }\n  // stdout is the JSON-RPC channel in stdio mode; keep engine console.* noise off it.\n  redirectConsoleToStderr((level, text) =>\n    diag.emit({ kind: 'engine_log', timestamp: Date.now(), level, text })\n  );\n\n  const license = resolveLicense(process.env, TRIAL_CESDK_LICENSE);\n  if (!license) {\n    process.stderr.write(\n      'codesign-mcp stdio: no CESDK_LICENSE set and no bundled trial license — set CESDK_LICENSE (or IMGLY_CESDK_LICENSE) to a CE.SDK node license string.\\n'\n    );\n    process.exit(1);\n  }\n  // True when the license came from the bundled trial (no explicit env override).\n  // Used only to turn an engine-init rejection into a trial-aware hint below.\n  const usedTrial =\n    !process.env.CESDK_LICENSE?.trim() &&\n    !process.env.IMGLY_CESDK_LICENSE?.trim();\n\n  const workspaceRoot = process.env.CODESIGN_WORKSPACE ?? DEFAULT_WORKSPACE;\n  const fs = new NodeWorkspaceFS(workspaceRoot);\n  const store = new RevisionStore(fs);\n\n  // One engine, one lock. stdio is single-session so there is no contention\n  // today, but the engine tools require the lock and it keeps wiring uniform\n  // with the HTTP transport.\n  const engineLock = new Mutex();\n  const broadcaster = new SseBroadcaster();\n  const gateway = new LocalGatewayClient({ apiKey: process.env.API_KEY });\n\n  // The viewer listener binds an ephemeral localhost port — cheap and local, so\n  // it stays on the startup path. urlBuilder must exist before we build the tools\n  // and before the engine's workspace:// URI resolver is wired.\n  const viewerRouter = createViewerRouter({\n    store,\n    fs,\n    broadcaster,\n    cesdkLicense: license,\n    workspaceRoot\n  });\n  const listener = await startViewerListener({ router: viewerRouter });\n  process.stderr.write(`codesign-mcp stdio: viewer at ${listener.base}\\n`);\n  diag.emit({\n    kind: 'lifecycle',\n    timestamp: Date.now(),\n    text: 'viewer_listening'\n  });\n  const urlBuilder = new LocalViewerUrlBuilder({ base: listener.base });\n\n  // Kick off the heavy engine bootstrap WITHOUT awaiting it — see the file\n  // header. server.connect() below answers the handshake while this runs.\n  diag.emit({\n    kind: 'lifecycle',\n    timestamp: Date.now(),\n    text: 'engine_init_start'\n  });\n  const enginePromise = bootstrapEngine({ license, urlBuilder, usedTrial });\n  // Nothing awaits enginePromise until the first tool call. Attach a logger so a\n  // background init failure surfaces on stderr instead of crashing the process\n  // on an unhandled rejection; the awaiting tool call still sees the real error.\n  void enginePromise.catch((err) => {\n    process.stderr.write(\n      `codesign-mcp stdio: engine initialization failed — ${\n        err instanceof Error ? (err.stack ?? err.message) : String(err)\n      }\\n`\n    );\n    diag.emit({\n      kind: 'lifecycle',\n      timestamp: Date.now(),\n      text: 'engine_init_failed',\n      error: {\n        message: err instanceof Error ? err.message : String(err),\n        ...(err instanceof Error && err.stack ? { stack: err.stack } : {})\n      }\n    });\n  });\n\n  // size=1, single shared engine resolved lazily from enginePromise.\n  // EngineSession only calls adapter.create() (awaiting the engine) on the first\n  // edit, by which point the bootstrap is usually already settled.\n  const session = new EngineSession({\n    size: 1,\n    adapter: cesdkAdapter(enginePromise)\n  });\n\n  const renderThumbnail = async ({\n    engine: eng\n  }: {\n    revision: string;\n    engine: import('@cesdk/engine').default;\n  }): Promise<Uint8Array> => {\n    // Thumbnail = the scene's first page rendered to a 256-px webp. Best-effort.\n    // We use page 0 of the scene; if the scene has no pages, throw → swallowed.\n    const pages = eng.scene.getPages();\n    if (!pages || pages.length === 0) throw new Error('no pages');\n    const blob = await eng.block.export(pages[0], 'image/webp', {\n      targetWidth: 256\n    });\n    return new Uint8Array(await blob.arrayBuffer());\n  };\n\n  const tools = buildDesignToolRegistrations({\n    fs,\n    store,\n    session,\n    engineLock,\n    gateway,\n    urlBuilder,\n    allowOutPath: true,\n    onLeafWritten: (e) => broadcaster.broadcast(e),\n    renderThumbnail: renderThumbnail as never, // adapter's E generic is `unknown`; cesdk engine type fits\n    telemetry\n  });\n\n  const assets = loadNodeAssets();\n  const server = createCodesignMcpServer({\n    assets,\n    tools\n  });\n\n  const transport = new StdioServerTransport();\n  await server.connect(transport);\n\n  const shutdown = async () => {\n    await listener.close();\n    await server.close();\n    process.exit(0);\n  };\n  process.on('SIGINT', () => void shutdown());\n  process.on('SIGTERM', () => void shutdown());\n}\n\n// Heavy engine bootstrap, run in the background by runStdio (off the MCP\n// handshake path). Resolves to a fully-wired engine: design-unit-patched (by\n// ensureHeadlessEngine), workspace:// URI resolver installed, and — best-effort\n// — the default + demo + unsplash asset sources registered so asset_search has\n// content. The asset-source step hits the CDN; failures log to stderr and leave\n// the engine usable (asset_search just sees fewer sources).\nasync function bootstrapEngine({\n  license,\n  urlBuilder,\n  usedTrial\n}: {\n  license: string;\n  urlBuilder: LocalViewerUrlBuilder;\n  /** License came from the bundled trial — turns an init rejection into a hint. */\n  usedTrial: boolean;\n}): Promise<Awaited<ReturnType<typeof ensureHeadlessEngine>>> {\n  let engine: Awaited<ReturnType<typeof ensureHeadlessEngine>>;\n  try {\n    engine = await ensureHeadlessEngine(license);\n  } catch (err) {\n    if (usedTrial) {\n      process.stderr.write(\n        'codesign-mcp stdio: the bundled trial license was rejected (it may have expired). Set CESDK_LICENSE to a valid CE.SDK node license string.\\n'\n      );\n    }\n    throw err;\n  }\n  // Resolve workspace:// asset URIs to the listener's /r/ route so the headless\n  // engine can fetch generated assets embedded in scenes.\n  registerWorkspaceUriResolver(engine, urlBuilder);\n  // Default + demo asset sources so `asset_search` has content (CDN fetch,\n  // best-effort — a failure logs to stderr and the engine stays usable).\n  await ensureEngineAssetSources(engine);\n  // Demo `unsplash` custom source (synchronous, idempotent) so asset_search has\n  // a real remote source alongside the CDN ones. Public IMG.LY demo proxy.\n  registerUnsplashSource(engine);\n  return engine;\n}\n"]}

package/dist/cli.js

@@ -10,7 +10,7 @@
 //
 // Lazy imports per subcommand: stdio mode never loads express; http mode
 // never loads StdioServerTransport. Smaller crash surface, faster start.
-const USAGE = `Usage: codesign-mcp <stdio|http> [flags]
+const USAGE = `Usage: codesign-mcp <stdio|http|diagnose> [flags]
 
 Subcommands:
   stdio                       MCP server over stdin/stdout. Spawned by hosts
@@ -22,6 +22,9 @@ Subcommands:
        [--max-sessions <n>]   Defaults: --port 3030 --host 127.0.0.1
        [--idle-timeout-ms <n>]          --max-sessions 10 --idle-timeout-ms 1800000
 
+  diagnose                    Collect local diagnostics logs into a redacted
+                              .zip you can send to IMG.LY. No network.
+
 Common env:
   CESDK_LICENSE                  required for both modes (CE.SDK headless
                                  engine license).
@@ -57,6 +60,12 @@ async function main() {
             await runHttp(process.argv.slice(3));
             return;
         }
+        case 'diagnose': {
+            const { runDiagnose } = await import('./diagnostics/bundle.js');
+            const zipPath = await runDiagnose();
+            process.stdout.write(`codesign-mcp: diagnostics bundle written to\n  ${zipPath}\nAttach this file to your issue or email support — it is redacted and local-only.\n`);
+            return;
+        }
         case '-h':
         case '--help':
             process.stdout.write(USAGE);

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,6CAA6C;AAC7C,EAAE;AACF,2EAA2E;AAC3E,wEAAwE;AACxE,8CAA8C;AAC9C,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,EAAE;AACF,yEAAyE;AACzE,yEAAyE;AAEzE,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;CAmBb,CAAC;AAEF,yEAAyE;AACzE,0EAA0E;AAC1E,6EAA6E;AAC7E,wEAAwE;AACxE,8EAA8E;AAC9E,4EAA4E;AAC5E,SAAS,sBAAsB;IAC7B,IAAI,OAAO,UAAU,CAAC,MAAM,EAAE,eAAe,KAAK,UAAU,EAAE,CAAC;QAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8CAA8C,OAAO,CAAC,OAAO,KAAK;YAChE,8BAA8B,CACjC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,sBAAsB,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACpD,MAAM,QAAQ,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;YAClD,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QACD,KAAK,IAAI,CAAC;QACV,KAAK,QAAQ;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO;QACT,KAAK,SAAS;YACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,KAAK,EAAE,CAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO;QACT;YACE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qCAAqC,GAAG,OAAO,KAAK,EAAE,CACvD,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yBAAyB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC7F,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC","sourcesContent":["#!/usr/bin/env node\n// codesign-mcp — single bin, two transports.\n//\n//   codesign-mcp stdio      MCP server over stdin/stdout. Spawned by hosts\n//                           like Claude Desktop / Claude Code via their\n//                           `command` config.\n//\n//   codesign-mcp http       MCP server over Streamable HTTP. Long-running\n//                           listener; hosts connect via their `url` config.\n//\n// Lazy imports per subcommand: stdio mode never loads express; http mode\n// never loads StdioServerTransport. Smaller crash surface, faster start.\n\nconst USAGE = `Usage: codesign-mcp <stdio|http> [flags]\n\nSubcommands:\n  stdio                       MCP server over stdin/stdout. Spawned by hosts\n                              like Claude Desktop / Claude Code via their\n                              \\`command\\` config.\n\n  http [--port <n>]           MCP server over Streamable HTTP. Long-running\n       [--host <ip>]          listener; hosts connect via their \\`url\\` config.\n       [--max-sessions <n>]   Defaults: --port 3030 --host 127.0.0.1\n       [--idle-timeout-ms <n>]          --max-sessions 10 --idle-timeout-ms 1800000\n\nCommon env:\n  CESDK_LICENSE                  required for both modes (CE.SDK headless\n                                 engine license).\n  IMGLY_DEFAULT_ASSETS_BASE_URL  manifest root for the default asset sources\n                                 (self-hosted deployments; default: IMG.LY CDN).\n  IMGLY_DEMO_ASSETS_BASE_URL     manifest root for the demo asset sources\n                                 (default: IMG.LY CDN).\n`;\n\n// The CE.SDK headless engine seeds its randomness from a global `crypto`\n// (`crypto.getRandomValues`), which Node only exposes by default on v20+.\n// On older runtimes — or sandboxes that strip globals — the engine dies deep\n// inside its WASM runtime with a cryptic `ReferenceError: crypto is not\n// defined`, often taking the whole process (and the MCP connection) down with\n// it. Feature-detect the capability up front and fail with a clear message.\nfunction assertSupportedRuntime(): void {\n  if (typeof globalThis.crypto?.getRandomValues !== 'function') {\n    process.stderr.write(\n      `codesign-mcp: unsupported Node.js runtime (${process.version}). ` +\n        `Node.js >= 20 is required.\\n`\n    );\n    process.exit(1);\n  }\n}\n\nasync function main(): Promise<void> {\n  assertSupportedRuntime();\n  const sub = process.argv[2];\n  switch (sub) {\n    case 'stdio': {\n      const { runStdio } = await import('./cli/stdio.js');\n      await runStdio();\n      return;\n    }\n    case 'http': {\n      const { runHttp } = await import('./cli/http.js');\n      await runHttp(process.argv.slice(3));\n      return;\n    }\n    case '-h':\n    case '--help':\n      process.stdout.write(USAGE);\n      return;\n    case undefined:\n      process.stderr.write(`codesign-mcp: missing subcommand.\\n${USAGE}`);\n      process.exit(2);\n      return;\n    default:\n      process.stderr.write(\n        `codesign-mcp: unknown subcommand \"${sub}\".\\n${USAGE}`\n      );\n      process.exit(2);\n  }\n}\n\nmain().catch((err) => {\n  process.stderr.write(\n    `codesign-mcp: fatal — ${err instanceof Error ? (err.stack ?? err.message) : String(err)}\\n`\n  );\n  process.exit(1);\n});\n"]}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,6CAA6C;AAC7C,EAAE;AACF,2EAA2E;AAC3E,wEAAwE;AACxE,8CAA8C;AAC9C,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,EAAE;AACF,yEAAyE;AACzE,yEAAyE;AAEzE,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;CAsBb,CAAC;AAEF,yEAAyE;AACzE,0EAA0E;AAC1E,6EAA6E;AAC7E,wEAAwE;AACxE,8EAA8E;AAC9E,4EAA4E;AAC5E,SAAS,sBAAsB;IAC7B,IAAI,OAAO,UAAU,CAAC,MAAM,EAAE,eAAe,KAAK,UAAU,EAAE,CAAC;QAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8CAA8C,OAAO,CAAC,OAAO,KAAK;YAChE,8BAA8B,CACjC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,sBAAsB,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACpD,MAAM,QAAQ,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;YAClD,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;YACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kDAAkD,OAAO,sFAAsF,CAChJ,CAAC;YACF,OAAO;QACT,CAAC;QACD,KAAK,IAAI,CAAC;QACV,KAAK,QAAQ;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO;QACT,KAAK,SAAS;YACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,KAAK,EAAE,CAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO;QACT;YACE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qCAAqC,GAAG,OAAO,KAAK,EAAE,CACvD,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yBAAyB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC7F,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC","sourcesContent":["#!/usr/bin/env node\n// codesign-mcp — single bin, two transports.\n//\n//   codesign-mcp stdio      MCP server over stdin/stdout. Spawned by hosts\n//                           like Claude Desktop / Claude Code via their\n//                           `command` config.\n//\n//   codesign-mcp http       MCP server over Streamable HTTP. Long-running\n//                           listener; hosts connect via their `url` config.\n//\n// Lazy imports per subcommand: stdio mode never loads express; http mode\n// never loads StdioServerTransport. Smaller crash surface, faster start.\n\nconst USAGE = `Usage: codesign-mcp <stdio|http|diagnose> [flags]\n\nSubcommands:\n  stdio                       MCP server over stdin/stdout. Spawned by hosts\n                              like Claude Desktop / Claude Code via their\n                              \\`command\\` config.\n\n  http [--port <n>]           MCP server over Streamable HTTP. Long-running\n       [--host <ip>]          listener; hosts connect via their \\`url\\` config.\n       [--max-sessions <n>]   Defaults: --port 3030 --host 127.0.0.1\n       [--idle-timeout-ms <n>]          --max-sessions 10 --idle-timeout-ms 1800000\n\n  diagnose                    Collect local diagnostics logs into a redacted\n                              .zip you can send to IMG.LY. No network.\n\nCommon env:\n  CESDK_LICENSE                  required for both modes (CE.SDK headless\n                                 engine license).\n  IMGLY_DEFAULT_ASSETS_BASE_URL  manifest root for the default asset sources\n                                 (self-hosted deployments; default: IMG.LY CDN).\n  IMGLY_DEMO_ASSETS_BASE_URL     manifest root for the demo asset sources\n                                 (default: IMG.LY CDN).\n`;\n\n// The CE.SDK headless engine seeds its randomness from a global `crypto`\n// (`crypto.getRandomValues`), which Node only exposes by default on v20+.\n// On older runtimes — or sandboxes that strip globals — the engine dies deep\n// inside its WASM runtime with a cryptic `ReferenceError: crypto is not\n// defined`, often taking the whole process (and the MCP connection) down with\n// it. Feature-detect the capability up front and fail with a clear message.\nfunction assertSupportedRuntime(): void {\n  if (typeof globalThis.crypto?.getRandomValues !== 'function') {\n    process.stderr.write(\n      `codesign-mcp: unsupported Node.js runtime (${process.version}). ` +\n        `Node.js >= 20 is required.\\n`\n    );\n    process.exit(1);\n  }\n}\n\nasync function main(): Promise<void> {\n  assertSupportedRuntime();\n  const sub = process.argv[2];\n  switch (sub) {\n    case 'stdio': {\n      const { runStdio } = await import('./cli/stdio.js');\n      await runStdio();\n      return;\n    }\n    case 'http': {\n      const { runHttp } = await import('./cli/http.js');\n      await runHttp(process.argv.slice(3));\n      return;\n    }\n    case 'diagnose': {\n      const { runDiagnose } = await import('./diagnostics/bundle.js');\n      const zipPath = await runDiagnose();\n      process.stdout.write(\n        `codesign-mcp: diagnostics bundle written to\\n  ${zipPath}\\nAttach this file to your issue or email support — it is redacted and local-only.\\n`\n      );\n      return;\n    }\n    case '-h':\n    case '--help':\n      process.stdout.write(USAGE);\n      return;\n    case undefined:\n      process.stderr.write(`codesign-mcp: missing subcommand.\\n${USAGE}`);\n      process.exit(2);\n      return;\n    default:\n      process.stderr.write(\n        `codesign-mcp: unknown subcommand \"${sub}\".\\n${USAGE}`\n      );\n      process.exit(2);\n  }\n}\n\nmain().catch((err) => {\n  process.stderr.write(\n    `codesign-mcp: fatal — ${err instanceof Error ? (err.stack ?? err.message) : String(err)}\\n`\n  );\n  process.exit(1);\n});\n"]}

package/dist/config.d.ts

@@ -35,8 +35,6 @@ export interface ServerConfig {
     maxEngines: number;
     idleTimeoutMs: number;
     logLevel: string;
-    /** Expose the perf metrics route + dashboard SPA. Default false. */
-    metricsEnabled: boolean;
     workspace: WorkspaceConfig;
     auth: {
         mode: WorkspaceMode;
@@ -58,4 +56,15 @@ export interface ServerConfig {
     publicBaseUrl?: string;
 }
 export declare function loadConfig(env?: Env): ServerConfig;
+/**
+ * Local diagnostics file logging is ON by default so evidence exists before a
+ * user knows they hit a bug. Disable with IMGLY_DIAGNOSTICS_FILE=false (or 0).
+ */
+export declare function diagnosticsFileEnabled(env?: Env): boolean;
+/**
+ * Where diagnostics NDJSON is written. Explicit IMGLY_DIAGNOSTICS_DIR wins;
+ * otherwise <workspaceRoot>/logs, where workspaceRoot mirrors the stdio default
+ * ($CODESIGN_WORKSPACE ?? ~/.codesign/workspace).
+ */
+export declare function resolveDiagnosticsDir(env?: Env): string;
 //# sourceMappingURL=config.d.ts.map