@imgly/codesign-mcp 0.1.5 → 0.1.7

package/dist/diagnostics/file-sink.d.ts

@@ -0,0 +1,38 @@
+import type { DiagnosticEvent, DiagnosticsSink } from './events.js';
+export interface FileSinkOptions {
+    dir: string;
+    fileName?: string;
+    maxFileBytes?: number;
+    keep?: number;
+    totalBudgetBytes?: number;
+    maxAgeMs?: number;
+}
+export declare class FileDiagnosticsSink implements DiagnosticsSink {
+    private readonly dir;
+    private readonly fileName;
+    private readonly maxFileBytes;
+    private readonly keep;
+    private readonly totalBudgetBytes;
+    private readonly active;
+    private tail;
+    private gitignoreWritten;
+    private notifiedError;
+    constructor(opts: FileSinkOptions);
+    emit(event: DiagnosticEvent): void;
+    /** Await all queued writes — for tests and graceful shutdown. */
+    flush(): Promise<void>;
+    private write;
+    private activeSize;
+    private rotate;
+    private enforceBudget;
+    private rotatedPath;
+    private rotatedFiles;
+    private noteError;
+    /**
+     * Startup GC: delete rotated files older than maxAgeMs, then enforce the
+     * total-size budget. The safe point to run this is before any writer is
+     * active. Never throws.
+     */
+    static pruneOnStartup(opts: FileSinkOptions): Promise<void>;
+}
+//# sourceMappingURL=file-sink.d.ts.map

package/dist/diagnostics/file-sink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-sink.d.ts","sourceRoot":"","sources":["../../src/diagnostics/file-sink.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGpE,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAYD,qBAAa,mBAAoB,YAAW,eAAe;IACzD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,IAAI,CAAoC;IAChD,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,aAAa,CAAS;gBAElB,IAAI,EAAE,eAAe;IASjC,IAAI,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IAmBlC,iEAAiE;IAC3D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAId,KAAK;YAaL,UAAU;YAQV,MAAM;YAeN,aAAa;IAW3B,OAAO,CAAC,WAAW;YAOL,YAAY;IAiB1B,OAAO,CAAC,SAAS;IAQjB;;;;OAIG;WACU,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;CA0BlE"}

package/dist/diagnostics/file-sink.js

@@ -0,0 +1,157 @@
+// packages/codesign-mcp/src/diagnostics/file-sink.ts
+//
+// The M1 sink: one rotated NDJSON file holding the whole stream, redacted at
+// write so secrets never touch disk. Bounded three ways — per-file rotation,
+// a total-size budget across rotated files, and a startup prune by age +
+// budget. emit() is fire-and-forget (queued) so it never adds tool latency,
+// and it swallows its own I/O errors so a failed append can't break a call.
+import { appendFile, stat, rename, unlink, mkdir, readdir, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { redactValue } from './redact.js';
+const DEFAULTS = {
+    fileName: 'diagnostics.ndjson',
+    maxFileBytes: 8 * 1024 * 1024,
+    keep: 5,
+    totalBudgetBytes: 50 * 1024 * 1024,
+    maxAgeMs: 14 * 24 * 60 * 60 * 1000
+};
+const ROTATED_RE = /^(.*)\.(\d+)\.ndjson$/;
+export class FileDiagnosticsSink {
+    constructor(opts) {
+        this.tail = Promise.resolve();
+        this.gitignoreWritten = false;
+        this.notifiedError = false;
+        this.dir = opts.dir;
+        this.fileName = opts.fileName ?? DEFAULTS.fileName;
+        this.maxFileBytes = opts.maxFileBytes ?? DEFAULTS.maxFileBytes;
+        this.keep = opts.keep ?? DEFAULTS.keep;
+        this.totalBudgetBytes = opts.totalBudgetBytes ?? DEFAULTS.totalBudgetBytes;
+        this.active = join(this.dir, this.fileName);
+    }
+    emit(event) {
+        // Redact at write: secrets never hit disk. Fail-closed — a redactor throw
+        // drops the payload to a stub rather than writing raw.
+        let line;
+        try {
+            line = JSON.stringify(redactValue(event)) + '\n';
+        }
+        catch {
+            line =
+                JSON.stringify({
+                    kind: event?.kind ?? 'unknown',
+                    timestamp: event?.timestamp ?? 0,
+                    redactionError: true
+                }) + '\n';
+        }
+        this.tail = this.tail
+            .then(() => this.write(line))
+            .catch((err) => this.noteError(err));
+    }
+    /** Await all queued writes — for tests and graceful shutdown. */
+    async flush() {
+        await this.tail;
+    }
+    async write(line) {
+        await mkdir(this.dir, { recursive: true });
+        if (!this.gitignoreWritten) {
+            this.gitignoreWritten = true;
+            await writeFile(join(this.dir, '.gitignore'), '*\n').catch(() => { });
+        }
+        const size = await this.activeSize();
+        if (size > 0 && size + Buffer.byteLength(line) > this.maxFileBytes) {
+            await this.rotate();
+        }
+        await appendFile(this.active, line);
+    }
+    async activeSize() {
+        try {
+            return (await stat(this.active)).size;
+        }
+        catch {
+            return 0;
+        }
+    }
+    async rotate() {
+        // Shift diagnostics.N.ndjson -> N+1, active -> .1, then trim to keep + budget.
+        const rotated = await this.rotatedFiles();
+        for (const { index } of rotated.sort((a, b) => b.index - a.index)) {
+            const from = this.rotatedPath(index);
+            if (index + 1 > this.keep) {
+                await unlink(from).catch(() => { });
+            }
+            else {
+                await rename(from, this.rotatedPath(index + 1)).catch(() => { });
+            }
+        }
+        await rename(this.active, this.rotatedPath(1)).catch(() => { });
+        await this.enforceBudget();
+    }
+    async enforceBudget() {
+        const rotated = await this.rotatedFiles();
+        let total = rotated.reduce((n, r) => n + r.size, 0);
+        // Delete oldest (highest index) first until under budget.
+        for (const r of rotated.sort((a, b) => b.index - a.index)) {
+            if (total <= this.totalBudgetBytes)
+                break;
+            await unlink(this.rotatedPath(r.index)).catch(() => { });
+            total -= r.size;
+        }
+    }
+    rotatedPath(index) {
+        return join(this.dir, `${this.fileName.replace(/\.ndjson$/, '')}.${index}.ndjson`);
+    }
+    async rotatedFiles() {
+        const base = this.fileName.replace(/\.ndjson$/, '');
+        const out = [];
+        for (const name of await readdir(this.dir).catch(() => [])) {
+            const m = name.match(ROTATED_RE);
+            if (m && m[1] === base) {
+                const size = (await stat(join(this.dir, name)).catch(() => ({ size: 0 }))).size;
+                out.push({ index: Number(m[2]), size });
+            }
+        }
+        return out;
+    }
+    noteError(err) {
+        if (this.notifiedError)
+            return;
+        this.notifiedError = true;
+        process.stderr.write(`codesign-mcp: diagnostics file write failed — ${err instanceof Error ? err.message : String(err)}\n`);
+    }
+    /**
+     * Startup GC: delete rotated files older than maxAgeMs, then enforce the
+     * total-size budget. The safe point to run this is before any writer is
+     * active. Never throws.
+     */
+    static async pruneOnStartup(opts) {
+        const dir = opts.dir;
+        const fileName = opts.fileName ?? DEFAULTS.fileName;
+        const base = fileName.replace(/\.ndjson$/, '');
+        const maxAgeMs = opts.maxAgeMs ?? DEFAULTS.maxAgeMs;
+        const totalBudgetBytes = opts.totalBudgetBytes ?? DEFAULTS.totalBudgetBytes;
+        const now = Date.now();
+        const rotated = [];
+        for (const name of await readdir(dir).catch(() => [])) {
+            const m = name.match(ROTATED_RE);
+            if (!m || m[1] !== base)
+                continue;
+            const s = await stat(join(dir, name)).catch(() => null);
+            if (!s)
+                continue;
+            if (now - s.mtimeMs > maxAgeMs) {
+                await unlink(join(dir, name)).catch(() => { });
+            }
+            else {
+                rotated.push({ index: Number(m[2]), size: s.size, mtimeMs: s.mtimeMs });
+            }
+        }
+        let total = rotated.reduce((n, r) => n + r.size, 0);
+        for (const r of rotated.sort((a, b) => b.index - a.index)) {
+            if (total <= totalBudgetBytes)
+                break;
+            await unlink(join(dir, `${base}.${r.index}.ndjson`)).catch(() => { });
+            total -= r.size;
+        }
+    }
+}
+//# sourceMappingURL=file-sink.js.map

package/dist/diagnostics/file-sink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-sink.js","sourceRoot":"","sources":["../../src/diagnostics/file-sink.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,yEAAyE;AACzE,4EAA4E;AAC5E,4EAA4E;AAC5E,OAAO,EACL,UAAU,EACV,IAAI,EACJ,MAAM,EACN,MAAM,EACN,KAAK,EACL,OAAO,EACP,SAAS,EACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAW1C,MAAM,QAAQ,GAAG;IACf,QAAQ,EAAE,oBAAoB;IAC9B,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IAC7B,IAAI,EAAE,CAAC;IACP,gBAAgB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAClC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;CACnC,CAAC;AAEF,MAAM,UAAU,GAAG,uBAAuB,CAAC;AAE3C,MAAM,OAAO,mBAAmB;IAW9B,YAAY,IAAqB;QAJzB,SAAI,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;QACxC,qBAAgB,GAAG,KAAK,CAAC;QACzB,kBAAa,GAAG,KAAK,CAAC;QAG5B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;QACnD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,QAAQ,CAAC,YAAY,CAAC;QAC/D,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC;QACvC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,QAAQ,CAAC,gBAAgB,CAAC;QAC3E,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,CAAC,KAAsB;QACzB,0EAA0E;QAC1E,uDAAuD;QACvD,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,IAAI;gBACF,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,SAAS;oBAC9B,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,CAAC;oBAChC,cAAc,EAAE,IAAI;iBACrB,CAAC,GAAG,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI;aAClB,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;aAC5B,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,IAAI,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,IAAY;QAC9B,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAC7B,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YACnE,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,CAAC;QACD,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,+EAA+E;QAC/E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1C,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC1B,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrC,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QACD,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1C,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACpD,0DAA0D;QAC1D,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,IAAI,KAAK,IAAI,IAAI,CAAC,gBAAgB;gBAAE,MAAM;YAC1C,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACxD,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,KAAa;QAC/B,OAAO,IAAI,CACT,IAAI,CAAC,GAAG,EACR,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAC5D,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,YAAY;QAGxB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,GAAG,GAA2C,EAAE,CAAC;QACvD,KAAK,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,EAAE,CAAC;YACvE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACvB,MAAM,IAAI,GAAG,CACX,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAC5D,CAAC,IAAI,CAAC;gBACP,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,SAAS,CAAC,GAAY;QAC5B,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO;QAC/B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iDAAiD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CACtG,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,IAAqB;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;QACpD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;QACpD,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,QAAQ,CAAC,gBAAgB,CAAC;QAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAA4D,EAAE,CAAC;QAC5E,KAAK,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,EAAE,CAAC;YAClE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,SAAS;YAClC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,IAAI,GAAG,GAAG,CAAC,CAAC,OAAO,GAAG,QAAQ,EAAE,CAAC;gBAC/B,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QACD,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACpD,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,IAAI,KAAK,IAAI,gBAAgB;gBAAE,MAAM;YACrC,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrE,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;CACF","sourcesContent":["// packages/codesign-mcp/src/diagnostics/file-sink.ts\n//\n// The M1 sink: one rotated NDJSON file holding the whole stream, redacted at\n// write so secrets never touch disk. Bounded three ways — per-file rotation,\n// a total-size budget across rotated files, and a startup prune by age +\n// budget. emit() is fire-and-forget (queued) so it never adds tool latency,\n// and it swallows its own I/O errors so a failed append can't break a call.\nimport {\n  appendFile,\n  stat,\n  rename,\n  unlink,\n  mkdir,\n  readdir,\n  writeFile\n} from 'node:fs/promises';\nimport { join } from 'node:path';\nimport type { DiagnosticEvent, DiagnosticsSink } from './events.js';\nimport { redactValue } from './redact.js';\n\nexport interface FileSinkOptions {\n  dir: string;\n  fileName?: string;\n  maxFileBytes?: number;\n  keep?: number;\n  totalBudgetBytes?: number;\n  maxAgeMs?: number;\n}\n\nconst DEFAULTS = {\n  fileName: 'diagnostics.ndjson',\n  maxFileBytes: 8 * 1024 * 1024,\n  keep: 5,\n  totalBudgetBytes: 50 * 1024 * 1024,\n  maxAgeMs: 14 * 24 * 60 * 60 * 1000\n};\n\nconst ROTATED_RE = /^(.*)\\.(\\d+)\\.ndjson$/;\n\nexport class FileDiagnosticsSink implements DiagnosticsSink {\n  private readonly dir: string;\n  private readonly fileName: string;\n  private readonly maxFileBytes: number;\n  private readonly keep: number;\n  private readonly totalBudgetBytes: number;\n  private readonly active: string;\n  private tail: Promise<void> = Promise.resolve();\n  private gitignoreWritten = false;\n  private notifiedError = false;\n\n  constructor(opts: FileSinkOptions) {\n    this.dir = opts.dir;\n    this.fileName = opts.fileName ?? DEFAULTS.fileName;\n    this.maxFileBytes = opts.maxFileBytes ?? DEFAULTS.maxFileBytes;\n    this.keep = opts.keep ?? DEFAULTS.keep;\n    this.totalBudgetBytes = opts.totalBudgetBytes ?? DEFAULTS.totalBudgetBytes;\n    this.active = join(this.dir, this.fileName);\n  }\n\n  emit(event: DiagnosticEvent): void {\n    // Redact at write: secrets never hit disk. Fail-closed — a redactor throw\n    // drops the payload to a stub rather than writing raw.\n    let line: string;\n    try {\n      line = JSON.stringify(redactValue(event)) + '\\n';\n    } catch {\n      line =\n        JSON.stringify({\n          kind: event?.kind ?? 'unknown',\n          timestamp: event?.timestamp ?? 0,\n          redactionError: true\n        }) + '\\n';\n    }\n    this.tail = this.tail\n      .then(() => this.write(line))\n      .catch((err) => this.noteError(err));\n  }\n\n  /** Await all queued writes — for tests and graceful shutdown. */\n  async flush(): Promise<void> {\n    await this.tail;\n  }\n\n  private async write(line: string): Promise<void> {\n    await mkdir(this.dir, { recursive: true });\n    if (!this.gitignoreWritten) {\n      this.gitignoreWritten = true;\n      await writeFile(join(this.dir, '.gitignore'), '*\\n').catch(() => {});\n    }\n    const size = await this.activeSize();\n    if (size > 0 && size + Buffer.byteLength(line) > this.maxFileBytes) {\n      await this.rotate();\n    }\n    await appendFile(this.active, line);\n  }\n\n  private async activeSize(): Promise<number> {\n    try {\n      return (await stat(this.active)).size;\n    } catch {\n      return 0;\n    }\n  }\n\n  private async rotate(): Promise<void> {\n    // Shift diagnostics.N.ndjson -> N+1, active -> .1, then trim to keep + budget.\n    const rotated = await this.rotatedFiles();\n    for (const { index } of rotated.sort((a, b) => b.index - a.index)) {\n      const from = this.rotatedPath(index);\n      if (index + 1 > this.keep) {\n        await unlink(from).catch(() => {});\n      } else {\n        await rename(from, this.rotatedPath(index + 1)).catch(() => {});\n      }\n    }\n    await rename(this.active, this.rotatedPath(1)).catch(() => {});\n    await this.enforceBudget();\n  }\n\n  private async enforceBudget(): Promise<void> {\n    const rotated = await this.rotatedFiles();\n    let total = rotated.reduce((n, r) => n + r.size, 0);\n    // Delete oldest (highest index) first until under budget.\n    for (const r of rotated.sort((a, b) => b.index - a.index)) {\n      if (total <= this.totalBudgetBytes) break;\n      await unlink(this.rotatedPath(r.index)).catch(() => {});\n      total -= r.size;\n    }\n  }\n\n  private rotatedPath(index: number): string {\n    return join(\n      this.dir,\n      `${this.fileName.replace(/\\.ndjson$/, '')}.${index}.ndjson`\n    );\n  }\n\n  private async rotatedFiles(): Promise<\n    Array<{ index: number; size: number }>\n  > {\n    const base = this.fileName.replace(/\\.ndjson$/, '');\n    const out: Array<{ index: number; size: number }> = [];\n    for (const name of await readdir(this.dir).catch(() => [] as string[])) {\n      const m = name.match(ROTATED_RE);\n      if (m && m[1] === base) {\n        const size = (\n          await stat(join(this.dir, name)).catch(() => ({ size: 0 }))\n        ).size;\n        out.push({ index: Number(m[2]), size });\n      }\n    }\n    return out;\n  }\n\n  private noteError(err: unknown): void {\n    if (this.notifiedError) return;\n    this.notifiedError = true;\n    process.stderr.write(\n      `codesign-mcp: diagnostics file write failed — ${err instanceof Error ? err.message : String(err)}\\n`\n    );\n  }\n\n  /**\n   * Startup GC: delete rotated files older than maxAgeMs, then enforce the\n   * total-size budget. The safe point to run this is before any writer is\n   * active. Never throws.\n   */\n  static async pruneOnStartup(opts: FileSinkOptions): Promise<void> {\n    const dir = opts.dir;\n    const fileName = opts.fileName ?? DEFAULTS.fileName;\n    const base = fileName.replace(/\\.ndjson$/, '');\n    const maxAgeMs = opts.maxAgeMs ?? DEFAULTS.maxAgeMs;\n    const totalBudgetBytes = opts.totalBudgetBytes ?? DEFAULTS.totalBudgetBytes;\n    const now = Date.now();\n    const rotated: Array<{ index: number; size: number; mtimeMs: number }> = [];\n    for (const name of await readdir(dir).catch(() => [] as string[])) {\n      const m = name.match(ROTATED_RE);\n      if (!m || m[1] !== base) continue;\n      const s = await stat(join(dir, name)).catch(() => null);\n      if (!s) continue;\n      if (now - s.mtimeMs > maxAgeMs) {\n        await unlink(join(dir, name)).catch(() => {});\n      } else {\n        rotated.push({ index: Number(m[2]), size: s.size, mtimeMs: s.mtimeMs });\n      }\n    }\n    let total = rotated.reduce((n, r) => n + r.size, 0);\n    for (const r of rotated.sort((a, b) => b.index - a.index)) {\n      if (total <= totalBudgetBytes) break;\n      await unlink(join(dir, `${base}.${r.index}.ndjson`)).catch(() => {});\n      total -= r.size;\n    }\n  }\n}\n"]}

package/dist/diagnostics/redact.d.ts

@@ -0,0 +1,7 @@
+/** Key names whose VALUE is always dropped, matched case-insensitively. */
+export declare const SECRET_KEY_RE: RegExp;
+/** Substrings shaped like a credential; scrubbed out of any string. */
+export declare const SECRET_PATTERNS: RegExp[];
+export declare function redactText(text: string): string;
+export declare function redactValue(value: unknown): unknown;
+//# sourceMappingURL=redact.d.ts.map

package/dist/diagnostics/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/diagnostics/redact.ts"],"names":[],"mappings":"AAUA,2EAA2E;AAC3E,eAAO,MAAM,aAAa,QACoC,CAAC;AAE/D,uEAAuE;AACvE,eAAO,MAAM,eAAe,EAAE,MAAM,EAOnC,CAAC;AAEF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAM/C;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAWnD"}

package/dist/diagnostics/redact.js

@@ -0,0 +1,43 @@
+// packages/codesign-mcp/src/diagnostics/redact.ts
+//
+// Executable form of .claude/rules/no-secrets.md. Two entry points: redactText
+// for raw log lines (pattern scrub + home-path), redactValue for structured
+// events (drop secret-named keys + recurse + pattern scrub every string).
+// Both are pure and total; callers that persist/externalise apply them.
+import { homedir } from 'node:os';
+const REDACTED = '[REDACTED]';
+/** Key names whose VALUE is always dropped, matched case-insensitively. */
+export const SECRET_KEY_RE = /(license|api[-_]?key|secret|token|password|authorization)/i;
+/** Substrings shaped like a credential; scrubbed out of any string. */
+export const SECRET_PATTERNS = [
+    /sk-(?:or|ant|proj|cl)-[A-Za-z0-9_-]{20,}/g,
+    /sk-[A-Za-z0-9_-]{20,}/g,
+    /xai-[A-Za-z0-9]{20,}/g,
+    /AKIA[0-9A-Z]{16}/g,
+    /gh[posur]_[A-Za-z0-9]{20,}/g,
+    /AIza[0-9A-Za-z_-]{35}/g
+];
+export function redactText(text) {
+    let out = text;
+    for (const re of SECRET_PATTERNS)
+        out = out.replace(re, REDACTED);
+    const home = homedir();
+    if (home && home !== '/')
+        out = out.split(home).join('~');
+    return out;
+}
+export function redactValue(value) {
+    if (typeof value === 'string')
+        return redactText(value);
+    if (Array.isArray(value))
+        return value.map(redactValue);
+    if (value && typeof value === 'object') {
+        const out = {};
+        for (const [k, v] of Object.entries(value)) {
+            out[k] = SECRET_KEY_RE.test(k) ? REDACTED : redactValue(v);
+        }
+        return out;
+    }
+    return value;
+}
+//# sourceMappingURL=redact.js.map

package/dist/diagnostics/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/diagnostics/redact.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,+EAA+E;AAC/E,4EAA4E;AAC5E,0EAA0E;AAC1E,wEAAwE;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,2EAA2E;AAC3E,MAAM,CAAC,MAAM,aAAa,GACxB,4DAA4D,CAAC;AAE/D,uEAAuE;AACvE,MAAM,CAAC,MAAM,eAAe,GAAa;IACvC,2CAA2C;IAC3C,wBAAwB;IACxB,uBAAuB;IACvB,mBAAmB;IACnB,6BAA6B;IAC7B,wBAAwB;CACzB,CAAC;AAEF,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,EAAE,IAAI,eAAe;QAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,IAAI,IAAI,IAAI,IAAI,KAAK,GAAG;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["// packages/codesign-mcp/src/diagnostics/redact.ts\n//\n// Executable form of .claude/rules/no-secrets.md. Two entry points: redactText\n// for raw log lines (pattern scrub + home-path), redactValue for structured\n// events (drop secret-named keys + recurse + pattern scrub every string).\n// Both are pure and total; callers that persist/externalise apply them.\nimport { homedir } from 'node:os';\n\nconst REDACTED = '[REDACTED]';\n\n/** Key names whose VALUE is always dropped, matched case-insensitively. */\nexport const SECRET_KEY_RE =\n  /(license|api[-_]?key|secret|token|password|authorization)/i;\n\n/** Substrings shaped like a credential; scrubbed out of any string. */\nexport const SECRET_PATTERNS: RegExp[] = [\n  /sk-(?:or|ant|proj|cl)-[A-Za-z0-9_-]{20,}/g,\n  /sk-[A-Za-z0-9_-]{20,}/g,\n  /xai-[A-Za-z0-9]{20,}/g,\n  /AKIA[0-9A-Z]{16}/g,\n  /gh[posur]_[A-Za-z0-9]{20,}/g,\n  /AIza[0-9A-Za-z_-]{35}/g\n];\n\nexport function redactText(text: string): string {\n  let out = text;\n  for (const re of SECRET_PATTERNS) out = out.replace(re, REDACTED);\n  const home = homedir();\n  if (home && home !== '/') out = out.split(home).join('~');\n  return out;\n}\n\nexport function redactValue(value: unknown): unknown {\n  if (typeof value === 'string') return redactText(value);\n  if (Array.isArray(value)) return value.map(redactValue);\n  if (value && typeof value === 'object') {\n    const out: Record<string, unknown> = {};\n    for (const [k, v] of Object.entries(value as Record<string, unknown>)) {\n      out[k] = SECRET_KEY_RE.test(k) ? REDACTED : redactValue(v);\n    }\n    return out;\n  }\n  return value;\n}\n"]}

package/dist/diagnostics/tool-call-adapter.d.ts

@@ -0,0 +1,4 @@
+import type { DiagnosticsSink } from './events.js';
+import type { TelemetrySink } from '../tools/spans.js';
+export declare function toolCallSink(diag: DiagnosticsSink, now?: () => number): TelemetrySink;
+//# sourceMappingURL=tool-call-adapter.d.ts.map

package/dist/diagnostics/tool-call-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-call-adapter.d.ts","sourceRoot":"","sources":["../../src/diagnostics/tool-call-adapter.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAmB,eAAe,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,KAAK,EAAE,aAAa,EAAkB,MAAM,mBAAmB,CAAC;AAEvE,wBAAgB,YAAY,CAC1B,IAAI,EAAE,eAAe,EACrB,GAAG,GAAE,MAAM,MAAyB,GACnC,aAAa,CAmBf"}

package/dist/diagnostics/tool-call-adapter.js

@@ -0,0 +1,21 @@
+export function toolCallSink(diag, now = () => Date.now()) {
+    return {
+        record(report) {
+            const event = {
+                kind: 'tool_call',
+                timestamp: now(),
+                tool: report.tool,
+                succeeded: report.succeeded,
+                totalMs: report.totalMs,
+                spans: report.spans,
+                ...(report.error ? { error: report.error } : {}),
+                ...(report.args !== undefined ? { args: report.args } : {}),
+                ...(report.result !== undefined ? { result: report.result } : {}),
+                ...(report.revision ? { revision: report.revision } : {}),
+                ...(report.session ? { session: report.session } : {})
+            };
+            diag.emit(event);
+        }
+    };
+}
+//# sourceMappingURL=tool-call-adapter.js.map

package/dist/diagnostics/tool-call-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-call-adapter.js","sourceRoot":"","sources":["../../src/diagnostics/tool-call-adapter.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,YAAY,CAC1B,IAAqB,EACrB,MAAoB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;IAEpC,OAAO;QACL,MAAM,CAAC,MAAsB;YAC3B,MAAM,KAAK,GAAoB;gBAC7B,IAAI,EAAE,WAAW;gBACjB,SAAS,EAAE,GAAG,EAAE;gBAChB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChD,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvD,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["// packages/codesign-mcp/src/diagnostics/tool-call-adapter.ts\n//\n// The one bridge between the tool-owned TelemetrySink port and the unified\n// diagnostics stream: a ToolCallReport becomes a { kind: 'tool_call' } event,\n// timestamped and emitted. Redaction of args happens downstream in the sink.\nimport type { DiagnosticEvent, DiagnosticsSink } from './events.js';\nimport type { TelemetrySink, ToolCallReport } from '../tools/spans.js';\n\nexport function toolCallSink(\n  diag: DiagnosticsSink,\n  now: () => number = () => Date.now()\n): TelemetrySink {\n  return {\n    record(report: ToolCallReport): void {\n      const event: DiagnosticEvent = {\n        kind: 'tool_call',\n        timestamp: now(),\n        tool: report.tool,\n        succeeded: report.succeeded,\n        totalMs: report.totalMs,\n        spans: report.spans,\n        ...(report.error ? { error: report.error } : {}),\n        ...(report.args !== undefined ? { args: report.args } : {}),\n        ...(report.result !== undefined ? { result: report.result } : {}),\n        ...(report.revision ? { revision: report.revision } : {}),\n        ...(report.session ? { session: report.session } : {})\n      };\n      diag.emit(event);\n    }\n  };\n}\n"]}

package/dist/engine/cesdk-adapter.d.ts

@@ -2,15 +2,23 @@ import type CreativeEngine from '@cesdk/engine';
 import type { EngineAdapter } from './session.js';
 /**
  * Adapts a `@cesdk/engine` CreativeEngine instance to the EngineSession's
- * generic EngineAdapter shape. One-to-one mapping; the only quirk is `reset`
+ * generic EngineAdapter shape. One-to-one mapping; two quirks. First, `reset`
  * (CE.SDK has no `reset()` — we wipe by creating a new scene via the same
  * patched create path `ensureHeadlessEngine` installed for the design-unit fix).
+ * Second, `saveToString` passes an explicit `allowedResourceSchemes`: the
+ * engine default rejects our durable `workspace://` scheme, so an edit commit
+ * of a scene referencing workspace assets would fail without it (see
+ * scene-resource-schemes.ts, CODE-3).
  *
  * `engine` may be a Promise: the stdio transport defers engine init off the
  * MCP-handshake path and hands the in-flight promise here. EngineSession only
  * calls `create()` on the first slot (first edit), awaiting it then — by which
  * point init is usually already settled. The other methods receive the resolved
  * engine from EngineSession, so they never touch the promise.
+ *
+ * `engine` may also be a thunk `() => Promise<CreativeEngine>`: the stdio
+ * transport passes a lazy, slot-gated boot so no engine initializes until the
+ * first edit calls create().
  */
-export declare function cesdkAdapter(engine: CreativeEngine | Promise<CreativeEngine>): EngineAdapter<CreativeEngine>;
+export declare function cesdkAdapter(engine: CreativeEngine | Promise<CreativeEngine> | (() => CreativeEngine | Promise<CreativeEngine>)): EngineAdapter<CreativeEngine>;
 //# sourceMappingURL=cesdk-adapter.d.ts.map

package/dist/engine/cesdk-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cesdk-adapter.d.ts","sourceRoot":"","sources":["../../src/engine/cesdk-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,cAAc,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,GAC/C,aAAa,CAAC,cAAc,CAAC,CAW/B"}
+{"version":3,"file":"cesdk-adapter.d.ts","sourceRoot":"","sources":["../../src/engine/cesdk-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,cAAc,MAAM,eAAe,CAAC;AAEhD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EACF,cAAc,GACd,OAAO,CAAC,cAAc,CAAC,GACvB,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,GACnD,aAAa,CAAC,cAAc,CAAC,CAiB/B"}

package/dist/engine/cesdk-adapter.js

@@ -1,25 +1,39 @@
+import { SCENE_ALLOWED_RESOURCE_SCHEMES } from './scene-resource-schemes.js';
 /**
  * Adapts a `@cesdk/engine` CreativeEngine instance to the EngineSession's
- * generic EngineAdapter shape. One-to-one mapping; the only quirk is `reset`
+ * generic EngineAdapter shape. One-to-one mapping; two quirks. First, `reset`
  * (CE.SDK has no `reset()` — we wipe by creating a new scene via the same
  * patched create path `ensureHeadlessEngine` installed for the design-unit fix).
+ * Second, `saveToString` passes an explicit `allowedResourceSchemes`: the
+ * engine default rejects our durable `workspace://` scheme, so an edit commit
+ * of a scene referencing workspace assets would fail without it (see
+ * scene-resource-schemes.ts, CODE-3).
  *
  * `engine` may be a Promise: the stdio transport defers engine init off the
  * MCP-handshake path and hands the in-flight promise here. EngineSession only
  * calls `create()` on the first slot (first edit), awaiting it then — by which
  * point init is usually already settled. The other methods receive the resolved
  * engine from EngineSession, so they never touch the promise.
+ *
+ * `engine` may also be a thunk `() => Promise<CreativeEngine>`: the stdio
+ * transport passes a lazy, slot-gated boot so no engine initializes until the
+ * first edit calls create().
  */
 export function cesdkAdapter(engine) {
     return {
-        create: () => engine, // single-engine adapter: always the same instance (awaited lazily if a promise)
+        // Value/promise: always the same instance. Thunk: the stdio transport passes
+        // a lazy slot-gated boot (CODE-59) so nothing initializes until the first
+        // edit; EngineSession(size:1) calls create() only once, on that first edit.
+        create: () => (typeof engine === 'function' ? engine() : engine),
         reset: async (eng) => {
             eng.scene.create(); // wipes the active scene; design-unit patch from tools/engine.ts re-applies
         },
         loadFromString: async (eng, scene) => {
             await eng.scene.loadFromString(scene);
         },
-        saveToString: async (eng) => eng.scene.saveToString()
+        saveToString: async (eng) => eng.scene.saveToString({
+            allowedResourceSchemes: SCENE_ALLOWED_RESOURCE_SCHEMES
+        })
     };
 }
 //# sourceMappingURL=cesdk-adapter.js.map

package/dist/engine/cesdk-adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"cesdk-adapter.js","sourceRoot":"","sources":["../../src/engine/cesdk-adapter.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAgD;IAEhD,OAAO;QACL,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,gFAAgF;QACtG,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACnB,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,4EAA4E;QAClG,CAAC;QACD,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACnC,MAAM,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;QACD,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE;KACtD,CAAC;AACJ,CAAC","sourcesContent":["import type CreativeEngine from '@cesdk/engine';\nimport type { EngineAdapter } from './session.js';\n\n/**\n * Adapts a `@cesdk/engine` CreativeEngine instance to the EngineSession's\n * generic EngineAdapter shape. One-to-one mapping; the only quirk is `reset`\n * (CE.SDK has no `reset()` — we wipe by creating a new scene via the same\n * patched create path `ensureHeadlessEngine` installed for the design-unit fix).\n *\n * `engine` may be a Promise: the stdio transport defers engine init off the\n * MCP-handshake path and hands the in-flight promise here. EngineSession only\n * calls `create()` on the first slot (first edit), awaiting it then — by which\n * point init is usually already settled. The other methods receive the resolved\n * engine from EngineSession, so they never touch the promise.\n */\nexport function cesdkAdapter(\n  engine: CreativeEngine | Promise<CreativeEngine>\n): EngineAdapter<CreativeEngine> {\n  return {\n    create: () => engine, // single-engine adapter: always the same instance (awaited lazily if a promise)\n    reset: async (eng) => {\n      eng.scene.create(); // wipes the active scene; design-unit patch from tools/engine.ts re-applies\n    },\n    loadFromString: async (eng, scene) => {\n      await eng.scene.loadFromString(scene);\n    },\n    saveToString: async (eng) => eng.scene.saveToString()\n  };\n}\n"]}
+{"version":3,"file":"cesdk-adapter.js","sourceRoot":"","sources":["../../src/engine/cesdk-adapter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,8BAA8B,EAAE,MAAM,6BAA6B,CAAC;AAG7E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,YAAY,CAC1B,MAGoD;IAEpD,OAAO;QACL,6EAA6E;QAC7E,0EAA0E;QAC1E,4EAA4E;QAC5E,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAChE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACnB,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,4EAA4E;QAClG,CAAC;QACD,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACnC,MAAM,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;QACD,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAC1B,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC;YACrB,sBAAsB,EAAE,8BAA8B;SACvD,CAAC;KACL,CAAC;AACJ,CAAC","sourcesContent":["import type CreativeEngine from '@cesdk/engine';\nimport { SCENE_ALLOWED_RESOURCE_SCHEMES } from './scene-resource-schemes.js';\nimport type { EngineAdapter } from './session.js';\n\n/**\n * Adapts a `@cesdk/engine` CreativeEngine instance to the EngineSession's\n * generic EngineAdapter shape. One-to-one mapping; two quirks. First, `reset`\n * (CE.SDK has no `reset()` — we wipe by creating a new scene via the same\n * patched create path `ensureHeadlessEngine` installed for the design-unit fix).\n * Second, `saveToString` passes an explicit `allowedResourceSchemes`: the\n * engine default rejects our durable `workspace://` scheme, so an edit commit\n * of a scene referencing workspace assets would fail without it (see\n * scene-resource-schemes.ts, CODE-3).\n *\n * `engine` may be a Promise: the stdio transport defers engine init off the\n * MCP-handshake path and hands the in-flight promise here. EngineSession only\n * calls `create()` on the first slot (first edit), awaiting it then — by which\n * point init is usually already settled. The other methods receive the resolved\n * engine from EngineSession, so they never touch the promise.\n *\n * `engine` may also be a thunk `() => Promise<CreativeEngine>`: the stdio\n * transport passes a lazy, slot-gated boot so no engine initializes until the\n * first edit calls create().\n */\nexport function cesdkAdapter(\n  engine:\n    | CreativeEngine\n    | Promise<CreativeEngine>\n    | (() => CreativeEngine | Promise<CreativeEngine>)\n): EngineAdapter<CreativeEngine> {\n  return {\n    // Value/promise: always the same instance. Thunk: the stdio transport passes\n    // a lazy slot-gated boot (CODE-59) so nothing initializes until the first\n    // edit; EngineSession(size:1) calls create() only once, on that first edit.\n    create: () => (typeof engine === 'function' ? engine() : engine),\n    reset: async (eng) => {\n      eng.scene.create(); // wipes the active scene; design-unit patch from tools/engine.ts re-applies\n    },\n    loadFromString: async (eng, scene) => {\n      await eng.scene.loadFromString(scene);\n    },\n    saveToString: async (eng) =>\n      eng.scene.saveToString({\n        allowedResourceSchemes: SCENE_ALLOWED_RESOURCE_SCHEMES\n      })\n  };\n}\n"]}

package/dist/engine/engine-capacity.d.ts

@@ -0,0 +1,16 @@
+import type { CodesignMcpToolRegistration } from '../server.js';
+/** Thrown from the slot-gated engine boot when all engine slots are held. */
+export declare class EngineCapacityError extends Error {
+    readonly max: number;
+    constructor(max: number);
+}
+/** The agent-facing capacity message, templated on the live cap. */
+export declare function capacityMessage(max: number): string;
+/**
+ * Wrap a tool registration so a thrown EngineCapacityError becomes a clean MCP
+ * isError result (the capacity message) instead of propagating as a protocol
+ * error. Other errors pass through untouched. Applied to every tool at the stdio
+ * composition root; a no-op for tools that never touch the engine.
+ */
+export declare function wrapEngineCapacity(reg: CodesignMcpToolRegistration): CodesignMcpToolRegistration;
+//# sourceMappingURL=engine-capacity.d.ts.map

package/dist/engine/engine-capacity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-capacity.d.ts","sourceRoot":"","sources":["../../src/engine/engine-capacity.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAEhE,6EAA6E;AAC7E,qBAAa,mBAAoB,SAAQ,KAAK;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM;gBAAX,GAAG,EAAE,MAAM;CAIjC;AAED,oEAAoE;AACpE,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAYnD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,2BAA2B,GAC/B,2BAA2B,CAiB7B"}

package/dist/engine/engine-capacity.js

@@ -0,0 +1,48 @@
+/** Thrown from the slot-gated engine boot when all engine slots are held. */
+export class EngineCapacityError extends Error {
+    constructor(max) {
+        super(`engine capacity reached (max=${max})`);
+        this.max = max;
+        this.name = 'EngineCapacityError';
+    }
+}
+/** The agent-facing capacity message, templated on the live cap. */
+export function capacityMessage(max) {
+    return [
+        `Design engine capacity reached — ${max} of ${max} CE.SDK engines are already running on this machine.`,
+        `This is a temporary, machine-wide limit that prevents parallel design sessions from exhausting memory. Your request was valid — nothing is wrong with your code or inputs, and no design was created. A slot frees automatically as soon as another session finishes or closes.`,
+        ``,
+        `What to do:`,
+        `- Retry the exact same call after a short wait — resending it unchanged will succeed once a slot is free.`,
+        `- Do not modify your design code in response to this; the code is not the problem.`,
+        `- If you are running several design tasks at once, run them one at a time instead of in parallel.`,
+        ``,
+        `(The human can raise the limit by setting IMGLY_MAX_STDIO_ENGINES higher and restarting. Current limit: ${max}.)`
+    ].join('\n');
+}
+/**
+ * Wrap a tool registration so a thrown EngineCapacityError becomes a clean MCP
+ * isError result (the capacity message) instead of propagating as a protocol
+ * error. Other errors pass through untouched. Applied to every tool at the stdio
+ * composition root; a no-op for tools that never touch the engine.
+ */
+export function wrapEngineCapacity(reg) {
+    return {
+        ...reg,
+        call: async (args) => {
+            try {
+                return await reg.call(args);
+            }
+            catch (err) {
+                if (err instanceof EngineCapacityError) {
+                    return {
+                        isError: true,
+                        content: [{ type: 'text', text: capacityMessage(err.max) }]
+                    };
+                }
+                throw err;
+            }
+        }
+    };
+}
+//# sourceMappingURL=engine-capacity.js.map

package/dist/engine/engine-capacity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-capacity.js","sourceRoot":"","sources":["../../src/engine/engine-capacity.ts"],"names":[],"mappings":"AAYA,6EAA6E;AAC7E,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAqB,GAAW;QAC9B,KAAK,CAAC,gCAAgC,GAAG,GAAG,CAAC,CAAC;QAD3B,QAAG,GAAH,GAAG,CAAQ;QAE9B,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,oEAAoE;AACpE,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO;QACL,oCAAoC,GAAG,OAAO,GAAG,sDAAsD;QACvG,iRAAiR;QACjR,EAAE;QACF,aAAa;QACb,2GAA2G;QAC3G,oFAAoF;QACpF,mGAAmG;QACnG,EAAE;QACF,2GAA2G,GAAG,IAAI;KACnH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAgC;IAEhC,OAAO;QACL,GAAG,GAAG;QACN,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnB,IAAI,CAAC;gBACH,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,mBAAmB,EAAE,CAAC;oBACvC,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;qBAC5D,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["// packages/codesign-mcp/src/engine/engine-capacity.ts\n//\n// The machine-wide engine cap (CODE-59) fails fast: when every slot is held, the\n// triggering tool call returns an MCP isError result carrying an agent-facing\n// message — NOT a thrown protocol error. This module owns that error type, the\n// message, and the wrapper that turns the throw into the result.\n//\n// The message is a deliberate design surface: it is read by an LLM, so it (a)\n// states the request/code is fine (stops the model rewriting its design), (b)\n// says it is retryable and how, (c) tells an orchestrator to reduce parallelism.\nimport type { CodesignMcpToolRegistration } from '../server.js';\n\n/** Thrown from the slot-gated engine boot when all engine slots are held. */\nexport class EngineCapacityError extends Error {\n  constructor(readonly max: number) {\n    super(`engine capacity reached (max=${max})`);\n    this.name = 'EngineCapacityError';\n  }\n}\n\n/** The agent-facing capacity message, templated on the live cap. */\nexport function capacityMessage(max: number): string {\n  return [\n    `Design engine capacity reached — ${max} of ${max} CE.SDK engines are already running on this machine.`,\n    `This is a temporary, machine-wide limit that prevents parallel design sessions from exhausting memory. Your request was valid — nothing is wrong with your code or inputs, and no design was created. A slot frees automatically as soon as another session finishes or closes.`,\n    ``,\n    `What to do:`,\n    `- Retry the exact same call after a short wait — resending it unchanged will succeed once a slot is free.`,\n    `- Do not modify your design code in response to this; the code is not the problem.`,\n    `- If you are running several design tasks at once, run them one at a time instead of in parallel.`,\n    ``,\n    `(The human can raise the limit by setting IMGLY_MAX_STDIO_ENGINES higher and restarting. Current limit: ${max}.)`\n  ].join('\\n');\n}\n\n/**\n * Wrap a tool registration so a thrown EngineCapacityError becomes a clean MCP\n * isError result (the capacity message) instead of propagating as a protocol\n * error. Other errors pass through untouched. Applied to every tool at the stdio\n * composition root; a no-op for tools that never touch the engine.\n */\nexport function wrapEngineCapacity(\n  reg: CodesignMcpToolRegistration\n): CodesignMcpToolRegistration {\n  return {\n    ...reg,\n    call: async (args) => {\n      try {\n        return await reg.call(args);\n      } catch (err) {\n        if (err instanceof EngineCapacityError) {\n          return {\n            isError: true,\n            content: [{ type: 'text', text: capacityMessage(err.max) }]\n          };\n        }\n        throw err;\n      }\n    }\n  };\n}\n"]}

package/dist/engine/engine-slots.d.ts

@@ -0,0 +1,48 @@
+export interface SlotHandle {
+    /** Which numbered slot (0-based) this handle owns. */
+    readonly index: number;
+    /** Release the slot (unlink its file). Idempotent; best-effort. */
+    release(): Promise<void>;
+}
+export interface AcquireEngineSlotOptions {
+    /** Max concurrent engines. The (max)th acquire succeeds; the (max+1)th returns null. */
+    max: number;
+    /** Slot directory. Defaults to ~/.codesign/engine-slots. Override in tests. */
+    dir?: string;
+    /** Liveness probe for a slot's owner PID. Defaults to a real kill(pid,0). Injectable for tests. */
+    isPidAlive?: (pid: number) => boolean;
+    /** This process's PID, recorded in the claimed slot. Defaults to process.pid. */
+    pid?: number;
+}
+/**
+ * True if a process with `pid` is alive. `kill(pid, 0)` sends no signal; it only
+ * probes. ESRCH => no such process (dead). EPERM (exists, another user) or any
+ * other error => assume alive (conservative — never steal a slot we're unsure of).
+ */
+export declare function isPidAlive(pid: number): boolean;
+/**
+ * Claim one of `max` numbered slots. Returns a handle for the first free (or
+ * reclaimable-stale) slot, or null when all `max` are held by live owners.
+ */
+export declare function acquireEngineSlot(opts: AcquireEngineSlotOptions): Promise<SlotHandle | null>;
+export interface SlotGatedEngine<E> {
+    /**
+     * Boot the engine on first call, gated by a machine-wide slot. Memoized: later
+     * calls return the same engine. Throws EngineCapacityError at capacity (the
+     * memo is NOT cached, so a later retry re-attempts). A boot FAILURE is cached
+     * (a hard init error must not churn slots on retry) and its slot is released.
+     */
+    get(): Promise<E>;
+    /** Release the held slot (for the clean-shutdown path). Idempotent. */
+    release(): Promise<void>;
+}
+export declare function createSlotGatedEngine<E>(opts: {
+    max: number;
+    boot: () => Promise<E>;
+    dir?: string;
+    acquire?: (o: {
+        max: number;
+        dir?: string;
+    }) => Promise<SlotHandle | null>;
+}): SlotGatedEngine<E>;
+//# sourceMappingURL=engine-slots.d.ts.map

package/dist/engine/engine-slots.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-slots.d.ts","sourceRoot":"","sources":["../../src/engine/engine-slots.ts"],"names":[],"mappings":"AA4CA,MAAM,WAAW,UAAU;IACzB,sDAAsD;IACtD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,wFAAwF;IACxF,GAAG,EAAE,MAAM,CAAC;IACZ,+EAA+E;IAC/E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,mGAAmG;IACnG,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IACtC,iFAAiF;IACjF,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAO/C;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAU5B;AA+ED,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC;;;;;OAKG;IACH,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC;IAClB,uEAAuE;IACvE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,IAAI,EAAE;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;CAC5E,GAAG,eAAe,CAAC,CAAC,CAAC,CAmCrB"}